OpenVPN Working, but not working. Please read, I need help

cdubea

Okay,

I've running OpenVPN on a Asus router loaded with DD-WRT Firmware v24-sp2 (08/12/10) mega.

I set this up a while back and it works fine connecting from Windows devices via wi-fi and Android devices (obviously with wi-fi). While connected I can surf the web, etc. Doing a "what's my ip" results in the ip address of my router.

The problem I'm now having is I'm trying to connect via an Ethernet internet connection. It connects, and I can access the control console of my router, but I have no internet connectivity.

Trying to connect to any website results in "Error 105 (net::ERR_NAME_NOT_RESOLVED): Unable to resolve the server's DNS address."

so, to begin, here is my OpenVPN config

port 1194
proto udp
dev tun
server 10.8.0.0 255.255.255.0
push "route 192.168.2.1 255.255.255.0"
push "redirect-gateway def1"
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
cipher AES-128-CBC
comp-lzo
max-clients 3
persist-key
persist-tun
verb 3
mute 20
management localhost 5001

Here is my Windows client config file:

client
dev tun
proto udp
remote mysite.dyndns.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert test.crt
key test.key
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 3
mute 10

Here is the status/log file it spits out:

Tue May 07 19:16:06 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue May 07 19:16:06 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue May 07 19:16:07 2013 LZO compression initialized
Tue May 07 19:16:07 2013 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 07 19:16:07 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue May 07 19:16:08 2013 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 07 19:16:08 2013 Local Options hash (VER=V4): '66096c33'
Tue May 07 19:16:08 2013 Expected Remote Options hash (VER=V4): '691e95c7'
Tue May 07 19:16:08 2013 UDPv4 link local: [undef]
Tue May 07 19:16:08 2013 UDPv4 link remote: xx.xx.xx.xx:1194
Tue May 07 19:16:09 2013 TLS: Initial packet from xx.xx.xx.xx:1194, sid=402b4791 d9c8c593
Tue May 07 19:16:16 2013 VERIFY OK: depth=1,
Tue May 07 19:16:16 2013 VERIFY OK: nsCertType=SERVER
Tue May 07 19:16:16 2013 VERIFY OK: depth=0,
Tue May 07 19:16:31 2013 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue May 07 19:16:31 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 07 19:16:31 2013 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue May 07 19:16:31 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 07 19:16:31 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 07 19:16:31 2013 [server] Peer Connection Initiated with xx.xx.xx.xx:1194
Tue May 07 19:16:33 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue May 07 19:16:34 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.1 255.255.255.0,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Tue May 07 19:16:34 2013 OPTIONS IMPORT: timers and/or timeouts modified
Tue May 07 19:16:34 2013 OPTIONS IMPORT: --ifconfig/up options modified
Tue May 07 19:16:34 2013 OPTIONS IMPORT: route options modified
Tue May 07 19:16:34 2013 ROUTE default_gateway=192.168.1.1
Tue May 07 19:16:34 2013 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{BB46047A-F3F0-4AA5-A026-5D2FA1766375}.tap
Tue May 07 19:16:34 2013 TAP-Win32 Driver Version 9.9
Tue May 07 19:16:34 2013 TAP-Win32 MTU=1500
Tue May 07 19:16:34 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {BB46047A-F3F0-4AA5-A026-5D2FA1766375} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Tue May 07 19:16:34 2013 Successful ARP Flush on interface [22] {BB46047A-F3F0-4AA5-A026-5D2FA1766375}
Tue May 07 19:16:39 2013 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Tue May 07 19:16:39 2013 C:\WINDOWS\system32\route.exe ADD 69.255.20.82 MASK 255.255.255.255 192.168.1.1
Tue May 07 19:16:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue May 07 19:16:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue May 07 19:16:39 2013 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Tue May 07 19:16:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue May 07 19:16:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue May 07 19:16:39 2013 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Tue May 07 19:16:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue May 07 19:16:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue May 07 19:16:39 2013 C:\WINDOWS\system32\route.exe ADD 192.168.2.1 MASK 255.255.255.0 10.8.0.5
Tue May 07 19:16:39 2013 Warning: address 192.168.2.1 is not a network address in relation to netmask 255.255.255.0
Tue May 07 19:16:39 2013 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect. [status=87 if_index=22]
Tue May 07 19:16:39 2013 Route addition via IPAPI failed [adaptive]
Tue May 07 19:16:39 2013 Route addition fallback to route.exe
The route addition failed: The parameter is incorrect.
Tue May 07 19:16:39 2013 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Tue May 07 19:16:39 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue May 07 19:16:39 2013 Route addition via IPAPI succeeded [adaptive]
Tue May 07 19:16:39 2013 Initialization Sequence Completed

This is the results from ipconfig before connecting:

Windows IP Configuration
Ethernet adapter Local Area Connection 3:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::910f:f508:a4f2:922f%11
IPv4 Address. . . . . . . . . . . : 192.168.1.84
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
Tunnel adapter isatap.{92FA8FD0-E218-4695-A932-4F2FF17E2EF5}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter Local Area Connection* 14:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter isatap.{BB46047A-F3F0-4AA5-A026-5D2FA1766375}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter isatap.{BAF2A5E7-E5BD-45B6-BB8A-B48E3E37F0C4}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:953c:2c01:1183:3f57:feab
Link-local IPv6 Address . . . . . : fe80::2c01:1183:3f57:feab%21
Default Gateway . . . . . . . . . : ::
The results after connecting

Windows IP Configuration
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::a999:bb0d:d51a:2969%22
IPv4 Address. . . . . . . . . . . : 10.8.0.6
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Default Gateway . . . . . . . . . :
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::910f:f508:a4f2:922f%11
IPv4 Address. . . . . . . . . . . : 192.168.1.84
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
Tunnel adapter isatap.{92FA8FD0-E218-4695-A932-4F2FF17E2EF5}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter Local Area Connection* 14:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter isatap.{BB46047A-F3F0-4AA5-A026-5D2FA1766375}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter isatap.{BAF2A5E7-E5BD-45B6-BB8A-B48E3E37F0C4}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Any hints as to where I've gone wrong?

Thanks

Chris

cdubea

More info

Route Print before connecting:

===========================================================================
Interface List
22...00 ff bb 46 04 7a ......TAP-Win32 Adapter V9
16...9e 2a 70 bf 80 a7 ......Broadcom Virtual Wireless Adapter
11...74 86 7a 01 ce 1d ......Realtek PCIe GBE Family Controller
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
14...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
21...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.84 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.84 276
192.168.1.84 255.255.255.255 On-link 192.168.1.84 276
192.168.1.255 255.255.255.255 On-link 192.168.1.84 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.84 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.84 276
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
21 58 ::/0 On-link
1 306 ::1/128 On-link
21 58 2001::/32 On-link
21 306 2001:0:9d38:6ab8:405:222:ac55:77fb/128
On-link
11 276 fe80::/64 On-link
21 306 fe80::/64 On-link
21 306 fe80::405:222:ac55:77fb/128
On-link
11 276 fe80::910f:f508:a4f2:922f/128
On-link
1 306 ff00::/8 On-link
21 306 ff00::/8 On-link
11 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None

route print after connecting:

===========================================================================
Interface List
22...00 ff bb 46 04 7a ......TAP-Win32 Adapter V9
16...9e 2a 70 bf 80 a7 ......Broadcom Virtual Wireless Adapter
11...74 86 7a 01 ce 1d ......Realtek PCIe GBE Family Controller
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
14...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
21...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.84 20
0.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 31
10.8.0.1 255.255.255.255 10.8.0.5 10.8.0.6 31
10.8.0.4 255.255.255.252 On-link 10.8.0.6 286
10.8.0.6 255.255.255.255 On-link 10.8.0.6 286
10.8.0.7 255.255.255.255 On-link 10.8.0.6 286
xx.xx.xx.xx 255.255.255.255 192.168.1.1 192.168.1.84 21
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
128.0.0.0 128.0.0.0 10.8.0.5 10.8.0.6 31
192.168.1.0 255.255.255.0 On-link 192.168.1.84 276
192.168.1.84 255.255.255.255 On-link 192.168.1.84 276
192.168.1.255 255.255.255.255 On-link 192.168.1.84 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.84 276
224.0.0.0 240.0.0.0 On-link 10.8.0.6 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.84 276
255.255.255.255 255.255.255.255 On-link 10.8.0.6 286
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
11 276 fe80::/64 On-link
22 286 fe80::/64 On-link
11 276 fe80::910f:f508:a4f2:922f/128
On-link
22 286 fe80::a999:bb0d:d51a:2969/128
On-link
1 306 ff00::/8 On-link
11 276 ff00::/8 On-link
22 286 ff00::/8 On-link
===========================================================================
Persistent Routes:
None

brendan

push "route 192.168.2.1 255.255.255.0"

should be push "route 192.168.2.1 255.255.255.255"

Tue May 07 19:16:39 2013 C:\WINDOWS\system32\route.exe ADD 192.168.2.1 MASK 255.255.255.0 10.8.0.5
Tue May 07 19:16:39 2013 Warning: address 192.168.2.1 is not a network address in relation to netmask 255.255.255.0
Tue May 07 19:16:39 2013 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect. [status=87 if_index=22]
Tue May 07 19:16:39 2013 Route addition via IPAPI failed [adaptive]
Tue May 07 19:16:39 2013 Route addition fallback to route.exe
The route addition failed: The parameter is incorrect.

this tells you the route add failed because, and the above correction should clear it.

read your logs... they tell you things...

cdubea

Okay,

In doing some spelunking, there where potential issues.

The client config is now:

client
dev tun
proto udp
remote mysite.dyndns.org 1194
resolv-retry infinite

ip-win32 dynamic
route-method exe
route-delay 2

nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert test.crt
key test.key
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 3
mute 10

based on the previous post, I changed the server config to:

port 1194
proto udp
dev tun
server 10.8.0.0 255.255.255.0
push "route 192.168.2.1 255.255.255.255"
push "redirect-gateway def1"
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
cipher AES-128-CBC
comp-lzo
max-clients 3
persist-key
persist-tun
verb 3
mute 20
management localhost 5001

Status now tells me:

Wed May 08 07:04:18 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed May 08 07:04:18 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 08 07:04:18 2013 LZO compression initialized
Wed May 08 07:04:18 2013 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 08 07:04:18 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 08 07:04:19 2013 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 08 07:04:19 2013 Local Options hash (VER=V4): '66096c33'
Wed May 08 07:04:19 2013 Expected Remote Options hash (VER=V4): '691e95c7'
Wed May 08 07:04:19 2013 UDPv4 link local: [undef]
Wed May 08 07:04:19 2013 UDPv4 link remote: xx.xx.xx.xx:1194
Wed May 08 07:04:20 2013 TLS: Initial packet from xx.xx.xx.xx:1194, sid=71ef0042 1aefffde
Wed May 08 07:04:26 2013 VERIFY OK: depth=1,
Wed May 08 07:04:26 2013 VERIFY OK: nsCertType=SERVER
Wed May 08 07:04:26 2013 VERIFY OK: depth=0,
Wed May 08 07:04:39 2013 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 08 07:04:39 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 08 07:04:39 2013 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 08 07:04:39 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 08 07:04:39 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed May 08 07:04:39 2013 [server] Peer Connection Initiated with 69.255.20.82:1194
Wed May 08 07:04:42 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed May 08 07:04:43 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.1 255.255.255.255,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Wed May 08 07:04:43 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 08 07:04:43 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 08 07:04:43 2013 OPTIONS IMPORT: route options modified
Wed May 08 07:04:43 2013 ROUTE default_gateway=192.168.1.1
Wed May 08 07:04:43 2013 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{BB46047A-F3F0-4AA5-A026-5D2FA1766375}.tap
Wed May 08 07:04:43 2013 TAP-Win32 Driver Version 9.9
Wed May 08 07:04:43 2013 TAP-Win32 MTU=1500
Wed May 08 07:04:43 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {BB46047A-F3F0-4AA5-A026-5D2FA1766375} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed May 08 07:04:43 2013 Successful ARP Flush on interface [22] {BB46047A-F3F0-4AA5-A026-5D2FA1766375}
Wed May 08 07:04:45 2013 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Wed May 08 07:04:45 2013 C:\WINDOWS\system32\route.exe ADD xx.xx.xx.xx MASK 255.255.255.255 192.168.1.1
OK!
Wed May 08 07:04:45 2013 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Wed May 08 07:04:45 2013 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Wed May 08 07:04:45 2013 C:\WINDOWS\system32\route.exe ADD 192.168.2.1 MASK 255.255.255.255 10.8.0.5
OK!
Wed May 08 07:04:45 2013 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
OK!
Wed May 08 07:04:45 2013 Initialization Sequence Completed

Now I'm even worse. I cannot access my router console nor ping my router while connected. And no internet access.

Suggestions?

cdubea

Okay,

changing the "push route 192.168.2.1 255.255.255.255" back to "push route 192.168.2.1 255.255.255.0"
I can now connect to my router console and ping my local router address. No internet connectivity though.

I get have the following status:

Wed May 08 07:27:10 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed May 08 07:27:10 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 08 07:27:10 2013 LZO compression initialized
Wed May 08 07:27:10 2013 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 08 07:27:10 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 08 07:27:11 2013 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 08 07:27:11 2013 Local Options hash (VER=V4): '66096c33'
Wed May 08 07:27:11 2013 Expected Remote Options hash (VER=V4): '691e95c7'
Wed May 08 07:27:11 2013 UDPv4 link local: [undef]
Wed May 08 07:27:11 2013 UDPv4 link remote: xx.xx.xx.xx:1194
Wed May 08 07:27:12 2013 TLS: Initial packet from xx.xx.xx.xx:1194, sid=b6e9e534 7a105757
Wed May 08 07:27:19 2013 VERIFY OK: depth=1,
Wed May 08 07:27:19 2013 VERIFY OK: nsCertType=SERVER
Wed May 08 07:27:19 2013 VERIFY OK: depth=0,
Wed May 08 07:27:30 2013 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 08 07:27:30 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 08 07:27:30 2013 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 08 07:27:30 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 08 07:27:30 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed May 08 07:27:30 2013 [server] Peer Connection Initiated with 69.255.20.82:1194
Wed May 08 07:27:32 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed May 08 07:27:38 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed May 08 07:27:39 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.1 255.255.255.0,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Wed May 08 07:27:39 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 08 07:27:39 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 08 07:27:39 2013 OPTIONS IMPORT: route options modified
Wed May 08 07:27:39 2013 ROUTE default_gateway=192.168.1.1
Wed May 08 07:27:39 2013 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{BB46047A-F3F0-4AA5-A026-5D2FA1766375}.tap
Wed May 08 07:27:39 2013 TAP-Win32 Driver Version 9.9
Wed May 08 07:27:39 2013 TAP-Win32 MTU=1500
Wed May 08 07:27:39 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {BB46047A-F3F0-4AA5-A026-5D2FA1766375} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed May 08 07:27:39 2013 Successful ARP Flush on interface [22] {BB46047A-F3F0-4AA5-A026-5D2FA1766375}
Wed May 08 07:27:41 2013 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Wed May 08 07:27:41 2013 C:\WINDOWS\system32\route.exe ADD xx.xx.xx.xx MASK 255.255.255.255 192.168.1.1
OK!
Wed May 08 07:27:41 2013 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Wed May 08 07:27:41 2013 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Wed May 08 07:27:41 2013 C:\WINDOWS\system32\route.exe ADD 192.168.2.1 MASK 255.255.255.0 10.8.0.5
The route addition failed: The parameter is incorrect.
Wed May 08 07:27:41 2013 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
OK!
Wed May 08 07:27:41 2013 Initialization Sequence Completed

As can be seen, the route failure is back.

chris

cdubea

As I expected it was a Windows issue:

This thread has the solution from someone called bebop

https://forums.openvpn.net/topic7343.html

Checking the Tap virtual Ethernet found it's IP address hardcoded. Changing it to obtain an address automatically solved the problem.

Thanks for the help!