OpenVPN Connected But can't ping server or client

ludolugo

i have installed openvpn on a win2003 server. This is a DC, AD, RRAS, and DCHP server. the client is another win 2003 server with the same services. the client successfully connects and gets the ip 10.8.0.x, but the ping to the server or ftom the server to the client doesn´t respond.

i have read i think 1553 forums and tried everything (firewall, client etc) but no luck.

server configuration:

local 10.10.1.1
port 1194
proto udp
dev tun

ca ca.crt
cert server.crt
key server.key
dh dh1024.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "route 10.10.1.0 255.255.255.0"

keepalive 10 120

client-to-client
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

client configuration


client

dev tun


proto udp

remote xxx.xxx.xxx.xxx 1194 # (public ip)



nobind


persist-key
persist-tun

ca ca.crt
cert clientCP.crt
key clientCP.key

ns-cert-type server
comp-lzo

# Set log file verbosity.
verb 3

thanks guys

janjust

your setup looks nice and simple and clean.
Can you ping the server VPN IP (10.8.0.1) ? or is it server LAN IP (10.10.1.1) that you cannot reach.

Which "zone" are the tap-win32 adapters in? public or private?

ludolugo

janjust wroteyour setup looks nice and simple and clean.
Can you ping the server VPN IP (10.8.0.1) ? or is it server LAN IP (10.10.1.1) that you cannot reach.

Which "zone" are the tap-win32 adapters in? public or private?

hi, thanks for your reply...

i can´t ping any of the ip´s on the server, from the server i can´t ping the client either and the client has an ip in the range (10.8.0.4).

i´m not sure what zone is the adapter, i mean, where can i see it in win 2003 server? because i know in win 2008 server you can change it but in 2003 server i have never seen it.

thanks again

janjust

increase the logging level

verb 5

on the client side and reconnect; the client should NOT get an IP of 10.8.04 (but .6 instead, normally).

Also, I'm not sure if Win2003 has the concept of zones like Vista en 2008, but it is something that often causes problems with OpenVPN.

ludolugo

yes the client gets the ip 10.8.0.6, my mistake.

this is the log:

Mon May 20 09:21:32 2013 us=874000 Current Parameter Settings:
Mon May 20 09:21:32 2013 us=874000 config = 'client2.ovpn'
Mon May 20 09:21:32 2013 us=874000 mode = 0
Mon May 20 09:21:32 2013 us=874000 show_ciphers = DISABLED
Mon May 20 09:21:32 2013 us=874000 show_digests = DISABLED
Mon May 20 09:21:32 2013 us=874000 show_engines = DISABLED
Mon May 20 09:21:32 2013 us=874000 genkey = DISABLED
Mon May 20 09:21:32 2013 us=874000 key_pass_file = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 show_tls_ciphers = DISABLED
Mon May 20 09:21:32 2013 us=874000 Connection profiles [default]:
Mon May 20 09:21:32 2013 us=874000 proto = udp
Mon May 20 09:21:32 2013 us=874000 local = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 local_port = 0
Mon May 20 09:21:32 2013 us=874000 remote = 'xxx.xxx.xxx.xxx'
Mon May 20 09:21:32 2013 us=874000 remote_port = 1194
Mon May 20 09:21:32 2013 us=874000 remote_float = DISABLED
Mon May 20 09:21:32 2013 us=874000 bind_defined = DISABLED
Mon May 20 09:21:32 2013 us=874000 bind_local = DISABLED
Mon May 20 09:21:32 2013 us=874000 connect_retry_seconds = 5
Mon May 20 09:21:32 2013 us=874000 connect_timeout = 10
Mon May 20 09:21:32 2013 us=874000 connect_retry_max = 0
Mon May 20 09:21:32 2013 us=874000 socks_proxy_server = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 socks_proxy_port = 0
Mon May 20 09:21:32 2013 us=874000 socks_proxy_retry = DISABLED
Mon May 20 09:21:32 2013 us=874000 Connection profiles END
Mon May 20 09:21:32 2013 us=874000 remote_random = DISABLED
Mon May 20 09:21:32 2013 us=874000 ipchange = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 dev = 'tun'
Mon May 20 09:21:32 2013 us=874000 dev_type = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 dev_node = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 lladdr = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 topology = 1
Mon May 20 09:21:32 2013 us=874000 tun_ipv6 = DISABLED
Mon May 20 09:21:32 2013 us=874000 ifconfig_local = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 ifconfig_remote_netmask = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 ifconfig_noexec = DISABLED
Mon May 20 09:21:32 2013 us=874000 ifconfig_nowarn = DISABLED
Mon May 20 09:21:32 2013 us=874000 shaper = 0
Mon May 20 09:21:32 2013 us=874000 tun_mtu = 1500
Mon May 20 09:21:32 2013 us=874000 tun_mtu_defined = ENABLED
Mon May 20 09:21:32 2013 us=874000 link_mtu = 1500
Mon May 20 09:21:32 2013 us=874000 link_mtu_defined = DISABLED
Mon May 20 09:21:32 2013 us=874000 tun_mtu_extra = 0
Mon May 20 09:21:32 2013 us=874000 tun_mtu_extra_defined = DISABLED
Mon May 20 09:21:32 2013 us=874000 fragment = 0
Mon May 20 09:21:32 2013 us=874000 mtu_discover_type = -1
Mon May 20 09:21:32 2013 us=874000 mtu_test = 0
Mon May 20 09:21:32 2013 us=874000 mlock = DISABLED
Mon May 20 09:21:32 2013 us=874000 keepalive_ping = 0
Mon May 20 09:21:32 2013 us=874000 keepalive_timeout = 0
Mon May 20 09:21:32 2013 us=874000 inactivity_timeout = 0
Mon May 20 09:21:32 2013 us=874000 ping_send_timeout = 0
Mon May 20 09:21:32 2013 us=874000 ping_rec_timeout = 0
Mon May 20 09:21:32 2013 us=874000 ping_rec_timeout_action = 0
Mon May 20 09:21:32 2013 us=874000 ping_timer_remote = DISABLED
Mon May 20 09:21:32 2013 us=874000 remap_sigusr1 = 0
Mon May 20 09:21:32 2013 us=874000 explicit_exit_notification = 0
Mon May 20 09:21:32 2013 us=874000 persist_tun = ENABLED
Mon May 20 09:21:32 2013 us=874000 persist_local_ip = DISABLED
Mon May 20 09:21:32 2013 us=874000 persist_remote_ip = DISABLED
Mon May 20 09:21:32 2013 us=874000 persist_key = ENABLED
Mon May 20 09:21:32 2013 us=874000 mssfix = 1450
Mon May 20 09:21:32 2013 us=874000 resolve_retry_seconds = 1000000000
Mon May 20 09:21:32 2013 us=874000 username = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 groupname = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 chroot_dir = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 cd_dir = '[UNDEF]'
Mon May 20 09:21:32 2013 us=874000 writepid = '[UNDEF]'
Mon May 20 09:21:33 2013 us=108000 up_script = '[UNDEF]'
Mon May 20 09:21:33 2013 us=108000 down_script = '[UNDEF]'
Mon May 20 09:21:33 2013 us=108000 down_pre = DISABLED
Mon May 20 09:21:33 2013 us=108000 up_restart = DISABLED
Mon May 20 09:21:33 2013 us=108000 up_delay = DISABLED
Mon May 20 09:21:33 2013 us=108000 daemon = DISABLED
Mon May 20 09:21:33 2013 us=108000 inetd = 0
Mon May 20 09:21:33 2013 us=108000 log = DISABLED
Mon May 20 09:21:33 2013 us=108000 suppress_timestamps = DISABLED
Mon May 20 09:21:33 2013 us=108000 nice = 0
Mon May 20 09:21:33 2013 us=108000 verbosity = 5
Mon May 20 09:21:33 2013 us=108000 mute = 0
Mon May 20 09:21:33 2013 us=108000 gremlin = 0
Mon May 20 09:21:33 2013 us=108000 status_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=108000 status_file_version = 1
Mon May 20 09:21:33 2013 us=108000 status_file_update_freq = 60
Mon May 20 09:21:33 2013 us=108000 occ = ENABLED
Mon May 20 09:21:33 2013 us=108000 rcvbuf = 0
Mon May 20 09:21:33 2013 us=108000 sndbuf = 0
Mon May 20 09:21:33 2013 us=123000 sockflags = 0
Mon May 20 09:21:33 2013 us=123000 fast_io = DISABLED
Mon May 20 09:21:33 2013 us=123000 lzo = 7
Mon May 20 09:21:33 2013 us=123000 route_script = '[UNDEF]'
Mon May 20 09:21:33 2013 us=123000 route_default_gateway = '[UNDEF]'
Mon May 20 09:21:33 2013 us=123000 route_default_metric = 0
Mon May 20 09:21:33 2013 us=123000 route_noexec = DISABLED
Mon May 20 09:21:33 2013 us=123000 route_delay = 5
Mon May 20 09:21:33 2013 us=123000 route_delay_window = 30
Mon May 20 09:21:33 2013 us=123000 route_delay_defined = ENABLED
Mon May 20 09:21:33 2013 us=123000 route_nopull = DISABLED
Mon May 20 09:21:33 2013 us=123000 route_gateway_via_dhcp = DISABLED
Mon May 20 09:21:33 2013 us=123000 max_routes = 100
Mon May 20 09:21:33 2013 us=123000 allow_pull_fqdn = DISABLED
Mon May 20 09:21:33 2013 us=123000 management_addr = '[UNDEF]'
Mon May 20 09:21:33 2013 us=123000 management_port = 0
Mon May 20 09:21:33 2013 us=155000 management_user_pass = '[UNDEF]'
Mon May 20 09:21:33 2013 us=155000 management_log_history_cache = 250
Mon May 20 09:21:33 2013 us=155000 management_echo_buffer_size = 100
Mon May 20 09:21:33 2013 us=155000 management_write_peer_info_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=155000 management_client_user = '[UNDEF]'
Mon May 20 09:21:33 2013 us=155000 management_client_group = '[UNDEF]'
Mon May 20 09:21:33 2013 us=155000 management_flags = 0
Mon May 20 09:21:33 2013 us=155000 shared_secret_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=155000 key_direction = 0
Mon May 20 09:21:33 2013 us=155000 ciphername_defined = ENABLED
Mon May 20 09:21:33 2013 us=155000 ciphername = 'BF-CBC'
Mon May 20 09:21:33 2013 us=155000 authname_defined = ENABLED
Mon May 20 09:21:33 2013 us=155000 authname = 'SHA1'
Mon May 20 09:21:33 2013 us=155000 prng_hash = 'SHA1'
Mon May 20 09:21:33 2013 us=155000 prng_nonce_secret_len = 16
Mon May 20 09:21:33 2013 us=155000 keysize = 0
Mon May 20 09:21:33 2013 us=201000 engine = DISABLED
Mon May 20 09:21:33 2013 us=201000 replay = ENABLED
Mon May 20 09:21:33 2013 us=201000 mute_replay_warnings = DISABLED
Mon May 20 09:21:33 2013 us=201000 replay_window = 64
Mon May 20 09:21:33 2013 us=201000 replay_time = 15
Mon May 20 09:21:33 2013 us=201000 packet_id_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=201000 use_iv = ENABLED
Mon May 20 09:21:33 2013 us=201000 test_crypto = DISABLED
Mon May 20 09:21:33 2013 us=201000 tls_server = DISABLED
Mon May 20 09:21:33 2013 us=201000 tls_client = ENABLED
Mon May 20 09:21:33 2013 us=201000 key_method = 2
Mon May 20 09:21:33 2013 us=201000 ca_file = 'ca.crt'
Mon May 20 09:21:33 2013 us=201000 ca_path = '[UNDEF]'
Mon May 20 09:21:33 2013 us=201000 dh_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=201000 cert_file = 'clientCP.crt'
Mon May 20 09:21:33 2013 us=201000 priv_key_file = 'clientCP.key'
Mon May 20 09:21:33 2013 us=201000 pkcs12_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=233000 cryptoapi_cert = '[UNDEF]'
Mon May 20 09:21:33 2013 us=233000 cipher_list = '[UNDEF]'
Mon May 20 09:21:33 2013 us=233000 tls_verify = '[UNDEF]'
Mon May 20 09:21:33 2013 us=233000 tls_export_cert = '[UNDEF]'
Mon May 20 09:21:33 2013 us=233000 tls_remote = '[UNDEF]'
Mon May 20 09:21:33 2013 us=233000 crl_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=233000 ns_cert_type = 64
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=233000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_ku = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_ku[i] = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_ku[i] = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_ku[i] = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_ku[i] = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_ku[i] = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_ku[i] = 0
Mon May 20 09:21:33 2013 us=264000 remote_cert_eku = '[UNDEF]'
Mon May 20 09:21:33 2013 us=264000 tls_timeout = 2
Mon May 20 09:21:33 2013 us=264000 renegotiate_bytes = 0
Mon May 20 09:21:33 2013 us=264000 renegotiate_packets = 0
Mon May 20 09:21:33 2013 us=264000 renegotiate_seconds = 3600
Mon May 20 09:21:33 2013 us=264000 handshake_window = 60
Mon May 20 09:21:33 2013 us=264000 transition_window = 3600
Mon May 20 09:21:33 2013 us=264000 single_session = DISABLED
Mon May 20 09:21:33 2013 us=264000 push_peer_info = DISABLED
Mon May 20 09:21:33 2013 us=264000 tls_exit = DISABLED
Mon May 20 09:21:33 2013 us=295000 tls_auth_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=295000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=326000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=326000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=326000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=326000 pkcs11_protected_authentication = DISABLED
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=326000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=373000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=373000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=373000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=373000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=373000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=373000 pkcs11_private_mode = 00000000
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=373000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_cert_private = DISABLED
Mon May 20 09:21:33 2013 us=389000 pkcs11_pin_cache_period = -1
Mon May 20 09:21:33 2013 us=389000 pkcs11_id = '[UNDEF]'
Mon May 20 09:21:33 2013 us=389000 pkcs11_id_management = DISABLED
Mon May 20 09:21:33 2013 us=389000 server_network = 0.0.0.0
Mon May 20 09:21:33 2013 us=389000 server_netmask = 0.0.0.0
Mon May 20 09:21:33 2013 us=389000 server_bridge_ip = 0.0.0.0
Mon May 20 09:21:33 2013 us=389000 server_bridge_netmask = 0.0.0.0
Mon May 20 09:21:33 2013 us=420000 server_bridge_pool_start = 0.0.0.0
Mon May 20 09:21:33 2013 us=420000 server_bridge_pool_end = 0.0.0.0
Mon May 20 09:21:33 2013 us=420000 ifconfig_pool_defined = DISABLED
Mon May 20 09:21:33 2013 us=420000 ifconfig_pool_start = 0.0.0.0
Mon May 20 09:21:33 2013 us=420000 ifconfig_pool_end = 0.0.0.0
Mon May 20 09:21:33 2013 us=420000 ifconfig_pool_netmask = 0.0.0.0
Mon May 20 09:21:33 2013 us=420000 ifconfig_pool_persist_filename = '[UNDEF]'
Mon May 20 09:21:33 2013 us=420000 ifconfig_pool_persist_refresh_freq = 600
Mon May 20 09:21:33 2013 us=420000 n_bcast_buf = 256
Mon May 20 09:21:33 2013 us=420000 tcp_queue_limit = 64
Mon May 20 09:21:33 2013 us=420000 real_hash_size = 256
Mon May 20 09:21:33 2013 us=420000 virtual_hash_size = 256
Mon May 20 09:21:33 2013 us=420000 client_connect_script = '[UNDEF]'
Mon May 20 09:21:33 2013 us=420000 learn_address_script = '[UNDEF]'
Mon May 20 09:21:33 2013 us=451000 client_disconnect_script = '[UNDEF]'
Mon May 20 09:21:33 2013 us=451000 client_config_dir = '[UNDEF]'
Mon May 20 09:21:33 2013 us=451000 ccd_exclusive = DISABLED
Mon May 20 09:21:33 2013 us=451000 tmp_dir = 'C:\Users\ludo\AppData\Local\Temp\'
Mon May 20 09:21:33 2013 us=451000 push_ifconfig_defined = DISABLED
Mon May 20 09:21:33 2013 us=451000 push_ifconfig_local = 0.0.0.0
Mon May 20 09:21:33 2013 us=451000 push_ifconfig_remote_netmask = 0.0.0.0
Mon May 20 09:21:33 2013 us=451000 enable_c2c = DISABLED
Mon May 20 09:21:33 2013 us=451000 duplicate_cn = DISABLED
Mon May 20 09:21:33 2013 us=451000 cf_max = 0
Mon May 20 09:21:33 2013 us=451000 cf_per = 0
Mon May 20 09:21:33 2013 us=451000 max_clients = 1024
Mon May 20 09:21:33 2013 us=451000 max_routes_per_client = 256
Mon May 20 09:21:33 2013 us=451000 auth_user_pass_verify_script = '[UNDEF]'
Mon May 20 09:21:33 2013 us=451000 auth_user_pass_verify_script_via_file = DISABLED
Mon May 20 09:21:33 2013 us=467000 ssl_flags = 0
Mon May 20 09:21:33 2013 us=467000 client = ENABLED
Mon May 20 09:21:33 2013 us=467000 pull = ENABLED
Mon May 20 09:21:33 2013 us=467000 auth_user_pass_file = '[UNDEF]'
Mon May 20 09:21:33 2013 us=467000 show_net_up = DISABLED
Mon May 20 09:21:33 2013 us=467000 route_method = 0
Mon May 20 09:21:33 2013 us=467000 ip_win32_defined = DISABLED
Mon May 20 09:21:33 2013 us=467000 ip_win32_type = 3
Mon May 20 09:21:33 2013 us=467000 dhcp_masq_offset = 0
Mon May 20 09:21:33 2013 us=467000 dhcp_lease_time = 31536000
Mon May 20 09:21:33 2013 us=467000 tap_sleep = 0
Mon May 20 09:21:33 2013 us=467000 dhcp_options = DISABLED
Mon May 20 09:21:33 2013 us=467000 dhcp_renew = DISABLED
Mon May 20 09:21:33 2013 us=467000 dhcp_pre_release = DISABLED
Mon May 20 09:21:33 2013 us=467000 dhcp_release = DISABLED
Mon May 20 09:21:33 2013 us=467000 domain = '[UNDEF]'
Mon May 20 09:21:33 2013 us=482000 netbios_scope = '[UNDEF]'
Mon May 20 09:21:33 2013 us=482000 netbios_node_type = 0
Mon May 20 09:21:33 2013 us=482000 disable_nbt = DISABLED
Mon May 20 09:21:33 2013 us=482000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Mon May 20 09:21:33 2013 us=482000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon May 20 09:21:33 2013 us=857000 LZO compression initialized
Mon May 20 09:21:33 2013 us=857000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon May 20 09:21:33 2013 us=857000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon May 20 09:21:33 2013 us=857000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon May 20 09:21:33 2013 us=857000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon May 20 09:21:33 2013 us=857000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon May 20 09:21:33 2013 us=857000 Local Options hash (VER=V4): '41690919'
Mon May 20 09:21:33 2013 us=857000 Expected Remote Options hash (VER=V4): '530fdded'
Mon May 20 09:21:33 2013 us=857000 UDPv4 link local: [undef]
Mon May 20 09:21:33 2013 us=857000 UDPv4 link remote: xxx.xxx.xxx.xxx:1194
Mon May 20 09:21:34 2013 us=44000 TLS: Initial packet from xxx.xxx.xxx.xxx:1194, sid=a275b9bf be0f123d
Mon May 20 09:21:58 2013 us=598000 VERIFY OK: depth=1, /C=VE/ST=ZU/L=MQ/O=Multivision/OU=IT/CN=VEMQS-DC01/name=VEMQS-DC01/emailAddress=helpdesk@multivision.com.ve
Mon May 20 09:21:58 2013 us=598000 VERIFY OK: nsCertType=SERVER
Mon May 20 09:21:58 2013 us=598000 VERIFY OK: depth=0, /C=VE/ST=ZU/L=MQ/O=Multivision/OU=IT/CN=VEMQS-DC01/name=VEMQS-DC01/emailAddress=helpdesk@multivision.com.ve
Mon May 20 09:22:27 2013 us=927000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 20 09:22:27 2013 us=927000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 20 09:22:27 2013 us=927000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 20 09:22:27 2013 us=927000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 20 09:22:27 2013 us=927000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon May 20 09:22:27 2013 us=927000 [VEMQS-DC01] Peer Connection Initiated with xxx.xxx.xxx.xxx:1194
Mon May 20 09:22:30 2013 us=126000 SENT CONTROL [VEMQS-DC01]: 'PUSH_REQUEST' (status=1)
Mon May 20 09:22:36 2013 us=39000 SENT CONTROL [VEMQS-DC01]: 'PUSH_REQUEST' (status=1)
Mon May 20 09:22:36 2013 us=179000 PUSH: Received control message: 'PUSH_REPLY,route 10.10.1.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mon May 20 09:22:36 2013 us=179000 OPTIONS IMPORT: timers and/or timeouts modified
Mon May 20 09:22:36 2013 us=179000 OPTIONS IMPORT: --ifconfig/up options modified
Mon May 20 09:22:36 2013 us=179000 OPTIONS IMPORT: route options modified
Mon May 20 09:22:36 2013 us=210000 ROUTE default_gateway=10.10.10.1
Mon May 20 09:22:36 2013 us=241000 TAP-WIN32 device [Conexi??n de ??rea local 3] opened: \\.\Global\{797CFB7D-E613-4ED4-A369-8F685EB02CF9}.tap
Mon May 20 09:22:36 2013 us=241000 TAP-Win32 Driver Version 9.9
Mon May 20 09:22:36 2013 us=241000 TAP-Win32 MTU=1500
Mon May 20 09:22:36 2013 us=241000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {797CFB7D-E613-4ED4-A369-8F685EB02CF9} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon May 20 09:22:36 2013 us=241000 Successful ARP Flush on interface [23] {797CFB7D-E613-4ED4-A369-8F685EB02CF9}
Mon May 20 09:22:41 2013 us=795000 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Mon May 20 09:22:41 2013 us=811000 C:\WINDOWS\system32\route.exe ADD 10.10.1.0 MASK 255.255.255.0 10.8.0.5
Mon May 20 09:22:41 2013 us=811000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon May 20 09:22:41 2013 us=811000 Route addition via IPAPI succeeded [adaptive]
Mon May 20 09:22:41 2013 us=826000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Mon May 20 09:22:41 2013 us=826000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon May 20 09:22:41 2013 us=826000 Route addition via IPAPI succeeded [adaptive]
Mon May 20 09:22:41 2013 us=826000 Initialization Sequence Completed

janjust

the client got IP address 10.8.0.6 which is normal and everything looks OK.
if the client cannot ping the server @ 10.8.0.1 or vice versa then there's some firewall blocking traffic....

ludolugo

there is no firewall installed on the server. the connection is from modem dsl to nic on the server and the RRAS does the natting and doesn't have the basic security service enabled. the firewall service is disabled.

thanks again.

janjust

could you disable RRAS for debugging purposes? might be a NATting issue.

ludolugo

Well finally server and clients can ping each other. The solutions was creating a static route in the RRAS of each wind 2003 server (openvpn clients) with the segement ip of the openvpn server (10.10.1.0).

now i want all PC´s in my lan to see the segment of the server (10.10.1.0) and 10.8.0.0. how can i do that?

thanks for your time and pacience.

janjust

that's a Windows routing question , of which I know very little. The MS webpages should be able to help you out though.

ludolugo

ok thanks we can close this thread as solutioned