Hello,
I installed the server on my Raspberry.
I installed a client on my iphone.
With the iphone, when openvpn run I can ping machine on my local network.
I installed an other client with another keys in my laptop.
In the log, all appears correct but I can't ping any machine in my local network.
I can't go to internet when the open vpn client run.
If I ping the vpn adress 10.8.0.6 it's ok.
I try to disable avast antivirus and firewall but nothing more...
find the client log bellow:
Sat Jun 15 21:05:58 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jun 3 2013
Enter Management Password:
Sat Jun 15 21:05:58 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Sat Jun 15 21:05:58 2013 Need hold release from management interface, waiting...
Sat Jun 15 21:05:58 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Sat Jun 15 21:05:58 2013 MANAGEMENT: CMD 'state on'
Sat Jun 15 21:05:58 2013 MANAGEMENT: CMD 'log all on'
Sat Jun 15 21:05:58 2013 MANAGEMENT: CMD 'hold off'
Sat Jun 15 21:05:58 2013 MANAGEMENT: CMD 'hold release'
Sat Jun 15 21:05:58 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Jun 15 21:05:58 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Jun 15 21:05:58 2013 UDPv4 link local: [undef]
Sat Jun 15 21:05:58 2013 UDPv4 link remote: [AF_INET]81.28.206.197:1194
Sat Jun 15 21:05:58 2013 MANAGEMENT: >STATE:1371326758,WAIT,,,
Sat Jun 15 21:05:59 2013 MANAGEMENT: >STATE:1371326759,AUTH,,,
Sat Jun 15 21:05:59 2013 TLS: Initial packet from [AF_INET]81.28.206.197:1194, sid=a2d1c64d 02b2d8d8
Sat Jun 15 21:05:59 2013 VERIFY OK: depth=1, C=FR, ST=AIN, L=Prevessin, O=toto, OU=changeme, CN=Vorms, name=Vorms, emailAddress=
vormsty@gmail.com
Sat Jun 15 21:05:59 2013 VERIFY OK: depth=0, C=FR, ST=AIN, L=Prevessin, O=toto, OU=changeme, CN=Vorms, name=Vorms, emailAddress=
vormsty@gmail.com
Sat Jun 15 21:06:00 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Jun 15 21:06:00 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 15 21:06:00 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Jun 15 21:06:00 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 15 21:06:00 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Jun 15 21:06:00 2013 [Vorms] Peer Connection Initiated with [AF_INET]81.28.206.197:1194
Sat Jun 15 21:06:01 2013 MANAGEMENT: >STATE:1371326761,GET_CONFIG,,,
Sat Jun 15 21:06:02 2013 SENT CONTROL [Vorms]: 'PUSH_REQUEST' (status=1)
Sat Jun 15 21:06:07 2013 SENT CONTROL [Vorms]: 'PUSH_REQUEST' (status=1)
Sat Jun 15 21:06:07 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,redirect-gateway local def1,route 10.8.0.0 255.255.255.0,topology net30,ifconfig 10.8.0.6 10.8.0.5'
Sat Jun 15 21:06:07 2013 OPTIONS IMPORT: --ifconfig/up options modified
Sat Jun 15 21:06:07 2013 OPTIONS IMPORT: route options modified
Sat Jun 15 21:06:07 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Jun 15 21:06:07 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Jun 15 21:06:07 2013 MANAGEMENT: >STATE:1371326767,ASSIGN_IP,,10.8.0.6,
Sat Jun 15 21:06:07 2013 open_tun, tt->ipv6=0
Sat Jun 15 21:06:07 2013 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{E54947A9-4F1B-4909-A15C-DC9FFE4F8007}.tap
Sat Jun 15 21:06:07 2013 TAP-Windows Driver Version 9.9
Sat Jun 15 21:06:07 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {E54947A9-4F1B-4909-A15C-DC9FFE4F8007} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat Jun 15 21:06:07 2013 Successful ARP Flush on interface [16] {E54947A9-4F1B-4909-A15C-DC9FFE4F8007}
Sat Jun 15 21:06:09 2013 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Sat Jun 15 21:06:09 2013 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jun 15 21:06:09 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Jun 15 21:06:09 2013 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jun 15 21:06:09 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Jun 15 21:06:09 2013 MANAGEMENT: >STATE:1371326769,ADD_ROUTES,,,
Sat Jun 15 21:06:09 2013 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Sat Jun 15 21:06:09 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Jun 15 21:06:09 2013 Initialization Sequence Completed
Sat Jun 15 21:06:09 2013 MANAGEMENT: >STATE:1371326769,CONNECTED,SUCCESS,10.8.0.6,81.28.206.197
Sat Jun 15 21:08:07 2013 [Vorms] Inactivity timeout (--ping-restart), restarting
Sat Jun 15 21:08:07 2013 SIGUSR1[soft,ping-restart] received, process restarting
Sat Jun 15 21:08:07 2013 MANAGEMENT: >STATE:1371326887,RECONNECTING,ping-restart,,
Sat Jun 15 21:08:07 2013 Restart pause, 2 second(s)
Sat Jun 15 21:08:09 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Jun 15 21:08:09 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Jun 15 21:08:09 2013 UDPv4 link local: [undef]
Sat Jun 15 21:08:09 2013 UDPv4 link remote: [AF_INET]81.28.206.197:1194
Sat Jun 15 21:08:09 2013 MANAGEMENT: >STATE:1371326889,WAIT,,,
Sat Jun 15 21:09:09 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Jun 15 21:09:09 2013 TLS Error: TLS handshake failed
Sat Jun 15 21:09:09 2013 SIGUSR1[soft,tls-error] received, process restarting
Sat Jun 15 21:09:09 2013 MANAGEMENT: >STATE:1371326949,RECONNECTING,tls-error,,
Sat Jun 15 21:09:09 2013 Restart pause, 2 second(s)
Sat Jun 15 21:09:11 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Jun 15 21:09:11 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Jun 15 21:09:11 2013 UDPv4 link local: [undef]
Sat Jun 15 21:09:11 2013 UDPv4 link remote: [AF_INET]81.28.206.197:1194
Sat Jun 15 21:09:11 2013 MANAGEMENT: >STATE:1371326951,WAIT,,,
Sat Jun 15 21:10:12 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Jun 15 21:10:12 2013 TLS Error: TLS handshake failed
Sat Jun 15 21:10:12 2013 SIGUSR1[soft,tls-error] received, process restarting
Sat Jun 15 21:10:12 2013 MANAGEMENT: >STATE:1371327012,RECONNECTING,tls-error,,
Sat Jun 15 21:10:12 2013 Restart pause, 2 second(s)
Sat Jun 15 21:10:14 2013 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Sat Jun 15 21:10:14 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Jun 15 21:10:14 2013 UDPv4 link local: [undef]
Sat Jun 15 21:10:14 2013 UDPv4 link remote: [AF_INET]81.28.206.197:1194
Sat Jun 15 21:10:14 2013 MANAGEMENT: >STATE:1371327014,WAIT,,,
Sat Jun 15 21:10:15 2013 C:\Windows\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Sat Jun 15 21:10:15 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Jun 15 21:10:15 2013 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jun 15 21:10:15 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Jun 15 21:10:15 2013 C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Sat Jun 15 21:10:15 2013 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Jun 15 21:10:16 2013 Closing TUN/TAP interface
Sat Jun 15 21:10:16 2013 SIGTERM[hard,] received, process exiting
Sat Jun 15 21:10:16 2013 MANAGEMENT: >STATE:1371327016,EXITING,SIGTERM,,
and the client config file:
dev tun
client
proto udp
remote 81.28.206.197 1194
redirect-gateway
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
comp-lzo
verb 3
route-method exe
route-delay 2
Many thanks for your help !
Best regards
Thierry Vorms
