Can not connect to OpenVPN server from outside address

cbr954rr

First off, let me say I am very new to setting up an OpenVPN server. I don't quite understand the iptables lingo yet, but I am sure with a little guidance, I can fully grasp how this all works.

I have gotten a PPTP server up and running quite easily but I want the security that OpenVPN can provide so that is why I am trying to setup an OpenVPN server.

I have been searching and reading as many posts as I can find that pertain to my situation but I still can’t seem to make a connection from an outside address to the OpenVPN server.

A detailed setup follows below and this is a brief reason for why I have the setup the way it is. I run a setup with multiple routers because my son connects to the first router and the rest of my devices connect to the second router. Since this setup does not allow any device connected to the first router to see anything connected to the second router, I feel it is a safer setup as my son is known for picking up viruses on occasion. It also affords me the option to allow guests to connect to this router without seeing any of the other devices in the house. (Am I a fool to assume that this setup is keeping my main machines safer from my sons activities?)

So, with the above in mind, here is my current setup and what I am trying to accomplish:

Cable Modem connects to DIR615 (running DD-WRT) WAN port (this router currently has PPTP server running and I can connect from outside address with no apparent issues). DIR615 is running DHCP with gateway address of 192.168.9.1.

WNDR3700v1 running native firmware is connected to DIR615 by way of DIR615 LAN port to WNDR3700 WAN port. This router acts as my main router and all devices, both wired and wireless connect to this router. WNDR3700 is also running DHCP with gateway address of 192.168.10.1 and is assigned a static IP from DIR615 of 192.168.9.10.

WNDR3800 running DD-WRT is what I am trying to get the OpenVPN server running on and for now, I am connecting it to the DIR615 by way of DIR615 LAN port to WNDR3800 WAN port. WNDR3800 is also running DHCP and has gateway address of 192.168.5.1 with static IP from DIR615 of 192.168.9.11.

I have DDNS setup by way of dyn.com in the DIR615 for adjusting for dynamic WAN IP from ISP.

I have gone into the NAT/QoS – Port Forwarding menu of the DIR615 and made the following entries;
Application___Protocol___Source Net__Port from__IP Address_____Port to
PPTP________Both______blank______1723 _____192.168.9.1____1723 (this is for PPTP server)
OpenVPN____Both______blank______1194______192.168.9.11___1194 (this is for OpenVPN server)

In the NAT/QoS – Port Forwarding menu of the WNDR3800 I have made the following entry;
Application____Protocol__Source Net___Port from____IP Address____Port to
OpenVPN_____Both_____blank________1194_______192.168.5.1____1194

On the WNDR3800, I have gone to the Services – VPN menu and set the following settings for OpenVPN Server;
OpenVPN is set at Enable
Start Type is set at WAN Up
Config as is set as Server
Server Mode is set as Router (TUN)
Network is set as 10.8.0.0
Netmask is set as 255.255.255.0
Port is set as 1194
Tunnel Protocol is set as UDP
Encryption Cipher is set as Blowfish CBC
Hash Algorithm is set as SHA1
Advanced Options is set as Disable but if I click on Enable, these are the options and their settings;
TLS Cipher is set to none
LZO Compression is set to adapative
Redirect default Gateway is set to Disable
Allow Client to Client is set to Enable
Allow duplicate cn is set to Disable
Tunnel MTU setting is set to 1400 (default)
Tunnel UDP Fragment is blank
Tunnel UPD MSS-Fix is set to Disable
CCd-Dir DEFAULT file is blank
Client connect script is blank
Static Key is blank
PKCS12 Key is blank

CA Cert has info copied from CA Certificate
Public Server Cert has info copied from Server Certificate
Private Server Key has info copied from Server Key
DH PEM has info copied from dh1024.pem file
TLS Auth Key is blank
Certificate Revoke List is blank

I created my CA, Server, Client and DH keys (appears to have been successful) using OpenVPN v2.3.2 on a PC running Windows 7 Pro x64.

In the Security-VPN Passthrough menu, the following are set;
IPSec Passthrough Enabled on both routers
PPTP Passthrough Enabled on both routers
L2TP Passthrough Enabled on both routers

On the Administration-Commands menu of the WNDR3800 (OpenVPN server) router, the following have been added;

Startup Commands
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up

Firewall Commands
iptables -A INPUT -i tap0 -j ACCEPT
iptables -I INPUT -p udp --dport 1194 -j ACCEPT

I have also tried removing the Startup Commands and changing the Firewall Commands to;
iptables -I INPUT 1 -p udp –dport 1194 -j ACCEPT
iptables -I FORWARD 1 –source 192.168.5.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

The above Startup and Firewall commands are from a guide I was following. Since I don’t yet understand the iptables command options, I am relying on input from experienced users for this information.

When the WNDR3800 is booted up with all the above settings, the Status-OpenVPN menu displays the following info;

State
Server: CONNECTED: SUCCESS Local Address: 10.8.0.1 Remote Address: 10.8.0.1 Client: : Local Address: Remote Address:

Status
Thu Sep 12 10:16:51
2013

Common Name Real Address Virtual Address Bytes Received Bytes Sent Connected Since Connected Since (time_t)

--------------------------------------------------------------------------------

Virtual Address Common Name Real Address Last Ref
Max bcast/mcast queue length

Now is where my problems lie. I put together a profile for my iphone and that seems to have installed correctly on the phone. When I try and connect, it shows bytes going out of the phone but 0 bytes coming in and eventually times out.

As a test, I took my laptop which I had made a profile for and tried connecting to the OpenVPN server from within the network, already being connected to the WNDR3800 via wifi, and according to the OpenVPN GUI, a successful connection was made and I was assigned an IP in the 10.8.0.x range and this seemed to be verified in the Status-OpenVPN menu of the router as well.

Current config file for iPhone is as follows:

client
dev tun
;dev-node MyTap
proto udp
remote xxx.xxx.xxx.xxx 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
key-direction 1
ns-cert-type server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 6
;mute 20

I don’t know how to supply a config for the server as all settings were set through the DD-WRT GUI and are listed above.

Here is a log from the WNDR3800 as gathered from the Status-OpenVPN menu.

Serverlog 20130928 15:13:18 I OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 24 2013
20130928 15:13:18 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
20130928 15:13:18 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20130928 15:13:18 Diffie-Hellman initialized with 1024 bit key
20130928 15:13:18 W WARNING: normally if you use --mssfix and/or --fragment you should also set --tun-mtu 1500 (currently it is 1400)
20130928 15:13:18 Socket Buffers: R=[163840->131072] S=[163840->131072]
20130928 15:13:18 I TUN/TAP device tun2 opened
20130928 15:13:18 TUN/TAP TX queue length set to 100
20130928 15:13:18 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20130928 15:13:18 I /sbin/ifconfig tun2 10.8.0.1 netmask 255.255.255.0 mtu 1400 broadcast 10.8.0.255
20130928 15:13:20 I UDPv4 link local (bound): [undef]
20130928 15:13:20 I UDPv4 link remote: [undef]
20130928 15:13:20 MULTI: multi_init called r=256 v=256
20130928 15:13:20 IFCONFIG POOL: base=10.8.0.2 size=252 ipv6=0
20130928 15:13:20 IFCONFIG POOL LIST
20130928 15:13:20 I Initialization Sequence Completed
20130928 15:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130928 15:14:37 D MANAGEMENT: CMD 'state'
20130928 15:14:37 MANAGEMENT: Client disconnected
20130928 15:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130928 15:14:37 D MANAGEMENT: CMD 'state'
20130928 15:14:37 MANAGEMENT: Client disconnected
20130928 15:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130928 15:14:37 D MANAGEMENT: CMD 'state'
20130928 15:14:37 MANAGEMENT: Client disconnected
20130928 15:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130928 15:14:37 D MANAGEMENT: CMD 'status 2'
20130928 15:14:37 MANAGEMENT: Client disconnected
20130928 15:14:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130928 15:14:37 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
Clientlog
Help

Here is a log from the iPhone. I don’t know how to set the verb 6 setting in the router unless there is a place to put extra commands like there is to add the keys and certificates.

2013-10-01 10:24:34 ----- OpenVPN Start -----
2013-10-01 10:24:34 LZO-ASYM init swap=0 asym=0
2013-10-01 10:24:34 EVENT: RESOLVE
2013-10-01 10:24:34 Contacting xxx.xxx.xxx.xxx:1194 via UDP
2013-10-01 10:24:34 EVENT: WAIT
2013-10-01 10:24:34 Connecting to xxx.xxx.xxx.xxx:1194 (xxx.xxx.xxx.xxx) via UDPv4
2013-10-01 10:24:44 Server poll timeout, trying next remote entry...
2013-10-01 10:24:44 EVENT: RECONNECTING
2013-10-01 10:24:44 LZO-ASYM init swap=0 asym=0
2013-10-01 10:24:44 EVENT: RESOLVE
2013-10-01 10:24:44 Contacting xxx.xxx.xxx.xxx:1194 via UDP
2013-10-01 10:24:44 EVENT: WAIT
2013-10-01 10:24:44 Connecting to xxx.xxx.xxx.xxx:1194 (xxx.xxx.xxx.xxx) via UDPv4
2013-10-01 10:24:54 Server poll timeout, trying next remote entry...
2013-10-01 10:24:54 EVENT: RECONNECTING
2013-10-01 10:24:54 LZO-ASYM init swap=0 asym=0
2013-10-01 10:24:54 EVENT: RESOLVE
2013-10-01 10:24:54 Contacting xxx.xxx.xxx.xxx:1194 via UDP
2013-10-01 10:24:54 EVENT: WAIT
2013-10-01 10:24:54 Connecting to xxx.xxx.xxx.xxx:1194 (xxx.xxx.xxx.xxx) via UDPv4
2013-10-01 10:25:04 Server poll timeout, trying next remote entry...
2013-10-01 10:25:04 EVENT: RECONNECTING
2013-10-01 10:25:04 LZO-ASYM init swap=0 asym=0
2013-10-01 10:25:04 EVENT: RESOLVE
2013-10-01 10:25:04 Contacting xxx.xxx.xxx.xxx:1194 via UDP
2013-10-01 10:25:04 EVENT: WAIT
2013-10-01 10:25:04 Connecting to xxx.xxx.xxx.xxx:1194 (xxx.xxx.xxx.xxx) via UDPv4
2013-10-01 10:25:06 EVENT: DISCONNECTED
2013-10-01 10:25:06 Raw stats on disconnect:
BYTES_OUT : 224
PACKETS_OUT : 16
N_RECONNECT : 3
2013-10-01 10:25:06 Performance stats on disconnect:
CPU usage (microseconds): 35271
Network bytes per CPU second: 6350
Tunnel bytes per CPU second: 0
2013-10-01 10:25:06 ----- OpenVPN Stop -----

So, with all the supplied info, can someone tell me where my error is? I assume it is within the startup and/or firewall commands but since I don’t know anything about what these commands do, I am at a loss for what to change them to or try differently. I had gotten these from a tutorial I was following for setting up the OpenVPN server.

I figure once I can get this working correctly, I will remove the DIR615 and put the WNDR3800 in its place but until I get it working correctly, I don’t want to mess with the working setup.

Any and all help is greatly appreciated.

- Dan

cbr954rr

Debs,

First off, let me apologize for not following the rules of the forum. Was definitely not intentional.

Secondly, thank you for the direction you have given me. I will start with your suggestion about getting a simple server/client vpn setup and running and then start to build from there.

Thanks again for taking the time to break down sections of my original post and give explanation to them.

Much appreciated.

- Dan

cbr954rr

Ok, so here is where I am at so far.

I have finally been able to make a connection with my cell phone and surf the web but am not sure if these changes are the most efficient or if there are different commands I should be using instead.

In order to get my cell phone to connect, I had to make the following changes in the firewall script as I noticed when the OpenVPN server was up and running, it was referencing tun2.

iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
to
iptables -I FORWARD -i br0 -o tun2 -j ACCEPT
iptables -I FORWARD -i tun2 -o br0 -j ACCEPT

This change allowed the cell phone to connect almost instantly but I could not surf the web on my cell phone.

Weird thing at this point, even though this allows me to connect to the OpenVPN server with my cell phone, if I do a port scan on port 1194, it shows the port as closed. I would have assumed with the OpenVPN server running on port 1194, doing a scan of this port would have shown it open as my port 1723 shows for the PPTP server.

Some more digging had me make the following changes;

The following change to the firewall script (I think I needed this-did not test without using this command):

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE <--10.8.0.0 is the VPN server IP

and the following to the Additional Config box:

push "route 192.168.5.0 255.255.255.0" <---this is the LAN IP of my OpenVPN router
push "dhcp-option DNS xx.xx.xx.xx"
push "dhcp-option DNS xx.xx.xx.xx"
where the x's are the DNS of what is currently supplied by the ISP that my OpenVPN router is connected to.

So, I will now do some more digging to see if this is the best or most appropriate way of setting the OpenVPN up or if there are different commands I should be using.

As a recap, here is the Firewall script commands I am currently using:
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 10.8.0.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun2 -j ACCEPT
iptables -I FORWARD -i tun2 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE

Here are the Additional Config commands:
push "route 192.168.5.0 255.255.255.0"
push "dhcp-option DNS xx.xx.xx.xx"
push "dhcp-option DNS xx.xx.xx.xx"

I am sure I need to tweek the client config file so that things like MTU, cipher, Hash alogrithm, encryption cipher, etc are all matching the server setup but at least I am to the point of connecting and surfing.

Any suggestions as to whether or not the current commands are correct or should be different would be greatly appreciated.

- Dan

cbr954rr

Here are the current configs and logs;

Firewall commands

iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 10.8.0.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun2 -j ACCEPT
iptables -I FORWARD -i tun2 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING - s 10.8.0.0/24 -j MASQUERADE

Server Config as set through DD-WRT GUI
OpenVPN - Enable
Start Type - WAN Up
Config as - Server
Server Mode - Router (TUN)
Network - 10.8.0.0
Netmask - 255.255.255.0
Port - 1194
Tunnel Protocol - UDP
Encryption Cipher - Blowfish CBC
Hash Algorithm - SHA1
Advanced Options - Enable
TLS Cipher - None
LZO Compression - Adaptive
Redirect Default Gateway - Enable
Allow Client to Client - Enable
Allow duplicate cn - Enable
Tunnel MTU Setting - 1500
Tunnel UDP Fragment -
Tunnel UDP MSS-Fix - Disable
CCD-Dir DEFAULT file -
Client Connect Script -
Static Key -
PKCS12 Key -
Additional Config - push “route 192.168.5.0 255.255.255.0”
push “dhcp-option DNS xx.xx.xx.xx” as given by ISP OpenVPN router is connected to
push “dhcp-option DNS xx.xx.xx.xx” as given by ISP OpenVPN router is connected to
Public Server Cert - info copied from Server Certificate
CA Cert - info copied from CA Certificate
Private Server Key - info copied from Server Key
DH PEM - info copied from dh1024.pem file
TLS Auth Key -
Certificate Revoke List -

Client Config
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote xx.xx.xx.xx 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
key-direction 1
ns-cert-type server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 4
;mute 20

Log from successful connection on iPhone
2013-10-08 07:35:52 ----- OpenVPN Start -----
2013-10-08 07:35:52 LZO-ASYM init swap=0 asym=0
2013-10-08 07:35:52 EVENT: RESOLVE
2013-10-08 07:35:53 Contacting xx.xx.xx.xx:1194 via UDP
2013-10-08 07:35:53 EVENT: WAIT
2013-10-08 07:35:53 Connecting to xx.xx.xx.xx:1194 (xx.xx.xx.xx) via UDPv4
2013-10-08 07:35:53 EVENT: CONNECTING
2013-10-08 07:35:53 Tunnel Options:V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2013-10-08 07:35:53 Peer Info:
IV_VER=1.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2013-10-08 07:35:54 VERIFY OK: depth=0
cert. version : 3
serial number : 01
issuer name : C=xx, ST=xx, L=xx, O=Private, OU=changeme, CN=CA, 0x29=changeme, emailAddress=xx@xx.com
subject name : C=xx, ST=xx, L=xx, O=Private, OU=changeme, CN=Server, 0x29=changeme, emailAddress=xx@xx.com
issued on : 2013-09-11 15:33:10
expires on : 2023-09-09 15:33:10
signed using : RSA+MD5
RSA key size : 1024 bits

2013-10-08 07:35:54 VERIFY OK: depth=1
cert. version : 3
serial number : xx:xx:xx:xx:xx:xx:xx:xx
issuer name : C=xx, ST=xx, L=xx, O=Private, OU=changeme, CN=CA, 0x29=changeme, emailAddress=xx@xx.com
subject name : C=xx, ST=xx, L=xx, O=Private, OU=changeme, CN=CA, 0x29=changeme, emailAddress=xx@xx.com
issued on : 2013-09-11 15:31:02
expires on : 2023-09-09 15:31:02
signed using : RSA+SHA1
RSA key size : 1024 bits

2013-10-08 07:35:54 SSL Handshake: TLSv1.0/SSL-EDH-RSA-AES-256-SHA
2013-10-08 07:35:54 Session is ACTIVE
2013-10-08 07:35:55 EVENT: GET_CONFIG
2013-10-08 07:35:55 Sending PUSH_REQUEST to server...
2013-10-08 07:35:55 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.5.0] [255.255.255.0]
2 [dhcp-option] [DNS] [xx.xx.xx.xx]
3 [dhcp-option] [DNS] [xx.xx.xx.xx]
4 [route-gateway] [10.8.0.1]
5 [topology] [subnet]
6 [ping] [10]
7 [ping-restart] [120]
8 [ifconfig] [10.8.0.2] [255.255.255.0]

2013-10-08 07:35:55 LZO-ASYM init swap=0 asym=0
2013-10-08 07:35:55 EVENT: ASSIGN_IP
2013-10-08 07:35:55 Connected via tun
2013-10-08 07:35:55 EVENT: CONNECTED @xx.xx.xx.xx:1194 (xx.xx.xx.xx) via /UDPv4 on tun/10.8.0.2/
2013-10-08 07:38:20 EVENT: DISCONNECTED
2013-10-08 07:38:20 Raw stats on disconnect:
BYTES_IN : 918729
BYTES_OUT : 113855
PACKETS_IN : 811
PACKETS_OUT : 700
TUN_BYTES_IN : 87327
TUN_BYTES_OUT : 890395
TUN_PACKETS_IN : 645
TUN_PACKETS_OUT : 761
2013-10-08 07:38:20 Performance stats on disconnect:
CPU usage (microseconds): 429127
Tunnel compression ratio (uplink): 1.30378
Tunnel compression ratio (downlink): 1.03182
Network bytes per CPU second: 2406243
Tunnel bytes per CPU second: 2278397
2013-10-08 07:38:20 ----- OpenVPN Stop -----

Log from Status window of OpenVPN in DD-WRT
Serverlog 20131008 07:26:37 I OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 24 2013
20131008 07:26:37 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
20131008 07:26:37 W WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
20131008 07:26:37 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20131008 07:26:38 Diffie-Hellman initialized with 1024 bit key
20131008 07:26:38 Socket Buffers: R=[163840->131072] S=[163840->131072]
20131008 07:26:38 I TUN/TAP device tun2 opened
20131008 07:26:38 TUN/TAP TX queue length set to 100
20131008 07:26:38 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20131008 07:26:38 I /sbin/ifconfig tun2 10.8.0.1 netmask 255.255.255.0 mtu 1500 broadcast 10.8.0.255
20131008 07:26:39 I UDPv4 link local (bound): [undef]
20131008 07:26:39 I UDPv4 link remote: [undef]
20131008 07:26:39 MULTI: multi_init called r=256 v=256
20131008 07:26:39 IFCONFIG POOL: base=10.8.0.2 size=252 ipv6=0
20131008 07:26:39 I Initialization Sequence Completed
20131008 07:33:54 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:33:54 D MANAGEMENT: CMD 'state'
20131008 07:33:54 MANAGEMENT: Client disconnected
20131008 07:33:54 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:33:54 D MANAGEMENT: CMD 'state'
20131008 07:33:54 MANAGEMENT: Client disconnected
20131008 07:33:54 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:33:54 D MANAGEMENT: CMD 'state'
20131008 07:33:54 MANAGEMENT: Client disconnected
20131008 07:33:54 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:33:54 D MANAGEMENT: CMD 'status 2'
20131008 07:33:54 MANAGEMENT: Client disconnected
20131008 07:33:54 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:33:54 D MANAGEMENT: CMD 'log 500'
20131008 07:33:54 MANAGEMENT: Client disconnected
20131008 07:35:53 xx.xx.xx.xx:1257 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1257 sid=fefda953 e373f6cd
20131008 07:35:54 xx.xx.xx.xx:1257 VERIFY OK: depth=1 C=xx ST=xx L=xx O=Private OU=changeme CN=CA name=changeme emailAddress=xx@xx.com
20131008 07:35:54 xx.xx.xx.xx:1257 VERIFY OK: depth=0 C=xx ST=xx L=xx O=Private OU=changeme CN=DaniPhone5 name=changeme emailAddress=xx@xx.com
20131008 07:35:54 W xx.xx.xx.xx:1257 WARNING: 'keydir' is present in remote config but missing in local config remote='keydir 1'
20131008 07:35:54 xx.xx.xx.xx:1257 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
20131008 07:35:54 xx.xx.xx.xx:1257 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
20131008 07:35:54 xx.xx.xx.xx:1257 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
20131008 07:35:54 xx.xx.xx.xx:1257 NOTE: --mute triggered...
20131008 07:35:54 xx.xx.xx.xx:1257 2 variation(s) on previous 3 message(s) suppressed by --mute
20131008 07:35:54 I x.xx.xx.xx:1257 [DaniPhone5] Peer Connection Initiated with [AF_INET]x.xx.xx.xx:1257
20131008 07:35:54 I DaniPhone5/xx.xx.xx.xx:1257 MULTI_sva: pool returned IPv4=10.8.0.2 IPv6=(Not enabled)
20131008 07:35:54 DaniPhone5/xx.xx.xx.xx:1257 MULTI: Learn: 10.8.0.2 -> DaniPhone5/xx.xx.xx.xx:1257
20131008 07:35:54 DaniPhone5/xx.xx.xx.xx:1257 MULTI: primary virtual IP for DaniPhone5/x.xx.xx.xx:1257: 10.8.0.2
20131008 07:35:55 DaniPhone5/xx.xx.xx.xx:1257 PUSH: Received control message: 'PUSH_REQUEST'
20131008 07:35:55 I DaniPhone5/xx.xx.xx.xx:1257 send_push_reply(): safe_cap=940
20131008 07:35:55 DaniPhone5/xx.xx.xx.xx:1257 SENT CONTROL [DaniPhone5]: 'PUSH_REPLY redirect-gateway def1 route 192.168.5.0 255.255.255.0 dhcp-option DNS xx.xx.xx.xx dhcp-option DNS xx.xx.xx.xx route-gateway 10.8.0.1 topology subnet ping 10 ping-restart 120 ifconfig 10.8.0.2 255.255.255.0' (status=1)
20131008 07:36:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:36:05 D MANAGEMENT: CMD 'state'
20131008 07:36:05 MANAGEMENT: Client disconnected
20131008 07:36:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:36:05 D MANAGEMENT: CMD 'state'
20131008 07:36:05 MANAGEMENT: Client disconnected
20131008 07:36:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:36:05 D MANAGEMENT: CMD 'state'
20131008 07:36:05 MANAGEMENT: Client disconnected
20131008 07:36:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:36:05 D MANAGEMENT: CMD 'status 2'
20131008 07:36:05 MANAGEMENT: Client disconnected
20131008 07:36:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20131008 07:36:05 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
Clientlog

If there is anything else I should be supplying, please let me know and possibly where to find it.

Thanks.

- Dan