Hi
I am trying to set up openvpn using an asus rtn66u as server with Tomato Firmware 1.28.0000 MIPSR2-115 K26AC USB AIO-64K. The connection is green but I am not able to ping server & lan pc from the openvpn client
My goal is obtain access to whole network connected to the router from an openvpn clien and whole client network from the server (for both server and client lan I have the same ip & subnetmask with no ip conflicts).
LAN IP 192.168.1.X, router that is openvpn server 192.168.1.1.
I am configuring the server using router GUI as
Start with WAN yes
Interface Type TAP
Protocol TCP
Port 1194
Firewall AUTOMATIC
Authorization Mode TLS
Extra HMAC authorization (tls-auth) Disable
Client address pool DHCP - from 192.168.1.221 to 192.168.1.225
Poll Interval 0 (in minutes, 0 to disable)
Direct clients to
redirect Internet traffic NO
Respond to DNS yes
Advertise DNS to clients yes
TLS Renegotiation Time -1 (in seconds, -1 for default)
Allow Client<->Client yes
The client is able to connect the server (either in TAP & TUN mode) but I am not able to ping the server or other device include in the lan server side
client
ns-cert-type server
dev tap
proto tcp
remote xxxxxxx.dyndns.org 1194
resolv-retry infinite
persist-key
persist-tun
ca ca.crt
cert client2.crt
key client2.key
verb 3
log
Sun Jan 05 17:57:56 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sun Jan 05 17:57:56 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Jan 05 17:57:57 2014 Control Channel MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Jan 05 17:57:57 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Jan 05 17:57:57 2014 Data Channel MTU parms [ L:1575 D:1450 EF:43 EB:4 ET:32 EL:0 ]
Sun Jan 05 17:57:57 2014 Local Options hash (VER=V4): '10f35004'
Sun Jan 05 17:57:57 2014 Expected Remote Options hash (VER=V4): 'a917298a'
Sun Jan 05 17:57:57 2014 Attempting to establish TCP connection with xxxxx5.56:1194
Sun Jan 05 17:57:57 2014 TCP connection established with xx.xx.5.56:1194
Sun Jan 05 17:57:57 2014 TCPv4_CLIENT link local: [undef]
Sun Jan 05 17:57:57 2014 TCPv4_CLIENT link remote: xx.xx.xx.56:1194
Sun Jan 05 17:57:57 2014 TLS: Initial packet from xxxxx.56:1194, sid=a80640da 4304961a
Sun Jan 05 17:58:00 2014 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=
me@myhost.mydomain
Sun Jan 05 17:58:00 2014 VERIFY OK: nsCertType=SERVER
Sun Jan 05 17:58:00 2014 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=
me@myhost.mydomain
Sun Jan 05 17:58:05 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 05 17:58:05 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jan 05 17:58:05 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 05 17:58:05 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jan 05 17:58:05 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Jan 05 17:58:05 2014 [server] Peer Connection Initiated with xxxx5.56:1194
Sun Jan 05 17:58:07 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Jan 05 17:58:08 2014 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.1.1,route-gateway 192.168.1.1,ping 15,ping-restart 60,ifconfig 192.168.1.221 255.255.255.0'
Sun Jan 05 17:58:08 2014 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jan 05 17:58:08 2014 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jan 05 17:58:08 2014 OPTIONS IMPORT: route-related options modified
Sun Jan 05 17:58:08 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jan 05 17:58:08 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{7FC35887-EA2C-4D27-BD90-862098BE4F0E}.tap
Sun Jan 05 17:58:08 2014 TAP-Win32 Driver Version 9.9
Sun Jan 05 17:58:08 2014 TAP-Win32 MTU=1500
Sun Jan 05 17:58:08 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.1.221/255.255.255.0 on interface {7FC35887-EA2C-4D27-BD90-862098BE4F0E} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Sun Jan 05 17:58:08 2014 Successful ARP Flush on interface [24] {7FC35887-EA2C-4D27-BD90-862098BE4F0E}
Sun Jan 05 17:58:13 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up
Sun Jan 05 17:58:13 2014 Initialization Sequence Completed
&&& AS CONCERN TUN MODE LOG
Sun Jan 05 18:06:28 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sun Jan 05 18:06:28 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Jan 05 18:06:28 2014 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Jan 05 18:06:28 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Jan 05 18:06:29 2014 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Sun Jan 05 18:06:29 2014 Local Options hash (VER=V4): 'db02a8f8'
Sun Jan 05 18:06:29 2014 Expected Remote Options hash (VER=V4): '7e068940'
Sun Jan 05 18:06:29 2014 Attempting to establish TCP connection with xx.xx.5.56:1194
Sun Jan 05 18:06:30 2014 TCP connection established with xx.xx.5.56:1194
Sun Jan 05 18:06:30 2014 TCPv4_CLIENT link local: [undef]
Sun Jan 05 18:06:30 2014 TCPv4_CLIENT link remote: xx.xx.5.56:1194
Sun Jan 05 18:06:30 2014 TLS: Initial packet from xx.xx.5.56:1194, sid=83425e0e b21dc26c
Sun Jan 05 18:06:33 2014 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=
me@myhost.mydomain
Sun Jan 05 18:06:33 2014 VERIFY OK: nsCertType=SERVER
Sun Jan 05 18:06:33 2014 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/emailAddress=
me@myhost.mydomain
Sun Jan 05 18:06:41 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 05 18:06:41 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jan 05 18:06:41 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 05 18:06:41 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jan 05 18:06:41 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Jan 05 18:06:41 2014 [server] Peer Connection Initiated with xx.xx.5.56:1194
Sun Jan 05 18:06:43 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Jan 05 18:06:44 2014 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,dhcp-option DNS 192.168.1.1,route 10.8.0.0 255.255.255.0,topology net30,ping 15,ping-restart 60,ifconfig 10.8.0.6 10.8.0.5'
Sun Jan 05 18:06:44 2014 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jan 05 18:06:44 2014 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jan 05 18:06:44 2014 OPTIONS IMPORT: route options modified
Sun Jan 05 18:06:44 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jan 05 18:06:44 2014 ROUTE default_gateway=192.168.43.1
Sun Jan 05 18:06:44 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{7FC35887-EA2C-4D27-BD90-862098BE4F0E}.tap
Sun Jan 05 18:06:44 2014 TAP-Win32 Driver Version 9.9
Sun Jan 05 18:06:44 2014 TAP-Win32 MTU=1500
Sun Jan 05 18:06:44 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {7FC35887-EA2C-4D27-BD90-862098BE4F0E} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sun Jan 05 18:06:44 2014 Successful ARP Flush on interface [24] {7FC35887-EA2C-4D27-BD90-862098BE4F0E}
Sun Jan 05 18:06:49 2014 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Sun Jan 05 18:06:49 2014 C:\WINDOWS\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 10.8.0.5
Sun Jan 05 18:06:49 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sun Jan 05 18:06:49 2014 Route addition via IPAPI succeeded [adaptive]
Sun Jan 05 18:06:49 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Sun Jan 05 18:06:49 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sun Jan 05 18:06:49 2014 Route addition via IPAPI succeeded [adaptive]
Sun Jan 05 18:06:49 2014 Initialization Sequence Completed
Sun Jan 05 18:07:13 2014 write to TUN/TAP [State=AT?c Err=[c:\users\samuli\openvpn-build\openvpn-cron2\tap-win32\tapdrvr.c/2474] #O=3 Tx=[1715,0] Rx=[1684,2] IrpQ=[1,1,16] PktQ=[0,64,64] InjQ=[0,1,16]]: Area dati passata ad una chiamata al sistema troppo piccola. (code=122)
Sun Jan 05 18:07:28 2014 write to TUN/TAP [State=AT?c Err=[c:\users\samuli\openvpn-build\openvpn-cron2\tap-win32\tapdrvr.c/2474] #O=3 Tx=[1741,0] Rx=[1684,3] IrpQ=[1,1,16] PktQ=[0,64,64] InjQ=[0,1,16]]: Area dati passata ad una chiamata al sistema troppo piccola. (code=122)
