Hi, i have a CentOS 6.5 with openvpn 2.3.2, and all my client windows cant redirect connection with redirect-gateway, i dont know what to do now, here is my configuration:
Server Configuration:
dev tap
daemon
port 1194
persist-tun
persist-key
verb 3
log-append /var/log/openvpn.log
status /var/log/openvpn-status.log
client-to-client
tls-server
tls-auth auth.key
mode server
duplicate-cn
dh keys/dh1024.pem
ca keys/ca.crt
cert keys/Firewall.crt
key keys/Firewall.key
server-bridge 10.50.3.1 255.255.255.0 10.50.3.10 10.50.3.31
push "redirect-gateway def1"
push "dhcp-option DNS 10.50.2.6"
script-security 3 system
up "/etc/openvpn/start.sh"
down "/etc/openvpn/stop.sh"
Client Configuration:
dev tap
client
tls-client
tls-auth auth.key
ns-cert-type server
persist-key
persist-tun
nobind
pull
redirect-gateway def1
remote XXX.XXX.XXX.XXX
script-security 3
verb 3
ca ca.crt
cert Postos.crt
key Postos.key
Log on Windows Machine's:
Wed Jan 15 19:31:09 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Wed Jan 15 19:31:09 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Jan 15 19:31:09 2014 Need hold release from management interface, waiting...
Wed Jan 15 19:31:09 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'state on'
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'log all on'
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'hold off'
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'hold release'
Wed Jan 15 19:31:09 2014 Control Channel Authentication: using 'auth.key' as a OpenVPN static key file
Wed Jan 15 19:31:09 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:09 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:09 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Jan 15 19:31:09 2014 UDPv4 link local: [undef]
Wed Jan 15 19:31:09 2014 UDPv4 link remote: [AF_INET]XXX.XXX.XXX.XXX:1194
Wed Jan 15 19:31:09 2014 MANAGEMENT: >STATE:1389821469,WAIT,,,
Wed Jan 15 19:31:09 2014 MANAGEMENT: >STATE:1389821469,AUTH,,,
Wed Jan 15 19:31:09 2014 TLS: Initial packet from [AF_INET]XXX.XXX.XXX.XXX:1194, sid=238217ef 3400d9f7
Wed Jan 15 19:31:10 2014 VERIFY OK: depth=1, C=BR, ST=Goias, L=Goiania, O=XXX, OU=TI, CN=XXX, name=Test, emailAddress=
test@test.com
Wed Jan 15 19:31:10 2014 VERIFY OK: nsCertType=SERVER
Wed Jan 15 19:31:10 2014 VERIFY OK: depth=0, C=BR, ST=Goias, L=Goiania, O=XXX, OU=TI, CN=Firewall, name=Test, emailAddress=
test@test.com
Wed Jan 15 19:31:10 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 15 19:31:10 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:10 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 15 19:31:10 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:10 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 15 19:31:10 2014 [Firewall] Peer Connection Initiated with [AF_INET]XXX.XXX.XXX.XXX:1194
Wed Jan 15 19:31:11 2014 MANAGEMENT: >STATE:1389821471,GET_CONFIG,,,
Wed Jan 15 19:31:12 2014 SENT CONTROL [Firewall]: 'PUSH_REQUEST' (status=1)
Wed Jan 15 19:31:12 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.50.2.6,route-gateway 10.50.3.1,ifconfig 10.50.3.10 255.255.255.0'
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: route options modified
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: route-related options modified
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jan 15 19:31:12 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jan 15 19:31:12 2014 MANAGEMENT: >STATE:1389821472,ASSIGN_IP,,10.50.3.10,
Wed Jan 15 19:31:12 2014 open_tun, tt->ipv6=0
Wed Jan 15 19:31:12 2014 TAP-WIN32 device [Conexão Local] opened: \\.\Global\{1BD3DBEA-337C-4F7B-9A44-C42A9B35233A}.tap
Wed Jan 15 19:31:12 2014 TAP-Windows Driver Version 9.9
Wed Jan 15 19:31:12 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.50.3.10/255.255.255.0 on interface {1BD3DBEA-337C-4F7B-9A44-C42A9B35233A} [DHCP-serv: 10.50.3.0, lease-time: 31536000]
Wed Jan 15 19:31:12 2014 Successful ARP Flush on interface [30] {1BD3DBEA-337C-4F7B-9A44-C42A9B35233A}
Wed Jan 15 19:31:17 2014 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Jan 15 19:31:17 2014 C:\Windows\system32\route.exe ADD Hi, i have a CentOS 6.5 with openvpn 2.3.2, and all my client windows cant redirect connection with redirect-gateway, i dont know what to do now, here is my configuration:
Server Configuration:
dev tap
daemon
port 1194
persist-tun
persist-key
verb 3
log-append /var/log/openvpn.log
status /var/log/openvpn-status.log
client-to-client
tls-server
tls-auth auth.key
mode server
duplicate-cn
dh keys/dh1024.pem
ca keys/ca.crt
cert keys/Firewall.crt
key keys/Firewall.key
server-bridge 10.50.3.1 255.255.255.0 10.50.3.10 10.50.3.31
push "redirect-gateway def1"
push "dhcp-option DNS 10.50.2.6"
script-security 3 system
up "/etc/openvpn/start.sh"
down "/etc/openvpn/stop.sh"
Client Configuration:
dev tap
client
tls-client
tls-auth auth.key
ns-cert-type server
persist-key
persist-tun
nobind
pull
redirect-gateway def1
remote XXX.XXX.XXX.XXX
script-security 3
verb 3
ca ca.crt
cert Postos.crt
key Postos.key
Log on Windows Machine's:
Wed Jan 15 19:31:09 2014 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Wed Jan 15 19:31:09 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Jan 15 19:31:09 2014 Need hold release from management interface, waiting...
Wed Jan 15 19:31:09 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'state on'
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'log all on'
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'hold off'
Wed Jan 15 19:31:09 2014 MANAGEMENT: CMD 'hold release'
Wed Jan 15 19:31:09 2014 Control Channel Authentication: using 'auth.key' as a OpenVPN static key file
Wed Jan 15 19:31:09 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:09 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:09 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Jan 15 19:31:09 2014 UDPv4 link local: [undef]
Wed Jan 15 19:31:09 2014 UDPv4 link remote: [AF_INET]XXX.XXX.XXX.XXX:1194
Wed Jan 15 19:31:09 2014 MANAGEMENT: >STATE:1389821469,WAIT,,,
Wed Jan 15 19:31:09 2014 MANAGEMENT: >STATE:1389821469,AUTH,,,
Wed Jan 15 19:31:09 2014 TLS: Initial packet from [AF_INET]XXX.XXX.XXX.XXX:1194, sid=238217ef 3400d9f7
Wed Jan 15 19:31:10 2014 VERIFY OK: depth=1, C=BR, ST=Goias, L=Goiania, O=Test, OU=TI, CN=Test, name=Test, emailAddress=
test@test.com
Wed Jan 15 19:31:10 2014 VERIFY OK: nsCertType=SERVER
Wed Jan 15 19:31:10 2014 VERIFY OK: depth=0, C=BR, ST=Goias, L=Goiania, O=Test, OU=TI, CN=Firewall, name=Test, emailAddress=
test@test.com
Wed Jan 15 19:31:10 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 15 19:31:10 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:10 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 15 19:31:10 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 15 19:31:10 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 15 19:31:10 2014 [Firewall] Peer Connection Initiated with [AF_INET]XXX.XXX.XXX.XXX:1194
Wed Jan 15 19:31:11 2014 MANAGEMENT: >STATE:1389821471,GET_CONFIG,,,
Wed Jan 15 19:31:12 2014 SENT CONTROL [Firewall]: 'PUSH_REQUEST' (status=1)
Wed Jan 15 19:31:12 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.50.2.6,route-gateway 10.50.3.1,ifconfig 10.50.3.10 255.255.255.0'
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: route options modified
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: route-related options modified
Wed Jan 15 19:31:12 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jan 15 19:31:12 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jan 15 19:31:12 2014 MANAGEMENT: >STATE:1389821472,ASSIGN_IP,,10.50.3.10,
Wed Jan 15 19:31:12 2014 open_tun, tt->ipv6=0
Wed Jan 15 19:31:12 2014 TAP-WIN32 device [Conexão Local] opened: \\.\Global\{1BD3DBEA-337C-4F7B-9A44-C42A9B35233A}.tap
Wed Jan 15 19:31:12 2014 TAP-Windows Driver Version 9.9
Wed Jan 15 19:31:12 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.50.3.10/255.255.255.0 on interface {1BD3DBEA-337C-4F7B-9A44-C42A9B35233A} [DHCP-serv: 10.50.3.0, lease-time: 31536000]
Wed Jan 15 19:31:12 2014 Successful ARP Flush on interface [30] {1BD3DBEA-337C-4F7B-9A44-C42A9B35233A}
Wed Jan 15 19:31:17 2014 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Jan 15 19:31:17 2014 C:\Windows\system32\route.exe ADD XXX.XXX.XXX.XXX MASK 255.255.255.255 200.137.222.161
Wed Jan 15 19:31:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Jan 15 19:31:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 15 19:31:17 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.50.3.1
Wed Jan 15 19:31:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jan 15 19:31:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 15 19:31:17 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.50.3.1
Wed Jan 15 19:31:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jan 15 19:31:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 15 19:31:17 2014 Initialization Sequence Completed
Wed Jan 15 19:31:17 2014 MANAGEMENT: >STATE:1389821477,CONNECTED,SUCCESS,10.50.3.10,XXX.XXX.XXX.XXX MASK 255.255.255.255 200.137.222.161
Wed Jan 15 19:31:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Jan 15 19:31:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 15 19:31:17 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.50.3.1
Wed Jan 15 19:31:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jan 15 19:31:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 15 19:31:17 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.50.3.1
Wed Jan 15 19:31:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jan 15 19:31:17 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jan 15 19:31:17 2014 Initialization Sequence Completed
Wed Jan 15 19:31:17 2014 MANAGEMENT: >STATE:1389821477,CONNECTED,SUCCESS,10.50.3.10,XXX.XXX.XXX.XXX
I dont know more what to do, its was working 3 days ago, now, the redirect not work. Someone can help me ?
