Hi debbie10t,
thanks for reposnse and sorry for making mess.
Unfortunately i have access to server because I'm the one who is meant to set-up remote access for me and one more person while this is not even close to what i do every day at work :?.
But to the subject:
Server config file:
push "route 192.168.0.0 255.255.255.0"
push "route 10.8.0.0 255.255.255.0"
dev tun
management 127.0.0.1 1195
server 10.8.0.0 255.255.255.0
dh /var/packages/VPNCenter/target/etc/openvpn/keys/dh1024.pem
ca /var/packages/VPNCenter/target/etc/openvpn/keys/ca.crt
cert /var/packages/VPNCenter/target/etc/openvpn/keys/server.crt
key /var/packages/VPNCenter/target/etc/openvpn/keys/server.key
max-clients 3
persist-tun
persist-key
verb 3
log-append /var/log/openvpn.log
keepalive 10 60
reneg-sec 0
plugin /var/packages/VPNCenter/target/lib/radiusplugin.so /var/packages/VPNCenter/target/etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name
duplicate-cn
Clinet config file:
dev tun
tls-client
remote "smoethingsomething".synology.me 1194
pull
proto udp
script-security 2
ca ca.crt
reneg-sec 0
auth-user-pass
Client logfile:
Fri Jan 31 20:09:45 2014 Note: option http-proxy-fallback ignored because no TCP-based connection profiles are defined
Fri Jan 31 20:09:45 2014 OpenVPNAS 2.1.1oOAS Win32-MSVC++ [SSL] [LZO2] built on Jul 29 2010
Fri Jan 31 20:09:52 2014 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Fri Jan 31 20:09:52 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Jan 31 20:09:52 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 31 20:09:52 2014 UDPv4 link local (bound): [undef]:1194
Fri Jan 31 20:09:52 2014 UDPv4 link remote: XX.XXX.XXX.XXX:1194
Fri Jan 31 20:09:53 2014 [synology.com] Peer Connection Initiated with XX.XXX.XXX.XXX::1194
Fri Jan 31 20:09:55 2014 TAP-WIN32 device [Połączenie lokalne 6] opened: \\.\Global\{1A840C34-51BA-4A70-9602-2C0D75009F85}.tap
Fri Jan 31 20:09:55 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {1A840C34-51BA-4A70-9602-2C0D75009F85} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Fri Jan 31 20:09:55 2014 Successful ARP Flush on interface [41] {1A840C34-51BA-4A70-9602-2C0D75009F85}
Fri Jan 31 20:10:00 2014 WARNING: potential route subnet conflict between local LAN [10.8.0.4/255.255.255.252] and remote VPN [10.8.0.0/255.255.255.0]
Fri Jan 31 20:10:00 2014 Initialization Sequence Completed
Unfortunately I wasn't able to reach server's logfile. I don't know where to find it on synology disk station.
I have some remarks but I don't know what to do with them, maybe for You they would be great clues:
1. After tunnel is set-up I lose the possibility to access webpages but after restart of "Wiereless network connection" (in Sharing and network center on client machine) everything works perfectly fine. Tunnel is still working and finally I'm able to use my internet normally for webpages an e-mails (I checked my ip after that and it looks like this part of traffic goes outside tunnel).
2. I can see a warning:
Fri Jan 31 20:10:00 2014 WARNING: potential route subnet conflict between local LAN [10.8.0.4/255.255.255.252] and remote VPN [10.8.0.0/255.255.255.0]
But I don't really know what to do with it.
3. adding "route no-pull" to client's config doesn't change anything
