I'm trying to setup a home DD-WRT router to serve as a VPN server. It seems like I have it setup to where the client (linux) is connecting fine, but none of my traffic is going through the VPN tunnel. My home router's ip address right now is 75.72.7.8 and my client is on a completely separate network behind 75.72.139.4. After establishing the VPN connection to my home router, traffic doesn't appear to be going through it:
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
1 DD-WRT (192.168.1.1) 1.225 ms 1.355 ms 1.457 ms
2 10.1.10.1 (10.1.10.1) 2.435 ms 3.674 ms 3.681 ms
3 * * *
4 te-0-2-0-5-sur02.crosstown.mn.minn.comcast.net (68.85.164.5) 13.103 ms 16.700 ms 17.658 ms
5 te-0-6-0-2-ar01.roseville.mn.minn.comcast.net (69.139.176.198) 20.306 ms te-0-6-0-3-ar01.roseville.mn.minn.comcast.net (68.87.175.230) 19.538 ms 20.119 ms
6 he-1-13-0-0-cr01.350ecermak.il.ibone.comcast.net (68.86.94.81) 27.482 ms 23.344 ms 21.765 ms
7 he-0-12-0-0-pe04.350ecermak.il.ibone.comcast.net (68.86.83.162) 24.741 ms 24.919 ms 25.651 ms
8 as15169-2-c.350ecermak.il.ibone.comcast.net (66.208.233.142) 23.649 ms 22.084 ms 22.276 ms
9 209.85.255.26 (209.85.255.26) 22.435 ms 209.85.255.132 (209.85.255.132) 21.484 ms 25.098 ms
10 209.85.254.240 (209.85.254.240) 26.005 ms 22.762 ms 72.14.237.133 (72.14.237.133) 22.805 ms
11 209.85.248.228 (209.85.248.228) 37.621 ms 38.175 ms 72.14.232.141 (72.14.232.141) 37.956 ms
12 216.239.43.217 (216.239.43.217) 38.591 ms 216.239.46.193 (216.239.46.193) 35.485 ms 216.239.43.217 (216.239.43.217) 34.671 ms
13 * * *
14 google-public-dns-a.google.com (8.8.8.8) 35.895 ms 33.941 ms 40.050 ms
Can someone help me figure out where my error is?
Here is the client config:
client
dev tun0
proto udp
remote johauke.mooo.com 1312
resolv-retry infinite
nobind
persist-key
persist-tun
ca keys/ca.crt
cert keys/lappyICSL.crt
key keys/lappyICSL.key
ns-cert-type server
comp-lzo
float
verb 5
Here is the server (DD-WRT) config:
push "route 192.168.50.0 255.255.255.0"
server 192.168.66.0 255.255.255.0
dev tun0
proto udp
port 1312
keepalive 15 60
daemon
comp-lzo
client-to-client
duplicate-cn
tls-server
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 16
script-security 2
verb 5
Here is the client log:
Wed Feb 26 11:35:59 2014 us=499681 Current Parameter Settings:
Wed Feb 26 11:35:59 2014 us=499764 config = 'dmz2.conf'
Wed Feb 26 11:35:59 2014 us=499779 mode = 0
Wed Feb 26 11:35:59 2014 us=499789 persist_config = DISABLED
Wed Feb 26 11:35:59 2014 us=499799 persist_mode = 1
Wed Feb 26 11:35:59 2014 us=499809 show_ciphers = DISABLED
Wed Feb 26 11:35:59 2014 us=499819 show_digests = DISABLED
Wed Feb 26 11:35:59 2014 us=499828 show_engines = DISABLED
Wed Feb 26 11:35:59 2014 us=499837 genkey = DISABLED
Wed Feb 26 11:35:59 2014 us=499846 key_pass_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=499855 show_tls_ciphers = DISABLED
Wed Feb 26 11:35:59 2014 us=499864 Connection profiles [default]:
Wed Feb 26 11:35:59 2014 us=499874 proto = udp
Wed Feb 26 11:35:59 2014 us=499883 local = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=499892 local_port = 0
Wed Feb 26 11:35:59 2014 us=499902 remote = 'johauke.mooo.com'
Wed Feb 26 11:35:59 2014 us=499911 remote_port = 1312
Wed Feb 26 11:35:59 2014 us=499920 remote_float = ENABLED
Wed Feb 26 11:35:59 2014 us=499929 bind_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=499939 bind_local = DISABLED
Wed Feb 26 11:35:59 2014 us=499948 connect_retry_seconds = 5
Wed Feb 26 11:35:59 2014 us=499957 connect_timeout = 10
Wed Feb 26 11:35:59 2014 us=499967 connect_retry_max = 0
Wed Feb 26 11:35:59 2014 us=499976 socks_proxy_server = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=499985 socks_proxy_port = 0
Wed Feb 26 11:35:59 2014 us=499994 socks_proxy_retry = DISABLED
Wed Feb 26 11:35:59 2014 us=500003 tun_mtu = 1500
Wed Feb 26 11:35:59 2014 us=500012 tun_mtu_defined = ENABLED
Wed Feb 26 11:35:59 2014 us=500021 link_mtu = 1500
Wed Feb 26 11:35:59 2014 us=500030 link_mtu_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=500039 tun_mtu_extra = 0
Wed Feb 26 11:35:59 2014 us=500048 tun_mtu_extra_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=500057 mtu_discover_type = -1
Wed Feb 26 11:35:59 2014 us=500066 fragment = 0
Wed Feb 26 11:35:59 2014 us=500075 mssfix = 1450
Wed Feb 26 11:35:59 2014 us=500084 explicit_exit_notification = 0
Wed Feb 26 11:35:59 2014 us=500093 Connection profiles END
Wed Feb 26 11:35:59 2014 us=500102 remote_random = DISABLED
Wed Feb 26 11:35:59 2014 us=500112 ipchange = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500121 dev = 'tun0'
Wed Feb 26 11:35:59 2014 us=500130 dev_type = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500139 dev_node = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500148 lladdr = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500157 topology = 1
Wed Feb 26 11:35:59 2014 us=500166 tun_ipv6 = DISABLED
Wed Feb 26 11:35:59 2014 us=500175 ifconfig_local = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500184 ifconfig_remote_netmask = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500193 ifconfig_noexec = DISABLED
Wed Feb 26 11:35:59 2014 us=500202 ifconfig_nowarn = DISABLED
Wed Feb 26 11:35:59 2014 us=500211 ifconfig_ipv6_local = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500223 ifconfig_ipv6_netbits = 0
Wed Feb 26 11:35:59 2014 us=500233 ifconfig_ipv6_remote = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500242 shaper = 0
Wed Feb 26 11:35:59 2014 us=500252 mtu_test = 0
Wed Feb 26 11:35:59 2014 us=500261 mlock = DISABLED
Wed Feb 26 11:35:59 2014 us=500270 keepalive_ping = 0
Wed Feb 26 11:35:59 2014 us=500279 keepalive_timeout = 0
Wed Feb 26 11:35:59 2014 us=500288 inactivity_timeout = 0
Wed Feb 26 11:35:59 2014 us=500297 ping_send_timeout = 0
Wed Feb 26 11:35:59 2014 us=500306 ping_rec_timeout = 0
Wed Feb 26 11:35:59 2014 us=500315 ping_rec_timeout_action = 0
Wed Feb 26 11:35:59 2014 us=500324 ping_timer_remote = DISABLED
Wed Feb 26 11:35:59 2014 us=500333 remap_sigusr1 = 0
Wed Feb 26 11:35:59 2014 us=500342 persist_tun = ENABLED
Wed Feb 26 11:35:59 2014 us=500351 persist_local_ip = DISABLED
Wed Feb 26 11:35:59 2014 us=500360 persist_remote_ip = DISABLED
Wed Feb 26 11:35:59 2014 us=500369 persist_key = ENABLED
Wed Feb 26 11:35:59 2014 us=500378 passtos = DISABLED
Wed Feb 26 11:35:59 2014 us=500388 resolve_retry_seconds = 1000000000
Wed Feb 26 11:35:59 2014 us=500403 username = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500413 groupname = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500422 chroot_dir = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500431 cd_dir = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500440 writepid = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500452 up_script = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500461 down_script = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500470 down_pre = DISABLED
Wed Feb 26 11:35:59 2014 us=500479 up_restart = DISABLED
Wed Feb 26 11:35:59 2014 us=500488 up_delay = DISABLED
Wed Feb 26 11:35:59 2014 us=500497 daemon = DISABLED
Wed Feb 26 11:35:59 2014 us=500506 inetd = 0
Wed Feb 26 11:35:59 2014 us=500515 log = DISABLED
Wed Feb 26 11:35:59 2014 us=500524 suppress_timestamps = DISABLED
Wed Feb 26 11:35:59 2014 us=500533 nice = 0
Wed Feb 26 11:35:59 2014 us=500542 verbosity = 5
Wed Feb 26 11:35:59 2014 us=500551 mute = 0
Wed Feb 26 11:35:59 2014 us=500560 gremlin = 0
Wed Feb 26 11:35:59 2014 us=500569 status_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500578 status_file_version = 1
Wed Feb 26 11:35:59 2014 us=500587 status_file_update_freq = 60
Wed Feb 26 11:35:59 2014 us=500596 occ = ENABLED
Wed Feb 26 11:35:59 2014 us=500605 rcvbuf = 65536
Wed Feb 26 11:35:59 2014 us=500614 sndbuf = 65536
Wed Feb 26 11:35:59 2014 us=500623 mark = 0
Wed Feb 26 11:35:59 2014 us=500632 sockflags = 0
Wed Feb 26 11:35:59 2014 us=500641 fast_io = DISABLED
Wed Feb 26 11:35:59 2014 us=500650 lzo = 7
Wed Feb 26 11:35:59 2014 us=500659 route_script = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500668 route_default_gateway = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500677 route_default_metric = 0
Wed Feb 26 11:35:59 2014 us=500686 route_noexec = DISABLED
Wed Feb 26 11:35:59 2014 us=500695 route_delay = 0
Wed Feb 26 11:35:59 2014 us=500704 route_delay_window = 30
Wed Feb 26 11:35:59 2014 us=500713 route_delay_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=500722 route_nopull = DISABLED
Wed Feb 26 11:35:59 2014 us=500731 route_gateway_via_dhcp = DISABLED
Wed Feb 26 11:35:59 2014 us=500741 max_routes = 100
Wed Feb 26 11:35:59 2014 us=500750 allow_pull_fqdn = DISABLED
Wed Feb 26 11:35:59 2014 us=500759 management_addr = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500769 management_port = 0
Wed Feb 26 11:35:59 2014 us=500778 management_user_pass = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500787 management_log_history_cache = 250
Wed Feb 26 11:35:59 2014 us=500796 management_echo_buffer_size = 100
Wed Feb 26 11:35:59 2014 us=500805 management_write_peer_info_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500814 management_client_user = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500823 management_client_group = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500832 management_flags = 0
Wed Feb 26 11:35:59 2014 us=500842 shared_secret_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500851 key_direction = 0
Wed Feb 26 11:35:59 2014 us=500860 ciphername_defined = ENABLED
Wed Feb 26 11:35:59 2014 us=500869 ciphername = 'BF-CBC'
Wed Feb 26 11:35:59 2014 us=500878 authname_defined = ENABLED
Wed Feb 26 11:35:59 2014 us=500887 authname = 'SHA1'
Wed Feb 26 11:35:59 2014 us=500896 prng_hash = 'SHA1'
Wed Feb 26 11:35:59 2014 us=500905 prng_nonce_secret_len = 16
Wed Feb 26 11:35:59 2014 us=500914 keysize = 0
Wed Feb 26 11:35:59 2014 us=500923 engine = DISABLED
Wed Feb 26 11:35:59 2014 us=500932 replay = ENABLED
Wed Feb 26 11:35:59 2014 us=500941 mute_replay_warnings = DISABLED
Wed Feb 26 11:35:59 2014 us=500950 replay_window = 64
Wed Feb 26 11:35:59 2014 us=500959 replay_time = 15
Wed Feb 26 11:35:59 2014 us=500968 packet_id_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=500977 use_iv = ENABLED
Wed Feb 26 11:35:59 2014 us=500986 test_crypto = DISABLED
Wed Feb 26 11:35:59 2014 us=500995 tls_server = DISABLED
Wed Feb 26 11:35:59 2014 us=501004 tls_client = ENABLED
Wed Feb 26 11:35:59 2014 us=501013 key_method = 2
Wed Feb 26 11:35:59 2014 us=501022 ca_file = 'keys/ca.crt'
Wed Feb 26 11:35:59 2014 us=501031 ca_path = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501044 dh_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501054 cert_file = 'keys/lappyICSL.crt'
Wed Feb 26 11:35:59 2014 us=501064 priv_key_file = 'keys/lappyICSL.key'
Wed Feb 26 11:35:59 2014 us=501073 pkcs12_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501082 cipher_list = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501091 tls_verify = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501100 tls_export_cert = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501110 verify_x509_type = 0
Wed Feb 26 11:35:59 2014 us=501118 verify_x509_name = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501127 crl_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501136 ns_cert_type = 1
Wed Feb 26 11:35:59 2014 us=501145 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501154 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501163 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501172 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501181 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501190 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501198 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501208 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501217 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501225 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501234 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501243 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501252 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501261 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501270 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501279 remote_cert_ku[i] = 0
Wed Feb 26 11:35:59 2014 us=501287 remote_cert_eku = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501297 ssl_flags = 0
Wed Feb 26 11:35:59 2014 us=501305 tls_timeout = 2
Wed Feb 26 11:35:59 2014 us=501314 renegotiate_bytes = 0
Wed Feb 26 11:35:59 2014 us=501323 renegotiate_packets = 0
Wed Feb 26 11:35:59 2014 us=501332 renegotiate_seconds = 3600
Wed Feb 26 11:35:59 2014 us=501341 handshake_window = 60
Wed Feb 26 11:35:59 2014 us=501350 transition_window = 3600
Wed Feb 26 11:35:59 2014 us=501359 single_session = DISABLED
Wed Feb 26 11:35:59 2014 us=501368 push_peer_info = DISABLED
Wed Feb 26 11:35:59 2014 us=501377 tls_exit = DISABLED
Wed Feb 26 11:35:59 2014 us=501386 tls_auth_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501401 server_network = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501411 server_netmask = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501427 server_network_ipv6 = ::
Wed Feb 26 11:35:59 2014 us=501437 server_netbits_ipv6 = 0
Wed Feb 26 11:35:59 2014 us=501447 server_bridge_ip = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501457 server_bridge_netmask = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501466 server_bridge_pool_start = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501476 server_bridge_pool_end = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501485 ifconfig_pool_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=501495 ifconfig_pool_start = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501505 ifconfig_pool_end = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501515 ifconfig_pool_netmask = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501524 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501533 ifconfig_pool_persist_refresh_freq = 600
Wed Feb 26 11:35:59 2014 us=501542 ifconfig_ipv6_pool_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=501552 ifconfig_ipv6_pool_base = ::
Wed Feb 26 11:35:59 2014 us=501561 ifconfig_ipv6_pool_netbits = 0
Wed Feb 26 11:35:59 2014 us=501571 n_bcast_buf = 256
Wed Feb 26 11:35:59 2014 us=501590 tcp_queue_limit = 64
Wed Feb 26 11:35:59 2014 us=501600 real_hash_size = 256
Wed Feb 26 11:35:59 2014 us=501609 virtual_hash_size = 256
Wed Feb 26 11:35:59 2014 us=501618 client_connect_script = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501627 learn_address_script = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501636 client_disconnect_script = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501645 client_config_dir = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501654 ccd_exclusive = DISABLED
Wed Feb 26 11:35:59 2014 us=501672 tmp_dir = '/home/ryantr/temp'
Wed Feb 26 11:35:59 2014 us=501682 push_ifconfig_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=501692 push_ifconfig_local = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501702 push_ifconfig_remote_netmask = 0.0.0.0
Wed Feb 26 11:35:59 2014 us=501711 push_ifconfig_ipv6_defined = DISABLED
Wed Feb 26 11:35:59 2014 us=501721 push_ifconfig_ipv6_local = ::/0
Wed Feb 26 11:35:59 2014 us=501730 push_ifconfig_ipv6_remote = ::
Wed Feb 26 11:35:59 2014 us=501740 enable_c2c = DISABLED
Wed Feb 26 11:35:59 2014 us=501749 duplicate_cn = DISABLED
Wed Feb 26 11:35:59 2014 us=501758 cf_max = 0
Wed Feb 26 11:35:59 2014 us=501767 cf_per = 0
Wed Feb 26 11:35:59 2014 us=501776 max_clients = 1024
Wed Feb 26 11:35:59 2014 us=501785 max_routes_per_client = 256
Wed Feb 26 11:35:59 2014 us=501794 auth_user_pass_verify_script = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501804 auth_user_pass_verify_script_via_file = DISABLED
Wed Feb 26 11:35:59 2014 us=501813 port_share_host = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501822 port_share_port = 0
Wed Feb 26 11:35:59 2014 us=501831 client = ENABLED
Wed Feb 26 11:35:59 2014 us=501840 pull = ENABLED
Wed Feb 26 11:35:59 2014 us=501849 auth_user_pass_file = '[UNDEF]'
Wed Feb 26 11:35:59 2014 us=501859 OpenVPN 2.3.2 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Nov 13 2013
Wed Feb 26 11:35:59 2014 us=502510 LZO compression initialized
Wed Feb 26 11:35:59 2014 us=502595 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Feb 26 11:35:59 2014 us=502632 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Feb 26 11:35:59 2014 us=542218 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Feb 26 11:35:59 2014 us=542301 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Feb 26 11:35:59 2014 us=542318 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Feb 26 11:35:59 2014 us=542349 Local Options hash (VER=V4): '41690919'
Wed Feb 26 11:35:59 2014 us=542369 Expected Remote Options hash (VER=V4): '530fdded'
Wed Feb 26 11:35:59 2014 us=542394 UDPv4 link local: [undef]
Wed Feb 26 11:35:59 2014 us=542412 UDPv4 link remote: [AF_INET]75.72.7.8:1312
Wed Feb 26 11:35:59 2014 us=568940 TLS: Initial packet from [AF_INET]75.72.7.8:1312, sid=186aea60 49c50c23
Wed Feb 26 11:36:00 2014 us=211111 VERIFY OK: depth=1, C=US, ST=MN, L=Bloomington, O=DMZ, CN=DMZ, name=DMZ, emailAddress=ryan0270@umn.edu
Wed Feb 26 11:36:00 2014 us=211441 VERIFY OK: nsCertType=SERVER
Wed Feb 26 11:36:00 2014 us=211470 VERIFY OK: depth=0, C=US, ST=MN, L=Bloomington, O=DMZ, CN=DMZ, name=DMZ, emailAddress=ryan0270@umn.edu
Wed Feb 26 11:36:00 2014 us=957741 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 26 11:36:00 2014 us=957798 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 26 11:36:00 2014 us=957868 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Feb 26 11:36:00 2014 us=957883 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Feb 26 11:36:00 2014 us=957971 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Feb 26 11:36:00 2014 us=958014 [DMZ] Peer Connection Initiated with [AF_INET]75.72.7.8:1312
Wed Feb 26 11:36:03 2014 us=434716 SENT CONTROL [DMZ]: 'PUSH_REQUEST' (status=1)
Wed Feb 26 11:36:03 2014 us=453714 PUSH: Received control message: 'PUSH_REPLY,route 192.168.50.0 255.255.255.0,route 192.168.66.0 255.255.255.0,topology net30,ping 15,ping-restart 60,ifconfig 192.168.66.6 192.168.66.5'
Wed Feb 26 11:36:03 2014 us=453833 OPTIONS IMPORT: timers and/or timeouts modified
Wed Feb 26 11:36:03 2014 us=453846 OPTIONS IMPORT: --ifconfig/up options modified
Wed Feb 26 11:36:03 2014 us=453855 OPTIONS IMPORT: route options modified
Wed Feb 26 11:36:03 2014 us=454016 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlan0 HWADDR=60:67:20:f4:ca:8c
Wed Feb 26 11:36:03 2014 us=454238 TUN/TAP device tun0 opened
Wed Feb 26 11:36:03 2014 us=454257 TUN/TAP TX queue length set to 100
Wed Feb 26 11:36:03 2014 us=454275 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Feb 26 11:36:03 2014 us=454299 /usr/bin/ip link set dev tun0 up mtu 1500
Wed Feb 26 11:36:03 2014 us=455759 /usr/bin/ip addr add dev tun0 local 192.168.66.6 peer 192.168.66.5
Wed Feb 26 11:36:03 2014 us=457164 /usr/bin/ip route add 192.168.50.0/24 via 192.168.66.5
Wed Feb 26 11:36:03 2014 us=458055 /usr/bin/ip route add 192.168.66.0/24 via 192.168.66.5
Wed Feb 26 11:36:03 2014 us=458946 Initialization Sequence Completed
Wed Feb 26 11:37:52 2014 us=238046 event_wait : Interrupted system call (code=4)
Wed Feb 26 11:37:52 2014 us=238210 TCP/UDP: Closing socket
Wed Feb 26 11:37:52 2014 us=238274 /usr/bin/ip route del 192.168.66.0/24
Wed Feb 26 11:37:52 2014 us=238950 /usr/bin/ip route del 192.168.50.0/24
Wed Feb 26 11:37:52 2014 us=239437 Closing TUN/TAP interface
Wed Feb 26 11:37:52 2014 us=239470 /usr/bin/ip addr del dev tun0 local 192.168.66.6 peer 192.168.66.5
Wed Feb 26 11:37:52 2014 us=271704 SIGINT[hard,] received, process exiting
Here is the server (DD-WRT) log:
Serverlog Clientlog 20140226 11:34:53 replay_time = 15
20140226 11:34:53 packet_id_file = '[UNDEF]'
20140226 11:34:53 use_iv = ENABLED
20140226 11:34:53 test_crypto = DISABLED
20140226 11:34:53 tls_server = ENABLED
20140226 11:34:53 tls_client = DISABLED
20140226 11:34:53 key_method = 2
20140226 11:34:53 ca_file = '/tmp/openvpn/ca.crt'
20140226 11:34:53 ca_path = '[UNDEF]'
20140226 11:34:53 dh_file = '/tmp/openvpn/dh.pem'
20140226 11:34:53 cert_file = '/tmp/openvpn/cert.pem'
20140226 11:34:53 priv_key_file = '/tmp/openvpn/key.pem'
20140226 11:34:53 pkcs12_file = '[UNDEF]'
20140226 11:34:53 cipher_list = '[UNDEF]'
20140226 11:34:53 tls_verify = '[UNDEF]'
20140226 11:34:53 tls_export_cert = '[UNDEF]'
20140226 11:34:53 verify_x509_type = 0
20140226 11:34:53 verify_x509_name = '[UNDEF]'
20140226 11:34:53 crl_file = '[UNDEF]'
20140226 11:34:53 ns_cert_type = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_ku[i] = 0
20140226 11:34:53 remote_cert_eku = '[UNDEF]'
20140226 11:34:53 ssl_flags = 0
20140226 11:34:53 tls_timeout = 2
20140226 11:34:53 renegotiate_bytes = 0
20140226 11:34:53 renegotiate_packets = 0
20140226 11:34:53 renegotiate_seconds = 3600
20140226 11:34:53 handshake_window = 60
20140226 11:34:53 transition_window = 3600
20140226 11:34:53 single_session = DISABLED
20140226 11:34:53 push_peer_info = DISABLED
20140226 11:34:53 tls_exit = DISABLED
20140226 11:34:53 tls_auth_file = '[UNDEF]'
20140226 11:34:53 server_network = 192.168.66.0
20140226 11:34:53 server_netmask = 255.255.255.0
20140226 11:34:53 server_network_ipv6 = ::
20140226 11:34:53 server_netbits_ipv6 = 0
20140226 11:34:53 server_bridge_ip = 0.0.0.0
20140226 11:34:53 server_bridge_netmask = 0.0.0.0
20140226 11:34:53 server_bridge_pool_start = 0.0.0.0
20140226 11:34:53 server_bridge_pool_end = 0.0.0.0
20140226 11:34:53 push_entry = 'route 192.168.50.0 255.255.255.0'
20140226 11:34:53 push_entry = 'route 192.168.66.0 255.255.255.0'
20140226 11:34:53 push_entry = 'topology net30'
20140226 11:34:53 push_entry = 'ping 15'
20140226 11:34:53 push_entry = 'ping-restart 60'
20140226 11:34:53 ifconfig_pool_defined = ENABLED
20140226 11:34:53 ifconfig_pool_start = 192.168.66.4
20140226 11:34:53 ifconfig_pool_end = 192.168.66.251
20140226 11:34:53 ifconfig_pool_netmask = 0.0.0.0
20140226 11:34:53 ifconfig_pool_persist_filename = '[UNDEF]'
20140226 11:34:53 ifconfig_pool_persist_refresh_freq = 600
20140226 11:34:53 ifconfig_ipv6_pool_defined = DISABLED
20140226 11:34:53 ifconfig_ipv6_pool_base = ::
20140226 11:34:53 ifconfig_ipv6_pool_netbits = 0
20140226 11:34:53 n_bcast_buf = 256
20140226 11:34:53 tcp_queue_limit = 64
20140226 11:34:53 real_hash_size = 256
20140226 11:34:53 virtual_hash_size = 256
20140226 11:34:53 client_connect_script = '[UNDEF]'
20140226 11:34:53 learn_address_script = '[UNDEF]'
20140226 11:34:53 client_disconnect_script = '[UNDEF]'
20140226 11:34:53 client_config_dir = '[UNDEF]'
20140226 11:34:53 ccd_exclusive = DISABLED
20140226 11:34:53 tmp_dir = '/tmp'
20140226 11:34:53 push_ifconfig_defined = DISABLED
20140226 11:34:53 push_ifconfig_local = 0.0.0.0
20140226 11:34:53 push_ifconfig_remote_netmask = 0.0.0.0
20140226 11:34:53 push_ifconfig_ipv6_defined = DISABLED
20140226 11:34:53 push_ifconfig_ipv6_local = ::/0
20140226 11:34:53 push_ifconfig_ipv6_remote = ::
20140226 11:34:53 enable_c2c = ENABLED
20140226 11:34:53 duplicate_cn = ENABLED
20140226 11:34:53 cf_max = 0
20140226 11:34:53 cf_per = 0
20140226 11:34:53 max_clients = 1024
20140226 11:34:53 max_routes_per_client = 256
20140226 11:34:53 auth_user_pass_verify_script = '[UNDEF]'
20140226 11:34:53 auth_user_pass_verify_script_via_file = DISABLED
20140226 11:34:53 port_share_host = '[UNDEF]'
20140226 11:34:53 port_share_port = 0
20140226 11:34:53 client = DISABLED
20140226 11:34:53 pull = DISABLED
20140226 11:34:53 auth_user_pass_file = '[UNDEF]'
20140226 11:34:53 I OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 24 2013
20140226 11:34:53 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20140226 11:34:53 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20140226 11:34:54 Diffie-Hellman initialized with 2048 bit key
20140226 11:34:54 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
20140226 11:34:54 Socket Buffers: R=[172032->131072] S=[172032->131072]
20140226 11:34:54 ROUTE_GATEWAY 75.72.0.1/255.255.248.0 IFACE=vlan2 HWADDR=44:94:fc:73:c4:ed
20140226 11:34:54 I TUN/TAP device tun0 opened
20140226 11:34:54 TUN/TAP TX queue length set to 100
20140226 11:34:54 I do_ifconfig tt->ipv6=0 tt->did_ifconfig_ipv6_setup=0
20140226 11:34:54 I /sbin/ifconfig tun0 192.168.66.1 pointopoint 192.168.66.2 mtu 1500
20140226 11:34:54 /sbin/route add -net 192.168.66.0 netmask 255.255.255.0 gw 192.168.66.2
20140226 11:34:56 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
20140226 11:34:56 I UDPv4 link local (bound): [undef]
20140226 11:34:56 I UDPv4 link remote: [undef]
20140226 11:34:56 MULTI: multi_init called r=256 v=256
20140226 11:34:56 IFCONFIG POOL: base=192.168.66.4 size=62 ipv6=0
20140226 11:34:56 I Initialization Sequence Completed
20140226 11:35:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:35:24 D MANAGEMENT: CMD 'state'
20140226 11:35:24 MANAGEMENT: Client disconnected
20140226 11:35:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:35:24 D MANAGEMENT: CMD 'state'
20140226 11:35:24 MANAGEMENT: Client disconnected
20140226 11:35:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:35:24 D MANAGEMENT: CMD 'state'
20140226 11:35:24 MANAGEMENT: Client disconnected
20140226 11:35:24 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:35:24 D MANAGEMENT: CMD 'log 500'
20140226 11:35:24 MANAGEMENT: Client disconnected
20140226 11:35:59 MULTI: multi_create_instance called
20140226 11:35:59 75.72.139.4:55990 Re-using SSL/TLS context
20140226 11:35:59 75.72.139.4:55990 LZO compression initialized
20140226 11:35:59 75.72.139.4:55990 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
20140226 11:35:59 75.72.139.4:55990 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
20140226 11:35:59 75.72.139.4:55990 Local Options String: 'V4 dev-type tun link-mtu 1542 tun-mtu 1500 proto UDPv4 comp-lzo cipher BF-CBC auth SHA1 keysize 128 key-method 2 tls-server'
20140226 11:35:59 75.72.139.4:55990 Expected Remote Options String: 'V4 dev-type tun link-mtu 1542 tun-mtu 1500 proto UDPv4 comp-lzo cipher BF-CBC auth SHA1 keysize 128 key-method 2 tls-client'
20140226 11:35:59 75.72.139.4:55990 Local Options hash (VER=V4): '530fdded'
20140226 11:35:59 75.72.139.4:55990 Expected Remote Options hash (VER=V4): '41690919'
20140226 11:35:59 75.72.139.4:55990 TLS: Initial packet from [AF_INET]75.72.139.4:55990 sid=68df1623 2a35998d
20140226 11:36:00 75.72.139.4:55990 VERIFY OK: depth=1 C=US ST=MN L=Bloomington O=DMZ CN=DMZ name=DMZ emailAddress=ryan0270@umn.edu
20140226 11:36:00 75.72.139.4:55990 VERIFY OK: depth=0 C=US ST=MN L=Bloomington O=DMZ CN=lappyICSL name=DMZ emailAddress=ryan0270@umn.edu
20140226 11:36:00 75.72.139.4:55990 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
20140226 11:36:00 75.72.139.4:55990 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
20140226 11:36:00 75.72.139.4:55990 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
20140226 11:36:00 75.72.139.4:55990 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
20140226 11:36:00 75.72.139.4:55990 Control Channel: TLSv1 cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA 2048 bit RSA
20140226 11:36:00 I 75.72.139.4:55990 [lappyICSL] Peer Connection Initiated with [AF_INET]75.72.139.4:55990
20140226 11:36:00 I lappyICSL/75.72.139.4:55990 MULTI_sva: pool returned IPv4=192.168.66.6 IPv6=(Not enabled)
20140226 11:36:00 lappyICSL/75.72.139.4:55990 MULTI: Learn: 192.168.66.6 -> lappyICSL/75.72.139.4:55990
20140226 11:36:00 lappyICSL/75.72.139.4:55990 MULTI: primary virtual IP for lappyICSL/75.72.139.4:55990: 192.168.66.6
20140226 11:36:03 lappyICSL/75.72.139.4:55990 PUSH: Received control message: 'PUSH_REQUEST'
20140226 11:36:03 I lappyICSL/75.72.139.4:55990 send_push_reply(): safe_cap=940
20140226 11:36:03 lappyICSL/75.72.139.4:55990 SENT CONTROL [lappyICSL]: 'PUSH_REPLY route 192.168.50.0 255.255.255.0 route 192.168.66.0 255.255.255.0 topology net30 ping 15 ping-restart 60 ifconfig 192.168.66.6 192.168.66.5' (status=1)
20140226 11:36:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:36:07 D MANAGEMENT: CMD 'state'
20140226 11:36:07 MANAGEMENT: Client disconnected
20140226 11:36:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:36:07 D MANAGEMENT: CMD 'state'
20140226 11:36:07 MANAGEMENT: Client disconnected
20140226 11:36:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:36:07 D MANAGEMENT: CMD 'state'
20140226 11:36:07 MANAGEMENT: Client disconnected
20140226 11:36:07 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20140226 11:36:07 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
