VPN Tunnel working but pushed route is not...

tapgood

Hi!

So I have a tunnel VPN working but I want to be able to see the network on the server side of the VPN. I was reading and it looked like I should be able to just use the push "route 10.0.0.0 255.255.255.0" option to get it working but it isn't and i don't know why...

I can ping the debian linux VPN server through the VPN. Both the tun (192.168.1.1/24) interface and the eth interface (10.5.4.2/8) but that is it. I cannot ping the Windows server (10.255.255.254) that I want to be able to communicate with through the VPN which I want to be able to browse and download/upload files.

I have tried disabling the firewalls on the client and the server to see if it was a firewall issue that I was having but that had no success.

Any help is much appreciated! Thank you in advanced!

here is the server config:

local 10.5.4.2
port 1194

;proto tcp
proto udp

;dev tap
dev tun

ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem

server 192.168.1.0 255.255.255.0

ifconfig-pool-persist ipp.txt

;push "route-delay"
push "route 10.0.0.0 255.0.0.0"
push "redirect-gateway def1"

push "dhcp-option DNS 10.255.255.254"
push "dhcp-option DNS 8.8.4.4"
client-to-client

keepalive 10 120

tls-auth ta.key 0 # This file is secret

cipher AES-128-CBC   # AES

comp-lzo

max-clients 10

;user nobody
;group nogroup

persist-key
persist-tun

status openvpn-status.log

log openvpn.log

verb 5

here is the client config:

client
dev tun

proto udp

;remote 10.5.4.2 1194
remote x.x.x.x 1194

redirect-gateway

resolv-retry infinite

nobind

persist-key
persist-tun

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\client.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\client.key"

ns-cert-type server

tls-auth ta.key 1

cipher AES-128-CBC

comp-lzo

verb 5

here is my server log: (and yes I know the time and date are off)

Wed Jan  8 06:33:47 2014 us=984361 Current Parameter Settings:
Wed Jan  8 06:33:47 2014 us=985347   config = '/etc/openvpn/server.conf'
Wed Jan  8 06:33:47 2014 us=985597   mode = 1
Wed Jan  8 06:33:47 2014 us=985766   persist_config = DISABLED
Wed Jan  8 06:33:47 2014 us=985927   persist_mode = 1
Wed Jan  8 06:33:47 2014 us=986085   show_ciphers = DISABLED
Wed Jan  8 06:33:47 2014 us=986246   show_digests = DISABLED
Wed Jan  8 06:33:47 2014 us=986404   show_engines = DISABLED
Wed Jan  8 06:33:47 2014 us=986559   genkey = DISABLED
Wed Jan  8 06:33:47 2014 us=986715   key_pass_file = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=986874   show_tls_ciphers = DISABLED
Wed Jan  8 06:33:47 2014 us=987111 Connection profiles [default]:
Wed Jan  8 06:33:47 2014 us=987333   proto = udp
Wed Jan  8 06:33:47 2014 us=987544   local = '10.5.4.2'
Wed Jan  8 06:33:47 2014 us=987712   local_port = 1194
Wed Jan  8 06:33:47 2014 us=987869   remote = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=988030   remote_port = 1194
Wed Jan  8 06:33:47 2014 us=988187   remote_float = DISABLED
Wed Jan  8 06:33:47 2014 us=988345   bind_defined = DISABLED
Wed Jan  8 06:33:47 2014 us=988610   bind_local = ENABLED
Wed Jan  8 06:33:47 2014 us=988818   connect_retry_seconds = 5
Wed Jan  8 06:33:47 2014 us=988984   connect_timeout = 10
Wed Jan  8 06:33:47 2014 us=989208   connect_retry_max = 0
Wed Jan  8 06:33:47 2014 us=989377   socks_proxy_server = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=989589   socks_proxy_port = 0
Wed Jan  8 06:33:47 2014 us=989751   socks_proxy_retry = DISABLED
Wed Jan  8 06:33:47 2014 us=989913 Connection profiles END
Wed Jan  8 06:33:47 2014 us=990074   remote_random = DISABLED
Wed Jan  8 06:33:47 2014 us=990234   ipchange = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=990391   dev = 'tun'
Wed Jan  8 06:33:47 2014 us=990548   dev_type = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=990705   dev_node = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=990860   lladdr = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=991060   topology = 1
Wed Jan  8 06:33:47 2014 us=991233   tun_ipv6 = DISABLED
Wed Jan  8 06:33:47 2014 us=991440   ifconfig_local = '192.168.1.1'
Wed Jan  8 06:33:47 2014 us=991614   ifconfig_remote_netmask = '192.168.1.2'
Wed Jan  8 06:33:47 2014 us=991777   ifconfig_noexec = DISABLED
Wed Jan  8 06:33:47 2014 us=991937   ifconfig_nowarn = DISABLED
Wed Jan  8 06:33:47 2014 us=992171   ifconfig_ipv6_local = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=992378   ifconfig_ipv6_netbits = 0
Wed Jan  8 06:33:47 2014 us=992626   ifconfig_ipv6_remote = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=992834   shaper = 0
Wed Jan  8 06:33:47 2014 us=993005   tun_mtu = 1500
Wed Jan  8 06:33:47 2014 us=993214   tun_mtu_defined = ENABLED
Wed Jan  8 06:33:47 2014 us=993419   link_mtu = 1500
Wed Jan  8 06:33:47 2014 us=993593   link_mtu_defined = DISABLED
Wed Jan  8 06:33:47 2014 us=993760   tun_mtu_extra = 0
Wed Jan  8 06:33:47 2014 us=993921   tun_mtu_extra_defined = DISABLED
Wed Jan  8 06:33:47 2014 us=994080   fragment = 0
Wed Jan  8 06:33:47 2014 us=994240   mtu_discover_type = -1
Wed Jan  8 06:33:47 2014 us=994401   mtu_test = 0
Wed Jan  8 06:33:47 2014 us=994555   mlock = DISABLED
Wed Jan  8 06:33:47 2014 us=994715   keepalive_ping = 10
Wed Jan  8 06:33:47 2014 us=994876   keepalive_timeout = 120
Wed Jan  8 06:33:47 2014 us=995083   inactivity_timeout = 0
Wed Jan  8 06:33:47 2014 us=995298   ping_send_timeout = 10
Wed Jan  8 06:33:47 2014 us=995510   ping_rec_timeout = 240
Wed Jan  8 06:33:47 2014 us=995678   ping_rec_timeout_action = 2
Wed Jan  8 06:33:47 2014 us=995832   ping_timer_remote = DISABLED
Wed Jan  8 06:33:47 2014 us=995985   remap_sigusr1 = 0
Wed Jan  8 06:33:47 2014 us=996144   explicit_exit_notification = 0
Wed Jan  8 06:33:47 2014 us=996297   persist_tun = ENABLED
Wed Jan  8 06:33:47 2014 us=996457   persist_local_ip = DISABLED
Wed Jan  8 06:33:47 2014 us=996614   persist_remote_ip = DISABLED
Wed Jan  8 06:33:47 2014 us=996773   persist_key = ENABLED
Wed Jan  8 06:33:47 2014 us=996933   mssfix = 1450
Wed Jan  8 06:33:47 2014 us=997165   passtos = DISABLED
Wed Jan  8 06:33:47 2014 us=997348   resolve_retry_seconds = 1000000000
Wed Jan  8 06:33:47 2014 us=997654   username = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=997831   groupname = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=997995   chroot_dir = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=998156   cd_dir = '/etc/openvpn'
Wed Jan  8 06:33:47 2014 us=998317   writepid = '/var/run/openvpn.server.pid'
Wed Jan  8 06:33:47 2014 us=998696   up_script = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=998926   down_script = '[UNDEF]'
Wed Jan  8 06:33:47 2014 us=999157   down_pre = DISABLED
Wed Jan  8 06:33:47 2014 us=999331   up_restart = DISABLED
Wed Jan  8 06:33:47 2014 us=999545   up_delay = DISABLED
Wed Jan  8 06:33:47 2014 us=999712   daemon = ENABLED
Wed Jan  8 06:33:47 2014 us=999873   inetd = 0
Wed Jan  8 06:33:48 2014 us=76   log = ENABLED
Wed Jan  8 06:33:48 2014 us=302   suppress_timestamps = DISABLED
Wed Jan  8 06:33:48 2014 us=550   nice = 0
Wed Jan  8 06:33:48 2014 us=730   verbosity = 5
Wed Jan  8 06:33:48 2014 us=939   mute = 0
Wed Jan  8 06:33:48 2014 us=1148   gremlin = 0
Wed Jan  8 06:33:48 2014 us=1316   status_file = 'openvpn-status.log'
Wed Jan  8 06:33:48 2014 us=1534   status_file_version = 1
Wed Jan  8 06:33:48 2014 us=1704   status_file_update_freq = 60
Wed Jan  8 06:33:48 2014 us=1864   occ = ENABLED
Wed Jan  8 06:33:48 2014 us=2026   rcvbuf = 65536
Wed Jan  8 06:33:48 2014 us=2187   sndbuf = 65536
Wed Jan  8 06:33:48 2014 us=2344   sockflags = 0
Wed Jan  8 06:33:48 2014 us=2501   fast_io = DISABLED
Wed Jan  8 06:33:48 2014 us=2670   lzo = 7
Wed Jan  8 06:33:48 2014 us=2831   route_script = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=2992   route_default_gateway = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=3245   route_default_metric = 0
Wed Jan  8 06:33:48 2014 us=3455   route_noexec = DISABLED
Wed Jan  8 06:33:48 2014 us=3631   route_delay = 0
Wed Jan  8 06:33:48 2014 us=3805   route_delay_window = 30
Wed Jan  8 06:33:48 2014 us=3968   route_delay_defined = DISABLED
Wed Jan  8 06:33:48 2014 us=4131   route_nopull = DISABLED
Wed Jan  8 06:33:48 2014 us=4295   route_gateway_via_dhcp = DISABLED
Wed Jan  8 06:33:48 2014 us=4458   max_routes = 100
Wed Jan  8 06:33:48 2014 us=4620   allow_pull_fqdn = DISABLED
Wed Jan  8 06:33:48 2014 us=4831   route 192.168.1.0/255.255.255.0/nil/nil
Wed Jan  8 06:33:48 2014 us=5006   management_addr = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=5231   management_port = 0
Wed Jan  8 06:33:48 2014 us=5435   management_user_pass = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=5610   management_log_history_cache = 250
Wed Jan  8 06:33:48 2014 us=5779   management_echo_buffer_size = 100
Wed Jan  8 06:33:48 2014 us=5942   management_write_peer_info_file = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=6103   management_client_user = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=6270   management_client_group = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=6436   management_flags = 0
Wed Jan  8 06:33:48 2014 us=6597   shared_secret_file = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=6762   key_direction = 1
Wed Jan  8 06:33:48 2014 us=6923   ciphername_defined = ENABLED
Wed Jan  8 06:33:48 2014 us=7136   ciphername = 'AES-128-CBC'
Wed Jan  8 06:33:48 2014 us=7316   authname_defined = ENABLED
Wed Jan  8 06:33:48 2014 us=7523   authname = 'SHA1'
Wed Jan  8 06:33:48 2014 us=7690   prng_hash = 'SHA1'
Wed Jan  8 06:33:48 2014 us=7857   prng_nonce_secret_len = 16
Wed Jan  8 06:33:48 2014 us=8064   keysize = 0
Wed Jan  8 06:33:48 2014 us=8291   engine = DISABLED
Wed Jan  8 06:33:48 2014 us=8689   replay = ENABLED
Wed Jan  8 06:33:48 2014 us=8947   mute_replay_warnings = DISABLED
Wed Jan  8 06:33:48 2014 us=9176   replay_window = 64
Wed Jan  8 06:33:48 2014 us=9353   replay_time = 15
Wed Jan  8 06:33:48 2014 us=9561   packet_id_file = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=9730   use_iv = ENABLED
Wed Jan  8 06:33:48 2014 us=9895   test_crypto = DISABLED
Wed Jan  8 06:33:48 2014 us=10055   tls_server = ENABLED
Wed Jan  8 06:33:48 2014 us=10217   tls_client = DISABLED
Wed Jan  8 06:33:48 2014 us=10383   key_method = 2
Wed Jan  8 06:33:48 2014 us=10548   ca_file = 'ca.crt'
Wed Jan  8 06:33:48 2014 us=10709   ca_path = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=10969   dh_file = 'dh1024.pem'
Wed Jan  8 06:33:48 2014 us=11230   cert_file = 'server.crt'
Wed Jan  8 06:33:48 2014 us=11447   priv_key_file = 'server.key'
Wed Jan  8 06:33:48 2014 us=11622   pkcs12_file = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=11792   cipher_list = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=11955   tls_verify = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=12122   tls_export_cert = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=12282   tls_remote = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=12447   crl_file = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=12607   ns_cert_type = 0
Wed Jan  8 06:33:48 2014 us=12768   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=12929   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=13142   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=13318   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=13530   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=13698   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=13865   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=14033   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=14195   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=14360   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=14525   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=14692   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=14856   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=15059   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=15238   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=15449   remote_cert_ku[i] = 0
Wed Jan  8 06:33:48 2014 us=15623   remote_cert_eku = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=15792   tls_timeout = 2
Wed Jan  8 06:33:48 2014 us=15955   renegotiate_bytes = 0
Wed Jan  8 06:33:48 2014 us=16201   renegotiate_packets = 0
Wed Jan  8 06:33:48 2014 us=16462   renegotiate_seconds = 3600
Wed Jan  8 06:33:48 2014 us=16673   handshake_window = 60
Wed Jan  8 06:33:48 2014 us=16881   transition_window = 3600
Wed Jan  8 06:33:48 2014 us=17091   single_session = DISABLED
Wed Jan  8 06:33:48 2014 us=17273   push_peer_info = DISABLED
Wed Jan  8 06:33:48 2014 us=17476   tls_exit = DISABLED
Wed Jan  8 06:33:48 2014 us=17652   tls_auth_file = 'ta.key'
Wed Jan  8 06:33:48 2014 us=17817   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=17980   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=18146   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=18311   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=18566   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=18777   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=18948   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=19207   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=19423   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=19604   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=19772   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=19938   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=20104   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=20271   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=20435   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=20600   pkcs11_protected_authentication = DISABLED
Wed Jan  8 06:33:48 2014 us=20773   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=20940   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=21160   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=21340   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=21556   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=21729   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=21899   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=22066   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=22234   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=22403   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=22662   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=22841   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=23053   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=23236   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=23446   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=23624   pkcs11_private_mode = 00000000
Wed Jan  8 06:33:48 2014 us=23791   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=23953   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=24194   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=24451   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=24660   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=24864   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=25080   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=25258   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=25467   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=25641   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=25806   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=25970   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=26132   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=26314   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=26480   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=26643   pkcs11_cert_private = DISABLED
Wed Jan  8 06:33:48 2014 us=26807   pkcs11_pin_cache_period = -1
Wed Jan  8 06:33:48 2014 us=26966   pkcs11_id = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=27223   pkcs11_id_management = DISABLED
Wed Jan  8 06:33:48 2014 us=27495   server_network = 192.168.1.0
Wed Jan  8 06:33:48 2014 us=27699   server_netmask = 255.255.255.0
Wed Jan  8 06:33:48 2014 us=27930   server_network_ipv6 = ::
Wed Jan  8 06:33:48 2014 us=28111   server_netbits_ipv6 = 0
Wed Jan  8 06:33:48 2014 us=28296   server_bridge_ip = 0.0.0.0
Wed Jan  8 06:33:48 2014 us=28559   server_bridge_netmask = 0.0.0.0
Wed Jan  8 06:33:48 2014 us=28808   server_bridge_pool_start = 0.0.0.0
Wed Jan  8 06:33:48 2014 us=29004   server_bridge_pool_end = 0.0.0.0
Wed Jan  8 06:33:48 2014 us=29230   push_entry = 'route 10.0.0.0 255.0.0.0'
Wed Jan  8 06:33:48 2014 us=29437   push_entry = 'redirect-gateway def1'
Wed Jan  8 06:33:48 2014 us=29610   push_entry = 'dhcp-option DNS 10.255.255.254'
Wed Jan  8 06:33:48 2014 us=29777   push_entry = 'dhcp-option DNS 8.8.4.4'
Wed Jan  8 06:33:48 2014 us=29942   push_entry = 'route 192.168.1.0 255.255.255.0'
Wed Jan  8 06:33:48 2014 us=30105   push_entry = 'topology net30'
Wed Jan  8 06:33:48 2014 us=30272   push_entry = 'ping 10'
Wed Jan  8 06:33:48 2014 us=30436   push_entry = 'ping-restart 120'
Wed Jan  8 06:33:48 2014 us=30601   ifconfig_pool_defined = ENABLED
Wed Jan  8 06:33:48 2014 us=30784   ifconfig_pool_start = 192.168.1.4
Wed Jan  8 06:33:48 2014 us=30964   ifconfig_pool_end = 192.168.1.251
Wed Jan  8 06:33:48 2014 us=31197   ifconfig_pool_netmask = 0.0.0.0
Wed Jan  8 06:33:48 2014 us=31374   ifconfig_pool_persist_filename = 'ipp.txt'
Wed Jan  8 06:33:48 2014 us=31588   ifconfig_pool_persist_refresh_freq = 600
Wed Jan  8 06:33:48 2014 us=31754   ifconfig_ipv6_pool_defined = DISABLED
Wed Jan  8 06:33:48 2014 us=31931   ifconfig_ipv6_pool_base = ::
Wed Jan  8 06:33:48 2014 us=32175   ifconfig_ipv6_pool_netbits = 0
Wed Jan  8 06:33:48 2014 us=32381   n_bcast_buf = 256
Wed Jan  8 06:33:48 2014 us=32634   tcp_queue_limit = 64
Wed Jan  8 06:33:48 2014 us=32844   real_hash_size = 256
Wed Jan  8 06:33:48 2014 us=33059   virtual_hash_size = 256
Wed Jan  8 06:33:48 2014 us=33267   client_connect_script = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=33485   learn_address_script = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=33663   client_disconnect_script = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=33829   client_config_dir = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=33991   ccd_exclusive = DISABLED
Wed Jan  8 06:33:48 2014 us=34156   tmp_dir = '/tmp'
Wed Jan  8 06:33:48 2014 us=34317   push_ifconfig_defined = DISABLED
Wed Jan  8 06:33:48 2014 us=34594   push_ifconfig_local = 0.0.0.0
Wed Jan  8 06:33:48 2014 us=34791   push_ifconfig_remote_netmask = 0.0.0.0
Wed Jan  8 06:33:48 2014 us=34958   push_ifconfig_ipv6_defined = DISABLED
Wed Jan  8 06:33:48 2014 us=35233   push_ifconfig_ipv6_local = ::/0
Wed Jan  8 06:33:48 2014 us=35465   push_ifconfig_ipv6_remote = ::
Wed Jan  8 06:33:48 2014 us=35642   enable_c2c = ENABLED
Wed Jan  8 06:33:48 2014 us=35804   duplicate_cn = DISABLED
Wed Jan  8 06:33:48 2014 us=35968   cf_max = 0
Wed Jan  8 06:33:48 2014 us=36130   cf_per = 0
Wed Jan  8 06:33:48 2014 us=36295   max_clients = 10
Wed Jan  8 06:33:48 2014 us=36461   max_routes_per_client = 256
Wed Jan  8 06:33:48 2014 us=36623   auth_user_pass_verify_script = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=36789   auth_user_pass_verify_script_via_file = DISABLED
Wed Jan  8 06:33:48 2014 us=36953   ssl_flags = 0
Wed Jan  8 06:33:48 2014 us=37169   port_share_host = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=37344   port_share_port = 0
Wed Jan  8 06:33:48 2014 us=37556   client = DISABLED
Wed Jan  8 06:33:48 2014 us=37721   pull = DISABLED
Wed Jan  8 06:33:48 2014 us=37882   auth_user_pass_file = '[UNDEF]'
Wed Jan  8 06:33:48 2014 us=38065 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Wed Jan  8 06:33:48 2014 us=40260 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan  8 06:33:48 2014 us=84440 Diffie-Hellman initialized with 1024 bit key
Wed Jan  8 06:33:48 2014 us=102947 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Jan  8 06:33:48 2014 us=103475 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan  8 06:33:48 2014 us=103726 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan  8 06:33:48 2014 us=104011 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Jan  8 06:33:48 2014 us=104571 Socket Buffers: R=[163840->131072] S=[163840->131072]
Wed Jan  8 06:33:48 2014 us=106330 ROUTE default_gateway=10.0.0.1
Wed Jan  8 06:33:48 2014 us=119343 TUN/TAP device tun0 opened
Wed Jan  8 06:33:48 2014 us=119785 TUN/TAP TX queue length set to 100
Wed Jan  8 06:33:48 2014 us=120094 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jan  8 06:33:48 2014 us=120640 /sbin/ifconfig tun0 192.168.1.1 pointopoint 192.168.1.2 mtu 1500
Wed Jan  8 06:33:48 2014 us=144682 /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 192.168.1.2
Wed Jan  8 06:33:48 2014 us=162859 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan  8 06:33:48 2014 us=191855 UDPv4 link local (bound): [AF_INET]10.5.4.2:1194
Wed Jan  8 06:33:48 2014 us=192480 UDPv4 link remote: [undef]
Wed Jan  8 06:33:48 2014 us=192765 MULTI: multi_init called, r=256 v=256
Wed Jan  8 06:33:48 2014 us=193868 IFCONFIG POOL: base=192.168.1.4 size=62, ipv6=0
Wed Jan  8 06:33:48 2014 us=194115 ifconfig_pool_read(), in='client,192.168.1.4', TODO: IPv6
Wed Jan  8 06:33:48 2014 us=194471 succeeded -> ifconfig_pool_set()
Wed Jan  8 06:33:48 2014 us=194668 IFCONFIG POOL LIST
Wed Jan  8 06:33:48 2014 us=194837 client,192.168.1.4
Wed Jan  8 06:33:48 2014 us=195363 Initialization Sequence Completed
Wed Jan  8 06:33:57 2014 us=808943 MULTI: multi_create_instance called
Wed Jan  8 06:33:57 2014 us=809825 208.54.38.224:41361 Re-using SSL/TLS context
Wed Jan  8 06:33:57 2014 us=810490 208.54.38.224:41361 LZO compression initialized
Wed Jan  8 06:33:57 2014 us=812498 208.54.38.224:41361 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Jan  8 06:33:57 2014 us=812812 208.54.38.224:41361 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan  8 06:33:57 2014 us=813468 208.54.38.224:41361 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Wed Jan  8 06:33:57 2014 us=813760 208.54.38.224:41361 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Wed Jan  8 06:33:57 2014 us=814179 208.54.38.224:41361 Local Options hash (VER=V4): 'a2e63101'
Wed Jan  8 06:33:57 2014 us=814505 208.54.38.224:41361 Expected Remote Options hash (VER=V4): '272f1b58'
RWed Jan  8 06:33:57 2014 us=815442 208.54.38.224:41361 TLS: Initial packet from [AF_INET]208.54.38.224:41361, sid=5ea0b6fd 4027d853
WRRWRWRWWWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWed Jan  8 06:33:59 2014 us=705425 208.54.38.224:41361 VERIFY OK: depth=1, /C=US/ST=UT/L=SaltLakeCity/O=Testing/OU=changeme/CN=changeme/name=changeme/emailAddress=thomas.e.apgood@gmail.com
Wed Jan  8 06:33:59 2014 us=707957 208.54.38.224:41361 VERIFY OK: depth=0, /C=US/ST=UT/L=SaltLakeCity/O=Testing/OU=changeme/CN=client/name=changeme/emailAddress=thomas.e.apgood@gmail.com
WRWRWRWRWWWWRWRWRWRWRWRWRWRWRWRRRRWRWRWRWed Jan  8 06:34:00 2014 us=392897 208.54.38.224:41361 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jan  8 06:34:00 2014 us=393256 208.54.38.224:41361 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan  8 06:34:00 2014 us=393469 208.54.38.224:41361 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jan  8 06:34:00 2014 us=393674 208.54.38.224:41361 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WWWRRRWed Jan  8 06:34:00 2014 us=526569 208.54.38.224:41361 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan  8 06:34:00 2014 us=527010 208.54.38.224:41361 [client] Peer Connection Initiated with [AF_INET]208.54.38.224:41361
Wed Jan  8 06:34:00 2014 us=527546 client/208.54.38.224:41361 MULTI_sva: pool returned IPv4=192.168.1.6, IPv6=bccd:800:8ced:200:14c2:700:b4ea:fd00
Wed Jan  8 06:34:00 2014 us=528179 client/208.54.38.224:41361 MULTI: Learn: 192.168.1.6 -> client/208.54.38.224:41361
Wed Jan  8 06:34:00 2014 us=528401 client/208.54.38.224:41361 MULTI: primary virtual IP for client/208.54.38.224:41361: 192.168.1.6
RWed Jan  8 06:34:02 2014 us=826489 client/208.54.38.224:41361 PUSH: Received control message: 'PUSH_REQUEST'
Wed Jan  8 06:34:02 2014 us=826824 client/208.54.38.224:41361 send_push_reply(): safe_cap=960
Wed Jan  8 06:34:02 2014 us=827496 client/208.54.38.224:41361 SENT CONTROL [client]: 'PUSH_REPLY,route 10.0.0.0 255.0.0.0,redirect-gateway def1,dhcp-option DNS 10.255.255.254,dhcp-option DNS 8.8.4.4,route 192.168.1.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.1.6 192.168.1.5' (status=1)
WWWWRRRRWed Jan  8 06:34:03 2014 us=110980 client/208.54.38.224:41361 MULTI: bad source address from client [::], packet dropped
RWed Jan  8 06:34:03 2014 us=111727 client/208.54.38.224:41361 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRWed Jan  8 06:34:20 2014 us=86478 client/208.54.38.224:41361 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
--((Multiple lines all saying bad source address))
RWed Jan  8 06:34:20 2014 us=88234 client/208.54.38.224:41361 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwWRwRwRwRwRwRwRwRwRwRwRwRwRwWRwRwRwRwRwRWed Jan  8 06:34:34 2014 us=343885 client/208.54.38.224:41361 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRwRwRwRwRwRwRwRwWRwRwRwRwRwRwRwRwRwRwRwRwRwRwRwWRwRwRwRwRwRwRwRwRWed Jan  8 06:34:57 2014 us=791822 client/208.54.38.224:41361 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRWed Jan  8 06:34:58 2014 us=208529 client/208.54.38.224:41361 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwWWWed Jan  8 06:35:17 2014 us=313734 MULTI: multi_create_instance called
Wed Jan  8 06:35:17 2014 us=314244 208.54.38.224:64990 Re-using SSL/TLS context
Wed Jan  8 06:35:17 2014 us=314537 208.54.38.224:64990 LZO compression initialized
Wed Jan  8 06:35:17 2014 us=315500 208.54.38.224:64990 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Jan  8 06:35:17 2014 us=315809 208.54.38.224:64990 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan  8 06:35:17 2014 us=316355 208.54.38.224:64990 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Wed Jan  8 06:35:17 2014 us=316634 208.54.38.224:64990 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Wed Jan  8 06:35:17 2014 us=316982 208.54.38.224:64990 Local Options hash (VER=V4): 'a2e63101'
Wed Jan  8 06:35:17 2014 us=317291 208.54.38.224:64990 Expected Remote Options hash (VER=V4): '272f1b58'
RWed Jan  8 06:35:17 2014 us=317815 208.54.38.224:64990 TLS: Initial packet from [AF_INET]208.54.38.224:64990, sid=e86bc04f a7d004e0
WRRWRWRWWWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWed Jan  8 06:35:20 2014 us=290660 208.54.38.224:64990 VERIFY OK: depth=1, /C=US/ST=UT/L=SaltLakeCity/O=Testing/OU=changeme/CN=changeme/name=changeme/emailAddress=thomas.e.apgood@gmail.com
Wed Jan  8 06:35:20 2014 us=293251 208.54.38.224:64990 VERIFY OK: depth=0, /C=US/ST=UT/L=SaltLakeCity/O=Testing/OU=changeme/CN=client/name=changeme/emailAddress=thomas.e.apgood@gmail.com
WRWRWRWRWWWWRWRWRWRWRWRWRWRWRWRRRRWRWRWRWed Jan  8 06:35:21 2014 us=826319 208.54.38.224:64990 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jan  8 06:35:21 2014 us=826629 208.54.38.224:64990 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan  8 06:35:21 2014 us=826836 208.54.38.224:64990 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jan  8 06:35:21 2014 us=827052 208.54.38.224:64990 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WWWRRWWRWed Jan  8 06:35:25 2014 us=617877 208.54.38.224:64990 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan  8 06:35:25 2014 us=618416 208.54.38.224:64990 [client] Peer Connection Initiated with [AF_INET]208.54.38.224:64990
Wed Jan  8 06:35:25 2014 us=620774 MULTI: new connection by client 'client' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Wed Jan  8 06:35:25 2014 us=621112 MULTI_sva: pool returned IPv4=192.168.1.6, IPv6=::f8be:cebe:20b8:fd00
Wed Jan  8 06:35:25 2014 us=621894 MULTI: Learn: 192.168.1.6 -> client/208.54.38.224:64990
Wed Jan  8 06:35:25 2014 us=622175 MULTI: primary virtual IP for client/208.54.38.224:64990: 192.168.1.6
RWed Jan  8 06:35:27 2014 us=884179 client/208.54.38.224:64990 PUSH: Received control message: 'PUSH_REQUEST'
Wed Jan  8 06:35:27 2014 us=884437 client/208.54.38.224:64990 send_push_reply(): safe_cap=960
Wed Jan  8 06:35:27 2014 us=885094 client/208.54.38.224:64990 SENT CONTROL [client]: 'PUSH_REPLY,route 10.0.0.0 255.0.0.0,redirect-gateway def1,dhcp-option DNS 10.255.255.254,dhcp-option DNS 8.8.4.4,route 192.168.1.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.1.6 192.168.1.5' (status=1)
WWWWRRRRWed Jan  8 06:35:28 2014 us=283260 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RWed Jan  8 06:35:28 2014 us=420987 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
--((Multiple lines all saying bad source address))
RWed Jan  8 06:35:49 2014 us=234882 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRwRwRwRwRwRwRwWRwRwRwRwRWed Jan  8 06:35:59 2014 us=333510 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRwRwRwRwRwRwRwRwRwRwRWwRwRwRwRwRwRwRwRwRwRwRwRwRwRwRwRwRwRwRWwRwRwRwRwRwRwRwRwRwRwRwRwRwRwRwRWed Jan  8 06:36:19 2014 us=741840 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRWed Jan  8 06:36:20 2014 us=165338 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRwRwRwRwRwRwRwRwRwRwRwWRwRwRwRwRwRwRwRwRwRwRwRwRWed Jan  8 06:36:31 2014 us=327967 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwRwRwrWRwRwrWRwRwRwrWrWRwRwRwRwRwrWRWed Jan  8 06:36:33 2014 us=109669 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
RwrWrWRwRwRWed Jan  8 06:36:33 2014 us=523047 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
--((Multiple lines all saying bad source address))
RWed Jan  8 06:42:11 2014 us=547263 client/208.54.38.224:64990 MULTI: bad source address from client [fe80::4018:7a0c:963d:ba87], packet dropped
WWWWWWWWWWWWWWWWWWWWWWWWed Jan  8 06:46:12 2014 us=18407 client/208.54.38.224:64990 [client] Inactivity timeout (--ping-restart), restarting
Wed Jan  8 06:46:12 2014 us=18819 client/208.54.38.224:64990 SIGUSR1[soft,ping-restart] received, client-instance restarting

and finally here is my iptables:

# Generated by iptables-save v1.4.14 on Wed Jan  8 07:55:20 2014
*filter
:INPUT ACCEPT [13:1114]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i tun0 -j ACCEPT
-A INPUT -i eht0 -j ACCEPT
-A FORWARD -d 10.255.255.254/32 -i tun0 -j ACCEPT
-A FORWARD -d 10.255.255.254/32 -i eht0 -j ACCEPT
-A OUTPUT -j ACCEPT
COMMIT
# Completed on Wed Jan  8 07:55:20 2014

tapgood

Oh and here is my client log as well:

Fri Mar 21 15:27:25 2014 us=235322 Current Parameter Settings:
Fri Mar 21 15:27:25 2014 us=237324   config = 'clienttunnel.ovpn'
Fri Mar 21 15:27:25 2014 us=237324   mode = 0
Fri Mar 21 15:27:25 2014 us=237324   show_ciphers = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   show_digests = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   show_engines = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   genkey = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   key_pass_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=237324   show_tls_ciphers = DISABLED
Fri Mar 21 15:27:25 2014 us=237324 Connection profiles [default]:
Fri Mar 21 15:27:25 2014 us=237324   proto = udp
Fri Mar 21 15:27:25 2014 us=237324   local = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=237324   local_port = 0
Fri Mar 21 15:27:25 2014 us=237324   remote = 'x.x.x.x'
Fri Mar 21 15:27:25 2014 us=237324   remote_port = 1194
Fri Mar 21 15:27:25 2014 us=237324   remote_float = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   bind_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   bind_local = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   connect_retry_seconds = 5
Fri Mar 21 15:27:25 2014 us=237324   connect_timeout = 10
Fri Mar 21 15:27:25 2014 us=237324   connect_retry_max = 0
Fri Mar 21 15:27:25 2014 us=237324   socks_proxy_server = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=237324   socks_proxy_port = 0
Fri Mar 21 15:27:25 2014 us=237324   socks_proxy_retry = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   tun_mtu = 1500
Fri Mar 21 15:27:25 2014 us=237324   tun_mtu_defined = ENABLED
Fri Mar 21 15:27:25 2014 us=237324   link_mtu = 1500
Fri Mar 21 15:27:25 2014 us=237324   link_mtu_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   tun_mtu_extra = 0
Fri Mar 21 15:27:25 2014 us=237324   tun_mtu_extra_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   mtu_discover_type = -1
Fri Mar 21 15:27:25 2014 us=237324   fragment = 0
Fri Mar 21 15:27:25 2014 us=237324   mssfix = 1450
Fri Mar 21 15:27:25 2014 us=237324   explicit_exit_notification = 0
Fri Mar 21 15:27:25 2014 us=237324 Connection profiles END
Fri Mar 21 15:27:25 2014 us=237324   remote_random = DISABLED
Fri Mar 21 15:27:25 2014 us=237324   ipchange = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   dev = 'tun'
Fri Mar 21 15:27:25 2014 us=238324   dev_type = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   dev_node = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   lladdr = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   topology = 1
Fri Mar 21 15:27:25 2014 us=238324   tun_ipv6 = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   ifconfig_local = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   ifconfig_remote_netmask = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   ifconfig_noexec = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   ifconfig_nowarn = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   ifconfig_ipv6_local = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   ifconfig_ipv6_netbits = 0
Fri Mar 21 15:27:25 2014 us=238324   ifconfig_ipv6_remote = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   shaper = 0
Fri Mar 21 15:27:25 2014 us=238324   mtu_test = 0
Fri Mar 21 15:27:25 2014 us=238324   mlock = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   keepalive_ping = 0
Fri Mar 21 15:27:25 2014 us=238324   keepalive_timeout = 0
Fri Mar 21 15:27:25 2014 us=238324   inactivity_timeout = 0
Fri Mar 21 15:27:25 2014 us=238324   ping_send_timeout = 0
Fri Mar 21 15:27:25 2014 us=238324   ping_rec_timeout = 0
Fri Mar 21 15:27:25 2014 us=238324   ping_rec_timeout_action = 0
Fri Mar 21 15:27:25 2014 us=238324   ping_timer_remote = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   remap_sigusr1 = 0
Fri Mar 21 15:27:25 2014 us=238324   persist_tun = ENABLED
Fri Mar 21 15:27:25 2014 us=238324   persist_local_ip = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   persist_remote_ip = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   persist_key = ENABLED
Fri Mar 21 15:27:25 2014 us=238324   passtos = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   resolve_retry_seconds = 1000000000
Fri Mar 21 15:27:25 2014 us=238324   username = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   groupname = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   chroot_dir = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   cd_dir = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   writepid = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   up_script = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   down_script = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=238324   down_pre = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   up_restart = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   up_delay = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   daemon = DISABLED
Fri Mar 21 15:27:25 2014 us=238324   inetd = 0
Fri Mar 21 15:27:25 2014 us=238324   log = ENABLED
Fri Mar 21 15:27:25 2014 us=239325   suppress_timestamps = DISABLED
Fri Mar 21 15:27:25 2014 us=239325   nice = 0
Fri Mar 21 15:27:25 2014 us=239325   verbosity = 5
Fri Mar 21 15:27:25 2014 us=239325   mute = 0
Fri Mar 21 15:27:25 2014 us=239325   status_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=239325   status_file_version = 1
Fri Mar 21 15:27:25 2014 us=239325   status_file_update_freq = 60
Fri Mar 21 15:27:25 2014 us=239325   occ = ENABLED
Fri Mar 21 15:27:25 2014 us=239325   rcvbuf = 0
Fri Mar 21 15:27:25 2014 us=239325   sndbuf = 0
Fri Mar 21 15:27:25 2014 us=239325   sockflags = 0
Fri Mar 21 15:27:25 2014 us=239325   fast_io = DISABLED
Fri Mar 21 15:27:25 2014 us=239325   lzo = 7
Fri Mar 21 15:27:25 2014 us=239325   route_script = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=239325   route_default_gateway = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=239325   route_default_metric = 0
Fri Mar 21 15:27:25 2014 us=239325   route_noexec = DISABLED
Fri Mar 21 15:27:25 2014 us=239325   route_delay = 5
Fri Mar 21 15:27:25 2014 us=239325   route_delay_window = 30
Fri Mar 21 15:27:25 2014 us=239325   route_delay_defined = ENABLED
Fri Mar 21 15:27:25 2014 us=239325   route_nopull = DISABLED
Fri Mar 21 15:27:25 2014 us=239325   route_gateway_via_dhcp = DISABLED
Fri Mar 21 15:27:25 2014 us=239325   max_routes = 100
Fri Mar 21 15:27:25 2014 us=239325   allow_pull_fqdn = DISABLED
Fri Mar 21 15:27:25 2014 us=239325   [redirect_default_gateway local=0]
Fri Mar 21 15:27:25 2014 us=239325   management_addr = '127.0.0.1'
Fri Mar 21 15:27:25 2014 us=239325   management_port = 25340
Fri Mar 21 15:27:25 2014 us=239325   management_user_pass = 'stdin'
Fri Mar 21 15:27:25 2014 us=239325   management_log_history_cache = 250
Fri Mar 21 15:27:25 2014 us=239325   management_echo_buffer_size = 100
Fri Mar 21 15:27:25 2014 us=239325   management_write_peer_info_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=239325   management_client_user = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=239325   management_client_group = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=239325   management_flags = 6
Fri Mar 21 15:27:25 2014 us=239325   shared_secret_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=239325   key_direction = 2
Fri Mar 21 15:27:25 2014 us=239325   ciphername_defined = ENABLED
Fri Mar 21 15:27:25 2014 us=239325   ciphername = 'AES-128-CBC'
Fri Mar 21 15:27:25 2014 us=239325   authname_defined = ENABLED
Fri Mar 21 15:27:25 2014 us=239325   authname = 'SHA1'
Fri Mar 21 15:27:25 2014 us=239325   prng_hash = 'SHA1'
Fri Mar 21 15:27:25 2014 us=239325   prng_nonce_secret_len = 16
Fri Mar 21 15:27:25 2014 us=239325   keysize = 0
Fri Mar 21 15:27:25 2014 us=239325   engine = DISABLED
Fri Mar 21 15:27:25 2014 us=239325   replay = ENABLED
Fri Mar 21 15:27:25 2014 us=240326   mute_replay_warnings = DISABLED
Fri Mar 21 15:27:25 2014 us=240326   replay_window = 64
Fri Mar 21 15:27:25 2014 us=240326   replay_time = 15
Fri Mar 21 15:27:25 2014 us=240326   packet_id_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   use_iv = ENABLED
Fri Mar 21 15:27:25 2014 us=240326   test_crypto = DISABLED
Fri Mar 21 15:27:25 2014 us=240326   tls_server = DISABLED
Fri Mar 21 15:27:25 2014 us=240326   tls_client = ENABLED
Fri Mar 21 15:27:25 2014 us=240326   key_method = 2
Fri Mar 21 15:27:25 2014 us=240326   ca_file = 'C:\Program Files (x86)\OpenVPN\config\ca.crt'
Fri Mar 21 15:27:25 2014 us=240326   ca_path = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   dh_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   cert_file = 'C:\Program Files (x86)\OpenVPN\config\client.crt'
Fri Mar 21 15:27:25 2014 us=240326   priv_key_file = 'C:\Program Files (x86)\OpenVPN\config\client.key'
Fri Mar 21 15:27:25 2014 us=240326   pkcs12_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   cryptoapi_cert = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   cipher_list = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   tls_verify = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   tls_export_cert = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   verify_x509_type = 0
Fri Mar 21 15:27:25 2014 us=240326   verify_x509_name = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   crl_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   ns_cert_type = 1
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_ku[i] = 0
Fri Mar 21 15:27:25 2014 us=240326   remote_cert_eku = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=240326   ssl_flags = 0
Fri Mar 21 15:27:25 2014 us=240326   tls_timeout = 2
Fri Mar 21 15:27:25 2014 us=240326   renegotiate_bytes = 0
Fri Mar 21 15:27:25 2014 us=240326   renegotiate_packets = 0
Fri Mar 21 15:27:25 2014 us=240326   renegotiate_seconds = 3600
Fri Mar 21 15:27:25 2014 us=240326   handshake_window = 60
Fri Mar 21 15:27:25 2014 us=241326   transition_window = 3600
Fri Mar 21 15:27:25 2014 us=241326   single_session = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   push_peer_info = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   tls_exit = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   tls_auth_file = 'ta.key'
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_protected_authentication = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_private_mode = 00000000
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=241326   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_cert_private = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_pin_cache_period = -1
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_id = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=242327   pkcs11_id_management = DISABLED
Fri Mar 21 15:27:25 2014 us=242327   server_network = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=242327   server_netmask = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   server_network_ipv6 = ::
Fri Mar 21 15:27:25 2014 us=244330   server_netbits_ipv6 = 0
Fri Mar 21 15:27:25 2014 us=244330   server_bridge_ip = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   server_bridge_netmask = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   server_bridge_pool_start = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   server_bridge_pool_end = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_pool_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_pool_start = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_pool_end = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_pool_netmask = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_pool_persist_refresh_freq = 600
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_ipv6_pool_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_ipv6_pool_base = ::
Fri Mar 21 15:27:25 2014 us=244330   ifconfig_ipv6_pool_netbits = 0
Fri Mar 21 15:27:25 2014 us=244330   n_bcast_buf = 256
Fri Mar 21 15:27:25 2014 us=244330   tcp_queue_limit = 64
Fri Mar 21 15:27:25 2014 us=244330   real_hash_size = 256
Fri Mar 21 15:27:25 2014 us=244330   virtual_hash_size = 256
Fri Mar 21 15:27:25 2014 us=244330   client_connect_script = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=244330   learn_address_script = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=244330   client_disconnect_script = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=244330   client_config_dir = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=244330   ccd_exclusive = DISABLED
Fri Mar 21 15:27:25 2014 us=244330   tmp_dir = 'C:\Users\Thomas\AppData\Local\Temp\'
Fri Mar 21 15:27:25 2014 us=244330   push_ifconfig_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=244330   push_ifconfig_local = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   push_ifconfig_remote_netmask = 0.0.0.0
Fri Mar 21 15:27:25 2014 us=244330   push_ifconfig_ipv6_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=244330   push_ifconfig_ipv6_local = ::/0
Fri Mar 21 15:27:25 2014 us=244330   push_ifconfig_ipv6_remote = ::
Fri Mar 21 15:27:25 2014 us=244330   enable_c2c = DISABLED
Fri Mar 21 15:27:25 2014 us=244330   duplicate_cn = DISABLED
Fri Mar 21 15:27:25 2014 us=244330   cf_max = 0
Fri Mar 21 15:27:25 2014 us=245329   cf_per = 0
Fri Mar 21 15:27:25 2014 us=245329   max_clients = 1024
Fri Mar 21 15:27:25 2014 us=245329   max_routes_per_client = 256
Fri Mar 21 15:27:25 2014 us=245329   auth_user_pass_verify_script = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=245329   auth_user_pass_verify_script_via_file = DISABLED
Fri Mar 21 15:27:25 2014 us=245329   client = ENABLED
Fri Mar 21 15:27:25 2014 us=245329   pull = ENABLED
Fri Mar 21 15:27:25 2014 us=245329   auth_user_pass_file = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=245329   show_net_up = DISABLED
Fri Mar 21 15:27:25 2014 us=245329   route_method = 0
Fri Mar 21 15:27:25 2014 us=245329   ip_win32_defined = DISABLED
Fri Mar 21 15:27:25 2014 us=245329   ip_win32_type = 3
Fri Mar 21 15:27:25 2014 us=245329   dhcp_masq_offset = 0
Fri Mar 21 15:27:25 2014 us=245329   dhcp_lease_time = 31536000
Fri Mar 21 15:27:25 2014 us=245329   tap_sleep = 0
Fri Mar 21 15:27:25 2014 us=245329   dhcp_options = DISABLED
Fri Mar 21 15:27:25 2014 us=245329   dhcp_renew = DISABLED
Fri Mar 21 15:27:25 2014 us=245329   dhcp_pre_release = DISABLED
Fri Mar 21 15:27:25 2014 us=245329   dhcp_release = DISABLED
Fri Mar 21 15:27:25 2014 us=245329   domain = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=245329   netbios_scope = '[UNDEF]'
Fri Mar 21 15:27:25 2014 us=245329   netbios_node_type = 0
Fri Mar 21 15:27:25 2014 us=245329   disable_nbt = DISABLED
Fri Mar 21 15:27:25 2014 us=245329 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Fri Mar 21 15:27:25 2014 us=246303 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Mar 21 15:27:25 2014 us=246303 Need hold release from management interface, waiting...
Fri Mar 21 15:27:25 2014 us=319356 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Mar 21 15:27:25 2014 us=421455 MANAGEMENT: CMD 'state on'
Fri Mar 21 15:27:25 2014 us=421455 MANAGEMENT: CMD 'log all on'
Fri Mar 21 15:27:26 2014 us=387113 MANAGEMENT: CMD 'hold off'
Fri Mar 21 15:27:26 2014 us=393116 MANAGEMENT: CMD 'hold release'
Fri Mar 21 15:27:26 2014 us=834457 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri Mar 21 15:27:26 2014 us=834457 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 21 15:27:26 2014 us=834457 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 21 15:27:26 2014 us=834457 LZO compression initialized
Fri Mar 21 15:27:26 2014 us=834457 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri Mar 21 15:27:26 2014 us=835458 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Mar 21 15:27:26 2014 us=835458 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Mar 21 15:27:26 2014 us=835458 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Fri Mar 21 15:27:26 2014 us=835458 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Fri Mar 21 15:27:26 2014 us=835458 Local Options hash (VER=V4): '272f1b58'
Fri Mar 21 15:27:26 2014 us=835458 Expected Remote Options hash (VER=V4): 'a2e63101'
Fri Mar 21 15:27:26 2014 us=835458 UDPv4 link local: [undef]
Fri Mar 21 15:27:26 2014 us=835458 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Fri Mar 21 15:27:26 2014 us=835458 MANAGEMENT: >STATE:1395437246,WAIT,,,
Fri Mar 21 15:27:27 2014 us=45585 MANAGEMENT: >STATE:1395437247,AUTH,,,
Fri Mar 21 15:27:27 2014 us=45585 TLS: Initial packet from [AF_INET]166.70.163.209:1194, sid=0d66c97d 1080fbf1
Fri Mar 21 15:27:27 2014 us=923230 VERIFY OK: depth=1, C=US, ST=UT, L=SaltLakeCity, O=Testing, OU=changeme, CN=changeme, name=changeme, emailAddress=thomas.e.apgood@gmail.com
Fri Mar 21 15:27:27 2014 us=923230 VERIFY OK: nsCertType=SERVER
Fri Mar 21 15:27:27 2014 us=923230 VERIFY OK: depth=0, C=US, ST=UT, L=SaltLakeCity, O=Testing, OU=changeme, CN=server, name=changeme, emailAddress=thomas.e.apgood@gmail.com
Fri Mar 21 15:27:35 2014 us=146358 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Mar 21 15:27:35 2014 us=146358 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 21 15:27:35 2014 us=146358 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Mar 21 15:27:35 2014 us=146358 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 21 15:27:35 2014 us=147330 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Mar 21 15:27:35 2014 us=147330 [server] Peer Connection Initiated with [AF_INET]166.70.163.209:1194
Fri Mar 21 15:27:36 2014 us=326221 MANAGEMENT: >STATE:1395437256,GET_CONFIG,,,
Fri Mar 21 15:27:37 2014 us=425975 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Mar 21 15:27:37 2014 us=582066 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.0.0.0,redirect-gateway def1,dhcp-option DNS 10.255.255.254,dhcp-option DNS 8.8.4.4,route 192.168.1.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.1.6 192.168.1.5'
Fri Mar 21 15:27:37 2014 us=582066 OPTIONS IMPORT: timers and/or timeouts modified
Fri Mar 21 15:27:37 2014 us=582066 OPTIONS IMPORT: --ifconfig/up options modified
Fri Mar 21 15:27:37 2014 us=582066 OPTIONS IMPORT: route options modified
Fri Mar 21 15:27:37 2014 us=582066 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Mar 21 15:27:37 2014 us=648111 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Mar 21 15:27:37 2014 us=648111 MANAGEMENT: >STATE:1395437257,ASSIGN_IP,,192.168.1.6,
Fri Mar 21 15:27:37 2014 us=648111 open_tun, tt->ipv6=0
Fri Mar 21 15:27:37 2014 us=656111 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{C92EC936-D2A7-4AE3-B9EC-24E1A1742448}.tap
Fri Mar 21 15:27:37 2014 us=656111 TAP-Windows Driver Version 9.9 
Fri Mar 21 15:27:37 2014 us=656111 TAP-Windows MTU=1500
Fri Mar 21 15:27:37 2014 us=663144 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.6/255.255.255.252 on interface {C92EC936-D2A7-4AE3-B9EC-24E1A1742448} [DHCP-serv: 192.168.1.5, lease-time: 31536000]
Fri Mar 21 15:27:37 2014 us=663144 DHCP option string: 06080aff fffe0808 0404
Fri Mar 21 15:27:37 2014 us=664117 Successful ARP Flush on interface [30] {C92EC936-D2A7-4AE3-B9EC-24E1A1742448}
Fri Mar 21 15:27:42 2014 us=144301 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Fri Mar 21 15:27:42 2014 us=144301 C:\WINDOWS\system32\route.exe ADD 166.70.163.209 MASK 255.255.255.255 192.168.43.1
Fri Mar 21 15:27:42 2014 us=153303 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Fri Mar 21 15:27:42 2014 us=153303 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 15:27:42 2014 us=153303 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.1.5
Fri Mar 21 15:27:42 2014 us=176321 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 21 15:27:42 2014 us=176321 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 15:27:42 2014 us=176321 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.1.5
Fri Mar 21 15:27:42 2014 us=191336 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 21 15:27:42 2014 us=191336 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 15:27:42 2014 us=191336 MANAGEMENT: >STATE:1395437262,ADD_ROUTES,,,
Fri Mar 21 15:27:42 2014 us=192331 C:\WINDOWS\system32\route.exe ADD 10.0.0.0 MASK 255.0.0.0 192.168.1.5
Fri Mar 21 15:27:42 2014 us=205340 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 21 15:27:42 2014 us=205340 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 15:27:42 2014 us=205340 C:\WINDOWS\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 192.168.1.5
Fri Mar 21 15:27:42 2014 us=220379 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 21 15:27:42 2014 us=220379 Route addition via IPAPI succeeded [adaptive]
Fri Mar 21 15:27:42 2014 us=220379 Initialization Sequence Completed
Fri Mar 21 15:27:42 2014 us=220379 MANAGEMENT: >STATE:1395437262,CONNECTED,SUCCESS,192.168.1.6,x.x.x.x
Fri Mar 21 15:34:21 2014 us=95483 TCP/UDP: Closing socket
Fri Mar 21 15:34:21 2014 us=99485 C:\WINDOWS\system32\route.exe DELETE 192.168.1.0 MASK 255.255.255.0 192.168.1.5
Fri Mar 21 15:34:21 2014 us=108492 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 15:34:21 2014 us=109493 C:\WINDOWS\system32\route.exe DELETE 10.0.0.0 MASK 255.0.0.0 192.168.1.5
Fri Mar 21 15:34:21 2014 us=116497 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 15:34:21 2014 us=117499 C:\WINDOWS\system32\route.exe DELETE 166.70.163.209 MASK 255.255.255.255 192.168.43.1
Fri Mar 21 15:34:21 2014 us=121501 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 15:34:21 2014 us=121501 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 192.168.1.5
Fri Mar 21 15:34:21 2014 us=130508 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 15:34:21 2014 us=130508 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 192.168.1.5
Fri Mar 21 15:34:21 2014 us=140514 Route deletion via IPAPI succeeded [adaptive]
Fri Mar 21 15:34:21 2014 us=140514 Closing TUN/TAP interface
Fri Mar 21 15:34:21 2014 us=142516 SIGTERM[hard,] received, process exiting
Fri Mar 21 15:34:21 2014 us=143517 MANAGEMENT: >STATE:1395437661,EXITING,SIGTERM,,

tapgood

Small update:
Right now I know that I have the push "redirect-gateway def1" option on which should redirect all my internet traffic through the vpn. However, this is no the case, it causes me to lose internet connectivity even though my client machine says it has internet. And taking out that option causes me to have no internet and the client machine to say it has no internet connectivity. In either case I am still unable to ping my Windows server (10.255.255.254) from my windows client over the VPN.

Note: I am trying to connect using a hot spot. Would this make any effect on my VPN versus using a desktop stationed at a remote location? Just a thought.

tapgood

Server ifconfig:

eth0      Link encap:Ethernet  HWaddr b8:27:eb:4b:c7:32
          inet addr:10.5.4.2  Bcast:10.255.255.255  Mask:255.0.0.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:205762 errors:0 dropped:10 overruns:0 frame:0
          TX packets:1337 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:11361172 (10.8 MiB)  TX bytes:137662 (134.4 KiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:243 errors:0 dropped:0 overruns:0 frame:0
          TX packets:243 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:25272 (24.6 KiB)  TX bytes:25272 (24.6 KiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:192.168.1.1  P-t-P:192.168.1.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:922 errors:0 dropped:0 overruns:0 frame:0
          TX packets:53 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:67360 (65.7 KiB)  TX bytes:6512 (6.3 KiB)

Client ipconfig -all:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Apgood
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : ad.uvu.edu

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-C9-2E-C9-36
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::4018:7a0c:963d:ba87%30(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.6(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.252
   Lease Obtained. . . . . . . . . . : Tuesday, March 25, 2014 1:14:58 PM
   Lease Expires . . . . . . . . . . : Wednesday, March 25, 2015 1:14:58 PM
   Default Gateway . . . . . . . . . : 192.168.1.5
   DHCP Server . . . . . . . . . . . : 192.168.1.5
   DHCPv6 IAID . . . . . . . . . . . : 469827529
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-99-6A-51-AC-22-0B-B7-7A-BD

   DNS Servers . . . . . . . . . . . : 10.255.255.254
                                       8.8.4.4
   NetBIOS over Tcpip. . . . . . . . : Enabled

Wireless LAN adapter Local Area Connection* 12:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
   Physical Address. . . . . . . . . : 0C-8B-FD-22-DC-CA
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Bluetooth Network Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
   Physical Address. . . . . . . . . : 0C-8B-FD-22-DC-CD
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

   Connection-specific DNS Suffix  . : ad.uvu.edu
   Description . . . . . . . . . . . : Intel(R) Dual Band Wireless-N 7260
   Physical Address. . . . . . . . . : 0C-8B-FD-22-DC-C9
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::e909:d641:81b8:222c%4(Preferred)
   IPv4 Address. . . . . . . . . . . : 161.28.248.92(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.248.0
   Lease Obtained. . . . . . . . . . : Tuesday, March 25, 2014 8:26:09 AM
   Lease Expires . . . . . . . . . . : Tuesday, March 25, 2014 1:42:20 PM
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 161.28.20.250
   DHCPv6 IAID . . . . . . . . . . . : 353143805
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-99-6A-51-AC-22-0B-B7-7A-BD

   DNS Servers . . . . . . . . . . . : 161.28.140.250
                                       161.28.20.250
                                       161.28.224.90
                                       161.28.224.91
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : AC-22-0B-B7-7A-BD
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter VMware Network Adapter VMnet1:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
1
   Physical Address. . . . . . . . . : 00-50-56-C0-00-01
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::9d3a:a907:6e81:d649%16(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.21.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DHCPv6 IAID . . . . . . . . . . . : 234901590
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-99-6A-51-AC-22-0B-B7-7A-BD

   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VMware Network Adapter VMnet8:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
8
   Physical Address. . . . . . . . . : 00-50-56-C0-00-08
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::e002:e125:e65:a3a2%17(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.10.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DHCPv6 IAID . . . . . . . . . . . : 251678806
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-99-6A-51-AC-22-0B-B7-7A-BD

   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VMware Network Adapter VMnet3:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
3
   Physical Address. . . . . . . . . : 00-50-56-C0-00-03
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::c92a:ec7d:f9b5:7a5c%27(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.31.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DHCPv6 IAID . . . . . . . . . . . : 704663638
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-99-6A-51-AC-22-0B-B7-7A-BD

   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{54460B7C-5301-454C-80CF-78A43323A826}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 2:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.ad.uvu.edu:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter 6TO4 Adapter:

   Connection-specific DNS Suffix  . : ad.uvu.edu
   Description . . . . . . . . . . . : Microsoft 6to4 Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:a11c:f85c::a11c:f85c(Preferred)
   Default Gateway . . . . . . . . . :
   DHCPv6 IAID . . . . . . . . . . . : 218103808
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-99-6A-51-AC-22-0B-B7-7A-BD

   DNS Servers . . . . . . . . . . . : 161.28.140.250
                                       161.28.20.250
                                       161.28.224.90
                                       161.28.224.91
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{607F0EBF-E00E-41CA-9E10-05BBD52DEF18}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{CDC1C120-5B5C-4E20-9603-72CC655D5F03}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{C92EC936-D2A7-4AE3-B9EC-24E1A1742448}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #7
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

tapgood

I performed some more testing and found out that when I ping my local gateway on the server side from the server:

ping -i tun0 10.0.0.1

I get timed out.

I changed the iptables to look more like this

iptables -A INPUT -i tun0 -j ACCEPT
iptables -A INPUT -i eht0 -j ACCEPT
iptables -A FORWARD -i eth0 -j ACCEPT
iptables -A FORWARD -i tun0 -j ACCEPT

I believe this set up should allow any traffic in and any traffic to be forwarded... To be honest I don't know tons about iptables so I could very well be wrong.

But this makes me believe that the problem I have is having to do with the VPN Server (10.5.4.2) and my router (10.0.0.1) no sending the traffic for 192.168.1.0/24 network to the VPN Server.

tapgood

I figured out the problem.

I had not properly configured IP forwarding on my server. As soon as I changed my iptables to:

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT

it worked like a charm.
I found this site super helpful in setting up the IP forwarding

http://www.revsys.com/writings/quicktips/nat.html

Thanks though!!