Problem with routes

gregecslo

Hi all!

I use OpenVPN for 6 years now and it`s a great product.
However I have a problem that I cannot resolve.

I have a tablet with Windows 8.1 Update 1 on it. It is pure Windows it is NOT RT or something... Just normal windows like on notebook 🙂

I have installed latest OpenVPN 32-bit on it and copied config file from my notebook.
I run openvpn client like on my notebook but it doesn`t work.
It does connect, but after that I cant ping ANYthing. Not even my local 10.10.0.0/24 network and not remote 192.168.1.0/24 network.
Also I cannot ping for example 8.8.8.8 or any othe IP.

On rare occasions what is written above does NOT happen and its working just fine.
I don`t get it, I use SAME server, SAME config, SAME WINDOWS version and same OpenVPN client software on my notebook and on my tablet.
On notebook it works every time without any problems.

Here is my config:

dev tun
persist-tun
persist-key
cipher AES-128-CBC
auth SHA1
tls-client
client
remote MYIPADDRESS HERE 1194 udp
lport 0
verify-x509-name "CERT NAME HERE" name
auth-user-pass
ns-cert-type server

<ca>
-----BEGIN CERTIFICATE-----
CERT DATA HERE
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
CERT DATA HERE
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
PRIVATE KEY HERE
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
STATIC KEY HERE
-----END OpenVPN Static key V1-----
</tls-auth>
 key-direction 1

Here is the log from client:

Sat Apr 12 11:28:46 2014 us=851654 Current Parameter Settings:
Sat Apr 12 11:28:46 2014 us=867284   config = 'Work.ovpn'
Sat Apr 12 11:28:46 2014 us=867284   mode = 0
Sat Apr 12 11:28:46 2014 us=867284   show_ciphers = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   show_digests = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   show_engines = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   genkey = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   key_pass_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   show_tls_ciphers = DISABLED
Sat Apr 12 11:28:46 2014 us=867284 Connection profiles [default]:
Sat Apr 12 11:28:46 2014 us=867284   proto = udp
Sat Apr 12 11:28:46 2014 us=867284   local = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   local_port = 0
Sat Apr 12 11:28:46 2014 us=867284   remote = 'SERVER PUBLIC IP HERE'
Sat Apr 12 11:28:46 2014 us=867284   remote_port = 1194
Sat Apr 12 11:28:46 2014 us=867284   remote_float = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   bind_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   bind_local = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   connect_retry_seconds = 5
Sat Apr 12 11:28:46 2014 us=867284   connect_timeout = 10
Sat Apr 12 11:28:46 2014 us=867284   connect_retry_max = 0
Sat Apr 12 11:28:46 2014 us=867284   socks_proxy_server = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   socks_proxy_port = 0
Sat Apr 12 11:28:46 2014 us=867284   socks_proxy_retry = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   tun_mtu = 1500
Sat Apr 12 11:28:46 2014 us=867284   tun_mtu_defined = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   link_mtu = 1500
Sat Apr 12 11:28:46 2014 us=867284   link_mtu_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   tun_mtu_extra = 0
Sat Apr 12 11:28:46 2014 us=867284   tun_mtu_extra_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   mtu_discover_type = -1
Sat Apr 12 11:28:46 2014 us=867284   fragment = 0
Sat Apr 12 11:28:46 2014 us=867284   mssfix = 1450
Sat Apr 12 11:28:46 2014 us=867284   explicit_exit_notification = 0
Sat Apr 12 11:28:46 2014 us=867284 Connection profiles END
Sat Apr 12 11:28:46 2014 us=867284   remote_random = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   ipchange = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   dev = 'tun'
Sat Apr 12 11:28:46 2014 us=867284   dev_type = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   dev_node = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   lladdr = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   topology = 1
Sat Apr 12 11:28:46 2014 us=867284   tun_ipv6 = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_local = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_remote_netmask = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_noexec = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_nowarn = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_ipv6_local = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_ipv6_netbits = 0
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_ipv6_remote = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   shaper = 0
Sat Apr 12 11:28:46 2014 us=867284   mtu_test = 0
Sat Apr 12 11:28:46 2014 us=867284   mlock = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   keepalive_ping = 0
Sat Apr 12 11:28:46 2014 us=867284   keepalive_timeout = 0
Sat Apr 12 11:28:46 2014 us=867284   inactivity_timeout = 0
Sat Apr 12 11:28:46 2014 us=867284   ping_send_timeout = 0
Sat Apr 12 11:28:46 2014 us=867284   ping_rec_timeout = 0
Sat Apr 12 11:28:46 2014 us=867284   ping_rec_timeout_action = 0
Sat Apr 12 11:28:46 2014 us=867284   ping_timer_remote = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   remap_sigusr1 = 0
Sat Apr 12 11:28:46 2014 us=867284   persist_tun = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   persist_local_ip = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   persist_remote_ip = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   persist_key = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   passtos = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   resolve_retry_seconds = 1000000000
Sat Apr 12 11:28:46 2014 us=867284   username = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   groupname = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   chroot_dir = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   cd_dir = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   writepid = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   up_script = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   down_script = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   down_pre = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   up_restart = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   up_delay = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   daemon = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   inetd = 0
Sat Apr 12 11:28:46 2014 us=867284   log = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   suppress_timestamps = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   nice = 0
Sat Apr 12 11:28:46 2014 us=867284   verbosity = 5
Sat Apr 12 11:28:46 2014 us=867284   mute = 0
Sat Apr 12 11:28:46 2014 us=867284   status_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   status_file_version = 1
Sat Apr 12 11:28:46 2014 us=867284   status_file_update_freq = 60
Sat Apr 12 11:28:46 2014 us=867284   occ = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   rcvbuf = 0
Sat Apr 12 11:28:46 2014 us=867284   sndbuf = 0
Sat Apr 12 11:28:46 2014 us=867284   sockflags = 0
Sat Apr 12 11:28:46 2014 us=867284   fast_io = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   lzo = 0
Sat Apr 12 11:28:46 2014 us=867284   route_script = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   route_default_gateway = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   route_default_metric = 0
Sat Apr 12 11:28:46 2014 us=867284   route_noexec = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   route_delay = 5
Sat Apr 12 11:28:46 2014 us=867284   route_delay_window = 30
Sat Apr 12 11:28:46 2014 us=867284   route_delay_defined = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   route_nopull = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   route_gateway_via_dhcp = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   max_routes = 100
Sat Apr 12 11:28:46 2014 us=867284   allow_pull_fqdn = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   management_addr = '127.0.0.1'
Sat Apr 12 11:28:46 2014 us=867284   management_port = 25341
Sat Apr 12 11:28:46 2014 us=867284   management_user_pass = 'stdin'
Sat Apr 12 11:28:46 2014 us=867284   management_log_history_cache = 250
Sat Apr 12 11:28:46 2014 us=867284   management_echo_buffer_size = 100
Sat Apr 12 11:28:46 2014 us=867284   management_write_peer_info_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   management_client_user = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   management_client_group = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   management_flags = 6
Sat Apr 12 11:28:46 2014 us=867284   shared_secret_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   key_direction = 2
Sat Apr 12 11:28:46 2014 us=867284   ciphername_defined = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   ciphername = 'AES-128-CBC'
Sat Apr 12 11:28:46 2014 us=867284   authname_defined = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   authname = 'SHA1'
Sat Apr 12 11:28:46 2014 us=867284   prng_hash = 'SHA1'
Sat Apr 12 11:28:46 2014 us=867284   prng_nonce_secret_len = 16
Sat Apr 12 11:28:46 2014 us=867284   keysize = 0
Sat Apr 12 11:28:46 2014 us=867284   engine = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   replay = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   mute_replay_warnings = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   replay_window = 64
Sat Apr 12 11:28:46 2014 us=867284   replay_time = 15
Sat Apr 12 11:28:46 2014 us=867284   packet_id_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   use_iv = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   test_crypto = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   tls_server = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   tls_client = ENABLED
Sat Apr 12 11:28:46 2014 us=867284   key_method = 2
Sat Apr 12 11:28:46 2014 us=867284   ca_file = '[[INLINE]]'
Sat Apr 12 11:28:46 2014 us=867284   ca_path = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   dh_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   cert_file = '[[INLINE]]'
Sat Apr 12 11:28:46 2014 us=867284   priv_key_file = '[[INLINE]]'
Sat Apr 12 11:28:46 2014 us=867284   pkcs12_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   cryptoapi_cert = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   cipher_list = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   tls_verify = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   tls_export_cert = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   verify_x509_type = 2
Sat Apr 12 11:28:46 2014 us=867284   verify_x509_name = 'CERT NAME HERE'
Sat Apr 12 11:28:46 2014 us=867284   crl_file = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   ns_cert_type = 1
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_ku[i] = 0
Sat Apr 12 11:28:46 2014 us=867284   remote_cert_eku = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   ssl_flags = 0
Sat Apr 12 11:28:46 2014 us=867284   tls_timeout = 2
Sat Apr 12 11:28:46 2014 us=867284   renegotiate_bytes = 0
Sat Apr 12 11:28:46 2014 us=867284   renegotiate_packets = 0
Sat Apr 12 11:28:46 2014 us=867284   renegotiate_seconds = 3600
Sat Apr 12 11:28:46 2014 us=867284   handshake_window = 60
Sat Apr 12 11:28:46 2014 us=867284   transition_window = 3600
Sat Apr 12 11:28:46 2014 us=867284   single_session = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   push_peer_info = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   tls_exit = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   tls_auth_file = '[[INLINE]]'
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_protected_authentication = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_private_mode = 00000000
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_cert_private = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_pin_cache_period = -1
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_id = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   pkcs11_id_management = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   server_network = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   server_netmask = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   server_network_ipv6 = ::
Sat Apr 12 11:28:46 2014 us=867284   server_netbits_ipv6 = 0
Sat Apr 12 11:28:46 2014 us=867284   server_bridge_ip = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   server_bridge_netmask = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   server_bridge_pool_start = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   server_bridge_pool_end = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_pool_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_pool_start = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_pool_end = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_pool_netmask = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_ipv6_pool_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_ipv6_pool_base = ::
Sat Apr 12 11:28:46 2014 us=867284   ifconfig_ipv6_pool_netbits = 0
Sat Apr 12 11:28:46 2014 us=867284   n_bcast_buf = 256
Sat Apr 12 11:28:46 2014 us=867284   tcp_queue_limit = 64
Sat Apr 12 11:28:46 2014 us=867284   real_hash_size = 256
Sat Apr 12 11:28:46 2014 us=867284   virtual_hash_size = 256
Sat Apr 12 11:28:46 2014 us=867284   client_connect_script = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=867284   learn_address_script = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=882920   client_disconnect_script = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=882920   client_config_dir = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=882920   ccd_exclusive = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   tmp_dir = 'C:\Users\Userprofile\AppData\Local\Temp\'
Sat Apr 12 11:28:46 2014 us=882920   push_ifconfig_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   push_ifconfig_local = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=882920   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 12 11:28:46 2014 us=882920   push_ifconfig_ipv6_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   push_ifconfig_ipv6_local = ::/0
Sat Apr 12 11:28:46 2014 us=882920   push_ifconfig_ipv6_remote = ::
Sat Apr 12 11:28:46 2014 us=882920   enable_c2c = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   duplicate_cn = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   cf_max = 0
Sat Apr 12 11:28:46 2014 us=882920   cf_per = 0
Sat Apr 12 11:28:46 2014 us=882920   max_clients = 1024
Sat Apr 12 11:28:46 2014 us=882920   max_routes_per_client = 256
Sat Apr 12 11:28:46 2014 us=882920   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=882920   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   client = ENABLED
Sat Apr 12 11:28:46 2014 us=882920   pull = ENABLED
Sat Apr 12 11:28:46 2014 us=882920   auth_user_pass_file = 'stdin'
Sat Apr 12 11:28:46 2014 us=882920   show_net_up = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   route_method = 0
Sat Apr 12 11:28:46 2014 us=882920   ip_win32_defined = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   ip_win32_type = 3
Sat Apr 12 11:28:46 2014 us=882920   dhcp_masq_offset = 0
Sat Apr 12 11:28:46 2014 us=882920   dhcp_lease_time = 31536000
Sat Apr 12 11:28:46 2014 us=882920   tap_sleep = 0
Sat Apr 12 11:28:46 2014 us=882920   dhcp_options = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   dhcp_renew = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   dhcp_pre_release = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   dhcp_release = DISABLED
Sat Apr 12 11:28:46 2014 us=882920   domain = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=882920   netbios_scope = '[UNDEF]'
Sat Apr 12 11:28:46 2014 us=882920   netbios_node_type = 0
Sat Apr 12 11:28:46 2014 us=882920   disable_nbt = DISABLED
Sat Apr 12 11:28:46 2014 us=882920 OpenVPN 2.3.3 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Apr  9 2014
Enter Management Password:
Sat Apr 12 11:28:46 2014 us=882920 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sat Apr 12 11:28:46 2014 us=882920 Need hold release from management interface, waiting...
Sat Apr 12 11:28:47 2014 us=295566 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sat Apr 12 11:28:47 2014 us=411351 MANAGEMENT: CMD 'state on'
Sat Apr 12 11:28:47 2014 us=411351 MANAGEMENT: CMD 'log all on'
Sat Apr 12 11:28:48 2014 us=239366 MANAGEMENT: CMD 'hold off'
Sat Apr 12 11:28:48 2014 us=254979 MANAGEMENT: CMD 'hold release'
Sat Apr 12 11:28:58 2014 us=918149 MANAGEMENT: CMD 'username "Auth" "username"'
Sat Apr 12 11:28:59 2014 us=27556 MANAGEMENT: CMD 'password [...]'
Sat Apr 12 11:28:59 2014 us=449455 Control Channel Authentication: tls-auth using INLINE static key file
Sat Apr 12 11:28:59 2014 us=449455 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 12 11:28:59 2014 us=449455 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 12 11:28:59 2014 us=449455 Control Channel MTU parms [ L:1557 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Apr 12 11:28:59 2014 us=449455 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Apr 12 11:28:59 2014 us=449455 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:4 ET:0 EL:0 ]
Sat Apr 12 11:28:59 2014 us=449455 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Sat Apr 12 11:28:59 2014 us=449455 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Sat Apr 12 11:28:59 2014 us=449455 Local Options hash (VER=V4): '0f816d6e'
Sat Apr 12 11:28:59 2014 us=449455 Expected Remote Options hash (VER=V4): '2f3e190a'
Sat Apr 12 11:28:59 2014 us=449455 UDPv4 link local (bound): [undef]
Sat Apr 12 11:28:59 2014 us=449455 UDPv4 link remote: [AF_INET]SERVER PUBLIC IP:1194
Sat Apr 12 11:28:59 2014 us=449455 MANAGEMENT: >STATE:1397294939,WAIT,,,
Sat Apr 12 11:28:59 2014 us=465071 MANAGEMENT: >STATE:1397294939,AUTH,,,
Sat Apr 12 11:28:59 2014 us=465071 TLS: Initial packet from [AF_INET]SERVER PUBLIC IP:1194, sid=bb8f8014 4e521fd9
Sat Apr 12 11:28:59 2014 us=480692 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Apr 12 11:28:59 2014 us=902563 VERIFY OK: depth=1, C=SI, ST=Ljubljana, L=Ljubljana, O=BLAH BLAH., emailAddress=email@email.si, CN=FirewallCA
Sat Apr 12 11:28:59 2014 us=902563 VERIFY OK: nsCertType=SERVER
Sat Apr 12 11:28:59 2014 us=902563 VERIFY X509NAME OK: C=SI, ST=Ljubljana, L=Ljubljana, O=BLAH BLAH, emailAddress=email@email.si, CN=CERT NAME HERE
Sat Apr 12 11:28:59 2014 us=902563 VERIFY OK: depth=0, C=SI, ST=Ljubljana, L=Ljubljana, O=BLAH BLAH, emailAddress=email@email.si, CN=CERT NAME HERE
Sat Apr 12 11:29:00 2014 us=871368 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Apr 12 11:29:00 2014 us=871368 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 12 11:29:00 2014 us=871368 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Apr 12 11:29:00 2014 us=871368 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 12 11:29:00 2014 us=871368 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Apr 12 11:29:00 2014 us=871368 [PUBLIC IP] Peer Connection Initiated with [AF_INET]SERVER PUBLIC IP:1194
Sat Apr 12 11:29:01 2014 us=968797 MANAGEMENT: >STATE:1397294941,GET_CONFIG,,,
Sat Apr 12 11:29:03 2014 us=65455 SENT CONTROL [PUBLIC IP]: 'PUSH_REQUEST' (status=1)
Sat Apr 12 11:29:03 2014 us=80954 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.2.0 255.255.255.0,dhcp-option DOMAIN domain.local,dhcp-option DNS 192.168.1.150,dhcp-option DNS 192.168.1.151,dhcp-option DNS 192.168.1.1,redirect-gateway def1,route 10.11.12.0 255.255.255.0,topology net30,ping 10,ping-restart 60,ifconfig 10.11.12.6 10.11.12.5'
Sat Apr 12 11:29:03 2014 us=96585 OPTIONS IMPORT: timers and/or timeouts modified
Sat Apr 12 11:29:03 2014 us=96585 OPTIONS IMPORT: --ifconfig/up options modified
Sat Apr 12 11:29:03 2014 us=96585 OPTIONS IMPORT: route options modified
Sat Apr 12 11:29:03 2014 us=96585 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Apr 12 11:29:03 2014 us=143452 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Apr 12 11:29:03 2014 us=143452 MANAGEMENT: >STATE:1397294943,ASSIGN_IP,,10.11.12.6,
Sat Apr 12 11:29:03 2014 us=143452 open_tun, tt->ipv6=0
Sat Apr 12 11:29:03 2014 us=143452 TAP-WIN32 device [Povezava z lokalnim omre??jem] opened: \\.\Global\{D2825481-AF18-4DF2-A218-B99734FDAA89}.tap
Sat Apr 12 11:29:03 2014 us=143452 TAP-Windows Driver Version 9.9 
Sat Apr 12 11:29:03 2014 us=143452 TAP-Windows MTU=1500
Sat Apr 12 11:29:03 2014 us=143452 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.11.12.6/255.255.255.252 on interface {D2825481-AF18-4DF2-A218-B99734FDAA89} [DHCP-serv: 10.11.12.5, lease-time: 31536000]
Sat Apr 12 11:29:03 2014 us=143452 DHCP option string: 0f0d7369 73706c65 742e6c6f 63616c06 0cc0a801 96c0a801 97c0a801 01
Sat Apr 12 11:29:03 2014 us=143452 Successful ARP Flush on interface [14] {D2825481-AF18-4DF2-A218-B99734FDAA89}
Sat Apr 12 11:29:08 2014 us=33692 TEST ROUTES: 4/4 succeeded len=3 ret=1 a=0 u/d=up
Sat Apr 12 11:29:08 2014 us=33692 C:\Windows\system32\route.exe ADD SERVER PUBLIC IP MASK 255.255.255.255 10.10.0.1
Sat Apr 12 11:29:08 2014 us=49326 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=100 and dwForwardType=4
Sat Apr 12 11:29:08 2014 us=49326 Route addition via IPAPI succeeded [adaptive]
Sat Apr 12 11:29:08 2014 us=49326 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.11.12.5
Sat Apr 12 11:29:08 2014 us=64948 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Apr 12 11:29:08 2014 us=64948 Route addition via IPAPI succeeded [adaptive]
Sat Apr 12 11:29:08 2014 us=64948 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.11.12.5
Sat Apr 12 11:29:08 2014 us=64948 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Apr 12 11:29:08 2014 us=64948 Route addition via IPAPI succeeded [adaptive]
Sat Apr 12 11:29:08 2014 us=64948 MANAGEMENT: >STATE:1397294948,ADD_ROUTES,,,
Sat Apr 12 11:29:08 2014 us=64948 C:\Windows\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 10.11.12.5
Sat Apr 12 11:29:08 2014 us=80574 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Apr 12 11:29:08 2014 us=80574 Route addition via IPAPI succeeded [adaptive]
Sat Apr 12 11:29:08 2014 us=80574 C:\Windows\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.11.12.5
Sat Apr 12 11:29:08 2014 us=80574 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Apr 12 11:29:08 2014 us=80574 Route addition via IPAPI succeeded [adaptive]
Sat Apr 12 11:29:08 2014 us=80574 C:\Windows\system32\route.exe ADD 10.11.12.0 MASK 255.255.255.0 10.11.12.5
Sat Apr 12 11:29:08 2014 us=96186 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Apr 12 11:29:08 2014 us=96186 Route addition via IPAPI succeeded [adaptive]
Sat Apr 12 11:29:08 2014 us=96186 Initialization Sequence Completed
Sat Apr 12 11:29:08 2014 us=96186 MANAGEMENT: >STATE:1397294948,CONNECTED,SUCCESS,10.11.12.6,SERVER PUBLIC IP

And ROUTE PRINT from affected tablet:

===========================================================================
Interface List
 14...00 ff d2 82 54 81 ......TAP-Windows Adapter V9
  4...52 46 5d 82 95 c5 ......Microsoft Wi-Fi Direct Virtual Adapter
  3...50 46 5d 82 95 c5 ......Broadcom 802.11bgn Wireless SDIO Adapter
  1...........................Software Loopback Interface 1
  7...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
  8...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0        10.10.0.1      10.10.0.245     30
          0.0.0.0        128.0.0.0       10.11.12.5       10.11.12.6     30
        10.10.0.0    255.255.255.0         On-link       10.10.0.245    286
      10.10.0.245  255.255.255.255         On-link       10.10.0.245    286
      10.10.0.255  255.255.255.255         On-link       10.10.0.245    286
       10.11.12.0    255.255.255.0       10.11.12.5       10.11.12.6     30
       10.11.12.4  255.255.255.252         On-link        10.11.12.6    286
       10.11.12.6  255.255.255.255         On-link        10.11.12.6    286
       10.11.12.7  255.255.255.255         On-link        10.11.12.6    286
SERVER PUBLIC IP HERE  255.255.255.255        10.10.0.1      10.10.0.245     30
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0       10.11.12.5       10.11.12.6     30
      192.168.1.0    255.255.255.0       10.11.12.5       10.11.12.6     30
      192.168.2.0    255.255.255.0       10.11.12.5       10.11.12.6     30
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link       10.10.0.245    286
        224.0.0.0        240.0.0.0         On-link        10.11.12.6    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link       10.10.0.245    286
  255.255.255.255  255.255.255.255         On-link        10.11.12.6    286
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
 14    286 fe80::/64                On-link
 14    286 fe80::91c8:f459:7924:a5b/128
                                    On-link
  1    306 ff00::/8                 On-link
 14    286 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

Can somebody give me a hint what is wrong here?

Thanks!

gregecslo

Hi!

This is pfsense machine.
Why server config, isn`t this client error?

OK, here is config:

dev ovpns1
dev-type tun
tun-ipv6
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local SERVER PUBLIC IP
tls-server
server 10.11.12.0 255.255.255.0
client-config-dir /var/etc/openvpn-csc
username-as-common-name
auth-user-pass-verify /var/etc/openvpn/server1.php via-env
tls-verify /var/etc/openvpn/server1.tls-verify.php
lport 1194
management /var/etc/openvpn/server1.sock unix
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"
push "dhcp-option DOMAIN sisplet.local"
push "dhcp-option DNS 192.168.1.150"
push "dhcp-option DNS 192.168.1.151"
push "dhcp-option DNS 192.168.1.1"
push "redirect-gateway def1"
client-to-client
duplicate-cn
ca /var/etc/openvpn/server1.ca 
cert /var/etc/openvpn/server1.cert 
key /var/etc/openvpn/server1.key 
dh /etc/dh-parameters.2048
tls-auth /var/etc/openvpn/server1.tls-auth 0
persist-remote-ip
float

And server log:

Apr 12 12:13:54 	openvpn[20266]: USERNAME/CLIENT IP:32684 [USERNAME] Inactivity timeout (--ping-restart), restarting
Apr 12 12:12:40 	openvpn[20266]: USERNAME/CLIENT IP:24230 send_push_reply(): safe_cap=940
Apr 12 12:12:37 	openvpn[20266]: USERNAME/CLIENT IP:24230 MULTI_sva: pool returned IPv4=10.11.12.10, IPv6=(Not enabled)
Apr 12 12:12:37 	openvpn[20266]: CLIENT IP:24230 [USERNAME] Peer Connection Initiated with [AF_INET]CLIENT IP:24230
Apr 12 12:12:37 	openvpn: user 'USERNAME' authenticated

gregecslo

And verb 5 server log file:

Apr 12 17:58:07 	openvpn[74323]: MANAGEMENT: Client disconnected
Apr 12 17:58:07 	openvpn[74323]: MANAGEMENT: CMD 'quit'
Apr 12 17:58:07 	openvpn[74323]: MANAGEMENT: CMD 'status 2'
Apr 12 17:58:07 	openvpn[74323]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Apr 12 17:58:01 	openvpn[74323]: USERNAME/CLIENT IP:20458 SIGUSR1[soft,ping-restart] received, client-instance restarting
Apr 12 17:58:01 	openvpn[74323]: USERNAME/CLIENT IP:20458 [mememe] Inactivity timeout (--ping-restart), restarting
Apr 12 17:57:06 	openvpn[74323]: MANAGEMENT: Client disconnected
Apr 12 17:57:06 	openvpn[74323]: MANAGEMENT: CMD 'quit'
Apr 12 17:57:05 	openvpn[74323]: MANAGEMENT: CMD 'status 2'
Apr 12 17:57:05 	openvpn[74323]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Apr 12 17:56:04 	openvpn[74323]: MANAGEMENT: Client disconnected
Apr 12 17:56:04 	openvpn[74323]: MANAGEMENT: CMD 'quit'
Apr 12 17:56:04 	openvpn[74323]: MANAGEMENT: CMD 'status 2'
Apr 12 17:56:04 	openvpn[74323]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Apr 12 17:56:01 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:01 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:01 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:01 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:56:00 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:59 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:59 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:58 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [fe80::91c8:f459:7924:a5b], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: bad source address from client [::], packet dropped
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 SENT CONTROL [mememe]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.2.0 255.255.255.0,dhcp-option DOMAIN BLAHBLAH.local,dhcp-option DNS 192.168.1.150,dhcp-option DNS 192.168.1.151,dhcp-option DNS 192.168.1.1,redirect-gateway def1,route 10.11.12.0 255.255.255.0,topology net30,ping 10,ping-restart 60,ifconfig 10.11.12.6 10.11.12.5' (status=1)
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 send_push_reply(): safe_cap=940
Apr 12 17:55:57 	openvpn[74323]: USERNAME/CLIENT IP:20458 PUSH: Received control message: 'PUSH_REQUEST'
Apr 12 17:55:55 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: primary virtual IP for USERNAME/CLIENT IP:20458: 10.11.12.6
Apr 12 17:55:55 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI: Learn: 10.11.12.6 -> USERNAME/CLIENT IP:20458
Apr 12 17:55:55 	openvpn[74323]: USERNAME/CLIENT IP:20458 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_f50af43421d702d98d544db158d9c711.tmp
Apr 12 17:55:55 	openvpn[74323]: USERNAME/CLIENT IP:20458 MULTI_sva: pool returned IPv4=10.11.12.6, IPv6=(Not enabled)
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 [mememe] Peer Connection Initiated with [AF_INET]CLIENT IP:20458
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 TLS: Username/Password authentication succeeded for username 'mememe' [CN SET]
Apr 12 17:55:55 	openvpn: user 'mememe' authenticated
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 VERIFY OK: depth=0, C=SI, ST=Ljubljana, L=Ljubljana, O=BLAH BLAH, emailAddress=mememe@BLAH BLAH.com, CN=mememe
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 VERIFY SCRIPT OK: depth=0, C=SI, ST=Ljubljana, L=Ljubljana, O=BLAH BLAH, emailAddress=mememe@BLAH BLAH.com, CN=mememe
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 VERIFY OK: depth=1, C=SI, ST=Ljubljana, L=Ljubljana, O=BLAH BLAH, emailAddress=mememe@BLAH BLAH.com, CN=FirewallCA
Apr 12 17:55:55 	openvpn[74323]: CLIENT IP:20458 VERIFY SCRIPT OK: depth=1, C=SI, ST=Ljubljana, L=Ljubljana, O=BLAH BLAH, emailAddress=mememe@BLAH BLAH.com, CN=FirewallCA
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 TLS: Initial packet from [AF_INET]CLIENT IP:20458, sid=8f5b3917 7d1fdd2f
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 Expected Remote Options hash (VER=V4): '0f816d6e'
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 Local Options hash (VER=V4): '2f3e190a'
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:4 ET:0 EL:0 ]
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 Control Channel MTU parms [ L:1557 D:166 EF:66 EB:0 ET:0 EL:0 ]
Apr 12 17:55:53 	openvpn[74323]: CLIENT IP:20458 Re-using SSL/TLS context
Apr 12 17:55:53 	openvpn[74323]: MULTI: multi_create_instance called
Apr 12 17:55:02 	openvpn[74323]: MANAGEMENT: Client disconnected
Apr 12 17:55:02 	openvpn[74323]: MANAGEMENT: CMD 'quit'
Apr 12 17:55:02 	openvpn[74323]: MANAGEMENT: CMD 'status 2'
Apr 12 17:55:02 	openvpn[74323]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock

gregecslo

Hi this is not true.
Clients are not connected at the same time. Ever.

gregecslo

Yeah sure, firewall is always disabled...

It is strange because sometimes works and sometimes not...