Noob connecting 2 lans behind cable routers, almost there

zen0n

Hey guys, I've been trying to follow several different walkthroughs out there and have finally broke down to make a post 🙂 I'm sure this is post #1000 on this subject, but hopefully I can throw enough logs and configs at you that someone will be able to quickly be able to help out.

Large picture, I would like to connect 3 routed lans over vpn (2 for now, but 3 in the long run). Lans will retain their original default routes. All 3 will be port forwarded through the router to an openvpn linux box inside the lan. Not worried about the router setups afterward, just need to get over this vpn hump.

I have dyndns setup on both routers, and the port is forwarding on to the server box properly.

The tunnel connects up fine, it appears that the routes get setup properly, but the only communication I can get to work is from the client to the server. All other pings to the the server lan from the client fail.

some defs

outside ip xxxborder.xxxxx.org
192.168.0.0/24 LAN
192.168.0.10 paradox (server) openvpn 2.2.1-8+deb7u2n
192.158.0.1 router for 192.168.0.0/24

outside ip xxxtest.xxxxx.org
192.168.10.0/24 LAN
192.168.10.20 dadpc (client) openvpn 2.1~rc11-1
192.168.10.1 router for 192.168.10.0/24

Server routing and ping situation

root@paradox:/etc/openvpn# sysctl net.ipv4.ip_forward
net.ipv4.ip_forward = 1
root@paradox:/etc/openvpn# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
root@paradox:/etc/openvpn# nmap -sP 10.8.0.1-10

Starting Nmap 6.00 ( http://nmap.org ) at 2014-04-19 21:16 CDT
Nmap scan report for 10.8.0.1
Host is up.
Nmap scan report for 10.8.0.6
Host is up (0.021s latency).
Nmap done: 10 IP addresses (2 hosts up) scanned in 4.64 seconds
root@paradox:/etc/openvpn# nmap -sP 192.168.10.1/24

Starting Nmap 6.00 ( http://nmap.org ) at 2014-04-19 21:17 CDT
Nmap done: 256 IP addresses (0 hosts up) scanned in 206.27 seconds
root@paradox:/etc/openvpn# traceroute 192.168.10.20
traceroute to 192.168.10.20 (192.168.10.20), 30 hops max, 60 byte packets
 1  * * *
<snip>
 30 * * *
root@paradox:/etc/openvpn# traceroute 192.168.10.1
traceroute to 192.168.10.1 (192.168.10.1), 30 hops max, 60 byte packets
 1  * * *
<snip>
30  * * *
root@paradox:/etc/openvpn# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 br0
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun0
10.8.0.2        0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 br0
192.168.10.0    10.8.0.2        255.255.255.0   UG    0      0        0 tun0

Client routing and ping situation

dadpc:/etc/openvpn# sysctl net.ipv4.ip_forward
net.ipv4.ip_forward = 1
dadpc:/etc/openvpn# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
dadpc:/etc/openvpn# nmap -sP 10.8.0.1-10

Starting Nmap 4.62 ( http://nmap.org ) at 2014-04-20 01:36 CDT
Host 10.8.0.1 appears to be up.
Host 10.8.0.6 appears to be up.
Nmap done: 10 IP addresses (2 hosts up) scanned in 2.585 seconds
dadpc:/etc/openvpn# nmap -sP 192.168.0.1/24

Starting Nmap 4.62 ( http://nmap.org ) at 2014-04-20 01:37 CDT
Host 192.168.0.10 appears to be up.
Nmap done: 256 IP addresses (1 host up) scanned in 24.282 seconds
dadpc:/etc/openvpn# traceroute 192.168.0.10
traceroute to 192.168.0.10 (192.168.0.10), 30 hops max, 40 byte packets
 1  192.168.0.10 (192.168.0.10)  24.967 ms  24.931 ms  24.915 ms
dadpc:/etc/openvpn# traceroute 192.168.0.1
traceroute to 192.168.0.1 (192.168.0.1), 30 hops max, 40 byte packets
 1  10.8.0.1 (10.8.0.1)  25.680 ms  25.677 ms  25.662 ms
 2  * * *
<snip>
30  * * *
dadpc:/etc/openvpn# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.8.0.5        0.0.0.0         255.255.255.255 UH    0      0        0 tun0
10.8.0.0        10.8.0.5        255.255.255.0   UG    0      0        0 tun0
192.168.0.0     10.8.0.5        255.255.255.0   UG    0      0        0 tun0
192.168.10.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         192.168.10.1    0.0.0.0         UG    0      0        0 eth0

Server config

local 192.168.0.10
port 1194
proto udp
dev tun0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/paradox.crt
key /etc/openvpn/keys/paradox.key  # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist /etc/openvpn/ipp.txt
push "route 192.168.0.0 255.255.255.0"
client-config-dir client-configs
route 192.168.10.0 255.255.255.0
keepalive 10 120
cipher BF-CBC        # Blowfish (default)
max-clients 5
user nobody
group nogroup
persist-key
persist-tun
log-append /var/log/openvpn-new.log
status /var/log/openvpn-status.log
verb 6
daemon
client-to-client

client-config for xxxtest

route 192.168.10.0 255.255.255.0
push "route 192.168.0.0 255.255.255.0 vpn_gateway"

Client config

client
dev tun0
remote xxxborder.xxxx.org
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/xxxtest.crt
key /etc/openvpn/keys/xxxtest.key
cipher BF-CBC
proto udp
port 2400
log-append /var/log/openvpn-new.log
verb 6
user nobody
group nogroup
persist-tun
persist-key

Server log up to the connection of the client


Sat Apr 19 21:44:43 2014 us=359961 Current Parameter Settings:
Sat Apr 19 21:44:43 2014 us=360066   config = 'newest.conf'
Sat Apr 19 21:44:43 2014 us=360081   mode = 1
Sat Apr 19 21:44:43 2014 us=360095   persist_config = DISABLED
Sat Apr 19 21:44:43 2014 us=360108   persist_mode = 1
Sat Apr 19 21:44:43 2014 us=360121   show_ciphers = DISABLED
Sat Apr 19 21:44:43 2014 us=360138   show_digests = DISABLED
Sat Apr 19 21:44:43 2014 us=360151   show_engines = DISABLED
Sat Apr 19 21:44:43 2014 us=360165   genkey = DISABLED
Sat Apr 19 21:44:43 2014 us=360197   key_pass_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360210   show_tls_ciphers = DISABLED
Sat Apr 19 21:44:43 2014 us=360225 Connection profiles [default]:
Sat Apr 19 21:44:43 2014 us=360239   proto = udp
Sat Apr 19 21:44:43 2014 us=360253   local = '192.168.0.10'
Sat Apr 19 21:44:43 2014 us=360266   local_port = 1194
Sat Apr 19 21:44:43 2014 us=360281   remote = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360293   remote_port = 1194
Sat Apr 19 21:44:43 2014 us=360307   remote_float = DISABLED
Sat Apr 19 21:44:43 2014 us=360320   bind_defined = DISABLED
Sat Apr 19 21:44:43 2014 us=360334   bind_local = ENABLED
Sat Apr 19 21:44:43 2014 us=360348   connect_retry_seconds = 5
Sat Apr 19 21:44:43 2014 us=360361   connect_timeout = 10
Sat Apr 19 21:44:43 2014 us=360374   connect_retry_max = 0
Sat Apr 19 21:44:43 2014 us=360389   socks_proxy_server = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360402   socks_proxy_port = 0
Sat Apr 19 21:44:43 2014 us=360416   socks_proxy_retry = DISABLED
Sat Apr 19 21:44:43 2014 us=360429 Connection profiles END
Sat Apr 19 21:44:43 2014 us=360444   remote_random = DISABLED
Sat Apr 19 21:44:43 2014 us=360456   ipchange = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360473   dev = 'tun0'
Sat Apr 19 21:44:43 2014 us=360489   dev_type = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360502   dev_node = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360518   lladdr = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360530   topology = 1
Sat Apr 19 21:44:43 2014 us=360544   tun_ipv6 = DISABLED
Sat Apr 19 21:44:43 2014 us=360557   ifconfig_local = '10.8.0.1'
Sat Apr 19 21:44:43 2014 us=360571   ifconfig_remote_netmask = '10.8.0.2'
Sat Apr 19 21:44:43 2014 us=360584   ifconfig_noexec = DISABLED
Sat Apr 19 21:44:43 2014 us=360598   ifconfig_nowarn = DISABLED
Sat Apr 19 21:44:43 2014 us=360610   ifconfig_ipv6_local = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360624   ifconfig_ipv6_netbits = 0
Sat Apr 19 21:44:43 2014 us=360637   ifconfig_ipv6_remote = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=360651   shaper = 0
Sat Apr 19 21:44:43 2014 us=360663   tun_mtu = 1500
Sat Apr 19 21:44:43 2014 us=360677   tun_mtu_defined = ENABLED
Sat Apr 19 21:44:43 2014 us=360690   link_mtu = 1500
Sat Apr 19 21:44:43 2014 us=360703   link_mtu_defined = DISABLED
Sat Apr 19 21:44:43 2014 us=360716   tun_mtu_extra = 0
Sat Apr 19 21:44:43 2014 us=360730   tun_mtu_extra_defined = DISABLED
Sat Apr 19 21:44:43 2014 us=360743   fragment = 0
Sat Apr 19 21:44:43 2014 us=360757   mtu_discover_type = -1
Sat Apr 19 21:44:43 2014 us=360769   mtu_test = 0
Sat Apr 19 21:44:43 2014 us=360783   mlock = DISABLED
Sat Apr 19 21:44:43 2014 us=360796   keepalive_ping = 10
Sat Apr 19 21:44:43 2014 us=360810   keepalive_timeout = 120
Sat Apr 19 21:44:43 2014 us=360822   inactivity_timeout = 0
Sat Apr 19 21:44:43 2014 us=360836   ping_send_timeout = 10
Sat Apr 19 21:44:43 2014 us=360848   ping_rec_timeout = 240
Sat Apr 19 21:44:43 2014 us=360862   ping_rec_timeout_action = 2
Sat Apr 19 21:44:43 2014 us=360875   ping_timer_remote = DISABLED
Sat Apr 19 21:44:43 2014 us=360889   remap_sigusr1 = 0
Sat Apr 19 21:44:43 2014 us=360905   explicit_exit_notification = 0
Sat Apr 19 21:44:43 2014 us=360920   persist_tun = ENABLED
Sat Apr 19 21:44:43 2014 us=360932   persist_local_ip = DISABLED
Sat Apr 19 21:44:43 2014 us=360948   persist_remote_ip = DISABLED
Sat Apr 19 21:44:43 2014 us=360961   persist_key = ENABLED
Sat Apr 19 21:44:43 2014 us=360975   mssfix = 1450
Sat Apr 19 21:44:43 2014 us=360987   passtos = DISABLED
Sat Apr 19 21:44:43 2014 us=361001   resolve_retry_seconds = 1000000000
Sat Apr 19 21:44:43 2014 us=361056   username = 'nobody'
Sat Apr 19 21:44:43 2014 us=361070   groupname = 'nogroup'
Sat Apr 19 21:44:43 2014 us=361084   chroot_dir = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361096   cd_dir = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361110   writepid = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361123   up_script = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361137   down_script = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361149   down_pre = DISABLED
Sat Apr 19 21:44:43 2014 us=361163   up_restart = DISABLED
Sat Apr 19 21:44:43 2014 us=361176   up_delay = DISABLED
Sat Apr 19 21:44:43 2014 us=361190   daemon = ENABLED
Sat Apr 19 21:44:43 2014 us=361203   inetd = 0
Sat Apr 19 21:44:43 2014 us=361217   log = ENABLED
Sat Apr 19 21:44:43 2014 us=361229   suppress_timestamps = DISABLED
Sat Apr 19 21:44:43 2014 us=361243   nice = 0
Sat Apr 19 21:44:43 2014 us=361255   verbosity = 6
Sat Apr 19 21:44:43 2014 us=361269   mute = 0
Sat Apr 19 21:44:43 2014 us=361282   gremlin = 0
Sat Apr 19 21:44:43 2014 us=361296   status_file = '/var/log/openvpn-status.log'
Sat Apr 19 21:44:43 2014 us=361309   status_file_version = 1
Sat Apr 19 21:44:43 2014 us=361323   status_file_update_freq = 60
Sat Apr 19 21:44:43 2014 us=361335   occ = ENABLED
Sat Apr 19 21:44:43 2014 us=361349   rcvbuf = 65536
Sat Apr 19 21:44:43 2014 us=361362   sndbuf = 65536
Sat Apr 19 21:44:43 2014 us=361375   sockflags = 0
Sat Apr 19 21:44:43 2014 us=361388   fast_io = DISABLED
Sat Apr 19 21:44:43 2014 us=361402   lzo = 0
Sat Apr 19 21:44:43 2014 us=361416   route_script = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361431   route_default_gateway = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361446   route_default_metric = 0
Sat Apr 19 21:44:43 2014 us=361459   route_noexec = DISABLED
Sat Apr 19 21:44:43 2014 us=361474   route_delay = 0
Sat Apr 19 21:44:43 2014 us=361489   route_delay_window = 30
Sat Apr 19 21:44:43 2014 us=361502   route_delay_defined = DISABLED
Sat Apr 19 21:44:43 2014 us=361516   route_nopull = DISABLED
Sat Apr 19 21:44:43 2014 us=361529   route_gateway_via_dhcp = DISABLED
Sat Apr 19 21:44:43 2014 us=361543   max_routes = 100
Sat Apr 19 21:44:43 2014 us=361555   allow_pull_fqdn = DISABLED
Sat Apr 19 21:44:43 2014 us=361572   route 192.168.10.0/255.255.255.0/nil/nil
Sat Apr 19 21:44:43 2014 us=361587   route 10.8.0.0/255.255.255.0/nil/nil
Sat Apr 19 21:44:43 2014 us=361602   management_addr = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361616   management_port = 0
Sat Apr 19 21:44:43 2014 us=361629   management_user_pass = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361643   management_log_history_cache = 250
Sat Apr 19 21:44:43 2014 us=361655   management_echo_buffer_size = 100
Sat Apr 19 21:44:43 2014 us=361669   management_write_peer_info_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361682   management_client_user = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361695   management_client_group = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361708   management_flags = 0
Sat Apr 19 21:44:43 2014 us=361722   shared_secret_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361734   key_direction = 0
Sat Apr 19 21:44:43 2014 us=361748   ciphername_defined = ENABLED
Sat Apr 19 21:44:43 2014 us=361760   ciphername = 'BF-CBC'
Sat Apr 19 21:44:43 2014 us=361774   authname_defined = ENABLED
Sat Apr 19 21:44:43 2014 us=361786   authname = 'SHA1'
Sat Apr 19 21:44:43 2014 us=361800   prng_hash = 'SHA1'
Sat Apr 19 21:44:43 2014 us=361812   prng_nonce_secret_len = 16
Sat Apr 19 21:44:43 2014 us=361826   keysize = 0
Sat Apr 19 21:44:43 2014 us=361838   engine = DISABLED
Sat Apr 19 21:44:43 2014 us=361852   replay = ENABLED
Sat Apr 19 21:44:43 2014 us=361865   mute_replay_warnings = DISABLED
Sat Apr 19 21:44:43 2014 us=361879   replay_window = 64
Sat Apr 19 21:44:43 2014 us=361891   replay_time = 15
Sat Apr 19 21:44:43 2014 us=361906   packet_id_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=361919   use_iv = ENABLED
Sat Apr 19 21:44:43 2014 us=361933   test_crypto = DISABLED
Sat Apr 19 21:44:43 2014 us=361945   tls_server = ENABLED
Sat Apr 19 21:44:43 2014 us=361959   tls_client = DISABLED
Sat Apr 19 21:44:43 2014 us=361990   key_method = 2
Sat Apr 19 21:44:43 2014 us=362003   ca_file = '/etc/openvpn/keys/ca.crt'
Sat Apr 19 21:44:43 2014 us=362017   ca_path = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362030   dh_file = '/etc/openvpn/keys/dh1024.pem'
Sat Apr 19 21:44:43 2014 us=362044   cert_file = '/etc/openvpn/keys/paradox.crt'
Sat Apr 19 21:44:43 2014 us=362057   priv_key_file = '/etc/openvpn/keys/paradox.key'
Sat Apr 19 21:44:43 2014 us=362071   pkcs12_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362084   cipher_list = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362098   tls_verify = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362110   tls_export_cert = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362124   tls_remote = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362137   crl_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362151   ns_cert_type = 0
Sat Apr 19 21:44:43 2014 us=362163   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362177   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362189   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362203   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362215   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362229   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362241   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362255   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362267   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362281   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362293   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362307   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362319   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362333   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362345   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362359   remote_cert_ku[i] = 0
Sat Apr 19 21:44:43 2014 us=362372   remote_cert_eku = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362386   tls_timeout = 2
Sat Apr 19 21:44:43 2014 us=362426   renegotiate_bytes = 0
Sat Apr 19 21:44:43 2014 us=362442   renegotiate_packets = 0
Sat Apr 19 21:44:43 2014 us=362455   renegotiate_seconds = 3600
Sat Apr 19 21:44:43 2014 us=362471   handshake_window = 60
Sat Apr 19 21:44:43 2014 us=362483   transition_window = 3600
Sat Apr 19 21:44:43 2014 us=362496   single_session = DISABLED
Sat Apr 19 21:44:43 2014 us=362510   push_peer_info = DISABLED
Sat Apr 19 21:44:43 2014 us=362522   tls_exit = DISABLED
Sat Apr 19 21:44:43 2014 us=362536   tls_auth_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=362549   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362563   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362576   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362590   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362603   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362617   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362629   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362643   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362656   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362669   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362682   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362696   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362709   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362723   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362735   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362749   pkcs11_protected_authentication = DISABLED
Sat Apr 19 21:44:43 2014 us=362763   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362776   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362790   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362803   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362816   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362843   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362856   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362869   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362882   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362895   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362908   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362921   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362934   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362947   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362960   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362973   pkcs11_private_mode = 00000000
Sat Apr 19 21:44:43 2014 us=362986   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363000   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363012   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363026   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363038   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363052   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363064   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363078   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363091   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363104   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363116   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363130   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363143   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363156   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363169   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363182   pkcs11_cert_private = DISABLED
Sat Apr 19 21:44:43 2014 us=363195   pkcs11_pin_cache_period = -1
Sat Apr 19 21:44:43 2014 us=363209   pkcs11_id = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=363222   pkcs11_id_management = DISABLED
Sat Apr 19 21:44:43 2014 us=363237   server_network = 10.8.0.0
Sat Apr 19 21:44:43 2014 us=363253   server_netmask = 255.255.255.0
Sat Apr 19 21:44:43 2014 us=363271   server_network_ipv6 = ::
Sat Apr 19 21:44:43 2014 us=363286   server_netbits_ipv6 = 0
Sat Apr 19 21:44:43 2014 us=363299   server_bridge_ip = 0.0.0.0
Sat Apr 19 21:44:43 2014 us=363314   server_bridge_netmask = 0.0.0.0
Sat Apr 19 21:44:43 2014 us=363330   server_bridge_pool_start = 0.0.0.0
Sat Apr 19 21:44:43 2014 us=363343   server_bridge_pool_end = 0.0.0.0
Sat Apr 19 21:44:43 2014 us=363357   push_entry = 'route 192.168.0.0 255.255.255.0'
Sat Apr 19 21:44:43 2014 us=363370   push_entry = 'route 10.8.0.0 255.255.255.0'
Sat Apr 19 21:44:43 2014 us=363384   push_entry = 'topology net30'
Sat Apr 19 21:44:43 2014 us=363396   push_entry = 'ping 10'
Sat Apr 19 21:44:43 2014 us=363410   push_entry = 'ping-restart 120'
Sat Apr 19 21:44:43 2014 us=363423   ifconfig_pool_defined = ENABLED
Sat Apr 19 21:44:43 2014 us=363438   ifconfig_pool_start = 10.8.0.4
Sat Apr 19 21:44:43 2014 us=363451   ifconfig_pool_end = 10.8.0.251
Sat Apr 19 21:44:43 2014 us=363466   ifconfig_pool_netmask = 0.0.0.0
Sat Apr 19 21:44:43 2014 us=363478   ifconfig_pool_persist_filename = '/etc/openvpn/ipp.txt'
Sat Apr 19 21:44:43 2014 us=363493   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 19 21:44:43 2014 us=363505   ifconfig_ipv6_pool_defined = DISABLED
Sat Apr 19 21:44:43 2014 us=363520   ifconfig_ipv6_pool_base = ::
Sat Apr 19 21:44:43 2014 us=363533   ifconfig_ipv6_pool_netbits = 0
Sat Apr 19 21:44:43 2014 us=363546   n_bcast_buf = 256
Sat Apr 19 21:44:43 2014 us=363559   tcp_queue_limit = 64
Sat Apr 19 21:44:43 2014 us=363573   real_hash_size = 256
Sat Apr 19 21:44:43 2014 us=363585   virtual_hash_size = 256
Sat Apr 19 21:44:43 2014 us=363599   client_connect_script = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=363612   learn_address_script = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=363626   client_disconnect_script = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=363638   client_config_dir = 'client-configs'
Sat Apr 19 21:44:43 2014 us=363664   ccd_exclusive = DISABLED
Sat Apr 19 21:44:43 2014 us=363677   tmp_dir = '/tmp'
Sat Apr 19 21:44:43 2014 us=363691   push_ifconfig_defined = DISABLED
Sat Apr 19 21:44:43 2014 us=363705   push_ifconfig_local = 0.0.0.0
Sat Apr 19 21:44:43 2014 us=363725   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 19 21:44:43 2014 us=363740   push_ifconfig_ipv6_defined = DISABLED
Sat Apr 19 21:44:43 2014 us=363754   push_ifconfig_ipv6_local = ::/0
Sat Apr 19 21:44:43 2014 us=363768   push_ifconfig_ipv6_remote = ::
Sat Apr 19 21:44:43 2014 us=363781   enable_c2c = ENABLED
Sat Apr 19 21:44:43 2014 us=363795   duplicate_cn = DISABLED
Sat Apr 19 21:44:43 2014 us=363808   cf_max = 0
Sat Apr 19 21:44:43 2014 us=363822   cf_per = 0
Sat Apr 19 21:44:43 2014 us=363835   max_clients = 5
Sat Apr 19 21:44:43 2014 us=363848   max_routes_per_client = 256
Sat Apr 19 21:44:43 2014 us=363861   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=363876   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 19 21:44:43 2014 us=363888   ssl_flags = 0
Sat Apr 19 21:44:43 2014 us=363902   port_share_host = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=363915   port_share_port = 0
Sat Apr 19 21:44:43 2014 us=363928   client = DISABLED
Sat Apr 19 21:44:43 2014 us=363941   pull = DISABLED
Sat Apr 19 21:44:43 2014 us=363955   auth_user_pass_file = '[UNDEF]'
Sat Apr 19 21:44:43 2014 us=363972 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Sat Apr 19 21:44:43 2014 us=364167 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat Apr 19 21:44:43 2014 us=364186 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Apr 19 21:44:43 2014 us=366245 Diffie-Hellman initialized with 1024 bit key
Sat Apr 19 21:44:43 2014 us=367082 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Apr 19 21:44:43 2014 us=367126 Socket Buffers: R=[229376->131072] S=[229376->131072]
Sat Apr 19 21:44:43 2014 us=367258 ROUTE default_gateway=192.168.0.1
Sat Apr 19 21:44:43 2014 us=368390 TUN/TAP device tun0 opened
Sat Apr 19 21:44:43 2014 us=368422 TUN/TAP TX queue length set to 100
Sat Apr 19 21:44:43 2014 us=368454 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Apr 19 21:44:43 2014 us=368486 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Sat Apr 19 21:44:43 2014 us=377809 /sbin/route add -net 192.168.10.0 netmask 255.255.255.0 gw 10.8.0.2
Sat Apr 19 21:44:43 2014 us=379046 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Sat Apr 19 21:44:43 2014 us=380276 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sat Apr 19 21:44:43 2014 us=381226 GID set to nogroup
Sat Apr 19 21:44:43 2014 us=381312 UID set to nobody
Sat Apr 19 21:44:43 2014 us=381367 UDPv4 link local (bound): [AF_INET]192.168.0.10:1194
Sat Apr 19 21:44:43 2014 us=381385 UDPv4 link remote: [undef]
Sat Apr 19 21:44:43 2014 us=381407 MULTI: multi_init called, r=256 v=256
Sat Apr 19 21:44:43 2014 us=381518 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Apr 19 21:44:43 2014 us=381551 ifconfig_pool_read(), in='xxxtest,10.8.0.4', TODO: IPv6
Sat Apr 19 21:44:43 2014 us=381594 succeeded -> ifconfig_pool_set()
Sat Apr 19 21:44:43 2014 us=381615 IFCONFIG POOL LIST
Sat Apr 19 21:44:43 2014 us=381634 xxxtest,10.8.0.4
Sat Apr 19 21:44:43 2014 us=381683 Initialization Sequence Completed
Sat Apr 19 21:45:08 2014 us=168618 MULTI: multi_create_instance called
Sat Apr 19 21:45:08 2014 us=168734 24.XX.XXX.102:2400 Re-using SSL/TLS context
Sat Apr 19 21:45:08 2014 us=168999 24.XX.XXX.102:2400 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Apr 19 21:45:08 2014 us=169021 24.XX.XXX.102:2400 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sat Apr 19 21:45:08 2014 us=169076 24.XX.XXX.102:2400 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Apr 19 21:45:08 2014 us=169121 24.XX.XXX.102:2400 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Apr 19 21:45:08 2014 us=169167 24.XX.XXX.102:2400 Local Options hash (VER=V4): '239669a8'
Sat Apr 19 21:45:08 2014 us=169188 24.XX.XXX.102:2400 Expected Remote Options hash (VER=V4): '3514370b'
Sat Apr 19 21:45:08 2014 us=169248 24.XX.XXX.102:2400 UDPv4 READ [14] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sat Apr 19 21:45:08 2014 us=169275 24.XX.XXX.102:2400 TLS: Initial packet from [AF_INET]24.XX.XXX.102:2400, sid=69535037 b347e194
Sat Apr 19 21:45:08 2014 us=169316 24.XX.XXX.102:2400 UDPv4 WRITE [26] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sat Apr 19 21:45:08 2014 us=187704 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 0 ]
Sat Apr 19 21:45:08 2014 us=187836 24.XX.XXX.102:2400 UDPv4 READ [109] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=95
Sat Apr 19 21:45:08 2014 us=191179 24.XX.XXX.102:2400 UDPv4 WRITE [126] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ 1 ] pid=1 DATA len=100
Sat Apr 19 21:45:08 2014 us=191237 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Sat Apr 19 21:45:08 2014 us=191277 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=100
Sat Apr 19 21:45:08 2014 us=191315 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=100
Sat Apr 19 21:45:08 2014 us=214050 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 1 ]
Sat Apr 19 21:45:08 2014 us=214097 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=5 DATA len=100
Sat Apr 19 21:45:08 2014 us=214142 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 2 ]
Sat Apr 19 21:45:08 2014 us=214175 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=100
Sat Apr 19 21:45:08 2014 us=214213 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 3 ]
Sat Apr 19 21:45:08 2014 us=214245 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=100
Sat Apr 19 21:45:08 2014 us=214282 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 4 ]
Sat Apr 19 21:45:08 2014 us=214313 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=8 DATA len=100
Sat Apr 19 21:45:08 2014 us=233769 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 5 ]
Sat Apr 19 21:45:08 2014 us=233899 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=9 DATA len=100
Sat Apr 19 21:45:08 2014 us=233952 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 6 ]
Sat Apr 19 21:45:08 2014 us=233987 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=10 DATA len=100
Sat Apr 19 21:45:08 2014 us=234026 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 7 ]
Sat Apr 19 21:45:08 2014 us=234059 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=11 DATA len=100
Sat Apr 19 21:45:08 2014 us=234098 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 8 ]
Sat Apr 19 21:45:08 2014 us=234131 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=12 DATA len=100
Sat Apr 19 21:45:08 2014 us=269809 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 9 ]
Sat Apr 19 21:45:08 2014 us=269947 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=13 DATA len=100
Sat Apr 19 21:45:08 2014 us=269997 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 10 ]
Sat Apr 19 21:45:08 2014 us=270030 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=14 DATA len=100
Sat Apr 19 21:45:08 2014 us=270068 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 11 ]
Sat Apr 19 21:45:08 2014 us=270099 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=15 DATA len=100
Sat Apr 19 21:45:08 2014 us=270136 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 12 ]
Sat Apr 19 21:45:08 2014 us=270167 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=16 DATA len=100
Sat Apr 19 21:45:08 2014 us=292276 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 13 ]
Sat Apr 19 21:45:08 2014 us=292343 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=17 DATA len=100
Sat Apr 19 21:45:08 2014 us=292390 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 14 ]
Sat Apr 19 21:45:08 2014 us=292424 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=18 DATA len=100
Sat Apr 19 21:45:08 2014 us=292464 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 15 ]
Sat Apr 19 21:45:08 2014 us=292497 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=19 DATA len=100
Sat Apr 19 21:45:08 2014 us=292536 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 16 ]
Sat Apr 19 21:45:08 2014 us=292568 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=20 DATA len=100
Sat Apr 19 21:45:08 2014 us=313794 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 17 ]
Sat Apr 19 21:45:08 2014 us=313847 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=21 DATA len=100
Sat Apr 19 21:45:08 2014 us=313891 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 18 ]
Sat Apr 19 21:45:08 2014 us=313928 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=22 DATA len=100
Sat Apr 19 21:45:08 2014 us=313967 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 19 ]
Sat Apr 19 21:45:08 2014 us=314000 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=23 DATA len=100
Sat Apr 19 21:45:08 2014 us=314038 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 20 ]
Sat Apr 19 21:45:08 2014 us=314070 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=24 DATA len=100
Sat Apr 19 21:45:08 2014 us=332825 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 21 ]
Sat Apr 19 21:45:08 2014 us=332895 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=25 DATA len=100
Sat Apr 19 21:45:08 2014 us=337932 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 22 ]
Sat Apr 19 21:45:08 2014 us=337991 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=26 DATA len=100
Sat Apr 19 21:45:08 2014 us=338037 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 23 ]
Sat Apr 19 21:45:08 2014 us=338069 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=27 DATA len=100
Sat Apr 19 21:45:08 2014 us=338106 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 24 ]
Sat Apr 19 21:45:08 2014 us=338161 24.XX.XXX.102:2400 UDPv4 WRITE [68] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=28 DATA len=54
Sat Apr 19 21:45:08 2014 us=354256 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 25 ]
Sat Apr 19 21:45:08 2014 us=357585 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 26 ]
Sat Apr 19 21:45:08 2014 us=357678 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 27 ]
Sat Apr 19 21:45:08 2014 us=370119 24.XX.XXX.102:2400 UDPv4 READ [126] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ 28 ] pid=2 DATA len=100
Sat Apr 19 21:45:08 2014 us=370207 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 2 ]
Sat Apr 19 21:45:08 2014 us=370256 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=100
Sat Apr 19 21:45:08 2014 us=370290 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 3 ]
Sat Apr 19 21:45:08 2014 us=370328 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=100
Sat Apr 19 21:45:08 2014 us=370361 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 4 ]
Sat Apr 19 21:45:08 2014 us=370414 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=5 DATA len=100
Sat Apr 19 21:45:08 2014 us=370448 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 5 ]
Sat Apr 19 21:45:08 2014 us=389871 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=100
Sat Apr 19 21:45:08 2014 us=389921 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 6 ]
Sat Apr 19 21:45:08 2014 us=389973 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=100
Sat Apr 19 21:45:08 2014 us=390007 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 7 ]
Sat Apr 19 21:45:08 2014 us=390045 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=8 DATA len=100
Sat Apr 19 21:45:08 2014 us=390078 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 8 ]
Sat Apr 19 21:45:08 2014 us=396011 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=9 DATA len=100
Sat Apr 19 21:45:08 2014 us=396051 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 9 ]
Sat Apr 19 21:45:08 2014 us=411103 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=10 DATA len=100
Sat Apr 19 21:45:08 2014 us=411158 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 10 ]
Sat Apr 19 21:45:08 2014 us=411575 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=11 DATA len=100
Sat Apr 19 21:45:08 2014 us=411628 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 11 ]
Sat Apr 19 21:45:08 2014 us=411671 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=12 DATA len=100
Sat Apr 19 21:45:08 2014 us=411705 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 12 ]
Sat Apr 19 21:45:08 2014 us=417709 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=13 DATA len=100
Sat Apr 19 21:45:08 2014 us=417859 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 13 ]
Sat Apr 19 21:45:08 2014 us=428252 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=14 DATA len=100
Sat Apr 19 21:45:08 2014 us=428298 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 14 ]
Sat Apr 19 21:45:08 2014 us=428365 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=15 DATA len=100
Sat Apr 19 21:45:08 2014 us=428401 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 15 ]
Sat Apr 19 21:45:08 2014 us=428440 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=16 DATA len=100
Sat Apr 19 21:45:08 2014 us=428476 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 16 ]
Sat Apr 19 21:45:08 2014 us=437853 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=17 DATA len=100
Sat Apr 19 21:45:08 2014 us=437902 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 17 ]
Sat Apr 19 21:45:08 2014 us=448142 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=18 DATA len=100
Sat Apr 19 21:45:08 2014 us=448205 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 18 ]
Sat Apr 19 21:45:08 2014 us=448248 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=19 DATA len=100
Sat Apr 19 21:45:08 2014 us=448297 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 19 ]
Sat Apr 19 21:45:08 2014 us=448335 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=20 DATA len=100
Sat Apr 19 21:45:08 2014 us=448369 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 20 ]
Sat Apr 19 21:45:08 2014 us=455824 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=21 DATA len=100
Sat Apr 19 21:45:08 2014 us=455882 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 21 ]
Sat Apr 19 21:45:08 2014 us=468462 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=22 DATA len=100
Sat Apr 19 21:45:08 2014 us=469054 24.XX.XXX.102:2400 VERIFY OK: depth=1, /C=CA/ST=MB/L=Winnipeg/O=Trk_Consulting/OU=Informatics/CN=openvpn-CA/name=openvpn-CA/emailAddress=mail@host.domain
Sat Apr 19 21:45:08 2014 us=469219 24.XX.XXX.102:2400 VERIFY OK: depth=0, /C=CA/ST=MB/L=Winnipeg/O=Trk_Consulting/OU=Informatics/CN=xxxtest/name=changeme/emailAddress=mail@host.domain
Sat Apr 19 21:45:08 2014 us=469262 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 22 ]
Sat Apr 19 21:45:08 2014 us=469306 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=23 DATA len=100
Sat Apr 19 21:45:08 2014 us=469342 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 23 ]
Sat Apr 19 21:45:08 2014 us=469381 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=24 DATA len=100
Sat Apr 19 21:45:08 2014 us=471074 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 24 ]
Sat Apr 19 21:45:08 2014 us=473609 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=25 DATA len=100
Sat Apr 19 21:45:08 2014 us=474225 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 25 ]
Sat Apr 19 21:45:08 2014 us=485665 24.XX.XXX.102:2400 UDPv4 READ [26] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=26 DATA len=12
Sat Apr 19 21:45:08 2014 us=486448 24.XX.XXX.102:2400 UDPv4 WRITE [126] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ 26 ] pid=29 DATA len=100
Sat Apr 19 21:45:08 2014 us=486509 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=30 DATA len=100
Sat Apr 19 21:45:08 2014 us=486546 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=100
Sat Apr 19 21:45:08 2014 us=486580 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=100
Sat Apr 19 21:45:08 2014 us=509661 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 29 ]
Sat Apr 19 21:45:08 2014 us=509699 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=33 DATA len=100
Sat Apr 19 21:45:08 2014 us=509738 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 30 ]
Sat Apr 19 21:45:08 2014 us=509768 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=34 DATA len=100
Sat Apr 19 21:45:08 2014 us=509803 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 31 ]
Sat Apr 19 21:45:08 2014 us=509832 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=35 DATA len=100
Sat Apr 19 21:45:08 2014 us=509867 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 32 ]
Sat Apr 19 21:45:08 2014 us=509896 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=36 DATA len=100
Sat Apr 19 21:45:08 2014 us=532428 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 33 ]
Sat Apr 19 21:45:08 2014 us=532473 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=37 DATA len=100
Sat Apr 19 21:45:08 2014 us=532511 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 34 ]
Sat Apr 19 21:45:08 2014 us=532539 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=38 DATA len=100
Sat Apr 19 21:45:08 2014 us=532573 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 35 ]
Sat Apr 19 21:45:08 2014 us=532600 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=39 DATA len=100
Sat Apr 19 21:45:08 2014 us=532633 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 36 ]
Sat Apr 19 21:45:08 2014 us=532660 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=40 DATA len=100
Sat Apr 19 21:45:08 2014 us=564660 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 37 ]
Sat Apr 19 21:45:08 2014 us=564708 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
Sat Apr 19 21:45:08 2014 us=564747 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 38 ]
Sat Apr 19 21:45:08 2014 us=564776 24.XX.XXX.102:2400 UDPv4 WRITE [20] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=6
Sat Apr 19 21:45:08 2014 us=564810 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 39 ]
Sat Apr 19 21:45:08 2014 us=564838 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 40 ]
Sat Apr 19 21:45:08 2014 us=583727 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 41 ]
Sat Apr 19 21:45:08 2014 us=583776 24.XX.XXX.102:2400 UDPv4 READ [126] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ 42 ] pid=27 DATA len=100
Sat Apr 19 21:45:08 2014 us=583834 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 27 ]
Sat Apr 19 21:45:08 2014 us=588166 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=28 DATA len=100
Sat Apr 19 21:45:08 2014 us=588202 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 28 ]
Sat Apr 19 21:45:08 2014 us=588239 24.XX.XXX.102:2400 UDPv4 READ [114] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=100
Sat Apr 19 21:45:08 2014 us=588269 24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 29 ]
Sat Apr 19 21:45:08 2014 us=588305 24.XX.XXX.102:2400 UDPv4 READ [28] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=30 DATA len=14
Sat Apr 19 21:45:08 2014 us=588550 24.XX.XXX.102:2400 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 19 21:45:08 2014 us=588572 24.XX.XXX.102:2400 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 19 21:45:08 2014 us=588640 24.XX.XXX.102:2400 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 19 21:45:08 2014 us=588657 24.XX.XXX.102:2400 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 19 21:45:08 2014 us=588763 24.XX.XXX.102:2400 UDPv4 WRITE [126] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ 30 ] pid=43 DATA len=100
Sat Apr 19 21:45:08 2014 us=588802 24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=44 DATA len=100
Sat Apr 19 21:45:08 2014 us=588836 24.XX.XXX.102:2400 UDPv4 WRITE [64] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=45 DATA len=50
Sat Apr 19 21:45:08 2014 us=605585 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 43 ]
Sat Apr 19 21:45:08 2014 us=609695 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 44 ]
Sat Apr 19 21:45:08 2014 us=609734 24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 45 ]
Sat Apr 19 21:45:08 2014 us=609760 24.XX.XXX.102:2400 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Apr 19 21:45:08 2014 us=609788 24.XX.XXX.102:2400 [xxxtest] Peer Connection Initiated with [AF_INET]24.XX.XXX.102:2400
Sat Apr 19 21:45:08 2014 us=609846 xxxtest/24.XX.XXX.102:2400 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=2500::c826:ce2:ed7f:0
Sat Apr 19 21:45:08 2014 us=609898 xxxtest/24.XX.XXX.102:2400 MULTI: Learn: 10.8.0.6 -> xxxtest/24.XX.XXX.102:2400
Sat Apr 19 21:45:08 2014 us=609917 xxxtest/24.XX.XXX.102:2400 MULTI: primary virtual IP for xxxtest/24.XX.XXX.102:2400: 10.8.0.6
Sat Apr 19 21:45:09 2014 us=727561 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [104] from [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=90
Sat Apr 19 21:45:09 2014 us=727722 xxxtest/24.XX.XXX.102:2400 PUSH: Received control message: 'PUSH_REQUEST'
Sat Apr 19 21:45:09 2014 us=727747 xxxtest/24.XX.XXX.102:2400 send_push_reply(): safe_cap=960
Sat Apr 19 21:45:09 2014 us=727840 xxxtest/24.XX.XXX.102:2400 SENT CONTROL [xxxtest]: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sat Apr 19 21:45:09 2014 us=727872 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [22] to [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 31 ]
Sat Apr 19 21:45:09 2014 us=727920 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [114] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=46 DATA len=100
Sat Apr 19 21:45:09 2014 us=727955 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [84] to [AF_INET]24.XX.XXX.102:2400: P_CONTROL_V1 kid=0 [ ] pid=47 DATA len=70
Sat Apr 19 21:45:09 2014 us=745436 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 46 ]
Sat Apr 19 21:45:09 2014 us=753585 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [22] from [AF_INET]24.XX.XXX.102:2400: P_ACK_V1 kid=0 [ 47 ]
Sat Apr 19 21:45:19 2014 us=872777 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:45:19 2014 us=872922 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:45:29 2014 us=252662 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:45:30 2014 us=310302 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:45:39 2014 us=474652 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:45:40 2014 us=637560 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:45:49 2014 us=726892 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:45:50 2014 us=863000 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:00 2014 us=57747 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:01 2014 us=239125 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:10 2014 us=278388 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:11 2014 us=526632 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:20 2014 us=568841 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:21 2014 us=665479 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:30 2014 us=793598 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:31 2014 us=831339 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:40 2014 us=882618 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:40 2014 us=902239 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:50 2014 us=969426 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:46:50 2014 us=988932 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:00 2014 us=373625 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:01 2014 us=504246 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:10 2014 us=873831 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:10 2014 us=897046 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:20 2014 us=922957 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:20 2014 us=923085 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:30 2014 us=90424 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:31 2014 us=275575 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:40 2014 us=373861 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:41 2014 us=646624 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:50 2014 us=693841 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:47:51 2014 us=786160 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:00 2014 us=879731 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:00 2014 us=879829 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:10 2014 us=962368 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:10 2014 us=962527 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:20 2014 us=992807 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:21 2014 us=11794 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:30 2014 us=205198 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:31 2014 us=274921 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:40 2014 us=490325 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:41 2014 us=709455 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:50 2014 us=748661 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:48:51 2014 us=822837 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:01 2014 us=128480 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:02 2014 us=364041 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:11 2014 us=673582 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:12 2014 us=953938 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:22 2014 us=81234 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:23 2014 us=358580 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:32 2014 us=668108 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:33 2014 us=871965 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:43 2014 us=3601 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:44 2014 us=276746 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:53 2014 us=317956 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:49:54 2014 us=435627 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:03 2014 us=731220 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:04 2014 us=794717 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:13 2014 us=906460 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:13 2014 us=906591 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:23 2014 us=951115 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:23 2014 us=951249 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:34 2014 us=25481 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:34 2014 us=44248 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:44 2014 us=373679 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:44 2014 us=373840 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:54 2014 us=466049 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:50:54 2014 us=482502 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:51:04 2014 us=791139 xxxtest/24.XX.XXX.102:2400 UDPv4 WRITE [53] to [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52
Sat Apr 19 21:51:04 2014 us=820435 xxxtest/24.XX.XXX.102:2400 UDPv4 READ [53] from [AF_INET]24.XX.XXX.102:2400: P_DATA_V1 kid=0 DATA len=52

zen0n

So I'm assuming at the very least I've got some kind of a broken routing situation on the server.

From the server, I can ping/ssh to the client on it's vpn ip 10.8.0.6 but can't access the client on it's actual ip of 192.168.10.20.

From the client, I can ping/ssh to both the servers actual ip and it's vpn ip. But can't ping anything else on the servers LAN. Which in theory I should correct?:

zen0n

Ok did some reading on this, found out I shouldn't have skipped adding the routes to the router on the servers lan. I didn't have the password at the time. Bit the bullet and reset it (it was local, just didn't want to reset it).

I then added the return routes back to the client LAN and to the openvpn network aswell. Reconnected the vpn, and now it seems the client side traffic destined for the servers lan is flowing normally. I can ping all the hosts on the 192.168.0./24 net from 192.168.10.20.

I also added some iptables rules to the server box as indicated below

root@paradox:/etc/openvpn/client-configs# iptables-save
# Generated by iptables-save v1.4.14 on Sun Apr 20 13:55:20 2014
*filter
:INPUT ACCEPT [483352:32451866]
:FORWARD ACCEPT [2249:373896]
:OUTPUT ACCEPT [381998:3304909396]
-A INPUT -i tun+ -j ACCEPT
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -d 192.168.0.0/24 -i tun0 -o eth0 -m conntrack --ctstate NEW -j ACCEPT
-A FORWARD -i tun+ -j ACCEPT
COMMIT
# Completed on Sun Apr 20 13:55:20 2014

So getting there. Still having issues with the server not being able to see back to the clients LAN interface. The server can ping the clients 10.8.0.6 vpn address, but cannot ping it's LAN int at 192.168.10.20

Also, from another machine on the 192.168.0.0/24 lan, I try to ping through to the client's ip address and it fails. traceroute works up to the client server.

root@shodan:~# ifconfig wlan0|grep inet\ addr
          inet addr:192.168.0.249  Bcast:192.168.0.255  Mask:255.255.255.0
root@shodan:~# traceroute 192.168.10.1
traceroute to 192.168.10.1 (192.168.10.1), 30 hops max, 60 byte packets
 1  xxxborder.xxxxx.net (192.168.0.1)  0.682 ms  1.211 ms  1.658 ms
 2  paradox.xxxxx.net (192.168.0.10)  4.029 ms  4.019 ms  4.008 ms
 3  * * *
 4  * * *
root@shodan:~# ping 10.8.0.1
PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
64 bytes from 10.8.0.1: icmp_req=1 ttl=64 time=0.927 ms
From 192.168.0.1: icmp_seq=2 Redirect Host(New nexthop: 192.168.0.10)
64 bytes from 10.8.0.1: icmp_req=2 ttl=64 time=1.32 ms
64 bytes from 10.8.0.1: icmp_req=3 ttl=64 time=0.700 ms
64 bytes from 10.8.0.1: icmp_req=4 ttl=64 time=0.693 ms
64 bytes from 10.8.0.1: icmp_req=5 ttl=64 time=0.699 ms
64 bytes from 10.8.0.1: icmp_req=6 ttl=64 time=0.951 ms
64 bytes from 10.8.0.1: icmp_req=7 ttl=64 time=0.687 ms
64 bytes from 10.8.0.1: icmp_req=8 ttl=64 time=0.692 ms
^C
--- 10.8.0.1 ping statistics ---
8 packets transmitted, 8 received, 0% packet loss, time 6999ms
rtt min/avg/max/mdev = 0.687/0.834/1.325/0.213 ms
root@shodan:~# ping 10.8.0.6
PING 10.8.0.6 (10.8.0.6) 56(84) bytes of data.
64 bytes from 10.8.0.6: icmp_req=1 ttl=63 time=26.2 ms
From 192.168.0.1: icmp_seq=2 Redirect Host(New nexthop: 192.168.0.10)
64 bytes from 10.8.0.6: icmp_req=2 ttl=63 time=20.7 ms
64 bytes from 10.8.0.6: icmp_req=3 ttl=63 time=21.7 ms
64 bytes from 10.8.0.6: icmp_req=4 ttl=63 time=20.7 ms
64 bytes from 10.8.0.6: icmp_req=5 ttl=63 time=20.9 ms

But looks like I'm able to ping to the clients vpn address from a host on the servers LAN. kind of working lol.

Also, noticing the Redirect Host(New nexthop: 192.168.0.10) message from time to time. Assuming that's because the host isn't aware of the 192.168.0.10 route?

maikcat

your ccd file MUST contain the iroute statement yes iroute not route...

Michael.

zen0n

Thanks for the help guys! I haven't been able to look into this much this week, but plan on throwing some time at it tonight or Saturday.

debbie, I'm pretty sure it is turned on for the client end. If you look in the snippet on my first post in the section Client routing and ping situation sysctl shows it as 1. I am planning on disabling ipv6 for the time being to make sure that isn't an issue.

maikcat, will do. I'll make some changes and see how it works.

Any particular points I should be running tcpdump/wireshark against to see whats going on?

Thanks again!

zen0n

Also, I guess I should probably run those iptables rules on the client box aswell? with -d 192.168.10.0/24 ?