Windows 8.1 stuck in "Waiting for TUN/TAP interface"

gac

Hey all, I'm running a forked version of OpenVPN and having some issues. On *some* Windows 8.1 clients, I find it impossible to make a connection successfully as the connection gets stuck at the point of adding routes, claiming that it's "waiting for TUN/TAP interface to come up". However, this doesn't affect all clients in the same way - on my work desk currently I have a laptop running the English SKU of Windows 8.1 which seems to work very reliably. I also have a VM running the Spanish SKU of Windows 8.1, which fails consistently against the same server. I've tried several things on this Spanish VM including:

- Disabling the Windows Firewall service
- Running the client as Administrator (which isn't required on other systems as we have the OpenVPN service running to take care of route additions)
- Updating the TAP drivers to the latest version but keeping my normal client version (which is a fork of OpenVPN GUI 2.1_rc20)
- Installing the latest OpenVPN GUI from openvpn.net
- Opening ncpa.cpl before connecting

And so far I've had no luck with any of these fixes, they all have the same symptoms. A bit about our setup; we're running TAP bridging for simplicity, running over TCP/443 (again for simplicity, and ability to negotiate some of the strictest firewalls). We use OpenVPN's IP address configuration mechanism rather than bridging traffic to the DHCP server on the remote LAN. I've checked that the DHCP Client service is running and it definitely is, we use DHCP on our local LAN so this would be required. I don't currently have any verb 4 logs, but a colleague's log can be found here - http://pastebin.com/Y8gpzPfE - configs will follow when I've downloaded them from the server and anonymised them. If anyone's seen this behaviour before and has any clues what I need to change on this Spanish VM (not sure the language is actually relevant but an equivalent English system works with 8.1 fine, which implies that even though this is a fork of an old version, it's not actually the software version that's causing the problem) then any pointers would be appreciated!

gac

Server config:

port-share 127.0.0.1 443
port-share-prepend-address
server-bridge 10.0.0.1 255.255.128.0 10.0.0.201 10.0.0.230
ca "/folder/openvpn/ca.crt"
cert "/folder/openvpn/tap0/server.crt"
key "/folder/openvpn/tap0/server.key"
dh "/folder/openvpn/dh1024.pem"
client-config-dir "/folder/openvpn/ccd"
push "dhcp-option DNS 10.0.0.2"
push "dhcp-option WINS 10.0.0.2"
push "dhcp-option DOMAIN domaingoeshere"
push "route 10.0.0.0 255.0.0.0"
writepid "/folder/openvpn/tap0/pid"
management "/folder/openvpn/tap0/management.socket" unix
log-append /folder/openvpn/tap0/vpn.log
verb 4
keepalive 10 120
duplicate-cn
reneg-sec 889020
hand-window 60
tcp-nodelay

Client config:

client
auth-user-pass 
single-session
dev tap
proto tcp
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
ns-cert-type server
cert client.crt
key client.key
verb 4
remote remote.server.name
route-up "up-windows.bat"
route-delay 10
down "down-windows.bat"
script-security 2 system
port 443
reneg-sec 889020
hand-window 60

#MI START
#Configuration for Management Interface - this part is regenerated during Network Connector service start-up
management 127.0.0.1 55501
management-hold
management-query-passwords
auth-retry interact
#MI END

Server verb 4 log:

Mon May 12 11:21:23 2014 us=15212 MULTI: multi_create_instance called
Mon May 12 11:21:23 2014 us=15368 Re-using SSL/TLS context
Mon May 12 11:21:23 2014 us=15618 Control Channel MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon May 12 11:21:23 2014 us=15659 Data Channel MTU parms [ L:1575 D:1450 EF:43 EB:4 ET:32 EL:0 ]
Mon May 12 11:21:23 2014 us=15759 Local Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_SERVER,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon May 12 11:21:23 2014 us=15783 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_CLIENT,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon May 12 11:21:23 2014 us=15840 Local Options hash (VER=V4): 'a917298a'
Mon May 12 11:21:23 2014 us=15883 Expected Remote Options hash (VER=V4): '10f35004'
Mon May 12 11:21:23 2014 us=15939 TCP connection established with 172.16.0.1:33232
Mon May 12 11:21:23 2014 us=15972 Socket Buffers: R=[131072->131072] S=[131072->131072]
Mon May 12 11:21:23 2014 us=15995 Socket flags: TCP_NODELAY=1 succeeded
Mon May 12 11:21:23 2014 us=16024 TCPv4_SERVER link local: [undef]
Mon May 12 11:21:23 2014 us=16050 TCPv4_SERVER link remote: 172.16.0.1:33232
Mon May 12 11:21:23 2014 us=58045 172.16.0.1:33232 TLS: Initial packet from 172.16.0.1:33232, sid=403eedbf 4544224b
Mon May 12 11:21:23 2014 us=255010 172.16.0.1:33232 VERIFY OK: depth=1, /OU=SSL VPN/O=Vendor Name/CN=US
Mon May 12 11:21:23 2014 us=255588 172.16.0.1:33232 VERIFY OK: depth=0, /C=US/O=Vendor Name/OU=SSL VPN/CN=ConfigName
Mon May 12 11:21:23 2014 us=312291 172.16.0.1:33232 TLS: Username/Password authentication deferred for username 'g-a-c'
Mon May 12 11:21:23 2014 us=312764 172.16.0.1:33232 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 12 11:21:23 2014 us=312798 172.16.0.1:33232 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 12 11:21:23 2014 us=312940 172.16.0.1:33232 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 12 11:21:23 2014 us=312967 172.16.0.1:33232 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 12 11:21:23 2014 us=353398 172.16.0.1:33232 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon May 12 11:21:23 2014 us=353534 172.16.0.1:33232 [ConfigName] Peer Connection Initiated with 172.16.0.1:33232
Mon May 12 11:21:23 2014 us=831114 ConfigName/172.16.0.1:33232 OPTIONS IMPORT: reading client specific options from: /folder/openvpn/ccd/ConfigName
Mon May 12 11:21:25 2014 us=277301 ConfigName/172.16.0.1:33232 PUSH: Received control message: 'PUSH_REQUEST'
Mon May 12 11:21:25 2014 us=277516 ConfigName/172.16.0.1:33232 SENT CONTROL [ConfigName]: 'PUSH_REPLY,dhcp-option DNS 10.0.0.2,dhcp-option WINS 10.0.0.2,dhcp-option DOMAIN domain.name,route 10.0.0.0 255.0.0.0,route-gateway 10.0.0.1,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.0.0.221 255.255.128.0' (status=1)
Mon May 12 11:22:44 2014 us=981529 ConfigName/172.16.0.1:33232 Connection reset, restarting [0]
Mon May 12 11:22:44 2014 us=981625 ConfigName/172.16.0.1:33232 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon May 12 11:22:45 2014 us=9275 TCP/UDP: Closing socket

Client verb 4 log:

Mon May 12 12:21:14 2014 MANAGEMENT: CMD 'hold release'
Mon May 12 12:21:14 2014 MANAGEMENT: CMD 'hold off'
Mon May 12 12:21:21 2014 MANAGEMENT: CMD 'username 'Auth' 'g-a-c''
Mon May 12 12:21:21 2014 MANAGEMENT: CMD 'password [...]'
Mon May 12 12:21:21 2014 Restart pause, 5 second(s)
Mon May 12 12:21:27 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon May 12 12:21:27 2014 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Mon May 12 12:21:27 2014 Control Channel MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon May 12 12:21:27 2014 MANAGEMENT: >STATE:1399890087,RESOLVE,,,
Mon May 12 12:21:27 2014 Data Channel MTU parms [ L:1575 D:1450 EF:43 EB:4 ET:32 EL:0 ]
Mon May 12 12:21:27 2014 Local Options hash (VER=V4): '10f35004'
Mon May 12 12:21:27 2014 Expected Remote Options hash (VER=V4): 'a917298a'
Mon May 12 12:21:27 2014 Attempting to establish TCP connection with 10.0.0.19:443
Mon May 12 12:21:27 2014 MANAGEMENT: >STATE:1399890087,TCP_CONNECT,,,
Mon May 12 12:21:27 2014 TCP connection established with 10.0.0.19:443
Mon May 12 12:21:27 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon May 12 12:21:27 2014 TCPv4_CLIENT link local: [undef]
Mon May 12 12:21:27 2014 TCPv4_CLIENT link remote: 10.0.0.19:443
Mon May 12 12:21:27 2014 MANAGEMENT: >STATE:1399890087,WAIT,,,
Mon May 12 12:21:27 2014 MANAGEMENT: >STATE:1399890087,AUTH,,,
Mon May 12 12:21:27 2014 TLS: Initial packet from 10.0.0.19:443, sid=afe15e6d 46afe78f
Mon May 12 12:21:27 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon May 12 12:21:27 2014 VERIFY OK: depth=1, /OU=VPN/O=Vendor_Name/CN=US
Mon May 12 12:21:27 2014 VERIFY OK: nsCertType=SERVER
Mon May 12 12:21:27 2014 VERIFY OK: depth=0, /C=US/O=Vendor_Name/OU=VPN/CN=tap0
Mon May 12 12:21:27 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 12 12:21:27 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 12 12:21:27 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 12 12:21:27 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 12 12:21:27 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon May 12 12:21:27 2014 [tap0] Peer Connection Initiated with 10.0.0.19:443
Mon May 12 12:21:28 2014 MANAGEMENT: >STATE:1399890088,GET_CONFIG,,,
Mon May 12 12:21:29 2014 SENT CONTROL [tap0]: 'PUSH_REQUEST' (status=1)
Mon May 12 12:21:29 2014 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.0.0.2,dhcp-option WINS 10.0.0.2,dhcp-option DOMAIN domain.name,route 10.0.0.0 255.0.0.0,route-gateway 10.0.0.1,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.0.0.221 255.255.128.0'
Mon May 12 12:21:29 2014 OPTIONS IMPORT: timers and/or timeouts modified
Mon May 12 12:21:29 2014 OPTIONS IMPORT: --socket-flags option modified
Mon May 12 12:21:29 2014 Socket flags: TCP_NODELAY=1 succeeded
Mon May 12 12:21:29 2014 OPTIONS IMPORT: --ifconfig/up options modified
Mon May 12 12:21:29 2014 OPTIONS IMPORT: route options modified
Mon May 12 12:21:29 2014 OPTIONS IMPORT: route-related options modified
Mon May 12 12:21:29 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon May 12 12:21:29 2014 WARNING: --remote address [10.0.0.19] conflicts with --ifconfig subnet [10.0.0.221, 255.255.128.0] -- local and remote addresses cannot be inside of the --ifconfig subnet. (silence this warning with --ifconfig-nowarn)
Mon May 12 12:21:29 2014 ROUTE default_gateway=10.0.2.2
Mon May 12 12:21:29 2014 MANAGEMENT: >STATE:1399890089,ASSIGN_IP,,10.0.0.221,
Mon May 12 12:21:29 2014 TAP-WIN32 device [Conexión de área local] opened: \\.\Global\{F889B212-799E-4AC9-8ADC-AA097B5A6DA8}.tap
Mon May 12 12:21:29 2014 TAP-Win32 Driver Version 9.6 
Mon May 12 12:21:29 2014 TAP-Win32 MTU=1500
Mon May 12 12:21:29 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.0.0.221/255.255.128.0 on interface {F889B212-799E-4AC9-8ADC-AA097B5A6DA8} [DHCP-serv: 10.0.0.0, lease-time: 31536000]
Mon May 12 12:21:29 2014 Successful ARP Flush on interface [7] {F889B212-799E-4AC9-8ADC-AA097B5A6DA8}
Mon May 12 12:21:39 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:39 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:49 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:49 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:50 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:50 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:51 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:51 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:52 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:52 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:53 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:53 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:54 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:54 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:55 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:55 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:56 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:56 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:57 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:57 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:58 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:58 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:21:59 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:21:59 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:00 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:00 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:01 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:01 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:02 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:02 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:03 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:03 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:04 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:04 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:05 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:05 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:06 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:06 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:07 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:07 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:08 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:08 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 12:22:09 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 12:22:09 2014 MANAGEMENT: >STATE:1399890129,ADD_ROUTES,,,
Mon May 12 12:22:09 2014 WARNING: potential route subnet conflict between local LAN [10.0.2.0/255.255.255.0] and remote VPN [10.0.0.0/255.0.0.0]
Mon May 12 12:22:09 2014 C:\WINDOWS\system32\route.exe ADD 10.0.0.0 MASK 255.0.0.0 10.0.0.1
Mon May 12 12:22:09 2014 Warning: route gateway is not reachable on any active network adapters: 10.0.0.1
Mon May 12 12:22:09 2014 Route addition via IPAPI failed [adaptive]
Mon May 12 12:22:09 2014 Route addition fallback to route.exe
 Correcto

ipconfig /registerdns 

Configuraci¢n IP de Windows

Se inici¢ el registro de los registros de recursos DNS para todos
los adaptadores de este equipo. Cualquier error se notificar  en
el Visor de eventos en 15 minutos.
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 10.0.2.2 p=0 i=3 t=4 pr=3 a=796 h=0 m=10/0/0/0/0
10.0.0.0 255.0.0.0 10.0.0.1 p=0 i=3 t=4 pr=3 a=3 h=0 m=11/0/0/0/0
10.0.2.0 255.255.255.0 10.0.2.15 p=0 i=3 t=3 pr=2 a=796 h=0 m=266/0/0/0/0
10.0.2.15 255.255.255.255 10.0.2.15 p=0 i=3 t=3 pr=2 a=796 h=0 m=266/0/0/0/0
10.0.2.255 255.255.255.255 10.0.2.15 p=0 i=3 t=3 pr=2 a=796 h=0 m=266/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=820 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=820 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=820 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=820 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 10.0.2.15 p=0 i=3 t=3 pr=2 a=814 h=0 m=266/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=820 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 10.0.2.15 p=0 i=3 t=3 pr=2 a=814 h=0 m=266/0/0/0/0
SYSTEM ADAPTER LIST
TAP-Win32 Adapter V9
  Index = 7
  GUID = {F889B212-799E-4AC9-8ADC-AA097B5A6DA8}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:f8:89:b2:12
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV =  
  DHCP LEASE OBTAINED = Mon May 12 12:22:12 2014
  DHCP LEASE EXPIRES  = Mon May 12 12:22:12 2014
  PRI WINS = 10.0.0.2/255.255.255.255 
  SEC WINS =  
  DNS SERV =  
Adaptador de escritorio Intel(R) PRO/1000 MT
  Index = 3
  GUID = {4D1E5BD6-E747-4115-8A24-C6B3E4BA8FFE}
  IP = 10.0.2.15/255.255.255.0 
  MAC = 08:00:27:3f:43:85
  GATEWAY = 10.0.2.2/255.255.255.255 
  DHCP SERV = 10.0.2.2/255.255.255.255 
  DHCP LEASE OBTAINED = Mon May 12 12:09:15 2014
  DHCP LEASE EXPIRES  = Tue May 13 12:09:15 2014
  DNS SERV = 10.0.0.2/255.255.255.255 
Mon May 12 12:22:12 2014 Initialization Sequence Completed With Errors. DHCP Client Service might not be running, or the TAP-Win32 adapter might be firewalled?
Mon May 12 12:22:12 2014 MANAGEMENT: >STATE:1399890132,CONNECTED,ERROR,10.0.0.221,10.0.0.19
Mon May 12 12:22:49 2014 MANAGEMENT: CMD 'forget-passwords'
Mon May 12 12:22:49 2014 MANAGEMENT: CMD 'hold on'
Mon May 12 12:22:49 2014 MANAGEMENT: CMD 'signal SIGHUP'
Mon May 12 12:22:49 2014 TCP/UDP: Closing socket
Mon May 12 12:22:49 2014 C:\WINDOWS\system32\route.exe DELETE 10.0.0.0 MASK 255.0.0.0 10.0.0.1
Mon May 12 12:22:49 2014 Warning: route gateway is not reachable on any active network adapters: 10.0.0.1
Mon May 12 12:22:49 2014 Route deletion via IPAPI failed [adaptive]
Mon May 12 12:22:49 2014 Route deletion fallback to route.exe
 Correcto
Mon May 12 12:22:49 2014 Closing TUN/TAP interface
Mon May 12 12:22:49 2014 down-windows.bat Conexión de área local 1500 1575 10.0.0.221 255.255.128.0 init
Mon May 12 12:22:49 2014 SIGHUP[hard,] received, process restarting
Mon May 12 12:22:49 2014 MANAGEMENT: >STATE:1399890169,RECONNECTING,SIGHUP,,
Mon May 12 12:22:49 2014 us=421000 Current Parameter Settings:
Mon May 12 12:22:49 2014 us=421000   config = 'ConfigName.ovpn'
Mon May 12 12:22:49 2014 us=421000   mode = 0
Mon May 12 12:22:49 2014 us=421000   show_ciphers = DISABLED
Mon May 12 12:22:49 2014 us=421000   show_digests = DISABLED
Mon May 12 12:22:49 2014 us=421000   show_engines = DISABLED
Mon May 12 12:22:49 2014 us=421000   genkey = DISABLED
Mon May 12 12:22:49 2014 us=421000   key_pass_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   show_tls_ciphers = DISABLED
Mon May 12 12:22:49 2014 us=421000 Connection profiles [default]:
Mon May 12 12:22:49 2014 us=421000   proto = tcp-client
Mon May 12 12:22:49 2014 us=421000   local = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   local_port = 0
Mon May 12 12:22:49 2014 us=421000   remote = 'remote.server.name'
Mon May 12 12:22:49 2014 us=421000   remote_port = 443
Mon May 12 12:22:49 2014 us=421000   remote_float = DISABLED
Mon May 12 12:22:49 2014 us=421000   bind_defined = DISABLED
Mon May 12 12:22:49 2014 us=421000   bind_local = DISABLED
Mon May 12 12:22:49 2014 us=421000   connect_retry_seconds = 5
Mon May 12 12:22:49 2014 us=421000   connect_timeout = 10
Mon May 12 12:22:49 2014 us=421000   connect_retry_max = 0
Mon May 12 12:22:49 2014 us=421000   socks_proxy_server = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   socks_proxy_port = 0
Mon May 12 12:22:49 2014 us=421000   socks_proxy_retry = DISABLED
Mon May 12 12:22:49 2014 us=421000 Connection profiles END
Mon May 12 12:22:49 2014 us=421000   remote_random = DISABLED
Mon May 12 12:22:49 2014 us=421000   ipchange = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   dev = 'tap'
Mon May 12 12:22:49 2014 us=421000   dev_type = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   dev_node = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   lladdr = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   topology = 1
Mon May 12 12:22:49 2014 us=421000   tun_ipv6 = DISABLED
Mon May 12 12:22:49 2014 us=421000   ifconfig_local = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   ifconfig_remote_netmask = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   ifconfig_noexec = DISABLED
Mon May 12 12:22:49 2014 us=421000   ifconfig_nowarn = DISABLED
Mon May 12 12:22:49 2014 us=421000   shaper = 0
Mon May 12 12:22:49 2014 us=421000   tun_mtu = 1500
Mon May 12 12:22:49 2014 us=421000   tun_mtu_defined = ENABLED
Mon May 12 12:22:49 2014 us=421000   link_mtu = 1500
Mon May 12 12:22:49 2014 us=421000   link_mtu_defined = DISABLED
Mon May 12 12:22:49 2014 us=421000   tun_mtu_extra = 32
Mon May 12 12:22:49 2014 us=421000   tun_mtu_extra_defined = ENABLED
Mon May 12 12:22:49 2014 us=421000   fragment = 0
Mon May 12 12:22:49 2014 us=421000   mtu_discover_type = -1
Mon May 12 12:22:49 2014 us=421000   mtu_test = 0
Mon May 12 12:22:49 2014 us=421000   mlock = DISABLED
Mon May 12 12:22:49 2014 us=421000   keepalive_ping = 0
Mon May 12 12:22:49 2014 us=421000   keepalive_timeout = 0
Mon May 12 12:22:49 2014 us=421000   inactivity_timeout = 0
Mon May 12 12:22:49 2014 us=421000   ping_send_timeout = 0
Mon May 12 12:22:49 2014 us=421000   ping_rec_timeout = 0
Mon May 12 12:22:49 2014 us=421000   ping_rec_timeout_action = 0
Mon May 12 12:22:49 2014 us=421000   ping_timer_remote = DISABLED
Mon May 12 12:22:49 2014 us=421000   remap_sigusr1 = 0
Mon May 12 12:22:49 2014 us=421000   explicit_exit_notification = 0
Mon May 12 12:22:49 2014 us=421000   persist_tun = ENABLED
Mon May 12 12:22:49 2014 us=421000   persist_local_ip = DISABLED
Mon May 12 12:22:49 2014 us=421000   persist_remote_ip = DISABLED
Mon May 12 12:22:49 2014 us=421000   persist_key = ENABLED
Mon May 12 12:22:49 2014 us=421000   mssfix = 1450
Mon May 12 12:22:49 2014 us=421000   resolve_retry_seconds = 1000000000
Mon May 12 12:22:49 2014 us=421000   username = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   groupname = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   chroot_dir = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   cd_dir = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   writepid = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   up_script = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   down_script = 'down-windows.bat'
Mon May 12 12:22:49 2014 us=421000   down_pre = DISABLED
Mon May 12 12:22:49 2014 us=421000   up_restart = DISABLED
Mon May 12 12:22:49 2014 us=421000   up_delay = DISABLED
Mon May 12 12:22:49 2014 us=421000   daemon = DISABLED
Mon May 12 12:22:49 2014 us=421000   inetd = 0
Mon May 12 12:22:49 2014 us=421000   log = DISABLED
Mon May 12 12:22:49 2014 us=421000   suppress_timestamps = DISABLED
Mon May 12 12:22:49 2014 us=421000   nice = 0
Mon May 12 12:22:49 2014 us=421000   verbosity = 4
Mon May 12 12:22:49 2014 us=421000   mute = 0
Mon May 12 12:22:49 2014 us=421000   gremlin = 0
Mon May 12 12:22:49 2014 us=421000   status_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   status_file_version = 1
Mon May 12 12:22:49 2014 us=421000   status_file_update_freq = 60
Mon May 12 12:22:49 2014 us=421000   occ = ENABLED
Mon May 12 12:22:49 2014 us=421000   rcvbuf = 0
Mon May 12 12:22:49 2014 us=421000   sndbuf = 0
Mon May 12 12:22:49 2014 us=421000   sockflags = 0
Mon May 12 12:22:49 2014 us=421000   fast_io = DISABLED
Mon May 12 12:22:49 2014 us=421000   lzo = 0
Mon May 12 12:22:49 2014 us=421000   route_script = 'up-windows.bat'
Mon May 12 12:22:49 2014 us=421000   route_default_gateway = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   route_default_metric = 0
Mon May 12 12:22:49 2014 us=421000   route_noexec = DISABLED
Mon May 12 12:22:49 2014 us=421000   route_delay = 10
Mon May 12 12:22:49 2014 us=421000   route_delay_window = 30
Mon May 12 12:22:49 2014 us=421000   route_delay_defined = ENABLED
Mon May 12 12:22:49 2014 us=421000   route_nopull = DISABLED
Mon May 12 12:22:49 2014 us=421000   route_gateway_via_dhcp = DISABLED
Mon May 12 12:22:49 2014 us=421000   max_routes = 100
Mon May 12 12:22:49 2014 us=421000   allow_pull_fqdn = DISABLED
Mon May 12 12:22:49 2014 us=421000   management_addr = '127.0.0.1'
Mon May 12 12:22:49 2014 us=421000   management_port = 55501
Mon May 12 12:22:49 2014 us=421000   management_user_pass = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   management_log_history_cache = 250
Mon May 12 12:22:49 2014 us=421000   management_echo_buffer_size = 100
Mon May 12 12:22:49 2014 us=421000   management_write_peer_info_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   management_client_user = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   management_client_group = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   management_flags = 6
Mon May 12 12:22:49 2014 us=421000   shared_secret_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   key_direction = 0
Mon May 12 12:22:49 2014 us=421000   ciphername_defined = ENABLED
Mon May 12 12:22:49 2014 us=421000   ciphername = 'BF-CBC'
Mon May 12 12:22:49 2014 us=421000   authname_defined = ENABLED
Mon May 12 12:22:49 2014 us=421000   authname = 'SHA1'
Mon May 12 12:22:49 2014 us=421000   prng_hash = 'SHA1'
Mon May 12 12:22:49 2014 us=421000   prng_nonce_secret_len = 16
Mon May 12 12:22:49 2014 us=421000   keysize = 0
Mon May 12 12:22:49 2014 us=421000   engine = DISABLED
Mon May 12 12:22:49 2014 us=421000   replay = ENABLED
Mon May 12 12:22:49 2014 us=421000   mute_replay_warnings = DISABLED
Mon May 12 12:22:49 2014 us=421000   replay_window = 64
Mon May 12 12:22:49 2014 us=421000   replay_time = 15
Mon May 12 12:22:49 2014 us=421000   packet_id_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   use_iv = ENABLED
Mon May 12 12:22:49 2014 us=421000   test_crypto = DISABLED
Mon May 12 12:22:49 2014 us=421000   tls_server = DISABLED
Mon May 12 12:22:49 2014 us=421000   tls_client = ENABLED
Mon May 12 12:22:49 2014 us=421000   key_method = 2
Mon May 12 12:22:49 2014 us=421000   ca_file = 'ca.crt'
Mon May 12 12:22:49 2014 us=421000   ca_path = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   dh_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   cert_file = 'client.crt'
Mon May 12 12:22:49 2014 us=421000   priv_key_file = 'client.key'
Mon May 12 12:22:49 2014 us=421000   pkcs12_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   cryptoapi_cert = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   cipher_list = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   tls_verify = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   tls_remote = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   crl_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   ns_cert_type = 64
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_ku[i] = 0
Mon May 12 12:22:49 2014 us=421000   remote_cert_eku = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   tls_timeout = 2
Mon May 12 12:22:49 2014 us=421000   renegotiate_bytes = 0
Mon May 12 12:22:49 2014 us=421000   renegotiate_packets = 0
Mon May 12 12:22:49 2014 us=421000   renegotiate_seconds = 889020
Mon May 12 12:22:49 2014 us=421000   handshake_window = 60
Mon May 12 12:22:49 2014 us=421000   transition_window = 3600
Mon May 12 12:22:49 2014 us=421000   single_session = ENABLED
Mon May 12 12:22:49 2014 us=421000   tls_exit = DISABLED
Mon May 12 12:22:49 2014 us=421000   tls_auth_file = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_protected_authentication = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_private_mode = 00000000
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_cert_private = DISABLED
Mon May 12 12:22:49 2014 us=421000   pkcs11_pin_cache_period = -1
Mon May 12 12:22:49 2014 us=421000   pkcs11_id = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   pkcs11_id_management = DISABLED
Mon May 12 12:22:49 2014 us=421000   server_network = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   server_netmask = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   server_bridge_ip = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   server_bridge_netmask = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   server_bridge_pool_start = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   server_bridge_pool_end = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   ifconfig_pool_defined = DISABLED
Mon May 12 12:22:49 2014 us=421000   ifconfig_pool_start = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   ifconfig_pool_end = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   ifconfig_pool_netmask = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   ifconfig_pool_persist_filename = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   ifconfig_pool_persist_refresh_freq = 600
Mon May 12 12:22:49 2014 us=421000   n_bcast_buf = 256
Mon May 12 12:22:49 2014 us=421000   tcp_queue_limit = 64
Mon May 12 12:22:49 2014 us=421000   real_hash_size = 256
Mon May 12 12:22:49 2014 us=421000   virtual_hash_size = 256
Mon May 12 12:22:49 2014 us=421000   client_connect_script = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   learn_address_script = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   client_disconnect_script = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   client_config_dir = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   ccd_exclusive = DISABLED
Mon May 12 12:22:49 2014 us=421000   tmp_dir = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   push_ifconfig_defined = DISABLED
Mon May 12 12:22:49 2014 us=421000   push_ifconfig_local = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   push_ifconfig_remote_netmask = 0.0.0.0
Mon May 12 12:22:49 2014 us=421000   enable_c2c = DISABLED
Mon May 12 12:22:49 2014 us=421000   duplicate_cn = DISABLED
Mon May 12 12:22:49 2014 us=421000   cf_max = 0
Mon May 12 12:22:49 2014 us=421000   cf_per = 0
Mon May 12 12:22:49 2014 us=421000   max_clients = 1024
Mon May 12 12:22:49 2014 us=421000   max_routes_per_client = 256
Mon May 12 12:22:49 2014 us=421000   auth_user_pass_verify_script = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   auth_user_pass_verify_script_via_file = DISABLED
Mon May 12 12:22:49 2014 us=421000   ssl_flags = 0
Mon May 12 12:22:49 2014 us=421000   client = ENABLED
Mon May 12 12:22:49 2014 us=421000   pull = ENABLED
Mon May 12 12:22:49 2014 us=421000   auth_user_pass_file = 'stdin'
Mon May 12 12:22:49 2014 us=421000   show_net_up = DISABLED
Mon May 12 12:22:49 2014 us=421000   route_method = 0
Mon May 12 12:22:49 2014 us=421000   ip_win32_defined = DISABLED
Mon May 12 12:22:49 2014 us=421000   ip_win32_type = 3
Mon May 12 12:22:49 2014 us=421000   dhcp_masq_offset = 0
Mon May 12 12:22:49 2014 us=421000   dhcp_lease_time = 31536000
Mon May 12 12:22:49 2014 us=421000   tap_sleep = 0
Mon May 12 12:22:49 2014 us=421000   dhcp_options = DISABLED
Mon May 12 12:22:49 2014 us=421000   dhcp_renew = DISABLED
Mon May 12 12:22:49 2014 us=421000   dhcp_pre_release = DISABLED
Mon May 12 12:22:49 2014 us=421000   dhcp_release = DISABLED
Mon May 12 12:22:49 2014 us=421000   domain = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   netbios_scope = '[UNDEF]'
Mon May 12 12:22:49 2014 us=421000   netbios_node_type = 0
Mon May 12 12:22:49 2014 us=421000   disable_nbt = DISABLED

This is reproduced inside a VirtualBox VM with NAT networking (for ease of snapshotting while I try to figure this out) but the symptoms are identical to those on real hardware. The DHCP client service is running, and the results are the same with the firewall on or off.

gac

The route subnet warning appears because I'm using NAT networking in VirtualBox. The host machine is actually on an isolated Wi-Fi network on a different subnet from the VPN server, and the symptoms were the same on physical hardware on this isolated network. So although you're right and I do have that error I don't believe that it's the cause. Since the TAP adapter never comes up and the routes don't get added.

I'll re-run the test now with the VM bridged directly to the Wi-Fi adapter so that it gets its own IP address, but although the route conflict message will disappear I'm confident that it won't change the behaviour of the TAP adapter.

gac

Mon May 12 14:03:25 2014 us=875000 MANAGEMENT: CMD 'hold release'
Mon May 12 14:03:25 2014 us=890000 MANAGEMENT: CMD 'hold off'
Mon May 12 14:03:33 2014 us=109000 MANAGEMENT: CMD 'username 'Auth' 'gac''
Mon May 12 14:03:33 2014 us=109000 MANAGEMENT: CMD 'password [...]'
Mon May 12 14:03:33 2014 us=140000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon May 12 14:03:33 2014 us=140000 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Mon May 12 14:03:34 2014 us=562000 Control Channel MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon May 12 14:03:34 2014 us=578000 MANAGEMENT: >STATE:1399896214,RESOLVE,,,
Mon May 12 14:03:34 2014 us=687000 Data Channel MTU parms [ L:1575 D:1450 EF:43 EB:4 ET:32 EL:0 ]
Mon May 12 14:03:34 2014 us=687000 Local Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_CLIENT,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon May 12 14:03:34 2014 us=703000 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_SERVER,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon May 12 14:03:34 2014 us=718000 Local Options hash (VER=V4): '10f35004'
Mon May 12 14:03:34 2014 us=718000 Expected Remote Options hash (VER=V4): 'a917298a'
Mon May 12 14:03:34 2014 us=718000 Attempting to establish TCP connection with 10.0.0.19:443
Mon May 12 14:03:34 2014 us=734000 MANAGEMENT: >STATE:1399896214,TCP_CONNECT,,,
Mon May 12 14:03:34 2014 us=734000 TCP connection established with 10.0.0.19:443
Mon May 12 14:03:34 2014 us=734000 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon May 12 14:03:34 2014 us=734000 TCPv4_CLIENT link local: [undef]
Mon May 12 14:03:34 2014 us=734000 TCPv4_CLIENT link remote: 10.0.0.19:443
Mon May 12 14:03:34 2014 us=734000 MANAGEMENT: >STATE:1399896214,WAIT,,,
Mon May 12 14:03:34 2014 us=812000 MANAGEMENT: >STATE:1399896214,AUTH,,,
Mon May 12 14:03:34 2014 us=812000 TLS: Initial packet from 10.0.0.19:443, sid=6714673d 3f6637c6
Mon May 12 14:03:34 2014 us=828000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon May 12 14:03:34 2014 us=906000 VERIFY OK: depth=1, /OU=SSL_VPN/O=Vendor_Name/CN=US
Mon May 12 14:03:34 2014 us=906000 VERIFY OK: nsCertType=SERVER
Mon May 12 14:03:34 2014 us=906000 VERIFY OK: depth=0, /C=US/O=Vendor_Name/OU=SSL_VPN/CN=tap0
Mon May 12 14:03:35 2014 us=125000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 12 14:03:35 2014 us=140000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 12 14:03:35 2014 us=140000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon May 12 14:03:35 2014 us=140000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 12 14:03:35 2014 us=156000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon May 12 14:03:35 2014 us=156000 [tap0] Peer Connection Initiated with 10.0.0.19:443
Mon May 12 14:03:36 2014 us=171000 MANAGEMENT: >STATE:1399896216,GET_CONFIG,,,
Mon May 12 14:03:37 2014 us=62000 SENT CONTROL [tap0]: 'PUSH_REQUEST' (status=1)
Mon May 12 14:03:37 2014 us=78000 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.0.0.2,dhcp-option WINS 10.0.0.2,dhcp-option DOMAIN domain.name,route 10.0.0.0 255.0.0.0,route-gateway 10.0.0.1,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.0.0.221 255.255.128.0'
Mon May 12 14:03:37 2014 us=78000 OPTIONS IMPORT: timers and/or timeouts modified
Mon May 12 14:03:37 2014 us=78000 OPTIONS IMPORT: --socket-flags option modified
Mon May 12 14:03:37 2014 us=78000 Socket flags: TCP_NODELAY=1 succeeded
Mon May 12 14:03:37 2014 us=78000 OPTIONS IMPORT: --ifconfig/up options modified
Mon May 12 14:03:37 2014 us=78000 OPTIONS IMPORT: route options modified
Mon May 12 14:03:37 2014 us=78000 OPTIONS IMPORT: route-related options modified
Mon May 12 14:03:37 2014 us=78000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon May 12 14:03:37 2014 us=78000 WARNING: --remote address [10.0.0.19] conflicts with --ifconfig subnet [10.0.0.221, 255.255.128.0] -- local and remote addresses cannot be inside of the --ifconfig subnet. (silence this warning with --ifconfig-nowarn)
Mon May 12 14:03:37 2014 us=109000 ROUTE default_gateway=172.16.1.1
Mon May 12 14:03:37 2014 us=109000 MANAGEMENT: >STATE:1399896217,ASSIGN_IP,,10.0.0.221,
Mon May 12 14:03:37 2014 us=109000 TAP-WIN32 device [Conexión de área local] opened: \\.\Global\{F889B212-799E-4AC9-8ADC-AA097B5A6DA8}.tap
Mon May 12 14:03:37 2014 us=109000 TAP-Win32 Driver Version 9.6 
Mon May 12 14:03:37 2014 us=109000 TAP-Win32 MTU=1500
Mon May 12 14:03:37 2014 us=109000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.0.0.221/255.255.128.0 on interface {F889B212-799E-4AC9-8ADC-AA097B5A6DA8} [DHCP-serv: 10.0.0.0, lease-time: 31536000]
Mon May 12 14:03:37 2014 us=109000 DHCP option string: 0f093373 702e636f 2e756b06 040a0e00 022c040a 0e0002
Mon May 12 14:03:37 2014 us=125000 Successful ARP Flush on interface [7] {F889B212-799E-4AC9-8ADC-AA097B5A6DA8}
Mon May 12 14:03:47 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:03:47 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:03:57 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:03:57 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:03:58 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:03:58 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:03:59 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:03:59 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:00 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:00 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:01 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:01 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:02 2014 us=531000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:02 2014 us=531000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:03 2014 us=125000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:03 2014 us=125000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:04 2014 us=359000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:04 2014 us=359000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:05 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:05 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:06 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:06 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:07 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:07 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:08 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:08 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:09 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:09 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:10 2014 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:10 2014 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:11 2014 us=125000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:11 2014 us=125000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:12 2014 us=62000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:12 2014 us=62000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:13 2014 us=500000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:13 2014 us=500000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:14 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:14 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:15 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:15 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:16 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:16 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Mon May 12 14:04:17 2014 us=15000 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon May 12 14:04:17 2014 us=15000 MANAGEMENT: >STATE:1399896257,ADD_ROUTES,,,
Mon May 12 14:04:17 2014 us=15000 C:\WINDOWS\system32\route.exe ADD 10.0.0.0 MASK 255.0.0.0 10.0.0.1
Mon May 12 14:04:17 2014 us=31000 Warning: route gateway is not reachable on any active network adapters: 10.0.0.1
Mon May 12 14:04:17 2014 us=31000 Route addition via IPAPI failed [adaptive]
Mon May 12 14:04:17 2014 us=31000 Route addition fallback to route.exe
 Correcto

ipconfig /registerdns 

Configuraci¢n IP de Windows

Se inici¢ el registro de los registros de recursos DNS para todos
los adaptadores de este equipo. Cualquier error se notificar  en
el Visor de eventos en 15 minutos.
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 172.16.1.1 p=0 i=3 t=4 pr=3 a=195 h=0 m=10/0/0/0/0
10.0.0.0 255.0.0.0 10.0.0.1 p=0 i=3 t=4 pr=3 a=3 h=0 m=11/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=233 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=233 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=233 h=0 m=306/0/0/0/0
172.16.1.0 255.255.255.0 172.16.1.174 p=0 i=3 t=3 pr=2 a=195 h=0 m=266/0/0/0/0
172.16.1.174 255.255.255.255 172.16.1.174 p=0 i=3 t=3 pr=2 a=195 h=0 m=266/0/0/0/0
172.16.1.255 255.255.255.255 172.16.1.174 p=0 i=3 t=3 pr=2 a=195 h=0 m=266/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=233 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 172.16.1.174 p=0 i=3 t=3 pr=2 a=228 h=0 m=266/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=233 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 172.16.1.174 p=0 i=3 t=3 pr=2 a=228 h=0 m=266/0/0/0/0
SYSTEM ADAPTER LIST
TAP-Win32 Adapter V9
  Index = 7
  GUID = {F889B212-799E-4AC9-8ADC-AA097B5A6DA8}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:f8:89:b2:12
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV =  
  DHCP LEASE OBTAINED = Mon May 12 14:04:20 2014
  DHCP LEASE EXPIRES  = Mon May 12 14:04:20 2014
  PRI WINS = 10.0.0.2/255.255.255.255 
  SEC WINS =  
  DNS SERV =  
Adaptador de escritorio Intel(R) PRO/1000 MT
  Index = 3
  GUID = {4D1E5BD6-E747-4115-8A24-C6B3E4BA8FFE}
  IP = 172.16.1.174/255.255.255.0 
  MAC = 08:00:27:3f:43:85
  GATEWAY = 172.16.1.1/255.255.255.255 
  DHCP SERV = 172.16.1.1/255.255.255.255 
  DHCP LEASE OBTAINED = Mon May 12 14:01:12 2014
  DHCP LEASE EXPIRES  = Tue May 13 02:01:12 2014
  DNS SERV = 172.16.1.1/255.255.255.255 
Mon May 12 14:04:20 2014 us=687000 Initialization Sequence Completed With Errors. DHCP Client Service might not be running, or the TAP-Win32 adapter might be firewalled?
Mon May 12 14:04:20 2014 us=687000 MANAGEMENT: >STATE:1399896260,CONNECTED,ERROR,10.0.0.221,10.0.0.19
Mon May 12 14:04:30 2014 us=93000 MANAGEMENT: CMD 'forget-passwords'
Mon May 12 14:04:30 2014 us=93000 MANAGEMENT: CMD 'hold on'
Mon May 12 14:04:30 2014 us=93000 MANAGEMENT: CMD 'signal SIGHUP'
Mon May 12 14:04:30 2014 us=93000 TCP/UDP: Closing socket
Mon May 12 14:04:30 2014 us=93000 C:\WINDOWS\system32\route.exe DELETE 10.0.0.0 MASK 255.0.0.0 10.0.0.1
Mon May 12 14:04:30 2014 us=109000 Warning: route gateway is not reachable on any active network adapters: 10.0.0.1
Mon May 12 14:04:30 2014 us=109000 Route deletion via IPAPI failed [adaptive]
Mon May 12 14:04:30 2014 us=109000 Route deletion fallback to route.exe
 Correcto
Mon May 12 14:04:30 2014 us=296000 Closing TUN/TAP interface
Mon May 12 14:04:30 2014 us=296000 down-windows.bat Conexión de área local 1500 1575 10.0.0.221 255.255.128.0 init
Mon May 12 14:04:30 2014 us=500000 SIGHUP[hard,] received, process restarting
Mon May 12 14:04:30 2014 us=500000 MANAGEMENT: >STATE:1399896270,RECONNECTING,SIGHUP,,
Mon May 12 14:04:30 2014 us=500000 Current Parameter Settings:
Mon May 12 14:04:30 2014 us=500000   config = 'GavinSpanishTesting.ovpn'
Mon May 12 14:04:30 2014 us=500000   mode = 0
Mon May 12 14:04:30 2014 us=500000   show_ciphers = DISABLED
Mon May 12 14:04:30 2014 us=500000   show_digests = DISABLED
Mon May 12 14:04:30 2014 us=500000   show_engines = DISABLED
Mon May 12 14:04:30 2014 us=500000   genkey = DISABLED
Mon May 12 14:04:30 2014 us=500000   key_pass_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   show_tls_ciphers = DISABLED
Mon May 12 14:04:30 2014 us=500000 Connection profiles [default]:
Mon May 12 14:04:30 2014 us=500000   proto = tcp-client
Mon May 12 14:04:30 2014 us=500000   local = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   local_port = 0
Mon May 12 14:04:30 2014 us=500000   remote = 'server.host.name'
Mon May 12 14:04:30 2014 us=500000   remote_port = 443
Mon May 12 14:04:30 2014 us=500000   remote_float = DISABLED
Mon May 12 14:04:30 2014 us=500000   bind_defined = DISABLED
Mon May 12 14:04:30 2014 us=500000   bind_local = DISABLED
Mon May 12 14:04:30 2014 us=500000   connect_retry_seconds = 5
Mon May 12 14:04:30 2014 us=500000   connect_timeout = 10
Mon May 12 14:04:30 2014 us=500000   connect_retry_max = 0
Mon May 12 14:04:30 2014 us=500000   socks_proxy_server = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   socks_proxy_port = 0
Mon May 12 14:04:30 2014 us=500000   socks_proxy_retry = DISABLED
Mon May 12 14:04:30 2014 us=500000 Connection profiles END
Mon May 12 14:04:30 2014 us=500000   remote_random = DISABLED
Mon May 12 14:04:30 2014 us=500000   ipchange = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   dev = 'tap'
Mon May 12 14:04:30 2014 us=500000   dev_type = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   dev_node = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   lladdr = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   topology = 1
Mon May 12 14:04:30 2014 us=500000   tun_ipv6 = DISABLED
Mon May 12 14:04:30 2014 us=500000   ifconfig_local = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   ifconfig_remote_netmask = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   ifconfig_noexec = DISABLED
Mon May 12 14:04:30 2014 us=500000   ifconfig_nowarn = DISABLED
Mon May 12 14:04:30 2014 us=500000   shaper = 0
Mon May 12 14:04:30 2014 us=500000   tun_mtu = 1500
Mon May 12 14:04:30 2014 us=500000   tun_mtu_defined = ENABLED
Mon May 12 14:04:30 2014 us=500000   link_mtu = 1500
Mon May 12 14:04:30 2014 us=500000   link_mtu_defined = DISABLED
Mon May 12 14:04:30 2014 us=500000   tun_mtu_extra = 32
Mon May 12 14:04:30 2014 us=500000   tun_mtu_extra_defined = ENABLED
Mon May 12 14:04:30 2014 us=500000   fragment = 0
Mon May 12 14:04:30 2014 us=500000   mtu_discover_type = -1
Mon May 12 14:04:30 2014 us=500000   mtu_test = 0
Mon May 12 14:04:30 2014 us=500000   mlock = DISABLED
Mon May 12 14:04:30 2014 us=500000   keepalive_ping = 0
Mon May 12 14:04:30 2014 us=500000   keepalive_timeout = 0
Mon May 12 14:04:30 2014 us=500000   inactivity_timeout = 0
Mon May 12 14:04:30 2014 us=500000   ping_send_timeout = 0
Mon May 12 14:04:30 2014 us=500000   ping_rec_timeout = 0
Mon May 12 14:04:30 2014 us=500000   ping_rec_timeout_action = 0
Mon May 12 14:04:30 2014 us=500000   ping_timer_remote = DISABLED
Mon May 12 14:04:30 2014 us=500000   remap_sigusr1 = 0
Mon May 12 14:04:30 2014 us=500000   explicit_exit_notification = 0
Mon May 12 14:04:30 2014 us=500000   persist_tun = ENABLED
Mon May 12 14:04:30 2014 us=500000   persist_local_ip = DISABLED
Mon May 12 14:04:30 2014 us=500000   persist_remote_ip = DISABLED
Mon May 12 14:04:30 2014 us=500000   persist_key = ENABLED
Mon May 12 14:04:30 2014 us=500000   mssfix = 1450
Mon May 12 14:04:30 2014 us=500000   resolve_retry_seconds = 1000000000
Mon May 12 14:04:30 2014 us=500000   username = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   groupname = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   chroot_dir = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   cd_dir = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   writepid = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   up_script = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   down_script = 'down-windows.bat'
Mon May 12 14:04:30 2014 us=500000   down_pre = DISABLED
Mon May 12 14:04:30 2014 us=500000   up_restart = DISABLED
Mon May 12 14:04:30 2014 us=500000   up_delay = DISABLED
Mon May 12 14:04:30 2014 us=500000   daemon = DISABLED
Mon May 12 14:04:30 2014 us=500000   inetd = 0
Mon May 12 14:04:30 2014 us=500000   log = DISABLED
Mon May 12 14:04:30 2014 us=500000   suppress_timestamps = DISABLED
Mon May 12 14:04:30 2014 us=500000   nice = 0
Mon May 12 14:04:30 2014 us=500000   verbosity = 4
Mon May 12 14:04:30 2014 us=500000   mute = 0
Mon May 12 14:04:30 2014 us=500000   gremlin = 0
Mon May 12 14:04:30 2014 us=500000   status_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   status_file_version = 1
Mon May 12 14:04:30 2014 us=500000   status_file_update_freq = 60
Mon May 12 14:04:30 2014 us=500000   occ = ENABLED
Mon May 12 14:04:30 2014 us=500000   rcvbuf = 0
Mon May 12 14:04:30 2014 us=500000   sndbuf = 0
Mon May 12 14:04:30 2014 us=500000   sockflags = 0
Mon May 12 14:04:30 2014 us=500000   fast_io = DISABLED
Mon May 12 14:04:30 2014 us=500000   lzo = 0
Mon May 12 14:04:30 2014 us=500000   route_script = 'up-windows.bat'
Mon May 12 14:04:30 2014 us=500000   route_default_gateway = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   route_default_metric = 0
Mon May 12 14:04:30 2014 us=500000   route_noexec = DISABLED
Mon May 12 14:04:30 2014 us=500000   route_delay = 10
Mon May 12 14:04:30 2014 us=500000   route_delay_window = 30
Mon May 12 14:04:30 2014 us=500000   route_delay_defined = ENABLED
Mon May 12 14:04:30 2014 us=500000   route_nopull = DISABLED
Mon May 12 14:04:30 2014 us=500000   route_gateway_via_dhcp = DISABLED
Mon May 12 14:04:30 2014 us=500000   max_routes = 100
Mon May 12 14:04:30 2014 us=500000   allow_pull_fqdn = DISABLED
Mon May 12 14:04:30 2014 us=500000   management_addr = '127.0.0.1'
Mon May 12 14:04:30 2014 us=500000   management_port = 55501
Mon May 12 14:04:30 2014 us=500000   management_user_pass = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   management_log_history_cache = 250
Mon May 12 14:04:30 2014 us=500000   management_echo_buffer_size = 100
Mon May 12 14:04:30 2014 us=500000   management_write_peer_info_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   management_client_user = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   management_client_group = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   management_flags = 6
Mon May 12 14:04:30 2014 us=500000   shared_secret_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   key_direction = 0
Mon May 12 14:04:30 2014 us=500000   ciphername_defined = ENABLED
Mon May 12 14:04:30 2014 us=500000   ciphername = 'BF-CBC'
Mon May 12 14:04:30 2014 us=500000   authname_defined = ENABLED
Mon May 12 14:04:30 2014 us=500000   authname = 'SHA1'
Mon May 12 14:04:30 2014 us=500000   prng_hash = 'SHA1'
Mon May 12 14:04:30 2014 us=500000   prng_nonce_secret_len = 16
Mon May 12 14:04:30 2014 us=500000   keysize = 0
Mon May 12 14:04:30 2014 us=500000   engine = DISABLED
Mon May 12 14:04:30 2014 us=500000   replay = ENABLED
Mon May 12 14:04:30 2014 us=500000   mute_replay_warnings = DISABLED
Mon May 12 14:04:30 2014 us=500000   replay_window = 64
Mon May 12 14:04:30 2014 us=500000   replay_time = 15
Mon May 12 14:04:30 2014 us=500000   packet_id_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   use_iv = ENABLED
Mon May 12 14:04:30 2014 us=500000   test_crypto = DISABLED
Mon May 12 14:04:30 2014 us=500000   tls_server = DISABLED
Mon May 12 14:04:30 2014 us=500000   tls_client = ENABLED
Mon May 12 14:04:30 2014 us=500000   key_method = 2
Mon May 12 14:04:30 2014 us=500000   ca_file = 'ca.crt'
Mon May 12 14:04:30 2014 us=500000   ca_path = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   dh_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   cert_file = 'client.crt'
Mon May 12 14:04:30 2014 us=500000   priv_key_file = 'client.key'
Mon May 12 14:04:30 2014 us=500000   pkcs12_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   cryptoapi_cert = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   cipher_list = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   tls_verify = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   tls_remote = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   crl_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   ns_cert_type = 64
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_ku[i] = 0
Mon May 12 14:04:30 2014 us=500000   remote_cert_eku = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   tls_timeout = 2
Mon May 12 14:04:30 2014 us=500000   renegotiate_bytes = 0
Mon May 12 14:04:30 2014 us=500000   renegotiate_packets = 0
Mon May 12 14:04:30 2014 us=500000   renegotiate_seconds = 889020
Mon May 12 14:04:30 2014 us=500000   handshake_window = 60
Mon May 12 14:04:30 2014 us=500000   transition_window = 3600
Mon May 12 14:04:30 2014 us=500000   single_session = ENABLED
Mon May 12 14:04:30 2014 us=500000   tls_exit = DISABLED
Mon May 12 14:04:30 2014 us=500000   tls_auth_file = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_protected_authentication = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_private_mode = 00000000
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_cert_private = DISABLED
Mon May 12 14:04:30 2014 us=500000   pkcs11_pin_cache_period = -1
Mon May 12 14:04:30 2014 us=500000   pkcs11_id = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   pkcs11_id_management = DISABLED
Mon May 12 14:04:30 2014 us=500000   server_network = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   server_netmask = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   server_bridge_ip = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   server_bridge_netmask = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   server_bridge_pool_start = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   server_bridge_pool_end = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   ifconfig_pool_defined = DISABLED
Mon May 12 14:04:30 2014 us=500000   ifconfig_pool_start = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   ifconfig_pool_end = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   ifconfig_pool_netmask = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   ifconfig_pool_persist_filename = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   ifconfig_pool_persist_refresh_freq = 600
Mon May 12 14:04:30 2014 us=500000   n_bcast_buf = 256
Mon May 12 14:04:30 2014 us=500000   tcp_queue_limit = 64
Mon May 12 14:04:30 2014 us=500000   real_hash_size = 256
Mon May 12 14:04:30 2014 us=500000   virtual_hash_size = 256
Mon May 12 14:04:30 2014 us=500000   client_connect_script = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   learn_address_script = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   client_disconnect_script = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   client_config_dir = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   ccd_exclusive = DISABLED
Mon May 12 14:04:30 2014 us=500000   tmp_dir = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   push_ifconfig_defined = DISABLED
Mon May 12 14:04:30 2014 us=500000   push_ifconfig_local = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   push_ifconfig_remote_netmask = 0.0.0.0
Mon May 12 14:04:30 2014 us=500000   enable_c2c = DISABLED
Mon May 12 14:04:30 2014 us=500000   duplicate_cn = DISABLED
Mon May 12 14:04:30 2014 us=500000   cf_max = 0
Mon May 12 14:04:30 2014 us=500000   cf_per = 0
Mon May 12 14:04:30 2014 us=500000   max_clients = 1024
Mon May 12 14:04:30 2014 us=500000   max_routes_per_client = 256
Mon May 12 14:04:30 2014 us=500000   auth_user_pass_verify_script = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   auth_user_pass_verify_script_via_file = DISABLED
Mon May 12 14:04:30 2014 us=500000   ssl_flags = 0
Mon May 12 14:04:30 2014 us=500000   client = ENABLED
Mon May 12 14:04:30 2014 us=500000   pull = ENABLED
Mon May 12 14:04:30 2014 us=500000   auth_user_pass_file = 'stdin'
Mon May 12 14:04:30 2014 us=500000   show_net_up = DISABLED
Mon May 12 14:04:30 2014 us=500000   route_method = 0
Mon May 12 14:04:30 2014 us=500000   ip_win32_defined = DISABLED
Mon May 12 14:04:30 2014 us=500000   ip_win32_type = 3
Mon May 12 14:04:30 2014 us=500000   dhcp_masq_offset = 0
Mon May 12 14:04:30 2014 us=500000   dhcp_lease_time = 31536000
Mon May 12 14:04:30 2014 us=500000   tap_sleep = 0
Mon May 12 14:04:30 2014 us=500000   dhcp_options = DISABLED
Mon May 12 14:04:30 2014 us=500000   dhcp_renew = DISABLED
Mon May 12 14:04:30 2014 us=500000   dhcp_pre_release = DISABLED
Mon May 12 14:04:30 2014 us=500000   dhcp_release = DISABLED
Mon May 12 14:04:30 2014 us=500000   domain = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   netbios_scope = '[UNDEF]'
Mon May 12 14:04:30 2014 us=500000   netbios_node_type = 0
Mon May 12 14:04:30 2014 us=500000   disable_nbt = DISABLED

As I thought, the results are the same but the route conflict message has disappeared. The IP conflict message still appears but as I understand it that's a side-effect of using TAP/bridged mode and can be ignored (since by design a bridged VPN has to have an IP address on the same network as the VPN server to work).

B00k3r_D3w1tt

Are the Windows 8/8.1 devices you're having problems with on wireless? Does it work on a wired connection?

gac

Same results either way - the machine actually running the client is a VM, so the networking is inherently "wired" (as it's an emulated Intel Pro/1000 card). I've tried with the host on wired and wireless and there was no difference. I've gone back to testing with the host on wireless as the wireless network is properly segregated from the wired LAN that the VPN server is on so this provides a more accurate test. We use TCP mode as I explained in the first post, so wireless reliability generally isn't a problem as TCP will retransmit as necessary.

gac

And as I said before, I've changed it to a bridged network and posted the new logfile from this second attempt with no route conflict.

gac

This isn't a live setup. This is a setup which I'm working with because I know that the problem can be reproduced on this particular VM (and my colleague's laptop in another country), whereas it's not reproducible on my physical Windows 8.1 machine. I'm just trying to find out what might be different on this VM so that we can try to fix this problem for both me and my colleague(s). It's not limited to VMs because the same symptoms occur on my colleagues real laptop, so it would appear to be an issue not related to VirtualBox.

Believe me, I get it, this isn't a recommended deployment scenario. I wouldn't necessarily expect this to actually work in production with regards to the actual tunnelling of stuff over the VPN. But regardless of the complexities of bridging a virtual NIC in a virtual machine over a WiFi network to another box, the fact is that on at least this VM and a laptop in another country that I can't get to, I have a problem with the virtual NIC ever actually coming up in order to successfully complete the connection. This seems to be a "known issue" (there is an OpenVPN bug which I found yesterday relating to these very symptoms, bug number 316 in Trac) and I've tried all the fixes I've found so far and none of them work. So I was just curious if there was anyone else on the forum seeing this.

gac

No offence taken at all; I'm always happy to accept better ways of doing things however I believe I have a good understanding of what we're doing and why, and this config mostly works with the exceptions in this thread.

We do require a /17, yes. Our office is part of a larger company who use 10/8 internally; a /17 is assigned to our office (we don't use anywhere near all of the addresses, but we have various things organised across the subnet) and there's a separate VPN tunnel on our office router which maintains a link to the rest of the company meaning that the whole of 10/8 is accessible from this office. I assume that's the LAN route you were referring to? It's on our config because this way we can VPN into our office in the same country and get low-latency access to office resources which we use most as well as access to the larger company as required. If we were to VPN into a central system and then tunnel out to our office, that adds a lot of latency (traffic leaving the UK for the US VPN, and then tunnelling back into the UK again) so makes RDP etc less pleasant to use. This config works well for us on the majority of clients. I realise now that I didn't explain this in the original post which probably would have helped but it's too late to go back and edit it now. I've removed this network from the push options so that we can concentrate just on bridging stuff to the LAN for now. I'll have a look in the office and see if I can find another router to set up a /24 test LAN but for now it will have to stay /17 I'm afraid.

The ifconfig from the server looks like this. It also runs IPsec (hence the mast0 interface)

[root@10.0.0.19] # ifconfig
br0       Link encap:Ethernet  HWaddr 00:0C:29:15:93:04
          inet addr:10.0.0.19  Bcast:10.0.127.255  Mask:255.255.128.0
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:359194759 errors:0 dropped:3586 overruns:0 frame:0
          TX packets:5491404 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:453020915742 (432034.4 Mb)  TX bytes:1989782456 (1897.6 Mb)

eth0      Link encap:Ethernet  HWaddr 00:0C:29:15:93:04
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:648836742 errors:0 dropped:4 overruns:0 frame:0
          TX packets:8904446 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:579439559384 (552596.6 Mb)  TX bytes:3960762382 (3777.2 Mb)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:121748239 errors:0 dropped:0 overruns:0 frame:0
          TX packets:121748239 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:219290918448 (209132.1 Mb)  TX bytes:219290918448 (209132.1 Mb)

mast0     Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP RUNNING NOARP  MTU:16260  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2566 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10
          RX bytes:460496 (449.7 Kb)  TX bytes:1733104 (1.6 Mb)

tap0      Link encap:Ethernet  HWaddr BE:4D:C4:E1:0A:58
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:43389 errors:0 dropped:20 overruns:0 frame:0
          TX packets:15599315 errors:0 dropped:643 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:5206745 (4.9 Mb)  TX bytes:1148604727 (1095.3 Mb)

gac

debbie10t wroteYou cannot use the network number you are using because it conflicts with the default address used by VBOX nat.

If you bridge your VBOX client to your server NIC you will also run into issues.

So until you find a way to resolve that you cannot move on.

For the purposes of this test, I would setup a test machine with a test VPN network.

Are you able to do that ?

I'm probably just not reading this paragraph correctly but I'm not entirely sure what you mean by this? I'm no longer using VirtualBox's NAT function, I've bridged the virtual NIC to my laptop's physical NIC so it "co-exists" alongside the host laptop on the same test WiFi network (which is on a different subnet and NAT-separated from the server). Equally I'm not bridging anything to the server NIC as these are on different machines/networks.

I can probably set up a test VPN server away from our regular LAN but the issue then is that I don't have a spare router in order to simulate the NAT; the client's physical NIC would then be on the same LAN as the OpenVPN server which seems like an even worse situation to be in for testing the bridge functionality? I'm happy to do that if you think it'll help but I would then be trying to establish a route to a network I'm already on, via a system on that network.

gac

I'm going to build a physical test box tonight. However, the main reason I want to use VirtualBox is that I can't guarantee that another box I build will have these symptoms. It doesn't affect all of the 8.1 machines here, only some - if I build a physical client box and it's OK, what do I do? Do it again and again until it breaks (if it ever breaks)? Equally, formatting a computer just to try and fix this problem isn't valid - if I format it and it doesn't fix it, what do I do? Repeat it again and again until it's fixed (if it's ever fixed)? Same is reported in the bug I referenced earlier; one reporter has the issue on both of his machines, another reporter has it on "some" physical machines but never on a virtual one. I now have it on a virtual one but not a physical one. There must be something in common between them which I can then work out a fix for.

So the only reason I'm trying to persevere with the VM idea is that I have that prepared and ready right now, and I know that it's suffering from this problem. I'm trying to work out exactly what the root cause is here before going blindly stabbing in the dark with an over the top solution such as a reformat as a "possible" fix, which I think you'll agree isn't efficient use of anyone's time.

gac

You'll be pleased to know that I now have a physical Windows 8.1 installation on a spare drive on my laptop - it took me two goes to get this because the first install just worked straight off the bat with exactly the same config, connecting to the same server (illustrating why I wanted to just work with the broken VM in the first place). So I started again and on the second installation it consistently fails when waiting for the TAP adapter to come up. So I now have a physical computer (albeit still a laptop) which has this TAP issue. It's Windows 8.1 Enterprise x64, with all current updates, and my OpenVPN client. Nothing else.

Feel free to suggest things which I can do to troubleshoot this issue. A log file from my home connection (as I'm not at work right now) is here. The config is the same config as on the previous page. When I get to work tomorrow I'll get a log from the same wireless network I was testing from before, just for clarity.

Thu May 15 19:57:49 2014 MANAGEMENT: TCP Socket listening on 127.0.0.1:55501
Thu May 15 19:57:49 2014 Need hold release from management interface, waiting...
Thu May 15 19:58:08 2014 MANAGEMENT: Client connected from 127.0.0.1:55501
Thu May 15 19:58:08 2014 MANAGEMENT: CMD 'state on 1'
Thu May 15 19:58:08 2014 MANAGEMENT: CMD 'log on 20'
Thu May 15 19:58:08 2014 MANAGEMENT: CMD 'bytecount 3'
Thu May 15 20:05:53 2014 MANAGEMENT: CMD 'hold release'
Thu May 15 20:06:00 2014 MANAGEMENT: CMD 'hold off'
Thu May 15 20:06:00 2014 MANAGEMENT: CMD 'username 'Auth' 'gac''
Thu May 15 20:06:00 2014 MANAGEMENT: CMD 'password [...]'
Thu May 15 20:06:00 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu May 15 20:06:00 2014 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Thu May 15 20:06:00 2014 Control Channel MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu May 15 20:06:00 2014 MANAGEMENT: >STATE:1400180760,RESOLVE,,,
Thu May 15 20:06:00 2014 Data Channel MTU parms [ L:1575 D:1450 EF:43 EB:4 ET:32 EL:0 ]
Thu May 15 20:06:00 2014 Local Options hash (VER=V4): '10f35004'
Thu May 15 20:06:00 2014 Expected Remote Options hash (VER=V4): 'a917298a'
Thu May 15 20:06:00 2014 Attempting to establish TCP connection with 1.2.3.4:443
Thu May 15 20:06:00 2014 MANAGEMENT: >STATE:1400180760,TCP_CONNECT,,,
Thu May 15 20:06:00 2014 TCP connection established with 1.2.3.4:443
Thu May 15 20:06:00 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu May 15 20:06:00 2014 TCPv4_CLIENT link local: [undef]
Thu May 15 20:06:00 2014 TCPv4_CLIENT link remote: 1.2.3.4:443
Thu May 15 20:06:00 2014 MANAGEMENT: >STATE:1400180760,WAIT,,,
Thu May 15 20:06:00 2014 MANAGEMENT: >STATE:1400180760,AUTH,,,
Thu May 15 20:06:00 2014 TLS: Initial packet from 1.2.3.4:443, sid=690eaa93 f57a9747
Thu May 15 20:06:00 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu May 15 20:06:01 2014 VERIFY OK: depth=1, /OU=SSL_VPN/O=Vendor_Name/CN=US
Thu May 15 20:06:01 2014 VERIFY OK: nsCertType=SERVER
Thu May 15 20:06:01 2014 VERIFY OK: depth=0, /C=US/O=Vendor_Name/OU=SSL_VPN/CN=tap0
Thu May 15 20:06:01 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu May 15 20:06:01 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu May 15 20:06:01 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu May 15 20:06:01 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu May 15 20:06:01 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu May 15 20:06:01 2014 [tap0] Peer Connection Initiated with 1.2.3.4:443
Thu May 15 20:06:02 2014 MANAGEMENT: >STATE:1400180762,GET_CONFIG,,,
Thu May 15 20:06:03 2014 SENT CONTROL [tap0]: 'PUSH_REQUEST' (status=1)
Thu May 15 20:06:03 2014 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.0.0.2,dhcp-option WINS 10.0.0.2,dhcp-option DOMAIN domain.name,route-gateway 10.0.0.1,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.0.0.221 255.255.128.0'
Thu May 15 20:06:03 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu May 15 20:06:03 2014 OPTIONS IMPORT: --socket-flags option modified
Thu May 15 20:06:03 2014 Socket flags: TCP_NODELAY=1 succeeded
Thu May 15 20:06:03 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu May 15 20:06:03 2014 OPTIONS IMPORT: route-related options modified
Thu May 15 20:06:03 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu May 15 20:06:03 2014 MANAGEMENT: >STATE:1400180763,ASSIGN_IP,,10.0.0.221,
Thu May 15 20:06:03 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{E6392B23-7B9D-455A-90FC-D9E5C5F6094D}.tap
Thu May 15 20:06:03 2014 TAP-Win32 Driver Version 9.6 
Thu May 15 20:06:03 2014 TAP-Win32 MTU=1500
Thu May 15 20:06:03 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.0.0.221/255.255.128.0 on interface {E6392B23-7B9D-455A-90FC-D9E5C5F6094D} [DHCP-serv: 10.0.0.0, lease-time: 31536000]
Thu May 15 20:06:03 2014 Successful ARP Flush on interface [7] {E6392B23-7B9D-455A-90FC-D9E5C5F6094D}
Thu May 15 20:06:13 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:13 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:23 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:23 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:24 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:24 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:25 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:25 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:26 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:26 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:27 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:27 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:28 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:28 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:29 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:29 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:30 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:30 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:31 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:31 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:32 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:32 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:33 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:33 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:34 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:34 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:35 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:35 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:36 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:36 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:37 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:37 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:38 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:38 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:39 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:39 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:40 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:40 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:41 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:41 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:42 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Thu May 15 20:06:42 2014 Route: Waiting for TUN/TAP interface to come up...
Thu May 15 20:06:43 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down

ipconfig /registerdns 

Windows IP Configuration

Registration of the DNS resource records for all adapters of this computer has been initiated. Any errors will be reported in the Event Viewer in 15 minutes.
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 172.20.128.1 p=0 i=3 t=4 pr=3 a=538 h=0 m=20/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=546 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=546 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=546 h=0 m=306/0/0/0/0
172.20.128.0 255.255.255.224 172.20.128.14 p=0 i=3 t=3 pr=2 a=538 h=0 m=276/0/0/0/0
172.20.128.14 255.255.255.255 172.20.128.14 p=0 i=3 t=3 pr=2 a=538 h=0 m=276/0/0/0/0
172.20.128.31 255.255.255.255 172.20.128.14 p=0 i=3 t=3 pr=2 a=538 h=0 m=276/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=546 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 172.20.128.14 p=0 i=3 t=3 pr=2 a=541 h=0 m=276/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=546 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 172.20.128.14 p=0 i=3 t=3 pr=2 a=541 h=0 m=276/0/0/0/0
SYSTEM ADAPTER LIST
TAP-Win32 Adapter V9
  Index = 7
  GUID = {E6392B23-7B9D-455A-90FC-D9E5C5F6094D}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:e6:39:2b:23
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV =  
  DHCP LEASE OBTAINED = Thu May 15 20:06:46 2014
  DHCP LEASE EXPIRES  = Thu May 15 20:06:46 2014
  PRI WINS = 10.0.0.2/255.255.255.255 
  SEC WINS =  
  DNS SERV =  
Intel(R) WiFi Link 5100 AGN
  Index = 4
  GUID = {378369B3-553C-4A64-88A1-9AD500724F52}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:16:ea:9b:ca:ac
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV =  
  DHCP LEASE OBTAINED = Thu May 15 20:06:46 2014
  DHCP LEASE EXPIRES  = Thu May 15 20:06:46 2014
  DNS SERV =  
Broadcom 440x 10/100 Integrated Controller
  Index = 3
  GUID = {CE3B15CF-CE30-4E5A-818E-AE8EC3E3B66D}
  IP = 172.20.128.14/255.255.255.224 
  MAC = 00:15:c5:5a:1d:14
  GATEWAY = 172.20.128.1/255.255.255.255 
  DHCP SERV = 172.20.128.5/255.255.255.255 
  DHCP LEASE OBTAINED = Thu May 15 19:57:48 2014
  DHCP LEASE EXPIRES  = Fri May 16 19:57:48 2014
  DNS SERV = 172.20.128.5/255.255.255.255 
Thu May 15 20:06:46 2014 Initialization Sequence Completed With Errors. DHCP Client Service might not be running, or the TAP-Win32 adapter might be firewalled?
Thu May 15 20:06:46 2014 MANAGEMENT: >STATE:1400180806,CONNECTED,ERROR,10.0.0.221,1.2.3.4

gac

That's correct. I'm at home right now, where I have a spare network cable, so I'm using it. I was using wireless previously because that's the only way to be "off-LAN" in the office. Here is the ipconfig output:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : openvpntest
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : home.lan

Ethernet adapter Local Area Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : domain.name
   Description . . . . . . . . . . . : TAP-Win32 Adapter V9
   Physical Address. . . . . . . . . : 00-FF-E6-39-2B-23
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Intel(R) WiFi Link 5100 AGN
   Physical Address. . . . . . . . . : 00-16-EA-9B-CA-AC
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . : home.lan
   Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
   Physical Address. . . . . . . . . : 00-15-C5-5A-1D-14
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2a01:348:6:8756:128::920f(Preferred) 
   Lease Obtained. . . . . . . . . . : 15 May 2014 19:57:49
   Lease Expires . . . . . . . . . . : 16 May 2014 22:11:19
   Link-local IPv6 Address . . . . . : fe80::b82d:bd89:bab1:8a3a%3(Preferred) 
   IPv4 Address. . . . . . . . . . . : 172.20.128.14(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.224
   Lease Obtained. . . . . . . . . . : 15 May 2014 19:57:48
   Lease Expires . . . . . . . . . . : 16 May 2014 22:11:17
   Default Gateway . . . . . . . . . : fe80::a2b3:ccff:fee3:fcbc%3
                                       172.20.128.1
   DHCP Server . . . . . . . . . . . : 172.20.128.5
   DHCPv6 IAID . . . . . . . . . . . : 50337221
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-06-BE-48-00-15-C5-5A-1D-14
   DNS Servers . . . . . . . . . . . : 172.20.128.5
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.home.lan:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : home.lan
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:1f:bf3:53eb:7ff1(Preferred) 
   Link-local IPv6 Address . . . . . : fe80::1f:bf3:53eb:7ff1%6(Preferred) 
   Default Gateway . . . . . . . . . : 
   DHCPv6 IAID . . . . . . . . . . . : 234881024
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-06-BE-48-00-15-C5-5A-1D-14
   NetBIOS over Tcpip. . . . . . . . : Disabled

gac

It's the same one I was using on the previous page:

client
auth-user-pass 
single-session
dev tap
proto tcp
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
ns-cert-type server
cert client.crt
key client.key
verb 4
remote remote.server.name
route-up "up-windows.bat"
route-delay 10
down "down-windows.bat"
script-security 2 system
port 443
reneg-sec 889020
hand-window 60

#MI START
#Configuration for Management Interface - this part is regenerated during Network Connector service start-up
management 127.0.0.1 55501
management-hold
management-query-passwords
auth-retry interact
#MI END

And here's the log from the office WiFi (same network as the logs on the first page) using this physical machine:

Fri May 16 15:57:00 2014 us=234000 MANAGEMENT: TCP Socket listening on 127.0.0.1:55501
Fri May 16 15:57:00 2014 us=234000 Need hold release from management interface, waiting...
Fri May 16 15:57:09 2014 us=656000 MANAGEMENT: Client connected from 127.0.0.1:55501
Fri May 16 15:57:09 2014 us=937000 MANAGEMENT: CMD 'state on 1'
Fri May 16 15:57:09 2014 us=937000 MANAGEMENT: CMD 'log on 20'
Fri May 16 15:57:09 2014 us=953000 MANAGEMENT: CMD 'bytecount 3'
Fri May 16 15:57:30 2014 us=31000 MANAGEMENT: CMD 'hold release'
Fri May 16 15:57:37 2014 us=343000 MANAGEMENT: CMD 'hold off'
Fri May 16 15:57:37 2014 us=343000 MANAGEMENT: CMD 'username 'Auth' 'gac''
Fri May 16 15:57:37 2014 us=359000 MANAGEMENT: CMD 'password [...]'
Fri May 16 15:57:37 2014 us=359000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May 16 15:57:37 2014 us=359000 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Fri May 16 15:57:37 2014 us=531000 Control Channel MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri May 16 15:57:37 2014 us=531000 MANAGEMENT: >STATE:1400252257,RESOLVE,,,
Fri May 16 15:57:37 2014 us=578000 Data Channel MTU parms [ L:1575 D:1450 EF:43 EB:4 ET:32 EL:0 ]
Fri May 16 15:57:37 2014 us=578000 Local Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_CLIENT,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri May 16 15:57:37 2014 us=578000 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_SERVER,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri May 16 15:57:37 2014 us=578000 Local Options hash (VER=V4): '10f35004'
Fri May 16 15:57:37 2014 us=578000 Expected Remote Options hash (VER=V4): 'a917298a'
Fri May 16 15:57:37 2014 us=578000 Attempting to establish TCP connection with 10.0.0.19:443
Fri May 16 15:57:37 2014 us=578000 MANAGEMENT: >STATE:1400252257,TCP_CONNECT,,,
Fri May 16 15:57:37 2014 us=578000 TCP connection established with 10.0.0.19:443
Fri May 16 15:57:37 2014 us=578000 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri May 16 15:57:37 2014 us=578000 TCPv4_CLIENT link local: [undef]
Fri May 16 15:57:37 2014 us=578000 TCPv4_CLIENT link remote: 10.0.0.19:443
Fri May 16 15:57:37 2014 us=578000 MANAGEMENT: >STATE:1400252257,WAIT,,,
Fri May 16 15:57:37 2014 us=578000 MANAGEMENT: >STATE:1400252257,AUTH,,,
Fri May 16 15:57:37 2014 us=578000 TLS: Initial packet from 10.0.0.19:443, sid=acc2189e c74249fb
Fri May 16 15:57:37 2014 us=578000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 16 15:57:37 2014 us=640000 VERIFY OK: depth=1, /OU=SSL_VPN/O=Vendor_Name/CN=US
Fri May 16 15:57:37 2014 us=640000 VERIFY OK: nsCertType=SERVER
Fri May 16 15:57:37 2014 us=640000 VERIFY OK: depth=0, /C=US/O=Vendor_Name/OU=SSL_VPN/CN=tap0
Fri May 16 15:57:37 2014 us=765000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 16 15:57:37 2014 us=765000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 16 15:57:37 2014 us=765000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 16 15:57:37 2014 us=765000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 16 15:57:37 2014 us=765000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 16 15:57:37 2014 us=765000 [tap0] Peer Connection Initiated with 10.0.0.19:443
Fri May 16 15:57:38 2014 us=328000 MANAGEMENT: >STATE:1400252258,GET_CONFIG,,,
Fri May 16 15:57:39 2014 us=46000 SENT CONTROL [tap0]: 'PUSH_REQUEST' (status=1)
Fri May 16 15:57:39 2014 us=46000 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.0.0.2,dhcp-option WINS 10.0.0.2,dhcp-option DOMAIN domain.name,route-gateway 10.0.0.1,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.0.0.221 255.255.128.0'
Fri May 16 15:57:39 2014 us=46000 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 16 15:57:39 2014 us=46000 OPTIONS IMPORT: --socket-flags option modified
Fri May 16 15:57:39 2014 us=46000 Socket flags: TCP_NODELAY=1 succeeded
Fri May 16 15:57:39 2014 us=46000 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 16 15:57:39 2014 us=46000 OPTIONS IMPORT: route-related options modified
Fri May 16 15:57:39 2014 us=46000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri May 16 15:57:39 2014 us=46000 WARNING: --remote address [10.0.0.19] conflicts with --ifconfig subnet [10.0.0.221, 255.255.128.0] -- local and remote addresses cannot be inside of the --ifconfig subnet. (silence this warning with --ifconfig-nowarn)
Fri May 16 15:57:39 2014 us=62000 MANAGEMENT: >STATE:1400252259,ASSIGN_IP,,10.0.0.221,
Fri May 16 15:57:39 2014 us=62000 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{E6392B23-7B9D-455A-90FC-D9E5C5F6094D}.tap
Fri May 16 15:57:39 2014 us=62000 TAP-Win32 Driver Version 9.6 
Fri May 16 15:57:39 2014 us=62000 TAP-Win32 MTU=1500
Fri May 16 15:57:39 2014 us=62000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.0.0.221/255.255.128.0 on interface {E6392B23-7B9D-455A-90FC-D9E5C5F6094D} [DHCP-serv: 10.0.0.0, lease-time: 31536000]
Fri May 16 15:57:39 2014 us=62000 DHCP option string: 0f093373 702e636f 2e756b06 040a0e00 022c040a 0e0002
Fri May 16 15:57:39 2014 us=62000 Successful ARP Flush on interface [7] {E6392B23-7B9D-455A-90FC-D9E5C5F6094D}
Fri May 16 15:57:49 2014 us=31000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:57:49 2014 us=31000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:57:59 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:57:59 2014 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:00 2014 us=140000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:00 2014 us=140000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:01 2014 us=78000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:01 2014 us=78000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:02 2014 us=62000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:02 2014 us=62000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:03 2014 us=62000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:03 2014 us=62000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:04 2014 us=78000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:04 2014 us=78000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:05 2014 us=15000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:05 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:06 2014 us=15000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:06 2014 us=15000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:07 2014 us=125000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:07 2014 us=125000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:08 2014 us=31000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:08 2014 us=31000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:09 2014 us=359000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:09 2014 us=359000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:10 2014 us=109000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:10 2014 us=109000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:11 2014 us=171000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:11 2014 us=171000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:12 2014 us=46000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:12 2014 us=46000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:13 2014 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:13 2014 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:14 2014 us=78000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:14 2014 us=78000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:15 2014 us=46000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:15 2014 us=46000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:16 2014 us=343000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:16 2014 us=343000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:17 2014 us=93000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:17 2014 us=93000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:18 2014 us=93000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Fri May 16 15:58:18 2014 us=93000 Route: Waiting for TUN/TAP interface to come up...
Fri May 16 15:58:19 2014 us=15000 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down

ipconfig /registerdns 

Windows IP Configuration

Registration of the DNS resource records for all adapters of this computer has been initiated. Any errors will be reported in the Event Viewer in 15 minutes.
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 172.16.1.1 p=0 i=4 t=4 pr=3 a=79 h=0 m=25/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=89 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=89 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=89 h=0 m=306/0/0/0/0
172.16.1.0 255.255.255.0 172.16.1.173 p=0 i=4 t=3 pr=2 a=79 h=0 m=281/0/0/0/0
172.16.1.173 255.255.255.255 172.16.1.173 p=0 i=4 t=3 pr=2 a=79 h=0 m=281/0/0/0/0
172.16.1.255 255.255.255.255 172.16.1.173 p=0 i=4 t=3 pr=2 a=79 h=0 m=281/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=89 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 172.16.1.173 p=0 i=4 t=3 pr=2 a=84 h=0 m=281/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=89 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 172.16.1.173 p=0 i=4 t=3 pr=2 a=84 h=0 m=281/0/0/0/0
SYSTEM ADAPTER LIST
Bluetooth Device (Personal Area Network)
  Index = 11
  GUID = {A04EBFB1-39C8-4629-948F-42B8C188E6AD}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:16:cf:fb:7c:92
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV =  
  DHCP LEASE OBTAINED = Fri May 16 15:58:22 2014
  DHCP LEASE EXPIRES  = Fri May 16 15:58:22 2014
  DNS SERV =  
TAP-Win32 Adapter V9
  Index = 7
  GUID = {E6392B23-7B9D-455A-90FC-D9E5C5F6094D}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:ff:e6:39:2b:23
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV =  
  DHCP LEASE OBTAINED = Fri May 16 15:58:22 2014
  DHCP LEASE EXPIRES  = Fri May 16 15:58:22 2014
  PRI WINS = 10.0.0.2/255.255.255.255 
  SEC WINS =  
  DNS SERV =  
Intel(R) WiFi Link 5100 AGN
  Index = 4
  GUID = {378369B3-553C-4A64-88A1-9AD500724F52}
  IP = 172.16.1.173/255.255.255.0 
  MAC = 00:16:ea:9b:ca:ac
  GATEWAY = 172.16.1.1/255.255.255.255 
  DHCP SERV = 172.16.1.1/255.255.255.255 
  DHCP LEASE OBTAINED = Fri May 16 15:57:02 2014
  DHCP LEASE EXPIRES  = Sat May 17 03:57:02 2014
  DNS SERV = 172.16.1.1/255.255.255.255 
Broadcom 440x 10/100 Integrated Controller
  Index = 3
  GUID = {CE3B15CF-CE30-4E5A-818E-AE8EC3E3B66D}
  IP = 0.0.0.0/0.0.0.0 
  MAC = 00:15:c5:5a:1d:14
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV =  
  DHCP LEASE OBTAINED = Fri May 16 15:58:22 2014
  DHCP LEASE EXPIRES  = Fri May 16 15:58:22 2014
  DNS SERV =  
Fri May 16 15:58:22 2014 us=125000 Initialization Sequence Completed With Errors. DHCP Client Service might not be running, or the TAP-Win32 adapter might be firewalled?
Fri May 16 15:58:22 2014 us=125000 MANAGEMENT: >STATE:1400252302,CONNECTED,ERROR,10.0.0.221,10.0.0.19
Fri May 16 15:58:30 2014 us=15000 MANAGEMENT: CMD 'forget-passwords'
Fri May 16 15:58:30 2014 us=15000 MANAGEMENT: CMD 'hold on'
Fri May 16 15:58:30 2014 us=15000 MANAGEMENT: CMD 'signal SIGHUP'
Fri May 16 15:58:30 2014 us=15000 TCP/UDP: Closing socket
Fri May 16 15:58:30 2014 us=15000 Closing TUN/TAP interface
Fri May 16 15:58:30 2014 us=15000 down-windows.bat Local Area Connection 1500 1575 10.0.0.221 255.255.128.0 init
Fri May 16 15:58:30 2014 us=46000 SIGHUP[hard,] received, process restarting
Fri May 16 15:58:30 2014 us=46000 MANAGEMENT: >STATE:1400252310,RECONNECTING,SIGHUP,,
Fri May 16 15:58:30 2014 us=46000 Current Parameter Settings:
Fri May 16 15:58:30 2014 us=46000   config = 'LAN1 Client.ovpn'
Fri May 16 15:58:30 2014 us=46000   mode = 0
Fri May 16 15:58:30 2014 us=46000   show_ciphers = DISABLED
Fri May 16 15:58:30 2014 us=46000   show_digests = DISABLED
Fri May 16 15:58:30 2014 us=46000   show_engines = DISABLED
Fri May 16 15:58:30 2014 us=46000   genkey = DISABLED
Fri May 16 15:58:30 2014 us=46000   key_pass_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   show_tls_ciphers = DISABLED
Fri May 16 15:58:30 2014 us=46000 Connection profiles [default]:
Fri May 16 15:58:30 2014 us=46000   proto = tcp-client
Fri May 16 15:58:30 2014 us=46000   local = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   local_port = 0
Fri May 16 15:58:30 2014 us=46000   remote = 'server.name.here'
Fri May 16 15:58:30 2014 us=46000   remote_port = 443
Fri May 16 15:58:30 2014 us=46000   remote_float = DISABLED
Fri May 16 15:58:30 2014 us=46000   bind_defined = DISABLED
Fri May 16 15:58:30 2014 us=46000   bind_local = DISABLED
Fri May 16 15:58:30 2014 us=46000   connect_retry_seconds = 5
Fri May 16 15:58:30 2014 us=46000   connect_timeout = 10
Fri May 16 15:58:30 2014 us=46000   connect_retry_max = 0
Fri May 16 15:58:30 2014 us=46000   socks_proxy_server = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   socks_proxy_port = 0
Fri May 16 15:58:30 2014 us=46000   socks_proxy_retry = DISABLED
Fri May 16 15:58:30 2014 us=46000 Connection profiles END
Fri May 16 15:58:30 2014 us=46000   remote_random = DISABLED
Fri May 16 15:58:30 2014 us=46000   ipchange = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   dev = 'tap'
Fri May 16 15:58:30 2014 us=46000   dev_type = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   dev_node = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   lladdr = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   topology = 1
Fri May 16 15:58:30 2014 us=46000   tun_ipv6 = DISABLED
Fri May 16 15:58:30 2014 us=46000   ifconfig_local = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   ifconfig_remote_netmask = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   ifconfig_noexec = DISABLED
Fri May 16 15:58:30 2014 us=46000   ifconfig_nowarn = DISABLED
Fri May 16 15:58:30 2014 us=46000   shaper = 0
Fri May 16 15:58:30 2014 us=46000   tun_mtu = 1500
Fri May 16 15:58:30 2014 us=46000   tun_mtu_defined = ENABLED
Fri May 16 15:58:30 2014 us=46000   link_mtu = 1500
Fri May 16 15:58:30 2014 us=46000   link_mtu_defined = DISABLED
Fri May 16 15:58:30 2014 us=46000   tun_mtu_extra = 32
Fri May 16 15:58:30 2014 us=46000   tun_mtu_extra_defined = ENABLED
Fri May 16 15:58:30 2014 us=46000   fragment = 0
Fri May 16 15:58:30 2014 us=46000   mtu_discover_type = -1
Fri May 16 15:58:30 2014 us=46000   mtu_test = 0
Fri May 16 15:58:30 2014 us=46000   mlock = DISABLED
Fri May 16 15:58:30 2014 us=46000   keepalive_ping = 0
Fri May 16 15:58:30 2014 us=46000   keepalive_timeout = 0
Fri May 16 15:58:30 2014 us=46000   inactivity_timeout = 0
Fri May 16 15:58:30 2014 us=46000   ping_send_timeout = 0
Fri May 16 15:58:30 2014 us=46000   ping_rec_timeout = 0
Fri May 16 15:58:30 2014 us=46000   ping_rec_timeout_action = 0
Fri May 16 15:58:30 2014 us=46000   ping_timer_remote = DISABLED
Fri May 16 15:58:30 2014 us=46000   remap_sigusr1 = 0
Fri May 16 15:58:30 2014 us=46000   explicit_exit_notification = 0
Fri May 16 15:58:30 2014 us=46000   persist_tun = ENABLED
Fri May 16 15:58:30 2014 us=46000   persist_local_ip = DISABLED
Fri May 16 15:58:30 2014 us=46000   persist_remote_ip = DISABLED
Fri May 16 15:58:30 2014 us=46000   persist_key = ENABLED
Fri May 16 15:58:30 2014 us=46000   mssfix = 1450
Fri May 16 15:58:30 2014 us=46000   resolve_retry_seconds = 1000000000
Fri May 16 15:58:30 2014 us=46000   username = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   groupname = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   chroot_dir = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   cd_dir = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   writepid = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   up_script = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   down_script = 'down-windows.bat'
Fri May 16 15:58:30 2014 us=46000   down_pre = DISABLED
Fri May 16 15:58:30 2014 us=46000   up_restart = DISABLED
Fri May 16 15:58:30 2014 us=46000   up_delay = DISABLED
Fri May 16 15:58:30 2014 us=46000   daemon = DISABLED
Fri May 16 15:58:30 2014 us=46000   inetd = 0
Fri May 16 15:58:30 2014 us=46000   log = DISABLED
Fri May 16 15:58:30 2014 us=46000   suppress_timestamps = DISABLED
Fri May 16 15:58:30 2014 us=46000   nice = 0
Fri May 16 15:58:30 2014 us=46000   verbosity = 4
Fri May 16 15:58:30 2014 us=46000   mute = 0
Fri May 16 15:58:30 2014 us=46000   gremlin = 0
Fri May 16 15:58:30 2014 us=46000   status_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   status_file_version = 1
Fri May 16 15:58:30 2014 us=46000   status_file_update_freq = 60
Fri May 16 15:58:30 2014 us=46000   occ = ENABLED
Fri May 16 15:58:30 2014 us=46000   rcvbuf = 0
Fri May 16 15:58:30 2014 us=46000   sndbuf = 0
Fri May 16 15:58:30 2014 us=46000   sockflags = 0
Fri May 16 15:58:30 2014 us=46000   fast_io = DISABLED
Fri May 16 15:58:30 2014 us=46000   lzo = 0
Fri May 16 15:58:30 2014 us=46000   route_script = 'up-windows.bat'
Fri May 16 15:58:30 2014 us=46000   route_default_gateway = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   route_default_metric = 0
Fri May 16 15:58:30 2014 us=46000   route_noexec = DISABLED
Fri May 16 15:58:30 2014 us=46000   route_delay = 10
Fri May 16 15:58:30 2014 us=46000   route_delay_window = 30
Fri May 16 15:58:30 2014 us=46000   route_delay_defined = ENABLED
Fri May 16 15:58:30 2014 us=46000   route_nopull = DISABLED
Fri May 16 15:58:30 2014 us=46000   route_gateway_via_dhcp = DISABLED
Fri May 16 15:58:30 2014 us=46000   max_routes = 100
Fri May 16 15:58:30 2014 us=46000   allow_pull_fqdn = DISABLED
Fri May 16 15:58:30 2014 us=46000   management_addr = '127.0.0.1'
Fri May 16 15:58:30 2014 us=46000   management_port = 55501
Fri May 16 15:58:30 2014 us=46000   management_user_pass = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   management_log_history_cache = 250
Fri May 16 15:58:30 2014 us=46000   management_echo_buffer_size = 100
Fri May 16 15:58:30 2014 us=46000   management_write_peer_info_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   management_client_user = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   management_client_group = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   management_flags = 6
Fri May 16 15:58:30 2014 us=46000   shared_secret_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=46000   key_direction = 0
Fri May 16 15:58:30 2014 us=46000   ciphername_defined = ENABLED
Fri May 16 15:58:30 2014 us=46000   ciphername = 'BF-CBC'
Fri May 16 15:58:30 2014 us=46000   authname_defined = ENABLED
Fri May 16 15:58:30 2014 us=46000   authname = 'SHA1'
Fri May 16 15:58:30 2014 us=62000   prng_hash = 'SHA1'
Fri May 16 15:58:30 2014 us=62000   prng_nonce_secret_len = 16
Fri May 16 15:58:30 2014 us=62000   keysize = 0
Fri May 16 15:58:30 2014 us=62000   engine = DISABLED
Fri May 16 15:58:30 2014 us=62000   replay = ENABLED
Fri May 16 15:58:30 2014 us=62000   mute_replay_warnings = DISABLED
Fri May 16 15:58:30 2014 us=62000   replay_window = 64
Fri May 16 15:58:30 2014 us=62000   replay_time = 15
Fri May 16 15:58:30 2014 us=62000   packet_id_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   use_iv = ENABLED
Fri May 16 15:58:30 2014 us=62000   test_crypto = DISABLED
Fri May 16 15:58:30 2014 us=62000   tls_server = DISABLED
Fri May 16 15:58:30 2014 us=62000   tls_client = ENABLED
Fri May 16 15:58:30 2014 us=62000   key_method = 2
Fri May 16 15:58:30 2014 us=62000   ca_file = 'ca.crt'
Fri May 16 15:58:30 2014 us=62000   ca_path = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   dh_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   cert_file = 'client.crt'
Fri May 16 15:58:30 2014 us=62000   priv_key_file = 'client.key'
Fri May 16 15:58:30 2014 us=62000   pkcs12_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   cryptoapi_cert = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   cipher_list = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   tls_verify = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   tls_remote = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   crl_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   ns_cert_type = 64
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_ku[i] = 0
Fri May 16 15:58:30 2014 us=62000   remote_cert_eku = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   tls_timeout = 2
Fri May 16 15:58:30 2014 us=62000   renegotiate_bytes = 0
Fri May 16 15:58:30 2014 us=62000   renegotiate_packets = 0
Fri May 16 15:58:30 2014 us=62000   renegotiate_seconds = 889020
Fri May 16 15:58:30 2014 us=62000   handshake_window = 60
Fri May 16 15:58:30 2014 us=62000   transition_window = 3600
Fri May 16 15:58:30 2014 us=62000   single_session = ENABLED
Fri May 16 15:58:30 2014 us=62000   tls_exit = DISABLED
Fri May 16 15:58:30 2014 us=62000   tls_auth_file = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_protected_authentication = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_private_mode = 00000000
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_cert_private = DISABLED
Fri May 16 15:58:30 2014 us=62000   pkcs11_pin_cache_period = -1
Fri May 16 15:58:30 2014 us=62000   pkcs11_id = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   pkcs11_id_management = DISABLED
Fri May 16 15:58:30 2014 us=62000   server_network = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   server_netmask = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   server_bridge_ip = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   server_bridge_netmask = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   server_bridge_pool_start = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   server_bridge_pool_end = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   ifconfig_pool_defined = DISABLED
Fri May 16 15:58:30 2014 us=62000   ifconfig_pool_start = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   ifconfig_pool_end = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   ifconfig_pool_netmask = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   ifconfig_pool_persist_filename = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   ifconfig_pool_persist_refresh_freq = 600
Fri May 16 15:58:30 2014 us=62000   n_bcast_buf = 256
Fri May 16 15:58:30 2014 us=62000   tcp_queue_limit = 64
Fri May 16 15:58:30 2014 us=62000   real_hash_size = 256
Fri May 16 15:58:30 2014 us=62000   virtual_hash_size = 256
Fri May 16 15:58:30 2014 us=62000   client_connect_script = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   learn_address_script = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   client_disconnect_script = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   client_config_dir = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   ccd_exclusive = DISABLED
Fri May 16 15:58:30 2014 us=62000   tmp_dir = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   push_ifconfig_defined = DISABLED
Fri May 16 15:58:30 2014 us=62000   push_ifconfig_local = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   push_ifconfig_remote_netmask = 0.0.0.0
Fri May 16 15:58:30 2014 us=62000   enable_c2c = DISABLED
Fri May 16 15:58:30 2014 us=62000   duplicate_cn = DISABLED
Fri May 16 15:58:30 2014 us=62000   cf_max = 0
Fri May 16 15:58:30 2014 us=62000   cf_per = 0
Fri May 16 15:58:30 2014 us=62000   max_clients = 1024
Fri May 16 15:58:30 2014 us=62000   max_routes_per_client = 256
Fri May 16 15:58:30 2014 us=62000   auth_user_pass_verify_script = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   auth_user_pass_verify_script_via_file = DISABLED
Fri May 16 15:58:30 2014 us=62000   ssl_flags = 0
Fri May 16 15:58:30 2014 us=62000   client = ENABLED
Fri May 16 15:58:30 2014 us=62000   pull = ENABLED
Fri May 16 15:58:30 2014 us=62000   auth_user_pass_file = 'stdin'
Fri May 16 15:58:30 2014 us=62000   show_net_up = DISABLED
Fri May 16 15:58:30 2014 us=62000   route_method = 0
Fri May 16 15:58:30 2014 us=62000   ip_win32_defined = DISABLED
Fri May 16 15:58:30 2014 us=62000   ip_win32_type = 3
Fri May 16 15:58:30 2014 us=62000   dhcp_masq_offset = 0
Fri May 16 15:58:30 2014 us=62000   dhcp_lease_time = 31536000
Fri May 16 15:58:30 2014 us=62000   tap_sleep = 0
Fri May 16 15:58:30 2014 us=62000   dhcp_options = DISABLED
Fri May 16 15:58:30 2014 us=62000   dhcp_renew = DISABLED
Fri May 16 15:58:30 2014 us=62000   dhcp_pre_release = DISABLED
Fri May 16 15:58:30 2014 us=62000   dhcp_release = DISABLED
Fri May 16 15:58:30 2014 us=62000   domain = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   netbios_scope = '[UNDEF]'
Fri May 16 15:58:30 2014 us=62000   netbios_node_type = 0
Fri May 16 15:58:30 2014 us=62000   disable_nbt = DISABLED

gac

OK, I've just realised why this is of course - it's because there's a direct route from our test wireless LAN into the real LAN and a firewall rule allowing port 443 - the server hostname is resolved internally straight to its 10/8 address, not its external address. If you check out the log I took from home, there's no such issue because the --remote address is resolved to the external IP address, and then port 443 is NAT forwarded from our router to the internal address. So given that I had exactly the same TAP issue from home where the ifconfig issue doesn't exist, can we agree that although the ifconfig issue isn't ideal (and I'll change our network setup to allow more sensible testing even though this has never been an issue before), it's not what's causing my TAP problems?

gac

Bump. I'm still having this issue.

I've been looking around the web and found a few more anecdotal references of people having issues with the TAP drivers. Suggestions are that it may be NDIS5 related. So I tried the experimental NDIS6 drivers available from OpenVPN, and although these seem to connect more reliably, the TAP adapter is never closed so disconnecting never happens properly and you're unable to reconnect until you've rebooted the machine, which isn't ideal either...