My OVPN disconnected every 10-15 mins

lagmon

Hi, I've set up an openvpn on my tomato based ASUS N16 router

And my openvpn can be connected, but it will disconnect after 10-15 mins, I'm using GUI v1.03

I checked my client log, it says

Tue Jun 03 10:46:14 2014 Route addition via IPAPI succeeded [adaptive]
Tue Jun 03 10:46:14 2014 Initialization Sequence Completed
Tue Jun 03 10:59:42 2014 Connection reset, restarting [0]
Tue Jun 03 10:59:42 2014 TCP/UDP: Closing socket
Tue Jun 03 10:59:42 2014 SIGUSR1[soft,connection-reset] received, process restarting
Tue Jun 03 10:59:42 2014 Restart pause, 5 second(s)
Tue Jun 03 10:59:47 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Jun 03 10:59:47 2014 Re-using SSL/TLS context
Tue Jun 03 10:59:47 2014 LZO compression initialized
Tue Jun 03 10:59:47 2014 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Jun 03 10:59:47 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jun 03 10:59:59 2014 RESOLVE: Cannot resolve host address: xxxx.com: [NO_DATA] The requested name is valid but does not have an IP address.
Tue Jun 03 10:59:59 2014 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jun 03 10:59:59 2014 Local Options hash (VER=V4): '69109d17'
Tue Jun 03 10:59:59 2014 Expected Remote Options hash (VER=V4): 'c0103fa8'
Tue Jun 03 11:00:11 2014 RESOLVE: Cannot resolve host address: xxxx.com: [NO_DATA] The requested name is valid but does not have an IP address.
Tue Jun 03 11:00:28 2014 RESOLVE: Cannot resolve host address: xxxx.com: [NO_DATA] The requested name is valid but does not have an IP address.
Tue Jun 03 11:00:45 2014 RESOLVE: Cannot resolve host address: xxxx.com: [NO_DATA] The requested name is valid but does not have an IP address.
Tue Jun 03 11:01:02 2014 RESOLVE: Cannot resolve host address: xxxx.com: [NO_DATA] The requested name is valid but does not have an IP address.

It seems my client cannot resolve my host address, but when I connect with openvpn, I can always ping my host address from client, also with other ip such as 8.8.8.8 or http://www.google.com

Here is my client config

client
dev tun
proto tcp
remote xxxx.com 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3
redirect-gateway
keepalive 20 120

Does anyone know how to resolve this?

lagmon

debbie10t wroteDo you have a dynamic dns account of some sort ?

Yes I'm using a No-ip ddns for me to remote my Openvpn, and I could still ping my host name from client after connecting to it

lagmon

debbie10t wrotePlease post your server config and log.

My server log:

Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: MULTI: multi_create_instance called
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: Re-using SSL/TLS context
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: LZO compression initialized
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: TCP connection established with 202.155.xxx.178:49642
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: Socket Buffers: R=[131072->131072] S=[131072->131072]
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: TCPv4_SERVER link local: [undef]
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: TCPv4_SERVER link remote: 202.155.xxx.178:49642
Jun  4 14:31:42 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 TLS: Initial packet from 202.155.xxx.178:49642, sid=b7e1d5fa 52d71bce
Jun  4 14:31:43 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=OpenVPN/OU=changeme/CN=changeme/name=changeme/Email=mail@host.domain
Jun  4 14:31:43 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=OpenVPN/OU=changeme/CN=client/name=changeme/Email=mail@host.domain
Jun  4 14:31:43 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jun  4 14:31:43 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun  4 14:31:43 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jun  4 14:31:43 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jun  4 14:31:44 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 Control Channel: TLSv1, cipher TLSv1/SSLv3 EDH-RSA-DES-CBC3-SHA, 1024 bit RSA
Jun  4 14:31:44 xxxx daemon.notice openvpn[17858]: 202.155.xxx.178:49642 [client] Peer Connection Initiated with 202.155.xxx.178:49642
Jun  4 14:31:44 xxxx daemon.notice openvpn[17858]: client/202.155.xxx.178:49642 MULTI: Learn: 10.8.0.6 -> client/202.155.xxx.178:49642
Jun  4 14:31:44 xxxx daemon.notice openvpn[17858]: client/202.155.xxx.178:49642 MULTI: primary virtual IP for client/202.155.xxx.178:49642: 10.8.0.6
Jun  4 14:31:46 xxxx daemon.notice openvpn[17858]: client/202.155.xxx.178:49642 PUSH: Received control message: 'PUSH_REQUEST'
Jun  4 14:31:46 xxxx daemon.notice openvpn[17858]: client/202.155.xxx.178:49642 SENT CONTROL [client]: 'PUSH_REPLY,dhcp-option DNS 10.0.1.1,redirect-gateway def1,route 10.8.0.1,topology net30,ping 15,ping-restart 60,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Jun  4 14:31:46 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:31:46 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:31:47 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:31:47 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:31:47 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:31:47 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:31:47 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
.
.
.
.
Jun  4 14:38:56 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:39:00 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:39:08 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:39:24 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:39:56 xxxx daemon.warn openvpn[17858]: client/202.155.xxx.178:49642 Need IPv6 code in mroute_extract_addr_from_packet
Jun  4 14:42:39 xxxx daemon.info dnsmasq[17565]: reading /etc/resolv.dnsmasq
Jun  4 14:42:39 xxxx daemon.info dnsmasq[17565]: using nameserver 218.102.62.71#53
Jun  4 14:42:39 xxxx daemon.info dnsmasq[17565]: using nameserver 218.102.23.77#53
Jun  4 14:42:39 xxxx daemon.info dnsmasq[17565]: exiting on receipt of SIGTERM
Jun  4 14:42:39 xxxx daemon.info dnsmasq[18616]: started, version 2.55 cachesize 512
Jun  4 14:42:39 xxxx daemon.info dnsmasq[18616]: compile time options: no-IPv6 GNU-getopt no-RTC no-DBus no-I18N DHCP no-scripts TFTP
Jun  4 14:42:39 xxxx daemon.info dnsmasq-dhcp[18616]: DHCP, IP range 10.0.1.100 -- 10.0.1.149, lease time 1d
Jun  4 14:42:39 xxxx daemon.info dnsmasq[18616]: reading /etc/resolv.dnsmasq
Jun  4 14:42:39 xxxx daemon.info dnsmasq[18616]: using nameserver 218.102.62.71#53
Jun  4 14:42:39 xxxx daemon.info dnsmasq[18616]: using nameserver 218.102.23.77#53
Jun  4 14:42:39 xxxx daemon.info dnsmasq[18616]: read /etc/hosts - 2 addresses
Jun  4 14:42:39 xxxx daemon.info dnsmasq[18616]: read /etc/hosts.dnsmasq - 6 addresses
Jun  4 14:42:41 xxxx daemon.notice miniupnpd[17766]: received signal 15, good-bye
Jun  4 14:42:41 xxxx user.info syslog: SNet version started
Jun  4 14:42:41 xxxx daemon.notice miniupnpd[18788]: HTTP listening on port 49099
Jun  4 14:42:41 xxxx daemon.notice openvpn[17858]: TCP/UDP: Closing socket
Jun  4 14:42:41 xxxx daemon.notice openvpn[17858]: TCP/UDP: Closing socket
Jun  4 14:42:41 xxxx daemon.notice openvpn[17858]: /sbin/route del -net 10.8.0.0 netmask 255.255.255.0
Jun  4 14:42:41 xxxx daemon.notice openvpn[17858]: Closing TUN/TAP interface
Jun  4 14:42:41 xxxx daemon.notice openvpn[17858]: /sbin/ifconfig tun21 0.0.0.0
Jun  4 14:42:41 xxxx daemon.notice openvpn[17858]: SIGTERM[hard,] received, process exiting
Jun  4 14:42:42 xxxx user.info kernel: tun: Universal TUN/TAP device driver, 1.6
Jun  4 14:42:42 xxxx user.info kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Jun  4 14:42:42 xxxx user.info kernel: device tun21 entered promiscuous mode
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: OpenVPN 2.1.1 mipsel-unknown-linux-gnu [SSL] [LZO2] [EPOLL] built on Sep  9 2011
Jun  4 14:42:43 xxxx daemon.warn openvpn[18838]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: Diffie-Hellman initialized with 1024 bit key
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: TUN/TAP device tun21 opened
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: TUN/TAP TX queue length set to 100
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: /sbin/ifconfig tun21 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Jun  4 14:42:43 xxxx daemon.notice openvpn[18838]: Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: Listening for incoming TCP connection on [undef]:443
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: TCPv4_SERVER link local (bound): [undef]:443
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: TCPv4_SERVER link remote: [undef]
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: MULTI: multi_init called, r=256 v=256
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: IFCONFIG POOL: base=10.8.0.4 size=62
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: MULTI: TCP INIT maxclients=1024 maxevents=1028
Jun  4 14:42:43 xxxx daemon.notice openvpn[18864]: Initialization Sequence Completed

My client log

Wed Jun 04 14:31:43 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May  2 2014
Wed Jun 04 14:31:43 2014 library versions: OpenSSL 1.0.1g 7 Apr 2014, LZO 2.05
Enter Management Password:
Wed Jun 04 14:31:43 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Jun 04 14:31:43 2014 Need hold release from management interface, waiting...
Wed Jun 04 14:31:43 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Jun 04 14:31:43 2014 MANAGEMENT: CMD 'state on'
Wed Jun 04 14:31:43 2014 MANAGEMENT: CMD 'log all on'
Wed Jun 04 14:31:43 2014 MANAGEMENT: CMD 'hold off'
Wed Jun 04 14:31:43 2014 MANAGEMENT: CMD 'hold release'
Wed Jun 04 14:31:43 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jun 04 14:31:43 2014 MANAGEMENT: >STATE:1401863503,RESOLVE,,,
Wed Jun 04 14:31:44 2014 Attempting to establish TCP connection with [AF_INET]42.98.89.174:443
Wed Jun 04 14:31:44 2014 MANAGEMENT: >STATE:1401863504,TCP_CONNECT,,,
Wed Jun 04 14:31:44 2014 TCP connection established with [AF_INET]42.98.xxx.xxx:443
Wed Jun 04 14:31:44 2014 TCPv4_CLIENT link local: [undef]
Wed Jun 04 14:31:44 2014 TCPv4_CLIENT link remote: [AF_INET]42.98.xxx.xxx:443
Wed Jun 04 14:31:44 2014 MANAGEMENT: >STATE:1401863504,WAIT,,,
Wed Jun 04 14:31:44 2014 MANAGEMENT: >STATE:1401863504,AUTH,,,
Wed Jun 04 14:31:44 2014 TLS: Initial packet from [AF_INET]42.98.xxx.xxx:443, sid=ffea0847 b8374868
Wed Jun 04 14:31:44 2014 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Wed Jun 04 14:31:44 2014 VERIFY OK: nsCertType=SERVER
Wed Jun 04 14:31:44 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=OpenVPN, OU=changeme, CN=server, name=changeme, emailAddress=mail@host.domain
Wed Jun 04 14:31:45 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jun 04 14:31:45 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 04 14:31:45 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jun 04 14:31:45 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 04 14:31:45 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 EDH-RSA-DES-CBC3-SHA, 1024 bit RSA
Wed Jun 04 14:31:45 2014 [server] Peer Connection Initiated with [AF_INET]42.98.xxx.xxx:443
Wed Jun 04 14:31:47 2014 MANAGEMENT: >STATE:1401863507,GET_CONFIG,,,
Wed Jun 04 14:31:48 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Jun 04 14:31:48 2014 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.0.1.1,redirect-gateway def1,route 10.8.0.1,topology net30,ping 15,ping-restart 60,ifconfig 10.8.0.6 10.8.0.5'
Wed Jun 04 14:31:48 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jun 04 14:31:48 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jun 04 14:31:48 2014 OPTIONS IMPORT: route options modified
Wed Jun 04 14:31:48 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jun 04 14:31:48 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jun 04 14:31:48 2014 MANAGEMENT: >STATE:1401863508,ASSIGN_IP,,10.8.0.6,
Wed Jun 04 14:31:48 2014 open_tun, tt->ipv6=0
Wed Jun 04 14:31:48 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{CA8A02BF-59C7-44AC-A0D2-63BA7CA50DCC}.tap
Wed Jun 04 14:31:48 2014 TAP-Windows Driver Version 9.9 
Wed Jun 04 14:31:48 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {CA8A02BF-59C7-44AC-A0D2-63BA7CA50DCC} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed Jun 04 14:31:48 2014 Successful ARP Flush on interface [25] {CA8A02BF-59C7-44AC-A0D2-63BA7CA50DCC}
Wed Jun 04 14:31:53 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Jun 04 14:31:53 2014 C:\Windows\system32\route.exe ADD 42.98.xxx.xxx MASK 255.255.255.255 192.168.200.254
Wed Jun 04 14:31:53 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jun 04 14:31:53 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jun 04 14:31:53 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Jun 04 14:31:53 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jun 04 14:31:53 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jun 04 14:31:53 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Jun 04 14:31:53 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jun 04 14:31:53 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jun 04 14:31:53 2014 MANAGEMENT: >STATE:1401863513,ADD_ROUTES,,,
Wed Jun 04 14:31:53 2014 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Wed Jun 04 14:31:53 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jun 04 14:31:53 2014 Route addition via IPAPI succeeded [adaptive]
Wed Jun 04 14:31:53 2014 Initialization Sequence Completed
Wed Jun 04 14:31:53 2014 MANAGEMENT: >STATE:1401863513,CONNECTED,SUCCESS,10.8.0.6,42.98.xxx.xxx
Wed Jun 04 14:42:44 2014 Connection reset, restarting [0]
Wed Jun 04 14:42:44 2014 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jun 04 14:42:44 2014 MANAGEMENT: >STATE:1401864164,RECONNECTING,connection-reset,,
Wed Jun 04 14:42:44 2014 Restart pause, 5 second(s)
Wed Jun 04 14:42:49 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jun 04 14:42:49 2014 MANAGEMENT: >STATE:1401864169,RESOLVE,,,
Wed Jun 04 14:43:01 2014 RESOLVE: Cannot resolve host address: xxx.xxx: The requested name is valid, but no data of the requested type was found. 
Wed Jun 04 14:43:01 2014 MANAGEMENT: >STATE:1401864181,RESOLVE,,,
Wed Jun 04 14:43:13 2014 RESOLVE: Cannot resolve host address: xxx.xxx: The requested name is valid, but no data of the requested type was found. 
Wed Jun 04 14:43:30 2014 RESOLVE: Cannot resolve host address: xxx.xxx: The requested name is valid, but no data of the requested type was found. 
Wed Jun 04 14:43:47 2014 RESOLVE: Cannot resolve host address: xxx.xxx: The requested name is valid, but no data of the requested type was found. 
Wed Jun 04 14:44:04 2014 RESOLVE: signal received during DNS resolution attempt
Wed Jun 04 14:44:04 2014 C:\Windows\system32\route.exe DELETE 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Wed Jun 04 14:44:04 2014 Route deletion via IPAPI succeeded [adaptive]
Wed Jun 04 14:44:04 2014 C:\Windows\system32\route.exe DELETE 42.98.xxx.xxx MASK 255.255.255.255 192.168.200.254
Wed Jun 04 14:44:04 2014 Route deletion via IPAPI succeeded [adaptive]
Wed Jun 04 14:44:04 2014 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Jun 04 14:44:04 2014 Route deletion via IPAPI succeeded [adaptive]
Wed Jun 04 14:44:04 2014 C:\Windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Wed Jun 04 14:44:04 2014 Route deletion via IPAPI succeeded [adaptive]
Wed Jun 04 14:44:04 2014 Closing TUN/TAP interface
Wed Jun 04 14:44:04 2014 SIGTERM[hard,init_instance] received, process exiting
Wed Jun 04 14:44:04 2014 MANAGEMENT: >STATE:1401864244,EXITING,init_instance,,

My client config

client
dev tun
proto tcp
remote mydnshostname 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3
redirect-gateway
keepalive 20 60

My server config in tomato GUI
Start with wan YES
Interface type TUN
Protocol TCP
Server port 443
Firewall Automatic
Authorization mode TLS
VPN subnet/Mask 10.8.0.0 255.255.255.0
Poll interval 0 (0 to disable)
Direct clients to redirect internet traffic yes
Encryption cipher use default
Compression adaptable
TLS renegotiation -1(default)