Windows 8.1 x64, works on wired but not on wireless

Shurman

Hi, community!

I have exactly the same problem, as in this post: https://forums.openvpn.net/topic14711.html
However, installing the latest x64 OpenVPN distribution package (May 2014) did not help in my case. 🙁

Interesting thing: after successful connection, IP and routes are correct. However, while NEW connections fail - ESTABLISHED connections keep going!
I continue to listen to internet-radio, my SQLDeveloper session is not broken, I can use my ssh session to my OpenVPN server trying to debug (well, tcpdump shows no packets from the client). But new connections - dns queries, http requests, etc. - fail. This looks very strange, but this is how it is.

Here are the configs

server.conf

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 10.9.8.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
route 192.168.1.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 120
tls-auth ta.key 0 # This file is secret
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
mute 20

client.conf

client
dev tun
proto udp
remote *.*.*.* 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca-aaa.crt
cert home.crt
key home.key
ns-cert-type server
tls-auth ta.key 1
comp-lzo
verb 3

here goes routing (however I do not think it is the cause

before connection
(sorry for locale)

===========================================================================
Список интерфейсов
 10...00 ff f8 c8 ba e7 ......TAP-Windows Adapter V9
  9...68 17 29 b7 27 ef ......Виртуальный адаптер Wi-Fi Direct (Майкрософт)
  5...68 17 29 b7 27 f2 ......Устройства Bluetooth (личной сети)
  3...68 17 29 b7 27 ee ......Intel(R) Centrino(R) Wireless-N 2230
  2...a0 48 1c c2 48 4c ......Контроллер семейства Realtek PCIe GBE
  1...........................Software Loopback Interface 1
  8...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 14...00 00 00 00 00 00 00 e0 Адаптер Microsoft ISATAP #5
===========================================================================

IPv4 таблица маршрута
===========================================================================
Активные маршруты:
Сетевой адрес           Маска сети      Адрес шлюза       Интерфейс  Метрика
          0.0.0.0          0.0.0.0  192.168.128.100  192.168.128.247     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
    192.168.128.0    255.255.255.0         On-link   192.168.128.247    281
  192.168.128.247  255.255.255.255         On-link   192.168.128.247    281
  192.168.128.255  255.255.255.255         On-link   192.168.128.247    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link   192.168.128.247    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link   192.168.128.247    281
===========================================================================
Постоянные маршруты:
  Отсутствует

IPv6 таблица маршрута
===========================================================================
Активные маршруты:
 Метрика   Сетевой адрес            Шлюз
  8    306 ::/0                     On-link
  1    306 ::1/128                  On-link
  8    306 2001::/32                On-link
  8    306 2001:0:9d38:90d7:2ca2:386b:a0bd:7d0e/128
                                    On-link
  3    281 fe80::/64                On-link
  8    306 fe80::/64                On-link
  8    306 fe80::2ca2:386b:a0bd:7d0e/128
                                    On-link
  3    281 fe80::dc0a:aef0:c36e:8329/128
                                    On-link
  1    306 ff00::/8                 On-link
  8    306 ff00::/8                 On-link
  3    281 ff00::/8                 On-link
===========================================================================
Постоянные маршруты:
  Отсутствует

After connection

===========================================================================
Список интерфейсов
 10...00 ff f8 c8 ba e7 ......TAP-Windows Adapter V9
  9...68 17 29 b7 27 ef ......Виртуальный адаптер Wi-Fi Direct (Майкрософт)
  5...68 17 29 b7 27 f2 ......Устройства Bluetooth (личной сети)
  3...68 17 29 b7 27 ee ......Intel(R) Centrino(R) Wireless-N 2230
  2...a0 48 1c c2 48 4c ......Контроллер семейства Realtek PCIe GBE
  1...........................Software Loopback Interface 1
  8...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 11...00 00 00 00 00 00 00 e0 Адаптер Microsoft ISATAP #2
 14...00 00 00 00 00 00 00 e0 Адаптер Microsoft ISATAP #5
===========================================================================

IPv4 таблица маршрута
===========================================================================
Активные маршруты:
Сетевой адрес           Маска сети      Адрес шлюза       Интерфейс  Метрика
          0.0.0.0          0.0.0.0  192.168.128.100  192.168.128.247     25
          0.0.0.0        128.0.0.0         10.9.8.5         10.9.8.6     30
         10.9.8.0    255.255.255.0         10.9.8.5         10.9.8.6     30
         10.9.8.4  255.255.255.252         On-link          10.9.8.6    286
         10.9.8.6  255.255.255.255         On-link          10.9.8.6    286
         10.9.8.7  255.255.255.255         On-link          10.9.8.6    286
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0         10.9.8.5         10.9.8.6     30
  *.*.*.*  255.255.255.255  192.168.128.100  192.168.128.247     25
    192.168.128.0    255.255.255.0         On-link   192.168.128.247    281
  192.168.128.247  255.255.255.255         On-link   192.168.128.247    281
  192.168.128.255  255.255.255.255         On-link   192.168.128.247    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link   192.168.128.247    281
        224.0.0.0        240.0.0.0         On-link          10.9.8.6    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link   192.168.128.247    281
  255.255.255.255  255.255.255.255         On-link          10.9.8.6    286
===========================================================================
Постоянные маршруты:
  Отсутствует

IPv6 таблица маршрута
===========================================================================
Активные маршруты:
 Метрика   Сетевой адрес            Шлюз
  1    306 ::1/128                  On-link
  3    281 fe80::/64                On-link
 10    286 fe80::/64                On-link
 10    286 fe80::c181:4b86:329f:4cf9/128
                                    On-link
  3    281 fe80::dc0a:aef0:c36e:8329/128
                                    On-link
  1    306 ff00::/8                 On-link
  3    281 ff00::/8                 On-link
 10    286 ff00::/8                 On-link
===========================================================================
Постоянные маршруты:
  Отсутствует

Here goes connection log

Tue Jul 08 17:44:53 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Tue Jul 08 17:44:53 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Tue Jul 08 17:44:53 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Tue Jul 08 17:44:53 2014 Need hold release from management interface, waiting...
Tue Jul 08 17:44:53 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Tue Jul 08 17:44:53 2014 MANAGEMENT: CMD 'state on'
Tue Jul 08 17:44:53 2014 MANAGEMENT: CMD 'log all on'
Tue Jul 08 17:44:53 2014 MANAGEMENT: CMD 'hold off'
Tue Jul 08 17:44:53 2014 MANAGEMENT: CMD 'hold release'
Tue Jul 08 17:44:53 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Jul 08 17:44:53 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 08 17:44:53 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 08 17:44:53 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Jul 08 17:44:53 2014 UDPv4 link local: [undef]
Tue Jul 08 17:44:53 2014 UDPv4 link remote: [AF_INET]188.226.179.103:1194
Tue Jul 08 17:44:53 2014 MANAGEMENT: >STATE:1404827093,WAIT,,,
Tue Jul 08 17:44:53 2014 MANAGEMENT: >STATE:1404827093,AUTH,,,
Tue Jul 08 17:44:53 2014 TLS: Initial packet from [AF_INET]*.*.*.*:1194, sid=030faff3 ff19b140
Tue Jul 08 17:44:54 2014 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=Organ, CN=*.*.*.*, name=*.*.*.*, emailAddress=mail@host.domain
Tue Jul 08 17:44:54 2014 VERIFY OK: nsCertType=SERVER
Tue Jul 08 17:44:54 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=Organ, CN=*.*.*.*, name=*.*.*.*, emailAddress=mail@host.domain
Tue Jul 08 17:44:54 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 08 17:44:54 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 08 17:44:54 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jul 08 17:44:54 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jul 08 17:44:54 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Jul 08 17:44:54 2014 [188.226.179.103] Peer Connection Initiated with [AF_INET]*.*.*.*:1194
Tue Jul 08 17:44:55 2014 MANAGEMENT: >STATE:1404827095,GET_CONFIG,,,
Tue Jul 08 17:44:56 2014 SENT CONTROL [188.226.179.103]: 'PUSH_REQUEST' (status=1)
Tue Jul 08 17:44:56 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.9.8.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.9.8.6 10.9.8.5'
Tue Jul 08 17:44:56 2014 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jul 08 17:44:56 2014 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jul 08 17:44:56 2014 OPTIONS IMPORT: route options modified
Tue Jul 08 17:44:56 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Jul 08 17:44:56 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jul 08 17:44:56 2014 MANAGEMENT: >STATE:1404827096,ASSIGN_IP,,10.9.8.6,
Tue Jul 08 17:44:56 2014 open_tun, tt->ipv6=0
Tue Jul 08 17:44:56 2014 TAP-WIN32 device [Подключение по локальной сети] opened: \\.\Global\{F8C8BAE7-2E42-4249-8989-CE8872E09AEC}.tap
Tue Jul 08 17:44:56 2014 TAP-Windows Driver Version 9.9 
Tue Jul 08 17:44:56 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.8.6/255.255.255.252 on interface {F8C8BAE7-2E42-4249-8989-CE8872E09AEC} [DHCP-serv: 10.9.8.5, lease-time: 31536000]
Tue Jul 08 17:44:56 2014 Successful ARP Flush on interface [10] {F8C8BAE7-2E42-4249-8989-CE8872E09AEC}
Tue Jul 08 17:45:01 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Jul 08 17:45:01 2014 C:\WINDOWS\system32\route.exe ADD *.*.*.* MASK 255.255.255.255 192.168.128.100
Tue Jul 08 17:45:01 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Tue Jul 08 17:45:01 2014 Route addition via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:01 2014 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.9.8.5
Tue Jul 08 17:45:01 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Jul 08 17:45:01 2014 Route addition via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:01 2014 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.9.8.5
Tue Jul 08 17:45:01 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Jul 08 17:45:01 2014 Route addition via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:01 2014 MANAGEMENT: >STATE:1404827101,ADD_ROUTES,,,
Tue Jul 08 17:45:01 2014 C:\WINDOWS\system32\route.exe ADD 10.9.8.0 MASK 255.255.255.0 10.9.8.5
Tue Jul 08 17:45:01 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Jul 08 17:45:01 2014 Route addition via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:01 2014 Initialization Sequence Completed
Tue Jul 08 17:45:01 2014 MANAGEMENT: >STATE:1404827101,CONNECTED,SUCCESS,10.9.8.6,*.*.*.*
Tue Jul 08 17:45:46 2014 C:\WINDOWS\system32\route.exe DELETE 10.9.8.0 MASK 255.255.255.0 10.9.8.5
Tue Jul 08 17:45:46 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:46 2014 C:\WINDOWS\system32\route.exe DELETE *.*.*.* MASK 255.255.255.255 192.168.128.100
Tue Jul 08 17:45:46 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:46 2014 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.9.8.5
Tue Jul 08 17:45:46 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:46 2014 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.9.8.5
Tue Jul 08 17:45:46 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Jul 08 17:45:46 2014 Closing TUN/TAP interface
Tue Jul 08 17:45:46 2014 SIGTERM[hard,] received, process exiting
Tue Jul 08 17:45:46 2014 MANAGEMENT: >STATE:1404827146,EXITING,SIGTERM,,

Shurman

Ofcourse I tried to disable Windows firewall completely, it did not make any difference. Actually I have 192.168.128.0/24 network. A route for 192.168.1.0/24 is for home network. But it does not make any difference if I remove it (I tried just in case). By the way, my Windows 7 laptop works well with the same configs (actually copied from 7 to 8) - regardless of connection type. I will try to use wireshark, but suspect the problem is somewhere deeper...

Shurman

debbie10t wroteTried to disable .. or succeeded to disable ?

:lol: Succeeded, sure

debbie10t wroteSo W7 works eth or wi-fi but W8.1 64bit does not work on wi-fi ?

Exactly. With same settings.

debbie10t wroteNo doubt it is deeper .. as a suggestion can you install the 32bit OpenVPN ?

Actually, originally I started with 2.2.2 32-bit - just because I had it installed and working on several machines (and had distro handy).
After I faced the problem I started to dig into forums/lists, and found the post I referenced in the first post of this thread - exaclty same symthoms, and installing the latest 64-bit version helped in his case... unfortunately - not in mine. 🙁

debbie10t wroteOne final thought, are you running OpenVPN from the service or from the GUI ?

Tried both ways - no difference. 🙁

Feels like it is some problem with 8.1 x64 network stack or network components

Shurman

I sure did find this article while searhing... This is not the case.
But the problem looks like being somewhat related...

Shurman

Thanks, will try this just in case on next week.

However, it looks like the problem is not with mtu and etc.

I added two other vpn configs (access to different offices) - they do not set default routes (just push routes for office networks). They both work like a charm!

So it appears to be a problem with routing... May be 8.1 does not hande /128 mask correctly...

Shurman

Sorry I meant "redirect-gateway def1" and /1