I have openvpn server in centos 6 64bit and linux pc's running win customers and ok I have it with the rpoblema yealink t20 phone not connecting to the vpn. I enclose you a log of the phone to see if I can help.
PD: all machines and phones are on the same network so already ruled out the possibility of firewal
thank you
-------------------------------
log yealint20 not connected:
Aug 5 21:26:49 openvpn[288]: TCP/UDP: Closing socket
Aug 5 21:26:49 openvpn[288]: SIGUSR1[soft,tls-error] received, process restarting
Aug 5 21:26:49 openvpn[288]: Restart pause, 2 second(s)
Aug 5 21:26:49 SIP [476]: SDL <6+info > [000] ^M
Aug 5 21:26:49 SIP [476]: SDL <6+info > [000]
Aug 5 21:26:49 SIP [476]: SDL <5+notice> [000] send request retransmission (id=66)^M
Aug 5 21:26:51 openvpn[288]: WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Aug 5 21:26:51 openvpn[288]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Aug 5 21:26:51 openvpn[288]: Re-using SSL/TLS context
Aug 5 21:26:51 openvpn[288]: LZO compression initialized
Aug 5 21:26:51 openvpn[288]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Aug 5 21:26:51 openvpn[288]: Socket Buffers: R=[114688->131072] S=[114688->131072]
Aug 5 21:26:51 openvpn[288]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Aug 5 21:26:51 openvpn[288]: Local Options hash (VER=V4): '41690919'
Aug 5 21:26:51 openvpn[288]: Expected Remote Options hash (VER=V4): '530fdded'
Aug 5 21:26:51 openvpn[288]: UDPv4 link local: [undef]
Aug 5 21:26:51 openvpn[288]: UDPv4 link remote: xxx.xxx.5.52:1194
Aug 5 21:26:51 openvpn[288]: TLS: Initial packet from xxx.xxx.5.52:1194, sid=94355cbc 3f8c332a
Aug 5 21:26:53 SIP [476]: SDL <6+info > [000] DNS resolution with 10.10.10.1:5060
Aug 5 21:26:53 SIP [476]: SDL <6+info > [000] Message sent: (to dest=10.10.10.1:5060)
----------------------------------client
vpn.cnf:
dev tun
proto udp
remote xxx.xxx.5.52 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca /config/openvpn/keys/ca.crt
cert /config/openvpn/keys/666-7.crt
key /config/openvpn/keys/666-7.key
comp-lzo
verb 3
------------------------------------------------
server.conf:
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.10.10.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 20 360
comp-lzo
user asterisk
group asterisk
persist-key
persist-tun
status openvpn-status.log
verb 3
client-to-client
crl-verify /etc/openvpn/crl.pem
log /etc/openvpn/vpn_nahuel.log
verb 4
-------------------------------------------------------------------------
log windows pc ok
Tue Aug 05 18:29:26 2014 UDPv4 link remote: [AF_INET]xxx.xxxx.5.52:1194
Tue Aug 05 18:29:26 2014 MANAGEMENT: >STATE:1407274166,WAIT,,,
Tue Aug 05 18:29:26 2014 MANAGEMENT: >STATE:1407274166,AUTH,,,
Tue Aug 05 18:29:26 2014 TLS: Initial packet from [AF_INET]xxx.xxxx.5.52:1194, sid=7245b5fc a06d1e3a
Tue Aug 05 18:29:33 2014 VERIFY OK: depth=1, C=Ar, ST=BS, L=C A B A, O=Ente publico Espacio Memoria, OU=Espacio, CN=elastixserver, name=Nahuel, emailAddress=
nahuel@hijos-capital.org.ar
Tue Aug 05 18:29:33 2014 VERIFY OK: depth=0, C=Ar, ST=BS, L=C A B A, O=Ente publico Espacio Memoria, OU=Espacio, CN=server, name=Nahuel, emailAddress=
nahuel@hijos-capital.org.ar
Tue Aug 05 18:29:34 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Aug 05 18:29:34 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 05 18:29:34 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Aug 05 18:29:34 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 05 18:29:34 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Aug 05 18:29:34 2014 [server] Peer Connection Initiated with [AF_INET]xxx.xxx.5.52:1194
Tue Aug 05 18:29:35 2014 MANAGEMENT: >STATE:1407274175,GET_CONFIG,,,
Tue Aug 05 18:29:36 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Aug 05 18:29:36 2014 PUSH: Received control message: 'PUSH_REPLY,route 10.10.10.0 255.255.255.0,topology net30,ping 20,ping-restart 360,ifconfig 10.10.10.6 10.10.10.5'
Tue Aug 05 18:29:36 2014 OPTIONS IMPORT: timers and/or timeouts modified
Tue Aug 05 18:29:36 2014 OPTIONS IMPORT: --ifconfig/up options modified
Tue Aug 05 18:29:36 2014 OPTIONS IMPORT: route options modified
Tue Aug 05 18:29:36 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Aug 05 18:29:36 2014 MANAGEMENT: >STATE:1407274176,ASSIGN_IP,,10.10.10.6,
Tue Aug 05 18:29:36 2014 open_tun, tt->ipv6=0
Tue Aug 05 18:29:36 2014 TAP-WIN32 device [Conexión de área local 4] opened: \\.\Global\{2A9E6410-39F3-4EF4-A559-30207D1CEACF}.tap
Tue Aug 05 18:29:36 2014 TAP-Windows Driver Version 9.9
Tue Aug 05 18:29:36 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.10.6/255.255.255.252 on interface {2A9E6410-39F3-4EF4-A559-30207D1CEACF} [DHCP-serv: 10.10.10.5, lease-time: 31536000]
Tue Aug 05 18:29:36 2014 Successful ARP Flush on interface [2] {2A9E6410-39F3-4EF4-A559-30207D1CEACF}
Tue Aug 05 18:29:42 2014 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Tue Aug 05 18:29:42 2014 MANAGEMENT: >STATE:1407274182,ADD_ROUTES,,,
Tue Aug 05 18:29:42 2014 C:\WINDOWS\system32\route.exe ADD 10.10.10.0 MASK 255.255.255.0 10.10.10.5
Tue Aug 05 18:29:42 2014 Route addition via IPAPI succeeded [adaptive]
Tue Aug 05 18:29:42 2014 Initialization Sequence Completed
Tue Aug 05 18:29:42 2014 MANAGEMENT: >STATE:1407274182,CONNECTED,SUCCESS,10.10.10.6,186.153.5.52
Tue Aug 05 18:36:41 2014 write UDPv4: No Route to Host (WSAEHOSTUNREACH) (code=10065)
Tue Aug 05 18:37:02 2014 write UDPv4: No Route to Host (WSAEHOSTUNREACH) (code=10065)
