Connection only in the same Subnet

gregorx

Hello my Problem is that my Client can connect correctly when I'm in the same Subnet of the external IP.

For example (IP is fictional) external IP of the OpenVPN server is 149.154.154.1 and a client is 149.154.154.3 that... than it work perfectly.
When I try to connect with a external IP from a other Subnet (for example) 46.74.9.1 than it don't work and ends with:
tls error tls key negotiation failed to occur within 60 seconds (check your network connectivity)

Server Config:

port 11094
proto udp
dev tap0
ca /etc/openvpn/easy-rsa2/keys/ca.crt
cert /etc/openvpn/easy-rsa2/keys/server-hostname.crt
key /etc/openvpn/easy-rsa2/keys/server-hostname.key  # This file should be kept secret
dh /etc/openvpn/easy-rsa2/keys/dh2048.pem
server-bridge
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 172.16.18.30"
keepalive 10 120
cipher AES-256-CBC   # AES
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3

Client Config:

client
pull
dev tap
dev-node VPN-ABA
proto udp
remote 149.154.154.1 11094
nobind
persist-key
persist-tun
ca ca.crt
cert client-hostname.crt
key client-hostname.key
cipher AES-256-CBC
comp-lzo
verb 3
redirect-gateway def1

gregorx

Client when I'm in the same Subnet

Tue Aug 12 14:17:37 2014 us=635581 Current Parameter Settings:
Tue Aug 12 14:17:37 2014 us=635581   config = 'client.ovpn'
Tue Aug 12 14:17:37 2014 us=635581   mode = 0
Tue Aug 12 14:17:37 2014 us=635581   show_ciphers = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   show_digests = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   show_engines = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   genkey = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   key_pass_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   show_tls_ciphers = DISABLED
Tue Aug 12 14:17:37 2014 us=635581 Connection profiles [default]:
Tue Aug 12 14:17:37 2014 us=635581   proto = udp
Tue Aug 12 14:17:37 2014 us=635581   local = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   local_port = 0
Tue Aug 12 14:17:37 2014 us=635581   remote = '149.154.154.1'
Tue Aug 12 14:17:37 2014 us=635581   remote_port = 11094
Tue Aug 12 14:17:37 2014 us=635581   remote_float = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   bind_defined = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   bind_local = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   connect_retry_seconds = 5
Tue Aug 12 14:17:37 2014 us=635581   connect_timeout = 10
Tue Aug 12 14:17:37 2014 us=635581   connect_retry_max = 0
Tue Aug 12 14:17:37 2014 us=635581   socks_proxy_server = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   socks_proxy_port = 0
Tue Aug 12 14:17:37 2014 us=635581   socks_proxy_retry = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   tun_mtu = 1500
Tue Aug 12 14:17:37 2014 us=635581   tun_mtu_defined = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   link_mtu = 1500
Tue Aug 12 14:17:37 2014 us=635581   link_mtu_defined = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   tun_mtu_extra = 32
Tue Aug 12 14:17:37 2014 us=635581   tun_mtu_extra_defined = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   mtu_discover_type = -1
Tue Aug 12 14:17:37 2014 us=635581   fragment = 0
Tue Aug 12 14:17:37 2014 us=635581   mssfix = 1450
Tue Aug 12 14:17:37 2014 us=635581   explicit_exit_notification = 0
Tue Aug 12 14:17:37 2014 us=635581 Connection profiles END
Tue Aug 12 14:17:37 2014 us=635581   remote_random = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   ipchange = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   dev = 'tap'
Tue Aug 12 14:17:37 2014 us=635581   dev_type = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   dev_node = 'VPN-ABA'
Tue Aug 12 14:17:37 2014 us=635581   lladdr = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   topology = 1
Tue Aug 12 14:17:37 2014 us=635581   tun_ipv6 = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_local = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_remote_netmask = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_noexec = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_nowarn = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_ipv6_local = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_ipv6_netbits = 0
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_ipv6_remote = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   shaper = 0
Tue Aug 12 14:17:37 2014 us=635581   mtu_test = 0
Tue Aug 12 14:17:37 2014 us=635581   mlock = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   keepalive_ping = 0
Tue Aug 12 14:17:37 2014 us=635581   keepalive_timeout = 0
Tue Aug 12 14:17:37 2014 us=635581   inactivity_timeout = 0
Tue Aug 12 14:17:37 2014 us=635581   ping_send_timeout = 0
Tue Aug 12 14:17:37 2014 us=635581   ping_rec_timeout = 0
Tue Aug 12 14:17:37 2014 us=635581   ping_rec_timeout_action = 0
Tue Aug 12 14:17:37 2014 us=635581   ping_timer_remote = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   remap_sigusr1 = 0
Tue Aug 12 14:17:37 2014 us=635581   persist_tun = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   persist_local_ip = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   persist_remote_ip = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   persist_key = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   passtos = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   resolve_retry_seconds = 1000000000
Tue Aug 12 14:17:37 2014 us=635581   username = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   groupname = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   chroot_dir = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   cd_dir = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   writepid = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   up_script = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   down_script = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   down_pre = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   up_restart = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   up_delay = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   daemon = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   inetd = 0
Tue Aug 12 14:17:37 2014 us=635581   log = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   suppress_timestamps = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   nice = 0
Tue Aug 12 14:17:37 2014 us=635581   verbosity = 4
Tue Aug 12 14:17:37 2014 us=635581   mute = 0
Tue Aug 12 14:17:37 2014 us=635581   status_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   status_file_version = 1
Tue Aug 12 14:17:37 2014 us=635581   status_file_update_freq = 60
Tue Aug 12 14:17:37 2014 us=635581   occ = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   rcvbuf = 0
Tue Aug 12 14:17:37 2014 us=635581   sndbuf = 0
Tue Aug 12 14:17:37 2014 us=635581   sockflags = 0
Tue Aug 12 14:17:37 2014 us=635581   fast_io = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   lzo = 7
Tue Aug 12 14:17:37 2014 us=635581   route_script = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   route_default_gateway = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   route_default_metric = 0
Tue Aug 12 14:17:37 2014 us=635581   route_noexec = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   route_delay = 5
Tue Aug 12 14:17:37 2014 us=635581   route_delay_window = 30
Tue Aug 12 14:17:37 2014 us=635581   route_delay_defined = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   route_nopull = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   route_gateway_via_dhcp = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   max_routes = 100
Tue Aug 12 14:17:37 2014 us=635581   allow_pull_fqdn = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   [redirect_default_gateway local=0]
Tue Aug 12 14:17:37 2014 us=635581   management_addr = '127.0.0.1'
Tue Aug 12 14:17:37 2014 us=635581   management_port = 25340
Tue Aug 12 14:17:37 2014 us=635581   management_user_pass = 'stdin'
Tue Aug 12 14:17:37 2014 us=635581   management_log_history_cache = 250
Tue Aug 12 14:17:37 2014 us=635581   management_echo_buffer_size = 100
Tue Aug 12 14:17:37 2014 us=635581   management_write_peer_info_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   management_client_user = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   management_client_group = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   management_flags = 6
Tue Aug 12 14:17:37 2014 us=635581   shared_secret_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   key_direction = 0
Tue Aug 12 14:17:37 2014 us=635581   ciphername_defined = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   ciphername = 'AES-256-CBC'
Tue Aug 12 14:17:37 2014 us=635581   authname_defined = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   authname = 'SHA1'
Tue Aug 12 14:17:37 2014 us=635581   prng_hash = 'SHA1'
Tue Aug 12 14:17:37 2014 us=635581   prng_nonce_secret_len = 16
Tue Aug 12 14:17:37 2014 us=635581   keysize = 0
Tue Aug 12 14:17:37 2014 us=635581   engine = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   replay = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   mute_replay_warnings = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   replay_window = 64
Tue Aug 12 14:17:37 2014 us=635581   replay_time = 15
Tue Aug 12 14:17:37 2014 us=635581   packet_id_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   use_iv = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   test_crypto = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   tls_server = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   tls_client = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   key_method = 2
Tue Aug 12 14:17:37 2014 us=635581   ca_file = 'ca.crt'
Tue Aug 12 14:17:37 2014 us=635581   ca_path = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   dh_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   cert_file = 'client.crt'
Tue Aug 12 14:17:37 2014 us=635581   priv_key_file = 'client.key'
Tue Aug 12 14:17:37 2014 us=635581   pkcs12_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   cryptoapi_cert = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   cipher_list = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   tls_verify = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   tls_export_cert = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   verify_x509_type = 0
Tue Aug 12 14:17:37 2014 us=635581   verify_x509_name = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   crl_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   ns_cert_type = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_ku[i] = 0
Tue Aug 12 14:17:37 2014 us=635581   remote_cert_eku = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   ssl_flags = 0
Tue Aug 12 14:17:37 2014 us=635581   tls_timeout = 2
Tue Aug 12 14:17:37 2014 us=635581   renegotiate_bytes = 0
Tue Aug 12 14:17:37 2014 us=635581   renegotiate_packets = 0
Tue Aug 12 14:17:37 2014 us=635581   renegotiate_seconds = 3600
Tue Aug 12 14:17:37 2014 us=635581   handshake_window = 60
Tue Aug 12 14:17:37 2014 us=635581   transition_window = 3600
Tue Aug 12 14:17:37 2014 us=635581   single_session = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   push_peer_info = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   tls_exit = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   tls_auth_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_private_mode = 00000000
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_cert_private = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_pin_cache_period = -1
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_id = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   pkcs11_id_management = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   server_network = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   server_netmask = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   server_network_ipv6 = ::
Tue Aug 12 14:17:37 2014 us=635581   server_netbits_ipv6 = 0
Tue Aug 12 14:17:37 2014 us=635581   server_bridge_ip = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   server_bridge_netmask = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   server_bridge_pool_start = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   server_bridge_pool_end = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_pool_defined = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_pool_start = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_pool_end = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_pool_netmask = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_pool_persist_refresh_freq = 600
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_ipv6_pool_defined = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_ipv6_pool_base = ::
Tue Aug 12 14:17:37 2014 us=635581   ifconfig_ipv6_pool_netbits = 0
Tue Aug 12 14:17:37 2014 us=635581   n_bcast_buf = 256
Tue Aug 12 14:17:37 2014 us=635581   tcp_queue_limit = 64
Tue Aug 12 14:17:37 2014 us=635581   real_hash_size = 256
Tue Aug 12 14:17:37 2014 us=635581   virtual_hash_size = 256
Tue Aug 12 14:17:37 2014 us=635581   client_connect_script = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   learn_address_script = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   client_disconnect_script = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   client_config_dir = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   ccd_exclusive = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   tmp_dir = 'C:\Users\GREGOR~1\AppData\Local\Temp\'
Tue Aug 12 14:17:37 2014 us=635581   push_ifconfig_defined = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   push_ifconfig_local = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   push_ifconfig_remote_netmask = 0.0.0.0
Tue Aug 12 14:17:37 2014 us=635581   push_ifconfig_ipv6_defined = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   push_ifconfig_ipv6_local = ::/0
Tue Aug 12 14:17:37 2014 us=635581   push_ifconfig_ipv6_remote = ::
Tue Aug 12 14:17:37 2014 us=635581   enable_c2c = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   duplicate_cn = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   cf_max = 0
Tue Aug 12 14:17:37 2014 us=635581   cf_per = 0
Tue Aug 12 14:17:37 2014 us=635581   max_clients = 1024
Tue Aug 12 14:17:37 2014 us=635581   max_routes_per_client = 256
Tue Aug 12 14:17:37 2014 us=635581   auth_user_pass_verify_script = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   auth_user_pass_verify_script_via_file = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   client = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   pull = ENABLED
Tue Aug 12 14:17:37 2014 us=635581   auth_user_pass_file = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   show_net_up = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   route_method = 0
Tue Aug 12 14:17:37 2014 us=635581   ip_win32_defined = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   ip_win32_type = 3
Tue Aug 12 14:17:37 2014 us=635581   dhcp_masq_offset = 0
Tue Aug 12 14:17:37 2014 us=635581   dhcp_lease_time = 31536000
Tue Aug 12 14:17:37 2014 us=635581   tap_sleep = 0
Tue Aug 12 14:17:37 2014 us=635581   dhcp_options = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   dhcp_renew = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   dhcp_pre_release = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   dhcp_release = DISABLED
Tue Aug 12 14:17:37 2014 us=635581   domain = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   netbios_scope = '[UNDEF]'
Tue Aug 12 14:17:37 2014 us=635581   netbios_node_type = 0
Tue Aug 12 14:17:37 2014 us=635581   disable_nbt = DISABLED
Tue Aug 12 14:17:37 2014 us=635581 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Tue Aug 12 14:17:37 2014 us=635581 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Tue Aug 12 14:17:37 2014 us=635581 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Aug 12 14:17:37 2014 us=635581 Need hold release from management interface, waiting...
Tue Aug 12 14:17:38 2014 us=119985 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Aug 12 14:17:38 2014 us=229366 MANAGEMENT: CMD 'state on'
Tue Aug 12 14:17:38 2014 us=229366 MANAGEMENT: CMD 'log all on'
Tue Aug 12 14:17:38 2014 us=338751 MANAGEMENT: CMD 'hold off'
Tue Aug 12 14:17:38 2014 us=338751 MANAGEMENT: CMD 'hold release'
Tue Aug 12 14:17:38 2014 us=338751 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 12 14:17:45 2014 us=432884 MANAGEMENT: CMD 'password [...]'
Tue Aug 12 14:17:45 2014 us=432884 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Aug 12 14:17:45 2014 us=432884 SIGUSR1[soft,private-key-password-failure] received, process restarting
Tue Aug 12 14:17:45 2014 us=432884 MANAGEMENT: >STATE:1407845865,RECONNECTING,private-key-password-failure,,
Tue Aug 12 14:17:45 2014 us=432884 Restart pause, 2 second(s)
Tue Aug 12 14:17:47 2014 us=432985 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 12 14:17:52 2014 us=605142 MANAGEMENT: CMD 'password [...]'
Tue Aug 12 14:17:52 2014 us=620759 LZO compression initialized
Tue Aug 12 14:17:52 2014 us=620759 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 12 14:17:52 2014 us=620759 Socket Buffers: R=[128000->128000] S=[49152->49152]
Tue Aug 12 14:17:52 2014 us=620759 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Aug 12 14:17:52 2014 us=620759 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Aug 12 14:17:52 2014 us=620759 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Aug 12 14:17:52 2014 us=620759 Local Options hash (VER=V4): 'c6c7c21a'
Tue Aug 12 14:17:52 2014 us=620759 Expected Remote Options hash (VER=V4): '1a6d5c5d'
Tue Aug 12 14:17:52 2014 us=620759 UDPv4 link local: [undef]
Tue Aug 12 14:17:52 2014 us=620759 UDPv4 link remote: [AF_INET]149.154.154.1:11094
Tue Aug 12 14:17:52 2014 us=620759 MANAGEMENT: >STATE:1407845872,WAIT,,,
Tue Aug 12 14:17:52 2014 us=620759 MANAGEMENT: >STATE:1407845872,AUTH,,,
Tue Aug 12 14:17:52 2014 us=620759 TLS: Initial packet from [AF_INET]149.154.154.1:11094, sid=85ff95b2 a01e3009
Tue Aug 12 14:17:52 2014 us=698893 VERIFY OK: depth=1, C=AT, ST=NOE, L=Ort, O=Firma, OU=IT Department, CN=vpn.aba.netzwerk, name=changeme, emailAddress=mail@host.domain
Tue Aug 12 14:17:52 2014 us=698893 VERIFY OK: depth=0, C=AT, ST=NOE, L=Ort, O=Firma, OU=changeme, CN=aba-18-29, name=changeme, emailAddress=mail@host.domain
Tue Aug 12 14:18:03 2014 us=184729 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Aug 12 14:18:03 2014 us=184729 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 12 14:18:03 2014 us=184729 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Aug 12 14:18:03 2014 us=184729 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 12 14:18:03 2014 us=184729 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Aug 12 14:18:03 2014 us=184729 [aba-18-29] Peer Connection Initiated with [AF_INET]149.154.154.1:11094
Tue Aug 12 14:18:04 2014 us=919193 MANAGEMENT: >STATE:1407845884,GET_CONFIG,,,
Tue Aug 12 14:18:05 2014 us=981750 SENT CONTROL [aba-18-29]: 'PUSH_REQUEST' (status=1)
Tue Aug 12 14:18:05 2014 us=981750 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 172.16.18.30,route-gateway dhcp,ping 10,ping-restart 120'
Tue Aug 12 14:18:05 2014 us=981750 OPTIONS IMPORT: timers and/or timeouts modified
Tue Aug 12 14:18:05 2014 us=981750 OPTIONS IMPORT: route options modified
Tue Aug 12 14:18:05 2014 us=981750 OPTIONS IMPORT: route-related options modified
Tue Aug 12 14:18:05 2014 us=981750 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Aug 12 14:18:06 2014 us=44252 open_tun, tt->ipv6=0
Tue Aug 12 14:18:06 2014 us=44252 TAP-WIN32 device [VPN-ABA] opened: \\.\Global\{B3664482-B10A-4D66-BADC-0CBA74EBE3FC}.tap
Tue Aug 12 14:18:06 2014 us=44252 TAP-Windows Driver Version 9.9 
Tue Aug 12 14:18:06 2014 us=44252 TAP-Windows MTU=1500
Tue Aug 12 14:18:06 2014 us=44252 Successful ARP Flush on interface [24] {B3664482-B10A-4D66-BADC-0CBA74EBE3FC}
Tue Aug 12 14:18:11 2014 us=404731 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Tue Aug 12 14:18:11 2014 us=404731 NOTE: unable to redirect default gateway -- VPN gateway parameter (--route-gateway or --ifconfig) is missing
Tue Aug 12 14:18:11 2014 us=404731 Initialization Sequence Completed
Tue Aug 12 14:18:11 2014 us=404731 MANAGEMENT: >STATE:1407845891,CONNECTED,SUCCESS,,149.154.154.1
Tue Aug 12 14:18:47 2014 us=648942 Extracted DHCP router address: 172.16.18.10
Tue Aug 12 14:19:03 2014 us=743560 TCP/UDP: Closing socket
Tue Aug 12 14:19:03 2014 us=743560 Closing TUN/TAP interface
Tue Aug 12 14:19:03 2014 us=743560 SIGTERM[hard,] received, process exiting
Tue Aug 12 14:19:03 2014 us=743560 MANAGEMENT: >STATE:1407845943,EXITING,SIGTERM,,

Client from another ISP

Tue Aug 12 14:28:41 2014 us=275309 Current Parameter Settings:
Tue Aug 12 14:28:41 2014 us=275309   config = 'client.ovpn'
Tue Aug 12 14:28:41 2014 us=275309   mode = 0
Tue Aug 12 14:28:41 2014 us=275309   show_ciphers = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   show_digests = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   show_engines = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   genkey = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   key_pass_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   show_tls_ciphers = DISABLED
Tue Aug 12 14:28:41 2014 us=275309 Connection profiles [default]:
Tue Aug 12 14:28:41 2014 us=275309   proto = udp
Tue Aug 12 14:28:41 2014 us=275309   local = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   local_port = 0
Tue Aug 12 14:28:41 2014 us=275309   remote = '149.154.154.1'
Tue Aug 12 14:28:41 2014 us=275309   remote_port = 11094
Tue Aug 12 14:28:41 2014 us=275309   remote_float = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   bind_defined = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   bind_local = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   connect_retry_seconds = 5
Tue Aug 12 14:28:41 2014 us=275309   connect_timeout = 10
Tue Aug 12 14:28:41 2014 us=275309   connect_retry_max = 0
Tue Aug 12 14:28:41 2014 us=275309   socks_proxy_server = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   socks_proxy_port = 0
Tue Aug 12 14:28:41 2014 us=275309   socks_proxy_retry = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   tun_mtu = 1500
Tue Aug 12 14:28:41 2014 us=275309   tun_mtu_defined = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   link_mtu = 1500
Tue Aug 12 14:28:41 2014 us=275309   link_mtu_defined = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   tun_mtu_extra = 32
Tue Aug 12 14:28:41 2014 us=275309   tun_mtu_extra_defined = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   mtu_discover_type = -1
Tue Aug 12 14:28:41 2014 us=275309   fragment = 0
Tue Aug 12 14:28:41 2014 us=275309   mssfix = 1450
Tue Aug 12 14:28:41 2014 us=275309   explicit_exit_notification = 0
Tue Aug 12 14:28:41 2014 us=275309 Connection profiles END
Tue Aug 12 14:28:41 2014 us=275309   remote_random = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   ipchange = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   dev = 'tap'
Tue Aug 12 14:28:41 2014 us=275309   dev_type = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   dev_node = 'VPN-ABA'
Tue Aug 12 14:28:41 2014 us=275309   lladdr = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   topology = 1
Tue Aug 12 14:28:41 2014 us=275309   tun_ipv6 = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   ifconfig_local = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   ifconfig_remote_netmask = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   ifconfig_noexec = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   ifconfig_nowarn = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   ifconfig_ipv6_local = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   ifconfig_ipv6_netbits = 0
Tue Aug 12 14:28:41 2014 us=275309   ifconfig_ipv6_remote = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   shaper = 0
Tue Aug 12 14:28:41 2014 us=275309   mtu_test = 0
Tue Aug 12 14:28:41 2014 us=275309   mlock = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   keepalive_ping = 0
Tue Aug 12 14:28:41 2014 us=275309   keepalive_timeout = 0
Tue Aug 12 14:28:41 2014 us=275309   inactivity_timeout = 0
Tue Aug 12 14:28:41 2014 us=275309   ping_send_timeout = 0
Tue Aug 12 14:28:41 2014 us=275309   ping_rec_timeout = 0
Tue Aug 12 14:28:41 2014 us=275309   ping_rec_timeout_action = 0
Tue Aug 12 14:28:41 2014 us=275309   ping_timer_remote = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   remap_sigusr1 = 0
Tue Aug 12 14:28:41 2014 us=275309   persist_tun = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   persist_local_ip = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   persist_remote_ip = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   persist_key = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   passtos = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   resolve_retry_seconds = 1000000000
Tue Aug 12 14:28:41 2014 us=275309   username = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   groupname = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   chroot_dir = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   cd_dir = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   writepid = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   up_script = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   down_script = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   down_pre = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   up_restart = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   up_delay = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   daemon = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   inetd = 0
Tue Aug 12 14:28:41 2014 us=275309   log = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   suppress_timestamps = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   nice = 0
Tue Aug 12 14:28:41 2014 us=275309   verbosity = 4
Tue Aug 12 14:28:41 2014 us=275309   mute = 0
Tue Aug 12 14:28:41 2014 us=275309   status_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   status_file_version = 1
Tue Aug 12 14:28:41 2014 us=275309   status_file_update_freq = 60
Tue Aug 12 14:28:41 2014 us=275309   occ = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   rcvbuf = 0
Tue Aug 12 14:28:41 2014 us=275309   sndbuf = 0
Tue Aug 12 14:28:41 2014 us=275309   sockflags = 0
Tue Aug 12 14:28:41 2014 us=275309   fast_io = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   lzo = 7
Tue Aug 12 14:28:41 2014 us=275309   route_script = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   route_default_gateway = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   route_default_metric = 0
Tue Aug 12 14:28:41 2014 us=275309   route_noexec = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   route_delay = 5
Tue Aug 12 14:28:41 2014 us=275309   route_delay_window = 30
Tue Aug 12 14:28:41 2014 us=275309   route_delay_defined = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   route_nopull = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   route_gateway_via_dhcp = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   max_routes = 100
Tue Aug 12 14:28:41 2014 us=275309   allow_pull_fqdn = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   [redirect_default_gateway local=0]
Tue Aug 12 14:28:41 2014 us=275309   management_addr = '127.0.0.1'
Tue Aug 12 14:28:41 2014 us=275309   management_port = 25340
Tue Aug 12 14:28:41 2014 us=275309   management_user_pass = 'stdin'
Tue Aug 12 14:28:41 2014 us=275309   management_log_history_cache = 250
Tue Aug 12 14:28:41 2014 us=275309   management_echo_buffer_size = 100
Tue Aug 12 14:28:41 2014 us=275309   management_write_peer_info_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   management_client_user = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   management_client_group = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   management_flags = 6
Tue Aug 12 14:28:41 2014 us=275309   shared_secret_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   key_direction = 0
Tue Aug 12 14:28:41 2014 us=275309   ciphername_defined = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   ciphername = 'AES-256-CBC'
Tue Aug 12 14:28:41 2014 us=275309   authname_defined = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   authname = 'SHA1'
Tue Aug 12 14:28:41 2014 us=275309   prng_hash = 'SHA1'
Tue Aug 12 14:28:41 2014 us=275309   prng_nonce_secret_len = 16
Tue Aug 12 14:28:41 2014 us=275309   keysize = 0
Tue Aug 12 14:28:41 2014 us=275309   engine = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   replay = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   mute_replay_warnings = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   replay_window = 64
Tue Aug 12 14:28:41 2014 us=275309   replay_time = 15
Tue Aug 12 14:28:41 2014 us=275309   packet_id_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   use_iv = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   test_crypto = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   tls_server = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   tls_client = ENABLED
Tue Aug 12 14:28:41 2014 us=275309   key_method = 2
Tue Aug 12 14:28:41 2014 us=275309   ca_file = 'ca.crt'
Tue Aug 12 14:28:41 2014 us=275309   ca_path = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   dh_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   cert_file = 'client.crt'
Tue Aug 12 14:28:41 2014 us=275309   priv_key_file = 'client.key'
Tue Aug 12 14:28:41 2014 us=275309   pkcs12_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   cryptoapi_cert = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   cipher_list = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   tls_verify = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   tls_export_cert = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   verify_x509_type = 0
Tue Aug 12 14:28:41 2014 us=275309   verify_x509_name = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   crl_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   ns_cert_type = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_ku[i] = 0
Tue Aug 12 14:28:41 2014 us=275309   remote_cert_eku = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   ssl_flags = 0
Tue Aug 12 14:28:41 2014 us=275309   tls_timeout = 2
Tue Aug 12 14:28:41 2014 us=275309   renegotiate_bytes = 0
Tue Aug 12 14:28:41 2014 us=275309   renegotiate_packets = 0
Tue Aug 12 14:28:41 2014 us=275309   renegotiate_seconds = 3600
Tue Aug 12 14:28:41 2014 us=275309   handshake_window = 60
Tue Aug 12 14:28:41 2014 us=275309   transition_window = 3600
Tue Aug 12 14:28:41 2014 us=275309   single_session = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   push_peer_info = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   tls_exit = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   tls_auth_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_protected_authentication = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_private_mode = 00000000
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_cert_private = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_pin_cache_period = -1
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_id = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=275309   pkcs11_id_management = DISABLED
Tue Aug 12 14:28:41 2014 us=275309   server_network = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=275309   server_netmask = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   server_network_ipv6 = ::
Tue Aug 12 14:28:41 2014 us=290935   server_netbits_ipv6 = 0
Tue Aug 12 14:28:41 2014 us=290935   server_bridge_ip = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   server_bridge_netmask = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   server_bridge_pool_start = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   server_bridge_pool_end = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_pool_defined = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_pool_start = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_pool_end = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_pool_netmask = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_pool_persist_refresh_freq = 600
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_ipv6_pool_defined = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_ipv6_pool_base = ::
Tue Aug 12 14:28:41 2014 us=290935   ifconfig_ipv6_pool_netbits = 0
Tue Aug 12 14:28:41 2014 us=290935   n_bcast_buf = 256
Tue Aug 12 14:28:41 2014 us=290935   tcp_queue_limit = 64
Tue Aug 12 14:28:41 2014 us=290935   real_hash_size = 256
Tue Aug 12 14:28:41 2014 us=290935   virtual_hash_size = 256
Tue Aug 12 14:28:41 2014 us=290935   client_connect_script = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   learn_address_script = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   client_disconnect_script = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   client_config_dir = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   ccd_exclusive = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   tmp_dir = 'C:\Users\GREGOR~1\AppData\Local\Temp\'
Tue Aug 12 14:28:41 2014 us=290935   push_ifconfig_defined = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   push_ifconfig_local = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   push_ifconfig_remote_netmask = 0.0.0.0
Tue Aug 12 14:28:41 2014 us=290935   push_ifconfig_ipv6_defined = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   push_ifconfig_ipv6_local = ::/0
Tue Aug 12 14:28:41 2014 us=290935   push_ifconfig_ipv6_remote = ::
Tue Aug 12 14:28:41 2014 us=290935   enable_c2c = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   duplicate_cn = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   cf_max = 0
Tue Aug 12 14:28:41 2014 us=290935   cf_per = 0
Tue Aug 12 14:28:41 2014 us=290935   max_clients = 1024
Tue Aug 12 14:28:41 2014 us=290935   max_routes_per_client = 256
Tue Aug 12 14:28:41 2014 us=290935   auth_user_pass_verify_script = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   auth_user_pass_verify_script_via_file = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   client = ENABLED
Tue Aug 12 14:28:41 2014 us=290935   pull = ENABLED
Tue Aug 12 14:28:41 2014 us=290935   auth_user_pass_file = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   show_net_up = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   route_method = 0
Tue Aug 12 14:28:41 2014 us=290935   ip_win32_defined = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   ip_win32_type = 3
Tue Aug 12 14:28:41 2014 us=290935   dhcp_masq_offset = 0
Tue Aug 12 14:28:41 2014 us=290935   dhcp_lease_time = 31536000
Tue Aug 12 14:28:41 2014 us=290935   tap_sleep = 0
Tue Aug 12 14:28:41 2014 us=290935   dhcp_options = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   dhcp_renew = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   dhcp_pre_release = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   dhcp_release = DISABLED
Tue Aug 12 14:28:41 2014 us=290935   domain = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   netbios_scope = '[UNDEF]'
Tue Aug 12 14:28:41 2014 us=290935   netbios_node_type = 0
Tue Aug 12 14:28:41 2014 us=290935   disable_nbt = DISABLED
Tue Aug 12 14:28:41 2014 us=290935 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Tue Aug 12 14:28:41 2014 us=290935 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Tue Aug 12 14:28:41 2014 us=290935 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Aug 12 14:28:41 2014 us=290935 Need hold release from management interface, waiting...
Tue Aug 12 14:28:41 2014 us=791231 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Aug 12 14:28:41 2014 us=900615 MANAGEMENT: CMD 'state on'
Tue Aug 12 14:28:41 2014 us=900615 MANAGEMENT: CMD 'log all on'
Tue Aug 12 14:28:41 2014 us=994373 MANAGEMENT: CMD 'hold off'
Tue Aug 12 14:28:41 2014 us=994373 MANAGEMENT: CMD 'hold release'
Tue Aug 12 14:28:41 2014 us=994373 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 12 14:28:46 2014 us=541491 MANAGEMENT: CMD 'password [...]'
Tue Aug 12 14:28:46 2014 us=541491 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Aug 12 14:28:46 2014 us=541491 LZO compression initialized
Tue Aug 12 14:28:46 2014 us=541491 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 12 14:28:46 2014 us=541491 Socket Buffers: R=[128000->128000] S=[49152->49152]
Tue Aug 12 14:28:46 2014 us=541491 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Aug 12 14:28:46 2014 us=541491 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Aug 12 14:28:46 2014 us=541491 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Aug 12 14:28:46 2014 us=541491 Local Options hash (VER=V4): 'c6c7c21a'
Tue Aug 12 14:28:46 2014 us=541491 Expected Remote Options hash (VER=V4): '1a6d5c5d'
Tue Aug 12 14:28:46 2014 us=541491 UDPv4 link local: [undef]
Tue Aug 12 14:28:46 2014 us=541491 UDPv4 link remote: [AF_INET]149.154.154.1:11094
Tue Aug 12 14:28:46 2014 us=541491 MANAGEMENT: >STATE:1407846526,WAIT,,,
Tue Aug 12 14:29:46 2014 us=968851 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 12 14:29:46 2014 us=968851 TLS Error: TLS handshake failed
Tue Aug 12 14:29:46 2014 us=968851 TCP/UDP: Closing socket
Tue Aug 12 14:29:46 2014 us=968851 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 12 14:29:46 2014 us=968851 MANAGEMENT: >STATE:1407846586,RECONNECTING,tls-error,,
Tue Aug 12 14:29:46 2014 us=968851 Restart pause, 2 second(s)
Tue Aug 12 14:29:48 2014 us=968951 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 12 14:29:48 2014 us=968951 Re-using SSL/TLS context
Tue Aug 12 14:29:48 2014 us=968951 LZO compression initialized
Tue Aug 12 14:29:48 2014 us=968951 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 12 14:29:48 2014 us=968951 Socket Buffers: R=[128000->128000] S=[49152->49152]
Tue Aug 12 14:29:48 2014 us=968951 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Aug 12 14:29:48 2014 us=968951 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Aug 12 14:29:48 2014 us=968951 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Aug 12 14:29:48 2014 us=968951 Local Options hash (VER=V4): 'c6c7c21a'
Tue Aug 12 14:29:48 2014 us=968951 Expected Remote Options hash (VER=V4): '1a6d5c5d'
Tue Aug 12 14:29:48 2014 us=968951 UDPv4 link local: [undef]
Tue Aug 12 14:29:48 2014 us=968951 UDPv4 link remote: [AF_INET]149.154.154.1:11094
Tue Aug 12 14:29:48 2014 us=968951 MANAGEMENT: >STATE:1407846588,WAIT,,,
Tue Aug 12 14:30:20 2014 us=117579 TCP/UDP: Closing socket
Tue Aug 12 14:30:20 2014 us=117579 SIGTERM[hard,] received, process exiting
Tue Aug 12 14:30:20 2014 us=117579 MANAGEMENT: >STATE:1407846620,EXITING,SIGTERM,,

openvpn-status.log

OpenVPN CLIENT LIST
Updated,Tue Aug 12 14:50:15 2014
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
GLOBAL STATS
Max bcast/mcast queue length,2
END

OVPN from syslog

Aug 12 13:54:06 aba-18-29 ovpn-server[2274]: OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Aug 12 13:54:06 aba-18-29 ovpn-server[2274]: NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Aug 12 13:54:06 aba-18-29 ovpn-server[2274]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Aug 12 13:54:07 aba-18-29 ovpn-server[2274]: Diffie-Hellman initialized with 2048 bit key
Aug 12 13:54:07 aba-18-29 ovpn-server[2274]: TLS-Auth MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Aug 12 13:54:07 aba-18-29 ovpn-server[2274]: Socket Buffers: R=[229376->131072] S=[229376->131072]
Aug 12 13:54:07 aba-18-29 ovpn-server[2274]: TUN/TAP device tap0 opened
Aug 12 13:54:07 aba-18-29 ovpn-server[2274]: TUN/TAP TX queue length set to 100
Aug 12 13:54:07 aba-18-29 ovpn-server[2274]: Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Aug 12 13:54:07 aba-18-29 ovpn-server[2282]: GID set to nogroup
Aug 12 13:54:07 aba-18-29 ovpn-server[2282]: UID set to nobody
Aug 12 13:54:07 aba-18-29 ovpn-server[2282]: UDPv4 link local (bound): [undef]
Aug 12 13:54:07 aba-18-29 ovpn-server[2282]: UDPv4 link remote: [undef]
Aug 12 13:54:07 aba-18-29 ovpn-server[2282]: MULTI: multi_init called, r=256 v=256
Aug 12 13:54:07 aba-18-29 ovpn-server[2282]: Initialization Sequence Completed

gregorx

The OpenVPN server is directly connected to the internet
The Gateway should have an active Firewall

gregorx

br0       Link encap:Ethernet  Hardware Adresse 00:16:35:ab:d8:47  
          inet Adresse:172.16.18.28  Bcast:172.16.20.255  Maske:255.255.255.224
          inet6-Adresse: fe80::216:35ff:feab:d847/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metrik:1
          RX packets:5117 errors:0 dropped:0 overruns:0 frame:0
          TX packets:223 errors:0 dropped:0 overruns:0 carrier:0
          Kollisionen:0 Sendewarteschlangenlänge:0 
          RX bytes:392746 (383.5 KiB)  TX bytes:21318 (20.8 KiB)

eth0      Link encap:Ethernet  Hardware Adresse 00:16:35:ab:d8:47  
          inet6-Adresse: fe80::216:35ff:feab:d847/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metrik:1
          RX packets:8327 errors:0 dropped:0 overruns:0 frame:0
          TX packets:442 errors:0 dropped:0 overruns:0 carrier:0
          Kollisionen:0 Sendewarteschlangenlänge:1000 
          RX bytes:1560657 (1.4 MiB)  TX bytes:75010 (73.2 KiB)
          Interrupt:17 

eth1      Link encap:Ethernet  Hardware Adresse 00:50:fc:57:d1:3f  
          inet Adresse:149.154.154.1(changed to example)  Bcast:149.154.154.7(changed to example)  Maske:255.255.255.248
          inet6-Adresse: fe80::250:fcff:fe57:d13f/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metrik:1
          RX packets:609 errors:23 dropped:0 overruns:0 frame:0
          TX packets:901 errors:0 dropped:0 overruns:0 carrier:0
          Kollisionen:0 Sendewarteschlangenlänge:1000 
          RX bytes:124008 (121.1 KiB)  TX bytes:146227 (142.7 KiB)
          Interrupt:18 Basisadresse:0xe000 

lo        Link encap:Lokale Schleife  
          inet Adresse:127.0.0.1  Maske:255.0.0.0
          inet6-Adresse: ::1/128 Gültigkeitsbereich:Maschine
          UP LOOPBACK RUNNING  MTU:16436  Metrik:1
          RX packets:108 errors:0 dropped:0 overruns:0 frame:0
          TX packets:108 errors:0 dropped:0 overruns:0 carrier:0
          Kollisionen:0 Sendewarteschlangenlänge:0 
          RX bytes:6732 (6.5 KiB)  TX bytes:6732 (6.5 KiB)

tap0      Link encap:Ethernet  Hardware Adresse 0a:c6:34:9e:4e:be  
          inet6-Adresse: fe80::8c6:34ff:fe9e:4ebe/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metrik:1
          RX packets:216 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5219 errors:0 dropped:0 overruns:0 carrier:0
          Kollisionen:0 Sendewarteschlangenlänge:100 
          RX bytes:47230 (46.1 KiB)  TX bytes:470871 (459.8 KiB)

gregorx

The DHCP runs on a other machine then the vpn, the dhcp gives the ip addresses to the connected clients.
on the vpn server i created a init.d script which starts the bridge before ovpn

gregorx

I found the problem.... it was that I used 2 Gateways.
I comment the internal Gateway out and now it work 🙂