config.ovpn
client
dev tun
proto udp
remote 174.60.71.232 44120
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 4
mute 20
route-method exe
route-delay 2
server.conf
local 192.168.1.128
dev tun
proto udp #Some people prefer to use tcp. Don't change it if you don't know.
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/pi.crt # SWAP WITH YOUR CRT NAME
key /etc/openvpn/easy-rsa/keys/pi.key # SWAP WITH YOUR KEY NAME
dh /etc/openvpn/easy-rsa/keys/dh1024.pem #
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 192.168.1.128 255.255.255.0" # PI IP
push "dhcp-option DNS 192.168.1.1" # This should already match your router
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 4
log from client
[/b]
Thu Aug 14 13:49:41 2014 us=862561 Current Parameter Settings:
Thu Aug 14 13:49:41 2014 us=862561 config = 'config.ovpn'
Thu Aug 14 13:49:41 2014 us=862561 mode = 0
Thu Aug 14 13:49:41 2014 us=862561 show_ciphers = DISABLED
Thu Aug 14 13:49:41 2014 us=862561 show_digests = DISABLED
Thu Aug 14 13:49:41 2014 us=862561 show_engines = DISABLED
Thu Aug 14 13:49:41 2014 us=862561 genkey = DISABLED
Thu Aug 14 13:49:41 2014 us=862561 key_pass_file = '[UNDEF]'
Thu Aug 14 13:49:41 2014 us=862561 show_tls_ciphers = DISABLED
Thu Aug 14 13:49:41 2014 us=862561 Connection profiles [default]:
Thu Aug 14 13:49:41 2014 us=862561 proto = udp
Thu Aug 14 13:49:41 2014 us=862561 local = '[UNDEF]'
Thu Aug 14 13:49:41 2014 us=862561 local_port = 0
Thu Aug 14 13:49:41 2014 us=862561 remote = '174.60.71.232'
Thu Aug 14 13:49:41 2014 us=862561 remote_port = 44120
Thu Aug 14 13:49:41 2014 us=862561 remote_float = DISABLED
Thu Aug 14 13:49:41 2014 us=862561 bind_defined = DISABLED
Thu Aug 14 13:49:41 2014 us=862561 bind_local = DISABLED
Thu Aug 14 13:49:41 2014 us=863561 connect_retry_seconds = 5
Thu Aug 14 13:49:41 2014 us=863561 connect_timeout = 10
Thu Aug 14 13:49:41 2014 us=863561 NOTE: --mute triggered...
Thu Aug 14 13:49:41 2014 us=863561 265 variation(s) on previous 20 message(s) suppressed by --mute
Thu Aug 14 13:49:41 2014 us=863561 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Thu Aug 14 13:49:41 2014 us=863561 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Thu Aug 14 13:49:41 2014 us=864561 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Aug 14 13:49:41 2014 us=864561 Need hold release from management interface, waiting...
Thu Aug 14 13:49:42 2014 us=341561 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Aug 14 13:49:42 2014 us=442561 MANAGEMENT: CMD 'state on'
Thu Aug 14 13:49:42 2014 us=442561 MANAGEMENT: CMD 'log all on'
Thu Aug 14 13:49:42 2014 us=463561 MANAGEMENT: CMD 'hold off'
Thu Aug 14 13:49:42 2014 us=465561 MANAGEMENT: CMD 'hold release'
Thu Aug 14 13:49:42 2014 us=598561 Control Channel Authentication: tls-auth using INLINE static key file
Thu Aug 14 13:49:42 2014 us=598561 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:49:42 2014 us=598561 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:49:42 2014 us=598561 LZO compression initialized
Thu Aug 14 13:49:42 2014 us=598561 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 14 13:49:42 2014 us=598561 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Aug 14 13:49:42 2014 us=598561 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Aug 14 13:49:42 2014 us=598561 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Aug 14 13:49:42 2014 us=598561 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Aug 14 13:49:42 2014 us=598561 Local Options hash (VER=V4): '272f1b58'
Thu Aug 14 13:49:42 2014 us=598561 Expected Remote Options hash (VER=V4): 'a2e63101'
Thu Aug 14 13:49:42 2014 us=599561 UDPv4 link local: [undef]
Thu Aug 14 13:49:42 2014 us=599561 UDPv4 link remote: [AF_INET]174.60.71.232:44120
Thu Aug 14 13:49:42 2014 us=599561 MANAGEMENT: >STATE:1408038582,WAIT,,,
Thu Aug 14 13:49:42 2014 us=633561 MANAGEMENT: >STATE:1408038582,AUTH,,,
Thu Aug 14 13:49:42 2014 us=633561 TLS: Initial packet from [AF_INET]174.60.71.232:44120, sid=b3f0eb8f 6499c807
Thu Aug 14 13:49:42 2014 us=874561 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=pi, CN=pi, name=pi, emailAddress=mail@host.domain
Thu Aug 14 13:49:42 2014 us=874561 VERIFY OK: nsCertType=SERVER
Thu Aug 14 13:49:42 2014 us=874561 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=pi, CN=pi, name=pi, emailAddress=mail@host.domain
Thu Aug 14 13:49:43 2014 us=193561 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 14 13:49:43 2014 us=193561 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:49:43 2014 us=193561 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 14 13:49:43 2014 us=193561 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:49:43 2014 us=193561 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Aug 14 13:49:43 2014 us=193561 [pi] Peer Connection Initiated with [AF_INET]174.60.71.232:44120
Thu Aug 14 13:49:44 2014 us=242561 MANAGEMENT: >STATE:1408038584,GET_CONFIG,,,
Thu Aug 14 13:49:45 2014 us=291561 SENT CONTROL [pi]: 'PUSH_REQUEST' (status=1)
Thu Aug 14 13:49:45 2014 us=328561 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1 255.255.255.255,route 10.8.0.0 255.255.255.0,route 192.168.1.128 255.255.255.0,dhcp-option DNS 192.168.1.1,redirect-gateway def1,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Aug 14 13:49:45 2014 us=328561 OPTIONS IMPORT: timers and/or timeouts modified
Thu Aug 14 13:49:45 2014 us=328561 OPTIONS IMPORT: --ifconfig/up options modified
Thu Aug 14 13:49:45 2014 us=328561 OPTIONS IMPORT: route options modified
Thu Aug 14 13:49:45 2014 us=329561 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Aug 14 13:49:45 2014 us=369561 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 14 13:49:45 2014 us=370561 MANAGEMENT: >STATE:1408038585,ASSIGN_IP,,10.8.0.6,
Thu Aug 14 13:49:45 2014 us=370561 open_tun, tt->ipv6=0
Thu Aug 14 13:49:45 2014 us=371561 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{E893BD13-E4DC-4AF4-A457-7FBA61A3E4FA}.tap
Thu Aug 14 13:49:45 2014 us=372561 TAP-Windows Driver Version 9.21
Thu Aug 14 13:49:45 2014 us=372561 TAP-Windows MTU=1500
Thu Aug 14 13:49:45 2014 us=375561 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {E893BD13-E4DC-4AF4-A457-7FBA61A3E4FA} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Aug 14 13:49:45 2014 us=375561 DHCP option string: 0604c0a8 0101
Thu Aug 14 13:49:45 2014 us=375561 Successful ARP Flush on interface [41] {E893BD13-E4DC-4AF4-A457-7FBA61A3E4FA}
Thu Aug 14 13:49:47 2014 us=39566 TEST ROUTES: 5/5 succeeded len=4 ret=1 a=0 u/d=up
Thu Aug 14 13:49:47 2014 us=39566 C:\windows\system32\route.exe ADD 174.60.71.232 MASK 255.255.255.255 153.42.49.1
Thu Aug 14 13:49:47 2014 us=40566 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 14 13:49:47 2014 us=83571 C:\windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Aug 14 13:49:47 2014 us=83571 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 14 13:49:47 2014 us=101572 C:\windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Aug 14 13:49:47 2014 us=101572 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 14 13:49:47 2014 us=119574 MANAGEMENT: >STATE:1408038587,ADD_ROUTES,,,
Thu Aug 14 13:49:47 2014 us=119574 C:\windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Thu Aug 14 13:49:47 2014 us=119574 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 14 13:49:47 2014 us=136576 C:\windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Aug 14 13:49:47 2014 us=136576 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 14 13:49:47 2014 us=153578 C:\windows\system32\route.exe ADD 192.168.1.128 MASK 255.255.255.0 10.8.0.5
Thu Aug 14 13:49:47 2014 us=153578 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 14 13:49:47 2014 us=168579 C:\windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Aug 14 13:49:47 2014 us=168579 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Thu Aug 14 13:49:47 2014 us=184581 Initialization Sequence Completed
Thu Aug 14 13:49:47 2014 us=184581 MANAGEMENT: >STATE:1408038587,CONNECTED,SUCCESS,10.8.0.6,174.60.71.232
log from server
Thu Aug 14 13:55:28 2014 us=977790 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Thu Aug 14 13:55:28 2014 us=979980 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Aug 14 13:55:28 2014 us=980343 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Aug 14 13:55:29 2014 us=21821 Diffie-Hellman initialized with 1024 bit key
Thu Aug 14 13:55:29 2014 us=36670 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Thu Aug 14 13:55:29 2014 us=37623 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:55:29 2014 us=37973 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:55:29 2014 us=38331 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 14 13:55:29 2014 us=38767 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Aug 14 13:55:29 2014 us=41018 ROUTE default_gateway=192.168.1.1
Thu Aug 14 13:55:29 2014 us=48568 TUN/TAP device tun0 opened
Thu Aug 14 13:55:29 2014 us=49497 TUN/TAP TX queue length set to 100
Thu Aug 14 13:55:29 2014 us=49884 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 14 13:55:29 2014 us=50350 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Thu Aug 14 13:55:29 2014 us=76914 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Thu Aug 14 13:55:29 2014 us=100234 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Aug 14 13:55:29 2014 us=123007 GID set to nogroup
Thu Aug 14 13:55:29 2014 us=124077 UID set to nobody
Thu Aug 14 13:55:29 2014 us=124611 UDPv4 link local (bound): [AF_INET]192.168.1.128:1194
Thu Aug 14 13:55:29 2014 us=124853 UDPv4 link remote: [undef]
Thu Aug 14 13:55:29 2014 us=125131 MULTI: multi_init called, r=256 v=256
Thu Aug 14 13:55:29 2014 us=126181 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Thu Aug 14 13:55:29 2014 us=126833 Initialization Sequence Completed
Thu Aug 14 13:55:36 2014 us=486481 MULTI: multi_create_instance called
Thu Aug 14 13:55:36 2014 us=487614 192.168.1.1:49437 Re-using SSL/TLS context
Thu Aug 14 13:55:36 2014 us=488187 192.168.1.1:49437 LZO compression initialized
Thu Aug 14 13:55:36 2014 us=490394 192.168.1.1:49437 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 14 13:55:36 2014 us=490755 192.168.1.1:49437 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Aug 14 13:55:36 2014 us=491553 192.168.1.1:49437 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Aug 14 13:55:36 2014 us=491798 192.168.1.1:49437 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Aug 14 13:55:36 2014 us=492259 192.168.1.1:49437 Local Options hash (VER=V4): 'a2e63101'
Thu Aug 14 13:55:36 2014 us=492582 192.168.1.1:49437 Expected Remote Options hash (VER=V4): '272f1b58'
Thu Aug 14 13:55:36 2014 us=493163 192.168.1.1:49437 TLS: Initial packet from [AF_INET]192.168.1.1:49437, sid=f2f96d19 cb51ca29
Thu Aug 14 13:55:36 2014 us=957383 192.168.1.1:49437 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=pi/CN=pi/name=pi/emailAddress=mail@host.domain
Thu Aug 14 13:55:36 2014 us=960341 192.168.1.1:49437 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=pi/CN=client4/name=pi/emailAddress=mail@host.domain
Thu Aug 14 13:55:37 2014 us=57454 192.168.1.1:49437 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 14 13:55:37 2014 us=58240 192.168.1.1:49437 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:55:37 2014 us=58550 192.168.1.1:49437 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 14 13:55:37 2014 us=58832 192.168.1.1:49437 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 14 13:55:37 2014 us=95045 192.168.1.1:49437 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Aug 14 13:55:37 2014 us=95901 192.168.1.1:49437 [client4] Peer Connection Initiated with [AF_INET]192.168.1.1:49437
Thu Aug 14 13:55:37 2014 us=96481 client4/192.168.1.1:49437 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=bccd:800:8ced:200:14c2:700:e44a:1401
Thu Aug 14 13:55:37 2014 us=97232 client4/192.168.1.1:49437 MULTI: Learn: 10.8.0.6 -> client4/192.168.1.1:49437
Thu Aug 14 13:55:37 2014 us=97523 client4/192.168.1.1:49437 MULTI: primary virtual IP for client4/192.168.1.1:49437: 10.8.0.6
Thu Aug 14 13:55:39 2014 us=713364 client4/192.168.1.1:49437 PUSH: Received control message: 'PUSH_REQUEST'
Thu Aug 14 13:55:39 2014 us=714070 client4/192.168.1.1:49437 send_push_reply(): safe_cap=960
Thu Aug 14 13:55:39 2014 us=714779 client4/192.168.1.1:49437 SENT CONTROL [client4]: 'PUSH_REPLY,route 10.8.0.1 255.255.255.255,route 10.8.0.0 255.255.255.0,route 192.168.1.128 255.255.255.0,dhcp-option DNS 192.168.1.1,redirect-gateway def1,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Thu Aug 14 13:55:39 2014 us=827230 client4/192.168.1.1:49437 MULTI: bad source address from client [fe80::997:cdb:c654:9b0], packet dropped
Goal: Resolve these errors (env_block) and packet dropped
