Connectivity/routing issues after establishing connection

ajs418

Hello experts,

I have two routers and am trying to set up OpenVPN on my second router (with the eventual goal to be exposing it in the DMZ so that I can have access to my internal LAN while on the road). I've been at it for a few days, have read countless posts/pages and it is just plain driving me crazy

The setup is as follows:

Client (192.168.1.x) ----> DD-WRT Router WAN (vlan2 interface: 192.168.1.2) ---> DD-WRT OpenVPN (tun0 interface: 10.8.0.1)

The internal LAN that I eventually want to connect to is on the 192.168.2.x subnet (Router internal IP is 192.168.2.1).

I was able to get everything configured and make a connection to the OpenVPN server. It assigned me an IP of 10.8.0.2, but I cannot ping the OpenVPN server (10.8.0.1) from the client and certainly not any of the machines on the internal subnet (192.168.2.x). I've finally accepted the fact that I'm temporarily stuck.

I first tried adding iptable rules, but at this point I've disabled the firewall altogether to remove it as factor. I'm sure this is a routing problem, but I'm just not skilled enough to troubleshoot it on my own (I'm learning a lot though!). I was hoping that I might get some insight here if I posted my configs:

Environment info

Netgear R700 w/ DD-WRT v24-sp2 (06/09/14) kongac - build 24200M
OpenVPN server - v2.3.2
OpenVPN client - v2.3.4
Client OS - Windows 8.1

Server config

push "route 192.168.2.0 255.255.255.0"
server 10.8.0.0 255.255.255.0

duplicate-cn
dev tun0
proto tcp
port 1194
persist-key
persist-tun
cipher AES-256-CBC
auth SHA512

Client config

dev tun
client
proto tcp
remote 192.168.1.2 1194
resolv-retry infinite
nobind
persist-key
persist-tun
float
cipher AES-256-CBC
auth SHA512

ca ca.crt
cert client01.crt
key client01.key
ns-cert-type server
verb 4

route print output

===========================================================================
Interface List
 25...00 ff 25 83 f1 63 ......TAP-Windows Adapter V9
  5...12 18 8b 82 a3 95 ......Microsoft Wi-Fi Direct Virtual Adapter #2
  4...70 18 8b 82 a3 95 ......Killer Wireless-N 1202 Network Adapter
  8...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
  9...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
  1...........................Software Loopback Interface 1
 30...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
  3...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 10...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
  7...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
 13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #6
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1     192.168.1.29     25
         10.8.0.0    255.255.255.0         On-link          10.8.0.2    276
         10.8.0.2  255.255.255.255         On-link          10.8.0.2    276
       10.8.0.255  255.255.255.255         On-link          10.8.0.2    276
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      169.254.0.0      255.255.0.0         On-link      192.168.1.29    311
      169.254.0.0      255.255.0.0      192.168.1.4     192.168.1.29     26
  169.254.255.255  255.255.255.255         On-link      192.168.1.29    281
      192.168.1.0    255.255.255.0         On-link      192.168.1.29    281
     192.168.1.29  255.255.255.255         On-link      192.168.1.29    281
    192.168.1.255  255.255.255.255         On-link      192.168.1.29    281
      192.168.2.0    255.255.255.0         10.8.0.1         10.8.0.2     20
     192.168.38.0    255.255.255.0         On-link      192.168.38.1    276
     192.168.38.1  255.255.255.255         On-link      192.168.38.1    276
   192.168.38.255  255.255.255.255         On-link      192.168.38.1    276
    192.168.117.0    255.255.255.0         On-link     192.168.117.1    276
    192.168.117.1  255.255.255.255         On-link     192.168.117.1    276
  192.168.117.255  255.255.255.255         On-link     192.168.117.1    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.1.29    281
        224.0.0.0        240.0.0.0         On-link     192.168.117.1    276
        224.0.0.0        240.0.0.0         On-link      192.168.38.1    276
        224.0.0.0        240.0.0.0         On-link          10.8.0.2    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.1.29    281
  255.255.255.255  255.255.255.255         On-link     192.168.117.1    276
  255.255.255.255  255.255.255.255         On-link      192.168.38.1    276
  255.255.255.255  255.255.255.255         On-link          10.8.0.2    276
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
      169.254.0.0      255.255.0.0      192.168.1.4       1
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
  4    281 fe80::/64                On-link
  8    276 fe80::/64                On-link
  9    276 fe80::/64                On-link
 25    276 fe80::/64                On-link
  8    276 fe80::1c13:6a81:39c7:cdbb/128
                                    On-link
 25    276 fe80::85e5:4866:f85e:b579/128
                                    On-link
  4    281 fe80::c041:1b:4046:e93e/128
                                    On-link
  9    276 fe80::f800:a174:cbbd:e8ea/128
                                    On-link
  1    306 ff00::/8                 On-link
  4    281 ff00::/8                 On-link
  8    276 ff00::/8                 On-link
  9    276 ff00::/8                 On-link
 25    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

Iptable rules that I tried (firewall currently disabled)

iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.2.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT

Any help would be greatly appreciated!

ajs418

Sure thing, see below. I nulled the logs, connected, tried to ping the OpenVPN server, then disconnected.

Client Log:

Sun Aug 24 22:12:24 2014 us=728732 Current Parameter Settings:
Sun Aug 24 22:12:24 2014 us=729753   config = 'client.ovpn'
Sun Aug 24 22:12:24 2014 us=729753   mode = 0
Sun Aug 24 22:12:24 2014 us=729753   show_ciphers = DISABLED
Sun Aug 24 22:12:24 2014 us=729753   show_digests = DISABLED
Sun Aug 24 22:12:24 2014 us=729753   show_engines = DISABLED
Sun Aug 24 22:12:24 2014 us=729753   genkey = DISABLED
Sun Aug 24 22:12:24 2014 us=729753   key_pass_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   show_tls_ciphers = DISABLED
Sun Aug 24 22:12:24 2014 us=730753 Connection profiles [default]:
Sun Aug 24 22:12:24 2014 us=730753   proto = tcp-client
Sun Aug 24 22:12:24 2014 us=730753   local = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   local_port = 0
Sun Aug 24 22:12:24 2014 us=730753   remote = '192.168.1.2'
Sun Aug 24 22:12:24 2014 us=730753   remote_port = 1194
Sun Aug 24 22:12:24 2014 us=730753   remote_float = ENABLED
Sun Aug 24 22:12:24 2014 us=730753   bind_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   bind_local = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   connect_retry_seconds = 5
Sun Aug 24 22:12:24 2014 us=730753   connect_timeout = 10
Sun Aug 24 22:12:24 2014 us=730753   connect_retry_max = 0
Sun Aug 24 22:12:24 2014 us=730753   socks_proxy_server = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   socks_proxy_port = 0
Sun Aug 24 22:12:24 2014 us=730753   socks_proxy_retry = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   tun_mtu = 1500
Sun Aug 24 22:12:24 2014 us=730753   tun_mtu_defined = ENABLED
Sun Aug 24 22:12:24 2014 us=730753   link_mtu = 1500
Sun Aug 24 22:12:24 2014 us=730753   link_mtu_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   tun_mtu_extra = 0
Sun Aug 24 22:12:24 2014 us=730753   tun_mtu_extra_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   mtu_discover_type = -1
Sun Aug 24 22:12:24 2014 us=730753   fragment = 0
Sun Aug 24 22:12:24 2014 us=730753   mssfix = 1450
Sun Aug 24 22:12:24 2014 us=730753   explicit_exit_notification = 0
Sun Aug 24 22:12:24 2014 us=730753 Connection profiles END
Sun Aug 24 22:12:24 2014 us=730753   remote_random = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   ipchange = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   dev = 'tun'
Sun Aug 24 22:12:24 2014 us=730753   dev_type = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   dev_node = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   lladdr = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   topology = 1
Sun Aug 24 22:12:24 2014 us=730753   tun_ipv6 = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   ifconfig_local = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   ifconfig_remote_netmask = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   ifconfig_noexec = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   ifconfig_nowarn = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   ifconfig_ipv6_local = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   ifconfig_ipv6_netbits = 0
Sun Aug 24 22:12:24 2014 us=730753   ifconfig_ipv6_remote = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=730753   shaper = 0
Sun Aug 24 22:12:24 2014 us=730753   mtu_test = 0
Sun Aug 24 22:12:24 2014 us=730753   mlock = DISABLED
Sun Aug 24 22:12:24 2014 us=730753   keepalive_ping = 0
Sun Aug 24 22:12:24 2014 us=730753   keepalive_timeout = 0
Sun Aug 24 22:12:24 2014 us=730753   inactivity_timeout = 0
Sun Aug 24 22:12:24 2014 us=730753   ping_send_timeout = 0
Sun Aug 24 22:12:24 2014 us=730753   ping_rec_timeout = 0
Sun Aug 24 22:12:24 2014 us=731755   ping_rec_timeout_action = 0
Sun Aug 24 22:12:24 2014 us=731755   ping_timer_remote = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   remap_sigusr1 = 0
Sun Aug 24 22:12:24 2014 us=731755   persist_tun = ENABLED
Sun Aug 24 22:12:24 2014 us=731755   persist_local_ip = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   persist_remote_ip = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   persist_key = ENABLED
Sun Aug 24 22:12:24 2014 us=731755   passtos = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   resolve_retry_seconds = 1000000000
Sun Aug 24 22:12:24 2014 us=731755   username = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   groupname = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   chroot_dir = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   cd_dir = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   writepid = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   up_script = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   down_script = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   down_pre = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   up_restart = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   up_delay = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   daemon = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   inetd = 0
Sun Aug 24 22:12:24 2014 us=731755   log = ENABLED
Sun Aug 24 22:12:24 2014 us=731755   suppress_timestamps = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   nice = 0
Sun Aug 24 22:12:24 2014 us=731755   verbosity = 4
Sun Aug 24 22:12:24 2014 us=731755   mute = 0
Sun Aug 24 22:12:24 2014 us=731755   status_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   status_file_version = 1
Sun Aug 24 22:12:24 2014 us=731755   status_file_update_freq = 60
Sun Aug 24 22:12:24 2014 us=731755   occ = ENABLED
Sun Aug 24 22:12:24 2014 us=731755   rcvbuf = 0
Sun Aug 24 22:12:24 2014 us=731755   sndbuf = 0
Sun Aug 24 22:12:24 2014 us=731755   sockflags = 0
Sun Aug 24 22:12:24 2014 us=731755   fast_io = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   lzo = 0
Sun Aug 24 22:12:24 2014 us=731755   route_script = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   route_default_gateway = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   route_default_metric = 0
Sun Aug 24 22:12:24 2014 us=731755   route_noexec = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   route_delay = 5
Sun Aug 24 22:12:24 2014 us=731755   route_delay_window = 30
Sun Aug 24 22:12:24 2014 us=731755   route_delay_defined = ENABLED
Sun Aug 24 22:12:24 2014 us=731755   route_nopull = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   route_gateway_via_dhcp = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   max_routes = 100
Sun Aug 24 22:12:24 2014 us=731755   allow_pull_fqdn = DISABLED
Sun Aug 24 22:12:24 2014 us=731755   management_addr = '127.0.0.1'
Sun Aug 24 22:12:24 2014 us=731755   management_port = 25340
Sun Aug 24 22:12:24 2014 us=731755   management_user_pass = 'stdin'
Sun Aug 24 22:12:24 2014 us=731755   management_log_history_cache = 250
Sun Aug 24 22:12:24 2014 us=731755   management_echo_buffer_size = 100
Sun Aug 24 22:12:24 2014 us=731755   management_write_peer_info_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   management_client_user = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   management_client_group = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   management_flags = 6
Sun Aug 24 22:12:24 2014 us=731755   shared_secret_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=731755   key_direction = 0
Sun Aug 24 22:12:24 2014 us=731755   ciphername_defined = ENABLED
Sun Aug 24 22:12:24 2014 us=731755   ciphername = 'AES-256-CBC'
Sun Aug 24 22:12:24 2014 us=731755   authname_defined = ENABLED
Sun Aug 24 22:12:24 2014 us=731755   authname = 'SHA512'
Sun Aug 24 22:12:24 2014 us=732755   prng_hash = 'SHA1'
Sun Aug 24 22:12:24 2014 us=732755   prng_nonce_secret_len = 16
Sun Aug 24 22:12:24 2014 us=732755   keysize = 0
Sun Aug 24 22:12:24 2014 us=732755   engine = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   replay = ENABLED
Sun Aug 24 22:12:24 2014 us=732755   mute_replay_warnings = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   replay_window = 64
Sun Aug 24 22:12:24 2014 us=732755   replay_time = 15
Sun Aug 24 22:12:24 2014 us=732755   packet_id_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   use_iv = ENABLED
Sun Aug 24 22:12:24 2014 us=732755   test_crypto = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   tls_server = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   tls_client = ENABLED
Sun Aug 24 22:12:24 2014 us=732755   key_method = 2
Sun Aug 24 22:12:24 2014 us=732755   ca_file = 'ca.crt'
Sun Aug 24 22:12:24 2014 us=732755   ca_path = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   dh_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   cert_file = 'client01.crt'
Sun Aug 24 22:12:24 2014 us=732755   priv_key_file = 'client01.key'
Sun Aug 24 22:12:24 2014 us=732755   pkcs12_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   cryptoapi_cert = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   cipher_list = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   tls_verify = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   tls_export_cert = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   verify_x509_type = 0
Sun Aug 24 22:12:24 2014 us=732755   verify_x509_name = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   crl_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   ns_cert_type = 1
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_ku[i] = 0
Sun Aug 24 22:12:24 2014 us=732755   remote_cert_eku = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   ssl_flags = 0
Sun Aug 24 22:12:24 2014 us=732755   tls_timeout = 2
Sun Aug 24 22:12:24 2014 us=732755   renegotiate_bytes = 0
Sun Aug 24 22:12:24 2014 us=732755   renegotiate_packets = 0
Sun Aug 24 22:12:24 2014 us=732755   renegotiate_seconds = 3600
Sun Aug 24 22:12:24 2014 us=732755   handshake_window = 60
Sun Aug 24 22:12:24 2014 us=732755   transition_window = 3600
Sun Aug 24 22:12:24 2014 us=732755   single_session = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   push_peer_info = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   tls_exit = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   tls_auth_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=732755   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_protected_authentication = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_private_mode = 00000000
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_cert_private = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_pin_cache_period = -1
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_id = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=733757   pkcs11_id_management = DISABLED
Sun Aug 24 22:12:24 2014 us=733757   server_network = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=733757   server_netmask = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   server_network_ipv6 = ::
Sun Aug 24 22:12:24 2014 us=735758   server_netbits_ipv6 = 0
Sun Aug 24 22:12:24 2014 us=735758   server_bridge_ip = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   server_bridge_netmask = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   server_bridge_pool_start = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   server_bridge_pool_end = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_pool_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_pool_start = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_pool_end = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_pool_netmask = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_pool_persist_refresh_freq = 600
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_ipv6_pool_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_ipv6_pool_base = ::
Sun Aug 24 22:12:24 2014 us=735758   ifconfig_ipv6_pool_netbits = 0
Sun Aug 24 22:12:24 2014 us=735758   n_bcast_buf = 256
Sun Aug 24 22:12:24 2014 us=735758   tcp_queue_limit = 64
Sun Aug 24 22:12:24 2014 us=735758   real_hash_size = 256
Sun Aug 24 22:12:24 2014 us=735758   virtual_hash_size = 256
Sun Aug 24 22:12:24 2014 us=735758   client_connect_script = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=735758   learn_address_script = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=735758   client_disconnect_script = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=735758   client_config_dir = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=735758   ccd_exclusive = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   tmp_dir = 'C:\Users\REDACTED\AppData\Local\Temp\'
Sun Aug 24 22:12:24 2014 us=735758   push_ifconfig_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   push_ifconfig_local = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   push_ifconfig_remote_netmask = 0.0.0.0
Sun Aug 24 22:12:24 2014 us=735758   push_ifconfig_ipv6_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   push_ifconfig_ipv6_local = ::/0
Sun Aug 24 22:12:24 2014 us=735758   push_ifconfig_ipv6_remote = ::
Sun Aug 24 22:12:24 2014 us=735758   enable_c2c = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   duplicate_cn = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   cf_max = 0
Sun Aug 24 22:12:24 2014 us=735758   cf_per = 0
Sun Aug 24 22:12:24 2014 us=735758   max_clients = 1024
Sun Aug 24 22:12:24 2014 us=735758   max_routes_per_client = 256
Sun Aug 24 22:12:24 2014 us=735758   auth_user_pass_verify_script = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=735758   auth_user_pass_verify_script_via_file = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   client = ENABLED
Sun Aug 24 22:12:24 2014 us=735758   pull = ENABLED
Sun Aug 24 22:12:24 2014 us=735758   auth_user_pass_file = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=735758   show_net_up = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   route_method = 0
Sun Aug 24 22:12:24 2014 us=735758   ip_win32_defined = DISABLED
Sun Aug 24 22:12:24 2014 us=735758   ip_win32_type = 3
Sun Aug 24 22:12:24 2014 us=736759   dhcp_masq_offset = 0
Sun Aug 24 22:12:24 2014 us=736759   dhcp_lease_time = 31536000
Sun Aug 24 22:12:24 2014 us=736759   tap_sleep = 0
Sun Aug 24 22:12:24 2014 us=736759   dhcp_options = DISABLED
Sun Aug 24 22:12:24 2014 us=736759   dhcp_renew = DISABLED
Sun Aug 24 22:12:24 2014 us=736759   dhcp_pre_release = DISABLED
Sun Aug 24 22:12:24 2014 us=736759   dhcp_release = DISABLED
Sun Aug 24 22:12:24 2014 us=736759   domain = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=736759   netbios_scope = '[UNDEF]'
Sun Aug 24 22:12:24 2014 us=736759   netbios_node_type = 0
Sun Aug 24 22:12:24 2014 us=736759   disable_nbt = DISABLED
Sun Aug 24 22:12:24 2014 us=736759 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Sun Aug 24 22:12:24 2014 us=736759 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Sun Aug 24 22:12:24 2014 us=737764 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Aug 24 22:12:24 2014 us=737764 Need hold release from management interface, waiting...
Sun Aug 24 22:12:25 2014 us=181731 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Aug 24 22:12:25 2014 us=284290 MANAGEMENT: CMD 'state on'
Sun Aug 24 22:12:25 2014 us=284290 MANAGEMENT: CMD 'log all on'
Sun Aug 24 22:12:25 2014 us=456363 MANAGEMENT: CMD 'hold off'
Sun Aug 24 22:12:25 2014 us=457361 MANAGEMENT: CMD 'hold release'
Sun Aug 24 22:12:25 2014 us=546424 Control Channel MTU parms [ L:1603 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Aug 24 22:12:25 2014 us=546424 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Aug 24 22:12:25 2014 us=546424 Data Channel MTU parms [ L:1603 D:1450 EF:103 EB:4 ET:0 EL:0 ]
Sun Aug 24 22:12:25 2014 us=546424 Local Options String: 'V4,dev-type tun,link-mtu 1603,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Sun Aug 24 22:12:25 2014 us=546424 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1603,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Sun Aug 24 22:12:25 2014 us=546424 Local Options hash (VER=V4): '17c82e93'
Sun Aug 24 22:12:25 2014 us=546424 Expected Remote Options hash (VER=V4): '757adecc'
Sun Aug 24 22:12:25 2014 us=546424 Attempting to establish TCP connection with [AF_INET]192.168.1.2:1194
Sun Aug 24 22:12:25 2014 us=546424 MANAGEMENT: >STATE:1408932745,TCP_CONNECT,,,
Sun Aug 24 22:12:25 2014 us=552522 TCP connection established with [AF_INET]192.168.1.2:1194
Sun Aug 24 22:12:25 2014 us=552522 TCPv4_CLIENT link local: [undef]
Sun Aug 24 22:12:25 2014 us=552522 TCPv4_CLIENT link remote: [AF_INET]192.168.1.2:1194
Sun Aug 24 22:12:25 2014 us=552522 MANAGEMENT: >STATE:1408932745,WAIT,,,
Sun Aug 24 22:12:25 2014 us=559526 MANAGEMENT: >STATE:1408932745,AUTH,,,
Sun Aug 24 22:12:25 2014 us=559526 TLS: Initial packet from [AF_INET]192.168.1.2:1194, sid=7dc150fa 35de4f9a
Sun Aug 24 22:12:25 2014 us=776996 VERIFY OK: depth=1, C=US, ST=XX, L=REDACTED, O=ams, OU="", CN=ams-ca, name=ams-ca, emailAddress=mail@host.domain
Sun Aug 24 22:12:25 2014 us=777997 VERIFY OK: nsCertType=SERVER
Sun Aug 24 22:12:25 2014 us=777997 VERIFY OK: depth=0, C=US, ST=XX, L=REDACTED, O=ams, OU="", CN=ams-openVPN, name=ams-openVPN, emailAddress=mail@host.domain
Sun Aug 24 22:12:25 2014 us=986681 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1603', remote='link-mtu 1503'
Sun Aug 24 22:12:25 2014 us=986681 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1400'
Sun Aug 24 22:12:25 2014 us=987659 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Aug 24 22:12:25 2014 us=987659 Data Channel Encrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Aug 24 22:12:25 2014 us=987659 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Aug 24 22:12:25 2014 us=987659 Data Channel Decrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Aug 24 22:12:25 2014 us=987659 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Aug 24 22:12:25 2014 us=987659 [ams-openVPN] Peer Connection Initiated with [AF_INET]192.168.1.2:1194
Sun Aug 24 22:12:27 2014 us=213820 MANAGEMENT: >STATE:1408932747,GET_CONFIG,,,
Sun Aug 24 22:12:28 2014 us=440132 SENT CONTROL [ams-openVPN]: 'PUSH_REQUEST' (status=1)
Sun Aug 24 22:12:28 2014 us=443170 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.8.0.2 255.255.255.0'
Sun Aug 24 22:12:28 2014 us=444140 OPTIONS IMPORT: timers and/or timeouts modified
Sun Aug 24 22:12:28 2014 us=444140 OPTIONS IMPORT: --socket-flags option modified
Sun Aug 24 22:12:28 2014 us=444140 OPTIONS IMPORT: --ifconfig/up options modified
Sun Aug 24 22:12:28 2014 us=444140 OPTIONS IMPORT: route options modified
Sun Aug 24 22:12:28 2014 us=444140 OPTIONS IMPORT: route-related options modified
Sun Aug 24 22:12:28 2014 us=452145 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Aug 24 22:12:28 2014 us=452145 MANAGEMENT: >STATE:1408932748,ASSIGN_IP,,10.8.0.2,
Sun Aug 24 22:12:28 2014 us=452145 open_tun, tt->ipv6=0
Sun Aug 24 22:12:28 2014 us=455147 TAP-WIN32 device [Ethernet] opened: \\.\Global\{2583F163-D813-40FB-AA1D-AE9650501B5B}.tap
Sun Aug 24 22:12:28 2014 us=455147 TAP-Windows Driver Version 9.21 
Sun Aug 24 22:12:28 2014 us=455147 TAP-Windows MTU=1500
Sun Aug 24 22:12:28 2014 us=458150 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Sun Aug 24 22:12:28 2014 us=458150 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {2583F163-D813-40FB-AA1D-AE9650501B5B} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Sun Aug 24 22:12:28 2014 us=458150 Successful ARP Flush on interface [25] {2583F163-D813-40FB-AA1D-AE9650501B5B}
Sun Aug 24 22:12:34 2014 us=110339 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Sun Aug 24 22:12:34 2014 us=110339 MANAGEMENT: >STATE:1408932754,ADD_ROUTES,,,
Sun Aug 24 22:12:34 2014 us=111339 C:\Windows\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.8.0.1
Sun Aug 24 22:12:34 2014 us=115342 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sun Aug 24 22:12:34 2014 us=115342 Route addition via IPAPI succeeded [adaptive]
Sun Aug 24 22:12:34 2014 us=115342 Initialization Sequence Completed
Sun Aug 24 22:12:34 2014 us=115342 MANAGEMENT: >STATE:1408932754,CONNECTED,SUCCESS,10.8.0.2,192.168.1.2

Sun Aug 24 22:12:29 2014 us=900448 MULTI: multi_create_instance called
Sun Aug 24 22:12:29 2014 us=900671 Re-using SSL/TLS context
Sun Aug 24 22:12:29 2014 us=900794 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Sun Aug 24 22:12:29 2014 us=901455 Control Channel MTU parms [ L:1503 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Aug 24 22:12:29 2014 us=901612 Data Channel MTU parms [ L:1503 D:1450 EF:103 EB:4 ET:0 EL:0 ]
Sun Aug 24 22:12:29 2014 us=901878 Local Options String: 'V4,dev-type tun,link-mtu 1503,tun-mtu 1400,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Sun Aug 24 22:12:29 2014 us=901950 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1503,tun-mtu 1400,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Sun Aug 24 22:12:29 2014 us=902077 Local Options hash (VER=V4): '4c802896'
Sun Aug 24 22:12:29 2014 us=902176 Expected Remote Options hash (VER=V4): 'fa33e289'
Sun Aug 24 22:12:29 2014 us=902329 TCP connection established with [AF_INET]192.168.1.25:52755
Sun Aug 24 22:12:29 2014 us=902401 Socket flags: TCP_NODELAY=1 succeeded
Sun Aug 24 22:12:29 2014 us=902469 TCPv4_SERVER link local: [undef]
Sun Aug 24 22:12:29 2014 us=902537 TCPv4_SERVER link remote: [AF_INET]192.168.1.25:52755
Sun Aug 24 22:12:29 2014 us=903270 192.168.1.25:52755 TLS: Initial packet from [AF_INET]192.168.1.25:52755, sid=7c23d3c0 2dbc5878
Sun Aug 24 22:12:30 2014 us=201588 192.168.1.25:52755 VERIFY OK: depth=1, C=US, ST=XX, L=REDACTED, O=ams, OU="", CN=ams-ca, name=ams-ca, emailAddress=mail@host.domain
Sun Aug 24 22:12:30 2014 us=203181 192.168.1.25:52755 VERIFY OK: depth=0, C=US, ST=XX, L=REDACTED, O=ams, OU="", CN=client01, name=client01, emailAddress=mail@host.domain
Sun Aug 24 22:12:30 2014 us=330812 192.168.1.25:52755 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1503', remote='link-mtu 1603'
Sun Aug 24 22:12:30 2014 us=330959 192.168.1.25:52755 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1400', remote='tun-mtu 1500'
Sun Aug 24 22:12:30 2014 us=331770 192.168.1.25:52755 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Aug 24 22:12:30 2014 us=331889 192.168.1.25:52755 Data Channel Encrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Aug 24 22:12:30 2014 us=331963 192.168.1.25:52755 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun Aug 24 22:12:30 2014 us=332035 192.168.1.25:52755 NOTE: --mute triggered...
Sun Aug 24 22:12:30 2014 us=369134 192.168.1.25:52755 2 variation(s) on previous 3 message(s) suppressed by --mute
Sun Aug 24 22:12:30 2014 us=369242 192.168.1.25:52755 [client01] Peer Connection Initiated with [AF_INET]192.168.1.25:52755
Sun Aug 24 22:12:30 2014 us=369447 client01/192.168.1.25:52755 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Sun Aug 24 22:12:30 2014 us=369658 client01/192.168.1.25:52755 MULTI: Learn: 10.8.0.2 -> client01/192.168.1.25:52755
Sun Aug 24 22:12:30 2014 us=369742 client01/192.168.1.25:52755 MULTI: primary virtual IP for client01/192.168.1.25:52755: 10.8.0.2
Sun Aug 24 22:12:32 2014 us=788779 client01/192.168.1.25:52755 PUSH: Received control message: 'PUSH_REQUEST'
Sun Aug 24 22:12:32 2014 us=788901 client01/192.168.1.25:52755 send_push_reply(): safe_cap=940
Sun Aug 24 22:12:32 2014 us=789074 client01/192.168.1.25:52755 SENT CONTROL [client01]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.8.0.2 255.255.255.0' (status=1)
Sun Aug 24 22:12:32 2014 us=972645 client01/192.168.1.25:52755 MULTI: bad source address from client [fe80::85e5:4866:f85e:b579], packet dropped
Sun Aug 24 22:12:33 2014 us=128843 client01/192.168.1.25:52755 MULTI: bad source address from client [::], packet dropped
Sun Aug 24 22:12:33 2014 us=129041 client01/192.168.1.25:52755 MULTI: bad source address from client [fe80::85e5:4866:f85e:b579], packet dropped
Sun Aug 24 22:12:33 2014 us=129173 client01/192.168.1.25:52755 NOTE: --mute triggered...
Sun Aug 24 22:13:21 2014 us=56433 client01/192.168.1.25:52755 125 variation(s) on previous 3 message(s) suppressed by --mute
Sun Aug 24 22:13:21 2014 us=56547 client01/192.168.1.25:52755 Connection reset, restarting [-1]
Sun Aug 24 22:13:21 2014 us=56614 client01/192.168.1.25:52755 SIGUSR1[soft,connection-reset] received, client-instance restarting
Sun Aug 24 22:13:21 2014 us=57149 TCP/UDP: Closing socket

ajs418

Here is the ifconfig from my DD-WRT router which OpenVPN is deployed. Anyone have any thoughts on what the problem might be?

br0       Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX
          inet addr:192.168.2.1  Bcast:192.168.2.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4467263 errors:0 dropped:17020 overruns:0 frame:0
          TX packets:543548 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:824371545 (786.1 MiB)  TX bytes:328170915 (312.9 MiB)

br0:0     Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX
          inet addr:169.254.255.1  Bcast:169.254.255.255  Mask:255.255.0.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1

eth0      Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:906433 errors:0 dropped:0 overruns:0 frame:0
          TX packets:432251 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:382247876 (364.5 MiB)  TX bytes:98725163 (94.1 MiB)
          Interrupt:179 Base address:0x4000

eth1      Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:544639 errors:0 dropped:0 overruns:0 frame:5701519
          TX packets:537616 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:102549413 (97.7 MiB)  TX bytes:318752933 (303.9 MiB)
          Interrupt:163

eth2      Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:2000288
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:169

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING MULTICAST  MTU:65536  Metric:1
          RX packets:305 errors:0 dropped:0 overruns:0 frame:0
          TX packets:305 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:144401 (141.0 KiB)  TX bytes:144401 (141.0 KiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00                                                                                                                  -00
          inet addr:10.8.0.1  P-t-P:10.8.0.1  Mask:255.255.255.0
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1400  Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:240 (240.0 B)  TX bytes:0 (0.0 B)

vlan1     Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:16864 errors:0 dropped:0 overruns:0 frame:0
          TX packets:76043 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1579725 (1.5 MiB)  TX bytes:25449060 (24.2 MiB)

vlan2     Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX
          inet addr:192.168.1.2  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:889562 errors:0 dropped:12175 overruns:0 frame:0
          TX packets:356208 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:360726139 (344.0 MiB)  TX bytes:71547099 (68.2 MiB)

ajs418

I think the br0 is just part of the default config for a dd-wrt router (http://www.dd-wrt.com/wiki/index.php/Default_Configuration_Overview). I won't pretend to understand this document completely, but my interpretation is that the internal clients connected wirelessly are routed through that br0 interface.

I just pinged the OpenVPN server from a wirelessly connected device, so perhaps that does imply that some of those iptable forwarding configs between br0 & tun0 are working? Perhaps we're onto something here... I'm wondering if its possible that the traffic from vlan2 (WAN interface) is just getting dropped through one of these interfaces. When I have a bit of free time I'll have to try disconnecting everything from this router to reduce network chatter and then grab some packet caps from the different interfaces.

I'm not a networking guy so if any experts out there have any theories or suggestions please let me know.

Thanks!