Clients Cannot Access Internet using DD-WRT OpenVPN

bobby81

Hi Everybody,

I'm trying to get OpenVPN up and running on my DD-WRT enabled router using the latest build 06/23/14 vpn.

I can see there is an MTU mis-match. I have read that the MTU is to be set to 1400 but this seems to cause an error message in my log, as shown below.

The problem is that I can ping as far as the cable modem / router when connected as an OpenVPN client, but I can't get internet access. Any help to get this working would be most appreciated.

The setup is as follows:

INTERNET (CABLE-TYPE) -> CABLE MODEM / ROUTER LAN PORT -> DD-WRT ROUTER WAN PORT -> DD-WRT OPENVPN CLIENTS

IP addreses are as folows:

Cable Modem / Router:

WAN: STATIC

LAN: 10.1.1.0/24

Port 1194 forwarded to 10.1.2.100 UDP.

DD-WRT ROUTER

WAN: 10.1.1.100 (STATIC)

LOCAL NETWORK: 10.1.2.0/24

OpenVPN Network

10.1.3.0

DD-WRT OPENVPN SERVER LOG:

Log Serverlog 20140825 12:58:20 I OpenVPN 2.3.4 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jun 23 2014
20140825 12:58:20 I library versions: OpenSSL 1.0.1h 5 Jun 2014 LZO 2.06
20140825 12:58:20 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
20140825 12:58:20 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20140825 12:58:22 Diffie-Hellman initialized with 2048 bit key
20140825 12:58:22 W WARNING: normally if you use --mssfix and/or --fragment you should also set --tun-mtu 1500 (currently it is 1400)
20140825 12:58:22 Socket Buffers: R=[32767->65534] S=[32767->65534]
20140825 12:58:22 I TUN/TAP device tun2 opened
20140825 12:58:22 TUN/TAP TX queue length set to 100
20140825 12:58:22 I do_ifconfig tt->ipv6=1 tt->did_ifconfig_ipv6_setup=0
20140825 12:58:22 I /sbin/ifconfig tun2 10.1.3.1 netmask 255.255.255.0 mtu 1400 broadcast 10.1.3.255
20140825 12:58:30 I UDPv4 link local (bound): [undef]
20140825 12:58:30 I UDPv4 link remote: [undef]
20140825 12:58:30 MULTI: multi_init called r=256 v=256
20140825 12:58:30 IFCONFIG POOL: base=10.1.3.2 size=252 ipv6=0
20140825 12:58:30 IFCONFIG POOL LIST
20140825 12:58:30 I Initialization Sequence Completed
20140825 12:58:35 W 1.79.39.168:56108 WARNING: normally if you use --mssfix and/or --fragment you should also set --tun-mtu 1500 (currently it is 1400)
20140825 12:58:35 1.79.39.168:56108 TLS: Initial packet from [AF_INET]1.79.39.168:56108 sid=ebf3df57 96885073
20140825 12:58:46 1.79.39.168:56108 VERIFY OK: depth=1 C=JP ST=KY L=Kyoto O=OpenVPN OU=changeme CN=openvpn-ca name=changeme emailAddress=admin@domain.com
20140825 12:58:46 1.79.39.168:56108 VERIFY OK: depth=0 C=JP ST=KY L=Kyoto O=OpenVPN OU=changeme CN=yukidesktop name=changeme emailAddress=admin@domain.com
20140825 12:58:48 W 1.79.39.168:56108 WARNING: 'link-mtu' is used inconsistently local='link-mtu 1442' remote='link-mtu 1542'
20140825 12:58:48 W 1.79.39.168:56108 WARNING: 'tun-mtu' is used inconsistently local='tun-mtu 1400' remote='tun-mtu 1500'
20140825 12:58:48 1.79.39.168:56108 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
20140825 12:58:48 1.79.39.168:56108 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
20140825 12:58:48 1.79.39.168:56108 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
20140825 12:58:48 1.79.39.168:56108 NOTE: --mute triggered...
20140825 12:58:49 1.79.39.168:56108 2 variation(s) on previous 3 message(s) suppressed by --mute
20140825 12:58:49 I 1.79.39.168:56108 [yukidesktop] Peer Connection Initiated with [AF_INET]1.79.39.168:56108
20140825 12:58:49 I yukidesktop/1.79.39.168:56108 MULTI_sva: pool returned IPv4=10.1.3.2 IPv6=(Not enabled)
20140825 12:58:49 yukidesktop/1.79.39.168:56108 MULTI: Learn: 10.1.3.2 -> yukidesktop/1.79.39.168:56108
20140825 12:58:49 yukidesktop/1.79.39.168:56108 MULTI: primary virtual IP for yukidesktop/1.79.39.168:56108: 10.1.3.2
20140825 12:58:51 yukidesktop/1.79.39.168:56108 PUSH: Received control message: 'PUSH_REQUEST'
20140825 12:58:51 I yukidesktop/1.79.39.168:56108 send_push_reply(): safe_cap=940
20140825 12:58:51 yukidesktop/1.79.39.168:56108 SENT CONTROL [yukidesktop]: 'PUSH_REPLY redirect-gateway def1 route-gateway 10.1.3.1 topology subnet ping 10 ping-restart 120 ifconfig 10.1.3.2 255.255.255.0' (status=1)
20140825 13:05:43 I yukidesktop/1.79.39.168:56108 [yukidesktop] Inactivity timeout (--ping-restart) restarting
20140825 13:05:43 yukidesktop/1.79.39.168:56108 SIGUSR1[soft ping-restart] received client-instance restarting
20140825 13:07:47 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140825 13:07:47 D MANAGEMENT: CMD 'state'
20140825 13:07:47 MANAGEMENT: Client disconnected
20140825 13:07:47 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140825 13:07:47 D MANAGEMENT: CMD 'state'
20140825 13:07:47 MANAGEMENT: Client disconnected
20140825 13:07:47 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140825 13:07:47 D MANAGEMENT: CMD 'state'
20140825 13:07:47 MANAGEMENT: Client disconnected
20140825 13:07:48 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140825 13:07:48 D MANAGEMENT: CMD 'status 2'
20140825 13:07:48 MANAGEMENT: Client disconnected
20140825 13:07:48 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20140825 13:07:48 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem keepalive 10 120 verb 3 mute 3 syslog writepid /var/run/openvpnd.pid management 127.0.0.1 14 management-log-cache 100 topology subnet script-security 2 port 1194 proto udp cipher bf-cbc auth sha1 client-config-dir /tmp/openvpn/ccd comp-lzo yes tls-server ifconfig-pool-persist /tmp/openvpn/ip-pool 86400 client-to-client push "redirect-gateway def1" fast-io tun-mtu 1400 mtu-disc yes server 10.1.3.0 255.255.255.0 dev tun2 tun-ipv6 Clientlog

Firmware: DD-WRT v24-sp2 (06/23/14) vpn
Time: 13:08:21 up 10 min, load average: 0.27, 0.14, 0.08
WAN IP: 10.1.1.100

GUIZMO OPENVPN CLIENT LOG

Running openvpn --cd /var/mobile/Documents/Configurations/yuki1 --config "yuki1.ovpn" --auto-proxy

2014-08-25 21:58:35.331 tools[905:c07] otherApps (null)
CoreFoundation = 847.260000
Mon Aug 25 21:58:35 2014 us=402928 Current Parameter Settings:
Mon Aug 25 21:58:35 2014 us=404868 config = 'yuki1.ovpn'
Mon Aug 25 21:58:35 2014 us=404898 mode = 0
Mon Aug 25 21:58:35 2014 us=404924 show_ciphers = DISABLED
Mon Aug 25 21:58:35 2014 us=405017 show_digests = DISABLED
Mon Aug 25 21:58:35 2014 us=405073 show_engines = DISABLED
Mon Aug 25 21:58:35 2014 us=405127 genkey = DISABLED
Mon Aug 25 21:58:35 2014 us=405155 key_pass_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=405190 show_tls_ciphers = DISABLED
Mon Aug 25 21:58:35 2014 us=405217 Connection profiles [default]:
Mon Aug 25 21:58:35 2014 us=405243 proto = udp
Mon Aug 25 21:58:35 2014 us=405269 local = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=405295 local_port = 0
Mon Aug 25 21:58:35 2014 us=405322 remote = 'seto.twilightparadox.com'
Mon Aug 25 21:58:35 2014 us=405348 remote_port = 1194
Mon Aug 25 21:58:35 2014 us=405374 remote_float = ENABLED
Mon Aug 25 21:58:35 2014 us=405401 bind_defined = DISABLED
Mon Aug 25 21:58:35 2014 us=405427 bind_local = DISABLED
Mon Aug 25 21:58:35 2014 us=405454 connect_retry_seconds = 5
Mon Aug 25 21:58:35 2014 us=405511 connect_timeout = 10
Mon Aug 25 21:58:35 2014 us=405568 connect_retry_max = 0
Mon Aug 25 21:58:35 2014 us=405596 xormethod = 0
Mon Aug 25 21:58:35 2014 us=405623 xormask = ''
Mon Aug 25 21:58:35 2014 us=405650 xormasklen = 1
Mon Aug 25 21:58:35 2014 us=405676 socks_proxy_server = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=405703 socks_proxy_port = 0
Mon Aug 25 21:58:35 2014 us=405730 socks_proxy_retry = DISABLED
Mon Aug 25 21:58:35 2014 us=405756 Connection profiles END
Mon Aug 25 21:58:35 2014 us=405783 remote_random = DISABLED
Mon Aug 25 21:58:35 2014 us=405810 ipchange = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=405836 dev = 'tun'
Mon Aug 25 21:58:35 2014 us=405863 dev_type = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=405890 dev_node = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=405916 lladdr = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=405943 topology = 1
Mon Aug 25 21:58:35 2014 us=405969 tun_ipv6 = DISABLED
Mon Aug 25 21:58:35 2014 us=405996 ifconfig_local = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=406023 ifconfig_remote_netmask = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=406050 ifconfig_noexec = DISABLED
Mon Aug 25 21:58:35 2014 us=406077 ifconfig_nowarn = DISABLED
Mon Aug 25 21:58:35 2014 us=406103 shaper = 0
Mon Aug 25 21:58:35 2014 us=406130 tun_mtu = 1500
Mon Aug 25 21:58:35 2014 us=406157 tun_mtu_defined = ENABLED
Mon Aug 25 21:58:35 2014 us=406183 link_mtu = 1500
Mon Aug 25 21:58:35 2014 us=406210 link_mtu_defined = DISABLED
Mon Aug 25 21:58:35 2014 us=406236 tun_mtu_extra = 0
Mon Aug 25 21:58:35 2014 us=406263 tun_mtu_extra_defined = DISABLED
Mon Aug 25 21:58:35 2014 us=406290 fragment = 0
Mon Aug 25 21:58:35 2014 us=406316 mtu_discover_type = -1
Mon Aug 25 21:58:35 2014 us=406343 mtu_test = 0
Mon Aug 25 21:58:35 2014 us=406369 mlock = DISABLED
Mon Aug 25 21:58:35 2014 us=406396 keepalive_ping = 0
Mon Aug 25 21:58:35 2014 us=406423 keepalive_timeout = 0
Mon Aug 25 21:58:35 2014 us=406458 inactivity_timeout = 0
Mon Aug 25 21:58:35 2014 us=406485 ping_send_timeout = 0
Mon Aug 25 21:58:35 2014 us=406511 ping_rec_timeout = 0
Mon Aug 25 21:58:35 2014 us=406538 ping_rec_timeout_action = 0
Mon Aug 25 21:58:35 2014 us=406565 ping_timer_remote = DISABLED
Mon Aug 25 21:58:35 2014 us=406592 remap_sigusr1 = 0
Mon Aug 25 21:58:35 2014 us=406618 explicit_exit_notification = 0
Mon Aug 25 21:58:35 2014 us=406645 persist_tun = ENABLED
Mon Aug 25 21:58:35 2014 us=406671 persist_local_ip = DISABLED
Mon Aug 25 21:58:35 2014 us=406698 persist_remote_ip = DISABLED
Mon Aug 25 21:58:35 2014 us=406725 persist_key = ENABLED
Mon Aug 25 21:58:35 2014 us=406752 mssfix = 1450
Mon Aug 25 21:58:35 2014 us=406778 passtos = DISABLED
Mon Aug 25 21:58:35 2014 us=406805 resolve_retry_seconds = 1000000000
Mon Aug 25 21:58:35 2014 us=406869 username = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=406896 groupname = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=406923 chroot_dir = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=406950 cd_dir = '/var/mobile/Documents/Configurations/yuki1'
Mon Aug 25 21:58:35 2014 us=406977 writepid = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=407003 up_script = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=407029 down_script = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=407055 down_pre = DISABLED
Mon Aug 25 21:58:35 2014 us=407080 up_restart = DISABLED
Mon Aug 25 21:58:35 2014 us=407106 up_delay = DISABLED
Mon Aug 25 21:58:35 2014 us=407131 daemon = DISABLED
Mon Aug 25 21:58:35 2014 us=407163 inetd = 0
Mon Aug 25 21:58:35 2014 us=407189 log = DISABLED
Mon Aug 25 21:58:35 2014 us=407219 suppress_timestamps = DISABLED
Mon Aug 25 21:58:35 2014 us=407247 nice = 0
Mon Aug 25 21:58:35 2014 us=407273 verbosity = 4
Mon Aug 25 21:58:35 2014 us=407305 mute = 0
Mon Aug 25 21:58:35 2014 us=407330 gremlin = 0
Mon Aug 25 21:58:35 2014 us=407356 status_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=407381 status_file_version = 1
Mon Aug 25 21:58:35 2014 us=407407 status_file_update_freq = 60
Mon Aug 25 21:58:35 2014 us=407432 occ = ENABLED
Mon Aug 25 21:58:35 2014 us=407458 rcvbuf = 65536
Mon Aug 25 21:58:35 2014 us=407483 sndbuf = 65536
Mon Aug 25 21:58:35 2014 us=407508 sockflags = 0
Mon Aug 25 21:58:35 2014 us=407534 fast_io = DISABLED
Mon Aug 25 21:58:35 2014 us=407559 lzo = 7
Mon Aug 25 21:58:35 2014 us=407585 route_script = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=407611 route_default_gateway = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=407637 route_default_metric = 0
Mon Aug 25 21:58:35 2014 us=407662 route_noexec = DISABLED
Mon Aug 25 21:58:35 2014 us=407687 route_delay = 0
Mon Aug 25 21:58:35 2014 us=407712 route_delay_window = 30
Mon Aug 25 21:58:35 2014 us=407738 route_delay_defined = DISABLED
Mon Aug 25 21:58:35 2014 us=407763 route_nopull = DISABLED
Mon Aug 25 21:58:35 2014 us=407789 route_gateway_via_dhcp = DISABLED
Mon Aug 25 21:58:35 2014 us=407814 max_routes = 100
Mon Aug 25 21:58:35 2014 us=407840 allow_pull_fqdn = DISABLED
Mon Aug 25 21:58:35 2014 us=407865 shared_secret_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=407891 key_direction = 0
Mon Aug 25 21:58:35 2014 us=407916 ciphername_defined = ENABLED
Mon Aug 25 21:58:35 2014 us=407942 ciphername = 'BF-CBC'
Mon Aug 25 21:58:35 2014 us=407968 authname_defined = ENABLED
Mon Aug 25 21:58:35 2014 us=407993 authname = 'SHA1'
Mon Aug 25 21:58:35 2014 us=408019 prng_hash = 'SHA1'
Mon Aug 25 21:58:35 2014 us=408044 prng_nonce_secret_len = 16
Mon Aug 25 21:58:35 2014 us=408070 keysize = 0
Mon Aug 25 21:58:35 2014 us=408095 engine = DISABLED
Mon Aug 25 21:58:35 2014 us=408120 replay = ENABLED
Mon Aug 25 21:58:35 2014 us=408146 mute_replay_warnings = DISABLED
Mon Aug 25 21:58:35 2014 us=408171 replay_window = 64
Mon Aug 25 21:58:35 2014 us=408197 replay_time = 15
Mon Aug 25 21:58:35 2014 us=408222 packet_id_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408248 use_iv = ENABLED
Mon Aug 25 21:58:35 2014 us=408273 test_crypto = DISABLED
Mon Aug 25 21:58:35 2014 us=408299 tls_server = DISABLED
Mon Aug 25 21:58:35 2014 us=408324 tls_client = ENABLED
Mon Aug 25 21:58:35 2014 us=408350 key_method = 2
Mon Aug 25 21:58:35 2014 us=408375 ca_file = 'ca.crt'
Mon Aug 25 21:58:35 2014 us=408401 ca_path = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408426 dh_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408452 cert_file = 'yuki1.crt'
Mon Aug 25 21:58:35 2014 us=408478 priv_key_file = 'yuki1.key'
Mon Aug 25 21:58:35 2014 us=408503 pkcs12_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408529 cipher_list = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408554 tls_verify = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408580 tls_export_cert = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408606 tls_remote = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408631 crl_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=408657 ns_cert_type = 64
Mon Aug 25 21:58:35 2014 us=408701 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408727 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408752 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408778 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408803 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408829 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408854 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408880 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408905 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408931 remote_cert_ku = 0
Mon Aug 25 21:58:35 2014 us=408956 remote_cert_ku[i] = 0
Mon Aug 25 21:58:35 2014 us=408981 remote_cert_ku[i] = 0
Mon Aug 25 21:58:35 2014 us=409007 remote_cert_ku[i] = 0
Mon Aug 25 21:58:35 2014 us=409032 remote_cert_ku[i] = 0
Mon Aug 25 21:58:35 2014 us=409058 remote_cert_ku[i] = 0
Mon Aug 25 21:58:35 2014 us=409083 remote_cert_ku[i] = 0
Mon Aug 25 21:58:35 2014 us=409108 remote_cert_eku = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=409133 tls_timeout = 2
Mon Aug 25 21:58:35 2014 us=409159 renegotiate_bytes = 0
Mon Aug 25 21:58:35 2014 us=409185 renegotiate_packets = 0
Mon Aug 25 21:58:35 2014 us=409210 renegotiate_seconds = 3600
Mon Aug 25 21:58:35 2014 us=409236 handshake_window = 60
Mon Aug 25 21:58:35 2014 us=409261 transition_window = 3600
Mon Aug 25 21:58:35 2014 us=409286 single_session = DISABLED
Mon Aug 25 21:58:35 2014 us=409321 push_peer_info = DISABLED
Mon Aug 25 21:58:35 2014 us=409348 tls_exit = DISABLED
Mon Aug 25 21:58:35 2014 us=409375 tls_auth_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=409408 client = ENABLED
Mon Aug 25 21:58:35 2014 us=409435 pull = ENABLED
Mon Aug 25 21:58:35 2014 us=409495 auth_user_pass_file = '[UNDEF]'
Mon Aug 25 21:58:35 2014 us=409536 OpenVPN 2.2.1_GuizmOVPN_1.2.0 arm-apple-darwin10 [SSL] [LZO2] [eurephia] built on Dec 27 2013
Mon Aug 25 21:58:35 2014 us=413686 LZO compression initialized
Mon Aug 25 21:58:35 2014 us=414024 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Aug 25 21:58:35 2014 us=414246 Socket Buffers: R=[196724->65536] S=[9216->65536]
Mon Aug 25 21:58:35 2014 us=451879 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Aug 25 21:58:35 2014 us=452299 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Aug 25 21:58:35 2014 us=452414 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Aug 25 21:58:35 2014 us=452649 Local Options hash (VER=V4): '41690919'
Mon Aug 25 21:58:35 2014 us=452762 Expected Remote Options hash (VER=V4): '530fdded'
Mon Aug 25 21:58:35 2014 us=452983 UDPv4 link local: [undef]
Mon Aug 25 21:58:35 2014 us=453082 UDPv4 link remote: *publicip*:1194
Mon Aug 25 21:58:36 2014 us=372913 TLS: Initial packet from *publicip*:1194, sid=b2cfa7e5 3ded7c68
Mon Aug 25 21:58:45 2014 us=489892 VERIFY OK: depth=1, /C=JP/ST=KY/L=Kyoto/O=OpenVPN/OU=changeme/CN=openvpn-ca/name=changeme/emailAddress=admin@domain.com
Mon Aug 25 21:58:45 2014 us=491752 VERIFY OK: nsCertType=SERVER
Mon Aug 25 21:58:45 2014 us=491787 VERIFY OK: depth=0, /C=JP/ST=KY/L=Kyoto/O=OpenVPN/OU=changeme/CN=server/name=changeme/emailAddress=admin@domain.com
Mon Aug 25 21:58:49 2014 us=397796 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1442'
Mon Aug 25 21:58:49 2014 us=398016 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1400'
Mon Aug 25 21:58:49 2014 us=400364 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 21:58:49 2014 us=400401 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 21:58:49 2014 us=400509 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 21:58:49 2014 us=400543 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 21:58:49 2014 us=400724 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Aug 25 21:58:49 2014 us=400804 [server] Peer Connection Initiated with *publicip*:1194
Mon Aug 25 21:58:51 2014 us=850995 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Aug 25 21:58:51 2014 us=999694 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route-gateway 10.1.3.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.1.3.2 255.255.255.0'
Mon Aug 25 21:58:52 2014 us=102 Tapemu : Received local IP : 10.1.3.2/255.255.255.0
Mon Aug 25 21:58:52 2014 us=229 OPTIONS IMPORT: timers and/or timeouts modified
Mon Aug 25 21:58:52 2014 us=294 OPTIONS IMPORT: --ifconfig/up options modified
Mon Aug 25 21:58:52 2014 us=353 OPTIONS IMPORT: route options modified
Mon Aug 25 21:58:52 2014 us=412 OPTIONS IMPORT: route-related options modified
Mon Aug 25 21:58:52 2014 us=992 ROUTE default_gateway=192.168.43.1
Mon Aug 25 21:58:52 2014 us=1119 Tunemu : Starting TUN emulation.
Mon Aug 25 21:58:52 2014 us=3803 TUN/TAP device tunemu:/ppp0 opened
Mon Aug 25 21:58:52 2014 us=3922 /sbin/ifconfig ppp0 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
Mon Aug 25 21:58:52 2014 us=16960 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Mon Aug 25 21:58:52 2014 us=17199 /sbin/ifconfig ppp0 10.1.3.2 10.1.3.2 netmask 255.255.255.0 mtu 1500 up
Mon Aug 25 21:58:52 2014 us=31191 /sbin/route add -net 10.1.3.0 10.1.3.2 255.255.255.0
add net 10.1.3.0: gateway 10.1.3.2
Mon Aug 25 21:58:52 2014 us=42093 Running script
Mon Aug 25 21:58:52 2014 us=344971 Script ended
Mon Aug 25 21:58:52 2014 us=345161 /sbin/route add -net *publicip* 192.168.43.1 255.255.255.255
add net *publicip*: gateway 192.168.43.1
Mon Aug 25 21:58:52 2014 us=351544 /sbin/route add -net 0.0.0.0 10.1.3.1 128.0.0.0
add net 0.0.0.0: gateway 10.1.3.1
Mon Aug 25 21:58:52 2014 us=360066 /sbin/route add -net 128.0.0.0 10.1.3.1 128.0.0.0
add net 128.0.0.0: gateway 10.1.3.1
Mon Aug 25 21:58:52 2014 us=366827 Initialization Sequence Completed

CLIENT OVPN CONFIG

client
dev tun
proto udp
remote [SERVER NAME HERE] 1194
resolv-retry infinite
nobind
persist-key
persist-tun
float
ca ca.crt
cert yuki1.crt
key yuki1.key
ns-cert-type server
comp-lzo
verb 4

bobby81

Hello Traffic,

Thanks for your reply. I changed the MTU to 1500. This clears the mtu inconsistencies error but clients still can't access the internet.

The reason I set my MTU to 1300 was because of this: http://www.dd-wrt.com/wiki/index.php/OpenVPN#MTU

"On udp connections enable mss-fix on one side of the link. Lower the fragemt size to 1300 and try if its working."

I'm not sure if I made myself clear in my first post but the DD-WRT router is behind another router and need to tunnel through the first router.

Could you please explain exactly how I'd do this. I changed the mtu to 1300 on the DD-WRT router and enabled mss-fix still causes the same 'mtu inconsistencies' error.

In addition, I've also tried adding 'max-mtu 1300' to the GuizmOVPN client and I still get the mtu inconsistencies error.

Please help!

bobby81

Hi Traffic,

Ｐort forwarding is enabled on my internet facing router. in this case:

WAN facing router: forward port 1194 to IP address: 10.1.1.100 (dd-wrt router)

I think that the problem isn't port forwarding. I think it's a routing issue. When my openVPN client connects to the dd-wrt openVPN server, there isn't a route in my routing table to forward all of my clients data out to the internet.

could you please advise what I should use for a NAT rule.

Thanks!

bobby81

Hi Traffic,

The VPN is up & running now. Thanks for your help.

Cheers!