Can connect fine but I can't ping server

killerpinkbunny

I can connect to openvpn server fine but I can't seem to ping the server and after sometime it disconnects itself. Can you please take a look and see what is wrong.

Here are my config files

port 1194
proto udp
dev tap
server-bridge 192.168.1.185 255.255.255.0 192.168.1.200 192.168.1.250
keepalive 10 120
cipher none
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

client
dev tap
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
cipher none
comp-lzo
verb 3
route delay 60 60

server log:

Mon Aug 25 22:44:24 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Mon Aug 25 22:44:24 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Mon Aug 25 22:44:24 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Aug 25 22:44:24 2014 Need hold release from management interface, waiting...
Mon Aug 25 22:44:25 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Aug 25 22:44:25 2014 MANAGEMENT: CMD 'state on'
Mon Aug 25 22:44:25 2014 MANAGEMENT: CMD 'log all on'
Mon Aug 25 22:44:25 2014 MANAGEMENT: CMD 'hold off'
Mon Aug 25 22:44:25 2014 MANAGEMENT: CMD 'hold release'
Mon Aug 25 22:44:25 2014 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Mon Aug 25 22:44:25 2014 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Mon Aug 25 22:44:25 2014 Diffie-Hellman initialized with 1024 bit key
Mon Aug 25 22:44:25 2014 ******* WARNING *******: null cipher specified, no encryption will be used
Mon Aug 25 22:44:25 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 25 22:44:25 2014 open_tun, tt->ipv6=0
Mon Aug 25 22:44:25 2014 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{C0E40E75-F7C7-49F3-A1A0-2FBDF0155525}.tap
Mon Aug 25 22:44:25 2014 TAP-Windows Driver Version 9.21 
Mon Aug 25 22:44:25 2014 Sleeping for 10 seconds...
Mon Aug 25 22:44:35 2014 NOTE: FlushIpNetTable failed on interface [8] {C0E40E75-F7C7-49F3-A1A0-2FBDF0155525} (status=1168) : Element not found.  
Mon Aug 25 22:44:35 2014 UDPv4 link local (bound): [undef]
Mon Aug 25 22:44:35 2014 UDPv4 link remote: [undef]
Mon Aug 25 22:44:35 2014 MULTI: multi_init called, r=256 v=256
Mon Aug 25 22:44:35 2014 IFCONFIG POOL: base=192.168.1.200 size=51, ipv6=0
Mon Aug 25 22:44:35 2014 Initialization Sequence Completed
Mon Aug 25 22:44:35 2014 MANAGEMENT: >STATE:1409031875,CONNECTED,SUCCESS,,
Mon Aug 25 22:45:11 2014 [removed] TLS: Initial packet from [AF_INET][removed]
Mon Aug 25 22:45:11 2014 [removed]
Mon Aug 25 22:45:11 2014 [removed]
Mon Aug 25 22:45:11 2014 [removed]Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 22:45:11 2014 [removed] Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 22:45:11 2014 [removed] Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Aug 25 22:45:11 2014 [removed] Peer Connection Initiated with [removed]
Mon Aug 25 22:45:11 2014 [removed] MULTI_sva: pool returned IPv4=192.168.1.200, IPv6=(Not enabled)
Mon Aug 25 22:45:13 2014 [removed] PUSH: Received control message: 'PUSH_REQUEST'
Mon Aug 25 22:45:13 2014 [removed] send_push_reply(): safe_cap=940
Mon Aug 25 22:45:13 2014 [removed] SENT CONTROL [OLD-HTPC]: 'PUSH_REPLY,route-gateway 192.168.1.185,ping 10,ping-restart 120,ifconfig 192.168.1.200 255.255.255.0' (status=1)
Mon Aug 25 22:45:16 2014 [removed] MULTI: Learn: 00:ff:b3:2e:4a:a7 -> [removed]

client log:

Mon Aug 25 22:44:59 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Mon Aug 25 22:44:59 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Mon Aug 25 22:44:59 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Aug 25 22:44:59 2014 Need hold release from management interface, waiting...
Mon Aug 25 22:45:00 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Aug 25 22:45:00 2014 MANAGEMENT: CMD 'state on'
Mon Aug 25 22:45:00 2014 MANAGEMENT: CMD 'log all on'
Mon Aug 25 22:45:00 2014 MANAGEMENT: CMD 'hold off'
Mon Aug 25 22:45:00 2014 MANAGEMENT: CMD 'hold release'
Mon Aug 25 22:45:00 2014 ******* WARNING *******: null cipher specified, no encryption will be used
Mon Aug 25 22:45:00 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 25 22:45:00 2014 MANAGEMENT: >STATE:1409021100,RESOLVE,,,
Mon Aug 25 22:45:00 2014 UDPv4 link local: [undef]
Mon Aug 25 22:45:00 2014 UDPv4 link remote: [AF_INET][removed]
Mon Aug 25 22:45:00 2014 MANAGEMENT: >STATE:1409021100,WAIT,,,
Mon Aug 25 22:45:00 2014 MANAGEMENT: >STATE:1409021100,AUTH,,,
Mon Aug 25 22:45:00 2014 TLS: Initial packet from [AF_INET][removed]
Mon Aug 25 22:45:00 2014 VERIFY OK: depth=1, [removed]
Mon Aug 25 22:45:00 2014 VERIFY OK: nsCertType=SERVER
Mon Aug 25 22:45:00 2014 VERIFY OK: depth=0, [removed]
Mon Aug 25 22:45:00 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 22:45:00 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 22:45:00 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Aug 25 22:45:00 2014 [server] Peer Connection Initiated with [AF_INET][removed]
Mon Aug 25 22:45:01 2014 MANAGEMENT: >STATE:1409021101,GET_CONFIG,,,
Mon Aug 25 22:45:02 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Aug 25 22:45:02 2014 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.1.185,ping 10,ping-restart 120,ifconfig 192.168.1.200 255.255.255.0'
Mon Aug 25 22:45:02 2014 OPTIONS IMPORT: timers and/or timeouts modified
Mon Aug 25 22:45:02 2014 OPTIONS IMPORT: --ifconfig/up options modified
Mon Aug 25 22:45:02 2014 OPTIONS IMPORT: route-related options modified
Mon Aug 25 22:45:05 2014 RESOLVE: Cannot resolve host address: delay: No such host is known. 
Mon Aug 25 22:45:05 2014 OpenVPN ROUTE: failed to parse/resolve route for host/network: delay
Mon Aug 25 22:45:05 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Aug 25 22:45:05 2014 MANAGEMENT: >STATE:1409021105,ASSIGN_IP,,192.168.1.200,
Mon Aug 25 22:45:05 2014 open_tun, tt->ipv6=0
Mon Aug 25 22:45:05 2014 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{B32E4AA7-D313-401E-AB69-37BA22F28193}.tap
Mon Aug 25 22:45:05 2014 TAP-Windows Driver Version 9.21 
Mon Aug 25 22:45:05 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.200/255.255.255.0 on interface {B32E4AA7-D313-401E-AB69-37BA22F28193} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Mon Aug 25 22:45:05 2014 Successful ARP Flush on interface [28] {B32E4AA7-D313-401E-AB69-37BA22F28193}
Mon Aug 25 22:45:10 2014 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Mon Aug 25 22:45:10 2014 Initialization Sequence Completed
Mon Aug 25 22:45:10 2014 MANAGEMENT: >STATE:1409021110,CONNECTED,SUCCESS,192.168.1.200,[removed]
Mon Aug 25 22:47:05 2014 [server] Inactivity timeout (--ping-restart), restarting
Mon Aug 25 22:47:05 2014 SIGUSR1[soft,ping-restart] received, process restarting
Mon Aug 25 22:47:05 2014 MANAGEMENT: >STATE:1409021225,RECONNECTING,ping-restart,,
Mon Aug 25 22:47:05 2014 Restart pause, 2 second(s)
Mon Aug 25 22:47:07 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 25 22:47:07 2014 MANAGEMENT: >STATE:1409021227,RESOLVE,,,
Mon Aug 25 22:47:07 2014 UDPv4 link local: [undef]
Mon Aug 25 22:47:07 2014 UDPv4 link remote: [AF_INET] [removed]
Mon Aug 25 22:47:07 2014 MANAGEMENT: >STATE:1409021227,WAIT,,,
Mon Aug 25 22:48:07 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 25 22:48:07 2014 TLS Error: TLS handshake failed
Mon Aug 25 22:48:07 2014 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 25 22:48:07 2014 MANAGEMENT: >STATE:1409021287,RECONNECTING,tls-error,,

As you can see the client connects successfully but then disconnects after a while. In the time it stays connected I can't ping the server either. I feel like it might be this but I am not sure why it is happening: NOTE: FlushIpNetTable failed on interface [8] {C0E40E75-F7C7-49F3-A1A0-2FBDF0155525} (status=1168) : Element not found.

Thanks for your help.

killerpinkbunny

I just tried with both firewalls disabled. Also OpenVPN is installed on Windows and I used the openvpn-install-2.3.4-I603-x86_64.exe installer.

maikcat

you are using openvpn in bridging mode,
did you bridged tapð interface in windows prior starting openvpn?
did you enabled ip forwarding on openvpn server?

Michael.

killerpinkbunny

I have tried every configuration combination of turning on ip forwarding and the server-bridge gateway. I will try installing the other version of OpenVPN and see. I'll let you know if it works. In the meantime if you have any other ideas it would be greatly appreciated.

killerpinkbunny

No luck. Any settings that I should look to enable/disable on a router?

killerpinkbunny

The Server network is on the 192.168.1.0 subnet and the client side is on the 192.168.0.0 subnet.

killerpinkbunny

Here is my route table hopefully it might help.

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1      192.168.0.8     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.0.0    255.255.255.0         On-link       192.168.0.8    281
      192.168.0.8  255.255.255.255         On-link       192.168.0.8    281
    192.168.0.255  255.255.255.255         On-link       192.168.0.8    281
      192.168.1.0    255.255.255.0         On-link     192.168.1.200    286
    192.168.1.200  255.255.255.255         On-link     192.168.1.200    286
    192.168.1.255  255.255.255.255         On-link     192.168.1.200    286
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.1.200    286
        224.0.0.0        240.0.0.0         On-link       192.168.0.8    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.1.200    286
  255.255.255.255  255.255.255.255         On-link       192.168.0.8    281

sprut

Try use TCP in your config and new version openvpn have a some problem in TAP driver 9.21...
I am use this version -- openvpn-install-2.3.2-I003-i686.exe

killerpinkbunny

OK this is super weird. I just left it on over the weekend as I didn't have time to deal with it but it actually connected.... but, when trying to ping 192.168.1.185 from client to server or 192.168.1.200 the other way around it doesn't ping but by pinging the UNC it gives me an ipv6 address... which makes me totally confused especially since I disabled ipv6 on the server bridge. Any ideas?

killerpinkbunny

Well disabling ipv6 didn't do the trick. I am not sure what allowed it to finally connect and through ipv6 of all things. Maybe its the router. Is there anything specific client side or server side that might be messing with it. I am using an actiontec provided by FiOS.

Edit: Most likely not as I put both in the DMZ for a quick test.

killerpinkbunny

OK you asking for the ifconfig made me look at ipconfig closer and I found out even though it was supposed to be bridged and according to the the network adapters pane said it was it actually wasn't as the tap adapter had an ip address of 169.******** so I unbridged it and rebridged it and it worked perfectly fine. This probably happened when I changed the tap drivers. I left it bridged and never dealt with it again until I found out it actually wasn't. Thank you all for your help.

killerpinkbunny

Yeah everything works fine so it seemed to be the tap driver as thought just when changing drivers the bridge got messed up. Thanks for your help guys.