Hi guys,
I am trying to configure an OpenVpn server on my system but I have some problems: connection seems to be correctly estabilished, all verifies passed... but from the client I can't ping anything, can't access to Lan and can't access to the internet. Client only can ping itself (192.168.0.50, given by the vpn server) but can't ping the server, the router or any other public or private IP (I tried 8.8.8.8 and other ones). It's an Android 4.1.2 client.
So I tried a Windows 7 32bit client too: the only difference is that, using the same "client1.ovpn" of Android, the Windows client can access the internet, but its public internet IP is the same as when Vpn is no active (so, it doesn't use the tunnel, althought I'm using
push "redirect-gateway def1 bypass-dhcp" directive in server.ovpn). I'd like to use the tunnel for all client data traffic. Ping to local IPs doesn't work in this case too.
Server is a Windows 7 x64 machine, tap+lan bridge (TAP mode, with Tap v9 interface renamed "OpenVPN" and Mac bridge miniport renamed "OpenVPN bridge").
Router is Netgear DGND3700v2, his IP is 192.168.0.1.
I tried 1194 and 35811 ports, but no difference... both opened on router (and forwarded to the server IP, 192.168.0.2).
Firewall rules are OK (I yet tried with Firewall off too).
OpenVpn Gui is the last available version but I noticed some strange situations: when I am on the server and want to disconnect it, OpenVpn gui hangs on "closing tun/tap interface". I have to terminate his process, but when I try to run again, his console window remains blank. I have to reboot PC to connect OpenVpn server again. (openvpn.exe process can't be killed in any way).
It happens on two different PCs I use as server, this Win 7 64bit and a Win 7 32bit too.
I couldn't test it on a Linux machine yet.
My goals are 2:
(1) access shared local (server) folders from remote vpn client
(2) redirect all data traffic of client (internet too) through the vpn tunnel (and so use public internet IP of server when I access internet from the client)
Here are server and client configurations, and logs too (I've only put some "x" in place of my public IP and hostname):
"server.ovpn"
port 35811
proto udp
dev tap
dev-node "OpenVPN"
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 192.168.0.2 255.255.255.0 192.168.0.50 192.168.0.100
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
client-to-client
keepalive 10 120
tls-auth key.txt 0 # This file is secret
comp-lzo
max-clients 10
persist-key
persist-tun
status openvpn-status.log
verb 4
this is the "client1.ovpn":
client
dev tap
dev-node "OpenVPN"
proto udp
remote xxxxxxx.dyndns.org 35811
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
tls-auth key.txt 1
comp-lzo
verb 3
Here is server.log, verbosity is 4, to obtain more infos (here I noticed some problems, as this line: "
NOTE: FlushIpNetTable failed on interface [63] {C01B801F-1512-4CFD-B900-EC1906298C4E} (status=1168) : Impossibile trovare elemento", I don't know how to solve it...yet tried to run as administrator, yet tried to turn off routing and remote access and so...:
this issue appears in client1.log too.
Mon Aug 25 19:49:39 2014 us=721907 Current Parameter Settings:
Mon Aug 25 19:49:39 2014 us=721907 config = 'server.ovpn'
Mon Aug 25 19:49:39 2014 us=721907 mode = 1
Mon Aug 25 19:49:39 2014 us=721907 show_ciphers = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 show_digests = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 show_engines = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 genkey = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 key_pass_file = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 show_tls_ciphers = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 Connection profiles [default]:
Mon Aug 25 19:49:39 2014 us=721907 proto = udp
Mon Aug 25 19:49:39 2014 us=721907 local = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 local_port = 35811
Mon Aug 25 19:49:39 2014 us=721907 remote = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 remote_port = 35811
Mon Aug 25 19:49:39 2014 us=721907 remote_float = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 bind_defined = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 bind_local = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 connect_retry_seconds = 5
Mon Aug 25 19:49:39 2014 us=721907 connect_timeout = 10
Mon Aug 25 19:49:39 2014 us=721907 connect_retry_max = 0
Mon Aug 25 19:49:39 2014 us=721907 socks_proxy_server = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 socks_proxy_port = 0
Mon Aug 25 19:49:39 2014 us=721907 socks_proxy_retry = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 tun_mtu = 1500
Mon Aug 25 19:49:39 2014 us=721907 tun_mtu_defined = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 link_mtu = 1500
Mon Aug 25 19:49:39 2014 us=721907 link_mtu_defined = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 tun_mtu_extra = 32
Mon Aug 25 19:49:39 2014 us=721907 tun_mtu_extra_defined = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 mtu_discover_type = -1
Mon Aug 25 19:49:39 2014 us=721907 fragment = 0
Mon Aug 25 19:49:39 2014 us=721907 mssfix = 1450
Mon Aug 25 19:49:39 2014 us=721907 explicit_exit_notification = 0
Mon Aug 25 19:49:39 2014 us=721907 Connection profiles END
Mon Aug 25 19:49:39 2014 us=721907 remote_random = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 ipchange = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 dev = 'tap'
Mon Aug 25 19:49:39 2014 us=721907 dev_type = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 dev_node = 'OpenVPN'
Mon Aug 25 19:49:39 2014 us=721907 lladdr = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 topology = 1
Mon Aug 25 19:49:39 2014 us=721907 tun_ipv6 = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 ifconfig_local = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 ifconfig_remote_netmask = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 ifconfig_noexec = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 ifconfig_nowarn = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 ifconfig_ipv6_local = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 ifconfig_ipv6_netbits = 0
Mon Aug 25 19:49:39 2014 us=721907 ifconfig_ipv6_remote = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 shaper = 0
Mon Aug 25 19:49:39 2014 us=721907 mtu_test = 0
Mon Aug 25 19:49:39 2014 us=721907 mlock = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 keepalive_ping = 10
Mon Aug 25 19:49:39 2014 us=721907 keepalive_timeout = 120
Mon Aug 25 19:49:39 2014 us=721907 inactivity_timeout = 0
Mon Aug 25 19:49:39 2014 us=721907 ping_send_timeout = 10
Mon Aug 25 19:49:39 2014 us=721907 ping_rec_timeout = 240
Mon Aug 25 19:49:39 2014 us=721907 ping_rec_timeout_action = 2
Mon Aug 25 19:49:39 2014 us=721907 ping_timer_remote = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 remap_sigusr1 = 0
Mon Aug 25 19:49:39 2014 us=721907 persist_tun = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 persist_local_ip = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 persist_remote_ip = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 persist_key = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 passtos = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 resolve_retry_seconds = 1000000000
Mon Aug 25 19:49:39 2014 us=721907 username = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 groupname = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 chroot_dir = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 cd_dir = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 writepid = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 up_script = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 down_script = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 down_pre = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 up_restart = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 up_delay = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 daemon = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 inetd = 0
Mon Aug 25 19:49:39 2014 us=721907 log = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 suppress_timestamps = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 nice = 0
Mon Aug 25 19:49:39 2014 us=721907 verbosity = 4
Mon Aug 25 19:49:39 2014 us=721907 mute = 0
Mon Aug 25 19:49:39 2014 us=721907 status_file = 'openvpn-status.log'
Mon Aug 25 19:49:39 2014 us=721907 status_file_version = 1
Mon Aug 25 19:49:39 2014 us=721907 status_file_update_freq = 60
Mon Aug 25 19:49:39 2014 us=721907 occ = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 rcvbuf = 0
Mon Aug 25 19:49:39 2014 us=721907 sndbuf = 0
Mon Aug 25 19:49:39 2014 us=721907 sockflags = 0
Mon Aug 25 19:49:39 2014 us=721907 fast_io = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 lzo = 7
Mon Aug 25 19:49:39 2014 us=721907 route_script = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 route_default_gateway = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 route_default_metric = 0
Mon Aug 25 19:49:39 2014 us=721907 route_noexec = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 route_delay = 0
Mon Aug 25 19:49:39 2014 us=721907 route_delay_window = 30
Mon Aug 25 19:49:39 2014 us=721907 route_delay_defined = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 route_nopull = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 route_gateway_via_dhcp = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 max_routes = 100
Mon Aug 25 19:49:39 2014 us=721907 allow_pull_fqdn = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 management_addr = '127.0.0.1'
Mon Aug 25 19:49:39 2014 us=721907 management_port = 25340
Mon Aug 25 19:49:39 2014 us=721907 management_user_pass = 'stdin'
Mon Aug 25 19:49:39 2014 us=721907 management_log_history_cache = 250
Mon Aug 25 19:49:39 2014 us=721907 management_echo_buffer_size = 100
Mon Aug 25 19:49:39 2014 us=721907 management_write_peer_info_file = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 management_client_user = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 management_client_group = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 management_flags = 6
Mon Aug 25 19:49:39 2014 us=721907 shared_secret_file = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=721907 key_direction = 1
Mon Aug 25 19:49:39 2014 us=721907 ciphername_defined = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 ciphername = 'BF-CBC'
Mon Aug 25 19:49:39 2014 us=721907 authname_defined = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 authname = 'SHA1'
Mon Aug 25 19:49:39 2014 us=721907 prng_hash = 'SHA1'
Mon Aug 25 19:49:39 2014 us=721907 prng_nonce_secret_len = 16
Mon Aug 25 19:49:39 2014 us=721907 keysize = 0
Mon Aug 25 19:49:39 2014 us=721907 engine = DISABLED
Mon Aug 25 19:49:39 2014 us=721907 replay = ENABLED
Mon Aug 25 19:49:39 2014 us=721907 mute_replay_warnings = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 replay_window = 64
Mon Aug 25 19:49:39 2014 us=737507 replay_time = 15
Mon Aug 25 19:49:39 2014 us=737507 packet_id_file = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 use_iv = ENABLED
Mon Aug 25 19:49:39 2014 us=737507 test_crypto = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 tls_server = ENABLED
Mon Aug 25 19:49:39 2014 us=737507 tls_client = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 key_method = 2
Mon Aug 25 19:49:39 2014 us=737507 ca_file = 'ca.crt'
Mon Aug 25 19:49:39 2014 us=737507 ca_path = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 dh_file = 'dh1024.pem'
Mon Aug 25 19:49:39 2014 us=737507 cert_file = 'server.crt'
Mon Aug 25 19:49:39 2014 us=737507 priv_key_file = 'server.key'
Mon Aug 25 19:49:39 2014 us=737507 pkcs12_file = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 cryptoapi_cert = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 cipher_list = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 tls_verify = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 tls_export_cert = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 verify_x509_type = 0
Mon Aug 25 19:49:39 2014 us=737507 verify_x509_name = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 crl_file = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 ns_cert_type = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_ku[i] = 0
Mon Aug 25 19:49:39 2014 us=737507 remote_cert_eku = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 ssl_flags = 0
Mon Aug 25 19:49:39 2014 us=737507 tls_timeout = 2
Mon Aug 25 19:49:39 2014 us=737507 renegotiate_bytes = 0
Mon Aug 25 19:49:39 2014 us=737507 renegotiate_packets = 0
Mon Aug 25 19:49:39 2014 us=737507 renegotiate_seconds = 3600
Mon Aug 25 19:49:39 2014 us=737507 handshake_window = 60
Mon Aug 25 19:49:39 2014 us=737507 transition_window = 3600
Mon Aug 25 19:49:39 2014 us=737507 single_session = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 push_peer_info = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 tls_exit = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 tls_auth_file = 'key.txt'
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_protected_authentication = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_private_mode = 00000000
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_cert_private = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_pin_cache_period = -1
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_id = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 pkcs11_id_management = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 server_network = 0.0.0.0
Mon Aug 25 19:49:39 2014 us=737507 server_netmask = 0.0.0.0
Mon Aug 25 19:49:39 2014 us=737507 server_network_ipv6 = ::
Mon Aug 25 19:49:39 2014 us=737507 server_netbits_ipv6 = 0
Mon Aug 25 19:49:39 2014 us=737507 server_bridge_ip = 192.168.0.1
Mon Aug 25 19:49:39 2014 us=737507 server_bridge_netmask = 255.255.255.0
Mon Aug 25 19:49:39 2014 us=737507 server_bridge_pool_start = 192.168.0.50
Mon Aug 25 19:49:39 2014 us=737507 server_bridge_pool_end = 192.168.0.100
Mon Aug 25 19:49:39 2014 us=737507 push_entry = 'redirect-gateway def1 bypass-dhcp'
Mon Aug 25 19:49:39 2014 us=737507 push_entry = 'dhcp-option DNS 208.67.222.222'
Mon Aug 25 19:49:39 2014 us=737507 push_entry = 'dhcp-option DNS 208.67.220.220'
Mon Aug 25 19:49:39 2014 us=737507 push_entry = 'route-gateway 192.168.0.1'
Mon Aug 25 19:49:39 2014 us=737507 push_entry = 'ping 10'
Mon Aug 25 19:49:39 2014 us=737507 push_entry = 'ping-restart 120'
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_pool_defined = ENABLED
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_pool_start = 192.168.0.50
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_pool_end = 192.168.0.100
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_pool_netmask = 255.255.255.0
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_pool_persist_filename = 'ipp.txt'
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_pool_persist_refresh_freq = 600
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_ipv6_pool_defined = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_ipv6_pool_base = ::
Mon Aug 25 19:49:39 2014 us=737507 ifconfig_ipv6_pool_netbits = 0
Mon Aug 25 19:49:39 2014 us=737507 n_bcast_buf = 256
Mon Aug 25 19:49:39 2014 us=737507 tcp_queue_limit = 64
Mon Aug 25 19:49:39 2014 us=737507 real_hash_size = 256
Mon Aug 25 19:49:39 2014 us=737507 virtual_hash_size = 256
Mon Aug 25 19:49:39 2014 us=737507 client_connect_script = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 learn_address_script = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 client_disconnect_script = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 client_config_dir = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 ccd_exclusive = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 tmp_dir = 'C:\Users\Acme\AppData\Local\Temp\'
Mon Aug 25 19:49:39 2014 us=737507 push_ifconfig_defined = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 push_ifconfig_local = 0.0.0.0
Mon Aug 25 19:49:39 2014 us=737507 push_ifconfig_remote_netmask = 0.0.0.0
Mon Aug 25 19:49:39 2014 us=737507 push_ifconfig_ipv6_defined = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 push_ifconfig_ipv6_local = ::/0
Mon Aug 25 19:49:39 2014 us=737507 push_ifconfig_ipv6_remote = ::
Mon Aug 25 19:49:39 2014 us=737507 enable_c2c = ENABLED
Mon Aug 25 19:49:39 2014 us=737507 duplicate_cn = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 cf_max = 0
Mon Aug 25 19:49:39 2014 us=737507 cf_per = 0
Mon Aug 25 19:49:39 2014 us=737507 max_clients = 10
Mon Aug 25 19:49:39 2014 us=737507 max_routes_per_client = 256
Mon Aug 25 19:49:39 2014 us=737507 auth_user_pass_verify_script = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 auth_user_pass_verify_script_via_file = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 client = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 pull = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 auth_user_pass_file = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 show_net_up = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 route_method = 0
Mon Aug 25 19:49:39 2014 us=737507 ip_win32_defined = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 ip_win32_type = 3
Mon Aug 25 19:49:39 2014 us=737507 dhcp_masq_offset = 0
Mon Aug 25 19:49:39 2014 us=737507 dhcp_lease_time = 31536000
Mon Aug 25 19:49:39 2014 us=737507 tap_sleep = 10
Mon Aug 25 19:49:39 2014 us=737507 dhcp_options = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 dhcp_renew = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 dhcp_pre_release = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 dhcp_release = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 domain = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 netbios_scope = '[UNDEF]'
Mon Aug 25 19:49:39 2014 us=737507 netbios_node_type = 0
Mon Aug 25 19:49:39 2014 us=737507 disable_nbt = DISABLED
Mon Aug 25 19:49:39 2014 us=737507 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Mon Aug 25 19:49:39 2014 us=737507 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Mon Aug 25 19:49:39 2014 us=737507 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Aug 25 19:49:39 2014 us=737507 Need hold release from management interface, waiting...
Mon Aug 25 19:49:40 2014 us=111908 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Aug 25 19:49:40 2014 us=221108 MANAGEMENT: CMD 'state on'
Mon Aug 25 19:49:40 2014 us=221108 MANAGEMENT: CMD 'log all on'
Mon Aug 25 19:49:40 2014 us=314708 MANAGEMENT: CMD 'hold off'
Mon Aug 25 19:49:40 2014 us=314708 MANAGEMENT: CMD 'hold release'
Mon Aug 25 19:49:40 2014 us=345908 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Mon Aug 25 19:49:40 2014 us=361508 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Mon Aug 25 19:49:40 2014 us=611108 Diffie-Hellman initialized with 1024 bit key
Mon Aug 25 19:49:40 2014 us=657909 Control Channel Authentication: using 'key.txt' as a OpenVPN static key file
Mon Aug 25 19:49:40 2014 us=657909 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 19:49:40 2014 us=657909 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 19:49:40 2014 us=657909 TLS-Auth MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Aug 25 19:49:40 2014 us=657909 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Aug 25 19:49:40 2014 us=657909 open_tun, tt->ipv6=0
Mon Aug 25 19:49:40 2014 us=673509 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{C01B801F-1512-4CFD-B900-EC1906298C4E}.tap
Mon Aug 25 19:49:40 2014 us=673509 TAP-Windows Driver Version 9.21
Mon Aug 25 19:49:40 2014 us=673509 TAP-Windows MTU=1500
Mon Aug 25 19:49:40 2014 us=673509 Sleeping for 10 seconds...
Mon Aug 25 19:49:50 2014 us=813526 NOTE: FlushIpNetTable failed on interface [63] {C01B801F-1512-4CFD-B900-EC1906298C4E} (status=1168) : Impossibile trovare elemento.
Mon Aug 25 19:49:50 2014 us=813526 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Aug 25 19:49:50 2014 us=813526 UDPv4 link local (bound): [undef]
Mon Aug 25 19:49:50 2014 us=813526 UDPv4 link remote: [undef]
Mon Aug 25 19:49:50 2014 us=813526 MULTI: multi_init called, r=256 v=256
Mon Aug 25 19:49:50 2014 us=829126 IFCONFIG POOL: base=192.168.0.50 size=51, ipv6=0
Mon Aug 25 19:49:50 2014 us=829126 ifconfig_pool_read(), in='client1,192.168.0.50', TODO: IPv6
Mon Aug 25 19:49:50 2014 us=829126 succeeded -> ifconfig_pool_set()
Mon Aug 25 19:49:50 2014 us=829126 IFCONFIG POOL LIST
Mon Aug 25 19:49:50 2014 us=829126 client1,192.168.0.50
Mon Aug 25 19:49:50 2014 us=829126 Initialization Sequence Completed
Mon Aug 25 19:49:50 2014 us=829126 MANAGEMENT: >STATE:1408988990,CONNECTED,SUCCESS,,
Mon Aug 25 19:50:01 2014 us=156345 MULTI: multi_create_instance called
Mon Aug 25 19:50:01 2014 us=156345 217.200.202.14:32400 Re-using SSL/TLS context
Mon Aug 25 19:50:01 2014 us=156345 217.200.202.14:32400 LZO compression initialized
Mon Aug 25 19:50:01 2014 us=171945 217.200.202.14:32400 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Aug 25 19:50:01 2014 us=171945 217.200.202.14:32400 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Aug 25 19:50:01 2014 us=171945 217.200.202.14:32400 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Aug 25 19:50:01 2014 us=171945 217.200.202.14:32400 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Aug 25 19:50:01 2014 us=171945 217.200.202.14:32400 Local Options hash (VER=V4): '360696c5'
Mon Aug 25 19:50:01 2014 us=171945 217.200.202.14:32400 Expected Remote Options hash (VER=V4): '13a273ba'
Mon Aug 25 19:50:01 2014 us=171945 217.200.202.14:32400 TLS: Initial packet from [AF_INET]217.200.202.14:32400, sid=4ef500ea 8ee07aef
Mon Aug 25 19:50:10 2014 us=48360 217.200.202.14:32400 VERIFY OK: depth=1, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=GabrieleVPN, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 19:50:10 2014 us=48360 217.200.202.14:32400 VERIFY OK: depth=0, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=client1, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 19:50:12 2014 us=60764 217.200.202.14:32400 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 19:50:12 2014 us=60764 217.200.202.14:32400 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 19:50:12 2014 us=60764 217.200.202.14:32400 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 19:50:12 2014 us=60764 217.200.202.14:32400 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 19:50:12 2014 us=700365 217.200.202.14:32400 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Aug 25 19:50:12 2014 us=700365 217.200.202.14:32400 [client1] Peer Connection Initiated with [AF_INET]217.200.202.14:32400
Mon Aug 25 19:50:12 2014 us=700365 client1/217.200.202.14:32400 MULTI_sva: pool returned IPv4=192.168.0.50, IPv6=(Not enabled)
Mon Aug 25 19:50:14 2014 us=400768 client1/217.200.202.14:32400 PUSH: Received control message: 'PUSH_REQUEST'
Mon Aug 25 19:50:14 2014 us=400768 client1/217.200.202.14:32400 send_push_reply(): safe_cap=940
Mon Aug 25 19:50:14 2014 us=400768 client1/217.200.202.14:32400 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 192.168.0.1,ping 10,ping-restart 120,ifconfig 192.168.0.50 255.255.255.0' (status=1)
Mon Aug 25 19:50:15 2014 us=586370 client1/217.200.202.14:32400 MULTI: Learn: 00:16:3e:66:7d:aa -> client1/217.200.202.14:32400
Mon Aug 25 19:54:16 2014 us=918794 client1/217.200.202.14:32400 [client1] Inactivity timeout (--ping-restart), restarting
Mon Aug 25 19:54:16 2014 us=918794 client1/217.200.202.14:32400 SIGUSR1[soft,ping-restart] received, client-instance restarting
Mon Aug 25 19:56:24 2014 us=434418 MULTI: multi_create_instance called
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 Re-using SSL/TLS context
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 LZO compression initialized
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 Local Options hash (VER=V4): '360696c5'
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 Expected Remote Options hash (VER=V4): '13a273ba'
Mon Aug 25 19:56:24 2014 us=434418 217.200.202.14:32400 TLS: Initial packet from [AF_INET]217.200.202.14:32400, sid=0ba530bf f8b19b1a
Mon Aug 25 19:56:31 2014 us=409630 217.200.202.14:32400 VERIFY OK: depth=1, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=GabrieleVPN, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 19:56:31 2014 us=409630 217.200.202.14:32400 VERIFY OK: depth=0, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=client1, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 19:56:32 2014 us=111631 217.200.202.14:32400 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 19:56:32 2014 us=111631 217.200.202.14:32400 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 19:56:32 2014 us=111631 217.200.202.14:32400 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 19:56:32 2014 us=111631 217.200.202.14:32400 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 19:56:32 2014 us=470432 217.200.202.14:32400 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Aug 25 19:56:32 2014 us=470432 217.200.202.14:32400 [client1] Peer Connection Initiated with [AF_INET]217.200.202.14:32400
Mon Aug 25 19:56:32 2014 us=470432 client1/217.200.202.14:32400 MULTI_sva: pool returned IPv4=192.168.0.50, IPv6=(Not enabled)
Mon Aug 25 19:56:34 2014 us=186435 client1/217.200.202.14:32400 PUSH: Received control message: 'PUSH_REQUEST'
Mon Aug 25 19:56:34 2014 us=186435 client1/217.200.202.14:32400 send_push_reply(): safe_cap=940
Mon Aug 25 19:56:34 2014 us=186435 client1/217.200.202.14:32400 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 192.168.0.1,ping 10,ping-restart 120,ifconfig 192.168.0.50 255.255.255.0' (status=1)
Mon Aug 25 19:56:35 2014 us=496837 client1/217.200.202.14:32400 MULTI: Learn: 00:16:3e:66:7d:aa -> client1/217.200.202.14:32400
Mon Aug 25 20:00:35 2014 us=940060 client1/217.200.202.14:32400 [client1] Inactivity timeout (--ping-restart), restarting
Mon Aug 25 20:00:35 2014 us=940060 client1/217.200.202.14:32400 SIGUSR1[soft,ping-restart] received, client-instance restarting
Mon Aug 25 20:02:32 2014 us=409864 MULTI: multi_create_instance called
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 Re-using SSL/TLS context
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 LZO compression initialized
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 Local Options hash (VER=V4): '360696c5'
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 Expected Remote Options hash (VER=V4): '13a273ba'
Mon Aug 25 20:02:32 2014 us=409864 217.200.202.14:32400 TLS: Initial packet from [AF_INET]217.200.202.14:32400, sid=7d06369c b2b71440
Mon Aug 25 20:02:42 2014 us=755002 217.200.202.14:32400 VERIFY OK: depth=1, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=GabrieleVPN, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 20:02:42 2014 us=755002 217.200.202.14:32400 VERIFY OK: depth=0, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=client1, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 20:02:44 2014 us=393005 217.200.202.14:32400 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 20:02:44 2014 us=393005 217.200.202.14:32400 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 20:02:44 2014 us=393005 217.200.202.14:32400 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 20:02:44 2014 us=393005 217.200.202.14:32400 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 20:02:45 2014 us=344606 217.200.202.14:32400 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Aug 25 20:02:45 2014 us=344606 217.200.202.14:32400 [client1] Peer Connection Initiated with [AF_INET]217.200.202.14:32400
Mon Aug 25 20:02:45 2014 us=344606 client1/217.200.202.14:32400 MULTI_sva: pool returned IPv4=192.168.0.50, IPv6=(Not enabled)
Mon Aug 25 20:02:47 2014 us=606610 client1/217.200.202.14:32400 PUSH: Received control message: 'PUSH_REQUEST'
Mon Aug 25 20:02:47 2014 us=606610 client1/217.200.202.14:32400 send_push_reply(): safe_cap=940
Mon Aug 25 20:02:47 2014 us=606610 client1/217.200.202.14:32400 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 192.168.0.1,ping 10,ping-restart 120,ifconfig 192.168.0.50 255.255.255.0' (status=1)
Mon Aug 25 20:02:48 2014 us=651812 client1/217.200.202.14:32400 MULTI: Learn: 00:16:3e:66:7d:aa -> client1/217.200.202.14:32400
Mon Aug 25 20:06:48 2014 us=927959 client1/217.200.202.14:32400 [client1] Inactivity timeout (--ping-restart), restarting
Mon Aug 25 20:06:48 2014 us=927959 client1/217.200.202.14:32400 SIGUSR1[soft,ping-restart] received, client-instance restarting
Mon Aug 25 20:07:25 2014 us=213623 MULTI: multi_create_instance called
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 Re-using SSL/TLS context
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 LZO compression initialized
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 Local Options hash (VER=V4): '360696c5'
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 Expected Remote Options hash (VER=V4): '13a273ba'
Mon Aug 25 20:07:25 2014 us=213623 217.200.202.14:32400 TLS: Initial packet from [AF_INET]217.200.202.14:32400, sid=1520023e 7ad28142
Mon Aug 25 20:07:33 2014 us=965238 217.200.202.14:32400 VERIFY OK: depth=1, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=GabrieleVPN, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 20:07:33 2014 us=965238 217.200.202.14:32400 VERIFY OK: depth=0, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=client1, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 20:07:35 2014 us=634441 217.200.202.14:32400 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 20:07:35 2014 us=634441 217.200.202.14:32400 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 20:07:35 2014 us=634441 217.200.202.14:32400 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 20:07:35 2014 us=634441 217.200.202.14:32400 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 20:07:36 2014 us=227242 217.200.202.14:32400 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Aug 25 20:07:36 2014 us=227242 217.200.202.14:32400 [client1] Peer Connection Initiated with [AF_INET]217.200.202.14:32400
Mon Aug 25 20:07:36 2014 us=227242 client1/217.200.202.14:32400 MULTI_sva: pool returned IPv4=192.168.0.50, IPv6=(Not enabled)
Mon Aug 25 20:07:45 2014 us=103657 client1/217.200.202.14:32400 PUSH: Received control message: 'PUSH_REQUEST'
Mon Aug 25 20:07:45 2014 us=103657 client1/217.200.202.14:32400 send_push_reply(): safe_cap=940
Mon Aug 25 20:07:45 2014 us=103657 client1/217.200.202.14:32400 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 192.168.0.1,ping 10,ping-restart 120,ifconfig 192.168.0.50 255.255.255.0' (status=1)
Mon Aug 25 20:07:45 2014 us=431258 client1/217.200.202.14:32400 PUSH: Received control message: 'PUSH_REQUEST'
Mon Aug 25 20:10:01 2014 us=791098 client1/217.200.202.14:32400 MULTI: Learn: 00:16:3e:66:7d:aa -> client1/217.200.202.14:32400
Mon Aug 25 20:14:01 2014 us=735119 client1/217.200.202.14:32400 [client1] Inactivity timeout (--ping-restart), restarting
Mon Aug 25 20:14:01 2014 us=735119 client1/217.200.202.14:32400 SIGUSR1[soft,ping-restart] received, client-instance restarting
here the client1.log:
Mon Aug 25 16:26:09 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Mon Aug 25 16:26:09 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Mon Aug 25 16:26:09 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Aug 25 16:26:09 2014 Need hold release from management interface, waiting...
Mon Aug 25 16:26:10 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Aug 25 16:26:10 2014 MANAGEMENT: CMD 'state on'
Mon Aug 25 16:26:10 2014 MANAGEMENT: CMD 'log all on'
Mon Aug 25 16:26:10 2014 MANAGEMENT: CMD 'hold off'
Mon Aug 25 16:26:10 2014 MANAGEMENT: CMD 'hold release'
Mon Aug 25 16:26:11 2014 Control Channel Authentication: using 'key.txt' as a OpenVPN static key file
Mon Aug 25 16:26:11 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 16:26:11 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 16:26:11 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Aug 25 16:26:11 2014 MANAGEMENT: >STATE:1408976771,RESOLVE,,,
Mon Aug 25 16:26:14 2014 UDPv4 link local: [undef]
Mon Aug 25 16:26:14 2014 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:35811
Mon Aug 25 16:26:14 2014 MANAGEMENT: >STATE:1408976774,WAIT,,,
Mon Aug 25 16:26:16 2014 MANAGEMENT: >STATE:1408976776,AUTH,,,
Mon Aug 25 16:26:16 2014 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:35811, sid=1bddb730 032b2598
Mon Aug 25 16:26:16 2014 VERIFY OK: depth=1, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=GabrieleVPN, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 16:26:17 2014 VERIFY OK: nsCertType=SERVER
Mon Aug 25 16:26:17 2014 VERIFY OK: depth=0, C=IT, ST=VI, L=VI, O=ACME, OU=VPN, CN=GabrieleVPN, name=Gabriele, emailAddress=acme@acme.com
Mon Aug 25 16:26:18 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 16:26:18 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 16:26:18 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 25 16:26:18 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 25 16:26:18 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Aug 25 16:26:18 2014 [GabrieleVPN] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:35811
Mon Aug 25 16:26:19 2014 MANAGEMENT: >STATE:1408976779,GET_CONFIG,,,
Mon Aug 25 16:26:21 2014 SENT CONTROL [GabrieleVPN]: 'PUSH_REQUEST' (status=1)
Mon Aug 25 16:26:21 2014 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route-gateway 192.168.0.2,ping 10,ping-restart 120,ifconfig 192.168.0.50 255.255.255.0'
Mon Aug 25 16:26:21 2014 OPTIONS IMPORT: timers and/or timeouts modified
Mon Aug 25 16:26:21 2014 OPTIONS IMPORT: --ifconfig/up options modified
Mon Aug 25 16:26:21 2014 OPTIONS IMPORT: route options modified
Mon Aug 25 16:26:21 2014 OPTIONS IMPORT: route-related options modified
Mon Aug 25 16:26:21 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Aug 25 16:26:21 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Aug 25 16:26:21 2014 MANAGEMENT: >STATE:1408976781,ASSIGN_IP,,192.168.0.50,
Mon Aug 25 16:26:21 2014 open_tun, tt->ipv6=0
Mon Aug 25 16:26:21 2014 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{6F3DAAC6-6D40-4F43-9AC3-10E894847A53}.tap
Mon Aug 25 16:26:21 2014 TAP-Windows Driver Version 9.21
Mon Aug 25 16:26:21 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.0.50/255.255.255.0 on interface {6F3DAAC6-6D40-4F43-9AC3-10E894847A53} [DHCP-serv: 192.168.0.0, lease-time: 31536000]
Mon Aug 25 16:26:21 2014 NOTE: FlushIpNetTable failed on interface [26] {6F3DAAC6-6D40-4F43-9AC3-10E894847A53} (status=1168) : Impossibile trovare elemento.
Mon Aug 25 16:26:23 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Mon Aug 25 16:26:23 2014 C:\Windows\system32\route.exe ADD xxx.xxx.xxx.xxx MASK 255.255.255.255 192.168.43.1
Mon Aug 25 16:26:23 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Aug 25 16:26:23 2014 C:\Windows\system32\route.exe ADD 192.168.43.1 MASK 255.255.255.255 192.168.43.1 IF 28
Mon Aug 25 16:26:23 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Aug 25 16:26:23 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.0.2
Mon Aug 25 16:26:23 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Aug 25 16:26:23 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.0.2
Mon Aug 25 16:26:23 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Aug 25 16:26:23 2014 MANAGEMENT: >STATE:1408976783,ADD_ROUTES,,,
Mon Aug 25 16:26:23 2014 C:\Windows\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 192.168.0.2
Mon Aug 25 16:26:23 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Aug 25 16:26:23 2014 Initialization Sequence Completed
Mon Aug 25 16:26:23 2014 MANAGEMENT: >STATE:1408976783,CONNECTED,SUCCESS,192.168.0.50,xxx.xxx.xxx.xxx
and this is the route:
===========================================================================
Elenco interfacce
64...02 26 18 d2 23 28 ......MAC Bridge Miniport
1...........................Software Loopback Interface 1
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
57...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================
IPv4 Tabella route
===========================================================================
Route attive:
Indirizzo rete Mask Gateway Interfaccia Metrica
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.2 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.0.0 255.255.255.0 On-link 192.168.0.2 266
192.168.0.2 255.255.255.255 On-link 192.168.0.2 266
192.168.0.255 255.255.255.255 On-link 192.168.0.2 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.0.2 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.0.2 266
===========================================================================
Route permanenti:
Indirizzo rete Mask Indir. gateway Metrica
0.0.0.0 0.0.0.0 192.168.0.1 Predefinito
0.0.0.0 0.0.0.0 192.168.0.1 Predefinito
===========================================================================
IPv6 Tabella route
===========================================================================
Route attive:
Interf Metrica Rete Destinazione Gateway
57 58 ::/0 On-link
1 306 ::1/128 On-link
57 58 2001::/32 On-link
57 306 2001:0:5ef5:79fd:1020:3006:b0ef:49ee/128
On-link
64 266 fe80::/64 On-link
57 306 fe80::/64 On-link
57 306 fe80::1020:3006:b0ef:49ee/128
On-link
64 266 fe80::7533:e8b5:7c0f:6d60/128
On-link
1 306 ff00::/8 On-link
57 306 ff00::/8 On-link
64 266 ff00::/8 On-link
===========================================================================
Route permanenti:
Nessuna
Thank you if anyone can help me... :-)
Best regards,
Gabriele
