Connected to server sucess, but can't ping server

ravipasupuleti

HI,
I have installed openvpn server on ubuntu 14.04. followed all the instructions as mentioned in http://www.instructables.com/id/Host-Your-Own-Virtual-Private-Network-VPN-with-O/#step1 .

we are able to connect to the vpn server and the log shows a local ip address being assigned, but we are unable to ping the server or any other machine on the local LAN. Fire wall is turned off. please help.

Below is the server Config :

;local a.b.c.d

port 1194

;proto tcp
proto udp

dev tap0
;dev tun

;dev-node MyTap

ca ca.crt
cert server.crt
key server.key # This file should be kept secret

dh dh1024.pem

;server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

server-bridge 192.168.1.106 255.255.255.0 192.168.1.150 192.168.1.199

;server-bridge

push "route 192.168.1.1 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248

;client-config-dir ccd
;route 10.9.0.0 255.255.255.252

;learn-address ./script

push "redirect-gateway def1 bypass-dhcp"

push "dhcp-option DNS 209.18.47.61"
push "dhcp-option DNS 209.18.47.62"

;client-to-client

;duplicate-cn

keepalive 10 120

tls-auth ta.key 0 # This file is secret

;cipher BF-CBC # Blowfish (default)
cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES

comp-lzo

;max-clients 100

user nobody
group nogroup

persist-key
persist-tun

;log openvpn.log
;log-append openvpn.log

verb 3

;mute 20

up "/etc/openvpn/up.sh br0"
down "/etc/openvpn/down.sh br0"
push "explicit-exit-notify 3"

Below is the Client Config :

client

dev tap0
;dev tun

;dev-node MyTap

;proto tcp
proto udp

remote ubuntu.orclworld.com 1194
;remote my-server-2 1194

;remote-random

resolv-retry infinite

nobind

;user nobody
;group nobody

persist-key
persist-tun

;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

;mute-replay-warnings

ca ca.crt
cert client.crt
key client.key

ns-cert-type server

tls-auth ta.key 1

cipher AES-128-CBC

comp-lzo

verb 3

;mute 20

client log :

Tue Sep 02 18:49:16 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Tue Sep 02 18:49:16 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Tue Sep 02 18:49:16 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 02 18:49:16 2014 Need hold release from management interface, waiting...
Tue Sep 02 18:49:17 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 02 18:49:17 2014 MANAGEMENT: CMD 'state on'
Tue Sep 02 18:49:17 2014 MANAGEMENT: CMD 'log all on'
Tue Sep 02 18:49:17 2014 MANAGEMENT: CMD 'hold off'
Tue Sep 02 18:49:17 2014 MANAGEMENT: CMD 'hold release'
Tue Sep 02 18:49:17 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Sep 02 18:49:17 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 02 18:49:17 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 02 18:49:17 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Sep 02 18:49:17 2014 MANAGEMENT: >STATE:1409698157,RESOLVE,,,
Tue Sep 02 18:49:17 2014 UDPv4 link local: [undef]
Tue Sep 02 18:49:17 2014 UDPv4 link remote: [AF_INET]174.98.141.242:1194
Tue Sep 02 18:49:17 2014 MANAGEMENT: >STATE:1409698157,WAIT,,,
Tue Sep 02 18:49:17 2014 MANAGEMENT: >STATE:1409698157,AUTH,,,
Tue Sep 02 18:49:17 2014 TLS: Initial packet from [AF_INET]174.98.141.242:1194, sid=2fe05e5a 23824f4c
Tue Sep 02 18:49:18 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Tue Sep 02 18:49:18 2014 VERIFY OK: nsCertType=SERVER
Tue Sep 02 18:49:18 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Tue Sep 02 18:49:19 2014 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Sep 02 18:49:19 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 02 18:49:19 2014 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Sep 02 18:49:19 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Sep 02 18:49:19 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Sep 02 18:49:19 2014 [changeme] Peer Connection Initiated with [AF_INET]174.98.141.242:1194
Tue Sep 02 18:49:20 2014 MANAGEMENT: >STATE:1409698160,GET_CONFIG,,,
Tue Sep 02 18:49:22 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Tue Sep 02 18:49:22 2014 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.1 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 209.18.47.61,dhcp-option DNS 209.18.47.62,explicit-exit-notify 3,route-gateway 192.168.1.1,ping 10,ping-restart 120,ifconfig 192.168.1.150 255.255.255.0'
Tue Sep 02 18:49:22 2014 OPTIONS IMPORT: timers and/or timeouts modified
Tue Sep 02 18:49:22 2014 OPTIONS IMPORT: explicit notify parm(s) modified
Tue Sep 02 18:49:22 2014 OPTIONS IMPORT: --ifconfig/up options modified
Tue Sep 02 18:49:22 2014 OPTIONS IMPORT: route options modified
Tue Sep 02 18:49:22 2014 OPTIONS IMPORT: route-related options modified
Tue Sep 02 18:49:22 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Sep 02 18:49:22 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Sep 02 18:49:22 2014 MANAGEMENT: >STATE:1409698162,ASSIGN_IP,,192.168.1.150,
Tue Sep 02 18:49:22 2014 open_tun, tt->ipv6=0
Tue Sep 02 18:49:22 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{48D19F96-8CF8-49A2-A8AA-F7F41077C9B8}.tap
Tue Sep 02 18:49:22 2014 TAP-Windows Driver Version 9.21
Tue Sep 02 18:49:22 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.150/255.255.255.0 on interface {48D19F96-8CF8-49A2-A8AA-F7F41077C9B8} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Tue Sep 02 18:49:22 2014 Successful ARP Flush on interface [20] {48D19F96-8CF8-49A2-A8AA-F7F41077C9B8}
Tue Sep 02 18:49:27 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Sep 02 18:49:27 2014 C:\windows\system32\route.exe ADD 174.98.141.242 MASK 255.255.255.255 10.1.163.10
Tue Sep 02 18:49:27 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Tue Sep 02 18:49:27 2014 Route addition via IPAPI succeeded [adaptive]
Tue Sep 02 18:49:27 2014 C:\windows\system32\route.exe ADD 10.1.163.10 MASK 255.255.255.255 10.1.163.10 IF 11
Tue Sep 02 18:49:27 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Tue Sep 02 18:49:27 2014 Route addition via IPAPI succeeded [adaptive]
Tue Sep 02 18:49:27 2014 C:\windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.1.1
Tue Sep 02 18:49:27 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Sep 02 18:49:27 2014 Route addition via IPAPI succeeded [adaptive]
Tue Sep 02 18:49:27 2014 C:\windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.1.1
Tue Sep 02 18:49:27 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Sep 02 18:49:27 2014 Route addition via IPAPI succeeded [adaptive]
Tue Sep 02 18:49:27 2014 MANAGEMENT: >STATE:1409698167,ADD_ROUTES,,,
Tue Sep 02 18:49:27 2014 C:\windows\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.0 192.168.1.1
Tue Sep 02 18:49:27 2014 Warning: address 192.168.1.1 is not a network address in relation to netmask 255.255.255.0
Tue Sep 02 18:49:27 2014 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect. [status=87 if_index=20]
Tue Sep 02 18:49:27 2014 Route addition via IPAPI failed [adaptive]
Tue Sep 02 18:49:27 2014 Route addition fallback to route.exe
Tue Sep 02 18:49:27 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Sep 02 18:49:27 2014 Initialization Sequence Completed
Tue Sep 02 18:49:27 2014 MANAGEMENT: >STATE:1409698167,CONNECTED,SUCCESS,192.168.1.150,174.98.141.242
Tue Sep 02 18:51:12 2014 SIGTERM received, sending exit notification to peer
Tue Sep 02 18:51:15 2014 C:\windows\system32\route.exe DELETE 192.168.1.1 MASK 255.255.255.0 192.168.1.1
Tue Sep 02 18:51:15 2014 ROUTE: route deletion failed using DeleteIpForwardEntry: The parameter is incorrect.
Tue Sep 02 18:51:15 2014 Route deletion via IPAPI failed [adaptive]
Tue Sep 02 18:51:15 2014 Route deletion fallback to route.exe
Tue Sep 02 18:51:15 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Sep 02 18:51:15 2014 C:\windows\system32\route.exe DELETE 174.98.141.242 MASK 255.255.255.255 10.1.163.10
Tue Sep 02 18:51:15 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Sep 02 18:51:15 2014 C:\windows\system32\route.exe DELETE 10.1.163.10 MASK 255.255.255.255 10.1.163.10
Tue Sep 02 18:51:15 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Sep 02 18:51:15 2014 C:\windows\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 192.168.1.1
Tue Sep 02 18:51:15 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Sep 02 18:51:15 2014 C:\windows\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 192.168.1.1
Tue Sep 02 18:51:15 2014 Route deletion via IPAPI succeeded [adaptive]
Tue Sep 02 18:51:15 2014 Closing TUN/TAP interface

ravipasupuleti

Hi Traffic,
Thank you for the help. I have done all the modifications as suggested. Successfully connected from client to server, but unable to ping the server or the machines on the LAN. can you please suggest if I am missing anything else.

Client Log :

Wed Sep 03 23:57:58 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Wed Sep 03 23:57:58 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Wed Sep 03 23:57:58 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Sep 03 23:57:58 2014 Need hold release from management interface, waiting...
Wed Sep 03 23:57:58 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Sep 03 23:57:58 2014 MANAGEMENT: CMD 'state on'
Wed Sep 03 23:57:58 2014 MANAGEMENT: CMD 'log all on'
Wed Sep 03 23:57:58 2014 MANAGEMENT: CMD 'hold off'
Wed Sep 03 23:57:58 2014 MANAGEMENT: CMD 'hold release'
Wed Sep 03 23:57:58 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Sep 03 23:57:58 2014 MANAGEMENT: >STATE:1409803078,RESOLVE,,,
Wed Sep 03 23:57:58 2014 UDPv4 link local: [undef]
Wed Sep 03 23:57:58 2014 UDPv4 link remote: [AF_INET]XXX.XX.XXX.XXX:1194
Wed Sep 03 23:57:58 2014 MANAGEMENT: >STATE:1409803078,WAIT,,,
Wed Sep 03 23:57:58 2014 MANAGEMENT: >STATE:1409803078,AUTH,,,
Wed Sep 03 23:57:58 2014 TLS: Initial packet from [AF_INET]XXX.XX.XXX.XXX:1194, sid=1b65394e 91f08976
Wed Sep 03 23:58:05 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Wed Sep 03 23:58:05 2014 VERIFY OK: nsCertType=SERVER
Wed Sep 03 23:58:05 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Wed Sep 03 23:58:07 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 03 23:58:07 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 03 23:58:07 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Sep 03 23:58:07 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 03 23:58:07 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Sep 03 23:58:07 2014 [changeme] Peer Connection Initiated with [AF_INET]XXX.XX.XXX.XXX:1194
Wed Sep 03 23:58:08 2014 MANAGEMENT: >STATE:1409803088,GET_CONFIG,,,
Wed Sep 03 23:58:09 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Wed Sep 03 23:58:09 2014 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.1.1,ping 10,ping-restart 120,ifconfig 192.168.1.151 255.255.255.0'
Wed Sep 03 23:58:09 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Sep 03 23:58:09 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Sep 03 23:58:09 2014 OPTIONS IMPORT: route-related options modified
Wed Sep 03 23:58:09 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Sep 03 23:58:09 2014 MANAGEMENT: >STATE:1409803089,ASSIGN_IP,,192.168.1.151,
Wed Sep 03 23:58:09 2014 open_tun, tt->ipv6=0
Wed Sep 03 23:58:09 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{B3AE9FF4-2713-4057-B920-68B45ECD707C}.tap
Wed Sep 03 23:58:09 2014 TAP-Windows Driver Version 9.21
Wed Sep 03 23:58:09 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.151/255.255.255.0 on interface {B3AE9FF4-2713-4057-B920-68B45ECD707C} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Wed Sep 03 23:58:09 2014 Successful ARP Flush on interface [19] {B3AE9FF4-2713-4057-B920-68B45ECD707C}
Wed Sep 03 23:58:14 2014 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Wed Sep 03 23:58:14 2014 Initialization Sequence Completed
Wed Sep 03 23:58:14 2014 MANAGEMENT: >STATE:1409803094,CONNECTED,SUCCESS,192.168.1.151,XXX.XX.XXX.XXX

ravipasupuleti

Hi,
I have created two scripts bridge-start.sh and bridge-stop.sh as mentioned in the link you sent me and modified the configuration files accordingly on both server and host .

ravipasupuleti

please find the details below.

server config :

;local a.b.c.d

port 1194

# TCP or UDP server?
;proto tcp
proto udp

dev tap0
;dev tun

;dev-node MyTap

ca ca.crt
cert server.crt
key server.key # This file should be kept secret

dh dh1024.pem

;server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

server-bridge 192.168.1.1 255.255.255.0 192.168.1.151 192.168.1.199

;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248

;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
# Then add this line to ccd/Thelonious:
# ifconfig-push 10.9.0.1 10.9.0.2

;learn-address ./script

;push "redirect-gateway"

;push "dhcp-option DNS 10.8.0.1"
;push "dhcp-option WINS 10.8.0.1"

;client-to-client

;duplicate-cn

keepalive 10 120

# openvpn --genkey --secret ta.key

;tls-auth ta.key 0 # This file is secret

;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES

comp-lzo

;max-clients 100

;user nobody
;group nobody

persist-key
persist-tun

status openvpn-status.log

;log openvpn.log
;log-append openvpn.log

verb 3

;mute 20

client config :

client

dev tap0
;dev tun

;dev-node MyTap

;proto tcp
proto udp

remote xxxxx.zzzzzzz.com 1194
;remote my-server-2 1194

;remote-random

resolv-retry infinite

nobind

;user nobody
;group nobody

persist-key
persist-tun

;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

;mute-replay-warnings

ca ca.crt
cert client.crt
key client.key

ns-cert-type server

tls-auth ta.key 1

cipher AES-128-CBC

comp-lzo

verb 3

;mute 20

ravipasupuleti

Sorry my bad, please find the ifconfig inforamtion below.

ubuntu@ubuntu:~$ ifconfig
br0 Link encap:Ethernet HWaddr 08:00:27:00:3d:b2
inet addr:192.168.1.106 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe00:3db2/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:26948 errors:0 dropped:0 overruns:0 frame:0
TX packets:439 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3493592 (3.4 MB) TX bytes:66796 (66.7 KB)

eth0 Link encap:Ethernet HWaddr 08:00:27:00:3d:b2
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:39849 errors:0 dropped:2 overruns:0 frame:0
TX packets:445 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:8075284 (8.0 MB) TX bytes:67520 (67.5 KB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:220 errors:0 dropped:0 overruns:0 frame:0
TX packets:220 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:15200 (15.2 KB) TX bytes:15200 (15.2 KB)

ravipasupuleti

yes I am running the bridge-stop.sh and bridge-start.sh before starting the openvpn server.

Could you please point me to step-by-step openvpn server setup (if any ) will try to replicate it to make sure I am not missing anything.

Below id the client ipconfig :

Windows IP Configuration

Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Wireless LAN adapter Wireless Network Connection 3:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::6984:404c:12d1:6928%14
IPv4 Address. . . . . . . . . . . : 192.168.1.37
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : triad.rr.com

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.{D4A9B80B-CD16-45E7-964A-5FA70E7FAE7C}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.triad.rr.com:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.{F375D683-7D08-4AA4-9235-03AE77FDD62B}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.lan:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : lan

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:6ab8:107c:37be:3f57:feda
Link-local IPv6 Address . . . . . : fe80::107c:37be:3f57:feda%17
Default Gateway . . . . . . . . . : ::

Tunnel adapter isatap.{CFE7DC99-B557-41A9-893F-53A503B62410}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.{B3AE9FF4-2713-4057-B920-68B45ECD707C}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Below is the client ipconfig after successful connection to openvpn server :

Windows IP Configuration

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::249f:26b1:f043:c99b%19
IPv4 Address. . . . . . . . . . . : 192.168.1.151
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :

Wireless LAN adapter Wireless Network Connection 3:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : lan
Link-local IPv6 Address . . . . . : fe80::6984:404c:12d1:6928%14
IPv4 Address. . . . . . . . . . . : 192.168.1.37
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : triad.rr.com

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.{F375D683-7D08-4AA4-9235-03AE77FDD62B}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.{CFE7DC99-B557-41A9-893F-53A503B62410}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter isatap.{B3AE9FF4-2713-4057-B920-68B45ECD707C}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:90d7:308d:305c:3f57:feda
Link-local IPv6 Address . . . . . : fe80::308d:305c:3f57:feda%17
Default Gateway . . . . . . . . . : ::

Tunnel adapter isatap.lan:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : lan

Below is the client log after successful connection to openvpn server :

Fri Sep 05 07:57:41 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 7 2014
Fri Sep 05 07:57:41 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Fri Sep 05 07:57:41 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Sep 05 07:57:41 2014 Need hold release from management interface, waiting...
Fri Sep 05 07:57:41 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Sep 05 07:57:41 2014 MANAGEMENT: CMD 'state on'
Fri Sep 05 07:57:41 2014 MANAGEMENT: CMD 'log all on'
Fri Sep 05 07:57:41 2014 MANAGEMENT: CMD 'hold off'
Fri Sep 05 07:57:41 2014 MANAGEMENT: CMD 'hold release'
Fri Sep 05 07:57:41 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Sep 05 07:57:41 2014 MANAGEMENT: >STATE:1409918261,RESOLVE,,,
Fri Sep 05 07:57:42 2014 UDPv4 link local: [undef]
Fri Sep 05 07:57:42 2014 UDPv4 link remote: [AF_INET]174.98.141.242:1194
Fri Sep 05 07:57:42 2014 MANAGEMENT: >STATE:1409918262,WAIT,,,
Fri Sep 05 07:57:42 2014 MANAGEMENT: >STATE:1409918262,AUTH,,,
Fri Sep 05 07:57:42 2014 TLS: Initial packet from [AF_INET]174.98.141.242:1194, sid=b7d2f1b2 c73c2026
Fri Sep 05 07:57:43 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 07:57:43 2014 VERIFY OK: nsCertType=SERVER
Fri Sep 05 07:57:43 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 07:57:44 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 07:57:44 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 07:57:44 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 07:57:44 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 07:57:44 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Sep 05 07:57:44 2014 [changeme] Peer Connection Initiated with [AF_INET]174.98.141.242:1194
Fri Sep 05 07:57:45 2014 MANAGEMENT: >STATE:1409918265,GET_CONFIG,,,
Fri Sep 05 07:57:46 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 07:57:47 2014 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.1.1,ping 10,ping-restart 120,ifconfig 192.168.1.151 255.255.255.0'
Fri Sep 05 07:57:47 2014 OPTIONS IMPORT: timers and/or timeouts modified
Fri Sep 05 07:57:47 2014 OPTIONS IMPORT: --ifconfig/up options modified
Fri Sep 05 07:57:47 2014 OPTIONS IMPORT: route-related options modified
Fri Sep 05 07:57:47 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Sep 05 07:57:47 2014 MANAGEMENT: >STATE:1409918267,ASSIGN_IP,,192.168.1.151,
Fri Sep 05 07:57:47 2014 open_tun, tt->ipv6=0
Fri Sep 05 07:57:47 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{B3AE9FF4-2713-4057-B920-68B45ECD707C}.tap
Fri Sep 05 07:57:47 2014 TAP-Windows Driver Version 9.21
Fri Sep 05 07:57:47 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.151/255.255.255.0 on interface {B3AE9FF4-2713-4057-B920-68B45ECD707C} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Fri Sep 05 07:57:47 2014 Successful ARP Flush on interface [19] {B3AE9FF4-2713-4057-B920-68B45ECD707C}
Fri Sep 05 07:57:52 2014 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Fri Sep 05 07:57:52 2014 Initialization Sequence Completed
Fri Sep 05 07:57:52 2014 MANAGEMENT: >STATE:1409918272,CONNECTED,SUCCESS,192.168.1.151,174.98.141.242
Fri Sep 05 07:59:47 2014 [changeme] Inactivity timeout (--ping-restart), restarting
Fri Sep 05 07:59:47 2014 SIGUSR1[soft,ping-restart] received, process restarting
Fri Sep 05 07:59:47 2014 MANAGEMENT: >STATE:1409918387,RECONNECTING,ping-restart,,
Fri Sep 05 07:59:47 2014 Restart pause, 2 second(s)
Fri Sep 05 07:59:49 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Sep 05 07:59:49 2014 MANAGEMENT: >STATE:1409918389,RESOLVE,,,
Fri Sep 05 07:59:53 2014 UDPv4 link local: [undef]
Fri Sep 05 07:59:53 2014 UDPv4 link remote: [AF_INET]174.98.141.242:1194
Fri Sep 05 07:59:53 2014 MANAGEMENT: >STATE:1409918393,WAIT,,,
Fri Sep 05 07:59:53 2014 MANAGEMENT: >STATE:1409918393,AUTH,,,
Fri Sep 05 07:59:53 2014 TLS: Initial packet from [AF_INET]174.98.141.242:1194, sid=fd59dfd6 1c84316f
Fri Sep 05 07:59:54 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 07:59:54 2014 VERIFY OK: nsCertType=SERVER
Fri Sep 05 07:59:54 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 07:59:55 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 07:59:55 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 07:59:55 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 07:59:55 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 07:59:55 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Sep 05 07:59:55 2014 [changeme] Peer Connection Initiated with [AF_INET]174.98.141.242:1194
Fri Sep 05 07:59:57 2014 MANAGEMENT: >STATE:1409918397,GET_CONFIG,,,
Fri Sep 05 07:59:58 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:03 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:08 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:13 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:18 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:23 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:28 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:33 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:38 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:43 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:48 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:53 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:00:58 2014 No reply from server after sending 12 push requests
Fri Sep 05 08:00:58 2014 SIGUSR1[soft,no-push-reply] received, process restarting
Fri Sep 05 08:00:58 2014 MANAGEMENT: >STATE:1409918458,RECONNECTING,no-push-reply,,
Fri Sep 05 08:00:58 2014 Restart pause, 2 second(s)
Fri Sep 05 08:01:00 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Sep 05 08:01:00 2014 MANAGEMENT: >STATE:1409918460,RESOLVE,,,
Fri Sep 05 08:01:00 2014 UDPv4 link local: [undef]
Fri Sep 05 08:01:00 2014 UDPv4 link remote: [AF_INET]174.98.141.242:1194
Fri Sep 05 08:01:00 2014 MANAGEMENT: >STATE:1409918460,WAIT,,,
Fri Sep 05 08:01:00 2014 MANAGEMENT: >STATE:1409918460,AUTH,,,
Fri Sep 05 08:01:00 2014 TLS: Initial packet from [AF_INET]174.98.141.242:1194, sid=cd7a526a 5fda7681
Fri Sep 05 08:01:01 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 08:01:01 2014 VERIFY OK: nsCertType=SERVER
Fri Sep 05 08:01:01 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 08:01:02 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 08:01:02 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 08:01:02 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 08:01:02 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 08:01:02 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Sep 05 08:01:02 2014 [changeme] Peer Connection Initiated with [AF_INET]174.98.141.242:1194
Fri Sep 05 08:01:03 2014 MANAGEMENT: >STATE:1409918463,GET_CONFIG,,,
Fri Sep 05 08:01:04 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:01:09 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:01:14 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:01:19 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 08:01:24 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)

ravipasupuleti

Hi,
Could you please clarify me the below.

1. change your server side network ID .. to (f.e) 192.168.179.0/24

Do you mean i should change the openvpn server bridge address gateway in server.conf from 192.168.1.1 to something like 192.168.179.0/24

Or do you want me to change the sever side LAN (my router ) gateway address to something like 192.168.179.0 from 192.168.1.1

please suggest. ( sorry for the layman questions. i am trying to understand network configurations and have very little knowledge )

Appreciate your help.

ravipasupuleti

Hi,
I have changed the default gateway as suggested but still unable to ping the machines on local LAN.

i tried looking at the tap adapter properties in my client it shows the gateway as 192.168.0.0 instead of 192.168.169.0 ( not sure why it is showing that way ). Also when i do an ipconfig after connecting to vpn, i see the default gateway not getting populated for this particular adapter

Here are my observations/ config changes . please suggest

/etc/network/interfaces : output

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
#iface eth0 inet dhcp

#These next lines will create a the bridge for OpenVPN

auto br0
iface br0 inet static
address 192.168.169.116
#Be  sure that this IP address is the Internal IP Address of the server
netmask 255.255.0.0
gateway 192.168.169.0
#port forward.
bridge_ports eth0
#This command bridges your ethernet connection for OpenVPN

iface eth0 inet manual
up ifconfig $IFACE 0.0.0.0 up
up ip link set $IFACE promisc on
down ip link set $IFACE promisc off
down ifconfig $IFACE down

server ifconfig

ubuntu@ubuntu:/etc/openvpn$ ifconfig
br0       Link encap:Ethernet  HWaddr 08:00:27:00:3d:b2
          inet addr:192.168.169.116  Bcast:192.168.255.255  Mask:255.255.0.0
          inet6 addr: fe80::a00:27ff:fe00:3db2/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3522 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1672 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:533885 (533.8 KB)  TX bytes:328081 (328.0 KB)

eth0      Link encap:Ethernet  HWaddr 08:00:27:00:3d:b2
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:5661 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2027 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1200230 (1.2 MB)  TX bytes:383319 (383.3 KB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:112 errors:0 dropped:0 overruns:0 frame:0
          TX packets:112 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:8288 (8.2 KB)  TX bytes:8288 (8.2 KB)

tap0      Link encap:Ethernet  HWaddr c6:e1:91:8f:9e:75
          inet6 addr: fe80::c4e1:91ff:fe8f:9e75/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:308 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2136 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:49540 (49.5 KB)  TX bytes:362721 (362.7 KB)

in the below bridge-start file i tried the way you suggested by giving the eth_broadcast value are default gateway but did not work. searched couple of blogs and included eth_gateway and assigned default gateway to it and brodcast address to eth_broadcast, but no luck. if this is wrong, i will revert it back

ubuntu@ubuntu:/etc/openvpn$ cat bridge-start
#!/bin/bash

#################################
# Set up Ethernet bridge on Linux
# Requires: bridge-utils
#################################

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth0"
eth_ip="192.168.169.116"
eth_netmask="255.255.0.0"
eth_broadcast="192.168.255.255"
eth_gateway="192.168.169.0"

for t in $tap; do
    openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

for t in $tap; do
    ifconfig $t 0.0.0.0 promisc up
done

ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast

server config bridge :

server-bridge 192.168.169.0 255.255.0.0 192.168.169.151 192.168.169.199

client log :

Fri Sep 05 23:42:36 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Fri Sep 05 23:42:36 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Fri Sep 05 23:42:36 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Sep 05 23:42:36 2014 Need hold release from management interface, waiting...
Fri Sep 05 23:42:37 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Sep 05 23:42:37 2014 MANAGEMENT: CMD 'state on'
Fri Sep 05 23:42:37 2014 MANAGEMENT: CMD 'log all on'
Fri Sep 05 23:42:37 2014 MANAGEMENT: CMD 'hold off'
Fri Sep 05 23:42:37 2014 MANAGEMENT: CMD 'hold release'
Fri Sep 05 23:42:37 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Sep 05 23:42:37 2014 MANAGEMENT: >STATE:1409974957,RESOLVE,,,
Fri Sep 05 23:42:38 2014 UDPv4 link local: [undef]
Fri Sep 05 23:42:38 2014 UDPv4 link remote: [AF_INET]174.98.141.242:1194
Fri Sep 05 23:42:38 2014 MANAGEMENT: >STATE:1409974958,WAIT,,,
Fri Sep 05 23:42:38 2014 MANAGEMENT: >STATE:1409974958,AUTH,,,
Fri Sep 05 23:42:38 2014 TLS: Initial packet from [AF_INET]174.98.141.242:1194, sid=ef2ea854 84c8bf60
Fri Sep 05 23:42:39 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 23:42:39 2014 VERIFY OK: nsCertType=SERVER
Fri Sep 05 23:42:39 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 23:42:43 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 23:42:43 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 23:42:43 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 23:42:43 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 23:42:43 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Sep 05 23:42:43 2014 [changeme] Peer Connection Initiated with [AF_INET]174.98.141.242:1194
Fri Sep 05 23:42:44 2014 MANAGEMENT: >STATE:1409974964,GET_CONFIG,,,
Fri Sep 05 23:42:45 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:42:45 2014 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.169.0,ping 10,ping-restart 120,ifconfig 192.168.169.151 255.255.0.0'
Fri Sep 05 23:42:45 2014 OPTIONS IMPORT: timers and/or timeouts modified
Fri Sep 05 23:42:45 2014 OPTIONS IMPORT: --ifconfig/up options modified
Fri Sep 05 23:42:45 2014 OPTIONS IMPORT: route-related options modified
Fri Sep 05 23:42:45 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Sep 05 23:42:45 2014 MANAGEMENT: >STATE:1409974965,ASSIGN_IP,,192.168.169.151,
Fri Sep 05 23:42:45 2014 open_tun, tt->ipv6=0
Fri Sep 05 23:42:45 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{B20CE3C1-72FA-4693-8E11-FD2F0727A13E}.tap
Fri Sep 05 23:42:45 2014 TAP-Windows Driver Version 9.21 
Fri Sep 05 23:42:45 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.169.151/255.255.0.0 on interface {B20CE3C1-72FA-4693-8E11-FD2F0727A13E} [DHCP-serv: 192.168.0.0, lease-time: 31536000]
Fri Sep 05 23:42:45 2014 Successful ARP Flush on interface [20] {B20CE3C1-72FA-4693-8E11-FD2F0727A13E}
Fri Sep 05 23:42:50 2014 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Fri Sep 05 23:42:50 2014 Initialization Sequence Completed
Fri Sep 05 23:42:50 2014 MANAGEMENT: >STATE:1409974970,CONNECTED,SUCCESS,192.168.169.151,174.98.141.242
Fri Sep 05 23:44:45 2014 [changeme] Inactivity timeout (--ping-restart), restarting
Fri Sep 05 23:44:45 2014 SIGUSR1[soft,ping-restart] received, process restarting
Fri Sep 05 23:44:45 2014 MANAGEMENT: >STATE:1409975085,RECONNECTING,ping-restart,,
Fri Sep 05 23:44:45 2014 Restart pause, 2 second(s)
Fri Sep 05 23:44:47 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Sep 05 23:44:47 2014 MANAGEMENT: >STATE:1409975087,RESOLVE,,,
Fri Sep 05 23:44:47 2014 UDPv4 link local: [undef]
Fri Sep 05 23:44:47 2014 UDPv4 link remote: [AF_INET]174.98.141.242:1194
Fri Sep 05 23:44:47 2014 MANAGEMENT: >STATE:1409975087,WAIT,,,
Fri Sep 05 23:44:47 2014 MANAGEMENT: >STATE:1409975087,AUTH,,,
Fri Sep 05 23:44:47 2014 TLS: Initial packet from [AF_INET]174.98.141.242:1194, sid=979ee12c ae05457d
Fri Sep 05 23:44:49 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 23:44:49 2014 VERIFY OK: nsCertType=SERVER
Fri Sep 05 23:44:49 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 23:44:51 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 23:44:51 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 23:44:51 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Sep 05 23:44:51 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Sep 05 23:44:51 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Sep 05 23:44:51 2014 [changeme] Peer Connection Initiated with [AF_INET]174.98.141.242:1194
Fri Sep 05 23:44:52 2014 MANAGEMENT: >STATE:1409975092,GET_CONFIG,,,
Fri Sep 05 23:44:53 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:44:58 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:03 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:08 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:13 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:18 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:23 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:28 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:33 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:38 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:43 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:48 2014 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Sep 05 23:45:54 2014 No reply from server after sending 12 push requests
Fri Sep 05 23:45:54 2014 SIGUSR1[soft,no-push-reply] received, process restarting
Fri Sep 05 23:45:54 2014 MANAGEMENT: >STATE:1409975154,RECONNECTING,no-push-reply,,
Fri Sep 05 23:45:54 2014 Restart pause, 2 second(s)
Fri Sep 05 23:45:56 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Sep 05 23:45:56 2014 MANAGEMENT: >STATE:1409975156,RESOLVE,,,
Fri Sep 05 23:45:56 2014 UDPv4 link local: [undef]
Fri Sep 05 23:45:56 2014 UDPv4 link remote: [AF_INET]174.98.141.242:1194
Fri Sep 05 23:45:56 2014 MANAGEMENT: >STATE:1409975156,WAIT,,,
Fri Sep 05 23:45:56 2014 MANAGEMENT: >STATE:1409975156,AUTH,,,
Fri Sep 05 23:45:56 2014 TLS: Initial packet from [AF_INET]174.98.141.242:1194, sid=e12b8dfe 0e331eaa
Fri Sep 05 23:46:03 2014 VERIFY OK: depth=1, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain
Fri Sep 05 23:46:03 2014 VERIFY OK: nsCertType=SERVER
Fri Sep 05 23:46:03 2014 VERIFY OK: depth=0, C=US, ST=NC, L=Jamestown, O=Training, OU=changeme, CN=changeme, emailAddress=mail@host.domain

ravipasupuleti

Hi,
My first attempt was, I have set the default gateway as 192.168.169.1 ans tried it. at that time i noticed my client side tap adapter properties showing the gateway as 192.168.169.0 and i was unable to ping the server . with this finding i have modified the default gateway on my router to 192.168.169.0.

do you want me to revert back the default gateway to 192.168.169.1, will do even then i am unable to solve my issue.

ravipasupuleti

Hi,
I have performed all the changes suggested.

1. changed the default gateway to 192.168.178.1
2. all the machine on my router are in DHCP so no problems there.

but no luck.