Hi, I'm having a working LAN-to-LAN routing here with OpenVPN 2.2.1 (from Ubuntu 12.04, both, server and client). I have now created a new server under Ubuntu 14.04 (OpenVPN 2.3.2), using the same config for the server. The client is still unchanged at 2.2.1. This breaks LAN to LAN routing for me. The two LANs are 192.168.1.* and 192.168.2.*, VPN is 10.8.0.*. The VPN server is 192.168.1.100, the VPN client is 192.168.2.30. Configs: Server: [code]$ cat server.conf | grep -v ^# | grep -v ^\; port 1194 proto tcp dev tun ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/server.crt key /etc/openvpn/keys/server.key dh /etc/openvpn/keys/dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 192.168.1.0 255.255.255.0" push "route 192.168.2.0 255.255.255.0" client-config-dir ccd route 192.168.2.0 255.255.255.0 push "dhcp-option DNS 192.168.1.100" push "dhcp-option DNS 192.168.1.104" client-to-client keepalive 10 30 cipher AES-192-CBC # AES comp-lzo max-clients 3 user nobody group nogroup persist-key persist-tun status /var/log/openvpn-status.log log /var/log/openvpn.log verb 6 mute 20[/code] Client: [code]$ cat /etc/openvpn/client.conf | grep -v ^# | grep -v ^\; client dev tun proto tcp remote vpn.sample.com 1194 resolv-retry infinite nobind persist-key persist-tun ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/client1.crt key /etc/openvpn/keys/client1.key remote-cert-tls server cipher AES-192-CBC # AES comp-lzo log /var/log/openvpn.log status openvpn-status.log verb 5 mute 20[/code] Problem: OpenVPN 2.3.2 server: [code]user@client:~$ ping 192.168.1.100 PING 192.168.1.100 (192.168.1.100) 56(84) bytes of data. 64 bytes from 192.168.1.100: icmp_req=1 ttl=64 time=156 ms 64 bytes from 192.168.1.100: icmp_req=2 ttl=64 time=57.2 ms 64 bytes from 192.168.1.100: icmp_req=3 ttl=64 time=140 ms ^C --- 192.168.1.100 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 57.267/117.826/156.152/43.324 ms client$ user@client:~$ ping 192.168.1.24 PING 192.168.1.24 (192.168.1.24) 56(84) bytes of data. ^C --- 192.168.1.24 ping statistics --- 2 packets transmitted, 0 received, 100% packet loss, time 999ms[/code] OpenVPN 2.2.1 server: [code]user@client:~$ ping 192.168.1.100 PING 192.168.1.100 (192.168.1.100) 56(84) bytes of data. 64 bytes from 192.168.1.100: icmp_req=1 ttl=64 time=124 ms 64 bytes from 192.168.1.100: icmp_req=2 ttl=64 time=62.9 ms 64 bytes from 192.168.1.100: icmp_req=3 ttl=64 time=57.2 ms ^C --- 192.168.1.100 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 57.229/81.562/124.492/30.446 ms user@client:~$ ping 192.168.1.24 PING 192.168.1.24 (192.168.1.24) 56(84) bytes of data. 64 bytes from 192.168.1.24: icmp_req=1 ttl=63 time=187 ms 64 bytes from 192.168.1.24: icmp_req=2 ttl=63 time=57.8 ms 64 bytes from 192.168.1.24: icmp_req=3 ttl=63 time=71.3 ms ^C --- 192.168.1.24 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 57.819/105.661/187.788/58.336 ms[/code] DId I miss a required config change during the upgrade?

OpenVPN Update 2.2 to 2.3 breaks LAN-to-LAN routing

pia_user

Hi,

I'm having a working LAN-to-LAN routing here with OpenVPN 2.2.1 (from Ubuntu 12.04, both, server and client). I have now created a new server under Ubuntu 14.04 (OpenVPN 2.3.2), using the same config for the server. The client is still unchanged at 2.2.1. This breaks LAN to LAN routing for me.

The two LANs are 192.168.1.* and 192.168.2.*, VPN is 10.8.0.*. The VPN server is 192.168.1.100, the VPN client is 192.168.2.30.

Configs:

Server:

$ cat server.conf | grep -v ^# | grep -v ^\;
port 1194
proto tcp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"
client-config-dir ccd
route 192.168.2.0 255.255.255.0
push "dhcp-option DNS 192.168.1.100"
push "dhcp-option DNS 192.168.1.104"
client-to-client
keepalive 10 30
cipher AES-192-CBC # AES
comp-lzo
max-clients 3
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log
log         /var/log/openvpn.log
verb 6
mute 20

Client:

$  cat /etc/openvpn/client.conf | grep -v ^# | grep -v ^\;
client
dev tun
proto tcp
remote vpn.sample.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/client1.crt
key /etc/openvpn/keys/client1.key
remote-cert-tls server
cipher AES-192-CBC # AES
comp-lzo
log /var/log/openvpn.log
status openvpn-status.log
verb 5
mute 20

Problem:

OpenVPN 2.3.2 server:

user@client:~$ ping 192.168.1.100
PING 192.168.1.100 (192.168.1.100) 56(84) bytes of data.
64 bytes from 192.168.1.100: icmp_req=1 ttl=64 time=156 ms
64 bytes from 192.168.1.100: icmp_req=2 ttl=64 time=57.2 ms
64 bytes from 192.168.1.100: icmp_req=3 ttl=64 time=140 ms
^C
--- 192.168.1.100 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 57.267/117.826/156.152/43.324 ms

client$ user@client:~$ ping 192.168.1.24
PING 192.168.1.24 (192.168.1.24) 56(84) bytes of data.
^C
--- 192.168.1.24 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 999ms

OpenVPN 2.2.1 server:

user@client:~$ ping 192.168.1.100
PING 192.168.1.100 (192.168.1.100) 56(84) bytes of data.
64 bytes from 192.168.1.100: icmp_req=1 ttl=64 time=124 ms
64 bytes from 192.168.1.100: icmp_req=2 ttl=64 time=62.9 ms
64 bytes from 192.168.1.100: icmp_req=3 ttl=64 time=57.2 ms
^C
--- 192.168.1.100 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 57.229/81.562/124.492/30.446 ms
user@client:~$ ping 192.168.1.24
PING 192.168.1.24 (192.168.1.24) 56(84) bytes of data.
64 bytes from 192.168.1.24: icmp_req=1 ttl=63 time=187 ms
64 bytes from 192.168.1.24: icmp_req=2 ttl=63 time=57.8 ms
64 bytes from 192.168.1.24: icmp_req=3 ttl=63 time=71.3 ms
^C
--- 192.168.1.24 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 57.819/105.661/187.788/58.336 ms

DId I miss a required config change during the upgrade?

pia_user

Server 2.2.1 log (working):

Sun Sep  7 17:59:59 2014 us=592171 Current Parameter Settings:
Sun Sep  7 17:59:59 2014 us=592255   config = '/etc/openvpn/server.conf'
Sun Sep  7 17:59:59 2014 us=592265   mode = 1
Sun Sep  7 17:59:59 2014 us=592272   persist_config = DISABLED
Sun Sep  7 17:59:59 2014 us=592280   persist_mode = 1
Sun Sep  7 17:59:59 2014 us=592288   show_ciphers = DISABLED
Sun Sep  7 17:59:59 2014 us=592295   show_digests = DISABLED
Sun Sep  7 17:59:59 2014 us=592302   show_engines = DISABLED
Sun Sep  7 17:59:59 2014 us=592309   genkey = DISABLED
Sun Sep  7 17:59:59 2014 us=592315   key_pass_file = '[UNDEF]'
Sun Sep  7 17:59:59 2014 us=592322   show_tls_ciphers = DISABLED
Sun Sep  7 17:59:59 2014 us=592332 Connection profiles [default]:
Sun Sep  7 17:59:59 2014 us=592340   proto = tcp-server
Sun Sep  7 17:59:59 2014 us=592347   local = '[UNDEF]'
Sun Sep  7 17:59:59 2014 us=592354   local_port = 1194
Sun Sep  7 17:59:59 2014 us=592361   remote = '[UNDEF]'
Sun Sep  7 17:59:59 2014 us=592368   remote_port = 1194
Sun Sep  7 17:59:59 2014 us=592375   remote_float = DISABLED
Sun Sep  7 17:59:59 2014 us=592381   bind_defined = DISABLED
Sun Sep  7 17:59:59 2014 us=592388   bind_local = ENABLED
Sun Sep  7 17:59:59 2014 us=592395 NOTE: --mute triggered...
Sun Sep  7 17:59:59 2014 us=592414 264 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 17:59:59 2014 us=592423 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 13 2014
Sun Sep  7 17:59:59 2014 us=592580 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sun Sep  7 17:59:59 2014 us=592675 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Sep  7 17:59:59 2014 us=594372 Diffie-Hellman initialized with 1024 bit key
Sun Sep  7 17:59:59 2014 us=595225 TLS-Auth MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 17:59:59 2014 us=595270 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sun Sep  7 17:59:59 2014 us=595460 ROUTE default_gateway=192.168.1.1
Sun Sep  7 17:59:59 2014 us=597462 TUN/TAP device tun0 opened
Sun Sep  7 17:59:59 2014 us=597519 TUN/TAP TX queue length set to 100
Sun Sep  7 17:59:59 2014 us=597540 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Sep  7 17:59:59 2014 us=597569 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Sun Sep  7 17:59:59 2014 us=604047 /sbin/route add -net 192.168.2.0 netmask 255.255.255.0 gw 10.8.0.2
Sun Sep  7 17:59:59 2014 us=605464 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Sun Sep  7 17:59:59 2014 us=607474 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 17:59:59 2014 us=608293 GID set to nogroup
Sun Sep  7 17:59:59 2014 us=608347 UID set to nobody
Sun Sep  7 17:59:59 2014 us=608379 Listening for incoming TCP connection on [undef]
Sun Sep  7 17:59:59 2014 us=608401 TCPv4_SERVER link local (bound): [undef]
Sun Sep  7 17:59:59 2014 us=608408 TCPv4_SERVER link remote: [undef]
Sun Sep  7 17:59:59 2014 us=608418 MULTI: multi_init called, r=256 v=256
Sun Sep  7 17:59:59 2014 us=608465 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Sep  7 17:59:59 2014 us=608480 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6
Sun Sep  7 17:59:59 2014 us=608500 succeeded -> ifconfig_pool_set()
Sun Sep  7 17:59:59 2014 us=608508 ifconfig_pool_read(), in='client1,10.8.0.8', TODO: IPv6
Sun Sep  7 17:59:59 2014 us=608514 succeeded -> ifconfig_pool_set()
Sun Sep  7 17:59:59 2014 us=608519 ifconfig_pool_read(), in='client2,10.8.0.12', TODO: IPv6
Sun Sep  7 17:59:59 2014 us=608525 succeeded -> ifconfig_pool_set()
Sun Sep  7 17:59:59 2014 us=608530 ifconfig_pool_read(), in='client3,10.8.0.16', TODO: IPv6
Sun Sep  7 17:59:59 2014 us=608546 succeeded -> ifconfig_pool_set()
Sun Sep  7 17:59:59 2014 us=608555 IFCONFIG POOL LIST
Sun Sep  7 17:59:59 2014 us=608563 client1,10.8.0.4
Sun Sep  7 17:59:59 2014 us=608604 client1,10.8.0.8
Sun Sep  7 17:59:59 2014 us=608613 client2,10.8.0.12
Sun Sep  7 17:59:59 2014 us=608619 client3,10.8.0.16
Sun Sep  7 17:59:59 2014 us=608633 MULTI: TCP INIT maxclients=3 maxevents=7
Sun Sep  7 17:59:59 2014 us=608661 Initialization Sequence Completed
Sun Sep  7 18:00:03 2014 us=957694 MULTI: multi_create_instance called
Sun Sep  7 18:00:03 2014 us=957738 Re-using SSL/TLS context
Sun Sep  7 18:00:03 2014 us=957768 LZO compression initialized
Sun Sep  7 18:00:03 2014 us=957909 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:00:03 2014 us=957931 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:00:03 2014 us=957964 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 18:00:03 2014 us=957971 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 18:00:03 2014 us=957988 Local Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 18:00:03 2014 us=957998 Expected Remote Options hash (VER=V4): '6f27195f'
Sun Sep  7 18:00:03 2014 us=958023 TCP connection established with [AF_INET]1.2.3.4:52591
Sun Sep  7 18:00:03 2014 us=958034 TCPv4_SERVER link local: [undef]
Sun Sep  7 18:00:03 2014 us=958041 TCPv4_SERVER link remote: [AF_INET]1.2.3.4:52591
Sun Sep  7 18:00:04 2014 us=892562 1.2.3.4:52591 TLS: Initial packet from [AF_INET]1.2.3.4:52591, sid=041cae98 35081ed6
Sun Sep  7 18:00:07 2014 us=359664 1.2.3.4:52591 VERIFY OK: depth=1, /C=DE/ST=XXX/L=XXX/O=XXX/OU=IT/CN=XXX/emailAddress=XXX
Sun Sep  7 18:00:07 2014 us=359850 1.2.3.4:52591 VERIFY OK: depth=0, /C=DE/ST=XXX/L=XXX/O=XXX/CN=XXX/emailAddress=XXX
Sun Sep  7 18:00:08 2014 us=320710 1.2.3.4:52591 Data Channel Encrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:00:08 2014 us=320763 1.2.3.4:52591 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:00:08 2014 us=320777 1.2.3.4:52591 Data Channel Decrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:00:08 2014 us=320790 1.2.3.4:52591 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:00:08 2014 us=593519 1.2.3.4:52591 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep  7 18:00:08 2014 us=593588 1.2.3.4:52591 [client2] Peer Connection Initiated with [AF_INET]1.2.3.4:52591
Sun Sep  7 18:00:08 2014 us=593713 client2/1.2.3.4:52591 MULTI_sva: pool returned IPv4=10.8.0.14, IPv6=88e6:329b:1d7f::
Sun Sep  7 18:00:08 2014 us=593765 client2/1.2.3.4:52591 MULTI: Learn: 10.8.0.14 -> client2/1.2.3.4:52591
Sun Sep  7 18:00:08 2014 us=593779 client2/1.2.3.4:52591 MULTI: primary virtual IP for client2/1.2.3.4:52591: 10.8.0.14
Sun Sep  7 18:00:10 2014 us=802187 client2/1.2.3.4:52591 PUSH: Received control message: 'PUSH_REQUEST'
Sun Sep  7 18:00:10 2014 us=802238 client2/1.2.3.4:52591 send_push_reply(): safe_cap=960
Sun Sep  7 18:00:10 2014 us=802286 client2/1.2.3.4:52591 SENT CONTROL [client2]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.2.0 255.255.255.0,dhcp-option DNS 192.168.1.100,dhcp-option DNS 192.168.1.104,dhcp-option DOMAIN example.com,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 30,ifconfig 10.8.0.14 10.8.0.13' (status=1)
Sun Sep  7 18:00:12 2014 us=808182 MULTI: multi_create_instance called
Sun Sep  7 18:00:12 2014 us=808268 Re-using SSL/TLS context
Sun Sep  7 18:00:12 2014 us=808308 LZO compression initialized
Sun Sep  7 18:00:12 2014 us=808411 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:00:12 2014 us=808445 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:00:12 2014 us=808511 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 18:00:12 2014 us=808524 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 18:00:12 2014 us=808544 Local Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 18:00:12 2014 us=808561 Expected Remote Options hash (VER=V4): '6f27195f'
Sun Sep  7 18:00:12 2014 us=808627 TCP connection established with [AF_INET]2.3.4.5:50815
Sun Sep  7 18:00:12 2014 us=808647 TCPv4_SERVER link local: [undef]
Sun Sep  7 18:00:12 2014 us=808664 TCPv4_SERVER link remote: [AF_INET]2.3.4.5:50815
Sun Sep  7 18:00:13 2014 us=753753 2.3.4.5:50815 TLS: Initial packet from [AF_INET]2.3.4.5:50815, sid=c8f95173 6f3d6c8e
Sun Sep  7 18:00:15 2014 us=791759 2.3.4.5:50815 VERIFY OK: depth=1, /C=DE/ST=XXX/L=XXX/O=XXX/OU=IT/CN=XXX/emailAddress=XXX
Sun Sep  7 18:00:15 2014 us=791896 2.3.4.5:50815 VERIFY OK: depth=0, /C=DE/ST=XXX/L=XXX/O=XXX/CN=XXX/emailAddress=XXX
Sun Sep  7 18:00:16 2014 us=596920 2.3.4.5:50815 Data Channel Encrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:00:16 2014 us=596960 2.3.4.5:50815 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:00:16 2014 us=596969 2.3.4.5:50815 Data Channel Decrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:00:16 2014 us=596977 2.3.4.5:50815 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:00:16 2014 us=840060 2.3.4.5:50815 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep  7 18:00:16 2014 us=840114 2.3.4.5:50815 [client1] Peer Connection Initiated with [AF_INET]2.3.4.5:50815
Sun Sep  7 18:00:16 2014 us=840199 client1/2.3.4.5:50815 OPTIONS IMPORT: reading client specific options from: ccd/client1
Sun Sep  7 18:00:16 2014 us=840290 client1/2.3.4.5:50815 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=4:329b:1d7f:0:c504:2798:1d7f:0
Sun Sep  7 18:00:16 2014 us=840322 client1/2.3.4.5:50815 MULTI: Learn: 10.8.0.6 -> client1/2.3.4.5:50815
Sun Sep  7 18:00:16 2014 us=840346 client1/2.3.4.5:50815 MULTI: primary virtual IP for client1/2.3.4.5:50815: 10.8.0.6
Sun Sep  7 18:00:16 2014 us=840354 client1/2.3.4.5:50815 MULTI: internal route 192.168.2.0/24 -> client1/2.3.4.5:50815
Sun Sep  7 18:00:16 2014 us=840362 client1/2.3.4.5:50815 MULTI: Learn: 192.168.2.0/24 -> client1/2.3.4.5:50815
Sun Sep  7 18:00:16 2014 us=840373 client1/2.3.4.5:50815 REMOVE PUSH ROUTE: 'route 192.168.2.0 255.255.255.0'
Sun Sep  7 18:00:19 2014 us=119729 client1/2.3.4.5:50815 PUSH: Received control message: 'PUSH_REQUEST'
Sun Sep  7 18:00:19 2014 us=119776 client1/2.3.4.5:50815 send_push_reply(): safe_cap=960
Sun Sep  7 18:00:19 2014 us=119816 client1/2.3.4.5:50815 SENT CONTROL [client1]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,dhcp-option DNS 192.168.1.100,dhcp-option DNS 192.168.1.104,dhcp-option DOMAIN example.com,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sun Sep  7 18:00:21 2014 us=221361 MULTI: Learn: 192.168.2.30 -> client1/2.3.4.5:50815
Sun Sep  7 18:00:25 2014 us=422701 client1/2.3.4.5:50815 MULTI: Learn: 192.168.2.28 -> client1/2.3.4.5:50815

Client log (connection with 2.2.1 - working):

Sun Sep  7 17:59:57 2014 us=332916 Current Parameter Settings:
Sun Sep  7 17:59:57 2014 us=333012   config = '/etc/openvpn/client.conf'
Sun Sep  7 17:59:57 2014 us=333028   mode = 0
Sun Sep  7 17:59:57 2014 us=333040   persist_config = DISABLED
Sun Sep  7 17:59:57 2014 us=333052   persist_mode = 1
Sun Sep  7 17:59:57 2014 us=333063   show_ciphers = DISABLED
Sun Sep  7 17:59:57 2014 us=333073   show_digests = DISABLED
Sun Sep  7 17:59:57 2014 us=333084   show_engines = DISABLED
Sun Sep  7 17:59:57 2014 us=333094   genkey = DISABLED
Sun Sep  7 17:59:57 2014 us=333105   key_pass_file = '[UNDEF]'
Sun Sep  7 17:59:57 2014 us=333116   show_tls_ciphers = DISABLED
Sun Sep  7 17:59:57 2014 us=333129 Connection profiles [default]:
Sun Sep  7 17:59:57 2014 us=333140   proto = tcp
Sun Sep  7 17:59:57 2014 us=333151   local = '[UNDEF]'
Sun Sep  7 17:59:57 2014 us=333162   local_port = 1194
Sun Sep  7 17:59:57 2014 us=333172   remote = '[UNDEF]'
Sun Sep  7 17:59:57 2014 us=333183   remote_port = 1194
Sun Sep  7 17:59:57 2014 us=333193   remote_float = DISABLED
Sun Sep  7 17:59:57 2014 us=333204   bind_defined = DISABLED
Sun Sep  7 17:59:57 2014 us=333214   bind_local = DISABLED
Sun Sep  7 17:59:57 2014 us=333224 NOTE: --mute triggered...
Sun Sep  7 17:59:57 2014 us=333250 313 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 17:59:57 2014 us=333267 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 13 2014
Sun Sep  7 17:59:57 2014 us=333410 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Sep  7 17:59:57 2014 us=334624 LZO compression initialized
Sun Sep  7 17:59:57 2014 us=334720 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 17:59:57 2014 us=334774 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sun Sep  7 17:59:57 2014 us=335768 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 17:59:57 2014 us=335807 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 17:59:57 2014 us=335819 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 17:59:57 2014 us=335842 Local Options hash (VER=V4): '6f27195f'
Sun Sep  7 17:59:57 2014 us=335859 Expected Remote Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 17:59:57 2014 us=336401 Attempting to establish TCP connection with [AF_INET]192.168.1.100:1194 [nonblock]
Sun Sep  7 18:00:07 2014 us=337413 TCP: connect to [AF_INET]192.168.1.100:1194 failed, will try again in 5 seconds: Connection timed out
Sun Sep  7 18:00:07 2014 us=337689 SIGUSR1[soft,init_instance] received, process restarting
Sun Sep  7 18:00:07 2014 us=337715 Restart pause, 5 second(s)
Sun Sep  7 18:00:12 2014 us=337799 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Sep  7 18:00:12 2014 us=337880 Re-using SSL/TLS context
Sun Sep  7 18:00:12 2014 us=337927 LZO compression initialized
Sun Sep  7 18:00:12 2014 us=338025 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:00:12 2014 us=338065 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sun Sep  7 18:00:12 2014 us=730030 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:00:12 2014 us=730115 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 18:00:12 2014 us=730129 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 18:00:12 2014 us=730153 Local Options hash (VER=V4): '6f27195f'
Sun Sep  7 18:00:12 2014 us=730171 Expected Remote Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 18:00:12 2014 us=730199 Attempting to establish TCP connection with [AF_INET]3.4.5.6:1194 [nonblock]
Sun Sep  7 18:00:13 2014 us=730357 TCP connection established with [AF_INET]3.4.5.6:1194
Sun Sep  7 18:00:13 2014 us=730402 TCPv4_CLIENT link local: [undef]
Sun Sep  7 18:00:13 2014 us=730419 TCPv4_CLIENT link remote: [AF_INET]3.4.5.6:1194
Sun Sep  7 18:00:13 2014 us=787198 TLS: Initial packet from [AF_INET]3.4.5.6:1194, sid=562208b4 ef48fc5c
Sun Sep  7 18:00:14 2014 us=705135 VERIFY OK: depth=1, /C=DE/ST=XXX/L=XXX/O=XXX/OU=IT/CN=XXX/emailAddress=XXX
Sun Sep  7 18:00:14 2014 us=705453 Validating certificate key usage
Sun Sep  7 18:00:14 2014 us=705472 ++ Certificate has key usage  00a0, expects 00a0
Sun Sep  7 18:00:14 2014 us=705484 VERIFY KU OK
Sun Sep  7 18:00:14 2014 us=705498 Validating certificate extended key usage
Sun Sep  7 18:00:14 2014 us=705511 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Sep  7 18:00:14 2014 us=705522 VERIFY EKU OK
Sun Sep  7 18:00:14 2014 us=705532 VERIFY OK: depth=0, /C=DE/ST=XXX/L=XXX/O=XXX/CN=XXX/emailAddress=XXX
Sun Sep  7 18:00:16 2014 us=723403 Data Channel Encrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:00:16 2014 us=723450 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:00:16 2014 us=723465 Data Channel Decrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:00:16 2014 us=723478 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:00:16 2014 us=723536 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep  7 18:00:16 2014 us=723572 [server] Peer Connection Initiated with [AF_INET]3.4.5.6:1194
Sun Sep  7 18:00:19 2014 us=96107 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Sep  7 18:00:19 2014 us=246225 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,dhcp-option DNS 192.168.1.100,dhcp-option DNS 192.168.1.104,dhcp-option DOMAIN example.com,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5'
Sun Sep  7 18:00:19 2014 us=246387 OPTIONS IMPORT: timers and/or timeouts modified
Sun Sep  7 18:00:19 2014 us=246404 OPTIONS IMPORT: --ifconfig/up options modified
Sun Sep  7 18:00:19 2014 us=246415 OPTIONS IMPORT: route options modified
Sun Sep  7 18:00:19 2014 us=246425 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Sep  7 18:00:19 2014 us=246622 ROUTE: default_gateway=UNDEF
Sun Sep  7 18:00:19 2014 us=246915 TUN/TAP device tun0 opened
Sun Sep  7 18:00:19 2014 us=246952 TUN/TAP TX queue length set to 100
Sun Sep  7 18:00:19 2014 us=246983 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Sep  7 18:00:19 2014 us=247033 /sbin/ifconfig tun0 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Sun Sep  7 18:00:19 2014 us=248960 /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.8.0.5
Sun Sep  7 18:00:19 2014 us=250806 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.5
Sun Sep  7 18:00:19 2014 us=251998 Initialization Sequence Completed

pia_user

Server 2.3.2 log (not working):

Sun Sep  7 18:04:27 2014 us=126617 Current Parameter Settings:
Sun Sep  7 18:04:27 2014 us=126733   config = '/etc/openvpn/server.conf'
Sun Sep  7 18:04:27 2014 us=126746   mode = 1
Sun Sep  7 18:04:27 2014 us=126756   persist_config = DISABLED
Sun Sep  7 18:04:27 2014 us=126766   persist_mode = 1
Sun Sep  7 18:04:27 2014 us=126775   show_ciphers = DISABLED
Sun Sep  7 18:04:27 2014 us=126784   show_digests = DISABLED
Sun Sep  7 18:04:27 2014 us=126793   show_engines = DISABLED
Sun Sep  7 18:04:27 2014 us=126802   genkey = DISABLED
Sun Sep  7 18:04:27 2014 us=126812   key_pass_file = '[UNDEF]'
Sun Sep  7 18:04:27 2014 us=126821   show_tls_ciphers = DISABLED
Sun Sep  7 18:04:27 2014 us=126829 Connection profiles [default]:
Sun Sep  7 18:04:27 2014 us=126840   proto = tcp-server
Sun Sep  7 18:04:27 2014 us=126849   local = '[UNDEF]'
Sun Sep  7 18:04:27 2014 us=126859   local_port = 1194
Sun Sep  7 18:04:27 2014 us=126873   remote = '[UNDEF]'
Sun Sep  7 18:04:27 2014 us=126884   remote_port = 1194
Sun Sep  7 18:04:27 2014 us=126894   remote_float = DISABLED
Sun Sep  7 18:04:27 2014 us=126903   bind_defined = DISABLED
Sun Sep  7 18:04:27 2014 us=126912   bind_local = ENABLED
Sun Sep  7 18:04:27 2014 us=126922 NOTE: --mute triggered...
Sun Sep  7 18:04:27 2014 us=126946 266 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 18:04:27 2014 us=126958 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb  4 2014
Sun Sep  7 18:04:27 2014 us=127243 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sun Sep  7 18:04:27 2014 us=129100 Diffie-Hellman initialized with 1024 bit key
Sun Sep  7 18:04:27 2014 us=129649 TLS-Auth MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:04:27 2014 us=129693 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sun Sep  7 18:04:27 2014 us=129835 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=52:54:00:ea:98:d2
Sun Sep  7 18:04:27 2014 us=131598 TUN/TAP device tun0 opened
Sun Sep  7 18:04:27 2014 us=131639 TUN/TAP TX queue length set to 100
Sun Sep  7 18:04:27 2014 us=131675 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Sep  7 18:04:27 2014 us=131705 /sbin/ip link set dev tun0 up mtu 1500
Sun Sep  7 18:04:27 2014 us=135259 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Sep  7 18:04:27 2014 us=137667 /sbin/ip route add 192.168.2.0/24 via 10.8.0.2
Sun Sep  7 18:04:27 2014 us=138424 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Sep  7 18:04:27 2014 us=139873 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:04:27 2014 us=141785 GID set to nogroup
Sun Sep  7 18:04:27 2014 us=141833 UID set to nobody
Sun Sep  7 18:04:27 2014 us=141861 Listening for incoming TCP connection on [undef]
Sun Sep  7 18:04:27 2014 us=141881 TCPv4_SERVER link local (bound): [undef]
Sun Sep  7 18:04:27 2014 us=141888 TCPv4_SERVER link remote: [undef]
Sun Sep  7 18:04:27 2014 us=141901 MULTI: multi_init called, r=256 v=256
Sun Sep  7 18:04:27 2014 us=141958 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Sep  7 18:04:27 2014 us=141972 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6
Sun Sep  7 18:04:27 2014 us=141994 succeeded -> ifconfig_pool_set()
Sun Sep  7 18:04:27 2014 us=142002 ifconfig_pool_read(), in='client1,10.8.0.8', TODO: IPv6
Sun Sep  7 18:04:27 2014 us=142008 succeeded -> ifconfig_pool_set()
Sun Sep  7 18:04:27 2014 us=142015 ifconfig_pool_read(), in='client2,10.8.0.12', TODO: IPv6
Sun Sep  7 18:04:27 2014 us=142021 succeeded -> ifconfig_pool_set()
Sun Sep  7 18:04:27 2014 us=142028 ifconfig_pool_read(), in='client3,10.8.0.16', TODO: IPv6
Sun Sep  7 18:04:27 2014 us=142033 succeeded -> ifconfig_pool_set()
Sun Sep  7 18:04:27 2014 us=142040 IFCONFIG POOL LIST
Sun Sep  7 18:04:27 2014 us=142048 client1,10.8.0.4
Sun Sep  7 18:04:27 2014 us=142054 client1,10.8.0.8
Sun Sep  7 18:04:27 2014 us=142061 client2,10.8.0.12
Sun Sep  7 18:04:27 2014 us=142078 client3,10.8.0.16
Sun Sep  7 18:04:27 2014 us=142096 MULTI: TCP INIT maxclients=3 maxevents=7
Sun Sep  7 18:04:27 2014 us=142129 Initialization Sequence Completed
Sun Sep  7 18:04:32 2014 us=210387 MULTI: multi_create_instance called
Sun Sep  7 18:04:32 2014 us=210447 Re-using SSL/TLS context
Sun Sep  7 18:04:32 2014 us=210491 LZO compression initialized
Sun Sep  7 18:04:32 2014 us=210684 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:04:32 2014 us=210714 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:04:32 2014 us=210761 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 18:04:32 2014 us=210770 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 18:04:32 2014 us=210795 Local Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 18:04:32 2014 us=210810 Expected Remote Options hash (VER=V4): '6f27195f'
Sun Sep  7 18:04:32 2014 us=210845 TCP connection established with [AF_INET]1.2.3.4:52598
Sun Sep  7 18:04:32 2014 us=210857 TCPv4_SERVER link local: [undef]
Sun Sep  7 18:04:32 2014 us=210867 TCPv4_SERVER link remote: [AF_INET]1.2.3.4:52598
Sun Sep  7 18:04:33 2014 us=131766 1.2.3.4:52598 TCPv4_SERVER READ [14] from [AF_INET]1.2.3.4:52598: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun Sep  7 18:04:33 2014 us=131825 1.2.3.4:52598 TLS: Initial packet from [AF_INET]1.2.3.4:52598, sid=97372fb7 9fd1cba3
Sun Sep  7 18:04:33 2014 us=131875 1.2.3.4:52598 TCPv4_SERVER WRITE [26] to [AF_INET]1.2.3.4:52598: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sun Sep  7 18:04:33 2014 us=197082 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 0 ]
Sun Sep  7 18:04:33 2014 us=302860 1.2.3.4:52598 TCPv4_SERVER READ [114] from [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
Sun Sep  7 18:04:33 2014 us=302950 1.2.3.4:52598 TCPv4_SERVER WRITE [22] to [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 1 ]
Sun Sep  7 18:04:33 2014 us=302997 1.2.3.4:52598 TCPv4_SERVER READ [114] from [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Sun Sep  7 18:04:33 2014 us=303018 1.2.3.4:52598 TCPv4_SERVER WRITE [22] to [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 2 ]
Sun Sep  7 18:04:33 2014 us=303035 1.2.3.4:52598 TCPv4_SERVER READ [27] from [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=13
Sun Sep  7 18:04:33 2014 us=304695 1.2.3.4:52598 TCPv4_SERVER WRITE [126] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ 3 ] pid=1 DATA len=100
Sun Sep  7 18:04:33 2014 us=304722 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Sun Sep  7 18:04:33 2014 us=304739 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=100
Sun Sep  7 18:04:33 2014 us=304755 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=100
Sun Sep  7 18:04:33 2014 us=544201 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 1 ]
Sun Sep  7 18:04:33 2014 us=544313 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=5 DATA len=100
Sun Sep  7 18:04:33 2014 us=678426 1.2.3.4:52598 TCPv4_SERVER READ [30] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 2 3 4 ]
Sun Sep  7 18:04:33 2014 us=678500 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=100
Sun Sep  7 18:04:33 2014 us=678548 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=100
Sun Sep  7 18:04:33 2014 us=678584 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=8 DATA len=100
Sun Sep  7 18:04:33 2014 us=742591 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 5 ]
Sun Sep  7 18:04:33 2014 us=742687 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=9 DATA len=100
Sun Sep  7 18:04:33 2014 us=806818 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 6 ]
Sun Sep  7 18:04:33 2014 us=806892 1.2.3.4:52598 NOTE: --mute triggered...
Sun Sep  7 18:04:35 2014 us=642201 1.2.3.4:52598 75 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 18:04:35 2014 us=642256 1.2.3.4:52598 VERIFY OK: depth=1, C=DE, ST=XXX, L=XXX, O=XXX, OU=IT, CN=XXX, emailAddress=XXX
Sun Sep  7 18:04:35 2014 us=642417 1.2.3.4:52598 VERIFY OK: depth=0, C=DE, ST=XXX, L=XXX, O=XXX, CN=client2, emailAddress=XXX
Sun Sep  7 18:04:35 2014 us=642480 1.2.3.4:52598 TCPv4_SERVER WRITE [22] to [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 23 ]
Sun Sep  7 18:04:35 2014 us=712830 1.2.3.4:52598 TCPv4_SERVER READ [114] from [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=24 DATA len=100
Sun Sep  7 18:04:35 2014 us=714388 1.2.3.4:52598 TCPv4_SERVER WRITE [22] to [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 24 ]
Sun Sep  7 18:04:35 2014 us=776566 1.2.3.4:52598 TCPv4_SERVER READ [114] from [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=25 DATA len=100
Sun Sep  7 18:04:35 2014 us=776952 1.2.3.4:52598 TCPv4_SERVER WRITE [22] to [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 25 ]
Sun Sep  7 18:04:35 2014 us=840605 1.2.3.4:52598 TCPv4_SERVER READ [53] from [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=26 DATA len=39
Sun Sep  7 18:04:35 2014 us=841126 1.2.3.4:52598 TCPv4_SERVER WRITE [126] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ 26 ] pid=27 DATA len=100
Sun Sep  7 18:04:35 2014 us=841172 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=28 DATA len=100
Sun Sep  7 18:04:35 2014 us=841199 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=100
Sun Sep  7 18:04:35 2014 us=841223 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=30 DATA len=100
Sun Sep  7 18:04:36 2014 us=6252 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 27 ]
Sun Sep  7 18:04:36 2014 us=6338 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=100
Sun Sep  7 18:04:36 2014 us=72023 1.2.3.4:52598 TCPv4_SERVER READ [30] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 28 29 30 ]
Sun Sep  7 18:04:36 2014 us=72103 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=100
Sun Sep  7 18:04:36 2014 us=72169 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=33 DATA len=100
Sun Sep  7 18:04:36 2014 us=72199 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=34 DATA len=100
Sun Sep  7 18:04:36 2014 us=135537 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 31 ]
Sun Sep  7 18:04:36 2014 us=135621 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=35 DATA len=100
Sun Sep  7 18:04:36 2014 us=199774 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 32 ]
Sun Sep  7 18:04:36 2014 us=199860 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=36 DATA len=100
Sun Sep  7 18:04:36 2014 us=272305 1.2.3.4:52598 NOTE: --mute triggered...
Sun Sep  7 18:04:36 2014 us=576924 1.2.3.4:52598 16 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 18:04:36 2014 us=576967 1.2.3.4:52598 Data Channel Encrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:04:36 2014 us=576979 1.2.3.4:52598 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:04:36 2014 us=576989 1.2.3.4:52598 Data Channel Decrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:04:36 2014 us=576999 1.2.3.4:52598 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:04:36 2014 us=577039 1.2.3.4:52598 TCPv4_SERVER WRITE [126] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ 30 ] pid=40 DATA len=100
Sun Sep  7 18:04:36 2014 us=577062 1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
Sun Sep  7 18:04:36 2014 us=577082 1.2.3.4:52598 TCPv4_SERVER WRITE [96] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=82
Sun Sep  7 18:04:36 2014 us=743810 1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 40 ]
Sun Sep  7 18:04:36 2014 us=845356 1.2.3.4:52598 TCPv4_SERVER READ [26] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 41 42 ]
Sun Sep  7 18:04:36 2014 us=845431 1.2.3.4:52598 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep  7 18:04:36 2014 us=845460 1.2.3.4:52598 [client2] Peer Connection Initiated with [AF_INET]1.2.3.4:52598
Sun Sep  7 18:04:36 2014 us=845572 client2/1.2.3.4:52598 MULTI_sva: pool returned IPv4=10.8.0.14, IPv6=(Not enabled)
Sun Sep  7 18:04:36 2014 us=845621 client2/1.2.3.4:52598 MULTI: Learn: 10.8.0.14 -> client2/1.2.3.4:52598
Sun Sep  7 18:04:36 2014 us=845635 client2/1.2.3.4:52598 MULTI: primary virtual IP for client2/1.2.3.4:52598: 10.8.0.14
Sun Sep  7 18:04:39 2014 us=133210 client2/1.2.3.4:52598 TCPv4_SERVER READ [104] from [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=90
Sun Sep  7 18:04:39 2014 us=133325 client2/1.2.3.4:52598 PUSH: Received control message: 'PUSH_REQUEST'
Sun Sep  7 18:04:39 2014 us=133341 client2/1.2.3.4:52598 send_push_reply(): safe_cap=940
Sun Sep  7 18:04:39 2014 us=133384 client2/1.2.3.4:52598 SENT CONTROL [client2]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.2.0 255.255.255.0,dhcp-option DNS 192.168.1.100,dhcp-option DNS 192.168.1.104,dhcp-option DOMAIN example.com,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 30,ifconfig 10.8.0.14 10.8.0.13' (status=1)
Sun Sep  7 18:04:39 2014 us=133410 client2/1.2.3.4:52598 TCPv4_SERVER WRITE [22] to [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 31 ]
Sun Sep  7 18:04:39 2014 us=133464 client2/1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=43 DATA len=100
Sun Sep  7 18:04:39 2014 us=133493 client2/1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=44 DATA len=100
Sun Sep  7 18:04:39 2014 us=133515 client2/1.2.3.4:52598 TCPv4_SERVER WRITE [114] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=45 DATA len=100
Sun Sep  7 18:04:39 2014 us=133537 client2/1.2.3.4:52598 TCPv4_SERVER WRITE [44] to [AF_INET]1.2.3.4:52598: P_CONTROL_V1 kid=0 [ ] pid=46 DATA len=30
Sun Sep  7 18:04:39 2014 us=313128 client2/1.2.3.4:52598 TCPv4_SERVER READ [22] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 43 ]
Sun Sep  7 18:04:39 2014 us=502366 client2/1.2.3.4:52598 TCPv4_SERVER READ [30] from [AF_INET]1.2.3.4:52598: P_ACK_V1 kid=0 [ 44 45 46 ]
Sun Sep  7 18:04:41 2014 us=300497 MULTI: multi_create_instance called
Sun Sep  7 18:04:41 2014 us=300620 Re-using SSL/TLS context
Sun Sep  7 18:04:41 2014 us=300667 LZO compression initialized
Sun Sep  7 18:04:41 2014 us=300778 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:04:41 2014 us=300811 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:04:41 2014 us=300850 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 18:04:41 2014 us=300861 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 18:04:41 2014 us=300884 Local Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 18:04:41 2014 us=300901 Expected Remote Options hash (VER=V4): '6f27195f'
Sun Sep  7 18:04:41 2014 us=300948 TCP connection established with [AF_INET]2.3.4.5:50826
Sun Sep  7 18:04:41 2014 us=300958 TCPv4_SERVER link local: [undef]
Sun Sep  7 18:04:41 2014 us=300966 TCPv4_SERVER link remote: [AF_INET]2.3.4.5:50826
Sun Sep  7 18:04:42 2014 us=246134 2.3.4.5:50826 TCPv4_SERVER READ [14] from [AF_INET]2.3.4.5:50826: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun Sep  7 18:04:42 2014 us=246184 2.3.4.5:50826 TLS: Initial packet from [AF_INET]2.3.4.5:50826, sid=f56375cb 7fb99085
Sun Sep  7 18:04:42 2014 us=246219 2.3.4.5:50826 TCPv4_SERVER WRITE [26] to [AF_INET]2.3.4.5:50826: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sun Sep  7 18:04:42 2014 us=302887 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 0 ]
Sun Sep  7 18:04:42 2014 us=398478 2.3.4.5:50826 TCPv4_SERVER READ [114] from [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
Sun Sep  7 18:04:42 2014 us=398576 2.3.4.5:50826 TCPv4_SERVER WRITE [22] to [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 1 ]
Sun Sep  7 18:04:42 2014 us=398633 2.3.4.5:50826 TCPv4_SERVER READ [114] from [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Sun Sep  7 18:04:42 2014 us=398665 2.3.4.5:50826 TCPv4_SERVER WRITE [22] to [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 2 ]
Sun Sep  7 18:04:42 2014 us=398691 2.3.4.5:50826 TCPv4_SERVER READ [27] from [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=13
Sun Sep  7 18:04:42 2014 us=400607 2.3.4.5:50826 TCPv4_SERVER WRITE [126] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ 3 ] pid=1 DATA len=100
Sun Sep  7 18:04:42 2014 us=400645 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Sun Sep  7 18:04:42 2014 us=400673 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=100
Sun Sep  7 18:04:42 2014 us=400699 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=100
Sun Sep  7 18:04:42 2014 us=551521 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 1 ]
Sun Sep  7 18:04:42 2014 us=551617 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=5 DATA len=100
Sun Sep  7 18:04:42 2014 us=607451 2.3.4.5:50826 TCPv4_SERVER READ [30] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 2 3 4 ]
Sun Sep  7 18:04:42 2014 us=607523 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=100
Sun Sep  7 18:04:42 2014 us=607592 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=100
Sun Sep  7 18:04:42 2014 us=607626 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=8 DATA len=100
Sun Sep  7 18:04:42 2014 us=663967 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 5 ]
Sun Sep  7 18:04:42 2014 us=664091 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=9 DATA len=100
Sun Sep  7 18:04:42 2014 us=719497 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 6 ]
Sun Sep  7 18:04:42 2014 us=719579 2.3.4.5:50826 NOTE: --mute triggered...
Sun Sep  7 18:04:44 2014 us=275768 2.3.4.5:50826 75 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 18:04:44 2014 us=298647 2.3.4.5:50826 VERIFY OK: depth=1, C=DE, ST=XXX, L=XXX, O=XXX, OU=IT, CN=XXX, emailAddress=XXX
Sun Sep  7 18:04:44 2014 us=298781 2.3.4.5:50826 VERIFY OK: depth=0, C=DE, ST=XXX, L=XXX, O=XXX, CN=client1, emailAddress=XXX
Sun Sep  7 18:04:44 2014 us=298823 2.3.4.5:50826 TCPv4_SERVER WRITE [22] to [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 23 ]
Sun Sep  7 18:04:44 2014 us=331695 2.3.4.5:50826 TCPv4_SERVER READ [114] from [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=24 DATA len=100
Sun Sep  7 18:04:44 2014 us=332668 2.3.4.5:50826 TCPv4_SERVER WRITE [22] to [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 24 ]
Sun Sep  7 18:04:44 2014 us=387530 2.3.4.5:50826 TCPv4_SERVER READ [114] from [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=25 DATA len=100
Sun Sep  7 18:04:44 2014 us=387907 2.3.4.5:50826 TCPv4_SERVER WRITE [22] to [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 25 ]
Sun Sep  7 18:04:44 2014 us=443104 2.3.4.5:50826 TCPv4_SERVER READ [53] from [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=26 DATA len=39
Sun Sep  7 18:04:44 2014 us=443504 2.3.4.5:50826 TCPv4_SERVER WRITE [126] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ 26 ] pid=27 DATA len=100
Sun Sep  7 18:04:44 2014 us=443546 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=28 DATA len=100
Sun Sep  7 18:04:44 2014 us=443573 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=100
Sun Sep  7 18:04:44 2014 us=443597 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=30 DATA len=100
Sun Sep  7 18:04:44 2014 us=595281 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 27 ]
Sun Sep  7 18:04:44 2014 us=595368 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=100
Sun Sep  7 18:04:44 2014 us=650681 2.3.4.5:50826 TCPv4_SERVER READ [30] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 28 29 30 ]
Sun Sep  7 18:04:44 2014 us=650745 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=100
Sun Sep  7 18:04:44 2014 us=650811 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=33 DATA len=100
Sun Sep  7 18:04:44 2014 us=650843 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=34 DATA len=100
Sun Sep  7 18:04:44 2014 us=706560 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 31 ]
Sun Sep  7 18:04:44 2014 us=706631 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=35 DATA len=100
Sun Sep  7 18:04:44 2014 us=762254 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 32 ]
Sun Sep  7 18:04:44 2014 us=762321 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=36 DATA len=100
Sun Sep  7 18:04:44 2014 us=818138 2.3.4.5:50826 NOTE: --mute triggered...
Sun Sep  7 18:04:45 2014 us=84961 2.3.4.5:50826 16 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 18:04:45 2014 us=85034 2.3.4.5:50826 Data Channel Encrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:04:45 2014 us=85053 2.3.4.5:50826 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:04:45 2014 us=85066 2.3.4.5:50826 Data Channel Decrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:04:45 2014 us=85078 2.3.4.5:50826 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:04:45 2014 us=85129 2.3.4.5:50826 TCPv4_SERVER WRITE [126] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ 30 ] pid=40 DATA len=100
Sun Sep  7 18:04:45 2014 us=85159 2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
Sun Sep  7 18:04:45 2014 us=85183 2.3.4.5:50826 TCPv4_SERVER WRITE [96] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=82
Sun Sep  7 18:04:45 2014 us=234482 2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 40 ]
Sun Sep  7 18:04:45 2014 us=328045 2.3.4.5:50826 TCPv4_SERVER READ [26] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 41 42 ]
Sun Sep  7 18:04:45 2014 us=328096 2.3.4.5:50826 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep  7 18:04:45 2014 us=328114 2.3.4.5:50826 [client1] Peer Connection Initiated with [AF_INET]2.3.4.5:50826
Sun Sep  7 18:04:45 2014 us=328172 client1/2.3.4.5:50826 OPTIONS IMPORT: reading client specific options from: ccd/client1
Sun Sep  7 18:04:45 2014 us=328246 client1/2.3.4.5:50826 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Sep  7 18:04:45 2014 us=328274 client1/2.3.4.5:50826 MULTI: Learn: 10.8.0.6 -> client1/2.3.4.5:50826
Sun Sep  7 18:04:45 2014 us=328283 client1/2.3.4.5:50826 MULTI: primary virtual IP for client1/2.3.4.5:50826: 10.8.0.6
Sun Sep  7 18:04:45 2014 us=328290 client1/2.3.4.5:50826 MULTI: internal route 192.168.2.0/24 -> client1/2.3.4.5:50826
Sun Sep  7 18:04:45 2014 us=328298 client1/2.3.4.5:50826 MULTI: Learn: 192.168.2.0/24 -> client1/2.3.4.5:50826
Sun Sep  7 18:04:45 2014 us=328308 client1/2.3.4.5:50826 REMOVE PUSH ROUTE: 'route 192.168.2.0 255.255.255.0'
Sun Sep  7 18:04:47 2014 us=647575 client1/2.3.4.5:50826 TCPv4_SERVER READ [104] from [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=90
Sun Sep  7 18:04:47 2014 us=647697 client1/2.3.4.5:50826 PUSH: Received control message: 'PUSH_REQUEST'
Sun Sep  7 18:04:47 2014 us=647714 client1/2.3.4.5:50826 send_push_reply(): safe_cap=940
Sun Sep  7 18:04:47 2014 us=647760 client1/2.3.4.5:50826 SENT CONTROL [client1]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,dhcp-option DNS 192.168.1.100,dhcp-option DNS 192.168.1.104,dhcp-option DOMAIN example.com,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sun Sep  7 18:04:47 2014 us=647788 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [22] to [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 31 ]
Sun Sep  7 18:04:47 2014 us=647845 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=43 DATA len=100
Sun Sep  7 18:04:47 2014 us=647875 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [114] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=44 DATA len=100
Sun Sep  7 18:04:47 2014 us=647899 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [112] to [AF_INET]2.3.4.5:50826: P_CONTROL_V1 kid=0 [ ] pid=45 DATA len=98
Sun Sep  7 18:04:47 2014 us=802775 client1/2.3.4.5:50826 TCPv4_SERVER READ [22] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 43 ]
Sun Sep  7 18:04:47 2014 us=895909 client1/2.3.4.5:50826 TCPv4_SERVER READ [26] from [AF_INET]2.3.4.5:50826: P_ACK_V1 kid=0 [ 44 45 ]
Sun Sep  7 18:04:49 2014 us=70296 MULTI: Learn: 192.168.2.30 -> client1/2.3.4.5:50826
Sun Sep  7 18:04:49 2014 us=70367 client1/2.3.4.5:50826 TUN READ [60]
Sun Sep  7 18:04:49 2014 us=70419 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [117] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=116
Sun Sep  7 18:04:49 2014 us=127884 client1/2.3.4.5:50826 TCPv4_SERVER READ [117] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=116
Sun Sep  7 18:04:49 2014 us=127963 client1/2.3.4.5:50826 TUN WRITE [60]
Sun Sep  7 18:04:49 2014 us=128215 client1/2.3.4.5:50826 TUN READ [52]
Sun Sep  7 18:04:49 2014 us=128289 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [101] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:04:49 2014 us=193221 client1/2.3.4.5:50826 TCPv4_SERVER READ [149] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=148
Sun Sep  7 18:04:49 2014 us=193308 client1/2.3.4.5:50826 TUN WRITE [93]
Sun Sep  7 18:04:49 2014 us=193631 client1/2.3.4.5:50826 TUN READ [52]
Sun Sep  7 18:04:49 2014 us=193709 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [101] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:04:49 2014 us=193764 client1/2.3.4.5:50826 TUN READ [93]
Sun Sep  7 18:04:49 2014 us=193797 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [149] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=148
Sun Sep  7 18:04:49 2014 us=313093 client2/1.2.3.4:52598 TCPv4_SERVER WRITE [69] to [AF_INET]1.2.3.4:52598: P_DATA_V1 kid=0 DATA len=68
Sun Sep  7 18:04:49 2014 us=344233 client1/2.3.4.5:50826 TCPv4_SERVER READ [101] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:04:49 2014 us=344314 client1/2.3.4.5:50826 TUN WRITE [52]
Sun Sep  7 18:04:49 2014 us=344577 client1/2.3.4.5:50826 TUN READ [1324]
Sun Sep  7 18:04:49 2014 us=344688 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [581] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=580
Sun Sep  7 18:04:49 2014 us=381373 client2/1.2.3.4:52598 TCPv4_SERVER READ [69] from [AF_INET]1.2.3.4:52598: P_DATA_V1 kid=0 DATA len=68
Sun Sep  7 18:04:49 2014 us=408457 client1/2.3.4.5:50826 TCPv4_SERVER READ [517] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=516
Sun Sep  7 18:04:49 2014 us=408588 client1/2.3.4.5:50826 TUN WRITE [1012]
Sun Sep  7 18:04:49 2014 us=446308 client1/2.3.4.5:50826 NOTE: --mute triggered...
Sun Sep  7 18:05:04 2014 us=78762 client1/2.3.4.5:50826 321 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 18:05:04 2014 us=78822 client1/2.3.4.5:50826 MULTI: Learn: 192.168.2.28 -> client1/2.3.4.5:50826
Sun Sep  7 18:05:04 2014 us=78850 client1/2.3.4.5:50826 TUN WRITE [52]
Sun Sep  7 18:05:04 2014 us=78911 client1/2.3.4.5:50826 TUN READ [52]
Sun Sep  7 18:05:04 2014 us=78950 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [101] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:05:04 2014 us=135894 client1/2.3.4.5:50826 TCPv4_SERVER READ [101] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:05:04 2014 us=135969 client1/2.3.4.5:50826 TUN WRITE [52]
Sun Sep  7 18:05:04 2014 us=136032 client1/2.3.4.5:50826 TCPv4_SERVER READ [101] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:05:04 2014 us=136060 client1/2.3.4.5:50826 TUN WRITE [52]
Sun Sep  7 18:05:04 2014 us=136098 client1/2.3.4.5:50826 TUN READ [52]
Sun Sep  7 18:05:04 2014 us=136132 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [101] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:05:04 2014 us=136155 client1/2.3.4.5:50826 TUN READ [52]
Sun Sep  7 18:05:04 2014 us=136179 client1/2.3.4.5:50826 TCPv4_SERVER WRITE [101] to [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=100
Sun Sep  7 18:05:04 2014 us=195700 client1/2.3.4.5:50826 TCPv4_SERVER READ [85] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=84
Sun Sep  7 18:05:04 2014 us=195770 client1/2.3.4.5:50826 TUN WRITE [40]
Sun Sep  7 18:05:04 2014 us=296805 client1/2.3.4.5:50826 TCPv4_SERVER READ [85] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=84
Sun Sep  7 18:05:04 2014 us=296890 client1/2.3.4.5:50826 TUN WRITE [40]
Sun Sep  7 18:05:04 2014 us=296935 client1/2.3.4.5:50826 TCPv4_SERVER READ [293] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=292
Sun Sep  7 18:05:04 2014 us=296967 client1/2.3.4.5:50826 TUN WRITE [235]
Sun Sep  7 18:05:04 2014 us=297060 client1/2.3.4.5:50826 TCPv4_SERVER READ [293] from [AF_INET]2.3.4.5:50826: P_DATA_V1 kid=0 DATA len=292
Sun Sep  7 18:05:04 2014 us=297097 client1/2.3.4.5:50826 TUN WRITE [235]
Sun Sep  7 18:05:04 2014 us=297147 client1/2.3.4.5:50826 TUN READ [40]
Sun Sep  7 18:05:04 2014 us=297178 client1/2.3.4.5:50826 NOTE: --mute triggered...

Corresponding client log:

Sun Sep  7 18:04:25 2014 us=979841 Current Parameter Settings:
Sun Sep  7 18:04:25 2014 us=979937   config = '/etc/openvpn/client.conf'
Sun Sep  7 18:04:25 2014 us=979956   mode = 0
Sun Sep  7 18:04:25 2014 us=979969   persist_config = DISABLED
Sun Sep  7 18:04:25 2014 us=979980   persist_mode = 1
Sun Sep  7 18:04:25 2014 us=979991   show_ciphers = DISABLED
Sun Sep  7 18:04:25 2014 us=980001   show_digests = DISABLED
Sun Sep  7 18:04:25 2014 us=980011   show_engines = DISABLED
Sun Sep  7 18:04:25 2014 us=980022   genkey = DISABLED
Sun Sep  7 18:04:25 2014 us=980033   key_pass_file = '[UNDEF]'
Sun Sep  7 18:04:25 2014 us=980043   show_tls_ciphers = DISABLED
Sun Sep  7 18:04:25 2014 us=980056 Connection profiles [default]:
Sun Sep  7 18:04:25 2014 us=980068   proto = tcp
Sun Sep  7 18:04:25 2014 us=980079   local = '[UNDEF]'
Sun Sep  7 18:04:25 2014 us=980089   local_port = 1194
Sun Sep  7 18:04:25 2014 us=980100   remote = '[UNDEF]'
Sun Sep  7 18:04:25 2014 us=980110   remote_port = 1194
Sun Sep  7 18:04:25 2014 us=980121   remote_float = DISABLED
Sun Sep  7 18:04:25 2014 us=980131   bind_defined = DISABLED
Sun Sep  7 18:04:25 2014 us=980141   bind_local = DISABLED
Sun Sep  7 18:04:25 2014 us=980151 NOTE: --mute triggered...
Sun Sep  7 18:04:25 2014 us=980176 313 variation(s) on previous 20 message(s) suppressed by --mute
Sun Sep  7 18:04:25 2014 us=980193 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 13 2014
Sun Sep  7 18:04:25 2014 us=980336 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Sep  7 18:04:25 2014 us=981545 LZO compression initialized
Sun Sep  7 18:04:25 2014 us=981642 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:04:25 2014 us=981696 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sun Sep  7 18:04:25 2014 us=982742 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:04:25 2014 us=982791 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 18:04:25 2014 us=982804 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 18:04:25 2014 us=982827 Local Options hash (VER=V4): '6f27195f'
Sun Sep  7 18:04:25 2014 us=982844 Expected Remote Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 18:04:25 2014 us=983369 Attempting to establish TCP connection with [AF_INET]192.168.1.100:1194 [nonblock]
Sun Sep  7 18:04:35 2014 us=984417 TCP: connect to [AF_INET]192.168.1.100:1194 failed, will try again in 5 seconds: Connection timed out
Sun Sep  7 18:04:35 2014 us=984702 SIGUSR1[soft,init_instance] received, process restarting
Sun Sep  7 18:04:35 2014 us=984726 Restart pause, 5 second(s)
Sun Sep  7 18:04:40 2014 us=984811 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Sep  7 18:04:40 2014 us=984891 Re-using SSL/TLS context
Sun Sep  7 18:04:40 2014 us=984936 LZO compression initialized
Sun Sep  7 18:04:40 2014 us=985035 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Sep  7 18:04:40 2014 us=985075 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sun Sep  7 18:04:41 2014 us=214624 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep  7 18:04:41 2014 us=214713 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Sun Sep  7 18:04:41 2014 us=214727 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-192-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Sun Sep  7 18:04:41 2014 us=214751 Local Options hash (VER=V4): '6f27195f'
Sun Sep  7 18:04:41 2014 us=214769 Expected Remote Options hash (VER=V4): 'e8bacd46'
Sun Sep  7 18:04:41 2014 us=214797 Attempting to establish TCP connection with [AF_INET]3.4.5.6:1194 [nonblock]
Sun Sep  7 18:04:42 2014 us=214981 TCP connection established with [AF_INET]3.4.5.6:1194
Sun Sep  7 18:04:42 2014 us=215033 TCPv4_CLIENT link local: [undef]
Sun Sep  7 18:04:42 2014 us=215049 TCPv4_CLIENT link remote: [AF_INET]3.4.5.6:1194
Sun Sep  7 18:04:42 2014 us=270979 TLS: Initial packet from [AF_INET]3.4.5.6:1194, sid=0bd708b7 be308f51
Sun Sep  7 18:04:43 2014 us=189013 VERIFY OK: depth=1, /C=DE/ST=XXX/L=XXX/O=XXX/OU=IT/CN=XXX/emailAddress=XXX
Sun Sep  7 18:04:43 2014 us=189328 Validating certificate key usage
Sun Sep  7 18:04:43 2014 us=189348 ++ Certificate has key usage  00a0, expects 00a0
Sun Sep  7 18:04:43 2014 us=189359 VERIFY KU OK
Sun Sep  7 18:04:43 2014 us=189374 Validating certificate extended key usage
Sun Sep  7 18:04:43 2014 us=189387 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Sep  7 18:04:43 2014 us=189398 VERIFY EKU OK
Sun Sep  7 18:04:43 2014 us=189409 VERIFY OK: depth=0, /C=DE/ST=XXX/L=XXX/O=XXX/CN=XXX/emailAddress=XXX
Sun Sep  7 18:04:45 2014 us=202710 Data Channel Encrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:04:45 2014 us=202759 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:04:45 2014 us=202773 Data Channel Decrypt: Cipher 'AES-192-CBC' initialized with 192 bit key
Sun Sep  7 18:04:45 2014 us=202786 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep  7 18:04:45 2014 us=202843 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep  7 18:04:45 2014 us=202879 [server] Peer Connection Initiated with [AF_INET]3.4.5.6:1194
Sun Sep  7 18:04:47 2014 us=615460 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Sep  7 18:04:47 2014 us=765931 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,dhcp-option DNS 192.168.1.100,dhcp-option DNS 192.168.1.104,dhcp-option DOMAIN example.com,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5'
Sun Sep  7 18:04:47 2014 us=766087 OPTIONS IMPORT: timers and/or timeouts modified
Sun Sep  7 18:04:47 2014 us=766104 OPTIONS IMPORT: --ifconfig/up options modified
Sun Sep  7 18:04:47 2014 us=766115 OPTIONS IMPORT: route options modified
Sun Sep  7 18:04:47 2014 us=766125 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Sep  7 18:04:47 2014 us=766309 ROUTE: default_gateway=UNDEF
Sun Sep  7 18:04:47 2014 us=766730 TUN/TAP device tun0 opened
Sun Sep  7 18:04:47 2014 us=766768 TUN/TAP TX queue length set to 100
Sun Sep  7 18:04:47 2014 us=766799 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Sep  7 18:04:47 2014 us=766850 /sbin/ifconfig tun0 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Sun Sep  7 18:04:47 2014 us=769052 /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.8.0.5
Sun Sep  7 18:04:47 2014 us=770375 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.5
Sun Sep  7 18:04:47 2014 us=771840 Initialization Sequence Completed

pia_user

I hope this helps.

Again, the issue is pretty simple:

With OpenVPN server 2.3.2, I can ping from a machine behind the OpenVPN server to the OpenVPN client, but not from the OpenVPN client to the machine behind the server. With OpenVPN server 2.2.1, the ping is working in both directions.

Thanks.