Can only reach VPN server on LAN from Android

chrisbb61

Server: OpenVPN 2.3.2 on Ubuntu
Client: OpenVPN for Android 0.6.17

It has taken me a lot of time to get this far.

I am able to connect to my VPN server from my Android Phone via 4G
I can ping my VPN server from my phone.
I cannot reach any other hosts on my lan.

I have read I have to add static routes on my VPN server to every host I want to reach on my lan.

Could somebody give me the specific commands I need to get this to work? I am so worn out working on this.

Server FQDN: mydomain.com
VPN Server LAN IP: 192.168.10.104
VPN Network: 10.20.30.0 255.255.255.0
LAN Network 192.168.10.0 255.255.255.0
Lan Client: 192.168.10.210

Android doesn't support tap so I cannot use bridging.

Server config

server 10.20.30.0 255.255.255.0
proto udp
dev tun
port 1194

tls-auth /etc/openvpn/ta.key
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem

push "redirect-gateway local def1"
push "route 10.20.30.0 255.255.255.0"
push "dhcp-option DNS 192.168.10.104"

duplicate-cn
verb 3
user nobody
group nogroup
persist-key
persist-tun
comp-lzo
keepalive 10 120
ping-timer-rem
status /var/log/openvpn-status.log

Client config

# Enables connection to GUI
management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold
setenv IV_GUI_VER "de.blinkt.openvpn 0.6.17" 
machine-readable-output
client
verb 4
connect-retry-max 5
connect-retry 5
resolv-retry 60
dev tun
remote mydomain.com 1194 udp
comp-lzo
route 192.168.10.0  255.255.255.0 vpn_gateway
remote-cert-tls server
# Use system proxy setting
management-query-proxy

Traffic

chrisbb61 wroteI have read I have to add static routes on my VPN server to every host I want to reach on my lan.

Actually, You need a route on your LAN default gateway to provide routing to the VPN network gateway.

I presume you have read this:
HOWTO: Expanding the scope of the VPN to include additional machines

chrisbb61 wroteCould somebody give me the specific commands I need to get this to work? I am so worn out working on this.

Depending to your equipment, it is difficult to give you the exact command you require.

Something like this:

route add Destination-Network-VPN-IP netmask 255.x.x.x Destination-Network-Gateway

Note: your LAN gateway could be any device on your network .. so you need to identify it.

chrisbb61

Thanks for the suggestion but I get the below error when trying to set the route. 10.20.30.0/24 is the VPN network and 192.168.10.104 is the IP of the VPN server.

root@ubuntu:/etc/openvpn# route add 10.20.30.0 netmask 255.255.255.0 192.168.10.104
route: netmask 000000ff doesn't make sense with host route

Not sure what I'm doing wrong.

--Thanks, Chris

chrisbb61

I wanted to add the log files:

Server log:

root@ubuntu:~# openvpn --config /etc/openvpn/server.conf
Tue Oct 21 20:37:41 2014 us=964621 Current Parameter Settings:
Tue Oct 21 20:37:41 2014 us=964783   config = '/etc/openvpn/server.conf'
Tue Oct 21 20:37:41 2014 us=964841   mode = 1
Tue Oct 21 20:37:41 2014 us=964895   persist_config = DISABLED
Tue Oct 21 20:37:41 2014 us=964952   persist_mode = 1
Tue Oct 21 20:37:41 2014 us=965010   show_ciphers = DISABLED
Tue Oct 21 20:37:41 2014 us=965068   show_digests = DISABLED
Tue Oct 21 20:37:41 2014 us=965126   show_engines = DISABLED
Tue Oct 21 20:37:41 2014 us=965186   genkey = DISABLED
Tue Oct 21 20:37:41 2014 us=965246   key_pass_file = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=965305   show_tls_ciphers = DISABLED
Tue Oct 21 20:37:41 2014 us=965363 Connection profiles [default]:
Tue Oct 21 20:37:41 2014 us=965423   proto = udp
Tue Oct 21 20:37:41 2014 us=965482   local = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=965543   local_port = 1194
Tue Oct 21 20:37:41 2014 us=965602   remote = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=965661   remote_port = 1194
Tue Oct 21 20:37:41 2014 us=965720   remote_float = DISABLED
Tue Oct 21 20:37:41 2014 us=965812   bind_defined = DISABLED
Tue Oct 21 20:37:41 2014 us=965873   bind_local = ENABLED
Tue Oct 21 20:37:41 2014 us=965933   connect_retry_seconds = 5
Tue Oct 21 20:37:41 2014 us=965992   connect_timeout = 10
Tue Oct 21 20:37:41 2014 us=966051   connect_retry_max = 0
Tue Oct 21 20:37:41 2014 us=966110   socks_proxy_server = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=966178   socks_proxy_port = 0
Tue Oct 21 20:37:41 2014 us=966239   socks_proxy_retry = DISABLED
Tue Oct 21 20:37:41 2014 us=966298   tun_mtu = 1500
Tue Oct 21 20:37:41 2014 us=966367   tun_mtu_defined = ENABLED
Tue Oct 21 20:37:41 2014 us=966425   link_mtu = 1500
Tue Oct 21 20:37:41 2014 us=966481   link_mtu_defined = DISABLED
Tue Oct 21 20:37:41 2014 us=966538   tun_mtu_extra = 0
Tue Oct 21 20:37:41 2014 us=966597   tun_mtu_extra_defined = DISABLED
Tue Oct 21 20:37:41 2014 us=966657   mtu_discover_type = -1
Tue Oct 21 20:37:41 2014 us=966716   fragment = 0
Tue Oct 21 20:37:41 2014 us=966775   mssfix = 1450
Tue Oct 21 20:37:41 2014 us=966834   explicit_exit_notification = 0
Tue Oct 21 20:37:41 2014 us=966901 Connection profiles END
Tue Oct 21 20:37:41 2014 us=966960   remote_random = DISABLED
Tue Oct 21 20:37:41 2014 us=967021   ipchange = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=967079   dev = 'tun'
Tue Oct 21 20:37:41 2014 us=967137   dev_type = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=967194   dev_node = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=967252   lladdr = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=967311   topology = 1
Tue Oct 21 20:37:41 2014 us=967369   tun_ipv6 = DISABLED
Tue Oct 21 20:37:41 2014 us=967427   ifconfig_local = '10.20.30.1'
Tue Oct 21 20:37:41 2014 us=967485   ifconfig_remote_netmask = '10.20.30.2'
Tue Oct 21 20:37:41 2014 us=967544   ifconfig_noexec = DISABLED
Tue Oct 21 20:37:41 2014 us=967604   ifconfig_nowarn = DISABLED
Tue Oct 21 20:37:41 2014 us=967662   ifconfig_ipv6_local = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=967721   ifconfig_ipv6_netbits = 0
Tue Oct 21 20:37:41 2014 us=967779   ifconfig_ipv6_remote = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=967839   shaper = 0
Tue Oct 21 20:37:41 2014 us=967897   mtu_test = 0
Tue Oct 21 20:37:41 2014 us=967954   mlock = DISABLED
Tue Oct 21 20:37:41 2014 us=968013   keepalive_ping = 10
Tue Oct 21 20:37:41 2014 us=968072   keepalive_timeout = 120
Tue Oct 21 20:37:41 2014 us=968130   inactivity_timeout = 0
Tue Oct 21 20:37:41 2014 us=968189   ping_send_timeout = 10
Tue Oct 21 20:37:41 2014 us=968247   ping_rec_timeout = 240
Tue Oct 21 20:37:41 2014 us=968306   ping_rec_timeout_action = 2
Tue Oct 21 20:37:41 2014 us=968363   ping_timer_remote = ENABLED
Tue Oct 21 20:37:41 2014 us=968421   remap_sigusr1 = 0
Tue Oct 21 20:37:41 2014 us=968480   persist_tun = ENABLED
Tue Oct 21 20:37:41 2014 us=968539   persist_local_ip = DISABLED
Tue Oct 21 20:37:41 2014 us=968597   persist_remote_ip = DISABLED
Tue Oct 21 20:37:41 2014 us=968656   persist_key = ENABLED
Tue Oct 21 20:37:41 2014 us=968714   passtos = DISABLED
Tue Oct 21 20:37:41 2014 us=968773   resolve_retry_seconds = 1000000000
Tue Oct 21 20:37:41 2014 us=968833   username = 'nobody'
Tue Oct 21 20:37:41 2014 us=968892   groupname = 'nogroup'
Tue Oct 21 20:37:41 2014 us=968951   chroot_dir = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=969009   cd_dir = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=969066   writepid = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=969124   up_script = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=969183   down_script = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=969243   down_pre = DISABLED
Tue Oct 21 20:37:41 2014 us=969301   up_restart = DISABLED
Tue Oct 21 20:37:41 2014 us=969359   up_delay = DISABLED
Tue Oct 21 20:37:41 2014 us=969418   daemon = DISABLED
Tue Oct 21 20:37:41 2014 us=969476   inetd = 0
Tue Oct 21 20:37:41 2014 us=969532   log = DISABLED
Tue Oct 21 20:37:41 2014 us=969591   suppress_timestamps = DISABLED
Tue Oct 21 20:37:41 2014 us=969650   nice = 0
Tue Oct 21 20:37:41 2014 us=969711   verbosity = 4
Tue Oct 21 20:37:41 2014 us=969819   mute = 0
Tue Oct 21 20:37:41 2014 us=969873   gremlin = 0
Tue Oct 21 20:37:41 2014 us=969900   status_file = '/var/log/openvpn-status.log'
Tue Oct 21 20:37:41 2014 us=969926   status_file_version = 1
Tue Oct 21 20:37:41 2014 us=969952   status_file_update_freq = 60
Tue Oct 21 20:37:41 2014 us=969977   occ = ENABLED
Tue Oct 21 20:37:41 2014 us=970003   rcvbuf = 65536
Tue Oct 21 20:37:41 2014 us=970030   sndbuf = 65536
Tue Oct 21 20:37:41 2014 us=970056   mark = 0
Tue Oct 21 20:37:41 2014 us=970083   sockflags = 0
Tue Oct 21 20:37:41 2014 us=970109   fast_io = DISABLED
Tue Oct 21 20:37:41 2014 us=970136   lzo = 7
Tue Oct 21 20:37:41 2014 us=970162   route_script = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970190   route_default_gateway = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970217   route_default_metric = 0
Tue Oct 21 20:37:41 2014 us=970244   route_noexec = DISABLED
Tue Oct 21 20:37:41 2014 us=970270   route_delay = 0
Tue Oct 21 20:37:41 2014 us=970296   route_delay_window = 30
Tue Oct 21 20:37:41 2014 us=970323   route_delay_defined = DISABLED
Tue Oct 21 20:37:41 2014 us=970350   route_nopull = DISABLED
Tue Oct 21 20:37:41 2014 us=970377   route_gateway_via_dhcp = DISABLED
Tue Oct 21 20:37:41 2014 us=970403   max_routes = 100
Tue Oct 21 20:37:41 2014 us=970429   allow_pull_fqdn = DISABLED
Tue Oct 21 20:37:41 2014 us=970457   route 10.20.30.0/255.255.255.0/nil/nil
Tue Oct 21 20:37:41 2014 us=970486   management_addr = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970513   management_port = 0
Tue Oct 21 20:37:41 2014 us=970539   management_user_pass = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970567   management_log_history_cache = 250
Tue Oct 21 20:37:41 2014 us=970594   management_echo_buffer_size = 100
Tue Oct 21 20:37:41 2014 us=970621   management_write_peer_info_file = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970648   management_client_user = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970674   management_client_group = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970701   management_flags = 0
Tue Oct 21 20:37:41 2014 us=970733   shared_secret_file = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=970761   key_direction = 0
Tue Oct 21 20:37:41 2014 us=970786   ciphername_defined = ENABLED
Tue Oct 21 20:37:41 2014 us=970813   ciphername = 'BF-CBC'
Tue Oct 21 20:37:41 2014 us=970839   authname_defined = ENABLED
Tue Oct 21 20:37:41 2014 us=970866   authname = 'SHA1'
Tue Oct 21 20:37:41 2014 us=970892   prng_hash = 'SHA1'
Tue Oct 21 20:37:41 2014 us=970919   prng_nonce_secret_len = 16
Tue Oct 21 20:37:41 2014 us=970945   keysize = 0
Tue Oct 21 20:37:41 2014 us=970972   engine = DISABLED
Tue Oct 21 20:37:41 2014 us=970996   replay = ENABLED
Tue Oct 21 20:37:41 2014 us=971022   mute_replay_warnings = DISABLED
Tue Oct 21 20:37:41 2014 us=971049   replay_window = 64
Tue Oct 21 20:37:41 2014 us=971076   replay_time = 15
Tue Oct 21 20:37:41 2014 us=971102   packet_id_file = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971128   use_iv = ENABLED
Tue Oct 21 20:37:41 2014 us=971155   test_crypto = DISABLED
Tue Oct 21 20:37:41 2014 us=971182   tls_server = ENABLED
Tue Oct 21 20:37:41 2014 us=971209   tls_client = DISABLED
Tue Oct 21 20:37:41 2014 us=971242   key_method = 2
Tue Oct 21 20:37:41 2014 us=971268   ca_file = '/etc/openvpn/ca.crt'
Tue Oct 21 20:37:41 2014 us=971295   ca_path = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971321   dh_file = '/etc/openvpn/dh1024.pem'
Tue Oct 21 20:37:41 2014 us=971348   cert_file = '/etc/openvpn/server.crt'
Tue Oct 21 20:37:41 2014 us=971375   priv_key_file = '/etc/openvpn/server.key'
Tue Oct 21 20:37:41 2014 us=971402   pkcs12_file = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971428   cipher_list = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971455   tls_verify = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971480   tls_export_cert = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971507   verify_x509_type = 0
Tue Oct 21 20:37:41 2014 us=971533   verify_x509_name = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971560   crl_file = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=971587   ns_cert_type = 0
Tue Oct 21 20:37:41 2014 us=971613   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971640   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971666   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971691   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971717   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971744   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971771   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971800   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971825   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971851   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971878   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971904   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971931   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971956   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=971983   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=972009   remote_cert_ku[i] = 0
Tue Oct 21 20:37:41 2014 us=972040   remote_cert_eku = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=972066   ssl_flags = 0
Tue Oct 21 20:37:41 2014 us=972092   tls_timeout = 2
Tue Oct 21 20:37:41 2014 us=972119   renegotiate_bytes = 0
Tue Oct 21 20:37:41 2014 us=972146   renegotiate_packets = 0
Tue Oct 21 20:37:41 2014 us=972173   renegotiate_seconds = 3600
Tue Oct 21 20:37:41 2014 us=972200   handshake_window = 60
Tue Oct 21 20:37:41 2014 us=972227   transition_window = 3600
Tue Oct 21 20:37:41 2014 us=972254   single_session = DISABLED
Tue Oct 21 20:37:41 2014 us=972284   push_peer_info = DISABLED
Tue Oct 21 20:37:41 2014 us=972311   tls_exit = DISABLED
Tue Oct 21 20:37:41 2014 us=972337   tls_auth_file = '/etc/openvpn/ta.key'
Tue Oct 21 20:37:41 2014 us=972365   pkcs11_protected_authentication = DISABLED
Tue Oct 21 20:37:41 2014 us=973212   pkcs11_private_mode = 00000000
Tue Oct 21 20:37:41 2014 us=973238   pkcs11_cert_private = DISABLED
Tue Oct 21 20:37:41 2014 us=973675   pkcs11_pin_cache_period = -1
Tue Oct 21 20:37:41 2014 us=973702   pkcs11_id = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=973728   pkcs11_id_management = DISABLED
Tue Oct 21 20:37:41 2014 us=973772   server_network = 10.20.30.0
Tue Oct 21 20:37:41 2014 us=973802   server_netmask = 255.255.255.0
Tue Oct 21 20:37:41 2014 us=973836   server_network_ipv6 = ::
Tue Oct 21 20:37:41 2014 us=973864   server_netbits_ipv6 = 0
Tue Oct 21 20:37:41 2014 us=973893   server_bridge_ip = 0.0.0.0
Tue Oct 21 20:37:41 2014 us=973922   server_bridge_netmask = 0.0.0.0
Tue Oct 21 20:37:41 2014 us=973950   server_bridge_pool_start = 0.0.0.0
Tue Oct 21 20:37:41 2014 us=973978   server_bridge_pool_end = 0.0.0.0
Tue Oct 21 20:37:41 2014 us=974004   push_entry = 'redirect-gateway def1'
Tue Oct 21 20:37:41 2014 us=974031   push_entry = 'redirect-gateway def1 bypass-dhcp'
Tue Oct 21 20:37:41 2014 us=974058   push_entry = 'route 10.20.30.0 255.255.255.0'
Tue Oct 21 20:37:41 2014 us=974085   push_entry = 'dhcp-option DNS 192.168.10.104'
Tue Oct 21 20:37:41 2014 us=974112   push_entry = 'route 10.20.30.1'
Tue Oct 21 20:37:41 2014 us=974138   push_entry = 'topology net30'
Tue Oct 21 20:37:41 2014 us=974165   push_entry = 'ping 10'
Tue Oct 21 20:37:41 2014 us=974195   push_entry = 'ping-restart 120'
Tue Oct 21 20:37:41 2014 us=974222   ifconfig_pool_defined = ENABLED
Tue Oct 21 20:37:41 2014 us=974250   ifconfig_pool_start = 10.20.30.4
Tue Oct 21 20:37:41 2014 us=974279   ifconfig_pool_end = 10.20.30.251
Tue Oct 21 20:37:41 2014 us=974308   ifconfig_pool_netmask = 0.0.0.0
Tue Oct 21 20:37:41 2014 us=974335   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=974363   ifconfig_pool_persist_refresh_freq = 600
Tue Oct 21 20:37:41 2014 us=974389   ifconfig_ipv6_pool_defined = DISABLED
Tue Oct 21 20:37:41 2014 us=974417   ifconfig_ipv6_pool_base = ::
Tue Oct 21 20:37:41 2014 us=974444   ifconfig_ipv6_pool_netbits = 0
Tue Oct 21 20:37:41 2014 us=974471   n_bcast_buf = 256
Tue Oct 21 20:37:41 2014 us=974498   tcp_queue_limit = 64
Tue Oct 21 20:37:41 2014 us=974524   real_hash_size = 256
Tue Oct 21 20:37:41 2014 us=974551   virtual_hash_size = 256
Tue Oct 21 20:37:41 2014 us=974577   client_connect_script = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=974605   learn_address_script = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=974631   client_disconnect_script = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=974657   client_config_dir = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=974688   ccd_exclusive = DISABLED
Tue Oct 21 20:37:41 2014 us=974715   tmp_dir = '/tmp'
Tue Oct 21 20:37:41 2014 us=974742   push_ifconfig_defined = DISABLED
Tue Oct 21 20:37:41 2014 us=974770   push_ifconfig_local = 0.0.0.0
Tue Oct 21 20:37:41 2014 us=974798   push_ifconfig_remote_netmask = 0.0.0.0
Tue Oct 21 20:37:41 2014 us=974825   push_ifconfig_ipv6_defined = DISABLED
Tue Oct 21 20:37:41 2014 us=974854   push_ifconfig_ipv6_local = ::/0
Tue Oct 21 20:37:41 2014 us=974885   push_ifconfig_ipv6_remote = ::
Tue Oct 21 20:37:41 2014 us=974912   enable_c2c = DISABLED
Tue Oct 21 20:37:41 2014 us=974938   duplicate_cn = ENABLED
Tue Oct 21 20:37:41 2014 us=974965   cf_max = 0
Tue Oct 21 20:37:41 2014 us=974991   cf_per = 0
Tue Oct 21 20:37:41 2014 us=975017   max_clients = 1024
Tue Oct 21 20:37:41 2014 us=975043   max_routes_per_client = 256
Tue Oct 21 20:37:41 2014 us=975068   auth_user_pass_verify_script = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=975094   auth_user_pass_verify_script_via_file = DISABLED
Tue Oct 21 20:37:41 2014 us=975121   port_share_host = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=975148   port_share_port = 0
Tue Oct 21 20:37:41 2014 us=975175   client = DISABLED
Tue Oct 21 20:37:41 2014 us=975200   pull = DISABLED
Tue Oct 21 20:37:41 2014 us=975233   auth_user_pass_file = '[UNDEF]'
Tue Oct 21 20:37:41 2014 us=975287 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb  4 2014
Tue Oct 21 20:37:41 2014 us=979814 Diffie-Hellman initialized with 1024 bit key
Tue Oct 21 20:37:41 2014 us=980919 Control Channel Authentication: using '/etc/openvpn/ta.key' as a OpenVPN static key file
Tue Oct 21 20:37:41 2014 us=980960 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 21 20:37:41 2014 us=980987 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 21 20:37:41 2014 us=981020 TLS-Auth MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Oct 21 20:37:41 2014 us=981072 Socket Buffers: R=[212992->131072] S=[212992->131072]
Tue Oct 21 20:37:41 2014 us=981309 ROUTE_GATEWAY 192.168.10.1/255.255.255.0 IFACE=br0 HWADDR=c8:0a:a9:1e:62:7a
Tue Oct 21 20:37:41 2014 us=981835 TUN/TAP device tun0 opened
Tue Oct 21 20:37:41 2014 us=981896 TUN/TAP TX queue length set to 100
Tue Oct 21 20:37:41 2014 us=981962 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Oct 21 20:37:41 2014 us=982038 /sbin/ip link set dev tun0 up mtu 1500
Tue Oct 21 20:37:41 2014 us=984669 /sbin/ip addr add dev tun0 local 10.20.30.1 peer 10.20.30.2
Tue Oct 21 20:37:41 2014 us=987546 /sbin/ip route add 10.20.30.0/24 via 10.20.30.2
Tue Oct 21 20:37:41 2014 us=990332 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Oct 21 20:37:41 2014 us=991669 GID set to nogroup
Tue Oct 21 20:37:41 2014 us=991765 UID set to nobody
Tue Oct 21 20:37:41 2014 us=991825 UDPv4 link local (bound): [undef]
Tue Oct 21 20:37:41 2014 us=991874 UDPv4 link remote: [undef]
Tue Oct 21 20:37:41 2014 us=991944 MULTI: multi_init called, r=256 v=256
Tue Oct 21 20:37:41 2014 us=992054 IFCONFIG POOL: base=10.20.30.4 size=62, ipv6=0
Tue Oct 21 20:37:41 2014 us=992160 Initialization Sequence Completed

Client log:

2014-10-21 21:14:57 Running on HTC6525LVW (MSM8974) htc, Android API 19, version 0.6.17, official build
2014-10-21 21:14:57 Log cleared.
2014-10-21 21:15:00 Building configuration???
2014-10-21 21:15:02 started Socket Thread
2014-10-21 21:15:02 Network Status: CONNECTED LTE to mobile vzwinternet
2014-10-21 21:15:02 P:Initializing Google Breakpad!
2014-10-21 21:15:02 Current Parameter Settings:
2014-10-21 21:15:02   config = '/data/data/de.blinkt.openvpn/cache/android.conf'
2014-10-21 21:15:02   mode = 0
2014-10-21 21:15:02   show_ciphers = DISABLED
2014-10-21 21:15:02   show_digests = DISABLED
2014-10-21 21:15:02   show_engines = DISABLED
2014-10-21 21:15:02   genkey = DISABLED
2014-10-21 21:15:02   key_pass_file = '[UNDEF]'
2014-10-21 21:15:02   show_tls_ciphers = DISABLED
2014-10-21 21:15:02   connect_retry_max = 5
2014-10-21 21:15:02 Connection profiles [0]:
2014-10-21 21:15:02   proto = udp
2014-10-21 21:15:02   local = '[UNDEF]'
2014-10-21 21:15:02   local_port = '1194'
2014-10-21 21:15:02   remote = 'chrisbb61.com'
2014-10-21 21:15:02   remote_port = '1194'
2014-10-21 21:15:02   remote_float = DISABLED
2014-10-21 21:15:02   bind_defined = DISABLED
2014-10-21 21:15:02   bind_local = ENABLED
2014-10-21 21:15:02   bind_ipv6_only = DISABLED
2014-10-21 21:15:02   connect_retry_seconds = 5
2014-10-21 21:15:02   connect_timeout = 10
2014-10-21 21:15:02   socks_proxy_server = '[UNDEF]'
2014-10-21 21:15:02   socks_proxy_port = '[UNDEF]'
2014-10-21 21:15:02   socks_proxy_retry = DISABLED
2014-10-21 21:15:02   tun_mtu = 1500
2014-10-21 21:15:02   tun_mtu_defined = ENABLED
2014-10-21 21:15:02   link_mtu = 1500
2014-10-21 21:15:02   link_mtu_defined = DISABLED
2014-10-21 21:15:02   tun_mtu_extra = 0
2014-10-21 21:15:02   tun_mtu_extra_defined = DISABLED
2014-10-21 21:15:02   mtu_discover_type = -1
2014-10-21 21:15:02   fragment = 0
2014-10-21 21:15:02   mssfix = 1450
2014-10-21 21:15:02   explicit_exit_notification = 0
2014-10-21 21:15:02 Connection profiles END
2014-10-21 21:15:02   remote_random = DISABLED
2014-10-21 21:15:02   ipchange = '[UNDEF]'
2014-10-21 21:15:02   dev = 'tun'
2014-10-21 21:15:02   dev_type = '[UNDEF]'
2014-10-21 21:15:02   dev_node = '[UNDEF]'
2014-10-21 21:15:02   lladdr = '[UNDEF]'
2014-10-21 21:15:02   topology = 1
2014-10-21 21:15:02   tun_ipv6 = DISABLED
2014-10-21 21:15:02   ifconfig_local = '[UNDEF]'
2014-10-21 21:15:02   ifconfig_remote_netmask = '[UNDEF]'
2014-10-21 21:15:02   ifconfig_noexec = DISABLED
2014-10-21 21:15:02   ifconfig_nowarn = DISABLED
2014-10-21 21:15:02   ifconfig_ipv6_local = '[UNDEF]'
2014-10-21 21:15:02   ifconfig_ipv6_netbits = 0
2014-10-21 21:15:02   ifconfig_ipv6_remote = '[UNDEF]'
2014-10-21 21:15:02   shaper = 0
2014-10-21 21:15:02   mtu_test = 0
2014-10-21 21:15:02   mlock = DISABLED
2014-10-21 21:15:02   keepalive_ping = 0
2014-10-21 21:15:02   keepalive_timeout = 0
2014-10-21 21:15:02   inactivity_timeout = 0
2014-10-21 21:15:02   ping_send_timeout = 0
2014-10-21 21:15:02   ping_rec_timeout = 0
2014-10-21 21:15:02   ping_rec_timeout_action = 0
2014-10-21 21:15:02   ping_timer_remote = DISABLED
2014-10-21 21:15:02   remap_sigusr1 = 0
2014-10-21 21:15:02   persist_tun = DISABLED
2014-10-21 21:15:02   persist_local_ip = DISABLED
2014-10-21 21:15:02   persist_remote_ip = DISABLED
2014-10-21 21:15:02   persist_key = DISABLED
2014-10-21 21:15:02   passtos = DISABLED
2014-10-21 21:15:02   resolve_retry_seconds = 60
2014-10-21 21:15:02   resolve_in_advance = DISABLED
2014-10-21 21:15:02   username = '[UNDEF]'
2014-10-21 21:15:02   groupname = '[UNDEF]'
2014-10-21 21:15:02   chroot_dir = '[UNDEF]'
2014-10-21 21:15:02   cd_dir = '[UNDEF]'
2014-10-21 21:15:02   writepid = '[UNDEF]'
2014-10-21 21:15:02   up_script = '[UNDEF]'
2014-10-21 21:15:02   down_script = '[UNDEF]'
2014-10-21 21:15:02   down_pre = DISABLED
2014-10-21 21:15:02   up_restart = DISABLED
2014-10-21 21:15:02   up_delay = DISABLED
2014-10-21 21:15:02   daemon = DISABLED
2014-10-21 21:15:02   inetd = 0
2014-10-21 21:15:02   log = DISABLED
2014-10-21 21:15:02   suppress_timestamps = DISABLED
2014-10-21 21:15:02   machine_readable_output = ENABLED
2014-10-21 21:15:02   nice = 0
2014-10-21 21:15:02   verbosity = 4
2014-10-21 21:15:02   mute = 0
2014-10-21 21:15:02   gremlin = 0
2014-10-21 21:15:02   status_file = '[UNDEF]'
2014-10-21 21:15:02   status_file_version = 1
2014-10-21 21:15:02   status_file_update_freq = 60
2014-10-21 21:15:02   occ = ENABLED
2014-10-21 21:15:02   rcvbuf = 65536
2014-10-21 21:15:02   sndbuf = 65536
2014-10-21 21:15:02   sockflags = 0
2014-10-21 21:15:02   fast_io = DISABLED
2014-10-21 21:15:02   comp.alg = 2
2014-10-21 21:15:02   comp.flags = 1
2014-10-21 21:15:02   route_script = '[UNDEF]'
2014-10-21 21:15:02   route_default_gateway = '[UNDEF]'
2014-10-21 21:15:02   route_default_metric = 0
2014-10-21 21:15:02   route_noexec = DISABLED
2014-10-21 21:15:02   route_delay = 0
2014-10-21 21:15:02   route_delay_window = 30
2014-10-21 21:15:02   route_delay_defined = DISABLED
2014-10-21 21:15:02   route_nopull = DISABLED
2014-10-21 21:15:02   route_gateway_via_dhcp = DISABLED
2014-10-21 21:15:02   allow_pull_fqdn = DISABLED
2014-10-21 21:15:02   route 192.168.10.0/255.255.255.0/vpn_gateway/nil
2014-10-21 21:15:02   management_addr = '/data/data/de.blinkt.openvpn/cache/mgmtsocket'
2014-10-21 21:15:02   management_port = 'unix'
2014-10-21 21:15:02   management_user_pass = '[UNDEF]'
2014-10-21 21:15:02   management_log_history_cache = 250
2014-10-21 21:15:02   management_echo_buffer_size = 100
2014-10-21 21:15:02   management_write_peer_info_file = '[UNDEF]'
2014-10-21 21:15:02   management_client_user = '[UNDEF]'
2014-10-21 21:15:02   management_client_group = '[UNDEF]'
2014-10-21 21:15:02   management_flags = 294
2014-10-21 21:15:02   shared_secret_file = '[UNDEF]'
2014-10-21 21:15:02   key_direction = 0
2014-10-21 21:15:02   ciphername_defined = ENABLED
2014-10-21 21:15:02   ciphername = 'BF-CBC'
2014-10-21 21:15:02   authname_defined = ENABLED
2014-10-21 21:15:02   authname = 'SHA1'
2014-10-21 21:15:02   prng_hash = 'SHA1'
2014-10-21 21:15:02   prng_nonce_secret_len = 16
2014-10-21 21:15:02   keysize = 0
2014-10-21 21:15:02   engine = DISABLED
2014-10-21 21:15:02   replay = ENABLED
2014-10-21 21:15:02   mute_replay_warnings = DISABLED
2014-10-21 21:15:02   replay_window = 64
2014-10-21 21:15:02   replay_time = 15
2014-10-21 21:15:02   packet_id_file = '[UNDEF]'
2014-10-21 21:15:02   use_iv = ENABLED
2014-10-21 21:15:02   test_crypto = DISABLED
2014-10-21 21:15:02   tls_server = DISABLED
2014-10-21 21:15:02   tls_client = ENABLED
2014-10-21 21:15:02   key_method = 2
2014-10-21 21:15:02   ca_file = '[[INLINE]]'
2014-10-21 21:15:02   ca_path = '[UNDEF]'
2014-10-21 21:15:02   dh_file = '[UNDEF]'
2014-10-21 21:15:02   cert_file = '[[INLINE]]'
2014-10-21 21:15:02   priv_key_file = '[[INLINE]]'
2014-10-21 21:15:02   pkcs12_file = '[UNDEF]'
2014-10-21 21:15:02   cipher_list = '[UNDEF]'
2014-10-21 21:15:02   tls_verify = '[UNDEF]'
2014-10-21 21:15:02   tls_export_cert = '[UNDEF]'
2014-10-21 21:15:02   verify_x509_type = 0
2014-10-21 21:15:02   verify_x509_name = '[UNDEF]'
2014-10-21 21:15:02   crl_file = '[UNDEF]'
2014-10-21 21:15:02   ns_cert_type = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 160
2014-10-21 21:15:02   remote_cert_ku[i] = 136
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_ku[i] = 0
2014-10-21 21:15:02   remote_cert_eku = 'TLS Web Server Authentication'
2014-10-21 21:15:02   ssl_flags = 0
2014-10-21 21:15:02   tls_timeout = 2
2014-10-21 21:15:02   renegotiate_bytes = 0
2014-10-21 21:15:02   renegotiate_packets = 0
2014-10-21 21:15:02   renegotiate_seconds = 3600
2014-10-21 21:15:02   handshake_window = 60
2014-10-21 21:15:02   transition_window = 3600
2014-10-21 21:15:02   single_session = DISABLED
2014-10-21 21:15:02   push_peer_info = DISABLED
2014-10-21 21:15:02   tls_exit = DISABLED
2014-10-21 21:15:02   tls_auth_file = '[[INLINE]]'
2014-10-21 21:15:02   client = ENABLED
2014-10-21 21:15:02   pull = ENABLED
2014-10-21 21:15:02   auth_user_pass_file = '[UNDEF]'
2014-10-21 21:15:02 OpenVPN 2.4-icsopenvpn [git:icsopenvpn_615-c430ab0e0cef9994] android-14-armeabi-v7a [SSL (OpenSSL)] [LZO] [SNAPPY] [LZ4] [EPOLL] [MH] [IPv6] built on Jun 24 2014
2014-10-21 21:15:02 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.06
2014-10-21 21:15:02 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket
2014-10-21 21:15:02 MANAGEMENT: CMD 'hold release'
2014-10-21 21:15:02 Control Channel Authentication: tls-auth using INLINE static key file
2014-10-21 21:15:02 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-10-21 21:15:02 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-10-21 21:15:02 LZO compression initializing
2014-10-21 21:15:02 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
2014-10-21 21:15:02 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:393 ET:0 EL:0 ]
2014-10-21 21:15:02 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
2014-10-21 21:15:02 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
2014-10-21 21:15:02 Local Options hash (VER=V4): '02af3434'
2014-10-21 21:15:02 Expected Remote Options hash (VER=V4): '3f08d474'
2014-10-21 21:15:02 TCP/UDP: Preserving recently used remote address: [AF_INET]69.140.221.39:1194
2014-10-21 21:15:02 Socket Buffers: R=[163840->131072] S=[163840->131072]
2014-10-21 21:15:02 Protecting socket fd 4
2014-10-21 21:15:02 MANAGEMENT: CMD 'bytecount 2'
2014-10-21 21:15:02 MANAGEMENT: CMD 'state on'
2014-10-21 21:15:02 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2014-10-21 21:15:02 UDP link local (bound): [AF_INET][undef]:1194
2014-10-21 21:15:02 UDP link remote: [AF_INET]69.140.221.39:1194
2014-10-21 21:15:02 MANAGEMENT: >STATE:1413940502,WAIT,,,
2014-10-21 21:15:02 MANAGEMENT: >STATE:1413940502,AUTH,,,
2014-10-21 21:15:02 TLS: Initial packet from [AF_INET]69.140.221.39:1194, sid=42bdb30b 8185a40f
2014-10-21 21:15:02 VERIFY OK: depth=1, C=US, ST=MD, L=Gaithersburg, O=chrisbb61.com, OU=BOYDHOUSE, CN=chrisbb61, name=EasyRSA, emailAddress=chrisbb61@chrisbb61.com
2014-10-21 21:15:02 Validating certificate key usage
2014-10-21 21:15:02 ++ Certificate has key usage  00a0, expects 00a0
2014-10-21 21:15:02 VERIFY KU OK
2014-10-21 21:15:02 Validating certificate extended key usage
2014-10-21 21:15:02 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2014-10-21 21:15:02 VERIFY EKU OK
2014-10-21 21:15:02 VERIFY OK: depth=0, C=US, ST=MD, L=Gaithersburg, O=chrisbb61.com, OU=BOYDHOUSE, CN=server, name=EasyRSA, emailAddress=chrisbb61@chrisbb61.com
2014-10-21 21:15:03 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-10-21 21:15:03 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-10-21 21:15:03 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2014-10-21 21:15:03 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2014-10-21 21:15:03 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2014-10-21 21:15:03 [server] Peer Connection Initiated with [AF_INET]69.140.221.39:1194
2014-10-21 21:15:04 MANAGEMENT: >STATE:1413940504,GET_CONFIG,,,
2014-10-21 21:15:05 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2014-10-21 21:15:05 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 192.168.10.104,route 10.20.30.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.20.30.6 10.20.30.5'
2014-10-21 21:15:05 OPTIONS IMPORT: timers and/or timeouts modified
2014-10-21 21:15:05 OPTIONS IMPORT: --ifconfig/up options modified
2014-10-21 21:15:05 OPTIONS IMPORT: route options modified
2014-10-21 21:15:05 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2014-10-21 21:15:05 ROUTE_GATEWAY 10.184.146.249/255.255.255.252 IFACE=rmnet0 HWADDR=00:00:00:00:00:00
2014-10-21 21:15:05 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2014-10-21 21:15:05 MANAGEMENT: >STATE:1413940505,ASSIGN_IP,,10.20.30.6,
2014-10-21 21:15:05 Got interface information 10.20.30.6 and 10.20.30.5, assuming second address is peer address of remote. Using /32 netmask for local IP. Mode given by OpenVPN is "net30".
2014-10-21 21:15:05 MANAGEMENT: CMD 'needok 'IFCONFIG' ok'
2014-10-21 21:15:05 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-10-21 21:15:05 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-10-21 21:15:05 MANAGEMENT: >STATE:1413940505,ADD_ROUTES,,,
2014-10-21 21:15:05 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-10-21 21:15:05 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2014-10-21 21:15:05 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2014-10-21 21:15:05 MANAGEMENT: CMD 'needok 'PERSIST_TUN_ACTION' OPEN_BEFORE_CLOSE'
2014-10-21 21:15:05 Opening tun interface:
2014-10-21 21:15:05 Local IPv4: 10.20.30.6/32 IPv6: null MTU: 1500
2014-10-21 21:15:05 DNS Server: 192.168.10.104, Domain: null
2014-10-21 21:15:05 Routes: 0.0.0.0/1, 10.20.30.0/24, 128.0.0.0/1, 192.168.10.0/24 
2014-10-21 21:15:05 Routes excluded:  
2014-10-21 21:15:05 VpnService routes installed: 0.0.0.0/1, 128.0.0.0/1 
2014-10-21 21:15:06 MANAGEMENT: CMD 'needok 'OPENTUN' ok'
2014-10-21 21:15:06 Initialization Sequence Completed
2014-10-21 21:15:06 MANAGEMENT: >STATE:1413940506,CONNECTED,SUCCESS,10.20.30.6,69.140.221.39

Traffic

chrisbb61 wroteoot@ubuntu:/etc/openvpn# route add 10.20.30.0 netmask 255.255.255.0 192.168.10.104
route: netmask 000000ff doesn't make sense with host route

Is this machine your LAN default gateway and your VPN server ?

chrisbb61

192.168.10.104 is my VPN server. I was thinking since IP forward is enabled it would function as the gateway to my LAN.

192.168.10.1 is my default gateway to the Internet