Need little help with brigdged connection

ptulpen

Hello,
I want to connect 2 locations of a Branch via openVPN in bridge mode. (all pcs in the same network)
Between this locations is a fiberglass connection which is unsecure (therefore the VPN)
I must use Windows 2008R2 Servers with 2 Network cards to build the edges of the bridge.
This it what it looks like as network sheme:

I already have the config, based on some online tutorials, but I so not get it working
my server config:

local 10.16.6.85
mode server
tls-server
port 5000
proto udp
dev tap
dev-node tap-bridge

ca "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key"
dh "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
tls-auth "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ta.key" 0
cipher AES-256-CBC
keepalive 10 120
max-clients 3
management 127.0.0.1 7505

My client config:

client
remote 10.16.6.85
nobind
proto udp
dev tap
dev-node VPN

ca "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client02.crt"
key "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\client.key"
tls-auth "c:\\Program Files\\openvpn\\easy-rsa\\keys\\ta.key" 1

So my question is: what of the networkcards do I have to bridge, what nic do I set in the config and how do I avoid unencrypted traffic on the unsecured tunnel?

Best regards, Peter

Traffic

ptulpen wroteNeed little help with brigdged connection

You have not used a --server-bridge ?

ptulpen wrote already have the config, based on some online tutorials

I guess you did not read the documentation on here ?

ptulpen wrotewhat of the networkcards do I have to bridge

The physical NIC and the TAP driver.

ptulpen

Hello and thansk for your answer
I followed this guide http://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html (which is the first ddg result 😉 )
I dont use the server-bridge directive because I already have an DHCP in the LAN

What conduces me is, which adapter do I cave to bridge: The one conenction to the LAN or the one connected to the unsecure fibre connection?
(both does not seem to work)

Best regards,
Peter

Traffic

ptulpen wroteI dont use the server-bridge directive because I already have an DHCP in the LAN

See --server-bridge in The Manual v23x

ptulpen wroteWhat conduces me is, which adapter do I cave to bridge: The one conenction to the LAN or the one connected to the unsecure fibre connection?
(both does not seem to work)

Do not do both !

Bridge: Private network NIC + Tap driver.

ptulpen

Ah thank you very much, that helped me to proceed and got on alot
But unfortunally I am not still at the End

I changed the setup from PKI to pre-shared keys, which is totally sufficient for my environment

I just updated my sheme to make it more clear

My current status is:
It seems that I get the connection between the both VPN NICS- at least in windows the tap device shows connected- but I dont get an IP on the bridge at the second server.(getting IP 169...)
And when I assign an IP I still does not work (when I ping for example the router, I get a timeout)

In wireshark I see a ICMP Destination Unreachable (Port Unreachable)
also all connections on vpn2 are unidentified

here my current ipconfig
VPN1 (the left one)

Windows IP Configuration

   Host Name . . . . . . . . . . . . : VPN01
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : company.net

Ethernet adapter bridge:

   Connection-specific DNS Suffix  . : company.net
   Description . . . . . . . . . . . : MAC Bridge Miniport
   Physical Address. . . . . . . . . : 7A-2B-CB-AB-AA-BB
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.16.4.209(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.254.0
   Lease Obtained. . . . . . . . . . : Wednesday, October 22, 2014 2:34:45 PM
   Lease Expires . . . . . . . . . . : Thursday, October 30, 2014 2:34:44 PM
   Default Gateway . . . . . . . . . : 10.16.4.1
   DHCP Server . . . . . . . . . . . : 10.16.0.3
   DNS Servers . . . . . . . . . . . : 10.16.0.3
                                       10.16.1.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VPN:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
   Physical Address. . . . . . . . . : 00-10-18-31-AA-BB
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.24.48.1(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.254.0
   Default Gateway . . . . . . . . . : 
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.RosenInspection.net:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : RosenInspection.net
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-AA-BB
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{9F7B92E9-6A15-4F51-9BAF-D0D03D6D38E8}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

port 5000
proto udp
dev tap
dev-node tap
secret static.key

and logfile:

Wed Oct 22 14:34:21 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Wed Oct 22 14:34:21 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Wed Oct 22 14:34:21 2014 open_tun, tt->ipv6=0
Wed Oct 22 14:34:21 2014 TAP-WIN32 device [tap] opened: \\.\Global\{962C9952-A877-402E-8D89-5AF4F2383D16}.tap
Wed Oct 22 14:34:21 2014 UDPv4 link local (bound): [undef]
Wed Oct 22 14:34:21 2014 UDPv4 link remote: [undef]

And for VPN2:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : FKBVPN02
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter tap-bridge:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : MAC Bridge Miniport
   Physical Address. . . . . . . . . : 7A-2B-CB-7B-E8-12
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.16.4.201(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.254.0
   Default Gateway . . . . . . . . . : 10.16.4.1
   DNS Servers . . . . . . . . . . . : 10.16.1.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VPN:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
   Physical Address. . . . . . . . . : 00-10-18-31-98-3B
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.24.48.2(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.254.0
   Default Gateway . . . . . . . . . : 
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{71F79F15-F7D9-4890-993B-167DD56B8F92}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{39EB59FA-CFAE-4B12-828C-88B27A5B2FDB}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

dev tap
dev-node tap
proto udp
remote 10.24.48.1 1194
resolv-retry infinite
nobind
# Set log file verbosity.
verb 3
secret static.key

Wed Oct 22 14:51:36 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Wed Oct 22 14:51:36 2014 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Wed Oct 22 14:51:36 2014 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 22 14:51:36 2014 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 22 14:51:36 2014 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 22 14:51:36 2014 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 22 14:51:36 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Oct 22 14:51:36 2014 open_tun, tt->ipv6=0
Wed Oct 22 14:51:36 2014 TAP-WIN32 device [tap] opened: \\.\Global\{BB28FDA5-C0C0-495D-A3EC-4DE08659D78C}.tap
Wed Oct 22 14:51:36 2014 TAP-Windows Driver Version 9.21 
Wed Oct 22 14:51:36 2014 NOTE: FlushIpNetTable failed on interface [15] {BB28FDA5-C0C0-495D-A3EC-4DE08659D78C} (status=1168) : Element not found.  
Wed Oct 22 14:51:36 2014 UDPv4 link local: [undef]
Wed Oct 22 14:51:36 2014 UDPv4 link remote: [AF_INET]10.24.48.1:1194
Wed Oct 22 14:51:46 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)

any ideas how to solve this (I am sure I make a stupid mistake but I dont know which one)

Traffic

Make sure you have enabled ip_forwarding on the machines that require it and check ALL firewalls.

if it still does not work then set your configs to use --verb 4 for the log.

Then post your current configs (without comments)
and full server and client logs.
(If you need to make more than one post then do so, don't bother with pastebin, please)

ptulpen

indeed, switching off the firewall in windows does not seem to bee enough
now I just made a rule to allow all udp traffic

but still I get errors

log form VPN1 (server):

Thu Oct 23 13:28:32 2014 us=285368 Current Parameter Settings:
Thu Oct 23 13:28:32 2014 us=285368   config = 'server.ovpn'
Thu Oct 23 13:28:32 2014 us=285368   mode = 0
Thu Oct 23 13:28:32 2014 us=285368   show_ciphers = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   show_digests = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   show_engines = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   genkey = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   key_pass_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   show_tls_ciphers = DISABLED
Thu Oct 23 13:28:32 2014 us=285368 Connection profiles [default]:
Thu Oct 23 13:28:32 2014 us=285368   proto = udp
Thu Oct 23 13:28:32 2014 us=285368   local = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   local_port = 5000
Thu Oct 23 13:28:32 2014 us=285368   remote = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   remote_port = 5000
Thu Oct 23 13:28:32 2014 us=285368   remote_float = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   bind_defined = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   bind_local = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   connect_retry_seconds = 5
Thu Oct 23 13:28:32 2014 us=285368   connect_timeout = 10
Thu Oct 23 13:28:32 2014 us=285368   connect_retry_max = 0
Thu Oct 23 13:28:32 2014 us=285368   socks_proxy_server = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   socks_proxy_port = 0
Thu Oct 23 13:28:32 2014 us=285368   socks_proxy_retry = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   tun_mtu = 1500
Thu Oct 23 13:28:32 2014 us=285368   tun_mtu_defined = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   link_mtu = 1500
Thu Oct 23 13:28:32 2014 us=285368   link_mtu_defined = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   tun_mtu_extra = 32
Thu Oct 23 13:28:32 2014 us=285368   tun_mtu_extra_defined = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   mtu_discover_type = -1
Thu Oct 23 13:28:32 2014 us=285368   fragment = 0
Thu Oct 23 13:28:32 2014 us=285368   mssfix = 1450
Thu Oct 23 13:28:32 2014 us=285368   explicit_exit_notification = 0
Thu Oct 23 13:28:32 2014 us=285368 Connection profiles END
Thu Oct 23 13:28:32 2014 us=285368   remote_random = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   ipchange = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   dev = 'tap'
Thu Oct 23 13:28:32 2014 us=285368   dev_type = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   dev_node = 'tap'
Thu Oct 23 13:28:32 2014 us=285368   lladdr = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   topology = 1
Thu Oct 23 13:28:32 2014 us=285368   tun_ipv6 = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_local = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_remote_netmask = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_noexec = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_nowarn = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_ipv6_local = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_ipv6_netbits = 0
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_ipv6_remote = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   shaper = 0
Thu Oct 23 13:28:32 2014 us=285368   mtu_test = 0
Thu Oct 23 13:28:32 2014 us=285368   mlock = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   keepalive_ping = 0
Thu Oct 23 13:28:32 2014 us=285368   keepalive_timeout = 0
Thu Oct 23 13:28:32 2014 us=285368   inactivity_timeout = 0
Thu Oct 23 13:28:32 2014 us=285368   ping_send_timeout = 0
Thu Oct 23 13:28:32 2014 us=285368   ping_rec_timeout = 0
Thu Oct 23 13:28:32 2014 us=285368   ping_rec_timeout_action = 0
Thu Oct 23 13:28:32 2014 us=285368   ping_timer_remote = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   remap_sigusr1 = 0
Thu Oct 23 13:28:32 2014 us=285368   persist_tun = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   persist_local_ip = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   persist_remote_ip = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   persist_key = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   passtos = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   resolve_retry_seconds = 1000000000
Thu Oct 23 13:28:32 2014 us=285368   username = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   groupname = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   chroot_dir = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   cd_dir = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   writepid = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   up_script = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   down_script = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   down_pre = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   up_restart = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   up_delay = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   daemon = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   inetd = 0
Thu Oct 23 13:28:32 2014 us=285368   log = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   suppress_timestamps = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   nice = 0
Thu Oct 23 13:28:32 2014 us=285368   verbosity = 4
Thu Oct 23 13:28:32 2014 us=285368   mute = 0
Thu Oct 23 13:28:32 2014 us=285368   status_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   status_file_version = 1
Thu Oct 23 13:28:32 2014 us=285368   status_file_update_freq = 60
Thu Oct 23 13:28:32 2014 us=285368   occ = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   rcvbuf = 0
Thu Oct 23 13:28:32 2014 us=285368   sndbuf = 0
Thu Oct 23 13:28:32 2014 us=285368   sockflags = 0
Thu Oct 23 13:28:32 2014 us=285368   fast_io = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   lzo = 0
Thu Oct 23 13:28:32 2014 us=285368   route_script = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   route_default_gateway = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   route_default_metric = 0
Thu Oct 23 13:28:32 2014 us=285368   route_noexec = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   route_delay = 5
Thu Oct 23 13:28:32 2014 us=285368   route_delay_window = 30
Thu Oct 23 13:28:32 2014 us=285368   route_delay_defined = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   route_nopull = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   route_gateway_via_dhcp = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   max_routes = 100
Thu Oct 23 13:28:32 2014 us=285368   allow_pull_fqdn = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   management_addr = '127.0.0.1'
Thu Oct 23 13:28:32 2014 us=285368   management_port = 7505
Thu Oct 23 13:28:32 2014 us=285368   management_user_pass = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   management_log_history_cache = 250
Thu Oct 23 13:28:32 2014 us=285368   management_echo_buffer_size = 100
Thu Oct 23 13:28:32 2014 us=285368   management_write_peer_info_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   management_client_user = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   management_client_group = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   management_flags = 0
Thu Oct 23 13:28:32 2014 us=285368   shared_secret_file = 'static.key'
Thu Oct 23 13:28:32 2014 us=285368   key_direction = 0
Thu Oct 23 13:28:32 2014 us=285368   ciphername_defined = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   ciphername = 'BF-CBC'
Thu Oct 23 13:28:32 2014 us=285368   authname_defined = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   authname = 'SHA1'
Thu Oct 23 13:28:32 2014 us=285368   prng_hash = 'SHA1'
Thu Oct 23 13:28:32 2014 us=285368   prng_nonce_secret_len = 16
Thu Oct 23 13:28:32 2014 us=285368   keysize = 0
Thu Oct 23 13:28:32 2014 us=285368   engine = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   replay = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   mute_replay_warnings = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   replay_window = 64
Thu Oct 23 13:28:32 2014 us=285368   replay_time = 15
Thu Oct 23 13:28:32 2014 us=285368   packet_id_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   use_iv = ENABLED
Thu Oct 23 13:28:32 2014 us=285368   test_crypto = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   tls_server = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   tls_client = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   key_method = 2
Thu Oct 23 13:28:32 2014 us=285368   ca_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ca_path = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   dh_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   cert_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   priv_key_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   pkcs12_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   cryptoapi_cert = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   cipher_list = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   tls_verify = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   tls_export_cert = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   verify_x509_type = 0
Thu Oct 23 13:28:32 2014 us=285368   verify_x509_name = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   crl_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ns_cert_type = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_ku[i] = 0
Thu Oct 23 13:28:32 2014 us=285368   remote_cert_eku = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ssl_flags = 0
Thu Oct 23 13:28:32 2014 us=285368   tls_timeout = 2
Thu Oct 23 13:28:32 2014 us=285368   renegotiate_bytes = 0
Thu Oct 23 13:28:32 2014 us=285368   renegotiate_packets = 0
Thu Oct 23 13:28:32 2014 us=285368   renegotiate_seconds = 3600
Thu Oct 23 13:28:32 2014 us=285368   handshake_window = 60
Thu Oct 23 13:28:32 2014 us=285368   transition_window = 3600
Thu Oct 23 13:28:32 2014 us=285368   single_session = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   push_peer_info = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   tls_exit = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   tls_auth_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_pin_cache_period = -1
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_id = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   pkcs11_id_management = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   server_network = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   server_netmask = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   server_network_ipv6 = ::
Thu Oct 23 13:28:32 2014 us=285368   server_netbits_ipv6 = 0
Thu Oct 23 13:28:32 2014 us=285368   server_bridge_ip = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   server_bridge_netmask = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   server_bridge_pool_start = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   server_bridge_pool_end = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_pool_defined = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_pool_start = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_pool_end = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_pool_netmask = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_pool_persist_refresh_freq = 600
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_ipv6_pool_defined = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_ipv6_pool_base = ::
Thu Oct 23 13:28:32 2014 us=285368   ifconfig_ipv6_pool_netbits = 0
Thu Oct 23 13:28:32 2014 us=285368   n_bcast_buf = 256
Thu Oct 23 13:28:32 2014 us=285368   tcp_queue_limit = 64
Thu Oct 23 13:28:32 2014 us=285368   real_hash_size = 256
Thu Oct 23 13:28:32 2014 us=285368   virtual_hash_size = 256
Thu Oct 23 13:28:32 2014 us=285368   client_connect_script = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   learn_address_script = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   client_disconnect_script = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   client_config_dir = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   ccd_exclusive = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   tmp_dir = 'C:\Windows\TEMP\'
Thu Oct 23 13:28:32 2014 us=285368   push_ifconfig_defined = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   push_ifconfig_local = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   push_ifconfig_remote_netmask = 0.0.0.0
Thu Oct 23 13:28:32 2014 us=285368   push_ifconfig_ipv6_defined = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   push_ifconfig_ipv6_local = ::/0
Thu Oct 23 13:28:32 2014 us=285368   push_ifconfig_ipv6_remote = ::
Thu Oct 23 13:28:32 2014 us=285368   enable_c2c = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   duplicate_cn = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   cf_max = 0
Thu Oct 23 13:28:32 2014 us=285368   cf_per = 0
Thu Oct 23 13:28:32 2014 us=285368   max_clients = 3
Thu Oct 23 13:28:32 2014 us=285368   max_routes_per_client = 256
Thu Oct 23 13:28:32 2014 us=285368   auth_user_pass_verify_script = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   auth_user_pass_verify_script_via_file = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   client = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   pull = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   auth_user_pass_file = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   show_net_up = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   route_method = 0
Thu Oct 23 13:28:32 2014 us=285368   ip_win32_defined = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   ip_win32_type = 3
Thu Oct 23 13:28:32 2014 us=285368   dhcp_masq_offset = 0
Thu Oct 23 13:28:32 2014 us=285368   dhcp_lease_time = 31536000
Thu Oct 23 13:28:32 2014 us=285368   tap_sleep = 0
Thu Oct 23 13:28:32 2014 us=285368   dhcp_options = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   dhcp_renew = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   dhcp_pre_release = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   dhcp_release = DISABLED
Thu Oct 23 13:28:32 2014 us=285368   domain = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   netbios_scope = '[UNDEF]'
Thu Oct 23 13:28:32 2014 us=285368   netbios_node_type = 0
Thu Oct 23 13:28:32 2014 us=285368   disable_nbt = DISABLED
Thu Oct 23 13:28:32 2014 us=285368 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Thu Oct 23 13:28:32 2014 us=285368 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Thu Oct 23 13:28:32 2014 us=285368 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:7505
Thu Oct 23 13:28:32 2014 us=285368 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 23 13:28:32 2014 us=285368 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 23 13:28:32 2014 us=285368 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 23 13:28:32 2014 us=285368 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 23 13:28:32 2014 us=285368 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Oct 23 13:28:32 2014 us=285368 open_tun, tt->ipv6=0
Thu Oct 23 13:28:32 2014 us=285368 TAP-WIN32 device [tap] opened: \\.\Global\{962C9952-A877-402E-8D89-5AF4F2383D16}.tap
Thu Oct 23 13:28:32 2014 us=285368 TAP-Windows Driver Version 9.21 
Thu Oct 23 13:28:32 2014 us=285368 TAP-Windows MTU=1500
Thu Oct 23 13:28:32 2014 us=285368 NOTE: FlushIpNetTable failed on interface [14] {962C9952-A877-402E-8D89-5AF4F2383D16} (status=1168) : Element not found.  
Thu Oct 23 13:28:32 2014 us=285368 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:4 ET:32 EL:0 ]
Thu Oct 23 13:28:32 2014 us=285368 Local Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Oct 23 13:28:32 2014 us=285368 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Oct 23 13:28:32 2014 us=285368 Local Options hash (VER=V4): '8b888ddc'
Thu Oct 23 13:28:32 2014 us=285368 Expected Remote Options hash (VER=V4): '8b888ddc'
Thu Oct 23 13:28:32 2014 us=285368 UDPv4 link local (bound): [undef]
Thu Oct 23 13:28:32 2014 us=285368 UDPv4 link remote: [undef]

and VPN2 (client):

Thu Oct 23 13:28:29 2014 us=59918 Current Parameter Settings:
Thu Oct 23 13:28:29 2014 us=59918   config = 'client.ovpn'
Thu Oct 23 13:28:29 2014 us=59918   mode = 0
Thu Oct 23 13:28:29 2014 us=59918   show_ciphers = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   show_digests = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   show_engines = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   genkey = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   key_pass_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   show_tls_ciphers = DISABLED
Thu Oct 23 13:28:29 2014 us=59918 Connection profiles [default]:
Thu Oct 23 13:28:29 2014 us=59918   proto = udp
Thu Oct 23 13:28:29 2014 us=59918   local = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   local_port = 0
Thu Oct 23 13:28:29 2014 us=59918   remote = '10.24.48.1'
Thu Oct 23 13:28:29 2014 us=59918   remote_port = 1194
Thu Oct 23 13:28:29 2014 us=59918   remote_float = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   bind_defined = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   bind_local = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   connect_retry_seconds = 5
Thu Oct 23 13:28:29 2014 us=59918   connect_timeout = 10
Thu Oct 23 13:28:29 2014 us=59918   connect_retry_max = 0
Thu Oct 23 13:28:29 2014 us=59918   socks_proxy_server = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   socks_proxy_port = 0
Thu Oct 23 13:28:29 2014 us=59918   socks_proxy_retry = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   tun_mtu = 1500
Thu Oct 23 13:28:29 2014 us=59918   tun_mtu_defined = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   link_mtu = 1500
Thu Oct 23 13:28:29 2014 us=59918   link_mtu_defined = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   tun_mtu_extra = 32
Thu Oct 23 13:28:29 2014 us=59918   tun_mtu_extra_defined = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   mtu_discover_type = -1
Thu Oct 23 13:28:29 2014 us=59918   fragment = 0
Thu Oct 23 13:28:29 2014 us=59918   mssfix = 1450
Thu Oct 23 13:28:29 2014 us=59918   explicit_exit_notification = 0
Thu Oct 23 13:28:29 2014 us=59918 Connection profiles END
Thu Oct 23 13:28:29 2014 us=59918   remote_random = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   ipchange = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   dev = 'tap'
Thu Oct 23 13:28:29 2014 us=59918   dev_type = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   dev_node = 'tap'
Thu Oct 23 13:28:29 2014 us=59918   lladdr = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   topology = 1
Thu Oct 23 13:28:29 2014 us=59918   tun_ipv6 = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   ifconfig_local = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   ifconfig_remote_netmask = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   ifconfig_noexec = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   ifconfig_nowarn = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   ifconfig_ipv6_local = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   ifconfig_ipv6_netbits = 0
Thu Oct 23 13:28:29 2014 us=59918   ifconfig_ipv6_remote = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   shaper = 0
Thu Oct 23 13:28:29 2014 us=59918   mtu_test = 0
Thu Oct 23 13:28:29 2014 us=59918   mlock = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   keepalive_ping = 0
Thu Oct 23 13:28:29 2014 us=59918   keepalive_timeout = 0
Thu Oct 23 13:28:29 2014 us=59918   inactivity_timeout = 0
Thu Oct 23 13:28:29 2014 us=59918   ping_send_timeout = 0
Thu Oct 23 13:28:29 2014 us=59918   ping_rec_timeout = 0
Thu Oct 23 13:28:29 2014 us=59918   ping_rec_timeout_action = 0
Thu Oct 23 13:28:29 2014 us=59918   ping_timer_remote = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   remap_sigusr1 = 0
Thu Oct 23 13:28:29 2014 us=59918   persist_tun = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   persist_local_ip = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   persist_remote_ip = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   persist_key = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   passtos = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   resolve_retry_seconds = 1000000000
Thu Oct 23 13:28:29 2014 us=59918   username = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   groupname = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   chroot_dir = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   cd_dir = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   writepid = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   up_script = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   down_script = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   down_pre = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   up_restart = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   up_delay = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   daemon = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   inetd = 0
Thu Oct 23 13:28:29 2014 us=59918   log = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   suppress_timestamps = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   nice = 0
Thu Oct 23 13:28:29 2014 us=59918   verbosity = 4
Thu Oct 23 13:28:29 2014 us=59918   mute = 0
Thu Oct 23 13:28:29 2014 us=59918   status_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   status_file_version = 1
Thu Oct 23 13:28:29 2014 us=59918   status_file_update_freq = 60
Thu Oct 23 13:28:29 2014 us=59918   occ = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   rcvbuf = 0
Thu Oct 23 13:28:29 2014 us=59918   sndbuf = 0
Thu Oct 23 13:28:29 2014 us=59918   sockflags = 0
Thu Oct 23 13:28:29 2014 us=59918   fast_io = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   lzo = 0
Thu Oct 23 13:28:29 2014 us=59918   route_script = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   route_default_gateway = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   route_default_metric = 0
Thu Oct 23 13:28:29 2014 us=59918   route_noexec = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   route_delay = 5
Thu Oct 23 13:28:29 2014 us=59918   route_delay_window = 30
Thu Oct 23 13:28:29 2014 us=59918   route_delay_defined = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   route_nopull = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   route_gateway_via_dhcp = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   max_routes = 100
Thu Oct 23 13:28:29 2014 us=59918   allow_pull_fqdn = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   management_addr = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   management_port = 0
Thu Oct 23 13:28:29 2014 us=59918   management_user_pass = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   management_log_history_cache = 250
Thu Oct 23 13:28:29 2014 us=59918   management_echo_buffer_size = 100
Thu Oct 23 13:28:29 2014 us=59918   management_write_peer_info_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   management_client_user = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   management_client_group = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   management_flags = 0
Thu Oct 23 13:28:29 2014 us=59918   shared_secret_file = 'static.key'
Thu Oct 23 13:28:29 2014 us=59918   key_direction = 0
Thu Oct 23 13:28:29 2014 us=59918   ciphername_defined = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   ciphername = 'BF-CBC'
Thu Oct 23 13:28:29 2014 us=59918   authname_defined = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   authname = 'SHA1'
Thu Oct 23 13:28:29 2014 us=59918   prng_hash = 'SHA1'
Thu Oct 23 13:28:29 2014 us=59918   prng_nonce_secret_len = 16
Thu Oct 23 13:28:29 2014 us=59918   keysize = 0
Thu Oct 23 13:28:29 2014 us=59918   engine = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   replay = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   mute_replay_warnings = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   replay_window = 64
Thu Oct 23 13:28:29 2014 us=59918   replay_time = 15
Thu Oct 23 13:28:29 2014 us=59918   packet_id_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   use_iv = ENABLED
Thu Oct 23 13:28:29 2014 us=59918   test_crypto = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   tls_server = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   tls_client = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   key_method = 2
Thu Oct 23 13:28:29 2014 us=59918   ca_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   ca_path = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   dh_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   cert_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   priv_key_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   pkcs12_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   cryptoapi_cert = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   cipher_list = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   tls_verify = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   tls_export_cert = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   verify_x509_type = 0
Thu Oct 23 13:28:29 2014 us=59918   verify_x509_name = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   crl_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   ns_cert_type = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_ku[i] = 0
Thu Oct 23 13:28:29 2014 us=59918   remote_cert_eku = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=59918   ssl_flags = 0
Thu Oct 23 13:28:29 2014 us=59918   tls_timeout = 2
Thu Oct 23 13:28:29 2014 us=59918   renegotiate_bytes = 0
Thu Oct 23 13:28:29 2014 us=59918   renegotiate_packets = 0
Thu Oct 23 13:28:29 2014 us=59918   renegotiate_seconds = 3600
Thu Oct 23 13:28:29 2014 us=59918   handshake_window = 60
Thu Oct 23 13:28:29 2014 us=59918   transition_window = 3600
Thu Oct 23 13:28:29 2014 us=59918   single_session = DISABLED
Thu Oct 23 13:28:29 2014 us=59918   push_peer_info = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   tls_exit = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   tls_auth_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_protected_authentication = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_private_mode = 00000000
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_cert_private = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_pin_cache_period = -1
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_id = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   pkcs11_id_management = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   server_network = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   server_netmask = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   server_network_ipv6 = ::
Thu Oct 23 13:28:29 2014 us=75518   server_netbits_ipv6 = 0
Thu Oct 23 13:28:29 2014 us=75518   server_bridge_ip = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   server_bridge_netmask = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   server_bridge_pool_start = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   server_bridge_pool_end = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_pool_defined = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_pool_start = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_pool_end = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_pool_netmask = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_pool_persist_refresh_freq = 600
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_ipv6_pool_defined = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_ipv6_pool_base = ::
Thu Oct 23 13:28:29 2014 us=75518   ifconfig_ipv6_pool_netbits = 0
Thu Oct 23 13:28:29 2014 us=75518   n_bcast_buf = 256
Thu Oct 23 13:28:29 2014 us=75518   tcp_queue_limit = 64
Thu Oct 23 13:28:29 2014 us=75518   real_hash_size = 256
Thu Oct 23 13:28:29 2014 us=75518   virtual_hash_size = 256
Thu Oct 23 13:28:29 2014 us=75518   client_connect_script = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   learn_address_script = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   client_disconnect_script = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   client_config_dir = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   ccd_exclusive = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   tmp_dir = 'C:\Windows\TEMP\'
Thu Oct 23 13:28:29 2014 us=75518   push_ifconfig_defined = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   push_ifconfig_local = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   push_ifconfig_remote_netmask = 0.0.0.0
Thu Oct 23 13:28:29 2014 us=75518   push_ifconfig_ipv6_defined = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   push_ifconfig_ipv6_local = ::/0
Thu Oct 23 13:28:29 2014 us=75518   push_ifconfig_ipv6_remote = ::
Thu Oct 23 13:28:29 2014 us=75518   enable_c2c = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   duplicate_cn = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   cf_max = 0
Thu Oct 23 13:28:29 2014 us=75518   cf_per = 0
Thu Oct 23 13:28:29 2014 us=75518   max_clients = 1024
Thu Oct 23 13:28:29 2014 us=75518   max_routes_per_client = 256
Thu Oct 23 13:28:29 2014 us=75518   auth_user_pass_verify_script = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   auth_user_pass_verify_script_via_file = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   client = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   pull = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   auth_user_pass_file = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   show_net_up = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   route_method = 0
Thu Oct 23 13:28:29 2014 us=75518   ip_win32_defined = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   ip_win32_type = 3
Thu Oct 23 13:28:29 2014 us=75518   dhcp_masq_offset = 0
Thu Oct 23 13:28:29 2014 us=75518   dhcp_lease_time = 31536000
Thu Oct 23 13:28:29 2014 us=75518   tap_sleep = 0
Thu Oct 23 13:28:29 2014 us=75518   dhcp_options = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   dhcp_renew = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   dhcp_pre_release = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   dhcp_release = DISABLED
Thu Oct 23 13:28:29 2014 us=75518   domain = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   netbios_scope = '[UNDEF]'
Thu Oct 23 13:28:29 2014 us=75518   netbios_node_type = 0
Thu Oct 23 13:28:29 2014 us=75518   disable_nbt = DISABLED
Thu Oct 23 13:28:29 2014 us=75518 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Thu Oct 23 13:28:29 2014 us=75518 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Thu Oct 23 13:28:29 2014 us=75518 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 23 13:28:29 2014 us=75518 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 23 13:28:29 2014 us=75518 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Oct 23 13:28:29 2014 us=75518 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Oct 23 13:28:29 2014 us=75518 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Oct 23 13:28:29 2014 us=75518 open_tun, tt->ipv6=0
Thu Oct 23 13:28:29 2014 us=75518 TAP-WIN32 device [tap] opened: \\.\Global\{BB28FDA5-C0C0-495D-A3EC-4DE08659D78C}.tap
Thu Oct 23 13:28:29 2014 us=75518 TAP-Windows Driver Version 9.21 
Thu Oct 23 13:28:29 2014 us=75518 TAP-Windows MTU=1500
Thu Oct 23 13:28:29 2014 us=75518 NOTE: FlushIpNetTable failed on interface [15] {BB28FDA5-C0C0-495D-A3EC-4DE08659D78C} (status=1168) : Element not found.  
Thu Oct 23 13:28:29 2014 us=75518 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:4 ET:32 EL:0 ]
Thu Oct 23 13:28:29 2014 us=75518 Local Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Oct 23 13:28:29 2014 us=75518 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Oct 23 13:28:29 2014 us=75518 Local Options hash (VER=V4): '8b888ddc'
Thu Oct 23 13:28:29 2014 us=75518 Expected Remote Options hash (VER=V4): '8b888ddc'
Thu Oct 23 13:28:29 2014 us=75518 UDPv4 link local: [undef]
Thu Oct 23 13:28:29 2014 us=75518 UDPv4 link remote: [AF_INET]10.24.48.1:1194

and this is that wireshark gives me:

ptulpen

Hello,
I came a litte bit futher:
I could confince my manager that gateways on windows are maybe not so good, so now I use 2 endian gateways
Now I have the connection between both gateways and the communicate to each other, but the bridging does not work:
when I use arp-scan, I cannot see "over" the conneciton.
bridging is set on both gateways

I added arrows to my picture to make it more clear what I mean.
It is like having no IP forwarding, but on layer 2
(But bridging is activated on both sides)
[img]see%20s24.postimg.org/k5nxzxsh1/errors.png[/img]

Any ideas how to proceed?

Traffic

ptulpen wrotebridging is set on both gateways

Only the server requires a bridge not the client ... please read the HOWTO again.