Running Windows 7 unltimate and openvpn 2.3.4 in Administration mode 1. The following commands in my client config doesn't seem to work route 0.0.0.0 128.0.0.0 vpn_gateway route 128.0.0.0 128.0.0.0 vpn_gateway route 192.168.200.0 255.255.255.0 vpn_gateway I get 'vpn_gateway undefined' error 2. This command in my client config doesn't work route remote_host 255.255.255.255 net_gateway I get these errors RESOLVE: Cannot parse IP address: net_gateway OpenVPN ROUTE: failed to parse/resolve route for host/network: remote_host This seemed to work 'route ****.dyn.com 255.255.255.255 net_gateway' Do I somehow have the syntax wrong for this command? 3. This command (redirect-gateway def1) doesn't seem to create the routes it is supposed to. I do have a route to get on my lan, but all other traffic seems to be going through the public internet gateway (unless I am reading the routing table wrong) even though it is using my TAP interface. WTF! Note I wasn't using 'redirect-gateway def1' and the commands from 1 & 2 above at the same time. :) 4. I can't connect at all with this (mute-replay-warnings) in my client config. Actually, it looks like it doesn't even get started. The screen is blank with no text at all. Can this be some kind of syntax error or is it some kind of bug? Any advice is appreciated.

Please see the [b][color=#A40000]Forum rules[/color][/b] (top of page)

[quote="Traffic"]Please see the [b][color=#A40000]Forum rules[/color][/b] (top of page)[/quote] That's cute, luv it!

[quote="innogen"]That's cute, luv it![/quote]It has to be done .. and look :geek: [b]No Logs[/b] as per the rules ! Anyway .. working on a solution for the [i]OP[/i]

[quote="bird333"]Server config[/quote]See [b]--server[/b] in [url=https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage]The Manual v23x[/url] :mrgreen:

[quote="bird333"]I don't get what's wrong with the server config[/quote]please post output from ifconfig on your server ..

I have my server TAP interface bridged to my lan so that when my client connects it gets assigned an IP in the same subnet as my lan. During my testing, I manually created the same functionality as 'redirect-gateway def1' by using these commands [code]route 0.0.0.0 128.0.0.0 192.168.200.1 (This command and the one below effectively replace the default routes to send all traffic to my server) route 128.0.0.0 128.0.0.0 192.168.200.1 route 192.168.200.0 255.255.255.0 192.168.200.1 (This is a route for the lan traffic) route ****.dyn.com 255.255.255.255 net_gateway (This is a route to my server from the public internet)[/code] The above works but I would like to use 'redirect-gateway def1' to accomplish this, if not that then the above commands using the variables. Like this [code]route 0.0.0.0 128.0.0.0 vpn_gateway route 128.0.0.0 128.0.0.0 vpn_gateway route 192.168.200.0 255.255.255.0 vpn_gateway route remote_host 255.255.255.255 net_gateway[/code] It almost seems like it is a timing issue. As if the client doesn't have all the variables before it tries to setup all the routes. Is it possible to delay this action somehow so the variables get populated before the the routes are set?

A few Openvpn issues

bird333

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

Traffic

Please see the Forum rules (top of page)

bird333

Client config

client
dev tap
resolv-retry infinite
nobind
persist-key
persist-tun
#auth-user-pass
#auth-nocache
float
#user nobody
#group nobody
cipher AES-256-CBC
auth SHA256
tls-client
tls-version-min 1.0
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
route-gateway dhcp
route-delay 5
#route-method exe #Default is 'adaptive'
#redirect-gateway def1
route ****.****.** 255.255.255.255 net_gateway
route 0.0.0.0 128.0.0.0 vpn_gateway
route 128.0.0.0 128.0.0.0 vpn_gateway
route 192.168.200.0 255.255.255.0 vpn_gateway
ca "c:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\config\\hdx.crt"
key "c:\\Program Files\\OpenVPN\\config\\hdx.key"
tls-auth "c:\\Program Files\\OpenVPN\\config\\ta.key" 1
remote-cert-tls server
comp-lzo
verb 3

<connection>
remote ****.****.**
proto udp
port 1194
#mute-replay-warnings
</connection>

<connection>
remote ****.****.**
proto tcp-client
port 1195
</connection>

Server config

mode server      
proto udp         
port 1194         
dev tap0          
script-security 2
keepalive 15 60    
daemon            
verb 3             
comp-lzo         
persist-key
persist-tun
user nobody
group nobody
cipher AES-256-CBC
auth SHA256
max-clients 3
client-to-client 
tls-server 
tls-version-min 1.0
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
tls-auth /opt/downloads/openvpn/ta.key 0 
ca /opt/downloads/openvpn/ca.crt         
dh /opt/downloads/openvpn/dh4096.pem  
cert /opt/downloads/openvpn/server.crt  
key /opt/downloads/openvpn/server.key

innogen

Traffic wrotePlease see the Forum rules (top of page)

That's cute, luv it!

Traffic

innogen wroteThat's cute, luv it!

It has to be done .. and look :geek: No Logs as per the rules !

Anyway .. working on a solution for the OP

Traffic

bird333 wroteServer config

See --server in The Manual v23x

:mrgreen:

bird333

Sorry didn't have 'verb 4 logs before.

Client log

Wed Nov 05 17:28:50 2014 us=506301 Current Parameter Settings:
Wed Nov 05 17:28:50 2014 us=516301   config = 'homevpn test.ovpn'
Wed Nov 05 17:28:50 2014 us=516301   mode = 0
Wed Nov 05 17:28:50 2014 us=516301   show_ciphers = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   show_digests = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   show_engines = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   genkey = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   key_pass_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   show_tls_ciphers = DISABLED
Wed Nov 05 17:28:50 2014 us=516301 Connection profiles [default]:
Wed Nov 05 17:28:50 2014 us=516301   proto = udp
Wed Nov 05 17:28:50 2014 us=516301   local = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   local_port = 1194
Wed Nov 05 17:28:50 2014 us=516301   remote = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   remote_port = 1194
Wed Nov 05 17:28:50 2014 us=516301   remote_float = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   bind_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   bind_local = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   connect_retry_seconds = 5
Wed Nov 05 17:28:50 2014 us=516301   connect_timeout = 10
Wed Nov 05 17:28:50 2014 us=516301   connect_retry_max = 0
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_server = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_port = 0
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_retry = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu = 1500
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   link_mtu = 1500
Wed Nov 05 17:28:50 2014 us=516301   link_mtu_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_extra = 0
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_extra_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   mtu_discover_type = -1
Wed Nov 05 17:28:50 2014 us=516301   fragment = 0
Wed Nov 05 17:28:50 2014 us=516301   mssfix = 1450
Wed Nov 05 17:28:50 2014 us=516301   explicit_exit_notification = 0
Wed Nov 05 17:28:50 2014 us=516301 Connection profiles [0]:
Wed Nov 05 17:28:50 2014 us=516301   proto = udp
Wed Nov 05 17:28:50 2014 us=516301   local = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   local_port = 0
Wed Nov 05 17:28:50 2014 us=516301   remote = '****.org'
Wed Nov 05 17:28:50 2014 us=516301   remote_port = 1194
Wed Nov 05 17:28:50 2014 us=516301   remote_float = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   bind_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   bind_local = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   connect_retry_seconds = 5
Wed Nov 05 17:28:50 2014 us=516301   connect_timeout = 10
Wed Nov 05 17:28:50 2014 us=516301   connect_retry_max = 0
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_server = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_port = 0
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_retry = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu = 1500
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_defined = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   link_mtu = 1500
Wed Nov 05 17:28:50 2014 us=516301   link_mtu_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_extra = 32
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_extra_defined = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   mtu_discover_type = -1
Wed Nov 05 17:28:50 2014 us=516301   fragment = 0
Wed Nov 05 17:28:50 2014 us=516301   mssfix = 1450
Wed Nov 05 17:28:50 2014 us=516301   explicit_exit_notification = 0
Wed Nov 05 17:28:50 2014 us=516301 Connection profiles [1]:
Wed Nov 05 17:28:50 2014 us=516301   proto = tcp-client
Wed Nov 05 17:28:50 2014 us=516301   local = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   local_port = 0
Wed Nov 05 17:28:50 2014 us=516301   remote = '****.org'
Wed Nov 05 17:28:50 2014 us=516301   remote_port = 1195
Wed Nov 05 17:28:50 2014 us=516301   remote_float = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   bind_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   bind_local = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   connect_retry_seconds = 5
Wed Nov 05 17:28:50 2014 us=516301   connect_timeout = 10
Wed Nov 05 17:28:50 2014 us=516301   connect_retry_max = 0
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_server = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_port = 0
Wed Nov 05 17:28:50 2014 us=516301   socks_proxy_retry = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu = 1500
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_defined = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   link_mtu = 1500
Wed Nov 05 17:28:50 2014 us=516301   link_mtu_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_extra = 32
Wed Nov 05 17:28:50 2014 us=516301   tun_mtu_extra_defined = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   mtu_discover_type = -1
Wed Nov 05 17:28:50 2014 us=516301   fragment = 0
Wed Nov 05 17:28:50 2014 us=516301   mssfix = 1450
Wed Nov 05 17:28:50 2014 us=516301   explicit_exit_notification = 0
Wed Nov 05 17:28:50 2014 us=516301 Connection profiles END
Wed Nov 05 17:28:50 2014 us=516301   remote_random = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   ipchange = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   dev = 'tap'
Wed Nov 05 17:28:50 2014 us=516301   dev_type = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   dev_node = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   lladdr = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   topology = 1
Wed Nov 05 17:28:50 2014 us=516301   tun_ipv6 = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   ifconfig_local = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   ifconfig_remote_netmask = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   ifconfig_noexec = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   ifconfig_nowarn = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   ifconfig_ipv6_local = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   ifconfig_ipv6_netbits = 0
Wed Nov 05 17:28:50 2014 us=516301   ifconfig_ipv6_remote = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   shaper = 0
Wed Nov 05 17:28:50 2014 us=516301   mtu_test = 0
Wed Nov 05 17:28:50 2014 us=516301   mlock = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   keepalive_ping = 0
Wed Nov 05 17:28:50 2014 us=516301   keepalive_timeout = 0
Wed Nov 05 17:28:50 2014 us=516301   inactivity_timeout = 0
Wed Nov 05 17:28:50 2014 us=516301   ping_send_timeout = 0
Wed Nov 05 17:28:50 2014 us=516301   ping_rec_timeout = 0
Wed Nov 05 17:28:50 2014 us=516301   ping_rec_timeout_action = 0
Wed Nov 05 17:28:50 2014 us=516301   ping_timer_remote = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   remap_sigusr1 = 0
Wed Nov 05 17:28:50 2014 us=516301   persist_tun = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   persist_local_ip = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   persist_remote_ip = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   persist_key = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   passtos = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   resolve_retry_seconds = 1000000000
Wed Nov 05 17:28:50 2014 us=516301   username = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   groupname = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   chroot_dir = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   cd_dir = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   writepid = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   up_script = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   down_script = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   down_pre = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   up_restart = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   up_delay = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   daemon = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   inetd = 0
Wed Nov 05 17:28:50 2014 us=516301   log = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   suppress_timestamps = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   nice = 0
Wed Nov 05 17:28:50 2014 us=516301   verbosity = 4
Wed Nov 05 17:28:50 2014 us=516301   mute = 0
Wed Nov 05 17:28:50 2014 us=516301   status_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   status_file_version = 1
Wed Nov 05 17:28:50 2014 us=516301   status_file_update_freq = 60
Wed Nov 05 17:28:50 2014 us=516301   occ = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   rcvbuf = 0
Wed Nov 05 17:28:50 2014 us=516301   sndbuf = 0
Wed Nov 05 17:28:50 2014 us=516301   sockflags = 0
Wed Nov 05 17:28:50 2014 us=516301   fast_io = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   lzo = 7
Wed Nov 05 17:28:50 2014 us=516301   route_script = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   route_default_gateway = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   route_default_metric = 0
Wed Nov 05 17:28:50 2014 us=516301   route_noexec = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   route_delay = 5
Wed Nov 05 17:28:50 2014 us=516301   route_delay_window = 30
Wed Nov 05 17:28:50 2014 us=516301   route_delay_defined = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   route_nopull = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   route_gateway_via_dhcp = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   max_routes = 100
Wed Nov 05 17:28:50 2014 us=516301   allow_pull_fqdn = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   route remote_host/net_gateway/nil/nil
Wed Nov 05 17:28:50 2014 us=516301   route 0.0.0.0/128.0.0.0/vpn_gateway/nil
Wed Nov 05 17:28:50 2014 us=516301   route 128.0.0.0/128.0.0.0/vpn_gateway/nil
Wed Nov 05 17:28:50 2014 us=516301   route 192.168.200.0/255.255.255.0/vpn_gateway/nil
Wed Nov 05 17:28:50 2014 us=516301   management_addr = '127.0.0.1'
Wed Nov 05 17:28:50 2014 us=516301   management_port = 25341
Wed Nov 05 17:28:50 2014 us=516301   management_user_pass = 'stdin'
Wed Nov 05 17:28:50 2014 us=516301   management_log_history_cache = 250
Wed Nov 05 17:28:50 2014 us=516301   management_echo_buffer_size = 100
Wed Nov 05 17:28:50 2014 us=516301   management_write_peer_info_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   management_client_user = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   management_client_group = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   management_flags = 6
Wed Nov 05 17:28:50 2014 us=516301   shared_secret_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   key_direction = 2
Wed Nov 05 17:28:50 2014 us=516301   ciphername_defined = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   ciphername = 'AES-256-CBC'
Wed Nov 05 17:28:50 2014 us=516301   authname_defined = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   authname = 'SHA256'
Wed Nov 05 17:28:50 2014 us=516301   prng_hash = 'SHA1'
Wed Nov 05 17:28:50 2014 us=516301   prng_nonce_secret_len = 16
Wed Nov 05 17:28:50 2014 us=516301   keysize = 0
Wed Nov 05 17:28:50 2014 us=516301   engine = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   replay = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   mute_replay_warnings = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   replay_window = 64
Wed Nov 05 17:28:50 2014 us=516301   replay_time = 15
Wed Nov 05 17:28:50 2014 us=516301   packet_id_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   use_iv = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   test_crypto = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tls_server = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tls_client = ENABLED
Wed Nov 05 17:28:50 2014 us=516301   key_method = 2
Wed Nov 05 17:28:50 2014 us=516301   ca_file = 'c:\Program Files\OpenVPN\config\ca.crt'
Wed Nov 05 17:28:50 2014 us=516301   ca_path = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   dh_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   cert_file = 'c:\Program Files\OpenVPN\config\hdx.crt'
Wed Nov 05 17:28:50 2014 us=516301   priv_key_file = 'c:\Program Files\OpenVPN\config\hdx.key'
Wed Nov 05 17:28:50 2014 us=516301   pkcs12_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   cryptoapi_cert = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   cipher_list = 'TLS-DHE-RSA-WITH-AES-256-CBC-SHA256'
Wed Nov 05 17:28:50 2014 us=516301   tls_verify = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   tls_export_cert = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   verify_x509_type = 0
Wed Nov 05 17:28:50 2014 us=516301   verify_x509_name = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   crl_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   ns_cert_type = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 160
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 136
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_ku[i] = 0
Wed Nov 05 17:28:50 2014 us=516301   remote_cert_eku = 'TLS Web Server Authentication'
Wed Nov 05 17:28:50 2014 us=516301   ssl_flags = 64
Wed Nov 05 17:28:50 2014 us=516301   tls_timeout = 2
Wed Nov 05 17:28:50 2014 us=516301   renegotiate_bytes = 0
Wed Nov 05 17:28:50 2014 us=516301   renegotiate_packets = 0
Wed Nov 05 17:28:50 2014 us=516301   renegotiate_seconds = 3600
Wed Nov 05 17:28:50 2014 us=516301   handshake_window = 60
Wed Nov 05 17:28:50 2014 us=516301   transition_window = 3600
Wed Nov 05 17:28:50 2014 us=516301   single_session = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   push_peer_info = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tls_exit = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   tls_auth_file = 'c:\Program Files\OpenVPN\config\ta.key'
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_protected_authentication = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_private_mode = 00000000
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_cert_private = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_pin_cache_period = -1
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_id = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=516301   pkcs11_id_management = DISABLED
Wed Nov 05 17:28:50 2014 us=516301   server_network = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=516301   server_netmask = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   server_network_ipv6 = ::
Wed Nov 05 17:28:50 2014 us=526301   server_netbits_ipv6 = 0
Wed Nov 05 17:28:50 2014 us=526301   server_bridge_ip = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   server_bridge_netmask = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   server_bridge_pool_start = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   server_bridge_pool_end = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_pool_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_pool_start = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_pool_end = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_pool_netmask = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_pool_persist_refresh_freq = 600
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_ipv6_pool_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_ipv6_pool_base = ::
Wed Nov 05 17:28:50 2014 us=526301   ifconfig_ipv6_pool_netbits = 0
Wed Nov 05 17:28:50 2014 us=526301   n_bcast_buf = 256
Wed Nov 05 17:28:50 2014 us=526301   tcp_queue_limit = 64
Wed Nov 05 17:28:50 2014 us=526301   real_hash_size = 256
Wed Nov 05 17:28:50 2014 us=526301   virtual_hash_size = 256
Wed Nov 05 17:28:50 2014 us=526301   client_connect_script = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   learn_address_script = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   client_disconnect_script = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   client_config_dir = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   ccd_exclusive = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   tmp_dir = 'C:\Users\Bird\AppData\Local\Temp\'
Wed Nov 05 17:28:50 2014 us=526301   push_ifconfig_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   push_ifconfig_local = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   push_ifconfig_remote_netmask = 0.0.0.0
Wed Nov 05 17:28:50 2014 us=526301   push_ifconfig_ipv6_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   push_ifconfig_ipv6_local = ::/0
Wed Nov 05 17:28:50 2014 us=526301   push_ifconfig_ipv6_remote = ::
Wed Nov 05 17:28:50 2014 us=526301   enable_c2c = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   duplicate_cn = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   cf_max = 0
Wed Nov 05 17:28:50 2014 us=526301   cf_per = 0
Wed Nov 05 17:28:50 2014 us=526301   max_clients = 1024
Wed Nov 05 17:28:50 2014 us=526301   max_routes_per_client = 256
Wed Nov 05 17:28:50 2014 us=526301   auth_user_pass_verify_script = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   auth_user_pass_verify_script_via_file = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   client = ENABLED
Wed Nov 05 17:28:50 2014 us=526301   pull = ENABLED
Wed Nov 05 17:28:50 2014 us=526301   auth_user_pass_file = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   show_net_up = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   route_method = 0
Wed Nov 05 17:28:50 2014 us=526301   ip_win32_defined = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   ip_win32_type = 3
Wed Nov 05 17:28:50 2014 us=526301   dhcp_masq_offset = 0
Wed Nov 05 17:28:50 2014 us=526301   dhcp_lease_time = 31536000
Wed Nov 05 17:28:50 2014 us=526301   tap_sleep = 0
Wed Nov 05 17:28:50 2014 us=526301   dhcp_options = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   dhcp_renew = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   dhcp_pre_release = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   dhcp_release = DISABLED
Wed Nov 05 17:28:50 2014 us=526301   domain = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   netbios_scope = '[UNDEF]'
Wed Nov 05 17:28:50 2014 us=526301   netbios_node_type = 0
Wed Nov 05 17:28:50 2014 us=526301   disable_nbt = DISABLED
Wed Nov 05 17:28:50 2014 us=526301 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug  7 2014
Wed Nov 05 17:28:50 2014 us=526301 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.05
Enter Management Password:
Wed Nov 05 17:28:50 2014 us=526301 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Wed Nov 05 17:28:50 2014 us=526301 Need hold release from management interface, waiting...
Wed Nov 05 17:28:50 2014 us=946301 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Wed Nov 05 17:28:51 2014 us=146301 MANAGEMENT: CMD 'state on'
Wed Nov 05 17:28:51 2014 us=146301 MANAGEMENT: CMD 'log all on'
Wed Nov 05 17:28:51 2014 us=306302 MANAGEMENT: CMD 'hold off'
Wed Nov 05 17:28:51 2014 us=306302 MANAGEMENT: CMD 'hold release'
Wed Nov 05 17:28:51 2014 us=476302 Control Channel Authentication: using 'c:\Program Files\OpenVPN\config\ta.key' as a OpenVPN static key file
Wed Nov 05 17:28:51 2014 us=476302 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 05 17:28:51 2014 us=476302 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 05 17:28:51 2014 us=476302 LZO compression initialized
Wed Nov 05 17:28:51 2014 us=476302 Control Channel MTU parms [ L:1602 D:178 EF:78 EB:0 ET:0 EL:0 ]
Wed Nov 05 17:28:51 2014 us=476302 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Nov 05 17:28:51 2014 us=476302 MANAGEMENT: >STATE:1415230131,RESOLVE,,,
Wed Nov 05 17:28:51 2014 us=546302 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Nov 05 17:28:51 2014 us=546302 Local Options String: 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Wed Nov 05 17:28:51 2014 us=546302 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Wed Nov 05 17:28:51 2014 us=546302 Local Options hash (VER=V4): '3b66b7c7'
Wed Nov 05 17:28:51 2014 us=546302 Expected Remote Options hash (VER=V4): '24ab3272'
Wed Nov 05 17:28:51 2014 us=546302 UDPv4 link local: [undef]
Wed Nov 05 17:28:51 2014 us=546302 UDPv4 link remote: [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:51 2014 us=546302 MANAGEMENT: >STATE:1415230131,WAIT,,,
Wed Nov 05 17:28:51 2014 us=606302 MANAGEMENT: >STATE:1415230131,AUTH,,,
Wed Nov 05 17:28:51 2014 us=606302 TLS: Initial packet from [AF_INET]**.**.**.**:1194, sid=322f5a10 e115cf4d
Wed Nov 05 17:28:54 2014 us=906307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=906307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=906307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=906307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=906307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=906307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=906307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=906307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=916307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=916307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=916307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=916307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=926307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=926307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=936307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #5 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=936307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=936307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=936307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:54 2014 us=956307 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #7 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:54 2014 us=956307 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:55 2014 us=578309 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #33 / time = (1415230131) Wed Nov 05 17:28:51 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:28:55 2014 us=578309 TLS Error: incoming packet authentication failed from [AF_INET]**.**.**.**:1194
Wed Nov 05 17:28:55 2014 us=638309 VERIFY OK: depth=1, C=US, ST=**, L=***, O=OpenVPN, CN=OpenVPN-CA, emailAddress=**@**.com
Wed Nov 05 17:28:55 2014 us=638309 Validating certificate key usage
Wed Nov 05 17:28:55 2014 us=638309 ++ Certificate has key usage  00a0, expects 00a0
Wed Nov 05 17:28:55 2014 us=638309 VERIFY KU OK
Wed Nov 05 17:28:55 2014 us=638309 Validating certificate extended key usage
Wed Nov 05 17:28:55 2014 us=638309 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Nov 05 17:28:55 2014 us=638309 VERIFY EKU OK
Wed Nov 05 17:28:55 2014 us=638309 VERIFY OK: depth=0, C=US, ST=**, L=***, O=OpenVPN, CN=server, emailAddress=**@**.com
Wed Nov 05 17:28:59 2014 us=408314 NOTE: Options consistency check may be skewed by version differences
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tap'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1602'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1532'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'keydir' is present in local config but missing in remote config, local='keydir 0'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher AES-256-CBC'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA256'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 256'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'tls-auth' is present in local config but missing in remote config, local='tls-auth'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Wed Nov 05 17:28:59 2014 us=408314 WARNING: 'tls-server' is present in local config but missing in remote config, local='tls-server'
Wed Nov 05 17:28:59 2014 us=408314 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov 05 17:28:59 2014 us=408314 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 05 17:28:59 2014 us=408314 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov 05 17:28:59 2014 us=408314 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 05 17:28:59 2014 us=418314 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA256, 4096 bit RSA
Wed Nov 05 17:28:59 2014 us=418314 [server] Peer Connection Initiated with [AF_INET]**.**.**.**:1194
Wed Nov 05 17:29:00 2014 us=598316 MANAGEMENT: >STATE:1415230140,GET_CONFIG,,,
Wed Nov 05 17:29:01 2014 us=778318 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Nov 05 17:29:01 2014 us=828318 PUSH: Received control message: 'PUSH_REPLY,ping 15,ping-restart 60'
Wed Nov 05 17:29:01 2014 us=828318 OPTIONS IMPORT: timers and/or timeouts modified
Wed Nov 05 17:29:01 2014 us=838318 RESOLVE: Cannot parse IP address: net_gateway
Wed Nov 05 17:29:01 2014 us=838318 OpenVPN ROUTE: failed to parse/resolve route for host/network: remote_host
Wed Nov 05 17:29:01 2014 us=838318 OpenVPN ROUTE: vpn_gateway undefined
Wed Nov 05 17:29:01 2014 us=838318 OpenVPN ROUTE: failed to parse/resolve route for host/network: 0.0.0.0
Wed Nov 05 17:29:01 2014 us=838318 OpenVPN ROUTE: vpn_gateway undefined
Wed Nov 05 17:29:01 2014 us=838318 OpenVPN ROUTE: failed to parse/resolve route for host/network: 128.0.0.0
Wed Nov 05 17:29:01 2014 us=838318 OpenVPN ROUTE: vpn_gateway undefined
Wed Nov 05 17:29:01 2014 us=838318 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.200.0
Wed Nov 05 17:29:01 2014 us=838318 open_tun, tt->ipv6=0
Wed Nov 05 17:29:01 2014 us=848318 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{24604AFB-6557-4933-9189-E35717D5AE6F}.tap
Wed Nov 05 17:29:01 2014 us=848318 TAP-Windows Driver Version 9.9 
Wed Nov 05 17:29:01 2014 us=848318 TAP-Windows MTU=1500
Wed Nov 05 17:29:01 2014 us=848318 Successful ARP Flush on interface [16] {24604AFB-6557-4933-9189-E35717D5AE6F}
Wed Nov 05 17:29:05 2014 us=866336 Extracted DHCP router address: 192.168.200.1
Wed Nov 05 17:29:06 2014 us=28337 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Wed Nov 05 17:29:06 2014 us=28337 Initialization Sequence Completed
Wed Nov 05 17:29:06 2014 us=28337 MANAGEMENT: >STATE:1415230146,CONNECTED,SUCCESS,,**.**.**.**
Wed Nov 05 17:29:09 2014 us=952354 Extracted DHCP router address: 192.168.200.1
Wed Nov 05 17:30:03 2014 us=96441 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #47 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:03 2014 us=96441 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #47 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:03 2014 us=106441 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #47 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:29 2014 us=200493 Extracted DHCP router address: 192.168.200.1
Wed Nov 05 17:30:29 2014 us=230493 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #52 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:29 2014 us=230493 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #53 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:29 2014 us=240493 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #52 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:29 2014 us=250493 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #53 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:29 2014 us=250493 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #53 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:29 2014 us=250493 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #53 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:31 2014 us=390496 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #54 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:31 2014 us=400496 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #54 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:31 2014 us=400496 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #54 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:31 2014 us=400496 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #54 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:31 2014 us=410496 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #54 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:31 2014 us=410496 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #54 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Wed Nov 05 17:30:31 2014 us=410496 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #54 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

Server log

Wed Nov  5 17:18:09 2014 us=629842 MULTI: multi_create_instance called
Wed Nov  5 17:18:09 2014 us=630311 **.**.**.132:49655 Re-using SSL/TLS context
Wed Nov  5 17:18:09 2014 us=630673 **.**.**.132:49655 LZO compression initialized
Wed Nov  5 17:18:09 2014 us=632110 **.**.**.132:49655 Control Channel MTU parms [ L:1602 D:178 EF:78 EB:0 ET:0 EL:0 ]
Wed Nov  5 17:18:09 2014 us=632545 **.**.**.132:49655 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Nov  5 17:18:09 2014 us=633108 **.**.**.132:49655 TLS: Initial packet from [AF_INET]**.**.**.132:49655, sid=fecc7420 0dcdc049
Wed Nov  5 17:18:15 2014 us=320265 **.**.**.132:49655 VERIFY OK: depth=1, C=US, ST=**, L=****, O=OpenVPN, CN=OpenVPN-CA, emailAddress=**@**.com
Wed Nov  5 17:18:15 2014 us=332308 **.**.**.132:49655 VERIFY OK: depth=0, C=US, ST=**, L=****, O=OpenVPN, CN=hdx, emailAddress=**@**.com
Wed Nov  5 17:18:18 2014 us=9785 **.**.**.132:49655 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:18:18 2014 us=10112 **.**.**.132:49655 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:18:18 2014 us=10373 **.**.**.132:49655 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:18:18 2014 us=10659 **.**.**.132:49655 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:18:18 2014 us=69653 **.**.**.132:49655 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA256, 4096 bit RSA
Wed Nov  5 17:18:18 2014 us=70018 **.**.**.132:49655 [hdx] Peer Connection Initiated with [AF_INET]**.**.**.132:49655
Wed Nov  5 17:18:18 2014 us=70682 hdx/**.**.**.132:49655 MULTI: no dynamic or static remote --ifconfig address is available for hdx/**.**.**.132:49655
Wed Nov  5 17:18:20 2014 us=404384 hdx/**.**.**.132:49655 PUSH: Received control message: 'PUSH_REQUEST'
Wed Nov  5 17:18:20 2014 us=405024 hdx/**.**.**.132:49655 send_push_reply(): safe_cap=940
Wed Nov  5 17:18:20 2014 us=405680 hdx/**.**.**.132:49655 SENT CONTROL [hdx]: 'PUSH_REPLY,ping 15,ping-restart 60' (status=1)
Wed Nov  5 17:18:23 2014 us=958912 hdx/**.**.**.132:49655 MULTI: Learn: **:**:**:**:**:** -> hdx/**.**.**.132:49655
Wed Nov  5 17:23:37 2014 us=310376 MULTI: multi_create_instance called
Wed Nov  5 17:23:37 2014 us=310783 **.**.**.132:62321 Re-using SSL/TLS context
Wed Nov  5 17:23:37 2014 us=311072 **.**.**.132:62321 LZO compression initialized
Wed Nov  5 17:23:37 2014 us=312023 **.**.**.132:62321 Control Channel MTU parms [ L:1602 D:178 EF:78 EB:0 ET:0 EL:0 ]
Wed Nov  5 17:23:37 2014 us=312319 **.**.**.132:62321 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Nov  5 17:23:37 2014 us=312788 **.**.**.132:62321 TLS: Initial packet from [AF_INET]**.**.**.132:62321, sid=b1e129d9 65c3ab99
Wed Nov  5 17:23:42 2014 us=298075 **.**.**.132:62321 VERIFY OK: depth=1, C=US, ST=**, L=****, O=OpenVPN, CN=OpenVPN-CA, emailAddress=**@**.com
Wed Nov  5 17:23:42 2014 us=309905 **.**.**.132:62321 VERIFY OK: depth=0, C=US, ST=**, L=****, O=OpenVPN, CN=hdx, emailAddress=**@**.com
Wed Nov  5 17:23:45 2014 us=39625 **.**.**.132:62321 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:23:45 2014 us=39954 **.**.**.132:62321 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:23:45 2014 us=40250 **.**.**.132:62321 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:23:45 2014 us=40536 **.**.**.132:62321 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:23:45 2014 us=93211 **.**.**.132:62321 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA256, 4096 bit RSA
Wed Nov  5 17:23:45 2014 us=93578 **.**.**.132:62321 [hdx] Peer Connection Initiated with [AF_INET]**.**.**.132:62321
Wed Nov  5 17:23:45 2014 us=95177 MULTI: new connection by client 'hdx' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Wed Nov  5 17:23:45 2014 us=95732 MULTI: no dynamic or static remote --ifconfig address is available for hdx/**.**.**.132:62321
Wed Nov  5 17:23:47 2014 us=203808 hdx/**.**.**.132:62321 PUSH: Received control message: 'PUSH_REQUEST'
Wed Nov  5 17:23:47 2014 us=204080 hdx/**.**.**.132:62321 send_push_reply(): safe_cap=940
Wed Nov  5 17:23:47 2014 us=204573 hdx/**.**.**.132:62321 SENT CONTROL [hdx]: 'PUSH_REPLY,ping 15,ping-restart 60' (status=1)
Wed Nov  5 17:23:50 2014 us=124542 hdx/**.**.**.132:62321 MULTI: Learn: **:**:**:**:**:** -> hdx/**.**.**.132:62321
Wed Nov  5 17:25:43 2014 us=179401 MULTI: multi_create_instance called
Wed Nov  5 17:25:43 2014 us=179802 **.**.**.132:56913 Re-using SSL/TLS context
Wed Nov  5 17:25:43 2014 us=180051 **.**.**.132:56913 LZO compression initialized
Wed Nov  5 17:25:43 2014 us=180883 **.**.**.132:56913 Control Channel MTU parms [ L:1602 D:178 EF:78 EB:0 ET:0 EL:0 ]
Wed Nov  5 17:25:43 2014 us=181185 **.**.**.132:56913 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Nov  5 17:25:43 2014 us=181605 **.**.**.132:56913 TLS: Initial packet from [AF_INET]**.**.**.132:56913, sid=b7ac64d9 53c39a1c
Wed Nov  5 17:25:47 2014 us=732078 **.**.**.132:56913 VERIFY OK: depth=1, C=US, ST=**, L=****, O=OpenVPN, CN=OpenVPN-CA, emailAddress=**@**.com
Wed Nov  5 17:25:47 2014 us=743912 **.**.**.132:56913 VERIFY OK: depth=0, C=US, ST=**, L=****, O=OpenVPN, CN=hdx, emailAddress=**@**.com
Wed Nov  5 17:25:50 2014 us=509745 **.**.**.132:56913 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:25:50 2014 us=510082 **.**.**.132:56913 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:25:50 2014 us=510339 **.**.**.132:56913 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:25:50 2014 us=510620 **.**.**.132:56913 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:25:50 2014 us=580417 **.**.**.132:56913 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA256, 4096 bit RSA
Wed Nov  5 17:25:50 2014 us=580794 **.**.**.132:56913 [hdx] Peer Connection Initiated with [AF_INET]**.**.**.132:56913
Wed Nov  5 17:25:50 2014 us=582251 MULTI: new connection by client 'hdx' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Wed Nov  5 17:25:50 2014 us=582808 MULTI: no dynamic or static remote --ifconfig address is available for hdx/**.**.**.132:56913
Wed Nov  5 17:25:52 2014 us=663454 hdx/**.**.**.132:56913 PUSH: Received control message: 'PUSH_REQUEST'
Wed Nov  5 17:25:52 2014 us=663720 hdx/**.**.**.132:56913 send_push_reply(): safe_cap=940
Wed Nov  5 17:25:52 2014 us=664202 hdx/**.**.**.132:56913 SENT CONTROL [hdx]: 'PUSH_REPLY,ping 15,ping-restart 60' (status=1)
Wed Nov  5 17:25:55 2014 us=855713 hdx/**.**.**.132:56913 MULTI: Learn: **:**:**:**:**:** -> hdx/**.**.**.132:56913
Wed Nov  5 17:28:51 2014 us=318675 MULTI: multi_create_instance called
Wed Nov  5 17:28:51 2014 us=319318 **.**.**.132:52845 Re-using SSL/TLS context
Wed Nov  5 17:28:51 2014 us=319741 **.**.**.132:52845 LZO compression initialized
Wed Nov  5 17:28:51 2014 us=320594 **.**.**.132:52845 Control Channel MTU parms [ L:1602 D:178 EF:78 EB:0 ET:0 EL:0 ]
Wed Nov  5 17:28:51 2014 us=320899 **.**.**.132:52845 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Nov  5 17:28:51 2014 us=321328 **.**.**.132:52845 TLS: Initial packet from [AF_INET]**.**.**.132:52845, sid=3e408014 34476eff
Wed Nov  5 17:28:56 2014 us=273687 **.**.**.132:52845 VERIFY OK: depth=1, C=US, ST=**, L=****, O=OpenVPN, CN=OpenVPN-CA, emailAddress=**@**.com
Wed Nov  5 17:28:56 2014 us=285542 **.**.**.132:52845 VERIFY OK: depth=0, C=US, ST=**, L=****, O=OpenVPN, CN=hdx, emailAddress=**@**.com
Wed Nov  5 17:28:59 2014 us=132262 **.**.**.132:52845 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:28:59 2014 us=132672 **.**.**.132:52845 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:28:59 2014 us=133073 **.**.**.132:52845 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:28:59 2014 us=133369 **.**.**.132:52845 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:28:59 2014 us=191676 **.**.**.132:52845 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA256, 4096 bit RSA
Wed Nov  5 17:28:59 2014 us=192043 **.**.**.132:52845 [hdx] Peer Connection Initiated with [AF_INET]**.**.**.132:52845
Wed Nov  5 17:28:59 2014 us=193549 MULTI: new connection by client 'hdx' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Wed Nov  5 17:28:59 2014 us=194101 MULTI: no dynamic or static remote --ifconfig address is available for hdx/**.**.**.132:52845
Wed Nov  5 17:29:01 2014 us=550347 hdx/**.**.**.132:52845 PUSH: Received control message: 'PUSH_REQUEST'
Wed Nov  5 17:29:01 2014 us=550615 hdx/**.**.**.132:52845 send_push_reply(): safe_cap=940
Wed Nov  5 17:29:01 2014 us=551107 hdx/**.**.**.132:52845 SENT CONTROL [hdx]: 'PUSH_REPLY,ping 15,ping-restart 60' (status=1)
Wed Nov  5 17:29:04 2014 us=720755 hdx/**.**.**.132:52845 MULTI: Learn: **:**:**:**:**:** -> hdx/**.**.**.132:52845
Wed Nov  5 17:33:10 2014 us=45536 hdx/**.**.**.132:52845 [hdx] Inactivity timeout (--ping-restart), restarting
Wed Nov  5 17:33:10 2014 us=45845 hdx/**.**.**.132:52845 SIGUSR1[soft,ping-restart] received, client-instance restarting
Wed Nov  5 17:35:20 2014 us=979128 MULTI: multi_create_instance called
Wed Nov  5 17:35:20 2014 us=979985 **.**.**.132:64179 Re-using SSL/TLS context
Wed Nov  5 17:35:20 2014 us=119439 **.**.**.132:64179 LZO compression initialized
Wed Nov  5 17:35:20 2014 us=981188 **.**.**.132:64179 Control Channel MTU parms [ L:1602 D:178 EF:78 EB:0 ET:0 EL:0 ]
Wed Nov  5 17:35:20 2014 us=981500 **.**.**.132:64179 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Nov  5 17:35:20 2014 us=981923 **.**.**.132:64179 TLS: Initial packet from [AF_INET]**.**.**.132:64179, sid=089fc4a2 bd295d9d
Wed Nov  5 17:35:25 2014 us=667716 **.**.**.132:64179 VERIFY OK: depth=1, C=US, ST=**, L=****, O=OpenVPN, CN=OpenVPN-CA, emailAddress=**@**.com
Wed Nov  5 17:35:25 2014 us=679689 **.**.**.132:64179 VERIFY OK: depth=0, C=US, ST=**, L=****, O=OpenVPN, CN=hdx, emailAddress=**@**.com
Wed Nov  5 17:35:28 2014 us=331374 **.**.**.132:64179 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:35:28 2014 us=331953 **.**.**.132:64179 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:35:28 2014 us=332395 **.**.**.132:64179 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:35:28 2014 us=332699 **.**.**.132:64179 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:35:28 2014 us=398610 **.**.**.132:64179 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA256, 4096 bit RSA
Wed Nov  5 17:35:28 2014 us=398980 **.**.**.132:64179 [hdx] Peer Connection Initiated with [AF_INET]**.**.**.132:64179
Wed Nov  5 17:35:28 2014 us=399651 hdx/**.**.**.132:64179 MULTI: no dynamic or static remote --ifconfig address is available for hdx/**.**.**.132:64179
Wed Nov  5 17:35:30 2014 us=754744 hdx/**.**.**.132:64179 PUSH: Received control message: 'PUSH_REQUEST'
Wed Nov  5 17:35:30 2014 us=755015 hdx/**.**.**.132:64179 send_push_reply(): safe_cap=940
Wed Nov  5 17:35:30 2014 us=755503 hdx/**.**.**.132:64179 SENT CONTROL [hdx]: 'PUSH_REPLY,ping 15,ping-restart 60' (status=1)
Wed Nov  5 17:35:33 2014 us=584527 hdx/**.**.**.132:64179 MULTI: Learn: **:**:**:**:**:** -> hdx/**.**.**.132:64179
Wed Nov  5 17:38:51 2014 us=739754 MULTI: multi_create_instance called
Wed Nov  5 17:38:51 2014 us=740157 **.**.**.132:58247 Re-using SSL/TLS context
Wed Nov  5 17:38:51 2014 us=740559 **.**.**.132:58247 LZO compression initialized
Wed Nov  5 17:38:51 2014 us=741395 **.**.**.132:58247 Control Channel MTU parms [ L:1602 D:178 EF:78 EB:0 ET:0 EL:0 ]
Wed Nov  5 17:38:51 2014 us=741694 **.**.**.132:58247 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Nov  5 17:38:51 2014 us=742124 **.**.**.132:58247 TLS: Initial packet from [AF_INET]**.**.**.132:58247, sid=9bd518ee 05e5f6e2
Wed Nov  5 17:39:02 2014 us=420448 **.**.**.132:58247 VERIFY OK: depth=1, C=US, ST=**, L=****, O=OpenVPN, CN=OpenVPN-CA, emailAddress=**@**.com
Wed Nov  5 17:39:02 2014 us=432364 **.**.**.132:58247 VERIFY OK: depth=0, C=US, ST=**, L=****, O=OpenVPN, CN=hdx, emailAddress=**@**.com
Wed Nov  5 17:39:06 2014 us=714100 **.**.**.132:58247 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:39:06 2014 us=714489 **.**.**.132:58247 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:39:06 2014 us=714752 **.**.**.132:58247 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Nov  5 17:39:06 2014 us=715037 **.**.**.132:58247 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov  5 17:39:06 2014 us=772006 **.**.**.132:58247 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA256, 4096 bit RSA
Wed Nov  5 17:39:06 2014 us=772374 **.**.**.132:58247 [hdx] Peer Connection Initiated with [AF_INET]**.**.**.132:58247
Wed Nov  5 17:39:06 2014 us=773847 MULTI: new connection by client 'hdx' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Wed Nov  5 17:39:06 2014 us=774400 MULTI: no dynamic or static remote --ifconfig address is available for hdx/**.**.**.132:58247
Wed Nov  5 17:39:09 2014 us=224950 hdx/**.**.**.132:58247 PUSH: Received control message: 'PUSH_REQUEST'
Wed Nov  5 17:39:09 2014 us=225226 hdx/**.**.**.132:58247 send_push_reply(): safe_cap=940
Wed Nov  5 17:39:09 2014 us=225716 hdx/**.**.**.132:58247 SENT CONTROL [hdx]: 'PUSH_REPLY,ping 15,ping-restart 60' (status=1)
Wed Nov  5 17:39:12 2014 us=178281 hdx/**.**.**.132:58247 MULTI: Learn: **:**:**:**:**:** -> hdx/**.**.**.132:58247
Wed Nov  5 17:45:34 2014 us=537479 hdx/**.**.**.132:58247 [hdx] Inactivity timeout (--ping-restart), restarting
Wed Nov  5 17:45:34 2014 us=537781 hdx/**.**.**.132:58247 SIGUSR1[soft,ping-restart] received, client-instance restarting

I don't have any problems connecting (except for trying to use 'mute-replay-warnings') but it doesn't look like the proper routes are getting setup to direct all traffic through the vpn. Here are my route tables:

Before VPN connection

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      172.31.98.1    172.31.98.255     30
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      169.254.0.0      255.255.0.0         On-link     172.31.98.255     31
  169.254.255.255  255.255.255.255         On-link     172.31.98.255    286
      172.31.98.0    255.255.254.0         On-link     172.31.98.255    286
    172.31.98.255  255.255.255.255         On-link     172.31.98.255    286
    172.31.99.255  255.255.255.255         On-link     172.31.98.255    286
   195.93.243.115  255.255.255.255    192.168.200.1    172.31.98.255     31
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     172.31.98.255    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     172.31.98.255    286
===========================================================================

After VPN connection

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      172.31.98.1    172.31.98.255     25
          0.0.0.0        128.0.0.0     172.16.242.1  192.168.200.125     31
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0     172.16.242.1  192.168.200.125     31
      169.254.0.0      255.255.0.0         On-link     172.31.98.255     26
      169.254.0.0      255.255.0.0  192.168.200.116  192.168.200.125     31
  169.254.255.255  255.255.255.255         On-link     172.31.98.255    281
     172.16.242.0    255.255.255.0     172.16.242.1  192.168.200.125     32
      172.31.98.0    255.255.254.0         On-link     172.31.98.255    281
    172.31.98.255  255.255.255.255         On-link     172.31.98.255    281
    172.31.99.255  255.255.255.255         On-link     172.31.98.255    281
    192.168.200.0    255.255.255.0         On-link   192.168.200.125    286
  192.168.200.125  255.255.255.255         On-link   192.168.200.125    286
  192.168.200.255  255.255.255.255         On-link   192.168.200.125    286
   195.93.243.115  255.255.255.255    192.168.200.1    172.31.98.255     26
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     172.31.98.255    281
        224.0.0.0        240.0.0.0         On-link   192.168.200.125    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     172.31.98.255    281
  255.255.255.255  255.255.255.255         On-link   192.168.200.125    286
===========================================================================

Traffic

bird333 wroteSorry didn't have 'verb 4 logs before

Indeed .. and did you read my previous reply ?

Traffic wrotebird333 wrote:
Server config
See --server in The Manual v23x

:mrgreen:

Check your server config ...

https://forums.openvpn.net/post46558.html#p46558

bird333

Yep. I don't get what's wrong with the server config.

Traffic

bird333 wroteI don't get what's wrong with the server config

please post output from ifconfig on your server ..

bird333

I have my server TAP interface bridged to my lan so that when my client connects it gets assigned an IP in the same subnet as my lan. During my testing, I manually created the same functionality as 'redirect-gateway def1' by using these commands

route 0.0.0.0 128.0.0.0 192.168.200.1 (This command and the one below effectively replace the default routes to send all traffic to my server)
route 128.0.0.0 128.0.0.0 192.168.200.1
route 192.168.200.0 255.255.255.0 192.168.200.1 (This is a route for the lan traffic)
route ****.dyn.com 255.255.255.255 net_gateway (This is a route to my server from the public internet)

The above works but I would like to use 'redirect-gateway def1' to accomplish this, if not that then the above commands using the variables. Like this

route 0.0.0.0 128.0.0.0 vpn_gateway
route 128.0.0.0 128.0.0.0 vpn_gateway
route 192.168.200.0 255.255.255.0 vpn_gateway
route remote_host 255.255.255.255 net_gateway

It almost seems like it is a timing issue. As if the client doesn't have all the variables before it tries to setup all the routes. Is it possible to delay this action somehow so the variables get populated before the the routes are set?

Traffic

bird333 wroteI have my server TAP interface bridged to my lan so that when my client connects it gets assigned an IP in the same subnet as my lan

See --server-bridge in The Manual v23x

Then check your server config very carefully for the appropriate directive ...

bird333

Traffic wrote
bird333 wroteI have my server TAP interface bridged to my lan so that when my client connects it gets assigned an IP in the same subnet as my lan
See --server-bridge in The Manual v23x

Then check your server config very carefully for the appropriate directive ...

I have read that more than once and I don't see a problem. My server config is effectively this

mode server
tls-server

push "route-gateway dhcp"

Only exception is that I don't push 'route-gateway dhcp' I have 'route-gateway dhcp' in the client config. Are you saying that makes a difference? Maybe it would make a difference in the timing of things.

Traffic

bird333 wroteI have read that more than once and I don't see a problem. My server config is effectively this
Code:
mode server
tls-server

push "route-gateway dhcp"

Only exception is that I don't

blah blah blah ..... You don't have a server network address ...

Please read the HOWTO and See the Example config file.

server x.x.x.x
server-bridge x.x.x.x

*Edit: