iOS connects to DD-WRT OpenVPN Server but no internet access

docop29

Hey everyone,
I've been stumped on this for a while and I can't seem to find a fix. I am running DD-WRT v24-sp2 on a Cisco/Linksys router..unfortunately the router is set up behind a Verizon Fios router/modem. The ddwrt box is set on the DMZ of the Verizon box. I can connect via my iPhone and iPad, however, I get no internet access over the vpn. My configurations are as follows:

My normal router network is 192.168.0.x, the Verizon network is 192.168.1.x, I (think) I have the VPN set at 192.168.66.x. I followed a couple of example setups, and its entirely possible that I have completely mucked up this whole thing through all of the iterations, but any help would be appreciated...btw, I'm a total noob at this so please be gentle....

Server GUI config:

Server Additional Config:
push "route 192.168.0.0 255.255.255.0"
push "dhcp-option DNS 192.168.1.1"
server 192.168.66.0 255.255.255.0

dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

# Only use crl-verify if you are using the revoke list - otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl

# management parameter allows DD-WRT's OpenVPN Status web page to access the server's management port
# port must be 5001 for scripts embedded in firmware to work
management localhost 5001

Firewall Script:

iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.66.0/24 -o br0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 192.168.66.0/24 -j MASQUERADE
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE

Device Configuration:

client
dev tun
proto udp
remote XXX.XXX.XXX.XXX 1194 //real server obviscated
resolv-retry infinite
nobind
persist-key
persist-tun

ca ca.crt
cert ipad.crt
key ipad.key
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 4

Traffic

If possible please post your server and client logs.

I note you are pushing DNS 192.168.1.1 to the client .. is 192.168.1.1 actually a DNS server/proxy ?

docop29

That is the Verizon router....I have tried using Google DNS as well and still had problems, might be worth trying again, as with the iterations I mqy have had another error at the time.

I will pull up the logs and post them.

docop29

Here is the client log:

2014-11-05 20:12:15 ----- OpenVPN Start ----- OpenVPN core 3.0 ios arm64 64-bit
2014-11-05 20:12:15 UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
14 [verb] [4]

2014-11-05 20:12:15 LZO-ASYM init swap=0 asym=0
2014-11-05 20:12:15 EVENT: RESOLVE
2014-11-05 20:12:16 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-05 20:12:16 EVENT: WAIT
2014-11-05 20:12:16 SetTunnelSocket returned 1
2014-11-05 20:12:16 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-05 20:12:16 EVENT: CONNECTING
2014-11-05 20:12:16 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-05 20:12:16 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-05 20:12:17 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-05 20:12:17 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-05 20:12:17 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-05 20:12:17 Session is ACTIVE
2014-11-05 20:12:17 EVENT: GET_CONFIG
2014-11-05 20:12:17 Sending PUSH_REQUEST to server...
2014-11-05 20:12:17 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-05 20:12:17 LZO-ASYM init swap=0 asym=0
2014-11-05 20:12:17 EVENT: ASSIGN_IP
2014-11-05 20:12:17 Connected via tun
2014-11-05 20:12:17 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-05 20:12:18 SetStatus Connected
2014-11-05 20:12:18 NET WiFi:NotReachable/WR t------
2014-11-05 20:12:18 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:14:17 Session invalidated: KEEPALIVE_TIMEOUT
2014-11-05 20:14:17 Client terminated, restarting in 2...
2014-11-05 20:14:17 TUN reassert
2014-11-05 20:14:17 TUN reset routes
2014-11-05 20:14:18 NET WiFi:NotReachable/WR t------
2014-11-05 20:14:18 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:14:19 EVENT: RECONNECTING
2014-11-05 20:14:19 LZO-ASYM init swap=0 asym=0
2014-11-05 20:14:19 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-05 20:14:19 EVENT: WAIT
2014-11-05 20:14:19 SetTunnelSocket returned 1
2014-11-05 20:14:19 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-05 20:14:20 EVENT: CONNECTING
2014-11-05 20:14:20 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-05 20:14:20 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-05 20:14:21 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-05 20:14:21 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-05 20:14:22 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-05 20:14:22 Session is ACTIVE
2014-11-05 20:14:22 EVENT: GET_CONFIG
2014-11-05 20:14:22 Sending PUSH_REQUEST to server...
2014-11-05 20:14:22 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-05 20:14:22 LZO-ASYM init swap=0 asym=0
2014-11-05 20:14:22 EVENT: ASSIGN_IP
2014-11-05 20:14:22 Connected via tun
2014-11-05 20:14:22 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-05 20:14:22 SetStatus Connected
2014-11-05 20:14:22 NET WiFi:NotReachable/WR t------
2014-11-05 20:14:22 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:16:22 Session invalidated: KEEPALIVE_TIMEOUT
2014-11-05 20:16:22 Client terminated, restarting in 2...
2014-11-05 20:16:22 TUN reassert
2014-11-05 20:16:22 TUN reset routes
2014-11-05 20:16:22 NET WiFi:NotReachable/WR t------
2014-11-05 20:16:22 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:16:24 EVENT: RECONNECTING
2014-11-05 20:16:24 LZO-ASYM init swap=0 asym=0
2014-11-05 20:16:24 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-05 20:16:24 EVENT: WAIT
2014-11-05 20:16:24 SetTunnelSocket returned 1
2014-11-05 20:16:24 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-05 20:16:24 EVENT: CONNECTING
2014-11-05 20:16:24 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-05 20:16:24 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-05 20:16:25 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-05 20:16:25 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-05 20:16:26 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-05 20:16:26 Session is ACTIVE
2014-11-05 20:16:26 EVENT: GET_CONFIG
2014-11-05 20:16:26 Sending PUSH_REQUEST to server...
2014-11-05 20:16:26 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-05 20:16:26 LZO-ASYM init swap=0 asym=0
2014-11-05 20:16:26 EVENT: ASSIGN_IP
2014-11-05 20:16:26 Connected via tun
2014-11-05 20:16:26 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-05 20:16:26 SetStatus Connected
2014-11-05 20:16:26 NET WiFi:NotReachable/WR t------
2014-11-05 20:16:26 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:18:26 Session invalidated: KEEPALIVE_TIMEOUT
2014-11-05 20:18:26 Client terminated, restarting in 2...
2014-11-05 20:18:26 TUN reassert
2014-11-05 20:18:26 TUN reset routes
2014-11-05 20:18:26 NET WiFi:NotReachable/WR t------
2014-11-05 20:18:26 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:18:28 EVENT: RECONNECTING
2014-11-05 20:18:28 LZO-ASYM init swap=0 asym=0
2014-11-05 20:18:28 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-05 20:18:28 EVENT: WAIT
2014-11-05 20:18:28 SetTunnelSocket returned 1
2014-11-05 20:18:28 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-05 20:18:28 EVENT: CONNECTING
2014-11-05 20:18:28 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-05 20:18:28 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-05 20:18:28 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-05 20:18:28 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-05 20:18:29 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-05 20:18:29 Session is ACTIVE
2014-11-05 20:18:29 EVENT: GET_CONFIG
2014-11-05 20:18:29 Sending PUSH_REQUEST to server...
2014-11-05 20:18:29 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-05 20:18:29 LZO-ASYM init swap=0 asym=0
2014-11-05 20:18:29 EVENT: ASSIGN_IP
2014-11-05 20:18:29 Connected via tun
2014-11-05 20:18:29 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-05 20:18:29 SetStatus Connected
2014-11-05 20:18:29 NET WiFi:NotReachable/WR t------
2014-11-05 20:18:29 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:18:36 OS Event: SLEEP
2014-11-05 20:18:36 TUN reassert
2014-11-05 20:18:36 TUN reset routes
2014-11-05 20:18:36 EVENT: PAUSE
2014-11-05 20:18:36 NET WiFi:NotReachable/WR t------
2014-11-05 20:18:36 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:18:40 OS Event: WAKEUP
2014-11-05 20:18:43 RESUME TEST: Internet:ReachableViaWWAN/WR t----l- WiFi:NotReachable/WR t------
2014-11-05 20:18:43 EVENT: RESUME
2014-11-05 20:18:43 EVENT: RECONNECTING
2014-11-05 20:18:43 LZO-ASYM init swap=0 asym=0
2014-11-05 20:18:43 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-05 20:18:43 EVENT: WAIT
2014-11-05 20:18:43 SetTunnelSocket returned 1
2014-11-05 20:18:43 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-05 20:18:44 EVENT: CONNECTING
2014-11-05 20:18:44 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-05 20:18:44 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-05 20:18:44 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-05 20:18:44 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-05 20:18:45 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-05 20:18:45 Session is ACTIVE
2014-11-05 20:18:45 EVENT: GET_CONFIG
2014-11-05 20:18:45 Sending PUSH_REQUEST to server...
2014-11-05 20:18:45 OS Event: SLEEP
2014-11-05 20:18:45 EVENT: PAUSE
2014-11-05 20:20:59 OS Event: WAKEUP
2014-11-05 20:21:02 RESUME TEST: Internet:ReachableViaWWAN/WR t----l- WiFi:NotReachable/WR t------
2014-11-05 20:21:02 EVENT: RESUME
2014-11-05 20:21:02 EVENT: RECONNECTING
2014-11-05 20:21:02 LZO-ASYM init swap=0 asym=0
2014-11-05 20:21:02 EVENT: RESOLVE
2014-11-05 20:21:02 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-05 20:21:02 EVENT: WAIT
2014-11-05 20:21:02 SetTunnelSocket returned 1
2014-11-05 20:21:02 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-05 20:21:02 EVENT: CONNECTING
2014-11-05 20:21:02 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-05 20:21:02 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-05 20:21:03 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-05 20:21:03 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-05 20:21:04 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-05 20:21:04 Session is ACTIVE
2014-11-05 20:21:04 EVENT: GET_CONFIG
2014-11-05 20:21:04 Sending PUSH_REQUEST to server...
2014-11-05 20:21:04 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-05 20:21:04 LZO-ASYM init swap=0 asym=0
2014-11-05 20:21:04 EVENT: ASSIGN_IP
2014-11-05 20:21:04 Connected via tun
2014-11-05 20:21:04 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-05 20:21:04 NET WiFi:NotReachable/-R -------
2014-11-05 20:21:04 NET Internet:ReachableViaWiFi/-R -----l-
2014-11-05 20:21:04 SetStatus Connected
2014-11-05 20:21:04 NET WiFi:NotReachable/WR t------
2014-11-05 20:21:04 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:23:04 Session invalidated: KEEPALIVE_TIMEOUT
2014-11-05 20:23:04 Client terminated, restarting in 2...
2014-11-05 20:23:04 TUN reassert
2014-11-05 20:23:04 TUN reset routes
2014-11-05 20:23:04 NET WiFi:NotReachable/WR t------
2014-11-05 20:23:04 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:23:06 EVENT: RECONNECTING
2014-11-05 20:23:06 LZO-ASYM init swap=0 asym=0
2014-11-05 20:23:06 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-05 20:23:06 EVENT: WAIT
2014-11-05 20:23:06 SetTunnelSocket returned 1
2014-11-05 20:23:06 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-05 20:23:06 EVENT: CONNECTING
2014-11-05 20:23:06 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-05 20:23:06 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-05 20:23:06 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-05 20:23:06 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-05 20:23:07 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-05 20:23:07 Session is ACTIVE
2014-11-05 20:23:07 EVENT: GET_CONFIG
2014-11-05 20:23:07 Sending PUSH_REQUEST to server...
2014-11-05 20:23:07 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-05 20:23:07 LZO-ASYM init swap=0 asym=0
2014-11-05 20:23:07 EVENT: ASSIGN_IP
2014-11-05 20:23:07 Connected via tun
2014-11-05 20:23:07 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-05 20:23:08 NET WiFi:NotReachable/WR t------
2014-11-05 20:23:08 NET Internet:ReachableViaWWAN/WR t----l-
2014-11-05 20:23:08 SetStatus Connected
2014-11-05 20:23:11 TUN reset routes
2014-11-05 20:23:11 EVENT: DISCONNECTED
2014-11-05 20:23:11 Raw stats on disconnect:
BYTES_IN : 28930
BYTES_OUT : 85571
PACKETS_IN : 307
PACKETS_OUT : 866
TUN_BYTES_IN : 37444
TUN_PACKETS_IN : 570
HMAC_ERROR : 45
KEEPALIVE_TIMEOUT : 4
N_PAUSE : 2
N_RECONNECT : 6
2014-11-05 20:23:11 Performance stats on disconnect:
CPU usage (microseconds): 709517
Tunnel compression ratio (downlink): inf
Network bytes per CPU second: 161378
Tunnel bytes per CPU second: 52773
2014-11-05 20:23:11 ----- OpenVPN Stop -----
2014-11-06 08:37:06 ----- OpenVPN Start ----- OpenVPN core 3.0 ios arm64 64-bit
2014-11-06 08:37:06 UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
14 [verb] [4]

2014-11-06 08:37:06 LZO-ASYM init swap=0 asym=0
2014-11-06 08:37:06 EVENT: RESOLVE
2014-11-06 08:37:07 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-06 08:37:07 EVENT: WAIT
2014-11-06 08:37:07 SetTunnelSocket returned 1
2014-11-06 08:37:07 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-06 08:37:07 EVENT: CONNECTING
2014-11-06 08:37:07 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-06 08:37:07 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-06 08:37:08 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-06 08:37:08 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-06 08:37:09 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-06 08:37:09 Session is ACTIVE
2014-11-06 08:37:09 EVENT: GET_CONFIG
2014-11-06 08:37:09 Sending PUSH_REQUEST to server...
2014-11-06 08:37:09 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-06 08:37:09 LZO-ASYM init swap=0 asym=0
2014-11-06 08:37:09 EVENT: ASSIGN_IP
2014-11-06 08:37:09 Connected via tun
2014-11-06 08:37:09 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-06 08:37:09 SetStatus Connected
2014-11-06 08:37:09 NET Internet:ReachableViaWiFi/-R t----l-
2014-11-06 08:39:09 Session invalidated: KEEPALIVE_TIMEOUT
2014-11-06 08:39:09 Client terminated, restarting in 2...
2014-11-06 08:39:09 TUN reassert
2014-11-06 08:39:09 TUN reset routes
2014-11-06 08:39:09 NET Internet:ReachableViaWiFi/-R -----l-
2014-11-06 08:39:11 EVENT: RECONNECTING
2014-11-06 08:39:11 LZO-ASYM init swap=0 asym=0
2014-11-06 08:39:11 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-06 08:39:11 EVENT: WAIT
2014-11-06 08:39:11 SetTunnelSocket returned 1
2014-11-06 08:39:11 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-06 08:39:11 EVENT: CONNECTING
2014-11-06 08:39:11 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-06 08:39:11 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-06 08:39:13 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-06 08:39:13 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-06 08:39:13 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-06 08:39:13 Session is ACTIVE
2014-11-06 08:39:13 EVENT: GET_CONFIG
2014-11-06 08:39:13 Sending PUSH_REQUEST to server...
2014-11-06 08:39:14 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-06 08:39:14 LZO-ASYM init swap=0 asym=0
2014-11-06 08:39:14 EVENT: ASSIGN_IP
2014-11-06 08:39:14 Connected via tun
2014-11-06 08:39:14 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-06 08:39:14 NET Internet:ReachableViaWiFi/-R t----l-
2014-11-06 08:39:14 SetStatus Connected
2014-11-06 08:41:14 Session invalidated: KEEPALIVE_TIMEOUT
2014-11-06 08:41:14 Client terminated, restarting in 2...
2014-11-06 08:41:14 TUN reassert
2014-11-06 08:41:14 TUN reset routes
2014-11-06 08:41:14 NET Internet:ReachableViaWiFi/-R -----l-
2014-11-06 08:41:16 EVENT: RECONNECTING
2014-11-06 08:41:16 LZO-ASYM init swap=0 asym=0
2014-11-06 08:41:16 Contacting xx.xx.xx.xx:1194 via UDP
2014-11-06 08:41:16 EVENT: WAIT
2014-11-06 08:41:16 SetTunnelSocket returned 1
2014-11-06 08:41:16 Connecting to my.dynamic.dns.host:1194 (xx.xx.xx.xx) via UDPv4
2014-11-06 08:41:16 EVENT: CONNECTING
2014-11-06 08:41:16 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2014-11-06 08:41:16 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2014-11-06 08:41:17 VERIFY OK: depth=1
cert. version : 3
serial number : 82:B0:E7:78:80:7F:AC:CE
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:19:28
expires on : 2024-06-26 02:19:28
signed using : RSA with SHA1
RSA key size : 1024 bits
basic constraints : CA=true

2014-11-06 08:41:17 VERIFY OK: depth=0
cert. version : 3
serial number : 02
issuer name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=Chris, CN=Chris, ??=Chris, emailAddress=**myemailaddress**
subject name : C=US, ST=FL, L=Lakeland, O=Bradensoft, OU=changeme, CN=Chris, ??=changeme, emailAddress=**myemailaddress**
issued on : 2014-06-29 02:22:49
expires on : 2024-06-26 02:22:49
signed using : RSA with MD5
RSA key size : 1024 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication

2014-11-06 08:41:17 SSL Handshake: TLSv1.0/TLS-DHE-RSA-WITH-AES-256-CBC-SHA
2014-11-06 08:41:17 Session is ACTIVE
2014-11-06 08:41:17 EVENT: GET_CONFIG
2014-11-06 08:41:17 Sending PUSH_REQUEST to server...
2014-11-06 08:41:18 OPTIONS:
0 [redirect-gateway] [def1]
1 [route] [192.168.0.0] [255.255.255.0]
2 [dhcp-option] [DNS] [192.168.1.1]
3 [route-gateway] [192.168.66.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [192.168.66.2] [255.255.255.0]

2014-11-06 08:41:18 LZO-ASYM init swap=0 asym=0
2014-11-06 08:41:18 EVENT: ASSIGN_IP
2014-11-06 08:41:18 Connected via tun
2014-11-06 08:41:18 EVENT: CONNECTED @my.dynamic.dns.host:1194 (xx.xx.xx.xx) via /UDPv4 on tun/192.168.66.2/
2014-11-06 08:41:18 NET Internet:ReachableViaWiFi/-R t----l-
2014-11-06 08:41:18 SetStatus Connected

docop29

A couple of things to note....

1. In the OpenVPN tab under the DDWRT status tab, there is no information....there are some titles, but nothing else.

2. I have a PPTP server running using the built in DDWRT functionality which I can connect to without problem.

Traffic

Some things to consider:

The image in your first post is not attached
In your iptables i see br0 which I assume means you are using a bridge
In your server config you are using --server not --server-bridge. --server-bridge would be required for a bridge network
In your server config you are using --dev tun, a bridge setup uses --dev tap
Your phone probably does not support --dev tap so you will have to use --dev tun

In short: I think you need to setup the network correctly in your DD-WRT device ..

docop29

Here is the image again: (hopefully)

Based on your explanation of dev tap not working on my phone, it seems that I do not want a bridge, therefore I have removed the references to br0 in the firewall script...

iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.66.0/24 -j MASQUERADE
iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE

I seem to be getting through now, it is just really really slow....is that a configuration issue? or perhaps the router is too underpowered?

Thank you for the help!

Traffic

docop29 wroteI seem to be getting through now, it is just really really slow

If you are actually getting through then most likely it is your ISP internet connection which is not large enough to handle all the data required to run a Private VPN.

You are welcome to post configs and logs if you think there are still errors you cannot resolve ..
but speed is what they charge you for.

docop29

I would think that is the case but I have 75mbps fios...and its symmetric now.

Also, the PPTP runs faster....maybe the isp is throttling that port?

Traffic

docop29 wroteI have removed the references to br0 in the firewall script...

You do not require a bridge .: you should remove it completely and use an OSI-Layer-3 correctly instead: ie. ethx/tunx ..