OpenVPN on Windows 2003 Server Routing (tun) Config Problems

seesle

Hi,

I was searching a while for the correct config here in this forum and on other sites on the internet, but could not find any working solution for me.
I got a tap configuration to work and it was fine since i got an iphone and wanted to connect from this device to my internal LAN at home with OPENVPN. The app says that iOS does not support tap.
So i tried to change the configuration to tun (Routing)

Here is my network configuration:

Router (DLink), Port 1194 forwarded to 192.168.2.254:
WAN-Port: 91.114.x.x <-- Port to Internet
LAN-Port: 192.168.2.1 <-- Port to my internal Lan with subnet 192.168.2.x

Windows Server. with DHCP Server on and DNS Server on; Running OpenVPN Server:
LAN-Port: 192.168.2.254

Now i want to connect from my iphone over openvpn to my server and so into my internal LAN. The connection gets up but i cannot ping neither contact my internal Lan or any shares on my server.

Here is my server config:

server 10.8.0.0 255.255.255.0 
port 1194 
proto udp 
dev tun 
dh dh1024.pem
ca ca.crt
key gandalf.key
cert gandalf.crt
client-to-client 
push "route 192.168.2.0 255.255.255.0" 
# float 
ping-timer-rem
keepalive 20 180 
verb 3 # Zum Debugging erh??hen
#mute 50 # Zum Debugging auskommentieren

And here is my client config:

client
dev tun
proto udp
remote 91.114.x.x 1194
ca ca.crt
cert Matthias.crt
key Matthias.key
ns-cert-type server
verb 3
; mute 50

As i said the VPN-Connection goes up and gets green but iam not able to ping from client to server or the other direction. Iam also not able to contact the internal lan or shares.

I then tried all other suggestions i found
o i tried to get the regedit hint with IPEnableRouter on => nothing got better
o i tried to put on Routing and RAS manually on my windows server => nothing happened
o i also tried to add the IP Address of my tap device manually in IPV4 settings => nothing happens
o i tried to add the route manually with route.exe ADD 10.8.0.0 MASK 255.255.255.0 192.168.2.254 => nothing happens

Do you have any other suggestions i can try?
Here are my Logs from server and client after connection is up:

Sun Dec 07 14:15:21 2014 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Sun Dec 07 14:15:21 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Sun Dec 07 14:15:21 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sun Dec 07 14:15:21 2014 Need hold release from management interface, waiting...
Sun Dec 07 14:15:21 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'state on'
Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'log all on'
Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'hold off'
Sun Dec 07 14:15:21 2014 MANAGEMENT: CMD 'hold release'
Sun Dec 07 14:15:22 2014 Diffie-Hellman initialized with 1024 bit key
Sun Dec 07 14:15:22 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Dec 07 14:15:22 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Dec 07 14:15:22 2014 MANAGEMENT: >STATE:1417958122,ASSIGN_IP,,10.8.0.1,
Sun Dec 07 14:15:22 2014 open_tun, tt->ipv6=0
Sun Dec 07 14:15:22 2014 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap
Sun Dec 07 14:15:22 2014 TAP-Windows Driver Version 9.9 
Sun Dec 07 14:15:22 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sun Dec 07 14:15:22 2014 Sleeping for 10 seconds...
Sun Dec 07 14:15:32 2014 NOTE: FlushIpNetTable failed on interface [2] {587FE367-DC7B-407F-9F14-2525BED1CCE2} (status=1413) : Invalid index.  
Sun Dec 07 14:15:32 2014 MANAGEMENT: >STATE:1417958132,ADD_ROUTES,,,
Sun Dec 07 14:15:32 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sun Dec 07 14:15:32 2014 Route addition via IPAPI succeeded [adaptive]
Sun Dec 07 14:15:32 2014 UDPv4 link local (bound): [undef]
Sun Dec 07 14:15:32 2014 UDPv4 link remote: [undef]
Sun Dec 07 14:15:32 2014 MULTI: multi_init called, r=256 v=256
Sun Dec 07 14:15:32 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Dec 07 14:15:32 2014 Initialization Sequence Completed
Sun Dec 07 14:15:32 2014 MANAGEMENT: >STATE:1417958132,CONNECTED,SUCCESS,10.8.0.1,
Sun Dec 07 14:15:34 2014 89.144.x.x:43994 TLS: Initial packet from [AF_INET]89.144.x.x:43994, sid=0f4b5bbf 10f84b1c
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=Admin, CN=notebook, emailAddress=matthias@seehauser.at
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542'
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Dec 07 14:15:36 2014 89.144.x.x:43994 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Dec 07 14:15:36 2014 89.144.x.x:43994 [notebook] Peer Connection Initiated with [AF_INET]89.144.x.x:43994
Sun Dec 07 14:15:36 2014 notebook/89.144.x.x:43994 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Dec 07 14:15:36 2014 notebook/89.144.x.x:43994 MULTI: Learn: 10.8.0.6 -> notebook/89.144.x.x:43994
Sun Dec 07 14:15:36 2014 notebook/89.144.x.x:43994 MULTI: primary virtual IP for notebook/89.144.x.x:43994: 10.8.0.6
Sun Dec 07 14:15:38 2014 notebook/89.144.x.x:43994 PUSH: Received control message: 'PUSH_REQUEST'
Sun Dec 07 14:15:38 2014 notebook/89.144.x.x:43994 send_push_reply(): safe_cap=940
Sun Dec 07 14:15:38 2014 notebook/89.144.x.x:43994 SENT CONTROL [notebook]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sun Dec 07 14:15:39 2014 notebook/89.144.x.x:43994 IP packet with unknown IP version=15 seen
Sun Dec 07 14:15:39 2014 notebook/89.144.x.x:43994 IP packet with unknown IP version=15 seen
Sun Dec 07 14:15:39 2014 notebook/89.144.x.x:43994 IP packet with unknown IP version=15 seen

and here the client log

Sun Dec 07 14:15:31 2014 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Sun Dec 07 14:15:31 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Sun Dec 07 14:15:32 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Dec 07 14:15:32 2014 UDPv4 link local: [undef]
Sun Dec 07 14:15:32 2014 UDPv4 link remote: [AF_INET]91.114.x.x:1194
Sun Dec 07 14:15:34 2014 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1541'
Sun Dec 07 14:15:34 2014 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Sun Dec 07 14:15:34 2014 [gandalf] Peer Connection Initiated with [AF_INET]91.114.x.x:1194
Sun Dec 07 14:15:37 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Dec 07 14:15:37 2014 open_tun, tt->ipv6=0
Sun Dec 07 14:15:37 2014 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{2BF9D32B-EA22-42C3-A9C3-63DC332F7C75}.tap
Sun Dec 07 14:15:37 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sun Dec 07 14:15:37 2014 Successful ARP Flush on interface [22] {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75}
Sun Dec 07 14:15:42 2014 Initialization Sequence Completed

last but not least i think the routing table on my windows server could be interesting to find this bug...

===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
         10.8.0.0  255.255.255.252         10.8.0.1         10.8.0.1     30
         10.8.0.0    255.255.255.0    192.168.2.254    192.168.2.254      1
         10.8.0.1  255.255.255.255        127.0.0.1        127.0.0.1     30
   10.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1     30
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0         10.8.0.1         10.8.0.1     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

Please help me, iam sitting here several hours, trying several configs and cant get it to work!
if you need any other information just say it...

Thanks a lot

Matthias

maikcat

leave RRAS down for start,

are these configs the current COMPLETE configs used?

because this:

Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542'
Sun Dec 07 14:15:35 2014 89.144.x.x:43994 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'

reports mismatch on your configs...

Michael.

seesle

Hi,

Sorry i think there happened a mistake with copy paste...

Here once more the configs and logs (verb 4 now, as it stands in the rules...)

Server Log:

Mon Dec 08 15:40:12 2014 us=7125 Current Parameter Settings:
Mon Dec 08 15:40:12 2014 us=7125   config = 'server_tun.ovpn'
Mon Dec 08 15:40:12 2014 us=7125   mode = 1
Mon Dec 08 15:40:12 2014 us=7125   show_ciphers = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   show_digests = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   show_engines = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   genkey = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   key_pass_file = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   show_tls_ciphers = DISABLED
Mon Dec 08 15:40:12 2014 us=7125 Connection profiles [default]:
Mon Dec 08 15:40:12 2014 us=7125   proto = udp
Mon Dec 08 15:40:12 2014 us=7125   local = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   local_port = 1194
Mon Dec 08 15:40:12 2014 us=7125   remote = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   remote_port = 1194
Mon Dec 08 15:40:12 2014 us=7125   remote_float = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   bind_defined = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   bind_local = ENABLED
Mon Dec 08 15:40:12 2014 us=7125   connect_retry_seconds = 5
Mon Dec 08 15:40:12 2014 us=7125   connect_timeout = 10
Mon Dec 08 15:40:12 2014 us=7125   connect_retry_max = 0
Mon Dec 08 15:40:12 2014 us=7125   socks_proxy_server = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   socks_proxy_port = 0
Mon Dec 08 15:40:12 2014 us=7125   socks_proxy_retry = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   tun_mtu = 1500
Mon Dec 08 15:40:12 2014 us=7125   tun_mtu_defined = ENABLED
Mon Dec 08 15:40:12 2014 us=7125   link_mtu = 1500
Mon Dec 08 15:40:12 2014 us=7125   link_mtu_defined = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   tun_mtu_extra = 0
Mon Dec 08 15:40:12 2014 us=7125   tun_mtu_extra_defined = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   mtu_discover_type = -1
Mon Dec 08 15:40:12 2014 us=7125   fragment = 0
Mon Dec 08 15:40:12 2014 us=7125   mssfix = 1450
Mon Dec 08 15:40:12 2014 us=7125   explicit_exit_notification = 0
Mon Dec 08 15:40:12 2014 us=7125 Connection profiles END
Mon Dec 08 15:40:12 2014 us=7125   remote_random = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   ipchange = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   dev = 'tun'
Mon Dec 08 15:40:12 2014 us=7125   dev_type = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   dev_node = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   lladdr = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   topology = 1
Mon Dec 08 15:40:12 2014 us=7125   tun_ipv6 = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   ifconfig_local = '10.8.0.1'
Mon Dec 08 15:40:12 2014 us=7125   ifconfig_remote_netmask = '10.8.0.2'
Mon Dec 08 15:40:12 2014 us=7125   ifconfig_noexec = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   ifconfig_nowarn = DISABLED
Mon Dec 08 15:40:12 2014 us=7125   ifconfig_ipv6_local = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125   ifconfig_ipv6_netbits = 0
Mon Dec 08 15:40:12 2014 us=7125   ifconfig_ipv6_remote = '[UNDEF]'
Mon Dec 08 15:40:12 2014 us=7125 NOTE: --mute triggered...
Mon Dec 08 15:40:12 2014 us=7125 241 variation(s) on previous 50 message(s) suppressed by --mute
Mon Dec 08 15:40:12 2014 us=7125 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Mon Dec 08 15:40:12 2014 us=7125 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Mon Dec 08 15:40:12 2014 us=7125 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Mon Dec 08 15:40:12 2014 us=7125 Need hold release from management interface, waiting...
Mon Dec 08 15:40:12 2014 us=397750 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Mon Dec 08 15:40:12 2014 us=507125 MANAGEMENT: CMD 'state on'
Mon Dec 08 15:40:12 2014 us=507125 MANAGEMENT: CMD 'log all on'
Mon Dec 08 15:40:12 2014 us=554000 MANAGEMENT: CMD 'hold off'
Mon Dec 08 15:40:12 2014 us=554000 MANAGEMENT: CMD 'hold release'
Mon Dec 08 15:40:12 2014 us=725875 Diffie-Hellman initialized with 1024 bit key
Mon Dec 08 15:40:12 2014 us=725875 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Dec 08 15:40:12 2014 us=725875 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Dec 08 15:40:12 2014 us=741500 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Dec 08 15:40:12 2014 us=741500 MANAGEMENT: >STATE:1418049612,ASSIGN_IP,,10.8.0.1,
Mon Dec 08 15:40:12 2014 us=741500 open_tun, tt->ipv6=0
Mon Dec 08 15:40:12 2014 us=741500 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap
Mon Dec 08 15:40:12 2014 us=741500 NOTE: could not get adapter index for {587FE367-DC7B-407F-9F14-2525BED1CCE2}
Mon Dec 08 15:40:12 2014 us=741500 TAP-Windows Driver Version 9.9 
Mon Dec 08 15:40:12 2014 us=741500 TAP-Windows MTU=1500
Mon Dec 08 15:40:12 2014 us=741500 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Mon Dec 08 15:40:12 2014 us=741500 Sleeping for 10 seconds...
Mon Dec 08 15:40:22 2014 us=741500 MANAGEMENT: >STATE:1418049622,ADD_ROUTES,,,
Mon Dec 08 15:40:22 2014 us=741500 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Mon Dec 08 15:40:22 2014 us=741500 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2
Mon Dec 08 15:40:22 2014 us=741500 Route addition via IPAPI failed [adaptive]
Mon Dec 08 15:40:22 2014 us=741500 Route addition fallback to route.exe
Mon Dec 08 15:40:22 2014 us=741500 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Mon Dec 08 15:40:22 2014 us=788375 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Mon Dec 08 15:40:22 2014 us=788375 UDPv4 link local (bound): [undef]
Mon Dec 08 15:40:22 2014 us=788375 UDPv4 link remote: [undef]
Mon Dec 08 15:40:22 2014 us=788375 MULTI: multi_init called, r=256 v=256
Mon Dec 08 15:40:22 2014 us=788375 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Dec 08 15:40:22 2014 us=788375 Initialization Sequence Completed
Mon Dec 08 15:40:22 2014 us=788375 MANAGEMENT: >STATE:1418049622,CONNECTED,SUCCESS,10.8.0.1,
Mon Dec 08 15:42:54 2014 us=475875 MULTI: multi_create_instance called
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Re-using SSL/TLS context
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Local Options hash (VER=V4): '239669a8'
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 Expected Remote Options hash (VER=V4): '3514370b'
Mon Dec 08 15:42:54 2014 us=475875 89.144.x.x:44044 TLS: Initial packet from [AF_INET]89.144.x.x:44044, sid=b45ff3fa e64218d8
Mon Dec 08 15:42:55 2014 us=522750 89.144.x.x:44044 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Mon Dec 08 15:42:55 2014 us=522750 89.144.x.x:44044 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=Admin, CN=notebook, emailAddress=matthias@seehauser.at
Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 08 15:42:55 2014 us=694625 89.144.x.x:44044 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 08 15:42:55 2014 us=772750 89.144.x.x:44044 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Dec 08 15:42:55 2014 us=772750 89.144.x.x:44044 [notebook] Peer Connection Initiated with [AF_INET]89.144.x.x:44044
Mon Dec 08 15:42:55 2014 us=772750 notebook/89.144.x.x:44044 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Dec 08 15:42:55 2014 us=772750 notebook/89.144.x.x:44044 MULTI: Learn: 10.8.0.6 -> notebook/89.144.x.x:44044
Mon Dec 08 15:42:55 2014 us=772750 notebook/89.144.x.x:44044 MULTI: primary virtual IP for notebook/89.144.x.x:44044: 10.8.0.6
Mon Dec 08 15:42:58 2014 us=350875 notebook/89.144.x.x:44044 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 08 15:42:58 2014 us=350875 notebook/89.144.x.x:44044 send_push_reply(): safe_cap=940
Mon Dec 08 15:42:58 2014 us=350875 notebook/89.144.x.x:44044 SENT CONTROL [notebook]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Dec 08 15:42:58 2014 us=913375 notebook/89.144.x.x:44044 MULTI: bad source address from client [??+??], packet dropped

Client log:

Mon Dec 08 15:42:53 2014 us=475895 Current Parameter Settings:
Mon Dec 08 15:42:53 2014 us=476895   config = 'Matthias.ovpn'
Mon Dec 08 15:42:53 2014 us=476895   mode = 0
Mon Dec 08 15:42:53 2014 us=476895   show_ciphers = DISABLED
Mon Dec 08 15:42:53 2014 us=476895   show_digests = DISABLED
Mon Dec 08 15:42:53 2014 us=476895   show_engines = DISABLED
Mon Dec 08 15:42:53 2014 us=476895   genkey = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   key_pass_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   show_tls_ciphers = DISABLED
Mon Dec 08 15:42:53 2014 us=477894 Connection profiles [default]:
Mon Dec 08 15:42:53 2014 us=477894   proto = udp
Mon Dec 08 15:42:53 2014 us=477894   local = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   local_port = 1194
Mon Dec 08 15:42:53 2014 us=477894   remote = '91.114.x.x'
Mon Dec 08 15:42:53 2014 us=477894   remote_port = 1194
Mon Dec 08 15:42:53 2014 us=477894   remote_float = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   bind_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   bind_local = ENABLED
Mon Dec 08 15:42:53 2014 us=477894   connect_retry_seconds = 5
Mon Dec 08 15:42:53 2014 us=477894   connect_timeout = 10
Mon Dec 08 15:42:53 2014 us=477894   connect_retry_max = 0
Mon Dec 08 15:42:53 2014 us=477894   socks_proxy_server = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   socks_proxy_port = 0
Mon Dec 08 15:42:53 2014 us=477894   socks_proxy_retry = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   tun_mtu = 1500
Mon Dec 08 15:42:53 2014 us=477894   tun_mtu_defined = ENABLED
Mon Dec 08 15:42:53 2014 us=477894   link_mtu = 1500
Mon Dec 08 15:42:53 2014 us=477894   link_mtu_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   tun_mtu_extra = 0
Mon Dec 08 15:42:53 2014 us=477894   tun_mtu_extra_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   mtu_discover_type = -1
Mon Dec 08 15:42:53 2014 us=477894   fragment = 0
Mon Dec 08 15:42:53 2014 us=477894   mssfix = 1450
Mon Dec 08 15:42:53 2014 us=477894   explicit_exit_notification = 0
Mon Dec 08 15:42:53 2014 us=477894 Connection profiles END
Mon Dec 08 15:42:53 2014 us=477894   remote_random = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   ipchange = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   dev = 'tun'
Mon Dec 08 15:42:53 2014 us=477894   dev_type = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   dev_node = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   lladdr = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   topology = 1
Mon Dec 08 15:42:53 2014 us=477894   tun_ipv6 = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   ifconfig_local = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   ifconfig_remote_netmask = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   ifconfig_noexec = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   ifconfig_nowarn = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   ifconfig_ipv6_local = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   ifconfig_ipv6_netbits = 0
Mon Dec 08 15:42:53 2014 us=477894   ifconfig_ipv6_remote = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   shaper = 0
Mon Dec 08 15:42:53 2014 us=477894   mtu_test = 0
Mon Dec 08 15:42:53 2014 us=477894   mlock = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   keepalive_ping = 0
Mon Dec 08 15:42:53 2014 us=477894   keepalive_timeout = 0
Mon Dec 08 15:42:53 2014 us=477894   inactivity_timeout = 0
Mon Dec 08 15:42:53 2014 us=477894   ping_send_timeout = 0
Mon Dec 08 15:42:53 2014 us=477894   ping_rec_timeout = 0
Mon Dec 08 15:42:53 2014 us=477894   ping_rec_timeout_action = 0
Mon Dec 08 15:42:53 2014 us=477894   ping_timer_remote = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   remap_sigusr1 = 0
Mon Dec 08 15:42:53 2014 us=477894   persist_tun = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   persist_local_ip = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   persist_remote_ip = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   persist_key = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   passtos = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   resolve_retry_seconds = 1000000000
Mon Dec 08 15:42:53 2014 us=477894   username = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   groupname = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   chroot_dir = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   cd_dir = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   writepid = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   up_script = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   down_script = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   down_pre = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   up_restart = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   up_delay = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   daemon = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   inetd = 0
Mon Dec 08 15:42:53 2014 us=477894   log = ENABLED
Mon Dec 08 15:42:53 2014 us=477894   suppress_timestamps = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   nice = 0
Mon Dec 08 15:42:53 2014 us=477894   verbosity = 4
Mon Dec 08 15:42:53 2014 us=477894   mute = 0
Mon Dec 08 15:42:53 2014 us=477894   status_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   status_file_version = 1
Mon Dec 08 15:42:53 2014 us=477894   status_file_update_freq = 60
Mon Dec 08 15:42:53 2014 us=477894   occ = ENABLED
Mon Dec 08 15:42:53 2014 us=477894   rcvbuf = 0
Mon Dec 08 15:42:53 2014 us=477894   sndbuf = 0
Mon Dec 08 15:42:53 2014 us=477894   sockflags = 0
Mon Dec 08 15:42:53 2014 us=477894   fast_io = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   lzo = 0
Mon Dec 08 15:42:53 2014 us=477894   route_script = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   route_default_gateway = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   route_default_metric = 0
Mon Dec 08 15:42:53 2014 us=477894   route_noexec = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   route_delay = 5
Mon Dec 08 15:42:53 2014 us=477894   route_delay_window = 30
Mon Dec 08 15:42:53 2014 us=477894   route_delay_defined = ENABLED
Mon Dec 08 15:42:53 2014 us=477894   route_nopull = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   route_gateway_via_dhcp = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   max_routes = 100
Mon Dec 08 15:42:53 2014 us=477894   allow_pull_fqdn = DISABLED
Mon Dec 08 15:42:53 2014 us=477894   management_addr = '127.0.0.1'
Mon Dec 08 15:42:53 2014 us=477894   management_port = 25340
Mon Dec 08 15:42:53 2014 us=477894   management_user_pass = 'stdin'
Mon Dec 08 15:42:53 2014 us=477894   management_log_history_cache = 250
Mon Dec 08 15:42:53 2014 us=477894   management_echo_buffer_size = 100
Mon Dec 08 15:42:53 2014 us=477894   management_write_peer_info_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=477894   management_client_user = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   management_client_group = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   management_flags = 6
Mon Dec 08 15:42:53 2014 us=478894   shared_secret_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   key_direction = 0
Mon Dec 08 15:42:53 2014 us=478894   ciphername_defined = ENABLED
Mon Dec 08 15:42:53 2014 us=478894   ciphername = 'BF-CBC'
Mon Dec 08 15:42:53 2014 us=478894   authname_defined = ENABLED
Mon Dec 08 15:42:53 2014 us=478894   authname = 'SHA1'
Mon Dec 08 15:42:53 2014 us=478894   prng_hash = 'SHA1'
Mon Dec 08 15:42:53 2014 us=478894   prng_nonce_secret_len = 16
Mon Dec 08 15:42:53 2014 us=478894   keysize = 0
Mon Dec 08 15:42:53 2014 us=478894   engine = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   replay = ENABLED
Mon Dec 08 15:42:53 2014 us=478894   mute_replay_warnings = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   replay_window = 64
Mon Dec 08 15:42:53 2014 us=478894   replay_time = 15
Mon Dec 08 15:42:53 2014 us=478894   packet_id_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   use_iv = ENABLED
Mon Dec 08 15:42:53 2014 us=478894   test_crypto = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   tls_server = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   tls_client = ENABLED
Mon Dec 08 15:42:53 2014 us=478894   key_method = 2
Mon Dec 08 15:42:53 2014 us=478894   ca_file = 'ca.crt'
Mon Dec 08 15:42:53 2014 us=478894   ca_path = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   dh_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   cert_file = 'Matthias.crt'
Mon Dec 08 15:42:53 2014 us=478894   priv_key_file = 'Matthias.key'
Mon Dec 08 15:42:53 2014 us=478894   pkcs12_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   cryptoapi_cert = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   cipher_list = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   tls_verify = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   tls_export_cert = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   verify_x509_type = 0
Mon Dec 08 15:42:53 2014 us=478894   verify_x509_name = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   crl_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   ns_cert_type = 1
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_ku[i] = 0
Mon Dec 08 15:42:53 2014 us=478894   remote_cert_eku = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   ssl_flags = 0
Mon Dec 08 15:42:53 2014 us=478894   tls_timeout = 2
Mon Dec 08 15:42:53 2014 us=478894   renegotiate_bytes = 0
Mon Dec 08 15:42:53 2014 us=478894   renegotiate_packets = 0
Mon Dec 08 15:42:53 2014 us=478894   renegotiate_seconds = 3600
Mon Dec 08 15:42:53 2014 us=478894   handshake_window = 60
Mon Dec 08 15:42:53 2014 us=478894   transition_window = 3600
Mon Dec 08 15:42:53 2014 us=478894   single_session = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   push_peer_info = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   tls_exit = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   tls_auth_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_protected_authentication = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_private_mode = 00000000
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=478894   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_cert_private = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_pin_cache_period = -1
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_id = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=479893   pkcs11_id_management = DISABLED
Mon Dec 08 15:42:53 2014 us=479893   server_network = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=479893   server_netmask = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   server_network_ipv6 = ::
Mon Dec 08 15:42:53 2014 us=487888   server_netbits_ipv6 = 0
Mon Dec 08 15:42:53 2014 us=487888   server_bridge_ip = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   server_bridge_netmask = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   server_bridge_pool_start = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   server_bridge_pool_end = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_pool_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_pool_start = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_pool_end = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_pool_netmask = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_pool_persist_refresh_freq = 600
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_ipv6_pool_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_ipv6_pool_base = ::
Mon Dec 08 15:42:53 2014 us=487888   ifconfig_ipv6_pool_netbits = 0
Mon Dec 08 15:42:53 2014 us=487888   n_bcast_buf = 256
Mon Dec 08 15:42:53 2014 us=487888   tcp_queue_limit = 64
Mon Dec 08 15:42:53 2014 us=487888   real_hash_size = 256
Mon Dec 08 15:42:53 2014 us=487888   virtual_hash_size = 256
Mon Dec 08 15:42:53 2014 us=487888   client_connect_script = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   learn_address_script = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   client_disconnect_script = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   client_config_dir = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   ccd_exclusive = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   tmp_dir = 'C:\Users\MATTHI~1.SEE\AppData\Local\Temp\'
Mon Dec 08 15:42:53 2014 us=487888   push_ifconfig_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   push_ifconfig_local = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   push_ifconfig_remote_netmask = 0.0.0.0
Mon Dec 08 15:42:53 2014 us=487888   push_ifconfig_ipv6_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   push_ifconfig_ipv6_local = ::/0
Mon Dec 08 15:42:53 2014 us=487888   push_ifconfig_ipv6_remote = ::
Mon Dec 08 15:42:53 2014 us=487888   enable_c2c = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   duplicate_cn = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   cf_max = 0
Mon Dec 08 15:42:53 2014 us=487888   cf_per = 0
Mon Dec 08 15:42:53 2014 us=487888   max_clients = 1024
Mon Dec 08 15:42:53 2014 us=487888   max_routes_per_client = 256
Mon Dec 08 15:42:53 2014 us=487888   auth_user_pass_verify_script = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   auth_user_pass_verify_script_via_file = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   client = ENABLED
Mon Dec 08 15:42:53 2014 us=487888   pull = ENABLED
Mon Dec 08 15:42:53 2014 us=487888   auth_user_pass_file = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   show_net_up = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   route_method = 0
Mon Dec 08 15:42:53 2014 us=487888   ip_win32_defined = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   ip_win32_type = 3
Mon Dec 08 15:42:53 2014 us=487888   dhcp_masq_offset = 0
Mon Dec 08 15:42:53 2014 us=487888   dhcp_lease_time = 31536000
Mon Dec 08 15:42:53 2014 us=487888   tap_sleep = 0
Mon Dec 08 15:42:53 2014 us=487888   dhcp_options = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   dhcp_renew = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   dhcp_pre_release = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   dhcp_release = DISABLED
Mon Dec 08 15:42:53 2014 us=487888   domain = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   netbios_scope = '[UNDEF]'
Mon Dec 08 15:42:53 2014 us=487888   netbios_node_type = 0
Mon Dec 08 15:42:53 2014 us=487888   disable_nbt = DISABLED
Mon Dec 08 15:42:53 2014 us=487888 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Mon Dec 08 15:42:53 2014 us=487888 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Mon Dec 08 15:42:53 2014 us=488888 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Dec 08 15:42:53 2014 us=488888 Need hold release from management interface, waiting...
Mon Dec 08 15:42:53 2014 us=980565 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Dec 08 15:42:54 2014 us=80499 MANAGEMENT: CMD 'state on'
Mon Dec 08 15:42:54 2014 us=80499 MANAGEMENT: CMD 'log all on'
Mon Dec 08 15:42:54 2014 us=202421 MANAGEMENT: CMD 'hold off'
Mon Dec 08 15:42:54 2014 us=202421 MANAGEMENT: CMD 'hold release'
Mon Dec 08 15:42:54 2014 us=461266 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Dec 08 15:42:54 2014 us=462265 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Dec 08 15:42:54 2014 us=462265 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Mon Dec 08 15:42:54 2014 us=462265 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Dec 08 15:42:54 2014 us=462265 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Dec 08 15:42:54 2014 us=462265 Local Options hash (VER=V4): '3514370b'
Mon Dec 08 15:42:54 2014 us=462265 Expected Remote Options hash (VER=V4): '239669a8'
Mon Dec 08 15:42:54 2014 us=462265 UDPv4 link local (bound): [undef]
Mon Dec 08 15:42:54 2014 us=462265 UDPv4 link remote: [AF_INET]91.114.x.x:1194
Mon Dec 08 15:42:54 2014 us=462265 MANAGEMENT: >STATE:1418049774,WAIT,,,
Mon Dec 08 15:42:54 2014 us=734088 MANAGEMENT: >STATE:1418049774,AUTH,,,
Mon Dec 08 15:42:54 2014 us=734088 TLS: Initial packet from [AF_INET]91.114.x.x:1194, sid=a66c84d1 3a918531
Mon Dec 08 15:42:55 2014 us=193784 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Mon Dec 08 15:42:55 2014 us=193784 VERIFY OK: nsCertType=SERVER
Mon Dec 08 15:42:55 2014 us=193784 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Mon Dec 08 15:42:55 2014 us=945288 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 08 15:42:55 2014 us=945288 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 08 15:42:55 2014 us=945288 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Dec 08 15:42:55 2014 us=945288 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 08 15:42:55 2014 us=945288 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Dec 08 15:42:55 2014 us=945288 [gandalf] Peer Connection Initiated with [AF_INET]91.114.x.x:1194
Mon Dec 08 15:42:57 2014 us=144496 MANAGEMENT: >STATE:1418049777,GET_CONFIG,,,
Mon Dec 08 15:42:58 2014 us=343704 SENT CONTROL [gandalf]: 'PUSH_REQUEST' (status=1)
Mon Dec 08 15:42:58 2014 us=883348 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5'
Mon Dec 08 15:42:58 2014 us=883348 OPTIONS IMPORT: timers and/or timeouts modified
Mon Dec 08 15:42:58 2014 us=883348 OPTIONS IMPORT: --ifconfig/up options modified
Mon Dec 08 15:42:58 2014 us=883348 OPTIONS IMPORT: route options modified
Mon Dec 08 15:42:58 2014 us=883348 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Dec 08 15:42:58 2014 us=883348 MANAGEMENT: >STATE:1418049778,ASSIGN_IP,,10.8.0.6,
Mon Dec 08 15:42:58 2014 us=883348 open_tun, tt->ipv6=0
Mon Dec 08 15:42:58 2014 us=883348 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{2BF9D32B-EA22-42C3-A9C3-63DC332F7C75}.tap
Mon Dec 08 15:42:58 2014 us=883348 TAP-Windows Driver Version 9.21 
Mon Dec 08 15:42:58 2014 us=883348 TAP-Windows MTU=1500
Mon Dec 08 15:42:58 2014 us=893341 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Dec 08 15:42:58 2014 us=893341 Successful ARP Flush on interface [21] {2BF9D32B-EA22-42C3-A9C3-63DC332F7C75}
Mon Dec 08 15:43:03 2014 us=52663 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Mon Dec 08 15:43:03 2014 us=52663 MANAGEMENT: >STATE:1418049783,ADD_ROUTES,,,
Mon Dec 08 15:43:03 2014 us=52663 C:\Windows\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.8.0.5
Mon Dec 08 15:43:03 2014 us=52663 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Dec 08 15:43:03 2014 us=52663 Route addition via IPAPI succeeded [adaptive]
Mon Dec 08 15:43:03 2014 us=52663 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Mon Dec 08 15:43:03 2014 us=52663 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Dec 08 15:43:03 2014 us=52663 Route addition via IPAPI succeeded [adaptive]
Mon Dec 08 15:43:03 2014 us=52663 Initialization Sequence Completed
Mon Dec 08 15:43:03 2014 us=52663 MANAGEMENT: >STATE:1418049783,CONNECTED,SUCCESS,10.8.0.6,91.114.x.x

server config:

server 10.8.0.0 255.255.255.0 
port 1194 
proto udp
dev tun
dh dh1024.pem
ca ca.crt
key gandalf.key
cert gandalf.crt
client-to-client 
push "route 192.168.2.0 255.255.255.0" 
ping-timer-rem
keepalive 20 180 
verb 4
mute 50

Client config:

client
dev tun
proto udp
remote 91.114.x.x 1194
ca ca.crt
cert Matthias.crt
key Matthias.key
ns-cert-type server
verb 4
#mute 50

sorry for that! now its correct!

Thanks

Matthias

maikcat

except this

Mon Dec 08 15:40:22 2014 us=741500 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Mon Dec 08 15:40:22 2014 us=741500 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2
Mon Dec 08 15:40:22 2014 us=741500 Route addition via IPAPI failed [adaptive]

everything else looks ok,
cant you ping 10.8.0.1 from your client?

also can you post the output of

netstat -nr

on your server before and after vpn is up?

Michael.

seesle

Sorry for my late reply, but i got water on my laptop :o :o and so i had to get a new one...

Ok, i rebooted my server and thats the netstat -nr result:

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...02 ff 58 7f e3 67 ...... MAC Bridge Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     40
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     40
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     40
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     40
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     40
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Documents and Settings\Administrator>

Then i started the connection on my server with the config above and thats the result of netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...02 ff 58 7f e3 67 ...... MAC Bridge Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     40
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     40
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     40
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     40
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     40
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Documents and Settings\Administrator>

And no i connected my laptop over the internet and thats the result of netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...02 ff 58 7f e3 67 ...... MAC Bridge Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     40
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     40
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     40
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     40
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     40
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Program Files\Support Tools>

No difference at all... i think the route command does not work, or do i always have to add the route manually?!

I have one question. My server is behind the router (which connects my lan and the server to the internet). I read that i have to add the route on the router but in my case, when iam connecting over VPN to my server i have to add the route on my server!?

Matthias

maikcat

i see no tun based routes on your server after vpn is up...

ipconfig /all

reports vpn interface?

if not,are you running openvpn with admin rights?
also you may reinstall openvpn in case the tap driver is not installed correctly.

Michael.

Traffic

It looks like you have no TAP adapters installed:

>netstat -nr

Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 50 04 d0 50 0f ...... 3Com EtherLink XL 10/100 PCI For Complete PC Man
agement NIC (3C905C-TX) - VirtualBox Bridged Networking Driver Miniport
0x20003 ...00 ff 06 a5 9d 3a ...... TAP-Windows Adapter V9
0x30004 ...00 ff 4c 0b 34 e6 ...... TAP-Windows Adapter V9 #2
0x40005 ...00 ff c4 f6 b4 75 ...... TAP-Windows Adapter V9 #3
===========================================================================

seesle

Hey guys iam sorry i made a big mistake... i recovered my server and then i had the bridge between the tap device and the network card online.

Once more here the output of ipconfig /all and netstat -nr. I restarted my server and then i got the two outputs, then i connected on my server over OpenVPN GUI and got the output and last but not least i connected over my notebook (3G connection) to my server!

after restart ipconfig /all

C:\Program Files\Support Tools>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : gandalf
   Primary Dns Suffix  . . . . . . . : seeslenet.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : seeslenet.local

Ethernet adapter tap-bridge:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-58-7F-E3-67
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Autoconfiguration IP Address. . . : 169.254.152.242
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.2.254

Ethernet adapter homenetwork:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E Gigabi
t Ethernet NIC
   Physical Address. . . . . . . . . : 00-1F-D0-52-05-DC
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.2.254
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.2.1
   DNS Servers . . . . . . . . . . . : 192.168.2.254
   Primary WINS Server . . . . . . . : 192.168.2.254
   NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Program Files\Support Tools>

after restart netstat -nr

C:\Program Files\Support Tools>netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9
0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E
thernet NIC
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      169.254.0.0      255.255.0.0  169.254.152.242  169.254.152.242     30
  169.254.152.242  255.255.255.255        127.0.0.1        127.0.0.1     30
  169.254.255.255  255.255.255.255  169.254.152.242  169.254.152.242     30
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0  169.254.152.242  169.254.152.242     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255  169.254.152.242  169.254.152.242      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Program Files\Support Tools>

after connection over GUI ipconfig /all

C:\Program Files\Support Tools>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : gandalf
   Primary Dns Suffix  . . . . . . . : seeslenet.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : seeslenet.local

Ethernet adapter tap-bridge:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-58-7F-E3-67
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Autoconfiguration IP Address. . . : 169.254.152.242
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.2.254

Ethernet adapter homenetwork:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E Gigabi
t Ethernet NIC
   Physical Address. . . . . . . . . : 00-1F-D0-52-05-DC
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.2.254
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.2.1
   DNS Servers . . . . . . . . . . . : 192.168.2.254
   Primary WINS Server . . . . . . . : 192.168.2.254
   NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Program Files\Support Tools>

after connection over GUI netstat -nr

C:\Program Files\Support Tools>netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9
0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E
thernet NIC
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      169.254.0.0      255.255.0.0  169.254.152.242  169.254.152.242     30
  169.254.152.242  255.255.255.255        127.0.0.1        127.0.0.1     30
  169.254.255.255  255.255.255.255  169.254.152.242  169.254.152.242     30
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0  169.254.152.242  169.254.152.242     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255  169.254.152.242  169.254.152.242      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Program Files\Support Tools>

after connection from notebook ipconfig /all

C:\Program Files\Support Tools>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : gandalf
   Primary Dns Suffix  . . . . . . . : seeslenet.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : seeslenet.local

Ethernet adapter tap-bridge:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-58-7F-E3-67
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Autoconfiguration IP Address. . . : 169.254.152.242
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.2.254

Ethernet adapter homenetwork:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E Gigabi
t Ethernet NIC
   Physical Address. . . . . . . . . : 00-1F-D0-52-05-DC
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.2.254
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.2.1
   DNS Servers . . . . . . . . . . . : 192.168.2.254
   Primary WINS Server . . . . . . . : 192.168.2.254
   NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Program Files\Support Tools>

after connection from notebook netstat -nr

C:\Program Files\Support Tools>netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9
0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E
thernet NIC
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
         10.8.0.0  255.255.255.252         10.8.0.1         10.8.0.1     30
         10.8.0.1  255.255.255.255        127.0.0.1        127.0.0.1     30
   10.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1     30
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0         10.8.0.1         10.8.0.1     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255         10.8.0.1         10.8.0.1      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Program Files\Support Tools>

after connection from notebook => netstat -nr "ON NOTEBOOK"

C:\Users\Nina>netstat -nr
===========================================================================
Schnittstellenliste
 31...00 ff 60 2c eb bb ......TAP-Windows Adapter V9
 14...c0 cb 38 b5 7e 75 ......Bluetooth-Gerät (PAN)
 12...f0 4d a2 ba 81 a0 ......Realtek PCIe GBE Family Controller
 11...c0 cb 38 79 16 ac ......DW 1501 Wireless-N WLAN Half-Mini Card
  1...........................Software Loopback Interface 1
 13...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
 16...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #2
 32...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2
 33...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #4
 19...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #4
 17...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #3
 20...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #5
 22...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #7
 23...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #8
 21...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #6
 24...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #9
 25...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #10
 26...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #11
 30...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
          0.0.0.0          0.0.0.0      172.20.10.1      172.20.10.4     25
         10.8.0.0    255.255.255.0         10.8.0.5         10.8.0.6     20
         10.8.0.4  255.255.255.252   Auf Verbindung          10.8.0.6    276
         10.8.0.6  255.255.255.255   Auf Verbindung          10.8.0.6    276
         10.8.0.7  255.255.255.255   Auf Verbindung          10.8.0.6    276
        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306
        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306
  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
      172.20.10.0  255.255.255.240   Auf Verbindung       172.20.10.4    281
      172.20.10.4  255.255.255.255   Auf Verbindung       172.20.10.4    281
     172.20.10.15  255.255.255.255   Auf Verbindung       172.20.10.4    281
      192.168.2.0    255.255.255.0         10.8.0.5         10.8.0.6     20
        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306
        224.0.0.0        240.0.0.0   Auf Verbindung          10.8.0.6    276
        224.0.0.0        240.0.0.0   Auf Verbindung       172.20.10.4    281
  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
  255.255.255.255  255.255.255.255   Auf Verbindung          10.8.0.6    276
  255.255.255.255  255.255.255.255   Auf Verbindung       172.20.10.4    281
===========================================================================
Ständige Routen:
  Netzwerkadresse          Netzmaske  Gatewayadresse  Metrik
      169.254.0.0      255.255.0.0     192.168.2.12       1
===========================================================================

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel             Gateway
 30     58 ::/0                     Auf Verbindung
  1    306 ::1/128                  Auf Verbindung
 30     58 2001::/32                Auf Verbindung
 30    306 2001:0:5ef5:79fb:83:cc4d:a66f:315f/128
                                    Auf Verbindung
 31    276 fe80::/64                Auf Verbindung
 11    281 fe80::/64                Auf Verbindung
 30    306 fe80::/64                Auf Verbindung
 30    306 fe80::83:cc4d:a66f:315f/128
                                    Auf Verbindung
 31    276 fe80::111:842a:d9e:9b21/128
                                    Auf Verbindung
 11    281 fe80::253c:80c0:85b2:d443/128
                                    Auf Verbindung
  1    306 ff00::/8                 Auf Verbindung
 30    306 ff00::/8                 Auf Verbindung
 31    276 ff00::/8                 Auf Verbindung
 11    281 ff00::/8                 Auf Verbindung
===========================================================================
Ständige Routen:
  Keine

C:\Users\Nina>

on my server i run openvpn as an administrator on the notebook i run it as "run as" Administrator!

i hope this information helps, sorry for that mistake one post before...
Thx for your help and Best regards

Matthias

maikcat

please re-post the current server config and logs used.

Michael.

seesle

OK!

Server konfig

server 10.8.0.0 255.255.255.0
port 1194
proto udp 
dev tun 
dh dh1024.pem
ca ca.crt
key gandalf.key
cert gandalf.crt
client-to-client 
push "route 192.168.2.0 255.255.255.0"
# float 
ping-timer-rem
keepalive 20 180
verb 4
mute 50

Client konfig

client
dev tun
proto udp
remote 91.114.121.70 1194
ca ca.crt
cert Matthias.crt
key Matthias.key
ns-cert-type server
verb 4
#mute 50

maikcat

server logs please?

Michael.

seesle

server log before connected:

Sun Dec 14 20:48:02 2014 us=320500 Current Parameter Settings:
Sun Dec 14 20:48:02 2014 us=320500   config = 'server_tun.ovpn'
Sun Dec 14 20:48:02 2014 us=320500   mode = 1
Sun Dec 14 20:48:02 2014 us=320500   show_ciphers = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   show_digests = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   show_engines = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   genkey = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   key_pass_file = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   show_tls_ciphers = DISABLED
Sun Dec 14 20:48:02 2014 us=320500 Connection profiles [default]:
Sun Dec 14 20:48:02 2014 us=320500   proto = udp
Sun Dec 14 20:48:02 2014 us=320500   local = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   local_port = 1194
Sun Dec 14 20:48:02 2014 us=320500   remote = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   remote_port = 1194
Sun Dec 14 20:48:02 2014 us=320500   remote_float = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   bind_defined = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   bind_local = ENABLED
Sun Dec 14 20:48:02 2014 us=320500   connect_retry_seconds = 5
Sun Dec 14 20:48:02 2014 us=320500   connect_timeout = 10
Sun Dec 14 20:48:02 2014 us=320500   connect_retry_max = 0
Sun Dec 14 20:48:02 2014 us=320500   socks_proxy_server = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   socks_proxy_port = 0
Sun Dec 14 20:48:02 2014 us=320500   socks_proxy_retry = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu = 1500
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu_defined = ENABLED
Sun Dec 14 20:48:02 2014 us=320500   link_mtu = 1500
Sun Dec 14 20:48:02 2014 us=320500   link_mtu_defined = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu_extra = 0
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu_extra_defined = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   mtu_discover_type = -1
Sun Dec 14 20:48:02 2014 us=320500   fragment = 0
Sun Dec 14 20:48:02 2014 us=320500   mssfix = 1450
Sun Dec 14 20:48:02 2014 us=320500   explicit_exit_notification = 0
Sun Dec 14 20:48:02 2014 us=320500 Connection profiles END
Sun Dec 14 20:48:02 2014 us=320500   remote_random = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ipchange = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   dev = 'tun'
Sun Dec 14 20:48:02 2014 us=320500   dev_type = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   dev_node = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   lladdr = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   topology = 1
Sun Dec 14 20:48:02 2014 us=320500   tun_ipv6 = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_local = '10.8.0.1'
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_remote_netmask = '10.8.0.2'
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_noexec = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_nowarn = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_ipv6_local = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_ipv6_netbits = 0
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_ipv6_remote = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500 NOTE: --mute triggered...
Sun Dec 14 20:48:02 2014 us=320500 241 variation(s) on previous 50 message(s) suppressed by --mute
Sun Dec 14 20:48:02 2014 us=320500 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Sun Dec 14 20:48:02 2014 us=320500 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Sun Dec 14 20:48:02 2014 us=320500 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sun Dec 14 20:48:02 2014 us=320500 Need hold release from management interface, waiting...
Sun Dec 14 20:48:02 2014 us=758000 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sun Dec 14 20:48:02 2014 us=867375 MANAGEMENT: CMD 'state on'
Sun Dec 14 20:48:02 2014 us=867375 MANAGEMENT: CMD 'log all on'
Sun Dec 14 20:48:02 2014 us=945500 MANAGEMENT: CMD 'hold off'
Sun Dec 14 20:48:02 2014 us=945500 MANAGEMENT: CMD 'hold release'
Sun Dec 14 20:48:03 2014 us=429875 Diffie-Hellman initialized with 1024 bit key
Sun Dec 14 20:48:03 2014 us=445500 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Dec 14 20:48:03 2014 us=445500 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Dec 14 20:48:03 2014 us=461125 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Dec 14 20:48:03 2014 us=461125 MANAGEMENT: >STATE:1418586483,ASSIGN_IP,,10.8.0.1,
Sun Dec 14 20:48:03 2014 us=461125 open_tun, tt->ipv6=0
Sun Dec 14 20:48:03 2014 us=461125 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap
Sun Dec 14 20:48:03 2014 us=461125 TAP-Windows Driver Version 9.9 
Sun Dec 14 20:48:03 2014 us=461125 TAP-Windows MTU=1500
Sun Dec 14 20:48:03 2014 us=461125 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sun Dec 14 20:48:03 2014 us=461125 Sleeping for 10 seconds...
Sun Dec 14 20:48:13 2014 us=492375 NOTE: FlushIpNetTable failed on interface [2] {587FE367-DC7B-407F-9F14-2525BED1CCE2} (status=1413) : Invalid index.  
Sun Dec 14 20:48:13 2014 us=492375 MANAGEMENT: >STATE:1418586493,ADD_ROUTES,,,
Sun Dec 14 20:48:13 2014 us=492375 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sun Dec 14 20:48:13 2014 us=492375 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2
Sun Dec 14 20:48:13 2014 us=492375 Route addition via IPAPI failed [adaptive]
Sun Dec 14 20:48:13 2014 us=492375 Route addition fallback to route.exe
Sun Dec 14 20:48:13 2014 us=492375 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sun Dec 14 20:48:13 2014 us=554875 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sun Dec 14 20:48:13 2014 us=554875 UDPv4 link local (bound): [undef]
Sun Dec 14 20:48:13 2014 us=554875 UDPv4 link remote: [undef]
Sun Dec 14 20:48:13 2014 us=554875 MULTI: multi_init called, r=256 v=256
Sun Dec 14 20:48:13 2014 us=554875 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Dec 14 20:48:13 2014 us=554875 Initialization Sequence Completed
Sun Dec 14 20:48:13 2014 us=554875 MANAGEMENT: >STATE:1418586493,CONNECTED,SUCCESS,10.8.0.1,

server logs after connection is up:

Sun Dec 14 20:48:02 2014 us=320500 Current Parameter Settings:
Sun Dec 14 20:48:02 2014 us=320500   config = 'server_tun.ovpn'
Sun Dec 14 20:48:02 2014 us=320500   mode = 1
Sun Dec 14 20:48:02 2014 us=320500   show_ciphers = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   show_digests = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   show_engines = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   genkey = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   key_pass_file = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   show_tls_ciphers = DISABLED
Sun Dec 14 20:48:02 2014 us=320500 Connection profiles [default]:
Sun Dec 14 20:48:02 2014 us=320500   proto = udp
Sun Dec 14 20:48:02 2014 us=320500   local = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   local_port = 1194
Sun Dec 14 20:48:02 2014 us=320500   remote = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   remote_port = 1194
Sun Dec 14 20:48:02 2014 us=320500   remote_float = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   bind_defined = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   bind_local = ENABLED
Sun Dec 14 20:48:02 2014 us=320500   connect_retry_seconds = 5
Sun Dec 14 20:48:02 2014 us=320500   connect_timeout = 10
Sun Dec 14 20:48:02 2014 us=320500   connect_retry_max = 0
Sun Dec 14 20:48:02 2014 us=320500   socks_proxy_server = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   socks_proxy_port = 0
Sun Dec 14 20:48:02 2014 us=320500   socks_proxy_retry = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu = 1500
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu_defined = ENABLED
Sun Dec 14 20:48:02 2014 us=320500   link_mtu = 1500
Sun Dec 14 20:48:02 2014 us=320500   link_mtu_defined = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu_extra = 0
Sun Dec 14 20:48:02 2014 us=320500   tun_mtu_extra_defined = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   mtu_discover_type = -1
Sun Dec 14 20:48:02 2014 us=320500   fragment = 0
Sun Dec 14 20:48:02 2014 us=320500   mssfix = 1450
Sun Dec 14 20:48:02 2014 us=320500   explicit_exit_notification = 0
Sun Dec 14 20:48:02 2014 us=320500 Connection profiles END
Sun Dec 14 20:48:02 2014 us=320500   remote_random = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ipchange = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   dev = 'tun'
Sun Dec 14 20:48:02 2014 us=320500   dev_type = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   dev_node = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   lladdr = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   topology = 1
Sun Dec 14 20:48:02 2014 us=320500   tun_ipv6 = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_local = '10.8.0.1'
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_remote_netmask = '10.8.0.2'
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_noexec = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_nowarn = DISABLED
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_ipv6_local = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_ipv6_netbits = 0
Sun Dec 14 20:48:02 2014 us=320500   ifconfig_ipv6_remote = '[UNDEF]'
Sun Dec 14 20:48:02 2014 us=320500 NOTE: --mute triggered...
Sun Dec 14 20:48:02 2014 us=320500 241 variation(s) on previous 50 message(s) suppressed by --mute
Sun Dec 14 20:48:02 2014 us=320500 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Sun Dec 14 20:48:02 2014 us=320500 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Sun Dec 14 20:48:02 2014 us=320500 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sun Dec 14 20:48:02 2014 us=320500 Need hold release from management interface, waiting...
Sun Dec 14 20:48:02 2014 us=758000 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sun Dec 14 20:48:02 2014 us=867375 MANAGEMENT: CMD 'state on'
Sun Dec 14 20:48:02 2014 us=867375 MANAGEMENT: CMD 'log all on'
Sun Dec 14 20:48:02 2014 us=945500 MANAGEMENT: CMD 'hold off'
Sun Dec 14 20:48:02 2014 us=945500 MANAGEMENT: CMD 'hold release'
Sun Dec 14 20:48:03 2014 us=429875 Diffie-Hellman initialized with 1024 bit key
Sun Dec 14 20:48:03 2014 us=445500 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Dec 14 20:48:03 2014 us=445500 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Dec 14 20:48:03 2014 us=461125 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Dec 14 20:48:03 2014 us=461125 MANAGEMENT: >STATE:1418586483,ASSIGN_IP,,10.8.0.1,
Sun Dec 14 20:48:03 2014 us=461125 open_tun, tt->ipv6=0
Sun Dec 14 20:48:03 2014 us=461125 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap
Sun Dec 14 20:48:03 2014 us=461125 TAP-Windows Driver Version 9.9 
Sun Dec 14 20:48:03 2014 us=461125 TAP-Windows MTU=1500
Sun Dec 14 20:48:03 2014 us=461125 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sun Dec 14 20:48:03 2014 us=461125 Sleeping for 10 seconds...
Sun Dec 14 20:48:13 2014 us=492375 NOTE: FlushIpNetTable failed on interface [2] {587FE367-DC7B-407F-9F14-2525BED1CCE2} (status=1413) : Invalid index.  
Sun Dec 14 20:48:13 2014 us=492375 MANAGEMENT: >STATE:1418586493,ADD_ROUTES,,,
Sun Dec 14 20:48:13 2014 us=492375 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sun Dec 14 20:48:13 2014 us=492375 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2
Sun Dec 14 20:48:13 2014 us=492375 Route addition via IPAPI failed [adaptive]
Sun Dec 14 20:48:13 2014 us=492375 Route addition fallback to route.exe
Sun Dec 14 20:48:13 2014 us=492375 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sun Dec 14 20:48:13 2014 us=554875 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sun Dec 14 20:48:13 2014 us=554875 UDPv4 link local (bound): [undef]
Sun Dec 14 20:48:13 2014 us=554875 UDPv4 link remote: [undef]
Sun Dec 14 20:48:13 2014 us=554875 MULTI: multi_init called, r=256 v=256
Sun Dec 14 20:48:13 2014 us=554875 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Dec 14 20:48:13 2014 us=554875 Initialization Sequence Completed
Sun Dec 14 20:48:13 2014 us=554875 MANAGEMENT: >STATE:1418586493,CONNECTED,SUCCESS,10.8.0.1,
Sun Dec 14 20:49:08 2014 us=351750 MULTI: multi_create_instance called
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 Re-using SSL/TLS context
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 Local Options hash (VER=V4): '239669a8'
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 Expected Remote Options hash (VER=V4): '3514370b'
Sun Dec 14 20:49:08 2014 us=351750 89.144.223.82:44514 TLS: Initial packet from [AF_INET]89.144.223.82:44514, sid=b3ba904f f673759b
Sun Dec 14 20:49:10 2014 us=429875 89.144.223.82:44514 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Sun Dec 14 20:49:10 2014 us=429875 89.144.223.82:44514 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=Admin, CN=notebook, emailAddress=matthias@seehauser.at
Sun Dec 14 20:49:10 2014 us=633000 89.144.223.82:44514 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Dec 14 20:49:10 2014 us=633000 89.144.223.82:44514 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Dec 14 20:49:10 2014 us=633000 89.144.223.82:44514 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Dec 14 20:49:10 2014 us=633000 89.144.223.82:44514 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Dec 14 20:49:10 2014 us=726750 89.144.223.82:44514 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Dec 14 20:49:10 2014 us=726750 89.144.223.82:44514 [notebook] Peer Connection Initiated with [AF_INET]89.144.223.82:44514
Sun Dec 14 20:49:10 2014 us=726750 notebook/89.144.223.82:44514 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Dec 14 20:49:10 2014 us=726750 notebook/89.144.223.82:44514 MULTI: Learn: 10.8.0.6 -> notebook/89.144.223.82:44514
Sun Dec 14 20:49:10 2014 us=726750 notebook/89.144.223.82:44514 MULTI: primary virtual IP for notebook/89.144.223.82:44514: 10.8.0.6
Sun Dec 14 20:49:13 2014 us=398625 notebook/89.144.223.82:44514 PUSH: Received control message: 'PUSH_REQUEST'
Sun Dec 14 20:49:13 2014 us=398625 notebook/89.144.223.82:44514 send_push_reply(): safe_cap=940
Sun Dec 14 20:49:13 2014 us=398625 notebook/89.144.223.82:44514 SENT CONTROL [notebook]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sun Dec 14 20:49:13 2014 us=804875 notebook/89.144.223.82:44514 MULTI: bad source address from client [À†§], packet dropped

maikcat

try to use:

route-method exe
route-delay 10

on your openvpn server.

Michael.

seesle

Hi,

thanks, ping is working now! i can ping to 10.8.0.1 and to 192.168.2.254!
But i cant ping other computers in the 192.168.2.x network... What do i have to add to be able to ping them for (example my router with 192.168.2.1 or my working PC with 192.168.2.2)?

Is it also possible with this configuration to connect with more than one device?
What are those properties doing now so that all is working correctly?

Thanks

Matthias

maikcat

thanks, ping is working now! i can ping to 10.8.0.1 and to 192.168.2.254!
But i cant ping other computers in the 192.168.2.x network

one down one to go 😉

in previous posts you have mention that you had enabled ip forwarding on your server,leave it enabled.
for pcs to respond to requests coming from your vpn network they need to:

1)allow incoming traffic from it (disable firewall on pcs for testing)
2)know where to send packets for it

for the second you have 2 choices

1)add a static route to them for the vpn network pointing to the openvpn server lan ip or

2)add the same static route to your internet router.

Michael.

seesle

Hey,

I think i need a little bit more help...

When an IP-Ping is coming from the vpn network 10.8.0.6 to 192.168.2.2 what is happening there? first the ping goes to 10.8.0.1 then it is beeing forwarded to the server IP 192.168.2.254 but i think there it is stopping. I think the server has to forward it to the "network master" which should be the router on 192.168.2.1 and the router has to know if there is an 192.168.2.2 with its ARP-Address....

Is the static route on the router this what i described above???

How does this route look like and where do i have to add it? On my router or on the server? And if on the server, do i have to add it in the openvpn init file?

One more question is open 😉, Is it also possible with this configuration to connect with more than one device at the same time?

Thanks

maikcat

When an IP-Ping is coming from the vpn network 10.8.0.6 to 192.168.2.2 what is happening there? first the ping goes to 10.8.0.1 then it is beeing forwarded to the server IP 192.168.2.254 but i think there it is stopping. I think the server has to forward it to the "network master" which should be the router on 192.168.2.1 and the router has to know if there is an 192.168.2.2 with its ARP-Address....

ok i will try to explain as simple as i can,

first there is no "network master" thing,if it was think about what would happened if you had 2 or more routers
in your lan..which one would be the "master"?

routing works like this,
your internet router (AND your openvpn server) have 2 interfaces,
one lan (192.168.2.0/24) and a second one (wan for router and vpn for your windows server).
a packet arriving from vpn network destined to a client (192.168.2.2) it has source address 10.8.0.6
and destination 192.168.2.2,
your windows server knows that requests to 192.168.2.0/24 network CAN be sent/forwarded to your lan NIC,
so it uses ARP protocol to find its mac address and layer2 protocol takes over and transmit the packet
via your lan interface to 192.168.2.2,

from 192.168.2.2 point of view,it recieves a packet from 10.8.0.0/24 network which he doesnt know
where it is , so it sends packet back via its default gateway , your internet router gets the packets and
tries to send it to its default gateway as well... the internet...packet lost.

so what you can do,

add a static route to your pc (192.168.2.2) like this

route add 10.8.0.0 mask 255.255.255.0 192.168.2.254

after that the response from 2.2 will be sent to 2.54 which knows about 10.8 network 🙂

or add the above static route to your internet router as well,
there is a chance the last route will not work due to firewall rules applied to your internet router though...

hope that helps,
Michael.

seesle

OK, Thanks...

So i try to add a route on my router => that the router knows if a packet comes from 10.8.0.x he has to send it to my server on 192.168.2.254.
But i think then everything is done, isnt it??

Now when we play that game once more: A ping comes from 10.8.0.6 to 192.168.2.2, first it comes to 10.8.0.1 there it goes to 192.168.2.254 => the server has its default gateway on 192.168.2.1 so it sends the packet to the router (on 192.168.2.1). Now the router knows that he has the 192.168.2.2 and sends the ping to the computer, the computer tries to answer so the ping goes to its default gateway which is also the router and because the router has a route from 10.8.0.0 to 192.168.2.254 he knows that he has to answer that ping from 192.168.2.2 to 192.168.2.254 and the server knows as well he has to answer to 10.8.0.1 and last but not least to 10.8.0.6....

Networking as its finest :-), still simple for everyone who is doin this everyday, but for me still new!

Am i right with my description above?

there is a chance the last route will not work due to firewall rules applied to your internet router though...

But thats all happening on the lan side, isnt it? so the firewall should not block that call ...

maikcat

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

seesle

Hi,

Ok, now i got my first problem back...
I bought a new router (WRT54GL from Linksys) because the old one was not able to create custom route entries. With the new one (port forwarding is set and VPN passthrough is also on) is the ping not possible...

Here the server config

server 10.8.0.0 255.255.255.0
port 1194
proto udp
dev tun
dh D:\\bigshare\\Eigenes\\Matthias\\OpenVPN-Keys\\dh1024.pem
ca D:\\bigshare\\Eigenes\\Matthias\\OpenVPN-Keys\\ca.crt
key D:\\bigshare\\Eigenes\\Matthias\\OpenVPN-Keys\\gandalf.key
cert D:\\bigshare\\Eigenes\\Matthias\\OpenVPN-Keys\\gandalf.crt
client-to-client
push "route 192.168.2.0 255.255.255.0"
route-method exe
route-delay 10
# float
ping-timer-rem
keepalive 20 180
verb 4
mute 50

and the server logs (after connection is up)

Fri Dec 19 19:15:26 2014 us=328125 Current Parameter Settings:
Fri Dec 19 19:15:26 2014 us=328125   config = 'server_tun.ovpn'
Fri Dec 19 19:15:26 2014 us=328125   mode = 1
Fri Dec 19 19:15:26 2014 us=328125   show_ciphers = DISABLED
Fri Dec 19 19:15:26 2014 us=328125   show_digests = DISABLED
Fri Dec 19 19:15:26 2014 us=328125   show_engines = DISABLED
Fri Dec 19 19:15:26 2014 us=328125   genkey = DISABLED
Fri Dec 19 19:15:26 2014 us=328125   key_pass_file = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=328125   show_tls_ciphers = DISABLED
Fri Dec 19 19:15:26 2014 us=328125 Connection profiles [default]:
Fri Dec 19 19:15:26 2014 us=328125   proto = udp
Fri Dec 19 19:15:26 2014 us=328125   local = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=328125   local_port = 1194
Fri Dec 19 19:15:26 2014 us=328125   remote = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=328125   remote_port = 1194
Fri Dec 19 19:15:26 2014 us=328125   remote_float = DISABLED
Fri Dec 19 19:15:26 2014 us=328125   bind_defined = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   bind_local = ENABLED
Fri Dec 19 19:15:26 2014 us=343750   connect_retry_seconds = 5
Fri Dec 19 19:15:26 2014 us=343750   connect_timeout = 10
Fri Dec 19 19:15:26 2014 us=343750   connect_retry_max = 0
Fri Dec 19 19:15:26 2014 us=343750   socks_proxy_server = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=343750   socks_proxy_port = 0
Fri Dec 19 19:15:26 2014 us=343750   socks_proxy_retry = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   tun_mtu = 1500
Fri Dec 19 19:15:26 2014 us=343750   tun_mtu_defined = ENABLED
Fri Dec 19 19:15:26 2014 us=343750   link_mtu = 1500
Fri Dec 19 19:15:26 2014 us=343750   link_mtu_defined = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   tun_mtu_extra = 0
Fri Dec 19 19:15:26 2014 us=343750   tun_mtu_extra_defined = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   mtu_discover_type = -1
Fri Dec 19 19:15:26 2014 us=343750   fragment = 0
Fri Dec 19 19:15:26 2014 us=343750   mssfix = 1450
Fri Dec 19 19:15:26 2014 us=343750   explicit_exit_notification = 0
Fri Dec 19 19:15:26 2014 us=343750 Connection profiles END
Fri Dec 19 19:15:26 2014 us=343750   remote_random = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   ipchange = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=343750   dev = 'tun'
Fri Dec 19 19:15:26 2014 us=343750   dev_type = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=343750   dev_node = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=343750   lladdr = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=343750   topology = 1
Fri Dec 19 19:15:26 2014 us=343750   tun_ipv6 = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   ifconfig_local = '10.8.0.1'
Fri Dec 19 19:15:26 2014 us=343750   ifconfig_remote_netmask = '10.8.0.2'
Fri Dec 19 19:15:26 2014 us=343750   ifconfig_noexec = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   ifconfig_nowarn = DISABLED
Fri Dec 19 19:15:26 2014 us=343750   ifconfig_ipv6_local = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=343750   ifconfig_ipv6_netbits = 0
Fri Dec 19 19:15:26 2014 us=343750   ifconfig_ipv6_remote = '[UNDEF]'
Fri Dec 19 19:15:26 2014 us=343750 NOTE: --mute triggered...
Fri Dec 19 19:15:26 2014 us=343750 241 variation(s) on previous 50 message(s) suppressed by --mute
Fri Dec 19 19:15:26 2014 us=343750 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Fri Dec 19 19:15:26 2014 us=343750 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Fri Dec 19 19:15:26 2014 us=343750 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Fri Dec 19 19:15:26 2014 us=343750 Need hold release from management interface, waiting...
Fri Dec 19 19:15:26 2014 us=562500 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Fri Dec 19 19:15:26 2014 us=671875 MANAGEMENT: CMD 'state on'
Fri Dec 19 19:15:26 2014 us=671875 MANAGEMENT: CMD 'log all on'
Fri Dec 19 19:15:26 2014 us=718750 MANAGEMENT: CMD 'hold off'
Fri Dec 19 19:15:26 2014 us=718750 MANAGEMENT: CMD 'hold release'
Fri Dec 19 19:15:26 2014 us=984375 Diffie-Hellman initialized with 1024 bit key
Fri Dec 19 19:15:26 2014 us=984375 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Dec 19 19:15:26 2014 us=984375 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Dec 19 19:15:27 2014 us=15625 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Dec 19 19:15:27 2014 us=15625 MANAGEMENT: >STATE:1419012927,ASSIGN_IP,,10.8.0.1,
Fri Dec 19 19:15:27 2014 us=15625 open_tun, tt->ipv6=0
Fri Dec 19 19:15:27 2014 us=15625 TAP-WIN32 device [tap-bridge] opened: \\.\Global\{587FE367-DC7B-407F-9F14-2525BED1CCE2}.tap
Fri Dec 19 19:15:27 2014 us=15625 TAP-Windows Driver Version 9.9 
Fri Dec 19 19:15:27 2014 us=15625 TAP-Windows MTU=1500
Fri Dec 19 19:15:27 2014 us=15625 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {587FE367-DC7B-407F-9F14-2525BED1CCE2} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Fri Dec 19 19:15:27 2014 us=15625 Sleeping for 10 seconds...
Fri Dec 19 19:15:37 2014 us=31250 NOTE: FlushIpNetTable failed on interface [2] {587FE367-DC7B-407F-9F14-2525BED1CCE2} (status=1413) : Invalid index.  
Fri Dec 19 19:15:37 2014 us=31250 MANAGEMENT: >STATE:1419012937,ADD_ROUTES,,,
Fri Dec 19 19:15:37 2014 us=31250 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Fri Dec 19 19:15:37 2014 us=31250 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Fri Dec 19 19:15:37 2014 us=46875 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Fri Dec 19 19:15:37 2014 us=46875 UDPv4 link local (bound): [undef]
Fri Dec 19 19:15:37 2014 us=46875 UDPv4 link remote: [undef]
Fri Dec 19 19:15:37 2014 us=46875 MULTI: multi_init called, r=256 v=256
Fri Dec 19 19:15:37 2014 us=46875 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Fri Dec 19 19:15:37 2014 us=46875 Initialization Sequence Completed
Fri Dec 19 19:15:37 2014 us=46875 MANAGEMENT: >STATE:1419012937,CONNECTED,SUCCESS,10.8.0.1,
Fri Dec 19 19:16:58 2014 us=421875 MULTI: multi_create_instance called
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 Re-using SSL/TLS context
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 Local Options hash (VER=V4): '239669a8'
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 Expected Remote Options hash (VER=V4): '3514370b'
Fri Dec 19 19:16:58 2014 us=421875 89.144.223.4:59223 TLS: Initial packet from [AF_INET]89.144.223.4:59223, sid=f444915e a42dfa2e
Fri Dec 19 19:16:59 2014 us=500000 89.144.223.4:59223 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Fri Dec 19 19:16:59 2014 us=500000 89.144.223.4:59223 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=Admin, CN=notebook, emailAddress=matthias@seehauser.at
Fri Dec 19 19:16:59 2014 us=703125 89.144.223.4:59223 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Dec 19 19:16:59 2014 us=703125 89.144.223.4:59223 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 19 19:16:59 2014 us=703125 89.144.223.4:59223 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Dec 19 19:16:59 2014 us=703125 89.144.223.4:59223 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 19 19:16:59 2014 us=765625 89.144.223.4:59223 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Dec 19 19:16:59 2014 us=765625 89.144.223.4:59223 [notebook] Peer Connection Initiated with [AF_INET]89.144.223.4:59223
Fri Dec 19 19:16:59 2014 us=765625 notebook/89.144.223.4:59223 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Fri Dec 19 19:16:59 2014 us=765625 notebook/89.144.223.4:59223 MULTI: Learn: 10.8.0.6 -> notebook/89.144.223.4:59223
Fri Dec 19 19:16:59 2014 us=765625 notebook/89.144.223.4:59223 MULTI: primary virtual IP for notebook/89.144.223.4:59223: 10.8.0.6
Fri Dec 19 19:17:02 2014 us=265625 notebook/89.144.223.4:59223 PUSH: Received control message: 'PUSH_REQUEST'
Fri Dec 19 19:17:02 2014 us=265625 notebook/89.144.223.4:59223 send_push_reply(): safe_cap=940
Fri Dec 19 19:17:02 2014 us=265625 notebook/89.144.223.4:59223 SENT CONTROL [notebook]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Fri Dec 19 19:17:02 2014 us=734375 notebook/89.144.223.4:59223 MULTI: bad source address from client [?], packet dropped

Client Config

client
dev tun
proto udp
remote 91.114.x.x 1194
ca ca.crt
cert Matthias.crt
key Matthias.key
ns-cert-type server
verb 4
#mute 50

Client Logs

Fri Dec 19 19:17:04 2014 us=435659 Current Parameter Settings:
Fri Dec 19 19:17:04 2014 us=435659   config = 'Matthias.ovpn'
Fri Dec 19 19:17:04 2014 us=435659   mode = 0
Fri Dec 19 19:17:04 2014 us=435659   show_ciphers = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   show_digests = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   show_engines = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   genkey = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   key_pass_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   show_tls_ciphers = DISABLED
Fri Dec 19 19:17:04 2014 us=435659 Connection profiles [default]:
Fri Dec 19 19:17:04 2014 us=435659   proto = udp
Fri Dec 19 19:17:04 2014 us=435659   local = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   local_port = 1194
Fri Dec 19 19:17:04 2014 us=435659   remote = '91.114.x.x'
Fri Dec 19 19:17:04 2014 us=435659   remote_port = 1194
Fri Dec 19 19:17:04 2014 us=435659   remote_float = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   bind_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   bind_local = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   connect_retry_seconds = 5
Fri Dec 19 19:17:04 2014 us=435659   connect_timeout = 10
Fri Dec 19 19:17:04 2014 us=435659   connect_retry_max = 0
Fri Dec 19 19:17:04 2014 us=435659   socks_proxy_server = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   socks_proxy_port = 0
Fri Dec 19 19:17:04 2014 us=435659   socks_proxy_retry = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   tun_mtu = 1500
Fri Dec 19 19:17:04 2014 us=435659   tun_mtu_defined = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   link_mtu = 1500
Fri Dec 19 19:17:04 2014 us=435659   link_mtu_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   tun_mtu_extra = 0
Fri Dec 19 19:17:04 2014 us=435659   tun_mtu_extra_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   mtu_discover_type = -1
Fri Dec 19 19:17:04 2014 us=435659   fragment = 0
Fri Dec 19 19:17:04 2014 us=435659   mssfix = 1450
Fri Dec 19 19:17:04 2014 us=435659   explicit_exit_notification = 0
Fri Dec 19 19:17:04 2014 us=435659 Connection profiles END
Fri Dec 19 19:17:04 2014 us=435659   remote_random = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   ipchange = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   dev = 'tun'
Fri Dec 19 19:17:04 2014 us=435659   dev_type = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   dev_node = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   lladdr = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   topology = 1
Fri Dec 19 19:17:04 2014 us=435659   tun_ipv6 = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_local = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_remote_netmask = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_noexec = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_nowarn = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_ipv6_local = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_ipv6_netbits = 0
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_ipv6_remote = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   shaper = 0
Fri Dec 19 19:17:04 2014 us=435659   mtu_test = 0
Fri Dec 19 19:17:04 2014 us=435659   mlock = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   keepalive_ping = 0
Fri Dec 19 19:17:04 2014 us=435659   keepalive_timeout = 0
Fri Dec 19 19:17:04 2014 us=435659   inactivity_timeout = 0
Fri Dec 19 19:17:04 2014 us=435659   ping_send_timeout = 0
Fri Dec 19 19:17:04 2014 us=435659   ping_rec_timeout = 0
Fri Dec 19 19:17:04 2014 us=435659   ping_rec_timeout_action = 0
Fri Dec 19 19:17:04 2014 us=435659   ping_timer_remote = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   remap_sigusr1 = 0
Fri Dec 19 19:17:04 2014 us=435659   persist_tun = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   persist_local_ip = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   persist_remote_ip = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   persist_key = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   passtos = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   resolve_retry_seconds = 1000000000
Fri Dec 19 19:17:04 2014 us=435659   username = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   groupname = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   chroot_dir = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   cd_dir = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   writepid = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   up_script = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   down_script = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   down_pre = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   up_restart = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   up_delay = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   daemon = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   inetd = 0
Fri Dec 19 19:17:04 2014 us=435659   log = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   suppress_timestamps = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   nice = 0
Fri Dec 19 19:17:04 2014 us=435659   verbosity = 4
Fri Dec 19 19:17:04 2014 us=435659   mute = 0
Fri Dec 19 19:17:04 2014 us=435659   status_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   status_file_version = 1
Fri Dec 19 19:17:04 2014 us=435659   status_file_update_freq = 60
Fri Dec 19 19:17:04 2014 us=435659   occ = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   rcvbuf = 0
Fri Dec 19 19:17:04 2014 us=435659   sndbuf = 0
Fri Dec 19 19:17:04 2014 us=435659   sockflags = 0
Fri Dec 19 19:17:04 2014 us=435659   fast_io = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   lzo = 0
Fri Dec 19 19:17:04 2014 us=435659   route_script = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   route_default_gateway = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   route_default_metric = 0
Fri Dec 19 19:17:04 2014 us=435659   route_noexec = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   route_delay = 5
Fri Dec 19 19:17:04 2014 us=435659   route_delay_window = 30
Fri Dec 19 19:17:04 2014 us=435659   route_delay_defined = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   route_nopull = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   route_gateway_via_dhcp = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   max_routes = 100
Fri Dec 19 19:17:04 2014 us=435659   allow_pull_fqdn = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   management_addr = '127.0.0.1'
Fri Dec 19 19:17:04 2014 us=435659   management_port = 25340
Fri Dec 19 19:17:04 2014 us=435659   management_user_pass = 'stdin'
Fri Dec 19 19:17:04 2014 us=435659   management_log_history_cache = 250
Fri Dec 19 19:17:04 2014 us=435659   management_echo_buffer_size = 100
Fri Dec 19 19:17:04 2014 us=435659   management_write_peer_info_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   management_client_user = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   management_client_group = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   management_flags = 6
Fri Dec 19 19:17:04 2014 us=435659   shared_secret_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   key_direction = 0
Fri Dec 19 19:17:04 2014 us=435659   ciphername_defined = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   ciphername = 'BF-CBC'
Fri Dec 19 19:17:04 2014 us=435659   authname_defined = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   authname = 'SHA1'
Fri Dec 19 19:17:04 2014 us=435659   prng_hash = 'SHA1'
Fri Dec 19 19:17:04 2014 us=435659   prng_nonce_secret_len = 16
Fri Dec 19 19:17:04 2014 us=435659   keysize = 0
Fri Dec 19 19:17:04 2014 us=435659   engine = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   replay = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   mute_replay_warnings = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   replay_window = 64
Fri Dec 19 19:17:04 2014 us=435659   replay_time = 15
Fri Dec 19 19:17:04 2014 us=435659   packet_id_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   use_iv = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   test_crypto = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   tls_server = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   tls_client = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   key_method = 2
Fri Dec 19 19:17:04 2014 us=435659   ca_file = 'ca.crt'
Fri Dec 19 19:17:04 2014 us=435659   ca_path = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   dh_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   cert_file = 'Matthias.crt'
Fri Dec 19 19:17:04 2014 us=435659   priv_key_file = 'Matthias.key'
Fri Dec 19 19:17:04 2014 us=435659   pkcs12_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   cryptoapi_cert = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   cipher_list = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   tls_verify = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   tls_export_cert = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   verify_x509_type = 0
Fri Dec 19 19:17:04 2014 us=435659   verify_x509_name = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   crl_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   ns_cert_type = 1
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_ku[i] = 0
Fri Dec 19 19:17:04 2014 us=435659   remote_cert_eku = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   ssl_flags = 0
Fri Dec 19 19:17:04 2014 us=435659   tls_timeout = 2
Fri Dec 19 19:17:04 2014 us=435659   renegotiate_bytes = 0
Fri Dec 19 19:17:04 2014 us=435659   renegotiate_packets = 0
Fri Dec 19 19:17:04 2014 us=435659   renegotiate_seconds = 3600
Fri Dec 19 19:17:04 2014 us=435659   handshake_window = 60
Fri Dec 19 19:17:04 2014 us=435659   transition_window = 3600
Fri Dec 19 19:17:04 2014 us=435659   single_session = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   push_peer_info = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   tls_exit = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   tls_auth_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_protected_authentication = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_private_mode = 00000000
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_cert_private = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_pin_cache_period = -1
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_id = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   pkcs11_id_management = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   server_network = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   server_netmask = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   server_network_ipv6 = ::
Fri Dec 19 19:17:04 2014 us=435659   server_netbits_ipv6 = 0
Fri Dec 19 19:17:04 2014 us=435659   server_bridge_ip = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   server_bridge_netmask = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   server_bridge_pool_start = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   server_bridge_pool_end = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_pool_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_pool_start = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_pool_end = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_pool_netmask = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_pool_persist_refresh_freq = 600
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_ipv6_pool_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_ipv6_pool_base = ::
Fri Dec 19 19:17:04 2014 us=435659   ifconfig_ipv6_pool_netbits = 0
Fri Dec 19 19:17:04 2014 us=435659   n_bcast_buf = 256
Fri Dec 19 19:17:04 2014 us=435659   tcp_queue_limit = 64
Fri Dec 19 19:17:04 2014 us=435659   real_hash_size = 256
Fri Dec 19 19:17:04 2014 us=435659   virtual_hash_size = 256
Fri Dec 19 19:17:04 2014 us=435659   client_connect_script = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   learn_address_script = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   client_disconnect_script = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   client_config_dir = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   ccd_exclusive = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   tmp_dir = 'C:\Users\Nina\AppData\Local\Temp\'
Fri Dec 19 19:17:04 2014 us=435659   push_ifconfig_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   push_ifconfig_local = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   push_ifconfig_remote_netmask = 0.0.0.0
Fri Dec 19 19:17:04 2014 us=435659   push_ifconfig_ipv6_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   push_ifconfig_ipv6_local = ::/0
Fri Dec 19 19:17:04 2014 us=435659   push_ifconfig_ipv6_remote = ::
Fri Dec 19 19:17:04 2014 us=435659   enable_c2c = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   duplicate_cn = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   cf_max = 0
Fri Dec 19 19:17:04 2014 us=435659   cf_per = 0
Fri Dec 19 19:17:04 2014 us=435659   max_clients = 1024
Fri Dec 19 19:17:04 2014 us=435659   max_routes_per_client = 256
Fri Dec 19 19:17:04 2014 us=435659   auth_user_pass_verify_script = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   auth_user_pass_verify_script_via_file = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   client = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   pull = ENABLED
Fri Dec 19 19:17:04 2014 us=435659   auth_user_pass_file = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   show_net_up = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   route_method = 0
Fri Dec 19 19:17:04 2014 us=435659   ip_win32_defined = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   ip_win32_type = 3
Fri Dec 19 19:17:04 2014 us=435659   dhcp_masq_offset = 0
Fri Dec 19 19:17:04 2014 us=435659   dhcp_lease_time = 31536000
Fri Dec 19 19:17:04 2014 us=435659   tap_sleep = 0
Fri Dec 19 19:17:04 2014 us=435659   dhcp_options = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   dhcp_renew = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   dhcp_pre_release = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   dhcp_release = DISABLED
Fri Dec 19 19:17:04 2014 us=435659   domain = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   netbios_scope = '[UNDEF]'
Fri Dec 19 19:17:04 2014 us=435659   netbios_node_type = 0
Fri Dec 19 19:17:04 2014 us=435659   disable_nbt = DISABLED
Fri Dec 19 19:17:04 2014 us=435659 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Fri Dec 19 19:17:04 2014 us=435659 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Fri Dec 19 19:17:04 2014 us=435659 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Dec 19 19:17:04 2014 us=435659 Need hold release from management interface, waiting...
Fri Dec 19 19:17:04 2014 us=919260 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Dec 19 19:17:05 2014 us=28460 MANAGEMENT: CMD 'state on'
Fri Dec 19 19:17:05 2014 us=28460 MANAGEMENT: CMD 'log all on'
Fri Dec 19 19:17:05 2014 us=200060 MANAGEMENT: CMD 'hold off'
Fri Dec 19 19:17:05 2014 us=200060 MANAGEMENT: CMD 'hold release'
Fri Dec 19 19:17:05 2014 us=402861 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Dec 19 19:17:05 2014 us=402861 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Dec 19 19:17:05 2014 us=402861 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Fri Dec 19 19:17:05 2014 us=402861 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Dec 19 19:17:05 2014 us=402861 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Dec 19 19:17:05 2014 us=402861 Local Options hash (VER=V4): '3514370b'
Fri Dec 19 19:17:05 2014 us=402861 Expected Remote Options hash (VER=V4): '239669a8'
Fri Dec 19 19:17:05 2014 us=402861 UDPv4 link local (bound): [undef]
Fri Dec 19 19:17:05 2014 us=402861 UDPv4 link remote: [AF_INET]91.114.x.x:1194
Fri Dec 19 19:17:05 2014 us=402861 MANAGEMENT: >STATE:1419013025,WAIT,,,
Fri Dec 19 19:17:05 2014 us=668061 MANAGEMENT: >STATE:1419013025,AUTH,,,
Fri Dec 19 19:17:05 2014 us=668061 TLS: Initial packet from [AF_INET]91.114.x.x:1194, sid=d2ec6ada 9821d1f7
Fri Dec 19 19:17:06 2014 us=198462 VERIFY OK: depth=1, C=AT, ST=Tirol, L=Innsbruck, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Fri Dec 19 19:17:06 2014 us=198462 VERIFY OK: nsCertType=SERVER
Fri Dec 19 19:17:06 2014 us=198462 VERIFY OK: depth=0, C=AT, ST=Tirol, O=PrivatPerson, OU=EDV, CN=gandalf, emailAddress=matthias@seehauser.at
Fri Dec 19 19:17:06 2014 us=931663 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Dec 19 19:17:06 2014 us=931663 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 19 19:17:06 2014 us=931663 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Dec 19 19:17:06 2014 us=931663 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 19 19:17:06 2014 us=931663 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Dec 19 19:17:06 2014 us=931663 [gandalf] Peer Connection Initiated with [AF_INET]91.114.x.x:1194
Fri Dec 19 19:17:08 2014 us=76866 MANAGEMENT: >STATE:1419013028,GET_CONFIG,,,
Fri Dec 19 19:17:09 2014 us=231268 SENT CONTROL [gandalf]: 'PUSH_REQUEST' (status=1)
Fri Dec 19 19:17:09 2014 us=761669 PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 20,ping-restart 180,ifconfig 10.8.0.6 10.8.0.5'
Fri Dec 19 19:17:09 2014 us=761669 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 19 19:17:09 2014 us=761669 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 19 19:17:09 2014 us=761669 OPTIONS IMPORT: route options modified
Fri Dec 19 19:17:09 2014 us=777269 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Dec 19 19:17:09 2014 us=777269 MANAGEMENT: >STATE:1419013029,ASSIGN_IP,,10.8.0.6,
Fri Dec 19 19:17:09 2014 us=777269 open_tun, tt->ipv6=0
Fri Dec 19 19:17:09 2014 us=777269 TAP-WIN32 device [LAN-Verbindung 2] opened: \\.\Global\{602CEBBB-F1F1-47D6-B10D-31717DA88FA6}.tap
Fri Dec 19 19:17:09 2014 us=777269 TAP-Windows Driver Version 9.21 
Fri Dec 19 19:17:09 2014 us=777269 TAP-Windows MTU=1500
Fri Dec 19 19:17:09 2014 us=792869 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {602CEBBB-F1F1-47D6-B10D-31717DA88FA6} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Fri Dec 19 19:17:09 2014 us=792869 Successful ARP Flush on interface [31] {602CEBBB-F1F1-47D6-B10D-31717DA88FA6}
Fri Dec 19 19:17:15 2014 us=65678 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Fri Dec 19 19:17:15 2014 us=65678 MANAGEMENT: >STATE:1419013035,ADD_ROUTES,,,
Fri Dec 19 19:17:15 2014 us=65678 C:\Windows\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.8.0.5
Fri Dec 19 19:17:15 2014 us=65678 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri Dec 19 19:17:15 2014 us=65678 Route addition via IPAPI succeeded [adaptive]
Fri Dec 19 19:17:15 2014 us=65678 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Fri Dec 19 19:17:15 2014 us=81278 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri Dec 19 19:17:15 2014 us=81278 Route addition via IPAPI succeeded [adaptive]
Fri Dec 19 19:17:15 2014 us=81278 Initialization Sequence Completed
Fri Dec 19 19:17:15 2014 us=81278 MANAGEMENT: >STATE:1419013035,CONNECTED,SUCCESS,10.8.0.6,91.114.x.x

netstat -nr on server (before connecting)

C:\Documents and Settings\Administrator>netstat -nr

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff 58 7f e3 67 ...... TAP-Windows Adapter V9
0x10004 ...00 1f d0 52 05 dc ...... Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit E
thernet NIC
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.254     10
         10.1.1.0    255.255.255.0    192.168.2.254    192.168.2.254      1
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
      169.254.0.0      255.255.0.0  169.254.152.242  169.254.152.242     30
  169.254.152.242  255.255.255.255        127.0.0.1        127.0.0.1     30
  169.254.255.255  255.255.255.255  169.254.152.242  169.254.152.242     30
      192.168.2.0    255.255.255.0    192.168.2.254    192.168.2.254     10
    192.168.2.254  255.255.255.255        127.0.0.1        127.0.0.1     10
    192.168.2.255  255.255.255.255    192.168.2.254    192.168.2.254     10
        224.0.0.0        240.0.0.0  169.254.152.242  169.254.152.242     30
        224.0.0.0        240.0.0.0    192.168.2.254    192.168.2.254     10
  255.255.255.255  255.255.255.255  169.254.152.242  169.254.152.242      1
  255.255.255.255  255.255.255.255    192.168.2.254    192.168.2.254      1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
         10.1.1.0    255.255.255.0    192.168.2.254       1

C:\Documents and Settings\Administrator>

netstat -nr on client (after connection is up)

C:\Users\Nina>netstat -nr
===========================================================================
Schnittstellenliste
 31...00 ff 60 2c eb bb ......TAP-Windows Adapter V9
 14...c0 cb 38 b5 7e 75 ......Bluetooth-Ger??t (PAN)
 12...f0 4d a2 ba 81 a0 ......Realtek PCIe GBE Family Controller
 11...c0 cb 38 79 16 ac ......DW 1501 Wireless-N WLAN Half-Mini Card
  1...........................Software Loopback Interface 1
 13...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
 16...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #2
 34...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2
 32...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #4
 19...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #4
 17...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #3
 20...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #5
 22...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #7
 23...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #8
 21...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #6
 24...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #9
 25...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #10
 26...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter #11
 30...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
          0.0.0.0          0.0.0.0      172.20.10.1      172.20.10.4     25
         10.8.0.0    255.255.255.0         10.8.0.5         10.8.0.6     20
         10.8.0.4  255.255.255.252   Auf Verbindung          10.8.0.6    276
         10.8.0.6  255.255.255.255   Auf Verbindung          10.8.0.6    276
         10.8.0.7  255.255.255.255   Auf Verbindung          10.8.0.6    276
        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306
        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306
  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
      172.20.10.0  255.255.255.240   Auf Verbindung       172.20.10.4    281
      172.20.10.4  255.255.255.255   Auf Verbindung       172.20.10.4    281
     172.20.10.15  255.255.255.255   Auf Verbindung       172.20.10.4    281
      192.168.2.0    255.255.255.0         10.8.0.5         10.8.0.6     20
        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306
        224.0.0.0        240.0.0.0   Auf Verbindung          10.8.0.6    276
        224.0.0.0        240.0.0.0   Auf Verbindung       172.20.10.4    281
  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
  255.255.255.255  255.255.255.255   Auf Verbindung          10.8.0.6    276
  255.255.255.255  255.255.255.255   Auf Verbindung       172.20.10.4    281
===========================================================================
St??ndige Routen:
  Netzwerkadresse          Netzmaske  Gatewayadresse  Metrik
      169.254.0.0      255.255.0.0     192.168.2.12       1
===========================================================================