Not working on 2 of my computers, help please.

BetaLeaf@gmail.com

I have 2 computers, both running windows 8 and neither of them seem be connecting properly. I am having 2 issues.

1. My ip doesn't change. On my iPhone the ip changes when its connected to vpn letting me know its working. Idk how to check to see if vpn is working besides a changed ip, advise?
2. I cannot see the computers in windows network browser or share files this way.(when you go to my computer and in the left side click network and you can see what computers are connected to the network)

For now I want to focus on one of the two computers.

Here are the logs and ovpn files.

Server Logs:

Sat Dec 13 05:32:40 2014 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Sat Dec 13 05:32:40 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Sat Dec 13 05:32:40 2014 Diffie-Hellman initialized with 1024 bit key
Sat Dec 13 05:32:40 2014 Control Channel Authentication: using 'D:\Dropbox\Apps\openvpn\config\ta.key' as a OpenVPN static key file
Sat Dec 13 05:32:40 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:40 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:40 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Dec 13 05:32:40 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Dec 13 05:32:40 2014 open_tun, tt->ipv6=0
Sat Dec 13 05:32:40 2014 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{00E02D32-A006-4F1C-AFC5-F0FF8222A26C}.tap
Sat Dec 13 05:32:40 2014 TAP-Windows Driver Version 9.21
Sat Dec 13 05:32:40 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.48.1/255.255.255.252 on interface {00E02D32-A006-4F1C-AFC5-F0FF8222A26C} [DHCP-serv: 10.8.48.2, lease-time: 31536000]
Sat Dec 13 05:32:40 2014 Sleeping for 10 seconds...
Sat Dec 13 05:32:50 2014 Successful ARP Flush on interface [18] {00E02D32-A006-4F1C-AFC5-F0FF8222A26C}
Sat Dec 13 05:32:50 2014 C:\Windows\system32\route.exe ADD 10.8.48.0 MASK 255.255.255.192 10.8.48.2
Sat Dec 13 05:32:50 2014 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists.   [status=5010 if_index=18]
Sat Dec 13 05:32:50 2014 Route addition via IPAPI failed [adaptive]
Sat Dec 13 05:32:50 2014 Route addition fallback to route.exe
Sat Dec 13 05:32:50 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Dec 13 05:32:50 2014 UDPv4 link local (bound): [undef]
Sat Dec 13 05:32:50 2014 UDPv4 link remote: [undef]
Sat Dec 13 05:32:50 2014 MULTI: multi_init called, r=256 v=256
Sat Dec 13 05:32:50 2014 IFCONFIG POOL: base=10.8.48.4 size=14, ipv6=0
Sat Dec 13 05:32:50 2014 ifconfig_pool_read(), in='BetaLeaf,10.8.48.4', TODO: IPv6
Sat Dec 13 05:32:50 2014 succeeded -> ifconfig_pool_set()
Sat Dec 13 05:32:50 2014 IFCONFIG POOL LIST
Sat Dec 13 05:32:50 2014 BetaLeaf,10.8.48.4
Sat Dec 13 05:32:50 2014 Initialization Sequence Completed
Sat Dec 13 05:32:58 2014 <<snip>>:57567 TLS: Initial packet from [AF_INET]<<snip>>:57567, sid=c1d68b8a eb1375b6
Sat Dec 13 05:32:58 2014 <<snip>>:57567 VERIFY OK: depth=1, C=US, ST=TN, L=Morristown, O=BetaLeafOpenVPN, OU=BetaLeaf, CN=BetaLeaf, name=BetaLeaf, emailAddress=BetaLeaf@gmail.com
Sat Dec 13 05:32:58 2014 <<snip>>:57567 VERIFY OK: depth=0, C=US, ST=TN, L=Morristown, O=BetaLeafOpenVPN, OU=BetaLeaf, CN=BetaLeaf, name=BetaLeaf, emailAddress=BetaLeaf@gmail.com
Sat Dec 13 05:32:58 2014 <<snip>>:57567 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Dec 13 05:32:58 2014  <<snip>>:57567 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:58 2014 <<snip>>:57567 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Dec 13 05:32:58 2014 <<snip>>:57567 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:59 2014  <<snip>>:57567 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Dec 13 05:32:59 2014 <<snip>>:57567 [BetaLeaf] Peer Connection Initiated with [AF_INET]<<snip>>:57567
Sat Dec 13 05:32:59 2014 BetaLeaf/<<snip>>:57567 MULTI_sva: pool returned IPv4=10.8.48.6, IPv6=(Not enabled)
Sat Dec 13 05:32:59 2014 BetaLeaf/<<snip>>:57567 MULTI: Learn: 10.8.48.6 -> BetaLeaf/<<snip>>:57567
Sat Dec 13 05:32:59 2014 BetaLeaf/<<snip>>:57567 MULTI: primary virtual IP for BetaLeaf/<<snip>>:57567: 10.8.48.6
Sat Dec 13 05:33:02 2014 BetaLeaf/<<snip>>:57567 PUSH: Received control message: 'PUSH_REQUEST'
Sat Dec 13 05:33:02 2014 BetaLeaf/<<snip>>:57567 send_push_reply(): safe_cap=940
Sat Dec 13 05:33:02 2014 BetaLeaf/<<snip>>:57567 SENT CONTROL [BetaLeaf]: 'PUSH_REPLY,route 10.8.48.0 255.255.255.192,topology net30,ping 10,ping-restart 120,ifconfig 10.8.48.6 10.8.48.5' (status=1)

Client Log:

Sat Dec 13 05:32:50 2014 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  1 2014
Sat Dec 13 05:32:50 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Sat Dec 13 05:32:50 2014 Control Channel Authentication: using 'C:\Program Files\OpenVPN\config\ta.key' as a OpenVPN static key file
Sat Dec 13 05:32:50 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:50 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:50 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Dec 13 05:32:50 2014 UDPv4 link local: [undef]
Sat Dec 13 05:32:50 2014 UDPv4 link remote: [AF_INET]68.170.101.181:1194
Sat Dec 13 05:32:50 2014 TLS: Initial packet from [AF_INET]68.170.101.181:1194, sid=b47c5667 1507b2ce
Sat Dec 13 05:32:51 2014 VERIFY OK: depth=1, C=US, ST=TN, L=Morristown, O=BetaLeafOpenVPN, OU=BetaLeaf, CN=BetaLeaf, name=BetaLeaf, emailAddress=BetaLeaf@gmail.com
Sat Dec 13 05:32:51 2014 Validating certificate key usage
Sat Dec 13 05:32:51 2014 ++ Certificate has key usage  00a0, expects 00a0
Sat Dec 13 05:32:51 2014 VERIFY KU OK
Sat Dec 13 05:32:51 2014 Validating certificate extended key usage
Sat Dec 13 05:32:51 2014 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat Dec 13 05:32:51 2014 VERIFY EKU OK
Sat Dec 13 05:32:51 2014 VERIFY OK: depth=0, C=US, ST=TN, L=Morristown, O=BetaLeafOpenVPN, OU=BetaLeaf, CN=BetaLeaf, name=BetaLeaf, emailAddress=BetaLeaf@gmail.com
Sat Dec 13 05:32:51 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Dec 13 05:32:51 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:51 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Dec 13 05:32:51 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Dec 13 05:32:51 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Dec 13 05:32:51 2014 [BetaLeaf] Peer Connection Initiated with [AF_INET]68.170.101.181:1194
Sat Dec 13 05:32:54 2014 SENT CONTROL [BetaLeaf]: 'PUSH_REQUEST' (status=1)
Sat Dec 13 05:32:55 2014 PUSH: Received control message: 'PUSH_REPLY,route 10.8.48.0 255.255.255.192,topology net30,ping 10,ping-restart 120,ifconfig 10.8.48.6 10.8.48.5'
Sat Dec 13 05:32:55 2014 OPTIONS IMPORT: timers and/or timeouts modified
Sat Dec 13 05:32:55 2014 OPTIONS IMPORT: --ifconfig/up options modified
Sat Dec 13 05:32:55 2014 OPTIONS IMPORT: route options modified
Sat Dec 13 05:32:55 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Dec 13 05:32:55 2014 open_tun, tt->ipv6=0
Sat Dec 13 05:32:55 2014 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{EC7542CF-29AE-4B8F-A75B-AE4DE05C3A4F}.tap
Sat Dec 13 05:32:55 2014 TAP-Windows Driver Version 9.21
Sat Dec 13 05:32:55 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.48.6/255.255.255.252 on interface {EC7542CF-29AE-4B8F-A75B-AE4DE05C3A4F} [DHCP-serv: 10.8.48.5, lease-time: 31536000]
Sat Dec 13 05:32:55 2014 Successful ARP Flush on interface [21] {EC7542CF-29AE-4B8F-A75B-AE4DE05C3A4F}
Sat Dec 13 05:33:00 2014 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Sat Dec 13 05:33:00 2014 C:\WINDOWS\system32\route.exe ADD 10.8.48.0 MASK 255.255.255.192 10.8.48.5
Sat Dec 13 05:33:00 2014 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists.   [status=5010 if_index=21]
Sat Dec 13 05:33:00 2014 Route addition via IPAPI failed [adaptive]
Sat Dec 13 05:33:00 2014 Route addition fallback to route.exe
Sat Dec 13 05:33:00 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Dec 13 05:33:00 2014 Initialization Sequence Completed

Server.ovpn

port 1194
proto udp
dev tun
ca D:\\Dropbox\\Apps\\openvpn\\easy-rsa\\keys\\ca.crt
cert D:\\Dropbox\\Apps\\openvpn\\easy-rsa\\keys\\server.crt
key D:\\Dropbox\\Apps\\openvpn\\easy-rsa\\keys\\server.key  # This file should be kept secret
dh D:\\Dropbox\\Apps\\openvpn\\easy-rsa\\keys\\dh1024.pem
server 10.8.48.0 255.255.255.192
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
tls-auth D:\\Dropbox\\Apps\\openvpn\\config\\ta.key 0 # This file is secret
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Client.ovpn

client
dev tun
proto udp
remote <<snip>> 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\client.crt"
key "C:\\Program Files\\OpenVPN\\config\\client.key"
remote-cert-tls server
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
comp-lzo
verb 3

maikcat

1. My ip doesn't change. On my iPhone the ip changes when its connected to vpn letting me know its working. Idk how to check to see if vpn is working besides a changed ip, advise?

what do you mean your ip doesnt change?
which ip does change on your iphone?
your config does NOT redirect internet traffic so for sure you dont mean your internet ip.
vpn is working if openvpn reports no errors and you get an ip assigned on your TAP interface.

2. I cannot see the computers in windows network browser

thats an MS browser problem,setup wins on your server (do you have AD?)

or share files this way.

you can still access pcs in your lan if you use UNC , f.e \\192.168.1.10
but in order to do that you will need:
to push a static route for your internal lan to your vpn clients
enable ip forwarding on your openvpn server
configure all firewalls to allow such traffic.

Michael.

BetaLeaf@gmail.com

On my iPhone, when I connect to my VPN, the external ip of the wifi interface changes, as it doesn when it disconnects. On the PC, it doesn't change the IP when I connect or disconnect to my VPN.

I want to redirect all internet traffic thru the vpn, so I can use public wifi securely. How do I do this?

No, I don't have Access Directory. How do I set up wins?

Finally, how do I know my traffic is being routed properly once we get this set up properly? Is there a command or something I could run?

Traffic

Two very helpful HOWTOs:

BetaLeaf@gmail.com

Now im getting this error in my server log:

read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)

BetaLeaf@gmail.com

Turning on push "redirect-gateway def1" causes all internet traffic to stop on my iPhone. I also set push "dhcp-option DNS 8.8.8.8" and push "dhcp-option DNS 8.8.4.4"

maikcat

redirecting all traffic through VPN server requires that your server performs NAT.

AFAIK NAT can be enabled in windows if you use RRAS.

Michael.

BetaLeaf@gmail.com

How do I do this on Windows 8?

BetaLeaf@gmail.com

Its been a couple of days and I still need help with my problem.

maikcat

I am not windows expert and this is an open forum,

if anyone with good windows 8 knowledge can help, he is welcomed.

Michael.

BetaLeaf@gmail.com

Can someone please help?

BetaLeaf@gmail.com

I find it hard to believe that no one has even bothered to help me yet. Is this forum just dead or you people have no idea how to help the people trying to use your software. I'm bumping this because I still need help.

Traffic

This forum is for OpenVPN support not Windows 8 ..

Have you tried this:
https://lmddgtfy.net/?q=windows%208%20enable%20RRAS%20and%20NAT

Which will eventually lead you to this:
http://www.forumswindows8.com/network-sharing/windows-8-vpn-642.htm#post20988

Sorry .. I cannot help with W8 🙁

maikcat

sadly i read this...

I find it hard to believe that no one has even bothered to help me yet. Is this forum just dead or you people have no idea how to help the people trying to use your software

on previous post you ask:

How do I set up wins?

i suggest you use RRAS

How do I do this on Windows 8?

FYI, members here are NOT get paid for helping others,
in your case you ask us to help you configure wins & rras services
if you really think that both of these have anything to do with openvpn then
yes we dont even bother to help you.

enough said.

Michael.

[deleted]

server wrote Sat Dec 13 05:32:50 2014 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists. [status=5010 if_index=18]
Sat Dec 13 05:32:50 2014 Route addition via IPAPI failed [adaptive]
Sat Dec 13 05:32:50 2014 Route addition fallback to route.exe
Sat Dec 13 05:32:50 2014 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

client wrote Sat Dec 13 05:33:00 2014 C:\WINDOWS\system32\route.exe ADD 10.8.48.0 MASK 255.255.255.192 10.8.48.5
Sat Dec 13 05:33:00 2014 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists. [status=5010 if_index=21]
Sat Dec 13 05:33:00 2014 Route addition via IPAPI failed [adaptive]
Sat Dec 13 05:33:00 2014 Route addition fallback to route.exe

Routing entry issue? When I have run into the IPAPI issue, it's often a) not running as administrator as it needs to, and b) you should look at exploring the route-method directive

BetaLeaf@gmail.com wroteI find it hard to believe that no one has even bothered to help me yet. Is this forum just dead or you people have no idea how to help the people trying to use your software. I'm bumping this because I still need help.

I will treat you with respect, as will most of the other people here. I will not allow you to be disrespectful to others like this on these forums we have worked so hard to build up. We are all doing this for free and trying to help the community as best as we can, as often as we can.

BetaLeaf@gmail.com

I give up. I'm not going to use your software when I'm getting crap from the forum team because I'm getting frustrated I'm getting 0 help. You tell me to set up RRAS but don't tell me how. If I had to do this stuff why is there no documentation on the website or forums. You claim to offer support for openvpn but the sad reality is you cannot even help your users setup vpn on one of the most common operating system used???

"redirecting all traffic through VPN server requires that your server performs NAT.

AFAIK NAT can be enabled in windows if you use RRAS."

This is not help. this is a explanation why my current configuration isn't working and telling me that I can do something on my pc to get it to work but not tell me how. This is like being in anywhere and asking someone where a business is and they only respond by saying the business is that way and pointing in a vague direction. You want specifics or you are going to get lost.

You want respect well you gotta earn it. I don't know you, I'm a new user and so far you have don't nothing to earn my respect. Either you guys suck at helping others or don't care enough to help. Either way I no longer want to use your software. I mean seriously, its been over 2 weeks now and 0 help. Good day sir.

maikcat

I give up

ok...

You tell me to set up RRAS but don't tell me how.

I thought i talk to someone who KNOWS the OS its using , you see when someone post an openvpn
related problem we assume that he has some basic knowledge about networking and their OS they using,

do you really think that its our obbligation to teach you tcp/ip and how MS based services works and how to setup them?

If I had to do this stuff why is there no documentation on the website or forums

http://openvpn.net/index.php/open-source/documentation/howto.html#examples

in section (Routing all client traffic (including web-traffic) through the VPN) at the end refers how to enable NAT on linux

if you have basic networking knowledge you will understand why NAT is needed.

also bebop has wrote this:
https://forums.openvpn.net/topic7806.html

so you searched how to setup wins (which btw is the simplest service around) and rras but there was no documentation?

Either you guys suck at helping others or don't care enough to help

i will disagree , you dont want help , you want someone to complete your installation for free...
help is about providing support for openvpn itself (which btw openvpn configuration is OK) and then
pointing out what ELSE is needed for your scenario to work, in your case RRAS was needed
and you didnt know how to set it up or care to search on how to configure it ending blaming everyone
responded to you accusing them that they dont provide info about setting up your MS based services.

Even in the case you were buying some other product and asked for (paid) support
i am sure that they also wouldnt bother to explain how to setup services that they do not support either.

Good luck out there,

Michael.