problems with iroute

woland255

Hi colleagues,

It seems that I need to add iroutes to my previous configuration, but I can't bring it to work. Please help me.

First, let me describe whole picture. There are 3 nets:
My local home net, let's count it as x1.x1.x1.0/24
There is an openVpn server on it, so second is openvpn net x2.x2.x2.0/24
And there is an client computer in one remote local net x3.x3.x3./24

So, basically I need to access services from home net from remote net, and my current configs are fine for it. But suddenly I come to situation when I need to access from my home net service from remote. I found information about iroute directive.
Here parts from configs:

1). Openvpn server.
push "route x1.x1.x1.0 255.255.255.0"
push "route x2.x2.x2.0 255.255.255.0"
route x3.x3.x3.0 255.255.255.0
proto tcp
dev tun
server x2.x2.x2.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
client-to-client
persist-key
persist-tun
status openvpn-status.log
log openvpn.log

2). ccd file for remote client:
ifconfig-push x2.x2.x2.10 x2.x2.x2.9
iroute x3.x3.x3.0 255.255.255.0

3). Client openvpn config:
client
dev tun
proto tcp
route-metric 320
connect-retry 30
resolv-retry infinite
nobind
persist-key
persist-tun

I delete certs e.t.c. OpenVPN version is 2.3.6.
And after I restart OpenVpn server and reconnect client to it, ping to x3 net from openvpn server does not pass, traceroute shows "*" from first line, that shows that system really tries new route (with old config it goes to internet from default gw).
Feel free to ask any additional info if needed.

Best Regards,
Alexey

Traffic

Please include server & client logs at --verb 4

woland255

Traffic wrotePlease include server & client logs at --verb 4

Thanks, I post logs here.
192.168.20.0/24 - my openvpn net - x2.x2.x2.0/24 from prev. post
192.168.30.0/24 - my home local net - x1.x1.x1.0/24
And some clarifications: I have to use tcp because of http proxy is the only available path from external net.
x4.x4.x4.x4 - this is some strange addr. from external networks (not from x3!). As far as I can understand, this is internet IP of extrenal network's gateway.
x5.x5.x5.x5 - internal IP of extrenal network HTTP proxy.

Server log:

Tue Dec 30 23:26:33 2014 us=392531 Current Parameter Settings:
Tue Dec 30 23:26:33 2014 us=392717   config = 'openvpn.conf.user'
Tue Dec 30 23:26:33 2014 us=392758   mode = 1
Tue Dec 30 23:26:33 2014 us=392799   persist_config = DISABLED
Tue Dec 30 23:26:33 2014 us=392834   persist_mode = 1
Tue Dec 30 23:26:33 2014 us=392869   show_ciphers = DISABLED
Tue Dec 30 23:26:33 2014 us=392904   show_digests = DISABLED
Tue Dec 30 23:26:33 2014 us=392939   show_engines = DISABLED
Tue Dec 30 23:26:33 2014 us=392974   genkey = DISABLED
Tue Dec 30 23:26:33 2014 us=393008   key_pass_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=393043   show_tls_ciphers = DISABLED
Tue Dec 30 23:26:33 2014 us=393081 Connection profiles [default]:
Tue Dec 30 23:26:33 2014 us=393117   proto = tcp-server
Tue Dec 30 23:26:33 2014 us=393152   local = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=393187   local_port = 8080
Tue Dec 30 23:26:33 2014 us=393222   remote = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=393257   remote_port = 8080
Tue Dec 30 23:26:33 2014 us=393292   remote_float = DISABLED
Tue Dec 30 23:26:33 2014 us=393341   bind_defined = DISABLED
Tue Dec 30 23:26:33 2014 us=393377   bind_local = ENABLED
Tue Dec 30 23:26:33 2014 us=393412   connect_retry_seconds = 5
Tue Dec 30 23:26:33 2014 us=393446   connect_timeout = 10
Tue Dec 30 23:26:33 2014 us=393481   connect_retry_max = 0
Tue Dec 30 23:26:33 2014 us=393516   socks_proxy_server = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=393555   socks_proxy_port = 0
Tue Dec 30 23:26:33 2014 us=393590   socks_proxy_retry = DISABLED
Tue Dec 30 23:26:33 2014 us=393626   tun_mtu = 1500
Tue Dec 30 23:26:33 2014 us=393660   tun_mtu_defined = ENABLED
Tue Dec 30 23:26:33 2014 us=393695   link_mtu = 1500
Tue Dec 30 23:26:33 2014 us=393730   link_mtu_defined = DISABLED
Tue Dec 30 23:26:33 2014 us=393765   tun_mtu_extra = 0
Tue Dec 30 23:26:33 2014 us=393799   tun_mtu_extra_defined = DISABLED
Tue Dec 30 23:26:33 2014 us=393834   mtu_discover_type = -1
Tue Dec 30 23:26:33 2014 us=393869   fragment = 0
Tue Dec 30 23:26:33 2014 us=393904   mssfix = 1450
Tue Dec 30 23:26:33 2014 us=393939   explicit_exit_notification = 0
Tue Dec 30 23:26:33 2014 us=393977 Connection profiles END
Tue Dec 30 23:26:33 2014 us=394012   remote_random = DISABLED
Tue Dec 30 23:26:33 2014 us=394047   ipchange = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=394081   dev = 'tun'
Tue Dec 30 23:26:33 2014 us=394116   dev_type = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=394151   dev_node = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=394185   lladdr = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=394220   topology = 1
Tue Dec 30 23:26:33 2014 us=394254   tun_ipv6 = DISABLED
Tue Dec 30 23:26:33 2014 us=394289   ifconfig_local = '192.168.20.1'
Tue Dec 30 23:26:33 2014 us=394331   ifconfig_remote_netmask = '192.168.20.2'
Tue Dec 30 23:26:33 2014 us=394369   ifconfig_noexec = DISABLED
Tue Dec 30 23:26:33 2014 us=394404   ifconfig_nowarn = DISABLED
Tue Dec 30 23:26:33 2014 us=394438   ifconfig_ipv6_local = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=394473   ifconfig_ipv6_netbits = 0
Tue Dec 30 23:26:33 2014 us=394508   ifconfig_ipv6_remote = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=394543   shaper = 0
Tue Dec 30 23:26:33 2014 us=394577   mtu_test = 0
Tue Dec 30 23:26:33 2014 us=394612   mlock = DISABLED
Tue Dec 30 23:26:33 2014 us=394647   keepalive_ping = 10
Tue Dec 30 23:26:33 2014 us=394685   keepalive_timeout = 120
Tue Dec 30 23:26:33 2014 us=394720   inactivity_timeout = 0
Tue Dec 30 23:26:33 2014 us=394755   ping_send_timeout = 10
Tue Dec 30 23:26:33 2014 us=394789   ping_rec_timeout = 240
Tue Dec 30 23:26:33 2014 us=394824   ping_rec_timeout_action = 2
Tue Dec 30 23:26:33 2014 us=394859   ping_timer_remote = DISABLED
Tue Dec 30 23:26:33 2014 us=394893   remap_sigusr1 = 0
Tue Dec 30 23:26:33 2014 us=394928   persist_tun = ENABLED
Tue Dec 30 23:26:33 2014 us=394963   persist_local_ip = DISABLED
Tue Dec 30 23:26:33 2014 us=394998   persist_remote_ip = DISABLED
Tue Dec 30 23:26:33 2014 us=395032   persist_key = ENABLED
Tue Dec 30 23:26:33 2014 us=395067   passtos = DISABLED
Tue Dec 30 23:26:33 2014 us=395102   resolve_retry_seconds = 1000000000
Tue Dec 30 23:26:33 2014 us=395146   username = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=395181   groupname = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=395216   chroot_dir = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=395251   cd_dir = 'openvpn'
Tue Dec 30 23:26:33 2014 us=395286   writepid = '/var/run/ovpn_server.pid'
Tue Dec 30 23:26:33 2014 us=395338   up_script = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=395376   down_script = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=395410   down_pre = DISABLED
Tue Dec 30 23:26:33 2014 us=395445   up_restart = DISABLED
Tue Dec 30 23:26:33 2014 us=395479   up_delay = DISABLED
Tue Dec 30 23:26:33 2014 us=395514   daemon = ENABLED
Tue Dec 30 23:26:33 2014 us=395549   inetd = 0
Tue Dec 30 23:26:33 2014 us=395583   log = ENABLED
Tue Dec 30 23:26:33 2014 us=395618   suppress_timestamps = DISABLED
Tue Dec 30 23:26:33 2014 us=395653   nice = 0
Tue Dec 30 23:26:33 2014 us=395687   verbosity = 4
Tue Dec 30 23:26:33 2014 us=395722   mute = 0
Tue Dec 30 23:26:33 2014 us=395757   gremlin = 0
Tue Dec 30 23:26:33 2014 us=395792   status_file = '/tmp/ovpn_status_2_result'
Tue Dec 30 23:26:33 2014 us=395827   status_file_version = 2
Tue Dec 30 23:26:33 2014 us=395861   status_file_update_freq = 30
Tue Dec 30 23:26:33 2014 us=395896   occ = ENABLED
Tue Dec 30 23:26:33 2014 us=395930   rcvbuf = 0
Tue Dec 30 23:26:33 2014 us=395965   sndbuf = 0
Tue Dec 30 23:26:33 2014 us=396000   mark = 0
Tue Dec 30 23:26:33 2014 us=396035   sockflags = 0
Tue Dec 30 23:26:33 2014 us=396069   fast_io = DISABLED
Tue Dec 30 23:26:33 2014 us=396104   lzo = 7
Tue Dec 30 23:26:33 2014 us=396139   route_script = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396173   route_default_gateway = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396208   route_default_metric = 0
Tue Dec 30 23:26:33 2014 us=396243   route_noexec = DISABLED
Tue Dec 30 23:26:33 2014 us=396278   route_delay = 0
Tue Dec 30 23:26:33 2014 us=396324   route_delay_window = 30
Tue Dec 30 23:26:33 2014 us=396363   route_delay_defined = DISABLED
Tue Dec 30 23:26:33 2014 us=396398   route_nopull = DISABLED
Tue Dec 30 23:26:33 2014 us=396433   route_gateway_via_dhcp = DISABLED
Tue Dec 30 23:26:33 2014 us=396468   max_routes = 100
Tue Dec 30 23:26:33 2014 us=396503   allow_pull_fqdn = DISABLED
Tue Dec 30 23:26:33 2014 us=396540   route x3.x3.x3.0/255.255.255.0/nil/nil
Tue Dec 30 23:26:33 2014 us=396576   route 192.168.20.0/255.255.255.0/nil/nil
Tue Dec 30 23:26:33 2014 us=396611   management_addr = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396646   management_port = 0
Tue Dec 30 23:26:33 2014 us=396681   management_user_pass = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396717   management_log_history_cache = 250
Tue Dec 30 23:26:33 2014 us=396752   management_echo_buffer_size = 100
Tue Dec 30 23:26:33 2014 us=396787   management_write_peer_info_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396823   management_client_user = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396858   management_client_group = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396893   management_flags = 0
Tue Dec 30 23:26:33 2014 us=396928   shared_secret_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=396963   key_direction = 0
Tue Dec 30 23:26:33 2014 us=396999   ciphername_defined = ENABLED
Tue Dec 30 23:26:33 2014 us=397034   ciphername = 'BF-CBC'
Tue Dec 30 23:26:33 2014 us=397069   authname_defined = ENABLED
Tue Dec 30 23:26:33 2014 us=397104   authname = 'SHA1'
Tue Dec 30 23:26:33 2014 us=397138   prng_hash = 'SHA1'
Tue Dec 30 23:26:33 2014 us=397174   prng_nonce_secret_len = 16
Tue Dec 30 23:26:33 2014 us=397209   keysize = 0
Tue Dec 30 23:26:33 2014 us=397243   engine = DISABLED
Tue Dec 30 23:26:33 2014 us=397278   replay = ENABLED
Tue Dec 30 23:26:33 2014 us=397319   mute_replay_warnings = DISABLED
Tue Dec 30 23:26:33 2014 us=397358   replay_window = 64
Tue Dec 30 23:26:33 2014 us=397393   replay_time = 15
Tue Dec 30 23:26:33 2014 us=397429   packet_id_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=397464   use_iv = ENABLED
Tue Dec 30 23:26:33 2014 us=397499   test_crypto = DISABLED
Tue Dec 30 23:26:33 2014 us=397624   tls_server = ENABLED
Tue Dec 30 23:26:33 2014 us=397662   tls_client = DISABLED
Tue Dec 30 23:26:33 2014 us=397698   key_method = 2
Tue Dec 30 23:26:33 2014 us=397733   ca_file = 'CA.crt'
Tue Dec 30 23:26:33 2014 us=397769   ca_path = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=397804   dh_file = 'dh2048.pem'
Tue Dec 30 23:26:33 2014 us=397853   cert_file = 'server.crt'
Tue Dec 30 23:26:33 2014 us=397889   priv_key_file = 'server.pem'
Tue Dec 30 23:26:33 2014 us=397925   pkcs12_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=397960   cipher_list = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=397995   tls_verify = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=398030   tls_export_cert = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=398065   verify_x509_type = 0
Tue Dec 30 23:26:33 2014 us=398100   verify_x509_name = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=398135   crl_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=398170   ns_cert_type = 0
Tue Dec 30 23:26:33 2014 us=398206   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398241   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398277   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398312   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398359   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398394   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398429   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398464   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398499   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398534   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398569   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398604   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398639   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398675   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398710   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398745   remote_cert_ku[i] = 0
Tue Dec 30 23:26:33 2014 us=398780   remote_cert_eku = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=398816   ssl_flags = 0
Tue Dec 30 23:26:33 2014 us=398851   tls_timeout = 2
Tue Dec 30 23:26:33 2014 us=398886   renegotiate_bytes = 0
Tue Dec 30 23:26:33 2014 us=398921   renegotiate_packets = 0
Tue Dec 30 23:26:33 2014 us=398957   renegotiate_seconds = 3600
Tue Dec 30 23:26:33 2014 us=398992   handshake_window = 60
Tue Dec 30 23:26:33 2014 us=399027   transition_window = 3600
Tue Dec 30 23:26:33 2014 us=399061   single_session = DISABLED
Tue Dec 30 23:26:33 2014 us=399096   push_peer_info = DISABLED
Tue Dec 30 23:26:33 2014 us=399131   tls_exit = DISABLED
Tue Dec 30 23:26:33 2014 us=399166   tls_auth_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=399205   server_network = 192.168.20.0
Tue Dec 30 23:26:33 2014 us=399250   server_netmask = 255.255.255.0
Tue Dec 30 23:26:33 2014 us=399302   server_network_ipv6 = ::
Tue Dec 30 23:26:33 2014 us=399350   server_netbits_ipv6 = 0
Tue Dec 30 23:26:33 2014 us=399388   server_bridge_ip = 0.0.0.0
Tue Dec 30 23:26:33 2014 us=399426   server_bridge_netmask = 0.0.0.0
Tue Dec 30 23:26:33 2014 us=399464   server_bridge_pool_start = 0.0.0.0
Tue Dec 30 23:26:33 2014 us=399502   server_bridge_pool_end = 0.0.0.0
Tue Dec 30 23:26:33 2014 us=399538   push_entry = 'route 192.168.30.0 255.255.255.0'
Tue Dec 30 23:26:33 2014 us=399574   push_entry = 'route 192.168.20.0 255.255.255.0'
Tue Dec 30 23:26:33 2014 us=399610   push_entry = 'dhcp-option DOMAIN MY'
Tue Dec 30 23:26:33 2014 us=399645   push_entry = 'dhcp-option DNS 192.168.20.1'
Tue Dec 30 23:26:33 2014 us=399681   push_entry = 'route 192.168.20.0 255.255.255.0'
Tue Dec 30 23:26:33 2014 us=399716   push_entry = 'topology net30'
Tue Dec 30 23:26:33 2014 us=399752   push_entry = 'ping 10'
Tue Dec 30 23:26:33 2014 us=399786   push_entry = 'ping-restart 120'
Tue Dec 30 23:26:33 2014 us=399822   ifconfig_pool_defined = ENABLED
Tue Dec 30 23:26:33 2014 us=399860   ifconfig_pool_start = 192.168.20.4
Tue Dec 30 23:26:33 2014 us=399898   ifconfig_pool_end = 192.168.20.251
Tue Dec 30 23:26:33 2014 us=399945   ifconfig_pool_netmask = 0.0.0.0
Tue Dec 30 23:26:33 2014 us=399981   ifconfig_pool_persist_filename = 'ipp.txt'
Tue Dec 30 23:26:33 2014 us=400017   ifconfig_pool_persist_refresh_freq = 600
Tue Dec 30 23:26:33 2014 us=400052   ifconfig_ipv6_pool_defined = DISABLED
Tue Dec 30 23:26:33 2014 us=400089   ifconfig_ipv6_pool_base = ::
Tue Dec 30 23:26:33 2014 us=400125   ifconfig_ipv6_pool_netbits = 0
Tue Dec 30 23:26:33 2014 us=400160   n_bcast_buf = 256
Tue Dec 30 23:26:33 2014 us=400195   tcp_queue_limit = 64
Tue Dec 30 23:26:33 2014 us=400231   real_hash_size = 256
Tue Dec 30 23:26:33 2014 us=400266   virtual_hash_size = 256
Tue Dec 30 23:26:33 2014 us=400301   client_connect_script = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=400347   learn_address_script = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=400382   client_disconnect_script = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=400417   client_config_dir = 'ccd'
Tue Dec 30 23:26:33 2014 us=400453   ccd_exclusive = DISABLED
Tue Dec 30 23:26:33 2014 us=400488   tmp_dir = '/tmp'
Tue Dec 30 23:26:33 2014 us=400522   push_ifconfig_defined = DISABLED
Tue Dec 30 23:26:33 2014 us=400560   push_ifconfig_local = 0.0.0.0
Tue Dec 30 23:26:33 2014 us=400598   push_ifconfig_remote_netmask = 0.0.0.0
Tue Dec 30 23:26:33 2014 us=400633   push_ifconfig_ipv6_defined = DISABLED
Tue Dec 30 23:26:33 2014 us=400671   push_ifconfig_ipv6_local = ::/0
Tue Dec 30 23:26:33 2014 us=400708   push_ifconfig_ipv6_remote = ::
Tue Dec 30 23:26:33 2014 us=400743   enable_c2c = ENABLED
Tue Dec 30 23:26:33 2014 us=400778   duplicate_cn = DISABLED
Tue Dec 30 23:26:33 2014 us=400813   cf_max = 0
Tue Dec 30 23:26:33 2014 us=400848   cf_per = 0
Tue Dec 30 23:26:33 2014 us=400884   max_clients = 10
Tue Dec 30 23:26:33 2014 us=400919   max_routes_per_client = 256
Tue Dec 30 23:26:33 2014 us=400954   auth_user_pass_verify_script = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=400990   auth_user_pass_verify_script_via_file = DISABLED
Tue Dec 30 23:26:33 2014 us=401025   port_share_host = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=401060   port_share_port = 0
Tue Dec 30 23:26:33 2014 us=401095   client = DISABLED
Tue Dec 30 23:26:33 2014 us=401130   pull = DISABLED
Tue Dec 30 23:26:33 2014 us=401166   auth_user_pass_file = '[UNDEF]'
Tue Dec 30 23:26:33 2014 us=401203 OpenVPN 2.3.6 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec  9 2014
Tue Dec 30 23:26:33 2014 us=410511 library versions: OpenSSL 1.0.1j-fips 15 Oct 2014, LZO 2.08
Tue Dec 30 23:26:33 2014 us=550072 Diffie-Hellman initialized with 2048 bit key
Tue Dec 30 23:26:33 2014 us=552073 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Dec 30 23:26:33 2014 us=552188 Socket Buffers: R=[87380->87380] S=[16384->16384]
Tue Dec 30 23:26:33 2014 us=552562 ROUTE_GATEWAY 192.168.30.1/255.255.255.0 IFACE=eth0 HWADDR=00:11:32:2b:b8:a7
Tue Dec 30 23:26:33 2014 us=554703 TUN/TAP device tun0 opened
Tue Dec 30 23:26:33 2014 us=554817 TUN/TAP TX queue length set to 100
Tue Dec 30 23:26:33 2014 us=554874 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Dec 30 23:26:33 2014 us=554952 /sbin/ifconfig tun0 192.168.20.1 pointopoint 192.168.20.2 mtu 1500
Tue Dec 30 23:26:33 2014 us=557865 /sbin/route add -net x3.x3.x3.0 netmask 255.255.255.0 gw 192.168.20.2
Tue Dec 30 23:26:33 2014 us=559470 /sbin/route add -net 192.168.20.0 netmask 255.255.255.0 gw 192.168.20.2
Tue Dec 30 23:26:33 2014 us=561048 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 30 23:26:33 2014 us=561595 Listening for incoming TCP connection on [undef]
Tue Dec 30 23:26:33 2014 us=561811 TCPv4_SERVER link local (bound): [undef]
Tue Dec 30 23:26:33 2014 us=561852 TCPv4_SERVER link remote: [undef]
Tue Dec 30 23:26:33 2014 us=561898 MULTI: multi_init called, r=256 v=256
Tue Dec 30 23:26:33 2014 us=562049 IFCONFIG POOL: base=192.168.20.4 size=62, ipv6=0
Tue Dec 30 23:26:33 2014 us=562133 ifconfig_pool_read(), in='grishaev,192.168.20.4', TODO: IPv6
Tue Dec 30 23:26:33 2014 us=562278 succeeded -> ifconfig_pool_set()
Tue Dec 30 23:26:33 2014 us=562347 ifconfig_pool_read(), in='my_ext,192.168.20.8', TODO: IPv6
Tue Dec 30 23:26:33 2014 us=562429 succeeded -> ifconfig_pool_set()
Tue Dec 30 23:26:33 2014 us=562466 ifconfig_pool_read(), in='other_ext,192.168.20.12', TODO: IPv6
Tue Dec 30 23:26:33 2014 us=562536 succeeded -> ifconfig_pool_set()
Tue Dec 30 23:26:33 2014 us=562572 ifconfig_pool_read(), in='3rd_ext,192.168.20.16', TODO: IPv6
Tue Dec 30 23:26:33 2014 us=562641 succeeded -> ifconfig_pool_set()
Tue Dec 30 23:26:33 2014 us=562681 IFCONFIG POOL LIST
Tue Dec 30 23:26:33 2014 us=562718 4th,192.168.20.4
Tue Dec 30 23:26:33 2014 us=562754 my_ext,192.168.20.8
Tue Dec 30 23:26:33 2014 us=562795 other_ext,192.168.20.12
Tue Dec 30 23:26:33 2014 us=562843 3rd_ext,192.168.20.16
Tue Dec 30 23:26:33 2014 us=562942 MULTI: TCP INIT maxclients=10 maxevents=14
Tue Dec 30 23:26:33 2014 us=563056 Initialization Sequence Completed
Tue Dec 30 23:26:33 2014 us=991441 MULTI: multi_create_instance called
Tue Dec 30 23:26:33 2014 us=991580 Re-using SSL/TLS context
Tue Dec 30 23:26:33 2014 us=991668 LZO compression initialized
Tue Dec 30 23:26:33 2014 us=992018 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Dec 30 23:26:33 2014 us=992098 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 30 23:26:33 2014 us=992430 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Dec 30 23:26:33 2014 us=992481 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Dec 30 23:26:33 2014 us=992548 Local Options hash (VER=V4): 'c0103fa8'
Tue Dec 30 23:26:33 2014 us=992599 Expected Remote Options hash (VER=V4): '69109d17'
Tue Dec 30 23:26:33 2014 us=992675 TCP connection established with [AF_INET]other_ip_ext:3482
Tue Dec 30 23:26:33 2014 us=992714 TCPv4_SERVER link local: [undef]
Tue Dec 30 23:26:33 2014 us=992752 TCPv4_SERVER link remote: [AF_INET]other_ip_ext:3482
Tue Dec 30 23:26:34 2014 us=63411 other_ip_ext:3482 TLS: Initial packet from [AF_INET]other_ip_ext:3482, sid=55b62115 b5575425
Tue Dec 30 23:26:34 2014 us=998949 other_ip_ext:3482 VERIFY OK: depth=2, C=RU, ST=Moscow, O=*****, CN=CA
Tue Dec 30 23:26:35 2014 us=491 other_ip_ext:3482 VERIFY OK: depth=1, C=RU, ST=Moscow, O=******, CN=VPN_root
Tue Dec 30 23:26:35 2014 us=1966 other_ip_ext:3482 VERIFY OK: depth=0, C=RU, ST=Moscow, O=******, CN=*******
Tue Dec 30 23:26:35 2014 us=404407 otehr_ip_ext:3482 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 30 23:26:35 2014 us=404501 other_ip_ext:3482 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:26:35 2014 us=404598 other_ip_ext:3482 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 30 23:26:35 2014 us=404639 other_ip_ext:3482 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:26:35 2014 us=659792 other_ip_ext:3482 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Dec 30 23:26:35 2014 us=659908 other_ip_ext:3482 [***] Peer Connection Initiated with [AF_INET]other_ip_ext:3482
Tue Dec 30 23:26:35 2014 us=660017 ******/other_ip_ext:3482 OPTIONS IMPORT: reading client specific options from: ccd/******
Tue Dec 30 23:26:35 2014 us=660356 ******/other_ip_ext:3482 MULTI: Learn: 192.168.20.17 -> ******/other_ip_ext:3482
Tue Dec 30 23:26:35 2014 us=660410 ******/other_ip_ext:3482 MULTI: primary virtual IP for ******/other_ip_ext:3482: 192.168.20.17
Tue Dec 30 23:26:38 2014 us=78125 ******/other_ip_ext:3482 PUSH: Received control message: 'PUSH_REQUEST'
Tue Dec 30 23:26:38 2014 us=78214 ******/other_ip_ext:3482 send_push_reply(): safe_cap=940
Tue Dec 30 23:26:38 2014 us=78341 ******/other_ip_ext:3482 SENT CONTROL [******]: 'PUSH_REPLY,route 192.168.30.0 255.255.255.0,route 192.168.20.0 255.255.255.0,dhcp-option DOMAIN MY,dhcp-option DNS 192.168.20.1,route 192.168.20.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.20.17 192.168.20.18' (status=1)
Tue Dec 30 23:28:21 2014 us=28943 MULTI: multi_create_instance called
Tue Dec 30 23:28:21 2014 us=29102 Re-using SSL/TLS context
Tue Dec 30 23:28:21 2014 us=29157 LZO compression initialized
Tue Dec 30 23:28:21 2014 us=29386 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Dec 30 23:28:21 2014 us=29459 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 30 23:28:21 2014 us=29719 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Dec 30 23:28:21 2014 us=29761 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Dec 30 23:28:21 2014 us=29819 Local Options hash (VER=V4): 'c0103fa8'
Tue Dec 30 23:28:21 2014 us=29871 Expected Remote Options hash (VER=V4): '69109d17'
Tue Dec 30 23:28:21 2014 us=29932 TCP connection established with [AF_INET]x4.x4.x4.x4:62215
Tue Dec 30 23:28:21 2014 us=29970 TCPv4_SERVER link local: [undef]
Tue Dec 30 23:28:21 2014 us=30009 TCPv4_SERVER link remote: [AF_INET]x4.x4.x4.x4:62215
Tue Dec 30 23:28:23 2014 us=88698 x4.x4.x4.x4:62215 TLS: Initial packet from [AF_INET]x4.x4.x4.x4:62215, sid=3004db34 ec03adf1
Tue Dec 30 23:28:29 2014 us=118031 x4.x4.x4.x4:62215 VERIFY OK: depth=2, C=RU, ST=Moscow, O=MY, CN=CA
Tue Dec 30 23:28:29 2014 us=119429 x4.x4.x4.x4:62215 VERIFY OK: depth=1, C=RU, ST=Moscow, O=MY, CN=VPN_root
Tue Dec 30 23:28:29 2014 us=120872 x4.x4.x4.x4:62215 VERIFY OK: depth=0, C=RU, ST=Moscow, O=MY, CN=my_ext
Tue Dec 30 23:28:29 2014 us=887133 x4.x4.x4.x4:62215 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 30 23:28:29 2014 us=887234 x4.x4.x4.x4:62215 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:28:29 2014 us=887345 x4.x4.x4.x4:62215 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 30 23:28:29 2014 us=887387 x4.x4.x4.x4:62215 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:28:30 2014 us=257713 x4.x4.x4.x4:62215 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Dec 30 23:28:30 2014 us=257824 x4.x4.x4.x4:62215 [my_ext] Peer Connection Initiated with [AF_INET]x4.x4.x4.x4:62215
Tue Dec 30 23:28:30 2014 us=257924 my_ext/x4.x4.x4.x4:62215 OPTIONS IMPORT: reading client specific options from: ccd/my_ext
Tue Dec 30 23:28:30 2014 us=265985 my_ext/x4.x4.x4.x4:62215 MULTI: Learn: 192.168.20.10 -> my_ext/x4.x4.x4.x4:62215
Tue Dec 30 23:28:30 2014 us=266045 my_ext/x4.x4.x4.x4:62215 MULTI: primary virtual IP for my_ext/x4.x4.x4.x4:62215: 192.168.20.10
Tue Dec 30 23:28:30 2014 us=266088 my_ext/x4.x4.x4.x4:62215 MULTI: internal route x3.x3.x3.0/24 -> my_ext/x4.x4.x4.x4:62215
Tue Dec 30 23:28:30 2014 us=266139 my_ext/x4.x4.x4.x4:62215 MULTI: Learn: x3.x3.x3.0/24 -> my_ext/x4.x4.x4.x4:62215
Tue Dec 30 23:28:32 2014 us=358110 my_ext/x4.x4.x4.x4:62215 PUSH: Received control message: 'PUSH_REQUEST'
Tue Dec 30 23:28:32 2014 us=358199 my_ext/x4.x4.x4.x4:62215 send_push_reply(): safe_cap=940
Tue Dec 30 23:28:32 2014 us=358328 my_ext/x4.x4.x4.x4:62215 SENT CONTROL [my_ext]: 'PUSH_REPLY,route 192.168.30.0 255.255.255.0,route 192.168.20.0 255.255.255.0,dhcp-option DOMAIN MY,dhcp-option DNS 192.168.20.1,route 192.168.20.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.20.10 192.168.20.9' (status=1)

Client log

Tue Dec 30 23:28:16 2014 us=895000 Current Parameter Settings:
Tue Dec 30 23:28:16 2014 us=895000   config = 'home.ovpn'
Tue Dec 30 23:28:16 2014 us=895000   mode = 0
Tue Dec 30 23:28:16 2014 us=895000   show_ciphers = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   show_digests = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   show_engines = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   genkey = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   key_pass_file = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   show_tls_ciphers = DISABLED
Tue Dec 30 23:28:16 2014 us=895000 Connection profiles [default]:
Tue Dec 30 23:28:16 2014 us=895000   proto = tcp-client
Tue Dec 30 23:28:16 2014 us=895000   local = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   local_port = 0
Tue Dec 30 23:28:16 2014 us=895000   remote = 'home.dns.addr'
Tue Dec 30 23:28:16 2014 us=895000   remote_port = 8080
Tue Dec 30 23:28:16 2014 us=895000   remote_float = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   bind_defined = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   bind_local = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   connect_retry_seconds = 30
Tue Dec 30 23:28:16 2014 us=895000   connect_timeout = 10
Tue Dec 30 23:28:16 2014 us=895000   connect_retry_max = 0
Tue Dec 30 23:28:16 2014 us=895000 BEGIN http_proxy
Tue Dec 30 23:28:16 2014 us=895000   server = 'proxy.dns'
Tue Dec 30 23:28:16 2014 us=895000   port = 8000
Tue Dec 30 23:28:16 2014 us=895000   auth_method_string = 'basic'
Tue Dec 30 23:28:16 2014 us=895000   auth_file = 'openvpn_authfile.txt'
Tue Dec 30 23:28:16 2014 us=895000   retry = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   timeout = 5
Tue Dec 30 23:28:16 2014 us=895000   http_version = '1.0'
Tue Dec 30 23:28:16 2014 us=895000   user_agent = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000 END http_proxy
Tue Dec 30 23:28:16 2014 us=895000   socks_proxy_server = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   socks_proxy_port = 0
Tue Dec 30 23:28:16 2014 us=895000   socks_proxy_retry = DISABLED
Tue Dec 30 23:28:16 2014 us=895000 Connection profiles END
Tue Dec 30 23:28:16 2014 us=895000   remote_random = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   ipchange = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   dev = 'tun'
Tue Dec 30 23:28:16 2014 us=895000   dev_type = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   dev_node = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   lladdr = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   topology = 1
Tue Dec 30 23:28:16 2014 us=895000   tun_ipv6 = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   ifconfig_local = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   ifconfig_remote_netmask = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=895000   ifconfig_noexec = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   ifconfig_nowarn = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   shaper = 0
Tue Dec 30 23:28:16 2014 us=895000   tun_mtu = 1500
Tue Dec 30 23:28:16 2014 us=895000   tun_mtu_defined = ENABLED
Tue Dec 30 23:28:16 2014 us=895000   link_mtu = 1500
Tue Dec 30 23:28:16 2014 us=895000   link_mtu_defined = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   tun_mtu_extra = 0
Tue Dec 30 23:28:16 2014 us=895000   tun_mtu_extra_defined = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   fragment = 0
Tue Dec 30 23:28:16 2014 us=895000   mtu_discover_type = -1
Tue Dec 30 23:28:16 2014 us=895000   mtu_test = 0
Tue Dec 30 23:28:16 2014 us=895000   mlock = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   keepalive_ping = 0
Tue Dec 30 23:28:16 2014 us=895000   keepalive_timeout = 0
Tue Dec 30 23:28:16 2014 us=895000   inactivity_timeout = 0
Tue Dec 30 23:28:16 2014 us=895000   ping_send_timeout = 0
Tue Dec 30 23:28:16 2014 us=895000   ping_rec_timeout = 0
Tue Dec 30 23:28:16 2014 us=895000   ping_rec_timeout_action = 0
Tue Dec 30 23:28:16 2014 us=895000   ping_timer_remote = DISABLED
Tue Dec 30 23:28:16 2014 us=895000   remap_sigusr1 = 0
Tue Dec 30 23:28:16 2014 us=895000   explicit_exit_notification = 0
Tue Dec 30 23:28:16 2014 us=895000   persist_tun = ENABLED
Tue Dec 30 23:28:16 2014 us=957000   persist_local_ip = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   persist_remote_ip = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   persist_key = ENABLED
Tue Dec 30 23:28:16 2014 us=957000   mssfix = 1450
Tue Dec 30 23:28:16 2014 us=957000   resolve_retry_seconds = 1000000000
Tue Dec 30 23:28:16 2014 us=957000   username = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   groupname = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   chroot_dir = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   cd_dir = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   writepid = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   up_script = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   down_script = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   down_pre = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   up_restart = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   up_delay = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   daemon = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   inetd = 0
Tue Dec 30 23:28:16 2014 us=957000   log = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   suppress_timestamps = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   nice = 0
Tue Dec 30 23:28:16 2014 us=957000   verbosity = 4
Tue Dec 30 23:28:16 2014 us=957000   mute = 0
Tue Dec 30 23:28:16 2014 us=957000   gremlin = 0
Tue Dec 30 23:28:16 2014 us=957000   status_file = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   status_file_version = 1
Tue Dec 30 23:28:16 2014 us=957000   status_file_update_freq = 60
Tue Dec 30 23:28:16 2014 us=957000   occ = ENABLED
Tue Dec 30 23:28:16 2014 us=957000   rcvbuf = 0
Tue Dec 30 23:28:16 2014 us=957000   sndbuf = 0
Tue Dec 30 23:28:16 2014 us=957000   sockflags = 0
Tue Dec 30 23:28:16 2014 us=957000   fast_io = DISABLED
Tue Dec 30 23:28:16 2014 us=957000   lzo = 7
Tue Dec 30 23:28:16 2014 us=957000   route_script = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=957000   route_default_gateway = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=973000   route_default_metric = 320
Tue Dec 30 23:28:16 2014 us=973000   route_noexec = DISABLED
Tue Dec 30 23:28:16 2014 us=973000   route_delay = 5
Tue Dec 30 23:28:16 2014 us=973000   route_delay_window = 30
Tue Dec 30 23:28:16 2014 us=973000   route_delay_defined = ENABLED
Tue Dec 30 23:28:16 2014 us=973000   route_nopull = DISABLED
Tue Dec 30 23:28:16 2014 us=973000   route_gateway_via_dhcp = DISABLED
Tue Dec 30 23:28:16 2014 us=973000   max_routes = 100
Tue Dec 30 23:28:16 2014 us=973000   allow_pull_fqdn = DISABLED
Tue Dec 30 23:28:16 2014 us=973000   management_addr = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=973000   management_port = 0
Tue Dec 30 23:28:16 2014 us=973000   management_user_pass = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=973000   management_log_history_cache = 250
Tue Dec 30 23:28:16 2014 us=973000   management_echo_buffer_size = 100
Tue Dec 30 23:28:16 2014 us=973000   management_write_peer_info_file = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=973000   management_client_user = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=989000   management_client_group = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=989000   management_flags = 0
Tue Dec 30 23:28:16 2014 us=989000   shared_secret_file = '[UNDEF]'
Tue Dec 30 23:28:16 2014 us=989000   key_direction = 0
Tue Dec 30 23:28:16 2014 us=989000   ciphername_defined = ENABLED
Tue Dec 30 23:28:16 2014 us=989000   ciphername = 'BF-CBC'
Tue Dec 30 23:28:16 2014 us=989000   authname_defined = ENABLED
Tue Dec 30 23:28:16 2014 us=989000   authname = 'SHA1'
Tue Dec 30 23:28:16 2014 us=989000   prng_hash = 'SHA1'
Tue Dec 30 23:28:16 2014 us=989000   prng_nonce_secret_len = 16
Tue Dec 30 23:28:16 2014 us=989000   keysize = 0
Tue Dec 30 23:28:16 2014 us=989000   engine = DISABLED
Tue Dec 30 23:28:16 2014 us=989000   replay = ENABLED
Tue Dec 30 23:28:16 2014 us=989000   mute_replay_warnings = DISABLED
Tue Dec 30 23:28:16 2014 us=989000   replay_window = 64
Tue Dec 30 23:28:16 2014 us=989000   replay_time = 15
Tue Dec 30 23:28:17 2014 us=4000   packet_id_file = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   use_iv = ENABLED
Tue Dec 30 23:28:17 2014 us=4000   test_crypto = DISABLED
Tue Dec 30 23:28:17 2014 us=4000   tls_server = DISABLED
Tue Dec 30 23:28:17 2014 us=4000   tls_client = ENABLED
Tue Dec 30 23:28:17 2014 us=4000   key_method = 2
Tue Dec 30 23:28:17 2014 us=4000   ca_file = 'CA.crt'
Tue Dec 30 23:28:17 2014 us=4000   ca_path = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   dh_file = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   cert_file = 'my_ext.crt'
Tue Dec 30 23:28:17 2014 us=4000   priv_key_file = 'my_ext.pem'
Tue Dec 30 23:28:17 2014 us=4000   pkcs12_file = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   cryptoapi_cert = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   cipher_list = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   tls_verify = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   tls_remote = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=4000   crl_file = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=20000   ns_cert_type = 64
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=20000   remote_cert_ku[i] = 0
Tue Dec 30 23:28:17 2014 us=67000   remote_cert_eku = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=67000   tls_timeout = 2
Tue Dec 30 23:28:17 2014 us=67000   renegotiate_bytes = 0
Tue Dec 30 23:28:17 2014 us=67000   renegotiate_packets = 0
Tue Dec 30 23:28:17 2014 us=67000   renegotiate_seconds = 3600
Tue Dec 30 23:28:17 2014 us=67000   handshake_window = 60
Tue Dec 30 23:28:17 2014 us=67000   transition_window = 3600
Tue Dec 30 23:28:17 2014 us=67000   single_session = DISABLED
Tue Dec 30 23:28:17 2014 us=67000   push_peer_info = DISABLED
Tue Dec 30 23:28:17 2014 us=67000   tls_exit = DISABLED
Tue Dec 30 23:28:17 2014 us=67000   tls_auth_file = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=67000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=67000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=67000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=67000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=82000   pkcs11_protected_authentication = DISABLED
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=98000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_private_mode = 00000000
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=113000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=129000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=129000   pkcs11_cert_private = DISABLED
Tue Dec 30 23:28:17 2014 us=129000   pkcs11_pin_cache_period = -1
Tue Dec 30 23:28:17 2014 us=129000   pkcs11_id = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=129000   pkcs11_id_management = DISABLED
Tue Dec 30 23:28:17 2014 us=129000   server_network = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=129000   server_netmask = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=129000   server_bridge_ip = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=129000   server_bridge_netmask = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=129000   server_bridge_pool_start = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=129000   server_bridge_pool_end = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=129000   ifconfig_pool_defined = DISABLED
Tue Dec 30 23:28:17 2014 us=129000   ifconfig_pool_start = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=129000   ifconfig_pool_end = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=191000   ifconfig_pool_netmask = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=191000   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=191000   ifconfig_pool_persist_refresh_freq = 600
Tue Dec 30 23:28:17 2014 us=191000   n_bcast_buf = 256
Tue Dec 30 23:28:17 2014 us=191000   tcp_queue_limit = 64
Tue Dec 30 23:28:17 2014 us=191000   real_hash_size = 256
Tue Dec 30 23:28:17 2014 us=191000   virtual_hash_size = 256
Tue Dec 30 23:28:17 2014 us=191000   client_connect_script = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=191000   learn_address_script = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=191000   client_disconnect_script = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=191000   client_config_dir = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=191000   ccd_exclusive = DISABLED
Tue Dec 30 23:28:17 2014 us=191000   tmp_dir = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=191000   push_ifconfig_defined = DISABLED
Tue Dec 30 23:28:17 2014 us=191000   push_ifconfig_local = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=207000   push_ifconfig_remote_netmask = 0.0.0.0
Tue Dec 30 23:28:17 2014 us=207000   enable_c2c = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   duplicate_cn = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   cf_max = 0
Tue Dec 30 23:28:17 2014 us=207000   cf_per = 0
Tue Dec 30 23:28:17 2014 us=207000   max_clients = 1024
Tue Dec 30 23:28:17 2014 us=207000   max_routes_per_client = 256
Tue Dec 30 23:28:17 2014 us=207000   auth_user_pass_verify_script = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=207000   auth_user_pass_verify_script_via_file = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   ssl_flags = 0
Tue Dec 30 23:28:17 2014 us=207000   client = ENABLED
Tue Dec 30 23:28:17 2014 us=207000   pull = ENABLED
Tue Dec 30 23:28:17 2014 us=207000   auth_user_pass_file = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=207000   show_net_up = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   route_method = 0
Tue Dec 30 23:28:17 2014 us=207000   ip_win32_defined = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   ip_win32_type = 3
Tue Dec 30 23:28:17 2014 us=207000   dhcp_masq_offset = 0
Tue Dec 30 23:28:17 2014 us=207000   dhcp_lease_time = 31536000
Tue Dec 30 23:28:17 2014 us=207000   tap_sleep = 0
Tue Dec 30 23:28:17 2014 us=207000   dhcp_options = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   dhcp_renew = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   dhcp_pre_release = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   dhcp_release = DISABLED
Tue Dec 30 23:28:17 2014 us=207000   domain = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=207000   netbios_scope = '[UNDEF]'
Tue Dec 30 23:28:17 2014 us=207000   netbios_node_type = 0
Tue Dec 30 23:28:17 2014 us=207000   disable_nbt = DISABLED
Tue Dec 30 23:28:17 2014 us=207000 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010
Tue Dec 30 23:28:17 2014 us=207000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Dec 30 23:28:21 2014 us=45000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Dec 30 23:28:21 2014 us=76000 LZO compression initialized
Tue Dec 30 23:28:21 2014 us=76000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Dec 30 23:28:21 2014 us=76000 Socket Buffers: R=[8192->8192] S=[64512->64512]
Tue Dec 30 23:28:21 2014 us=247000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 30 23:28:21 2014 us=247000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Dec 30 23:28:21 2014 us=247000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Dec 30 23:28:21 2014 us=247000 Local Options hash (VER=V4): '69109d17'
Tue Dec 30 23:28:21 2014 us=247000 Expected Remote Options hash (VER=V4): 'c0103fa8'
Tue Dec 30 23:28:21 2014 us=247000 Attempting to establish TCP connection x5.x5.x5.x5:8000
Tue Dec 30 23:28:21 2014 us=294000 TCP connection established with x5.x5.x5.x5:8000
Tue Dec 30 23:28:21 2014 us=294000 Send to HTTP proxy: 'CONNECT home.dns.addr:8080 HTTP/1.0'
Tue Dec 30 23:28:21 2014 us=294000 Attempting Basic Proxy-Authorization
Tue Dec 30 23:28:21 2014 us=575000 HTTP proxy returned: 'HTTP/1.1 200 Connection established'
Tue Dec 30 23:28:23 2014 us=572000 TCPv4_CLIENT link local: [undef]
Tue Dec 30 23:28:23 2014 us=572000 TCPv4_CLIENT link remote: x5.x5.x5.x5:8000
Tue Dec 30 23:28:23 2014 us=697000 TLS: Initial packet from x5.x5.x5.x5:8000, sid=a598e7d6 965cf25f
Tue Dec 30 23:28:26 2014 us=349000 VERIFY OK: depth=2, /C=RU/ST=Moscow/O=MY/CN=CA
Tue Dec 30 23:28:26 2014 us=349000 VERIFY OK: depth=1, /C=RU/ST=Moscow/O=MY/CN=VPN_root
Tue Dec 30 23:28:26 2014 us=349000 VERIFY OK: nsCertType=SERVER
Tue Dec 30 23:28:26 2014 us=349000 VERIFY OK: depth=0, /C=RU/ST=Moscow/O=MY/CN=synology213j
Tue Dec 30 23:28:30 2014 us=592000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 30 23:28:30 2014 us=592000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:28:30 2014 us=592000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 30 23:28:30 2014 us=592000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 30 23:28:30 2014 us=592000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Dec 30 23:28:30 2014 us=592000 [synology213j] Peer Connection Initiated with x5.x5.x5.x5:8000
Tue Dec 30 23:28:32 2014 us=838000 SENT CONTROL [synology213j]: 'PUSH_REQUEST' (status=1)
Tue Dec 30 23:28:33 2014 us=103000 PUSH: Received control message: 'PUSH_REPLY,route 192.168.30.0 255.255.255.0,route 192.168.20.0 255.255.255.0,dhcp-option DOMAIN woland255,dhcp-option DNS 192.168.20.1,route 192.168.20.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.20.10 192.168.20.9'
Tue Dec 30 23:28:33 2014 us=103000 OPTIONS IMPORT: timers and/or timeouts modified
Tue Dec 30 23:28:33 2014 us=103000 OPTIONS IMPORT: --ifconfig/up options modified
Tue Dec 30 23:28:33 2014 us=103000 OPTIONS IMPORT: route options modified
Tue Dec 30 23:28:33 2014 us=103000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Dec 30 23:28:33 2014 us=103000 ROUTE default_gateway=x3.x3.x3.1
Tue Dec 30 23:28:33 2014 us=103000 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{658AA389-B4CE-493E-98B0-74E98E77524F}.tap
Tue Dec 30 23:28:33 2014 us=103000 TAP-Win32 Driver Version 9.7 
Tue Dec 30 23:28:33 2014 us=103000 TAP-Win32 MTU=1500
Tue Dec 30 23:28:33 2014 us=119000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.20.10/255.255.255.252 on interface {658AA389-B4CE-493E-98B0-74E98E77524F} [DHCP-serv: 192.168.20.9, lease-time: 31536000]
Tue Dec 30 23:28:33 2014 us=119000 DHCP option string: 0f09776f 6c616e64 32353506 04c0a814 01
Tue Dec 30 23:28:33 2014 us=119000 Successful ARP Flush on interface [17] {658AA389-B4CE-493E-98B0-74E98E77524F}
Tue Dec 30 23:28:38 2014 us=220000 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Tue Dec 30 23:28:38 2014 us=236000 C:\WINDOWS\system32\route.exe ADD 192.168.30.0 MASK 255.255.255.0 192.168.20.9 METRIC 320
Tue Dec 30 23:28:38 2014 us=236000 Route addition via IPAPI succeeded [adaptive]
Tue Dec 30 23:28:38 2014 us=236000 C:\WINDOWS\system32\route.exe ADD 192.168.20.0 MASK 255.255.255.0 192.168.20.9 METRIC 320
Tue Dec 30 23:28:38 2014 us=236000 Route addition via IPAPI succeeded [adaptive]
Tue Dec 30 23:28:38 2014 us=236000 C:\WINDOWS\system32\route.exe ADD 192.168.20.0 MASK 255.255.255.0 192.168.20.9 METRIC 320
Tue Dec 30 23:28:38 2014 us=251000 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists.   [status=5010 if_index=17]
Tue Dec 30 23:28:38 2014 us=251000 Route addition via IPAPI failed [adaptive]
Tue Dec 30 23:28:38 2014 us=251000 Route addition fallback to route.exe
The route addition failed: The object already exists.
Tue Dec 30 23:28:38 2014 us=267000 Initialization Sequence Completed

Traffic

woland255 wroteI have to use tcp because of http proxy

Makes no difference to routing so don't worry about it.

woland255 wrotex4.x4.x4.x4 - this is some strange addr. from external networks

It is the external IP address of your client so that is ok.

woland255 wrotex5.x5.x5.x5 - internal IP of extrenal network HTTP proxy

Same principle .. external IP address of your client.

Without fully understanding the nature of the problem, due to your unnecessary obfuscation of private LANs (See RFC1918 on wikipedia), i will just offer you this: Do you understand what a network conflict is:

woland255 wroteTue Dec 30 23:28:38 2014 us=251000 Route addition fallback to route.exe
The route addition failed: The object already exists.

and are you sure you do not have any in your setup ?

woland255

Traffic wrote
woland255 wrote Without fully understanding the nature of the problem, due to your unnecessary obfuscation of private LANs (See RFC1918 on wikipedia), i will just offer you this: Do you understand what a network conflict is:
woland255 wroteTue Dec 30 23:28:38 2014 us=251000 Route addition fallback to route.exe
The route addition failed: The object already exists.
and are you sure you do not have any in your setup ?

Yes, I can see this line.
This is because of

Tue Dec 30 23:28:38 2014 us=236000 C:\WINDOWS\system32\route.exe ADD 192.168.20.0 MASK 255.255.255.0 192.168.20.9 METRIC 320
Tue Dec 30 23:28:38 2014 us=236000 Route addition via IPAPI succeeded [adaptive]
Tue Dec 30 23:28:38 2014 us=236000 C:\WINDOWS\system32\route.exe ADD 192.168.20.0 MASK 255.255.255.0 192.168.20.9 METRIC 320
Tue Dec 30 23:28:38 2014 us=251000 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists.

May be push "route 192.168.20.0 255.255.255.0" in main server config is unnecessary? Nevertheless, this error is present here before iroutes.

And about "unnecessary obfuscation". This is because of external networks _internal_ addresses are from internet ip range and belongs to this organization according to 'whois'. So I am terribly sorry if I can't make situation clear because of these 'x3.x3.x3.x3' e.t.c.

So if I try to do traceroute x3.x3.x3.x3(client computer in extrenal net - it's _internal_ address) from openvpn server, I can see only "*" in answer.

If you need clarifications please ask what exactly I must re-describe.
And thank you very much for your answers.

Traffic

The only error I can see is the duplication of the route which results in:

The route addition failed: The object already exists

I cannot see the "problems with iroute" .. You make it difficult with obfuscation.

Hiding external public IP addresses is recommended.
Hiding internal private IP addresses is unnecessary.

--iroute simply sets up internal routes in the server application, so that it knows which
LANs are behind which clients. --route must still be used for the actual network routing.

I suggest you draw yourself a diagram of your networks and then read this again:
HOWTO: Expanding the scope of the VPN to include additional machines

As ever .. check your firewalls.

woland255

Hi All,

I have made an advantage in this topic (yes, I know about how fast 🙂). First problem was in disabled IP forwarding in client station (windows). After enabling it I can gain access to my client computer in remote network by it's internal IP address. But I can't access any other computer in the same remote network. All configuration files are the same. Can you advise something in this situation?
And second question. In mentioned HOWTO there is following line: "First, make sure that IP and TUN/TAP forwarding is enabled on the client machine." Please suggest me what is a TUN/TAP forwarding and how I should enable it in Windows (win 7)?
Thanks a lot.

Traffic

woland255 wroteBut I can't access any other computer in the same remote network

did you add a route to your VPN on the machines you want to connect to ?

woland255 wrotemake sure that IP and TUN/TAP forwarding is enabled

This is not required, it is an artifact from an older version of the HOWTO.

woland255

Traffic wrote
woland255 wroteBut I can't access any other computer in the same remote network
did you add a route to your VPN on the machines you want to connect to ?

If you mean my computer on external network (with vpn client) - yes, otherwise - of cause no. This is remote net of organization and I have no permissions to do such thing. So, in this case I can't make resource visible to my local net at all?

Traffic

woland255 wroteThis is remote net of organization and I have no permissions to do such thing. So, in this case I can't make resource visible to my local net at all?

If you have no permission on the remote network then you cannot access the remote LAN ..

You could try this:
https://community.openvpn.net/openvpn/wiki/NatHack

woland255

Ok, understood.
Thank you very much!