My VPN works great except for one thing. There is a single server on my local network I can't connect to when I am connected to the VPN. The address 192.168.0.4 I can ping but if i want to connect to it the connection always times out. Other servers on my network work. Such as 192.168.0.3.
I narrowed down the issue to OpenVPN creating a route for that IP address. If I delete that route via windows the VPN works and I can access that local resource. How can I prevent OpenVPN from creating that route? See below for config and log file.
Thanks so much in advance.
Thu Jan 29 06:23:24 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Thu Jan 29 06:23:24 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Thu Jan 29 06:23:24 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Jan 29 06:23:24 2015 Need hold release from management interface, waiting...
Thu Jan 29 06:23:24 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Jan 29 06:23:24 2015 MANAGEMENT: CMD 'state on'
Thu Jan 29 06:23:24 2015 MANAGEMENT: CMD 'log all on'
Thu Jan 29 06:23:25 2015 MANAGEMENT: CMD 'hold off'
Thu Jan 29 06:23:25 2015 MANAGEMENT: CMD 'hold release'
Thu Jan 29 06:23:25 2015 Socket Buffers: R=[8192->8192] S=[64512->64512]
Thu Jan 29 06:23:25 2015 Attempting to establish TCP connection with [AF_INET]192.121.170.131:10123 [nonblock]
Thu Jan 29 06:23:25 2015 MANAGEMENT: >STATE:1422530605,TCP_CONNECT,,,
Thu Jan 29 06:23:26 2015 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:10123
Thu Jan 29 06:23:26 2015 TCPv4_CLIENT link local: [undef]
Thu Jan 29 06:23:26 2015 TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:10123
Thu Jan 29 06:23:26 2015 MANAGEMENT: >STATE:1422530606,WAIT,,,
Thu Jan 29 06:23:26 2015 MANAGEMENT: >STATE:1422530606,AUTH,,,
Thu Jan 29 06:23:26 2015 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:10123, sid=b8aea514 287e4c9f
Thu Jan 29 06:23:29 2015 VERIFY OK: depth=1, C=US, ... Deleted
Thu Jan 29 06:23:29 2015 VERIFY OK: nsCertType=SERVER
Thu Jan 29 06:23:29 2015 VERIFY OK: depth=0, C=US, ... Deleted
Thu Jan 29 06:23:35 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 29 06:23:35 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 29 06:23:35 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 29 06:23:35 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 29 06:23:35 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Jan 29 06:23:35 2015 [changeme] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:10123
Thu Jan 29 06:23:36 2015 MANAGEMENT: >STATE:1422530616,GET_CONFIG,,,
Thu Jan 29 06:23:37 2015 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Thu Jan 29 06:23:37 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.4.4,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Jan 29 06:23:37 2015 OPTIONS IMPORT: timers and/or timeouts modified
Thu Jan 29 06:23:37 2015 OPTIONS IMPORT: --ifconfig/up options modified
Thu Jan 29 06:23:37 2015 OPTIONS IMPORT: route options modified
Thu Jan 29 06:23:37 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Jan 29 06:23:37 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jan 29 06:23:37 2015 MANAGEMENT: >STATE:1422530617,ASSIGN_IP,,10.8.0.6,
Thu Jan 29 06:23:37 2015 open_tun, tt->ipv6=0
Thu Jan 29 06:23:37 2015 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{999D3064-3CDA-4304-8699-254FC22C6F9A}.tap
Thu Jan 29 06:23:37 2015 TAP-Windows Driver Version 9.21
Thu Jan 29 06:23:37 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {999D3064-3CDA-4304-8699-254FC22C6F9A} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Jan 29 06:23:37 2015 Successful ARP Flush on interface [24] {999D3064-3CDA-4304-8699-254FC22C6F9A}
Thu Jan 29 06:23:42 2015 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Thu Jan 29 06:23:42 2015 C:\Windows\system32\route.exe ADD xxx.xxx.xxx.xxx MASK 255.255.255.255 192.168.0.1
Thu Jan 29 06:23:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Thu Jan 29 06:23:42 2015 Route addition via IPAPI succeeded [adaptive]
Thu Jan 29 06:23:42 2015 C:\Windows\system32\route.exe ADD 192.168.0.4 MASK 255.255.255.255 192.168.0.1 IF 13
Thu Jan 29 06:23:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Thu Jan 29 06:23:42 2015 Route addition via IPAPI succeeded [adaptive]
Thu Jan 29 06:23:42 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Jan 29 06:23:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Thu Jan 29 06:23:42 2015 Route addition via IPAPI succeeded [adaptive]
Thu Jan 29 06:23:42 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Jan 29 06:23:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Thu Jan 29 06:23:42 2015 Route addition via IPAPI succeeded [adaptive]
Thu Jan 29 06:23:42 2015 MANAGEMENT: >STATE:1422530622,ADD_ROUTES,,,
Thu Jan 29 06:23:42 2015 C:\Windows\system32\route.exe ADD 192.168.0.4 MASK 255.255.255.255 10.8.0.5
Thu Jan 29 06:23:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Thu Jan 29 06:23:42 2015 Route addition via IPAPI succeeded [adaptive]
Thu Jan 29 06:23:42 2015 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Thu Jan 29 06:23:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Thu Jan 29 06:23:42 2015 Route addition via IPAPI succeeded [adaptive]
Thu Jan 29 06:23:42 2015 Initialization Sequence Completed
Thu Jan 29 06:23:42 2015 MANAGEMENT: >STATE:1422530622,CONNECTED,SUCCESS,10.8.0.6,192.121.170.131
port 10123
proto tcp
dev tun
ca ca.crt
cert server.key
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify /etc/openvpn/easy-rsa/2.0/keys/crl.pem
client
dev tun
proto tcp
remote xxx.xxx.xxx.xxx 10123
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert ZPIlaptop.crt
key ZPIlaptop.key
ns-cert-type server
comp-lzo
verb 3
