client connected but no ip.

solomonkane

I have a Netgear r6700 which uses openvpn. When i download the configuration and attempt to connect via openvpn it establishes a connection and the client shows green and connected, however the TAP adapter never gets anything other than a self assigned ip and doesnt seem to find the gateway. As such i cant even ping the router. I looked around at different solutions on google but nothing has worked so far so I am reaching out in case anyone can help. I cant get any server configuration information beyond ip since its baked into the netgear however I am pasting the client config and log output.

I see a warning that it failed to parse/resolve route for host but then it seems to connect anyway? Digging on that particular warning i couldn't find any steps that worked for me so far.

Thanks!

client1.ovpn:

client
dev tap
proto udp
dev-node NETGEAR-VPN
remote hidden.no-ip.biz 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5

Mon Feb 02 10:54:58 2015 pkcs11_protected_authentication = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_protected_authentication = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_protected_authentication = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_protected_authentication = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_private_mode = 00000000
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_cert_private = DISABLED
Mon Feb 02 10:54:58 2015 pkcs11_pin_cache_period = -1
Mon Feb 02 10:54:58 2015 pkcs11_id = '[UNDEF]'
Mon Feb 02 10:54:58 2015 pkcs11_id_management = DISABLED
Mon Feb 02 10:54:58 2015 server_network = 0.0.0.0
Mon Feb 02 10:54:58 2015 server_netmask = 0.0.0.0
Mon Feb 02 10:54:58 2015 server_network_ipv6 = ::
Mon Feb 02 10:54:58 2015 server_netbits_ipv6 = 0
Mon Feb 02 10:54:58 2015 server_bridge_ip = 0.0.0.0
Mon Feb 02 10:54:58 2015 server_bridge_netmask = 0.0.0.0
Mon Feb 02 10:54:58 2015 server_bridge_pool_start = 0.0.0.0
Mon Feb 02 10:54:58 2015 server_bridge_pool_end = 0.0.0.0
Mon Feb 02 10:54:58 2015 ifconfig_pool_defined = DISABLED
Mon Feb 02 10:54:58 2015 ifconfig_pool_start = 0.0.0.0
Mon Feb 02 10:54:58 2015 ifconfig_pool_end = 0.0.0.0
Mon Feb 02 10:54:58 2015 ifconfig_pool_netmask = 0.0.0.0
Mon Feb 02 10:54:58 2015 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Feb 02 10:54:58 2015 ifconfig_pool_persist_refresh_freq = 600
Mon Feb 02 10:54:58 2015 ifconfig_ipv6_pool_defined = DISABLED
Mon Feb 02 10:54:58 2015 ifconfig_ipv6_pool_base = ::
Mon Feb 02 10:54:58 2015 ifconfig_ipv6_pool_netbits = 0
Mon Feb 02 10:54:58 2015 n_bcast_buf = 256
Mon Feb 02 10:54:58 2015 tcp_queue_limit = 64
Mon Feb 02 10:54:58 2015 real_hash_size = 256
Mon Feb 02 10:54:58 2015 virtual_hash_size = 256
Mon Feb 02 10:54:58 2015 client_connect_script = '[UNDEF]'
Mon Feb 02 10:54:58 2015 learn_address_script = '[UNDEF]'
Mon Feb 02 10:54:58 2015 client_disconnect_script = '[UNDEF]'
Mon Feb 02 10:54:58 2015 client_config_dir = '[UNDEF]'
Mon Feb 02 10:54:58 2015 ccd_exclusive = DISABLED
Mon Feb 02 10:54:58 2015 tmp_dir = 'C:\Users\user1\AppData\Local\Temp\'
Mon Feb 02 10:54:58 2015 push_ifconfig_defined = DISABLED
Mon Feb 02 10:54:58 2015 push_ifconfig_local = 0.0.0.0
Mon Feb 02 10:54:58 2015 push_ifconfig_remote_netmask = 0.0.0.0
Mon Feb 02 10:54:58 2015 push_ifconfig_ipv6_defined = DISABLED
Mon Feb 02 10:54:58 2015 push_ifconfig_ipv6_local = ::/0
Mon Feb 02 10:54:58 2015 push_ifconfig_ipv6_remote = ::
Mon Feb 02 10:54:58 2015 enable_c2c = DISABLED
Mon Feb 02 10:54:58 2015 duplicate_cn = DISABLED
Mon Feb 02 10:54:58 2015 cf_max = 0
Mon Feb 02 10:54:58 2015 cf_per = 0
Mon Feb 02 10:54:58 2015 max_clients = 1024
Mon Feb 02 10:54:58 2015 max_routes_per_client = 256
Mon Feb 02 10:54:58 2015 auth_user_pass_verify_script = '[UNDEF]'
Mon Feb 02 10:54:58 2015 auth_user_pass_verify_script_via_file = DISABLED
Mon Feb 02 10:54:58 2015 client = ENABLED
Mon Feb 02 10:54:58 2015 pull = ENABLED
Mon Feb 02 10:54:58 2015 auth_user_pass_file = '[UNDEF]'
Mon Feb 02 10:54:58 2015 show_net_up = DISABLED
Mon Feb 02 10:54:58 2015 route_method = 0
Mon Feb 02 10:54:58 2015 ip_win32_defined = DISABLED
Mon Feb 02 10:54:58 2015 ip_win32_type = 3
Mon Feb 02 10:54:58 2015 dhcp_masq_offset = 0
Mon Feb 02 10:54:58 2015 dhcp_lease_time = 31536000
Mon Feb 02 10:54:58 2015 tap_sleep = 0
Mon Feb 02 10:54:58 2015 dhcp_options = DISABLED
Mon Feb 02 10:54:58 2015 dhcp_renew = DISABLED
Mon Feb 02 10:54:58 2015 dhcp_pre_release = DISABLED
Mon Feb 02 10:54:58 2015 dhcp_release = DISABLED
Mon Feb 02 10:54:58 2015 domain = '[UNDEF]'
Mon Feb 02 10:54:58 2015 netbios_scope = '[UNDEF]'
Mon Feb 02 10:54:58 2015 netbios_node_type = 0
Mon Feb 02 10:54:58 2015 disable_nbt = DISABLED
Mon Feb 02 10:54:58 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Mon Feb 02 10:54:58 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Mon Feb 02 10:54:58 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Feb 02 10:54:58 2015 Need hold release from management interface, waiting...
Mon Feb 02 10:54:59 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Feb 02 10:54:59 2015 MANAGEMENT: CMD 'state on'
Mon Feb 02 10:54:59 2015 MANAGEMENT: CMD 'log all on'
Mon Feb 02 10:54:59 2015 MANAGEMENT: CMD 'hold off'
Mon Feb 02 10:54:59 2015 MANAGEMENT: CMD 'hold release'
Mon Feb 02 10:54:59 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Feb 02 10:54:59 2015 LZO compression initialized
Mon Feb 02 10:54:59 2015 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Feb 02 10:54:59 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Feb 02 10:54:59 2015 MANAGEMENT: >STATE:1422896099,RESOLVE,,,
Mon Feb 02 10:55:00 2015 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Feb 02 10:55:00 2015 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Feb 02 10:55:00 2015 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Feb 02 10:55:00 2015 Local Options hash (VER=V4): 'b498be7c'
Mon Feb 02 10:55:00 2015 Expected Remote Options hash (VER=V4): '26e19fc0'
Mon Feb 02 10:55:00 2015 UDPv4 link local: [undef]
Mon Feb 02 10:55:00 2015 UDPv4 link remote: [AF_INET]xx.xx.xx.13:12974
Mon Feb 02 10:55:00 2015 MANAGEMENT: >STATE:1422896100,WAIT,,,
Mon Feb 02 10:55:00 2015 MANAGEMENT: >STATE:1422896100,AUTH,,,
Mon Feb 02 10:55:00 2015 TLS: Initial packet from [AF_INET]xx.xx.xx.13:12974, sid=0a0ec218 50d7966e
Mon Feb 02 10:55:01 2015 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
Mon Feb 02 10:55:01 2015 VERIFY OK: depth=0, C=TW, ST=TW, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
Mon Feb 02 10:55:02 2015 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Feb 02 10:55:02 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 02 10:55:02 2015 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Feb 02 10:55:02 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 02 10:55:02 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Feb 02 10:55:02 2015 [netgear] Peer Connection Initiated with [AF_INET]xx.xx.xx.13:12974
Mon Feb 02 10:55:03 2015 MANAGEMENT: >STATE:1422896103,GET_CONFIG,,,
Mon Feb 02 10:55:04 2015 SENT CONTROL [netgear]: 'PUSH_REQUEST' (status=1)
Mon Feb 02 10:55:04 2015 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.1 255.255.255.0,redirect-gateway,route-gateway dhcp,ping 10,ping-restart 120'
Mon Feb 02 10:55:04 2015 OPTIONS IMPORT: timers and/or timeouts modified
Mon Feb 02 10:55:04 2015 OPTIONS IMPORT: route options modified
Mon Feb 02 10:55:04 2015 OPTIONS IMPORT: route-related options modified
Mon Feb 02 10:55:04 2015 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Mon Feb 02 10:55:04 2015 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.1.1
Mon Feb 02 10:55:04 2015 open_tun, tt->ipv6=0
Mon Feb 02 10:55:04 2015 TAP-WIN32 device [NETGEAR-VPN] opened: \\.\Global\{4A96B123-75D5-46F4-8E8C-F7F0192C2020}.tap
Mon Feb 02 10:55:04 2015 TAP-Windows Driver Version 9.21
Mon Feb 02 10:55:04 2015 TAP-Windows MTU=1500
Mon Feb 02 10:55:04 2015 Successful ARP Flush on interface [27] {4A96B123-75D5-46F4-8E8C-F7F0192C2020}
Mon Feb 02 10:55:09 2015 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Mon Feb 02 10:55:09 2015 NOTE: unable to redirect default gateway -- VPN gateway parameter (--route-gateway or --ifconfig) is missing
Mon Feb 02 10:55:09 2015 Initialization Sequence Completed
Mon Feb 02 10:55:09 2015 MANAGEMENT: >STATE:1422896109,CONNECTED,SUCCESS,,xx.xx.xx.13

maikcat

is your server config contains something like

push "route 192.168.1.1 255.255.255.0"

?

if yes its wrong

it should be

push "route 192.168.1.0 255.255.255.0"

or should be

push "route 192.168.1.1 255.255.255.255"

Michael.

solomonkane

Hi, thanks for your reply.

The problem is i have no way to inspect the server configuration , there is literally nowhere to see/edit that on the R6700 , its all gui and that config is probably hidden behind in the internals of the router. Here is an illustration of the limited configuration that is available on this router:

http://kb.netgear.com/app/answers/detail/a_id/23854/~/how-do-i-use-the-vpn-service-on-my-nighthawk-router-with-my-windows-client%3F
(dont need to read the whole doc, just look at 2nd or 3rd image there for config options available - not much!)

It is possible that this is an issue with the router in which case i guess i would be out of luck unless Netgear posts a fix.

Thanks again

maikcat wroteis your server config contains something like

push "route 192.168.1.1 255.255.255.0"

?

if yes its wrong

it should be

push "route 192.168.1.0 255.255.255.0"

or should be

push "route 192.168.1.1 255.255.255.255"

Michael.

Traffic

maikcat wroteis your server config contains something like

push "route 192.168.1.1 255.255.255.0"

clearly ..

solomonkane wroteReceived control message: 'PUSH_REPLY,route 192.168.1.1 255.255.255.0

Traffic

This line in your log is the key to your error:

solomonkane wrotePUSH_REPLY,route 192.168.1.1 255.255.255.0,redirect-gateway,route-gateway dhcp,ping 10,ping-restart 120

What ever you have done it is incorrect and incomplete.

This is incorrect: route 192.168.1.1 255.255.255.0
This is incomplete: The VPN server is not pushing a VPN IP address to your client.

Reading the Netgear support documentation (which is fairly pathetic), I notice you can backup/export the router config to a file saved on your PC and then edit that file and restore it back to the router ... be very careful if you do this as it is possible you can crash your router.

Post that config file and we will see if you can make any suitable changes.