Hi
My Server Config:
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.3.0 255.255.255.0"
comp-lzo
dev tun
management 127.0.0.1 1195
server 192.168.3.0 255.255.255.0
dh /var/packages/VPNCenter/target/etc/openvpn/keys/dh1024.pem
ca /var/packages/VPNCenter/target/etc/openvpn/keys/ca.crt
cert /var/packages/VPNCenter/target/etc/openvpn/keys/server.crt
key /var/packages/VPNCenter/target/etc/openvpn/keys/server.key
max-clients 15
persist-tun
persist-key
verb 3
#log-append /var/log/openvpn.log
keepalive 10 60
reneg-sec 0
plugin /var/packages/VPNCenter/target/lib/radiusplugin.so /var/packages/VPNCenter/target/etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name
duplicate-cn
status /tmp/ovpn_status_2_result 30
status-version 2
proto udp6
port 1194
Client config
dev tun
tls-client
remote xxx.xxx.com 51194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
# redirect-gateway
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
proto udp
script-security 2
ca ca.crt
comp-lzo
reneg-sec 0
auth-user-pass
verb 6
Connection works without problems, but I get a strange routing table in the client. I expect to get the two routes defined in the server config, but I only get one route
IP 192.168.3.6 / 255.255.255.252
Why is the client ignoring / modifying the route pushed from the server?
Log file:
...
Sun Mar 01 21:49:53 2015 us=814597 UDPv4 READ [48] from [AF_INET]87.152.49.31:51194: P_CONTROL_V1 kid=0 [ ] pid=36 DATA len=34
[color=#4040BF]Sun Mar 01 21:49:53 2015 us=815597 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 192.168.3.0 255.255.255.0,route 192.168.3.1,topology net30,ping 10,ping-restart 60,ifconfig 192.168.3.6 192.168.3.5'
[/color]Sun Mar 01 21:49:53 2015 us=815597 OPTIONS IMPORT: timers and/or timeouts modified
Sun Mar 01 21:49:53 2015 us=815597 OPTIONS IMPORT: --ifconfig/up options modified
Sun Mar 01 21:49:53 2015 us=815597 OPTIONS IMPORT: route options modified
Sun Mar 01 21:49:53 2015 us=861600 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Mar 01 21:49:53 2015 us=861600 MANAGEMENT: >STATE:1425242993,ASSIGN_IP,,192.168.3.6,
Sun Mar 01 21:49:53 2015 us=861600 open_tun, tt->ipv6=0
Sun Mar 01 21:49:53 2015 us=892601 TAP-WIN32 device [LAN-Verbindung 5] opened: \\.\Global\{9B8F0377-283F-4108-8416-B91BA7D138D0}.tap
Sun Mar 01 21:49:53 2015 us=892601 TAP-Windows Driver Version 9.21
Sun Mar 01 21:49:53 2015 us=892601 TAP-Windows MTU=1500
Sun Mar 01 21:49:53 2015 us=903602 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.3.6/255.255.255.252 on interface {9B8F0377-283F-4108-8416-B91BA7D138D0} [DHCP-serv: 192.168.3.5, lease-time: 31536000]
...
