Server log as below.
Mar 23 03:42:48 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 TLS: Initial packet from [AF_INET]117.28.233.234:34633, sid=e9a7ac2c 0c8227c1
Mar 23 03:42:48 VPN-PPTP ovpn-server[26660]: 1.31.59.219:40095 TLS: Initial packet from [AF_INET]1.31.59.219:40095, sid=525cef84 531d289c
Mar 23 03:42:52 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 VERIFY OK: depth=1, C=CN, ST=FJ, L=XiaMen, O=Luke-Corp, OU=LukeCorpUnit, CN=Luke-Corp CA, name=server, emailAddress=lukechai@outlook.com
Mar 23 03:42:52 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 VERIFY OK: depth=0, C=CN, ST=FJ, L=XiaMen, O=Luke-Corp, OU=LukeCorpUnit, CN=LukeMBP, name=server, emailAddress=lukechai@outlook.com
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: 117.28.233.234:34633 [LukeMBP] Peer Connection Initiated with [AF_INET]117.28.233.234:34633
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: LukeMBP/117.28.233.234:34633 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: LukeMBP/117.28.233.234:34633 MULTI: Learn: 10.8.0.6 -> LukeMBP/117.28.233.234:34633
Mar 23 03:42:53 VPN-PPTP ovpn-server[26660]: LukeMBP/117.28.233.234:34633 MULTI: primary virtual IP for LukeMBP/117.28.233.234:34633: 10.8.0.6
Mar 23 03:42:55 VPN-PPTP ovpn-server[26660]: LukeMBP/117.28.233.234:34633 PUSH: Received control message: 'PUSH_REQUEST'
Mar 23 03:42:55 VPN-PPTP ovpn-server[26660]: LukeMBP/117.28.233.234:34633 send_push_reply(): safe_cap=940
Mar 23 03:42:55 VPN-PPTP ovpn-server[26660]: LukeMBP/117.28.233.234:34633 SENT CONTROL [LukeMBP]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mar 23 03:43:48 VPN-PPTP ovpn-server[26660]: 1.31.59.219:40095 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mar 23 03:43:48 VPN-PPTP ovpn-server[26660]: 1.31.59.219:40095 TLS Error: TLS handshake failed
Mar 23 03:43:48 VPN-PPTP ovpn-server[26660]: 1.31.59.219:40095 SIGUSR1[soft,tls-error] received, client-instance restarting
Client log as below.
Mon Mar 23 15:41:30 2015 NOTE: --user option is not implemented on Windows
Mon Mar 23 15:41:30 2015 NOTE: --group option is not implemented on Windows
Mon Mar 23 15:41:30 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Mon Mar 23 15:41:30 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Mon Mar 23 15:41:30 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Mar 23 15:41:30 2015 Need hold release from management interface, waiting...
Mon Mar 23 15:41:30 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Mar 23 15:41:30 2015 MANAGEMENT: CMD 'state on'
Mon Mar 23 15:41:30 2015 MANAGEMENT: CMD 'log all on'
Mon Mar 23 15:41:30 2015 MANAGEMENT: CMD 'hold off'
Mon Mar 23 15:41:30 2015 MANAGEMENT: CMD 'hold release'
Mon Mar 23 15:41:30 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Mar 23 15:41:30 2015 UDPv4 link local: [undef]
Mon Mar 23 15:41:30 2015 UDPv4 link remote: [AF_INET]104.236.82.206:1194
Mon Mar 23 15:41:30 2015 MANAGEMENT: >STATE:1427096490,WAIT,,,
Mon Mar 23 15:41:30 2015 MANAGEMENT: >STATE:1427096490,AUTH,,,
Mon Mar 23 15:41:30 2015 TLS: Initial packet from [AF_INET]104.236.82.206:1194, sid=10759bd0 995bb965
Mon Mar 23 15:41:32 2015 VERIFY OK: depth=1, C=CN, ST=FJ, L=XiaMen, O=Luke-Corp, OU=LukeCorpUnit, CN=Luke-Corp CA, name=server, emailAddress=lukechai@outlook.com
Mon Mar 23 15:41:32 2015 VERIFY OK: nsCertType=SERVER
Mon Mar 23 15:41:32 2015 VERIFY OK: depth=0, C=CN, ST=FJ, L=XiaMen, O=Luke-Corp, OU=LukeCorpUnit, CN=server, name=server, emailAddress=lukechai@outlook.com
Mon Mar 23 15:41:35 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Mar 23 15:41:35 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 23 15:41:35 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Mar 23 15:41:35 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 23 15:41:35 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Mar 23 15:41:35 2015 [server] Peer Connection Initiated with [AF_INET]104.236.82.206:1194
Mon Mar 23 15:41:36 2015 MANAGEMENT: >STATE:1427096496,GET_CONFIG,,,
Mon Mar 23 15:41:37 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Mar 23 15:41:37 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mon Mar 23 15:41:37 2015 OPTIONS IMPORT: timers and/or timeouts modified
Mon Mar 23 15:41:37 2015 OPTIONS IMPORT: --ifconfig/up options modified
Mon Mar 23 15:41:37 2015 OPTIONS IMPORT: route options modified
Mon Mar 23 15:41:37 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Mar 23 15:41:37 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Mar 23 15:41:37 2015 MANAGEMENT: >STATE:1427096497,ASSIGN_IP,,10.8.0.6,
Mon Mar 23 15:41:37 2015 open_tun, tt->ipv6=0
Mon Mar 23 15:41:37 2015 TAP-WIN32 device [Local Area Connection 5] opened: \\.\Global\{42AE6740-74FA-42FA-B869-8B5F29187016}.tap
Mon Mar 23 15:41:37 2015 TAP-Windows Driver Version 9.21
Mon Mar 23 15:41:37 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {42AE6740-74FA-42FA-B869-8B5F29187016} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Mar 23 15:41:37 2015 Successful ARP Flush on interface [73] {42AE6740-74FA-42FA-B869-8B5F29187016}
Mon Mar 23 15:41:42 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Mon Mar 23 15:41:42 2015 C:\Windows\system32\route.exe ADD 104.236.82.206 MASK 255.255.255.255 192.168.0.1
Mon Mar 23 15:41:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Mar 23 15:41:42 2015 Route addition via IPAPI succeeded [adaptive]
Mon Mar 23 15:41:42 2015 C:\Windows\system32\route.exe ADD 192.168.0.1 MASK 255.255.255.255 192.168.0.1 IF 11
Mon Mar 23 15:41:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Mar 23 15:41:42 2015 Route addition via IPAPI succeeded [adaptive]
Mon Mar 23 15:41:42 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Mon Mar 23 15:41:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Mar 23 15:41:42 2015 Route addition via IPAPI succeeded [adaptive]
Mon Mar 23 15:41:42 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Mon Mar 23 15:41:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Mar 23 15:41:42 2015 Route addition via IPAPI succeeded [adaptive]
Mon Mar 23 15:41:42 2015 MANAGEMENT: >STATE:1427096502,ADD_ROUTES,,,
Mon Mar 23 15:41:42 2015 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Mon Mar 23 15:41:42 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Mar 23 15:41:42 2015 Route addition via IPAPI succeeded [adaptive]
Mon Mar 23 15:41:42 2015 Initialization Sequence Completed
Mon Mar 23 15:41:42 2015 MANAGEMENT: >STATE:1427096502,CONNECTED,SUCCESS,10.8.0.6,104.236.82.206
UFW status as below.
root@VPN-PPTP:~# ufw status
Status: active
To Action From
-- ------ ----
22 ALLOW Anywhere
1194/udp ALLOW Anywhere
1723 ALLOW Anywhere
21/tcp ALLOW Anywhere
1194/tcp ALLOW Anywhere
22 (v6) ALLOW Anywhere (v6)
1194/udp (v6) ALLOW Anywhere (v6)
1723 (v6) ALLOW Anywhere (v6)
21/tcp (v6) ALLOW Anywhere (v6)
1194/tcp (v6) ALLOW Anywhere (v6)
server.conf as below.
root@VPN-PPTP:/etc/openvpn# grep -vE '^#|^;|^$' server.conf
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
Client profile as below.
client
dev tun
proto udp
remote 104.236.82.206 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
...
</cert>
<key>
...
-----END PRIVATE KEY-----
</key>
ns-cert-type server
comp-lzo
verb 3
