Connection problem - no ip assigned to client

filipovics

Hi!

I've used opnvpn for years, mostly on linux platforms, but I never met this problem before.
My new server is a Win2012 and I installed th newest opnvpn as a server. I made a bridge connection and changed a server.conf as I used it on other servers without any problem. The client runs on Win8. When I connect, the logs semm to be fine, the connection establishes well, but the client get no ip address and of course doesn't see anything from the remote network.
In the client log I can see the ip address, that it SHOULD assign, but ipconfig says nothing.

Any idea?

Thanks in advance!

Regards:
Las

maikcat

post your logs please...

Michael.

filipovics

Here are the relevant rows from the config file:

server:

port 1190
proto tcp
dev tap
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
server-bridge 192.168.1.20 255.255.255.0 192.168.1.206 192.168.1.210
server-bridge
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 4

client:

dev tap
proto tcp
remote 79.172.227.24 1190
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert laci.crt
key laci.key
ns-cert-type server
comp-lzo
verb 3
mute 20

Client log:

Fri Apr 17 10:28:34 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO]
[PKCS11] [IPv6] built on Dec 1 2014
Fri Apr 17 10:28:34 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Fri Apr 17 10:28:34 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Apr 17 10:28:34 2015 Attempting to establish TCP connection with [AF_INET]79
.172.227.24:1190 [nonblock]
Fri Apr 17 10:28:35 2015 TCP connection established with [AF_INET]79.172.227.24:
1190
Fri Apr 17 10:28:35 2015 TCPv4_CLIENT link local: [undef]
Fri Apr 17 10:28:35 2015 TCPv4_CLIENT link remote: [AF_INET]79.172.227.24:1190
Fri Apr 17 10:28:35 2015 TLS: Initial packet from [AF_INET]79.172.227.24:1190, s
id=520351e0 594f5b66
Fri Apr 17 10:28:35 2015 VERIFY OK: depth=1, C=HU, ST=BP, L=Budapest, O=OpenVPN,
OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Fri Apr 17 10:28:35 2015 VERIFY OK: nsCertType=SERVER
Fri Apr 17 10:28:35 2015 VERIFY OK: depth=0, C=HU, ST=BP, L=Budapest, O=OpenVPN,
OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Fri Apr 17 10:28:36 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with
128 bit key
Fri Apr 17 10:28:36 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1'
for HMAC authentication
Fri Apr 17 10:28:36 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with
128 bit key
Fri Apr 17 10:28:36 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1'
for HMAC authentication
Fri Apr 17 10:28:36 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES2
56-SHA, 1024 bit RSA
Fri Apr 17 10:28:36 2015 [changeme] Peer Connection Initiated with [AF_INET]79.1
72.227.24:1190
Fri Apr 17 10:28:38 2015 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Apr 17 10:28:38 2015 PUSH: Received control message: 'PUSH_REPLY,route-gatew
ay 192.168.1.20,ping 10,ping-restart 120,ifconfig 192.168.1.206 255.255.255.0'
Fri Apr 17 10:28:38 2015 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 17 10:28:38 2015 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 17 10:28:38 2015 OPTIONS IMPORT: route-related options modified
Fri Apr 17 10:28:38 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Apr 17 10:28:38 2015 open_tun, tt->ipv6=0
Fri Apr 17 10:28:38 2015 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{3A737
D06-B87B-4ABD-BC9F-618797BEE85A}.tap
Fri Apr 17 10:28:38 2015 TAP-Windows Driver Version 9.21
Fri Apr 17 10:28:38 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of
192.168.1.206/255.255.255.0 on interface {3A737D06-B87B-4ABD-BC9F-618797BEE85A}
[DHCP-serv: 192.168.1.0, lease-time: 31536000]
Fri Apr 17 10:28:38 2015 Successful ARP Flush on interface [11] {3A737D06-B87B-4
ABD-BC9F-618797BEE85A}
Fri Apr 17 10:28:43 2015 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Apr 17 10:28:43 2015 Route: Waiting for TUN/TAP interface to come up...
Fri Apr 17 10:28:48 2015 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Apr 17 10:28:48 2015 Route: Waiting for TUN/TAP interface to come up...
Fri Apr 17 10:28:49 2015 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Apr 17 10:28:49 2015 Route: Waiting for TUN/TAP interface to come up...
Fri Apr 17 10:28:50 2015 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Apr 17 10:28:50 2015 Route: Waiting for TUN/TAP interface to come up...
Fri Apr 17 10:28:51 2015 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Apr 17 10:28:51 2015 Route: Waiting for TUN/TAP interface to come up...
Fri Apr 17 10:28:52 2015 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Fri Apr 17 10:28:52 2015 Initialization Sequence Completed

Server log: - I put it into a next post to see it more simply ...

filipovics

Server log:

Thu Apr 16 21:33:46 2015 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 7 2014
Thu Apr 16 21:33:46 2015 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Apr 16 21:33:46 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Apr 16 21:33:46 2015 Diffie-Hellman initialized with 1024 bit key
Thu Apr 16 21:33:46 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Apr 16 21:33:46 2015 open_tun, tt->ipv6=0
Thu Apr 16 21:33:46 2015 TAP-WIN32 device [TAP] opened: \\.\Global\{15C52FE3-F27A-4594-A93B-9BBB482E11BE}.tap
Thu Apr 16 21:33:46 2015 TAP-Windows Driver Version 9.9
Thu Apr 16 21:33:46 2015 Sleeping for 10 seconds...
Thu Apr 16 21:33:56 2015 NOTE: FlushIpNetTable failed on interface [16] {15C52FE3-F27A-4594-A93B-9BBB482E11BE} (status=1168) : Az elem nem található.
Thu Apr 16 21:33:56 2015 Listening for incoming TCP connection on [undef]
Thu Apr 16 21:33:56 2015 TCPv4_SERVER link local (bound): [undef]
Thu Apr 16 21:33:56 2015 TCPv4_SERVER link remote: [undef]
Thu Apr 16 21:33:56 2015 MULTI: multi_init called, r=256 v=256
Thu Apr 16 21:33:56 2015 IFCONFIG POOL: base=192.168.1.205 size=6, ipv6=0
Thu Apr 16 21:33:56 2015 ifconfig_pool_read(), in='Laci,192.168.1.205', TODO: IPv6
Thu Apr 16 21:33:56 2015 succeeded -> ifconfig_pool_set()
Thu Apr 16 21:33:56 2015 IFCONFIG POOL LIST
Thu Apr 16 21:33:56 2015 Laci,192.168.1.205
Thu Apr 16 21:33:56 2015 MULTI: TCP INIT maxclients=60 maxevents=64
Thu Apr 16 21:33:56 2015 Initialization Sequence Completed
Thu Apr 16 21:34:50 2015 TCP connection established with [AF_INET]176.63.45.110:51671
Thu Apr 16 21:34:51 2015 176.63.45.110:51671 TLS: Initial packet from [AF_INET]176.63.45.110:51671, sid=1e302ded 8ac0b344
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 VERIFY OK: depth=1, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 VERIFY OK: depth=0, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=Laci, name=Laci, emailAddress=mail@host.domain
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Apr 16 21:34:52 2015 176.63.45.110:51671 [Laci] Peer Connection Initiated with [AF_INET]176.63.45.110:51671
Thu Apr 16 21:34:52 2015 Laci/176.63.45.110:51671 MULTI_sva: pool returned IPv4=192.168.1.205, IPv6=(Not enabled)
Thu Apr 16 21:34:54 2015 Laci/176.63.45.110:51671 PUSH: Received control message: 'PUSH_REQUEST'
Thu Apr 16 21:34:54 2015 Laci/176.63.45.110:51671 send_push_reply(): safe_cap=940
Thu Apr 16 21:34:54 2015 Laci/176.63.45.110:51671 SENT CONTROL [Laci]: 'PUSH_REPLY,route-gateway 192.168.1.20,ping 10,ping-restart 120,ifconfig 192.168.1.205 255.255.255.0' (status=1)
Thu Apr 16 21:34:54 2015 Laci/176.63.45.110:51671 MULTI: Learn: 00:ff:cb:9f:ac:6f -> Laci/176.63.45.110:51671
Thu Apr 16 21:39:39 2015 Laci/176.63.45.110:51671 Connection reset, restarting [-1]
Thu Apr 16 21:39:39 2015 Laci/176.63.45.110:51671 SIGUSR1[soft,connection-reset] received, client-instance restarting
Thu Apr 16 21:40:19 2015 TCP connection established with [AF_INET]176.63.45.110:53287
Thu Apr 16 21:40:20 2015 176.63.45.110:53287 TLS: Initial packet from [AF_INET]176.63.45.110:53287, sid=e5d52f25 f49198cd
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 VERIFY OK: depth=1, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 VERIFY OK: depth=0, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=Laci, name=Laci, emailAddress=mail@host.domain
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Apr 16 21:40:21 2015 176.63.45.110:53287 [Laci] Peer Connection Initiated with [AF_INET]176.63.45.110:53287
Thu Apr 16 21:40:21 2015 Laci/176.63.45.110:53287 MULTI_sva: pool returned IPv4=192.168.1.205, IPv6=(Not enabled)
Thu Apr 16 21:40:22 2015 Laci/176.63.45.110:53287 PUSH: Received control message: 'PUSH_REQUEST'
Thu Apr 16 21:40:22 2015 Laci/176.63.45.110:53287 send_push_reply(): safe_cap=940
Thu Apr 16 21:40:22 2015 Laci/176.63.45.110:53287 SENT CONTROL [Laci]: 'PUSH_REPLY,route-gateway 192.168.1.20,ping 10,ping-restart 120,ifconfig 192.168.1.205 255.255.255.0' (status=1)
Thu Apr 16 21:40:22 2015 Laci/176.63.45.110:53287 MULTI: Learn: 00:ff:cb:9f:ac:6f -> Laci/176.63.45.110:53287
Thu Apr 16 21:42:06 2015 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 7 2014
Thu Apr 16 21:42:06 2015 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Apr 16 21:42:06 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Thu Apr 16 21:42:07 2015 Diffie-Hellman initialized with 1024 bit key
Thu Apr 16 21:42:07 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Apr 16 21:42:07 2015 open_tun, tt->ipv6=0
Thu Apr 16 21:42:07 2015 TAP-WIN32 device [TAP] opened: \\.\Global\{15C52FE3-F27A-4594-A93B-9BBB482E11BE}.tap
Thu Apr 16 21:42:07 2015 TAP-Windows Driver Version 9.9
Thu Apr 16 21:42:07 2015 Sleeping for 10 seconds...
Thu Apr 16 21:42:17 2015 NOTE: FlushIpNetTable failed on interface [16] {15C52FE3-F27A-4594-A93B-9BBB482E11BE} (status=1168) : Az elem nem található.
Thu Apr 16 21:42:17 2015 Listening for incoming TCP connection on [undef]
Thu Apr 16 21:42:17 2015 TCPv4_SERVER link local (bound): [undef]
Thu Apr 16 21:42:17 2015 TCPv4_SERVER link remote: [undef]
Thu Apr 16 21:42:17 2015 MULTI: multi_init called, r=256 v=256
Thu Apr 16 21:42:17 2015 IFCONFIG POOL: base=192.168.1.205 size=6, ipv6=0
Thu Apr 16 21:42:17 2015 ifconfig_pool_read(), in='Laci,192.168.1.205', TODO: IPv6
Thu Apr 16 21:42:17 2015 succeeded -> ifconfig_pool_set()
Thu Apr 16 21:42:17 2015 IFCONFIG POOL LIST
Thu Apr 16 21:42:17 2015 Laci,192.168.1.205
Thu Apr 16 21:42:17 2015 MULTI: TCP INIT maxclients=60 maxevents=64
Thu Apr 16 21:42:17 2015 Initialization Sequence Completed
Thu Apr 16 21:42:54 2015 TCP connection established with [AF_INET]176.63.45.110:1037
Thu Apr 16 21:42:55 2015 176.63.45.110:1037 TLS: Initial packet from [AF_INET]176.63.45.110:1037, sid=d90101a7 30cb91f2
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 VERIFY OK: depth=1, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 VERIFY OK: depth=0, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=Laci, name=Laci, emailAddress=mail@host.domain
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Apr 16 21:42:56 2015 176.63.45.110:1037 [Laci] Peer Connection Initiated with [AF_INET]176.63.45.110:1037
Thu Apr 16 21:42:56 2015 Laci/176.63.45.110:1037 MULTI_sva: pool returned IPv4=192.168.1.205, IPv6=(Not enabled)
Thu Apr 16 21:42:57 2015 Laci/176.63.45.110:1037 PUSH: Received control message: 'PUSH_REQUEST'
Thu Apr 16 21:42:57 2015 Laci/176.63.45.110:1037 send_push_reply(): safe_cap=940
Thu Apr 16 21:42:57 2015 Laci/176.63.45.110:1037 SENT CONTROL [Laci]: 'PUSH_REPLY,route-gateway 192.168.1.20,ping 10,ping-restart 120,ifconfig 192.168.1.205 255.255.255.0' (status=1)
Thu Apr 16 21:42:57 2015 Laci/176.63.45.110:1037 MULTI: Learn: 00:ff:cb:9f:ac:6f -> Laci/176.63.45.110:1037
Thu Apr 16 21:43:21 2015 Laci/176.63.45.110:1037 Connection reset, restarting [-1]
Thu Apr 16 21:43:21 2015 Laci/176.63.45.110:1037 SIGUSR1[soft,connection-reset] received, client-instance restarting
Fri Apr 17 10:26:06 2015 us=387089 Current Parameter Settings:
Fri Apr 17 10:26:06 2015 us=387089 config = 'C:\Program Files\OpenVPN\config\server.ovpn'
Fri Apr 17 10:26:06 2015 us=387089 mode = 1
Fri Apr 17 10:26:06 2015 us=387089 show_ciphers = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 show_digests = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 show_engines = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 genkey = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 key_pass_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 show_tls_ciphers = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 Connection profiles [default]:
Fri Apr 17 10:26:06 2015 us=387089 proto = tcp-server
Fri Apr 17 10:26:06 2015 us=387089 local = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 local_port = 1190
Fri Apr 17 10:26:06 2015 us=387089 remote = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 remote_port = 1190
Fri Apr 17 10:26:06 2015 us=387089 remote_float = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 bind_defined = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 bind_local = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 connect_retry_seconds = 5
Fri Apr 17 10:26:06 2015 us=387089 connect_timeout = 10
Fri Apr 17 10:26:06 2015 us=387089 connect_retry_max = 0
Fri Apr 17 10:26:06 2015 us=387089 socks_proxy_server = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 socks_proxy_port = 0
Fri Apr 17 10:26:06 2015 us=387089 socks_proxy_retry = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 tun_mtu = 1500
Fri Apr 17 10:26:06 2015 us=387089 tun_mtu_defined = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 link_mtu = 1500
Fri Apr 17 10:26:06 2015 us=387089 link_mtu_defined = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 tun_mtu_extra = 32
Fri Apr 17 10:26:06 2015 us=387089 tun_mtu_extra_defined = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 mtu_discover_type = -1
Fri Apr 17 10:26:06 2015 us=387089 fragment = 0
Fri Apr 17 10:26:06 2015 us=387089 mssfix = 1450
Fri Apr 17 10:26:06 2015 us=387089 explicit_exit_notification = 0
Fri Apr 17 10:26:06 2015 us=387089 Connection profiles END
Fri Apr 17 10:26:06 2015 us=387089 remote_random = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 ipchange = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 dev = 'tap'
Fri Apr 17 10:26:06 2015 us=387089 dev_type = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 dev_node = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 lladdr = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 topology = 1
Fri Apr 17 10:26:06 2015 us=387089 tun_ipv6 = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_local = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_remote_netmask = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_noexec = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_nowarn = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_ipv6_local = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_ipv6_netbits = 0
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_ipv6_remote = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 shaper = 0
Fri Apr 17 10:26:06 2015 us=387089 mtu_test = 0
Fri Apr 17 10:26:06 2015 us=387089 mlock = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 keepalive_ping = 10
Fri Apr 17 10:26:06 2015 us=387089 keepalive_timeout = 120
Fri Apr 17 10:26:06 2015 us=387089 inactivity_timeout = 0
Fri Apr 17 10:26:06 2015 us=387089 ping_send_timeout = 10
Fri Apr 17 10:26:06 2015 us=387089 ping_rec_timeout = 240
Fri Apr 17 10:26:06 2015 us=387089 ping_rec_timeout_action = 2
Fri Apr 17 10:26:06 2015 us=387089 ping_timer_remote = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 remap_sigusr1 = 0
Fri Apr 17 10:26:06 2015 us=387089 persist_tun = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 persist_local_ip = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 persist_remote_ip = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 persist_key = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 passtos = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 resolve_retry_seconds = 1000000000
Fri Apr 17 10:26:06 2015 us=387089 username = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 groupname = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 chroot_dir = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 cd_dir = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 writepid = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 up_script = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 down_script = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 down_pre = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 up_restart = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 up_delay = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 daemon = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 inetd = 0
Fri Apr 17 10:26:06 2015 us=387089 log = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 suppress_timestamps = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 nice = 0
Fri Apr 17 10:26:06 2015 us=387089 verbosity = 4
Fri Apr 17 10:26:06 2015 us=387089 mute = 0
Fri Apr 17 10:26:06 2015 us=387089 status_file = 'openvpn-status.log'
Fri Apr 17 10:26:06 2015 us=387089 status_file_version = 1
Fri Apr 17 10:26:06 2015 us=387089 status_file_update_freq = 60
Fri Apr 17 10:26:06 2015 us=387089 occ = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 rcvbuf = 0
Fri Apr 17 10:26:06 2015 us=387089 sndbuf = 0
Fri Apr 17 10:26:06 2015 us=387089 sockflags = 0
Fri Apr 17 10:26:06 2015 us=387089 fast_io = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 lzo = 7
Fri Apr 17 10:26:06 2015 us=387089 route_script = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 route_default_gateway = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 route_default_metric = 0
Fri Apr 17 10:26:06 2015 us=387089 route_noexec = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 route_delay = 0
Fri Apr 17 10:26:06 2015 us=387089 route_delay_window = 30
Fri Apr 17 10:26:06 2015 us=387089 route_delay_defined = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 route_nopull = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 route_gateway_via_dhcp = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 max_routes = 100
Fri Apr 17 10:26:06 2015 us=387089 allow_pull_fqdn = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 management_addr = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 management_port = 0
Fri Apr 17 10:26:06 2015 us=387089 management_user_pass = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 management_log_history_cache = 250
Fri Apr 17 10:26:06 2015 us=387089 management_echo_buffer_size = 100
Fri Apr 17 10:26:06 2015 us=387089 management_write_peer_info_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 management_client_user = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 management_client_group = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 management_flags = 0
Fri Apr 17 10:26:06 2015 us=387089 shared_secret_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 key_direction = 0
Fri Apr 17 10:26:06 2015 us=387089 ciphername_defined = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 ciphername = 'BF-CBC'
Fri Apr 17 10:26:06 2015 us=387089 authname_defined = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 authname = 'SHA1'
Fri Apr 17 10:26:06 2015 us=387089 prng_hash = 'SHA1'
Fri Apr 17 10:26:06 2015 us=387089 prng_nonce_secret_len = 16
Fri Apr 17 10:26:06 2015 us=387089 keysize = 0
Fri Apr 17 10:26:06 2015 us=387089 engine = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 replay = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 mute_replay_warnings = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 replay_window = 64
Fri Apr 17 10:26:06 2015 us=387089 replay_time = 15
Fri Apr 17 10:26:06 2015 us=387089 packet_id_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 use_iv = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 test_crypto = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 tls_server = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 tls_client = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 key_method = 2
Fri Apr 17 10:26:06 2015 us=387089 ca_file = 'ca.crt'
Fri Apr 17 10:26:06 2015 us=387089 ca_path = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 dh_file = 'dh1024.pem'
Fri Apr 17 10:26:06 2015 us=387089 cert_file = 'server.crt'
Fri Apr 17 10:26:06 2015 us=387089 priv_key_file = 'server.key'
Fri Apr 17 10:26:06 2015 us=387089 pkcs12_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 cryptoapi_cert = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 cipher_list = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 tls_verify = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 tls_export_cert = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 verify_x509_type = 0
Fri Apr 17 10:26:06 2015 us=387089 verify_x509_name = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 crl_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 ns_cert_type = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku[i] = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku[i] = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku[i] = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku[i] = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku[i] = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_ku[i] = 0
Fri Apr 17 10:26:06 2015 us=387089 remote_cert_eku = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 ssl_flags = 0
Fri Apr 17 10:26:06 2015 us=387089 tls_timeout = 2
Fri Apr 17 10:26:06 2015 us=387089 renegotiate_bytes = 0
Fri Apr 17 10:26:06 2015 us=387089 renegotiate_packets = 0
Fri Apr 17 10:26:06 2015 us=387089 renegotiate_seconds = 3600
Fri Apr 17 10:26:06 2015 us=387089 handshake_window = 60
Fri Apr 17 10:26:06 2015 us=387089 transition_window = 3600
Fri Apr 17 10:26:06 2015 us=387089 single_session = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 push_peer_info = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 tls_exit = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 tls_auth_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_protected_authentication = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_private_mode = 00000000
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_cert_private = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_pin_cache_period = -1
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_id = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 pkcs11_id_management = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 server_network = 0.0.0.0
Fri Apr 17 10:26:06 2015 us=387089 server_netmask = 0.0.0.0
Fri Apr 17 10:26:06 2015 us=387089 server_network_ipv6 = ::
Fri Apr 17 10:26:06 2015 us=387089 server_netbits_ipv6 = 0
Fri Apr 17 10:26:06 2015 us=387089 server_bridge_ip = 192.168.1.20
Fri Apr 17 10:26:06 2015 us=387089 server_bridge_netmask = 255.255.255.0
Fri Apr 17 10:26:06 2015 us=387089 server_bridge_pool_start = 192.168.1.206
Fri Apr 17 10:26:06 2015 us=387089 server_bridge_pool_end = 192.168.1.210
Fri Apr 17 10:26:06 2015 us=387089 push_entry = 'route-gateway 192.168.1.20'
Fri Apr 17 10:26:06 2015 us=387089 push_entry = 'ping 10'
Fri Apr 17 10:26:06 2015 us=387089 push_entry = 'ping-restart 120'
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_pool_defined = ENABLED
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_pool_start = 192.168.1.206
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_pool_end = 192.168.1.210
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_pool_netmask = 255.255.255.0
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_pool_persist_refresh_freq = 600
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_ipv6_pool_defined = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_ipv6_pool_base = ::
Fri Apr 17 10:26:06 2015 us=387089 ifconfig_ipv6_pool_netbits = 0
Fri Apr 17 10:26:06 2015 us=387089 n_bcast_buf = 256
Fri Apr 17 10:26:06 2015 us=387089 tcp_queue_limit = 64
Fri Apr 17 10:26:06 2015 us=387089 real_hash_size = 256
Fri Apr 17 10:26:06 2015 us=387089 virtual_hash_size = 256
Fri Apr 17 10:26:06 2015 us=387089 client_connect_script = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 learn_address_script = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 client_disconnect_script = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 client_config_dir = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 ccd_exclusive = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 tmp_dir = 'C:\Users\RENDSZ~1\AppData\Local\Temp\2\'
Fri Apr 17 10:26:06 2015 us=387089 push_ifconfig_defined = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 push_ifconfig_local = 0.0.0.0
Fri Apr 17 10:26:06 2015 us=387089 push_ifconfig_remote_netmask = 0.0.0.0
Fri Apr 17 10:26:06 2015 us=387089 push_ifconfig_ipv6_defined = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 push_ifconfig_ipv6_local = ::/0
Fri Apr 17 10:26:06 2015 us=387089 push_ifconfig_ipv6_remote = ::
Fri Apr 17 10:26:06 2015 us=387089 enable_c2c = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 duplicate_cn = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 cf_max = 0
Fri Apr 17 10:26:06 2015 us=387089 cf_per = 0
Fri Apr 17 10:26:06 2015 us=387089 max_clients = 1024
Fri Apr 17 10:26:06 2015 us=387089 max_routes_per_client = 256
Fri Apr 17 10:26:06 2015 us=387089 auth_user_pass_verify_script = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 auth_user_pass_verify_script_via_file = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 client = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 pull = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 auth_user_pass_file = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 show_net_up = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 route_method = 0
Fri Apr 17 10:26:06 2015 us=387089 ip_win32_defined = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 ip_win32_type = 3
Fri Apr 17 10:26:06 2015 us=387089 dhcp_masq_offset = 0
Fri Apr 17 10:26:06 2015 us=387089 dhcp_lease_time = 31536000
Fri Apr 17 10:26:06 2015 us=387089 tap_sleep = 10
Fri Apr 17 10:26:06 2015 us=387089 dhcp_options = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 dhcp_renew = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 dhcp_pre_release = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 dhcp_release = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 domain = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 netbios_scope = '[UNDEF]'
Fri Apr 17 10:26:06 2015 us=387089 netbios_node_type = 0
Fri Apr 17 10:26:06 2015 us=387089 disable_nbt = DISABLED
Fri Apr 17 10:26:06 2015 us=387089 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 7 2014
Fri Apr 17 10:26:06 2015 us=387089 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Fri Apr 17 10:26:06 2015 us=387089 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Fri Apr 17 10:26:06 2015 us=543346 Diffie-Hellman initialized with 1024 bit key
Fri Apr 17 10:26:06 2015 us=543346 TLS-Auth MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Apr 17 10:26:06 2015 us=543346 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Apr 17 10:26:06 2015 us=543346 open_tun, tt->ipv6=0
Fri Apr 17 10:26:06 2015 us=543346 TAP-WIN32 device [TAP] opened: \\.\Global\{15C52FE3-F27A-4594-A93B-9BBB482E11BE}.tap
Fri Apr 17 10:26:06 2015 us=543346 TAP-Windows Driver Version 9.9
Fri Apr 17 10:26:06 2015 us=543346 TAP-Windows MTU=1500
Fri Apr 17 10:26:06 2015 us=543346 Sleeping for 10 seconds...
Fri Apr 17 10:26:16 2015 us=566033 NOTE: FlushIpNetTable failed on interface [16] {15C52FE3-F27A-4594-A93B-9BBB482E11BE} (status=1168) : Az elem nem található.
Fri Apr 17 10:26:16 2015 us=566033 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Fri Apr 17 10:26:16 2015 us=566033 Listening for incoming TCP connection on [undef]
Fri Apr 17 10:26:16 2015 us=566033 TCPv4_SERVER link local (bound): [undef]
Fri Apr 17 10:26:16 2015 us=566033 TCPv4_SERVER link remote: [undef]
Fri Apr 17 10:26:16 2015 us=566033 MULTI: multi_init called, r=256 v=256
Fri Apr 17 10:26:16 2015 us=566033 IFCONFIG POOL: base=192.168.1.206 size=5, ipv6=0
Fri Apr 17 10:26:16 2015 us=566033 MULTI: TCP INIT maxclients=60 maxevents=64
Fri Apr 17 10:26:16 2015 us=566033 Initialization Sequence Completed
Fri Apr 17 10:28:34 2015 us=223517 MULTI: multi_create_instance called
Fri Apr 17 10:28:34 2015 us=223517 Re-using SSL/TLS context
Fri Apr 17 10:28:34 2015 us=223517 LZO compression initialized
Fri Apr 17 10:28:34 2015 us=223517 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Apr 17 10:28:34 2015 us=223517 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Fri Apr 17 10:28:34 2015 us=223517 Local Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Apr 17 10:28:34 2015 us=223517 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Apr 17 10:28:34 2015 us=223517 Local Options hash (VER=V4): '3e6d1056'
Fri Apr 17 10:28:34 2015 us=223517 Expected Remote Options hash (VER=V4): '31fdf004'
Fri Apr 17 10:28:34 2015 us=223517 TCP connection established with [AF_INET]178.48.146.136:50219
Fri Apr 17 10:28:34 2015 us=223517 TCPv4_SERVER link local: [undef]
Fri Apr 17 10:28:34 2015 us=223517 TCPv4_SERVER link remote: [AF_INET]178.48.146.136:50219
Fri Apr 17 10:28:35 2015 us=207949 178.48.146.136:50219 TLS: Initial packet from [AF_INET]178.48.146.136:50219, sid=bc1d2422 5e29049f
Fri Apr 17 10:28:35 2015 us=832982 178.48.146.136:50219 VERIFY OK: depth=1, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Fri Apr 17 10:28:35 2015 us=832982 178.48.146.136:50219 VERIFY OK: depth=0, C=HU, ST=BP, L=Budapest, O=OpenVPN, OU=changeme, CN=Laci, name=Laci, emailAddress=mail@host.domain
Fri Apr 17 10:28:35 2015 us=926730 178.48.146.136:50219 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 17 10:28:35 2015 us=926730 178.48.146.136:50219 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 17 10:28:35 2015 us=926730 178.48.146.136:50219 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 17 10:28:35 2015 us=926730 178.48.146.136:50219 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 17 10:28:36 2015 us=20491 178.48.146.136:50219 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 17 10:28:36 2015 us=20491 178.48.146.136:50219 [Laci] Peer Connection Initiated with [AF_INET]178.48.146.136:50219
Fri Apr 17 10:28:36 2015 us=20491 Laci/178.48.146.136:50219 MULTI_sva: pool returned IPv4=192.168.1.206, IPv6=(Not enabled)
Fri Apr 17 10:28:37 2015 us=973719 Laci/178.48.146.136:50219 PUSH: Received control message: 'PUSH_REQUEST'
Fri Apr 17 10:28:37 2015 us=973719 Laci/178.48.146.136:50219 send_push_reply(): safe_cap=940
Fri Apr 17 10:28:37 2015 us=973719 Laci/178.48.146.136:50219 SENT CONTROL [Laci]: 'PUSH_REPLY,route-gateway 192.168.1.20,ping 10,ping-restart 120,ifconfig 192.168.1.206 255.255.255.0' (status=1)
Fri Apr 17 10:28:38 2015 us=83092 Laci/178.48.146.136:50219 MULTI: Learn: 00:ff:3a:73:7d:06 -> Laci/178.48.146.136:50219

maikcat

you are using bridging,

did you bridged ethernet & tap interface before you start openvpn?

also remove this from your server config

server-bridge

Michael.

filipovics

Of course, at first I built up the bridge, set the ip address and so, after tried the vpn config and connection.
Why should I remove this line. Isn't this, who tells a bridge mode?
I'm using it on every other servers and it's in the conf everywhere.
I really don't want to argue you, I'm not a pro, just asking. :-)

filipovics

I removed, restarted, no change ... :-(

maikcat

If --server-bridge is used without any parameters, it will enable a DHCP-proxy mode

you must use either server-bridge or server-bridge <ip range> not both...

did you enabled ip forwarding?
did you disabled for testing windows firewall?
which installer did you use?

Michael.

filipovics

I tried to disable FW, and I installed it from here:
https://swupdate.openvpn.org/community/releases/openvpn-install-2.3.6-I603-x86_64.exe
How can I turn on ip forwarding (Win srv 2012)?

Traffic

filipovics wroteip forwarding (Win srv 2012)?

See:
https://community.openvpn.net/openvpn/wiki/265-how-do-i-enable-ip-forwarding

filipovics

Nope. I found thir registry entry and it was set to 0, now I set it to 1.
Afternoon I'll try to restart the server, maybe ...

Any other idea?

Traffic

FYI:

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

perhaps the client LAN is conflicting ..

filipovics

My LAN is 10.10.0.X

Traffic

Which LAN ?

Clearly not your server:

filipovics wroteserver-bridge 192.168.1.20 255.255.255.0 192.168.1.206 192.168.1.210
server-bridge <<-- DELETE THIS !!!

Also, OpenVPN requires that the Windows DHCP Client Service is started on server and client ..

filipovics

So the LAN on the server side is 192.168.1.X, and the server's address is 192.168.1.20 as in the config file.
The client LAN is 10.10.0.X
DHCP client service is installed and run on both side. A server bridge - line is commented out now, but it didn't help.

Traffic

Please post details of ipconfig /all from server and client while openvpn is running.

filipovics

Here they are:

server:

Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. Minden jog fenntartva.

c:\Program Files\OpenVPN\config>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : server
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Network Bridge:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Network Adapter Multiplexor Dri
ver
Physical Address. . . . . . . . . : 00-FF-15-C5-2F-E3
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.20(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DNS Servers . . . . . . . . . . . : 192.168.1.254
8.8.8.8
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter LAN2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
VBD Client) #40
Physical Address. . . . . . . . . : D4-AE-52-D2-64-6D
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:389d:453:3f57:feeb(Prefe
rred)
Link-local IPv6 Address . . . . . : fe80::389d:453:3f57:feeb%14(Preferred)
Default Gateway . . . . . . . . . : ::
DHCPv6 IAID . . . . . . . . . . . : 452984832
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1C-18-A7-9C-D4-AE-52-D2-64-6C

NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{BC7EE3D6-63FF-48E4-AC2A-F8392E07C00D}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Client:

Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. Minden jog fenntartva.

C:\Users\Laszlo>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : LasPC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet 3:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-3A-73-7D-06
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::3cb0:1236:9a7e:4c0%11(Preferred)
Autoconfiguration IPv4 Address. . : 169.254.4.192(Tentative)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 436272954
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-5F-E0-2D-60-A4-4C-42-4F-3E

DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth PAN Network Adapter
Physical Address. . . . . . . . . : 00-15-83-4C-1E-08
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE sorozatú vezérlő
Physical Address. . . . . . . . . : 60-A4-4C-42-4F-3E
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.10.0.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.0.1
DNS Servers . . . . . . . . . . . : 213.46.246.54
213.46.246.53
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter VirtualBox Host-Only Network:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VirtualBox Host-Only Ethernet Adapter
Physical Address. . . . . . . . . : 08-00-27-00-98-12
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::edd3:8096:9568:da40%7(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.56.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 319291431
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-5F-E0-2D-60-A4-4C-42-4F-3E

DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{94D1C0DB-8CA7-4EC0-BB83-D4A5E9392596}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{37A649E2-9C30-4DFA-A3E2-E3AF9AD3D9A8}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP adapter #5
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Traffic

Server:
You do not appear to have a TAP adapter ..
Is the TAP adapter enabled ?

Client:

filipovics wroteEthernet adapter Ethernet 3:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-3A-73-7D-06
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::3cb0:1236:9a7e:4c0%11(Preferred)
Autoconfiguration IPv4 Address. . : 169.254.4.192(Tentative)

the client has failed to assign a DHCP IP address .. 169.254/16 is a range reserved by Microsoft for failed DHCP assignment.

See: Invalid IP address

Are you sure the Windows DHCP Client Service is started ?
Possibly you need to check your client firewall ..

Also, you may want to clearly define your TAP adapters in your configs and network properties. EI: In network properties specifically name the TAP adapter (I use the name OVPN or TAP0 etc) and in your config files use --dev-node OVPN or --dev-node TAP0 and --dev-type tap

See --dev-node and --dev-type in The Manual v23x

There is one other thing I am aware of ..

The server-bridge directive can point to either the IP address of the bridge adapter or the default gateway of the server lan.

In your case you could use:

server-bridge 192.168.1.254 255.255.255.0 192.168.1.206 192.168.1.210

When I used Windows I found that using server-bridge with the IP address of the bridge adapter did not work correctly; broadcast packets had the wrong ethernet address. Instead of destination FF:FF:FF:FF:FF:FF the packet had the destination address of the bridge adapter and so broadcasts were not replicated to all clients .. possibly this is related.

filipovics

I tried all these, and turned off the client FW as well, but nothing changed.

Traffic

filipovics wroteI tried all these

Traffic wroteServer:
You do not appear to have a TAP adapter

filipovics wroteserver:

Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. Minden jog fenntartva.

c:\Program Files\OpenVPN\config>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : server
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Network Bridge:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Network Adapter Multiplexor Dri
ver
Physical Address. . . . . . . . . : 00-FF-15-C5-2F-E3
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.20(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DNS Servers . . . . . . . . . . . : 192.168.1.254
8.8.8.8
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter LAN2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
VBD Client) #40
Physical Address. . . . . . . . . : D4-AE-52-D2-64-6D
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:389d:453:3f57:feeb(Prefe
rred)
Link-local IPv6 Address . . . . . : fe80::389d:453:3f57:feeb%14(Preferred)
Default Gateway . . . . . . . . . : ::
DHCPv6 IAID . . . . . . . . . . . : 452984832
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1C-18-A7-9C-D4-AE-52-D2-64-6C

NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{BC7EE3D6-63FF-48E4-AC2A-F8392E07C00D}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

so where is the TAP adapter ?