Hi all,
First sorry for my english...
Then, i have the same problem of this man:
https://forums.openvpn.net/topic9768.html
So i have an Synology with openVPN installed, i have sucessfully connected to the device (from an external connexion) but cannot ping my remote network ...
---
So, i have an computer at my home (PC1) with address ip 192.168.1.2
The openVPN server (synology) with ip address 192.168.1.100
The routeur have the address ip 192.168.1.1
--
From my office with an external connexion, i have an laptop (PC2) with address ip 192.168.9.100.
---
Here is my config:
dev tun
tls-client
remote EXTERNAL_IP_OF_PC1 1194
redirect-gateway
pull
proto tcp-client
script-security 2
ca ca.crt
comp-lzo
reneg-sec 0
auth-user-pass
verb 4
And here is the result of
verb 4
Tue May 12 20:09:23 2015 pkcs11_protected_authentication = DISABLED
Tue May 12 20:09:23 2015 pkcs11_protected_authentication = DISABLED
Tue May 12 20:09:23 2015 pkcs11_protected_authentication = DISABLED
Tue May 12 20:09:23 2015 pkcs11_protected_authentication = DISABLED
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_private_mode = 00000000
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_cert_private = DISABLED
Tue May 12 20:09:23 2015 pkcs11_pin_cache_period = -1
Tue May 12 20:09:23 2015 pkcs11_id = '[UNDEF]'
Tue May 12 20:09:23 2015 pkcs11_id_management = DISABLED
Tue May 12 20:09:23 2015 server_network = 0.0.0.0
Tue May 12 20:09:23 2015 server_netmask = 0.0.0.0
Tue May 12 20:09:23 2015 server_network_ipv6 = ::
Tue May 12 20:09:23 2015 server_netbits_ipv6 = 0
Tue May 12 20:09:23 2015 server_bridge_ip = 0.0.0.0
Tue May 12 20:09:23 2015 server_bridge_netmask = 0.0.0.0
Tue May 12 20:09:23 2015 server_bridge_pool_start = 0.0.0.0
Tue May 12 20:09:23 2015 server_bridge_pool_end = 0.0.0.0
Tue May 12 20:09:23 2015 ifconfig_pool_defined = DISABLED
Tue May 12 20:09:23 2015 ifconfig_pool_start = 0.0.0.0
Tue May 12 20:09:23 2015 ifconfig_pool_end = 0.0.0.0
Tue May 12 20:09:23 2015 ifconfig_pool_netmask = 0.0.0.0
Tue May 12 20:09:23 2015 ifconfig_pool_persist_filename = '[UNDEF]'
Tue May 12 20:09:23 2015 ifconfig_pool_persist_refresh_freq = 600
Tue May 12 20:09:23 2015 ifconfig_ipv6_pool_defined = DISABLED
Tue May 12 20:09:23 2015 ifconfig_ipv6_pool_base = ::
Tue May 12 20:09:23 2015 ifconfig_ipv6_pool_netbits = 0
Tue May 12 20:09:23 2015 n_bcast_buf = 256
Tue May 12 20:09:23 2015 tcp_queue_limit = 64
Tue May 12 20:09:23 2015 real_hash_size = 256
Tue May 12 20:09:23 2015 virtual_hash_size = 256
Tue May 12 20:09:23 2015 client_connect_script = '[UNDEF]'
Tue May 12 20:09:23 2015 learn_address_script = '[UNDEF]'
Tue May 12 20:09:23 2015 client_disconnect_script = '[UNDEF]'
Tue May 12 20:09:23 2015 client_config_dir = '[UNDEF]'
Tue May 12 20:09:23 2015 ccd_exclusive = DISABLED
Tue May 12 20:09:23 2015 tmp_dir = 'C:\Users\xxx\AppData\Local\Temp\'
Tue May 12 20:09:23 2015 push_ifconfig_defined = DISABLED
Tue May 12 20:09:23 2015 push_ifconfig_local = 0.0.0.0
Tue May 12 20:09:23 2015 push_ifconfig_remote_netmask = 0.0.0.0
Tue May 12 20:09:23 2015 push_ifconfig_ipv6_defined = DISABLED
Tue May 12 20:09:23 2015 push_ifconfig_ipv6_local = ::/0
Tue May 12 20:09:23 2015 push_ifconfig_ipv6_remote = ::
Tue May 12 20:09:23 2015 enable_c2c = DISABLED
Tue May 12 20:09:23 2015 duplicate_cn = DISABLED
Tue May 12 20:09:23 2015 cf_max = 0
Tue May 12 20:09:23 2015 cf_per = 0
Tue May 12 20:09:23 2015 max_clients = 1024
Tue May 12 20:09:23 2015 max_routes_per_client = 256
Tue May 12 20:09:23 2015 auth_user_pass_verify_script = '[UNDEF]'
Tue May 12 20:09:23 2015 auth_user_pass_verify_script_via_file = DISABLED
Tue May 12 20:09:23 2015 client = DISABLED
Tue May 12 20:09:23 2015 pull = ENABLED
Tue May 12 20:09:23 2015 auth_user_pass_file = 'stdin'
Tue May 12 20:09:23 2015 show_net_up = DISABLED
Tue May 12 20:09:23 2015 route_method = 0
Tue May 12 20:09:23 2015 ip_win32_defined = DISABLED
Tue May 12 20:09:23 2015 ip_win32_type = 3
Tue May 12 20:09:23 2015 dhcp_masq_offset = 0
Tue May 12 20:09:23 2015 dhcp_lease_time = 31536000
Tue May 12 20:09:23 2015 tap_sleep = 0
Tue May 12 20:09:23 2015 dhcp_options = DISABLED
Tue May 12 20:09:23 2015 dhcp_renew = DISABLED
Tue May 12 20:09:23 2015 dhcp_pre_release = DISABLED
Tue May 12 20:09:23 2015 dhcp_release = DISABLED
Tue May 12 20:09:23 2015 domain = '[UNDEF]'
Tue May 12 20:09:23 2015 netbios_scope = '[UNDEF]'
Tue May 12 20:09:23 2015 netbios_node_type = 0
Tue May 12 20:09:23 2015 disable_nbt = DISABLED
Tue May 12 20:09:23 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Tue May 12 20:09:23 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Tue May 12 20:09:23 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue May 12 20:09:23 2015 Need hold release from management interface, waiting...
Tue May 12 20:09:23 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue May 12 20:09:23 2015 MANAGEMENT: CMD 'state on'
Tue May 12 20:09:23 2015 MANAGEMENT: CMD 'log all on'
Tue May 12 20:09:24 2015 MANAGEMENT: CMD 'hold off'
Tue May 12 20:09:24 2015 MANAGEMENT: CMD 'hold release'
Tue May 12 20:09:35 2015 MANAGEMENT: CMD 'username "Auth" "xxx"'
Tue May 12 20:09:35 2015 MANAGEMENT: CMD 'password [...]'
Tue May 12 20:09:35 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue May 12 20:09:35 2015 LZO compression initialized
Tue May 12 20:09:35 2015 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue May 12 20:09:35 2015 Socket Buffers: R=[1048576->1048576] S=[49152->49152]
Tue May 12 20:09:35 2015 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 12 20:09:35 2015 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue May 12 20:09:35 2015 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue May 12 20:09:35 2015 Local Options hash (VER=V4): '69109d17'
Tue May 12 20:09:35 2015 Expected Remote Options hash (VER=V4): 'c0103fa8'
Tue May 12 20:09:35 2015 Attempting to establish TCP connection with [AF_INET]EXTERNAL_IP_OF_PC1:1194 [nonblock]
Tue May 12 20:09:35 2015 MANAGEMENT: >STATE:1431454175,TCP_CONNECT,,,
Tue May 12 20:09:36 2015 TCP connection established with [AF_INET]EXTERNAL_IP_OF_PC1:1194
Tue May 12 20:09:36 2015 TCPv4_CLIENT link local: [undef]
Tue May 12 20:09:36 2015 TCPv4_CLIENT link remote: [AF_INET]EXTERNAL_IP_OF_PC1:1194
Tue May 12 20:09:36 2015 MANAGEMENT: >STATE:1431454176,WAIT,,,
Tue May 12 20:09:36 2015 MANAGEMENT: >STATE:1431454176,AUTH,,,
Tue May 12 20:09:36 2015 TLS: Initial packet from [AF_INET]EXTERNAL_IP_OF_PC1:1194, sid=7f630e1c 4b2f7d4f
Tue May 12 20:09:36 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 12 20:09:37 2015 VERIFY OK: depth=1, C=TW, ST=Taiwan, L=Taipei, O=Synology Inc., OU=Certificate Authority, CN=Synology Inc. CA, emailAddress=product@synology.com
Tue May 12 20:09:37 2015 VERIFY OK: depth=0, C=TW, ST=Taiwan, L=Taipei, O=Synology Inc., OU=FTP Team, CN=synology.com, emailAddress=product@synology.com
Tue May 12 20:09:39 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 12 20:09:39 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 12 20:09:39 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 12 20:09:39 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 12 20:09:39 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 12 20:09:39 2015 [synology.com] Peer Connection Initiated with [AF_INET]EXTERNAL_IP_OF_PC1:1194
Tue May 12 20:09:40 2015 MANAGEMENT: >STATE:1431454180,GET_CONFIG,,,
Tue May 12 20:09:41 2015 SENT CONTROL [synology.com]: 'PUSH_REQUEST' (status=1)
Tue May 12 20:09:41 2015 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.0.0.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,route 10.0.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.0.0.6 10.0.0.5'
Tue May 12 20:09:41 2015 OPTIONS IMPORT: timers and/or timeouts modified
Tue May 12 20:09:41 2015 OPTIONS IMPORT: --ifconfig/up options modified
Tue May 12 20:09:41 2015 OPTIONS IMPORT: route options modified
Tue May 12 20:09:41 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue May 12 20:09:41 2015 MANAGEMENT: >STATE:1431454181,ASSIGN_IP,,10.0.0.6,
Tue May 12 20:09:41 2015 open_tun, tt->ipv6=0
Tue May 12 20:09:41 2015 TAP-WIN32 device [Connexion au réseau local 2] opened: \\.\Global\{9C825F7D-7063-48F1-8A97-FE1BEF4D311A}.tap
Tue May 12 20:09:41 2015 TAP-Windows Driver Version 9.21
Tue May 12 20:09:41 2015 TAP-Windows MTU=1500
Tue May 12 20:09:41 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.0.0.6/255.255.255.252 on interface {9C825F7D-7063-48F1-8A97-FE1BEF4D311A} [DHCP-serv: 10.0.0.5, lease-time: 31536000]
Tue May 12 20:09:41 2015 NOTE: FlushIpNetTable failed on interface [17] {9C825F7D-7063-48F1-8A97-FE1BEF4D311A} (status=5) : Accès refusé.
Tue May 12 20:09:46 2015 TEST ROUTES: 4/4 succeeded len=3 ret=1 a=0 u/d=up
Tue May 12 20:09:46 2015 C:\Windows\system32\route.exe ADD EXTERNAL_IP_OF_PC1 MASK 255.255.255.255 192.168.9.1
Tue May 12 20:09:46 2015 ROUTE: route addition failed using CreateIpForwardEntry: Accès refusé. [status=5 if_index=16]
Tue May 12 20:09:46 2015 Route addition via IPAPI failed [adaptive]
Tue May 12 20:09:46 2015 Route addition fallback to route.exe
Tue May 12 20:09:46 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue May 12 20:09:46 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Tue May 12 20:09:46 2015 C:\Windows\system32\route.exe ADD 192.168.9.1 MASK 255.255.255.255 192.168.9.1 IF 16
Tue May 12 20:09:46 2015 ROUTE: route addition failed using CreateIpForwardEntry: Accès refusé. [status=5 if_index=16]
Tue May 12 20:09:46 2015 Route addition via IPAPI failed [adaptive]
Tue May 12 20:09:46 2015 Route addition fallback to route.exe
Tue May 12 20:09:46 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue May 12 20:09:46 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Tue May 12 20:09:46 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.0.0.5
Tue May 12 20:09:46 2015 ROUTE: route addition failed using CreateIpForwardEntry: Accès refusé. [status=5 if_index=17]
Tue May 12 20:09:46 2015 Route addition via IPAPI failed [adaptive]
Tue May 12 20:09:46 2015 Route addition fallback to route.exe
Tue May 12 20:09:46 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue May 12 20:09:46 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Tue May 12 20:09:46 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.0.0.5
Tue May 12 20:09:46 2015 ROUTE: route addition failed using CreateIpForwardEntry: Accès refusé. [status=5 if_index=17]
Tue May 12 20:09:46 2015 Route addition via IPAPI failed [adaptive]
Tue May 12 20:09:46 2015 Route addition fallback to route.exe
Tue May 12 20:09:46 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue May 12 20:09:46 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Tue May 12 20:09:46 2015 MANAGEMENT: >STATE:1431454186,ADD_ROUTES,,,
Tue May 12 20:09:46 2015 C:\Windows\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 10.0.0.5
Tue May 12 20:09:46 2015 ROUTE: route addition failed using CreateIpForwardEntry: Accès refusé. [status=5 if_index=17]
Tue May 12 20:09:46 2015 Route addition via IPAPI failed [adaptive]
Tue May 12 20:09:46 2015 Route addition fallback to route.exe
Tue May 12 20:09:46 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue May 12 20:09:46 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Tue May 12 20:09:46 2015 C:\Windows\system32\route.exe ADD 10.0.0.0 MASK 255.255.255.0 10.0.0.5
Tue May 12 20:09:46 2015 ROUTE: route addition failed using CreateIpForwardEntry: Accès refusé. [status=5 if_index=17]
Tue May 12 20:09:46 2015 Route addition via IPAPI failed [adaptive]
Tue May 12 20:09:46 2015 Route addition fallback to route.exe
Tue May 12 20:09:46 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue May 12 20:09:46 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Tue May 12 20:09:46 2015 C:\Windows\system32\route.exe ADD 10.0.0.1 MASK 255.255.255.255 10.0.0.5
Tue May 12 20:09:46 2015 ROUTE: route addition failed using CreateIpForwardEntry: Accès refusé. [status=5 if_index=17]
Tue May 12 20:09:46 2015 Route addition via IPAPI failed [adaptive]
Tue May 12 20:09:46 2015 Route addition fallback to route.exe
Tue May 12 20:09:46 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue May 12 20:09:46 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Tue May 12 20:09:46 2015 Initialization Sequence Completed
Tue May 12 20:09:46 2015 MANAGEMENT: >STATE:1431454186,CONNECTED,SUCCESS,10.0.0.6,EXTERNAL_IP_OF_PC1
Thank you for your support
