Attempting Network Bridge - Can't Ping After Connect

Jaws12

Server system with internal 10.* (eth1) network and external internet network connection (eth0) - 1.2.3.4 (changed for security)
Client system with only external internet network connection (eth0) - 9.8.7.6 (changed for security)

I am attempting to set up an OpenVPN server bridging the VPN subnet with the internal 10.* NIC of the server system so that the client system can access other computers that are accessible by the server on its interal 10.* (eth1) network.

I was previously able to set up a simple OpenVPN configuration where the client could connect and ping the internal network address of the server system through the VPN (using the following pages as a guideline):
https://openvpn.net/index.php/open-source/documentation/howto.html#quick
https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-6

I then attempted to switch my OpenVPN configuration to a bridged setup to allow the client to reach other systems accessible through the internal network of the server system (using the following page as a guideline):
https://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html

With my current configuration, my client is granted an IP address from the OpenVPN server, but I am unable to ping any resources on the VPN server side of things. Hopefully I am just doing something simply stupid, but any help would be appreciated. My configs/logs follow.

Server Config

port 1194
proto udp
dev tap0
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server-bridge 10.8.0.4 255.255.255.0 10.8.0.128 10.8.0.254
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 4

Client Config

client
dev tap0
proto udp
remote 1.2.3.4 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 4
remote-cert-tls server
route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway
log-append /var/log/openvpn.log
<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
</key>

***Note: "route 0.0.0.0 192.0.0.0 net_gateway" lines were added to stop pushing of route directives from VPN server that caused external connections to no longer be accepted when the client was connected to the VPN server (thus blocking outside connections through the client's singular internet connection, as suggested by this link):
https://community.openvpn.net/openvpn/wiki/IgnoreRedirectGateway

Server Connection Log

Sun Aug 23 23:55:21 2015 us=454315 Current Parameter Settings:
Sun Aug 23 23:55:21 2015 us=454390 config = 'server.conf'
Sun Aug 23 23:55:21 2015 us=454403 mode = 1
Sun Aug 23 23:55:21 2015 us=454413 persist_config = DISABLED
Sun Aug 23 23:55:21 2015 us=454422 persist_mode = 1
Sun Aug 23 23:55:21 2015 us=454430 show_ciphers = DISABLED
Sun Aug 23 23:55:21 2015 us=454438 show_digests = DISABLED
Sun Aug 23 23:55:21 2015 us=454446 show_engines = DISABLED
Sun Aug 23 23:55:21 2015 us=454454 genkey = DISABLED
Sun Aug 23 23:55:21 2015 us=454463 key_pass_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454471 show_tls_ciphers = DISABLED
Sun Aug 23 23:55:21 2015 us=454482 Connection profiles [default]:
Sun Aug 23 23:55:21 2015 us=454491 proto = udp
Sun Aug 23 23:55:21 2015 us=454499 local = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454508 local_port = 1194
Sun Aug 23 23:55:21 2015 us=454516 remote = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454524 remote_port = 1194
Sun Aug 23 23:55:21 2015 us=454532 remote_float = DISABLED
Sun Aug 23 23:55:21 2015 us=454540 bind_defined = DISABLED
Sun Aug 23 23:55:21 2015 us=454548 bind_local = ENABLED
Sun Aug 23 23:55:21 2015 us=454556 connect_retry_seconds = 5
Sun Aug 23 23:55:21 2015 us=454564 connect_timeout = 10
Sun Aug 23 23:55:21 2015 us=454572 connect_retry_max = 0
Sun Aug 23 23:55:21 2015 us=454580 socks_proxy_server = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454589 socks_proxy_port = 0
Sun Aug 23 23:55:21 2015 us=454597 socks_proxy_retry = DISABLED
Sun Aug 23 23:55:21 2015 us=454605 tun_mtu = 1500
Sun Aug 23 23:55:21 2015 us=454613 tun_mtu_defined = ENABLED
Sun Aug 23 23:55:21 2015 us=454622 link_mtu = 1500
Sun Aug 23 23:55:21 2015 us=454630 link_mtu_defined = DISABLED
Sun Aug 23 23:55:21 2015 us=454638 tun_mtu_extra = 32
Sun Aug 23 23:55:21 2015 us=454646 tun_mtu_extra_defined = ENABLED
Sun Aug 23 23:55:21 2015 us=454654 mtu_discover_type = -1
Sun Aug 23 23:55:21 2015 us=454663 fragment = 0
Sun Aug 23 23:55:21 2015 us=454671 mssfix = 1450
Sun Aug 23 23:55:21 2015 us=454680 explicit_exit_notification = 0
Sun Aug 23 23:55:21 2015 us=454688 Connection profiles END
Sun Aug 23 23:55:21 2015 us=454696 remote_random = DISABLED
Sun Aug 23 23:55:21 2015 us=454705 ipchange = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454713 dev = 'tap0'
Sun Aug 23 23:55:21 2015 us=454720 dev_type = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454738 dev_node = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454747 lladdr = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454755 topology = 1
Sun Aug 23 23:55:21 2015 us=454763 tun_ipv6 = DISABLED
Sun Aug 23 23:55:21 2015 us=454771 ifconfig_local = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454779 ifconfig_remote_netmask = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454787 ifconfig_noexec = DISABLED
Sun Aug 23 23:55:21 2015 us=454800 ifconfig_nowarn = DISABLED
Sun Aug 23 23:55:21 2015 us=454809 ifconfig_ipv6_local = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454817 ifconfig_ipv6_netbits = 0
Sun Aug 23 23:55:21 2015 us=454825 ifconfig_ipv6_remote = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=454834 shaper = 0
Sun Aug 23 23:55:21 2015 us=454842 mtu_test = 0
Sun Aug 23 23:55:21 2015 us=454849 mlock = DISABLED
Sun Aug 23 23:55:21 2015 us=454858 keepalive_ping = 10
Sun Aug 23 23:55:21 2015 us=454866 keepalive_timeout = 120
Sun Aug 23 23:55:21 2015 us=454874 inactivity_timeout = 0
Sun Aug 23 23:55:21 2015 us=454882 ping_send_timeout = 10
Sun Aug 23 23:55:21 2015 us=454890 ping_rec_timeout = 240
Sun Aug 23 23:55:21 2015 us=454900 ping_rec_timeout_action = 2
Sun Aug 23 23:55:21 2015 us=454908 ping_timer_remote = DISABLED
Sun Aug 23 23:55:21 2015 us=454916 remap_sigusr1 = 0
Sun Aug 23 23:55:21 2015 us=454924 persist_tun = ENABLED
Sun Aug 23 23:55:21 2015 us=454932 persist_local_ip = DISABLED
Sun Aug 23 23:55:21 2015 us=454940 persist_remote_ip = DISABLED
Sun Aug 23 23:55:21 2015 us=454948 persist_key = ENABLED
Sun Aug 23 23:55:21 2015 us=454955 passtos = DISABLED
Sun Aug 23 23:55:21 2015 us=454964 resolve_retry_seconds = 1000000000
Sun Aug 23 23:55:21 2015 us=454982 username = 'nobody'
Sun Aug 23 23:55:21 2015 us=454991 groupname = 'nobody'
Sun Aug 23 23:55:21 2015 us=454999 chroot_dir = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455008 cd_dir = '/etc/openvpn'
Sun Aug 23 23:55:21 2015 us=455016 writepid = '/var/run/openvpn/server.pid'
Sun Aug 23 23:55:21 2015 us=455024 up_script = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455032 down_script = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455040 down_pre = DISABLED
Sun Aug 23 23:55:21 2015 us=455048 up_restart = DISABLED
Sun Aug 23 23:55:21 2015 us=455055 up_delay = DISABLED
Sun Aug 23 23:55:21 2015 us=455063 daemon = ENABLED
Sun Aug 23 23:55:21 2015 us=455071 inetd = 0
Sun Aug 23 23:55:21 2015 us=455079 log = ENABLED
Sun Aug 23 23:55:21 2015 us=455087 suppress_timestamps = DISABLED
Sun Aug 23 23:55:21 2015 us=455096 nice = 0
Sun Aug 23 23:55:21 2015 us=455103 verbosity = 4
Sun Aug 23 23:55:21 2015 us=455111 mute = 0
Sun Aug 23 23:55:21 2015 us=455119 gremlin = 0
Sun Aug 23 23:55:21 2015 us=455127 status_file = 'openvpn-status.log'
Sun Aug 23 23:55:21 2015 us=455135 status_file_version = 1
Sun Aug 23 23:55:21 2015 us=455143 status_file_update_freq = 60
Sun Aug 23 23:55:21 2015 us=455151 occ = ENABLED
Sun Aug 23 23:55:21 2015 us=455159 rcvbuf = 65536
Sun Aug 23 23:55:21 2015 us=455167 sndbuf = 65536
Sun Aug 23 23:55:21 2015 us=455175 sockflags = 0
Sun Aug 23 23:55:21 2015 us=455191 fast_io = DISABLED
Sun Aug 23 23:55:21 2015 us=455199 lzo = 7
Sun Aug 23 23:55:21 2015 us=455208 route_script = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455216 route_default_gateway = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455224 route_default_metric = 0
Sun Aug 23 23:55:21 2015 us=455232 route_noexec = DISABLED
Sun Aug 23 23:55:21 2015 us=455240 route_delay = 0
Sun Aug 23 23:55:21 2015 us=455249 route_delay_window = 30
Sun Aug 23 23:55:21 2015 us=455258 route_delay_defined = DISABLED
Sun Aug 23 23:55:21 2015 us=455266 route_nopull = DISABLED
Sun Aug 23 23:55:21 2015 us=455274 route_gateway_via_dhcp = DISABLED
Sun Aug 23 23:55:21 2015 us=455282 max_routes = 100
Sun Aug 23 23:55:21 2015 us=455290 allow_pull_fqdn = DISABLED
Sun Aug 23 23:55:21 2015 us=455300 management_addr = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455308 management_port = 0
Sun Aug 23 23:55:21 2015 us=455316 management_user_pass = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455325 management_log_history_cache = 250
Sun Aug 23 23:55:21 2015 us=455333 management_echo_buffer_size = 100
Sun Aug 23 23:55:21 2015 us=455341 management_write_peer_info_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455350 management_client_user = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455358 management_client_group = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455366 management_flags = 0
Sun Aug 23 23:55:21 2015 us=455374 shared_secret_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455382 key_direction = 0
Sun Aug 23 23:55:21 2015 us=455391 ciphername_defined = ENABLED
Sun Aug 23 23:55:21 2015 us=455399 ciphername = 'BF-CBC'
Sun Aug 23 23:55:21 2015 us=455407 authname_defined = ENABLED
Sun Aug 23 23:55:21 2015 us=455415 authname = 'SHA1'
Sun Aug 23 23:55:21 2015 us=455423 prng_hash = 'SHA1'
Sun Aug 23 23:55:21 2015 us=455431 prng_nonce_secret_len = 16
Sun Aug 23 23:55:21 2015 us=455439 keysize = 0
Sun Aug 23 23:55:21 2015 us=455447 engine = DISABLED
Sun Aug 23 23:55:21 2015 us=455455 replay = ENABLED
Sun Aug 23 23:55:21 2015 us=455463 mute_replay_warnings = DISABLED
Sun Aug 23 23:55:21 2015 us=455472 replay_window = 64
Sun Aug 23 23:55:21 2015 us=455480 replay_time = 15
Sun Aug 23 23:55:21 2015 us=455488 packet_id_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455496 use_iv = ENABLED
Sun Aug 23 23:55:21 2015 us=455504 test_crypto = DISABLED
Sun Aug 23 23:55:21 2015 us=455512 tls_server = ENABLED
Sun Aug 23 23:55:21 2015 us=455520 tls_client = DISABLED
Sun Aug 23 23:55:21 2015 us=455529 key_method = 2
Sun Aug 23 23:55:21 2015 us=455537 ca_file = 'ca.crt'
Sun Aug 23 23:55:21 2015 us=455545 ca_path = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455561 dh_file = 'dh2048.pem'
Sun Aug 23 23:55:21 2015 us=455570 cert_file = 'server.crt'
Sun Aug 23 23:55:21 2015 us=455578 priv_key_file = 'server.key'
Sun Aug 23 23:55:21 2015 us=455586 pkcs12_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455594 cipher_list = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455602 tls_verify = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455611 tls_export_cert = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455618 verify_x509_type = 0
Sun Aug 23 23:55:21 2015 us=455627 verify_x509_name = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455635 crl_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455643 ns_cert_type = 0
Sun Aug 23 23:55:21 2015 us=455651 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455658 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455666 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455674 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455682 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455690 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455697 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455705 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455713 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455720 remote_cert_ku = 0
Sun Aug 23 23:55:21 2015 us=455728 remote_cert_ku[i] = 0
Sun Aug 23 23:55:21 2015 us=455743 remote_cert_ku[i] = 0
Sun Aug 23 23:55:21 2015 us=455750 remote_cert_ku[i] = 0
Sun Aug 23 23:55:21 2015 us=455758 remote_cert_ku[i] = 0
Sun Aug 23 23:55:21 2015 us=455766 remote_cert_ku[i] = 0
Sun Aug 23 23:55:21 2015 us=455774 remote_cert_ku[i] = 0
Sun Aug 23 23:55:21 2015 us=455782 remote_cert_eku = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455790 ssl_flags = 0
Sun Aug 23 23:55:21 2015 us=455798 tls_timeout = 2
Sun Aug 23 23:55:21 2015 us=455806 renegotiate_bytes = 0
Sun Aug 23 23:55:21 2015 us=455814 renegotiate_packets = 0
Sun Aug 23 23:55:21 2015 us=455822 renegotiate_seconds = 3600
Sun Aug 23 23:55:21 2015 us=455830 handshake_window = 60
Sun Aug 23 23:55:21 2015 us=455838 transition_window = 3600
Sun Aug 23 23:55:21 2015 us=455846 single_session = DISABLED
Sun Aug 23 23:55:21 2015 us=455854 push_peer_info = DISABLED
Sun Aug 23 23:55:21 2015 us=455862 tls_exit = DISABLED
Sun Aug 23 23:55:21 2015 us=455870 tls_auth_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=455878 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455886 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455894 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455902 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455910 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455918 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455926 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455933 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455941 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455949 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455957 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455964 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455972 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455980 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455988 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=455995 pkcs11_protected_authentication = DISABLED
Sun Aug 23 23:55:21 2015 us=456004 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456012 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456020 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456028 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456036 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456044 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456052 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456067 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456076 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456084 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456092 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456099 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456107 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456115 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456123 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456131 pkcs11_private_mode = 00000000
Sun Aug 23 23:55:21 2015 us=456139 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456147 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456154 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456162 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456170 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456189 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456199 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456207 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456215 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456223 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456231 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456239 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456247 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456254 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456262 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456270 pkcs11_cert_private = DISABLED
Sun Aug 23 23:55:21 2015 us=456278 pkcs11_pin_cache_period = -1
Sun Aug 23 23:55:21 2015 us=456286 pkcs11_id = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456294 pkcs11_id_management = DISABLED
Sun Aug 23 23:55:21 2015 us=456304 server_network = 0.0.0.0
Sun Aug 23 23:55:21 2015 us=456313 server_netmask = 0.0.0.0
Sun Aug 23 23:55:21 2015 us=456325 server_network_ipv6 = ::
Sun Aug 23 23:55:21 2015 us=456333 server_netbits_ipv6 = 0
Sun Aug 23 23:55:21 2015 us=456343 server_bridge_ip = 10.8.0.4
Sun Aug 23 23:55:21 2015 us=456352 server_bridge_netmask = 255.255.255.0
Sun Aug 23 23:55:21 2015 us=456362 server_bridge_pool_start = 10.8.0.128
Sun Aug 23 23:55:21 2015 us=456371 server_bridge_pool_end = 10.8.0.254
Sun Aug 23 23:55:21 2015 us=456379 push_entry = 'redirect-gateway def1 bypass-dhcp'
Sun Aug 23 23:55:21 2015 us=456388 push_entry = 'dhcp-option DNS 8.8.8.8'
Sun Aug 23 23:55:21 2015 us=456396 push_entry = 'dhcp-option DNS 8.8.4.4'
Sun Aug 23 23:55:21 2015 us=456404 push_entry = 'route-gateway 10.8.0.4'
Sun Aug 23 23:55:21 2015 us=456412 push_entry = 'ping 10'
Sun Aug 23 23:55:21 2015 us=456420 push_entry = 'ping-restart 120'
Sun Aug 23 23:55:21 2015 us=456428 ifconfig_pool_defined = ENABLED
Sun Aug 23 23:55:21 2015 us=456438 ifconfig_pool_start = 10.8.0.128
Sun Aug 23 23:55:21 2015 us=456449 ifconfig_pool_end = 10.8.0.254
Sun Aug 23 23:55:21 2015 us=456459 ifconfig_pool_netmask = 255.255.255.0
Sun Aug 23 23:55:21 2015 us=456467 ifconfig_pool_persist_filename = 'ipp.txt'
Sun Aug 23 23:55:21 2015 us=456476 ifconfig_pool_persist_refresh_freq = 600
Sun Aug 23 23:55:21 2015 us=456484 ifconfig_ipv6_pool_defined = DISABLED
Sun Aug 23 23:55:21 2015 us=456493 ifconfig_ipv6_pool_base = ::
Sun Aug 23 23:55:21 2015 us=456501 ifconfig_ipv6_pool_netbits = 0
Sun Aug 23 23:55:21 2015 us=456509 n_bcast_buf = 256
Sun Aug 23 23:55:21 2015 us=456517 tcp_queue_limit = 64
Sun Aug 23 23:55:21 2015 us=456525 real_hash_size = 256
Sun Aug 23 23:55:21 2015 us=456533 virtual_hash_size = 256
Sun Aug 23 23:55:21 2015 us=456541 client_connect_script = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456549 learn_address_script = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456557 client_disconnect_script = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456566 client_config_dir = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456574 ccd_exclusive = DISABLED
Sun Aug 23 23:55:21 2015 us=456589 tmp_dir = '/tmp'
Sun Aug 23 23:55:21 2015 us=456597 push_ifconfig_defined = DISABLED
Sun Aug 23 23:55:21 2015 us=456607 push_ifconfig_local = 0.0.0.0
Sun Aug 23 23:55:21 2015 us=456616 push_ifconfig_remote_netmask = 0.0.0.0
Sun Aug 23 23:55:21 2015 us=456624 push_ifconfig_ipv6_defined = DISABLED
Sun Aug 23 23:55:21 2015 us=456633 push_ifconfig_ipv6_local = ::/0
Sun Aug 23 23:55:21 2015 us=456642 push_ifconfig_ipv6_remote = ::
Sun Aug 23 23:55:21 2015 us=456650 enable_c2c = DISABLED
Sun Aug 23 23:55:21 2015 us=456657 duplicate_cn = DISABLED
Sun Aug 23 23:55:21 2015 us=456665 cf_max = 0
Sun Aug 23 23:55:21 2015 us=456673 cf_per = 0
Sun Aug 23 23:55:21 2015 us=456681 max_clients = 1024
Sun Aug 23 23:55:21 2015 us=456690 max_routes_per_client = 256
Sun Aug 23 23:55:21 2015 us=456698 auth_user_pass_verify_script = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456706 auth_user_pass_verify_script_via_file = DISABLED
Sun Aug 23 23:55:21 2015 us=456714 port_share_host = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456722 port_share_port = 0
Sun Aug 23 23:55:21 2015 us=456730 client = DISABLED
Sun Aug 23 23:55:21 2015 us=456744 pull = DISABLED
Sun Aug 23 23:55:21 2015 us=456753 auth_user_pass_file = '[UNDEF]'
Sun Aug 23 23:55:21 2015 us=456764 OpenVPN 2.3.7 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 9 2015
Sun Aug 23 23:55:21 2015 us=456776 library versions: OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008, LZO 2.02
Sun Aug 23 23:55:21 2015 us=457182 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Sun Aug 23 23:55:21 2015 us=470906 Diffie-Hellman initialized with 2048 bit key
Sun Aug 23 23:55:21 2015 us=471110 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:3 ]
Sun Aug 23 23:55:21 2015 us=471125 Socket Buffers: R=[129024->131072] S=[129024->131072]
Sun Aug 23 23:55:21 2015 us=472190 TUN/TAP device tap0 opened
Sun Aug 23 23:55:21 2015 us=477707 TUN/TAP TX queue length set to 100
Sun Aug 23 23:55:21 2015 us=477758 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:143 ET:32 EL:3 AF:3/1 ]
Sun Aug 23 23:55:21 2015 us=478511 GID set to nobody
Sun Aug 23 23:55:21 2015 us=478568 UID set to nobody
Sun Aug 23 23:55:21 2015 us=478576 UDPv4 link local (bound): [undef]
Sun Aug 23 23:55:21 2015 us=478582 UDPv4 link remote: [undef]
Sun Aug 23 23:55:21 2015 us=478590 MULTI: multi_init called, r=256 v=256
Sun Aug 23 23:55:21 2015 us=478615 IFCONFIG POOL: base=10.8.0.128 size=127, ipv6=0
Sun Aug 23 23:55:21 2015 us=478624 ifconfig_pool_read(), in='client,10.8.0.128', TODO: IPv6
Sun Aug 23 23:55:21 2015 us=478634 succeeded -> ifconfig_pool_set()
Sun Aug 23 23:55:21 2015 us=478640 IFCONFIG POOL LIST
Sun Aug 23 23:55:21 2015 us=478645 client,10.8.0.128
Sun Aug 23 23:55:21 2015 us=478660 Initialization Sequence Completed
Sun Aug 23 23:56:06 2015 us=358875 MULTI: multi_create_instance called
Sun Aug 23 23:56:06 2015 us=358943 9.8.7.6:59252 Re-using SSL/TLS context
Sun Aug 23 23:56:06 2015 us=358978 9.8.7.6:59252 LZO compression initialized
Sun Aug 23 23:56:06 2015 us=359090 9.8.7.6:59252 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:3 ]
Sun Aug 23 23:56:06 2015 us=359105 9.8.7.6:59252 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:143 ET:32 EL:3 AF:3/1 ]
Sun Aug 23 23:56:06 2015 us=359132 9.8.7.6:59252 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Aug 23 23:56:06 2015 us=359142 9.8.7.6:59252 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Aug 23 23:56:06 2015 us=359169 9.8.7.6:59252 Local Options hash (VER=V4): 'f7df56b8'
Sun Aug 23 23:56:06 2015 us=359186 9.8.7.6:59252 Expected Remote Options hash (VER=V4): 'd79ca330'
Sun Aug 23 23:56:06 2015 us=359251 9.8.7.6:59252 TLS: Initial packet from [AF_INET]9.8.7.6:59252, sid=078fd52e 83a901ee
Sun Aug 23 23:56:10 2015 us=156401 9.8.7.6:59252 VERIFY OK: depth=1, C=US, ST=IL, L=Chicago, O=Hostname, OU=hostname, CN=hostname.com, name=hostname, emailAddress=admin@hostname.com
Sun Aug 23 23:56:10 2015 us=156762 9.8.7.6:59252 VERIFY OK: depth=0, C=US, ST=IL, L=Chicago, O=Hostname, OU=hostname, CN=client, name=hostname, emailAddress=admin@hostname.com
Sun Aug 23 23:56:10 2015 us=637317 9.8.7.6:59252 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug 23 23:56:10 2015 us=637341 9.8.7.6:59252 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug 23 23:56:10 2015 us=637432 9.8.7.6:59252 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug 23 23:56:10 2015 us=637443 9.8.7.6:59252 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug 23 23:56:10 2015 us=919474 9.8.7.6:59252 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Aug 23 23:56:10 2015 us=919513 9.8.7.6:59252 [client] Peer Connection Initiated with [AF_INET]9.8.7.6:59252
Sun Aug 23 23:56:10 2015 us=919544 client/9.8.7.6:59252 MULTI_sva: pool returned IPv4=10.8.0.128, IPv6=(Not enabled)
Sun Aug 23 23:56:13 2015 us=372609 client/9.8.7.6:59252 PUSH: Received control message: 'PUSH_REQUEST'
Sun Aug 23 23:56:13 2015 us=372635 client/9.8.7.6:59252 send_push_reply(): safe_cap=940
Sun Aug 23 23:56:13 2015 us=372684 client/9.8.7.6:59252 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.4,ping 10,ping-restart 120,ifconfig 10.8.0.128 255.255.255.0' (status=1)
Sun Aug 23 23:56:13 2015 us=648138 client/9.8.7.6:59252 MULTI: Learn: 32:da:ce:ea:d5:ba -> client/9.8.7.6:59252
Mon Aug 24 00:01:13 2015 us=646520 client/9.8.7.6:59252 [client] Inactivity timeout (--ping-restart), restarting
Mon Aug 24 00:01:13 2015 us=646558 client/9.8.7.6:59252 SIGUSR1[soft,ping-restart] received, client-instance restarting

Client Connection Log

Mon Aug 24 05:56:06 2015 us=222755 Current Parameter Settings:
Mon Aug 24 05:56:06 2015 us=222838 config = 'client.ovpn'
Mon Aug 24 05:56:06 2015 us=222847 mode = 0
Mon Aug 24 05:56:06 2015 us=222854 persist_config = DISABLED
Mon Aug 24 05:56:06 2015 us=222862 persist_mode = 1
Mon Aug 24 05:56:06 2015 us=222869 show_ciphers = DISABLED
Mon Aug 24 05:56:06 2015 us=222875 show_digests = DISABLED
Mon Aug 24 05:56:06 2015 us=222882 show_engines = DISABLED
Mon Aug 24 05:56:06 2015 us=222889 genkey = DISABLED
Mon Aug 24 05:56:06 2015 us=222896 key_pass_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=222903 show_tls_ciphers = DISABLED
Mon Aug 24 05:56:06 2015 us=222914 Connection profiles [default]:
Mon Aug 24 05:56:06 2015 us=222921 proto = udp
Mon Aug 24 05:56:06 2015 us=222928 local = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=222935 local_port = 0
Mon Aug 24 05:56:06 2015 us=222942 remote = '1.2.3.4'
Mon Aug 24 05:56:06 2015 us=222949 remote_port = 1194
Mon Aug 24 05:56:06 2015 us=222956 remote_float = DISABLED
Mon Aug 24 05:56:06 2015 us=222963 bind_defined = DISABLED
Mon Aug 24 05:56:06 2015 us=222969 bind_local = DISABLED
Mon Aug 24 05:56:06 2015 us=222976 connect_retry_seconds = 5
Mon Aug 24 05:56:06 2015 us=222983 connect_timeout = 10
Mon Aug 24 05:56:06 2015 us=222990 connect_retry_max = 0
Mon Aug 24 05:56:06 2015 us=222997 socks_proxy_server = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223004 socks_proxy_port = 0
Mon Aug 24 05:56:06 2015 us=223011 socks_proxy_retry = DISABLED
Mon Aug 24 05:56:06 2015 us=223018 tun_mtu = 1500
Mon Aug 24 05:56:06 2015 us=223025 tun_mtu_defined = ENABLED
Mon Aug 24 05:56:06 2015 us=223032 link_mtu = 1500
Mon Aug 24 05:56:06 2015 us=223039 link_mtu_defined = DISABLED
Mon Aug 24 05:56:06 2015 us=223091 tun_mtu_extra = 32
Mon Aug 24 05:56:06 2015 us=223099 tun_mtu_extra_defined = ENABLED
Mon Aug 24 05:56:06 2015 us=223106 mtu_discover_type = -1
Mon Aug 24 05:56:06 2015 us=223113 fragment = 0
Mon Aug 24 05:56:06 2015 us=223120 mssfix = 1450
Mon Aug 24 05:56:06 2015 us=223127 explicit_exit_notification = 0
Mon Aug 24 05:56:06 2015 us=223134 Connection profiles END
Mon Aug 24 05:56:06 2015 us=223141 remote_random = DISABLED
Mon Aug 24 05:56:06 2015 us=223148 ipchange = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223155 dev = 'tap0'
Mon Aug 24 05:56:06 2015 us=223162 dev_type = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223172 dev_node = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223179 lladdr = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223186 topology = 1
Mon Aug 24 05:56:06 2015 us=223193 tun_ipv6 = DISABLED
Mon Aug 24 05:56:06 2015 us=223200 ifconfig_local = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223207 ifconfig_remote_netmask = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223214 ifconfig_noexec = DISABLED
Mon Aug 24 05:56:06 2015 us=223221 ifconfig_nowarn = DISABLED
Mon Aug 24 05:56:06 2015 us=223228 ifconfig_ipv6_local = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223235 ifconfig_ipv6_netbits = 0
Mon Aug 24 05:56:06 2015 us=223242 ifconfig_ipv6_remote = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223249 shaper = 0
Mon Aug 24 05:56:06 2015 us=223256 mtu_test = 0
Mon Aug 24 05:56:06 2015 us=223263 mlock = DISABLED
Mon Aug 24 05:56:06 2015 us=223270 keepalive_ping = 0
Mon Aug 24 05:56:06 2015 us=223276 keepalive_timeout = 0
Mon Aug 24 05:56:06 2015 us=223283 inactivity_timeout = 0
Mon Aug 24 05:56:06 2015 us=223290 ping_send_timeout = 0
Mon Aug 24 05:56:06 2015 us=223297 ping_rec_timeout = 0
Mon Aug 24 05:56:06 2015 us=223308 ping_rec_timeout_action = 0
Mon Aug 24 05:56:06 2015 us=223315 ping_timer_remote = DISABLED
Mon Aug 24 05:56:06 2015 us=223322 remap_sigusr1 = 0
Mon Aug 24 05:56:06 2015 us=223329 persist_tun = ENABLED
Mon Aug 24 05:56:06 2015 us=223336 persist_local_ip = DISABLED
Mon Aug 24 05:56:06 2015 us=223343 persist_remote_ip = DISABLED
Mon Aug 24 05:56:06 2015 us=223350 persist_key = ENABLED
Mon Aug 24 05:56:06 2015 us=223357 passtos = DISABLED
Mon Aug 24 05:56:06 2015 us=223364 resolve_retry_seconds = 1000000000
Mon Aug 24 05:56:06 2015 us=223371 username = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223377 groupname = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223384 chroot_dir = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223391 cd_dir = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223398 writepid = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223405 up_script = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223412 down_script = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223419 down_pre = DISABLED
Mon Aug 24 05:56:06 2015 us=223426 up_restart = DISABLED
Mon Aug 24 05:56:06 2015 us=223432 up_delay = DISABLED
Mon Aug 24 05:56:06 2015 us=223439 daemon = DISABLED
Mon Aug 24 05:56:06 2015 us=223447 inetd = 0
Mon Aug 24 05:56:06 2015 us=223454 log = ENABLED
Mon Aug 24 05:56:06 2015 us=223461 suppress_timestamps = DISABLED
Mon Aug 24 05:56:06 2015 us=223468 nice = 0
Mon Aug 24 05:56:06 2015 us=223475 verbosity = 4
Mon Aug 24 05:56:06 2015 us=223481 mute = 0
Mon Aug 24 05:56:06 2015 us=223488 gremlin = 0
Mon Aug 24 05:56:06 2015 us=223495 status_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223502 status_file_version = 1
Mon Aug 24 05:56:06 2015 us=223509 status_file_update_freq = 60
Mon Aug 24 05:56:06 2015 us=223516 occ = ENABLED
Mon Aug 24 05:56:06 2015 us=223523 rcvbuf = 65536
Mon Aug 24 05:56:06 2015 us=223530 sndbuf = 65536
Mon Aug 24 05:56:06 2015 us=223537 sockflags = 0
Mon Aug 24 05:56:06 2015 us=223544 fast_io = DISABLED
Mon Aug 24 05:56:06 2015 us=223551 lzo = 7
Mon Aug 24 05:56:06 2015 us=223560 route_script = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223567 route_default_gateway = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223574 route_default_metric = 0
Mon Aug 24 05:56:06 2015 us=223581 route_noexec = DISABLED
Mon Aug 24 05:56:06 2015 us=223602 route_delay = 0
Mon Aug 24 05:56:06 2015 us=223610 route_delay_window = 30
Mon Aug 24 05:56:06 2015 us=223617 route_delay_defined = DISABLED
Mon Aug 24 05:56:06 2015 us=223624 route_nopull = DISABLED
Mon Aug 24 05:56:06 2015 us=223635 route_gateway_via_dhcp = DISABLED
Mon Aug 24 05:56:06 2015 us=223643 max_routes = 100
Mon Aug 24 05:56:06 2015 us=223650 allow_pull_fqdn = DISABLED
Mon Aug 24 05:56:06 2015 us=223661 route 0.0.0.0/192.0.0.0/net_gateway/nil
Mon Aug 24 05:56:06 2015 us=223669 route 64.0.0.0/192.0.0.0/net_gateway/nil
Mon Aug 24 05:56:06 2015 us=223676 route 128.0.0.0/192.0.0.0/net_gateway/nil
Mon Aug 24 05:56:06 2015 us=223683 route 192.0.0.0/192.0.0.0/net_gateway/nil
Mon Aug 24 05:56:06 2015 us=223694 management_addr = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223701 management_port = 0
Mon Aug 24 05:56:06 2015 us=223708 management_user_pass = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223716 management_log_history_cache = 250
Mon Aug 24 05:56:06 2015 us=223723 management_echo_buffer_size = 100
Mon Aug 24 05:56:06 2015 us=223730 management_write_peer_info_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223737 management_client_user = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223744 management_client_group = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223751 management_flags = 0
Mon Aug 24 05:56:06 2015 us=223758 shared_secret_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223765 key_direction = 0
Mon Aug 24 05:56:06 2015 us=223772 ciphername_defined = ENABLED
Mon Aug 24 05:56:06 2015 us=223779 ciphername = 'BF-CBC'
Mon Aug 24 05:56:06 2015 us=223786 authname_defined = ENABLED
Mon Aug 24 05:56:06 2015 us=223793 authname = 'SHA1'
Mon Aug 24 05:56:06 2015 us=223801 prng_hash = 'SHA1'
Mon Aug 24 05:56:06 2015 us=223808 prng_nonce_secret_len = 16
Mon Aug 24 05:56:06 2015 us=223815 keysize = 0
Mon Aug 24 05:56:06 2015 us=223822 engine = DISABLED
Mon Aug 24 05:56:06 2015 us=223829 replay = ENABLED
Mon Aug 24 05:56:06 2015 us=223836 mute_replay_warnings = DISABLED
Mon Aug 24 05:56:06 2015 us=223843 replay_window = 64
Mon Aug 24 05:56:06 2015 us=223850 replay_time = 15
Mon Aug 24 05:56:06 2015 us=223857 packet_id_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223864 use_iv = ENABLED
Mon Aug 24 05:56:06 2015 us=223871 test_crypto = DISABLED
Mon Aug 24 05:56:06 2015 us=223878 tls_server = DISABLED
Mon Aug 24 05:56:06 2015 us=223885 tls_client = ENABLED
Mon Aug 24 05:56:06 2015 us=223892 key_method = 2
Mon Aug 24 05:56:06 2015 us=223899 ca_file = '[[INLINE]]'
Mon Aug 24 05:56:06 2015 us=223906 ca_path = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223913 dh_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223920 cert_file = '[[INLINE]]'
Mon Aug 24 05:56:06 2015 us=223927 priv_key_file = '[[INLINE]]'
Mon Aug 24 05:56:06 2015 us=223934 pkcs12_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223941 cipher_list = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223948 tls_verify = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223955 tls_export_cert = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223962 verify_x509_type = 0
Mon Aug 24 05:56:06 2015 us=223969 verify_x509_name = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223976 crl_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=223983 ns_cert_type = 0
Mon Aug 24 05:56:06 2015 us=223990 remote_cert_ku[i] = 160
Mon Aug 24 05:56:06 2015 us=223997 remote_cert_ku[i] = 136
Mon Aug 24 05:56:06 2015 us=224004 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224011 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224018 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224025 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224032 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224039 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224046 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224053 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224059 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224066 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224073 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224095 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224102 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224109 remote_cert_ku[i] = 0
Mon Aug 24 05:56:06 2015 us=224116 remote_cert_eku = 'TLS Web Server Authentication'
Mon Aug 24 05:56:06 2015 us=224123 ssl_flags = 0
Mon Aug 24 05:56:06 2015 us=224130 tls_timeout = 2
Mon Aug 24 05:56:06 2015 us=224137 renegotiate_bytes = 0
Mon Aug 24 05:56:06 2015 us=224144 renegotiate_packets = 0
Mon Aug 24 05:56:06 2015 us=224150 renegotiate_seconds = 3600
Mon Aug 24 05:56:06 2015 us=224157 handshake_window = 60
Mon Aug 24 05:56:06 2015 us=224165 transition_window = 3600
Mon Aug 24 05:56:06 2015 us=224172 single_session = DISABLED
Mon Aug 24 05:56:06 2015 us=224179 push_peer_info = DISABLED
Mon Aug 24 05:56:06 2015 us=224186 tls_exit = DISABLED
Mon Aug 24 05:56:06 2015 us=224193 tls_auth_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224200 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224207 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224214 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224221 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224227 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224234 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224241 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224248 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224255 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224262 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224269 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224275 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224282 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224289 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224296 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224303 pkcs11_protected_authentication = DISABLED
Mon Aug 24 05:56:06 2015 us=224311 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224317 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224324 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224331 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224338 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224345 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224352 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224359 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224366 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224373 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224380 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224386 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224393 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224400 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224407 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224414 pkcs11_private_mode = 00000000
Mon Aug 24 05:56:06 2015 us=224421 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224428 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224435 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224441 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224448 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224455 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224462 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224469 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224476 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224483 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224493 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224500 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224522 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224529 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224536 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224543 pkcs11_cert_private = DISABLED
Mon Aug 24 05:56:06 2015 us=224550 pkcs11_pin_cache_period = -1
Mon Aug 24 05:56:06 2015 us=224558 pkcs11_id = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224565 pkcs11_id_management = DISABLED
Mon Aug 24 05:56:06 2015 us=224588 server_network = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224596 server_netmask = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224607 server_network_ipv6 = ::
Mon Aug 24 05:56:06 2015 us=224614 server_netbits_ipv6 = 0
Mon Aug 24 05:56:06 2015 us=224622 server_bridge_ip = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224633 server_bridge_netmask = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224640 server_bridge_pool_start = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224647 server_bridge_pool_end = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224654 ifconfig_pool_defined = DISABLED
Mon Aug 24 05:56:06 2015 us=224661 ifconfig_pool_start = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224669 ifconfig_pool_end = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224676 ifconfig_pool_netmask = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224683 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224690 ifconfig_pool_persist_refresh_freq = 600
Mon Aug 24 05:56:06 2015 us=224697 ifconfig_ipv6_pool_defined = DISABLED
Mon Aug 24 05:56:06 2015 us=224705 ifconfig_ipv6_pool_base = ::
Mon Aug 24 05:56:06 2015 us=224712 ifconfig_ipv6_pool_netbits = 0
Mon Aug 24 05:56:06 2015 us=224719 n_bcast_buf = 256
Mon Aug 24 05:56:06 2015 us=224726 tcp_queue_limit = 64
Mon Aug 24 05:56:06 2015 us=224733 real_hash_size = 256
Mon Aug 24 05:56:06 2015 us=224740 virtual_hash_size = 256
Mon Aug 24 05:56:06 2015 us=224747 client_connect_script = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224754 learn_address_script = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224761 client_disconnect_script = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224768 client_config_dir = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224775 ccd_exclusive = DISABLED
Mon Aug 24 05:56:06 2015 us=224782 tmp_dir = '/tmp'
Mon Aug 24 05:56:06 2015 us=224789 push_ifconfig_defined = DISABLED
Mon Aug 24 05:56:06 2015 us=224797 push_ifconfig_local = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224804 push_ifconfig_remote_netmask = 0.0.0.0
Mon Aug 24 05:56:06 2015 us=224812 push_ifconfig_ipv6_defined = DISABLED
Mon Aug 24 05:56:06 2015 us=224819 push_ifconfig_ipv6_local = ::/0
Mon Aug 24 05:56:06 2015 us=224826 push_ifconfig_ipv6_remote = ::
Mon Aug 24 05:56:06 2015 us=224833 enable_c2c = DISABLED
Mon Aug 24 05:56:06 2015 us=224840 duplicate_cn = DISABLED
Mon Aug 24 05:56:06 2015 us=224847 cf_max = 0
Mon Aug 24 05:56:06 2015 us=224854 cf_per = 0
Mon Aug 24 05:56:06 2015 us=224861 max_clients = 1024
Mon Aug 24 05:56:06 2015 us=224868 max_routes_per_client = 256
Mon Aug 24 05:56:06 2015 us=224875 auth_user_pass_verify_script = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224883 auth_user_pass_verify_script_via_file = DISABLED
Mon Aug 24 05:56:06 2015 us=224890 port_share_host = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224897 port_share_port = 0
Mon Aug 24 05:56:06 2015 us=224904 client = ENABLED
Mon Aug 24 05:56:06 2015 us=224911 pull = ENABLED
Mon Aug 24 05:56:06 2015 us=224918 auth_user_pass_file = '[UNDEF]'
Mon Aug 24 05:56:06 2015 us=224930 OpenVPN 2.3.7 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 9 2015
Mon Aug 24 05:56:06 2015 us=224942 library versions: OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008, LZO 2.02
Mon Aug 24 05:56:06 2015 us=225465 LZO compression initialized
Mon Aug 24 05:56:06 2015 us=225591 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:3 ]
Mon Aug 24 05:56:06 2015 us=225639 Socket Buffers: R=[129024->131072] S=[129024->131072]
Mon Aug 24 05:56:06 2015 us=225669 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:143 ET:32 EL:3 AF:3/1 ]
Mon Aug 24 05:56:06 2015 us=225700 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Aug 24 05:56:06 2015 us=225711 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Aug 24 05:56:06 2015 us=225737 Local Options hash (VER=V4): 'd79ca330'
Mon Aug 24 05:56:06 2015 us=225747 Expected Remote Options hash (VER=V4): 'f7df56b8'
Mon Aug 24 05:56:06 2015 us=225760 UDPv4 link local: [undef]
Mon Aug 24 05:56:06 2015 us=225769 UDPv4 link remote: [AF_INET]1.2.3.4:1194
Mon Aug 24 05:56:06 2015 us=460131 TLS: Initial packet from [AF_INET]1.2.3.4:1194, sid=f7aee723 e93720bb
Mon Aug 24 05:56:08 2015 us=116632 VERIFY OK: depth=1, C=US, ST=IL, L=Chicago, O=Hostname, OU=hostname, CN=hostname.com, name=hostname, emailAddress=admin@hostname.com
Mon Aug 24 05:56:08 2015 us=117387 Validating certificate key usage
Mon Aug 24 05:56:08 2015 us=117423 ++ Certificate has key usage 00a0, expects 00a0
Mon Aug 24 05:56:08 2015 us=117450 VERIFY KU OK
Mon Aug 24 05:56:08 2015 us=117483 Validating certificate extended key usage
Mon Aug 24 05:56:08 2015 us=117519 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Aug 24 05:56:08 2015 us=117546 VERIFY EKU OK
Mon Aug 24 05:56:08 2015 us=117573 VERIFY OK: depth=0, C=US, ST=IL, L=Chicago, O=Hostname, OU=hostname, CN=server, name=hostname, emailAddress=admin@hostname.com
Mon Aug 24 05:56:10 2015 us=786167 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 24 05:56:10 2015 us=786220 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 24 05:56:10 2015 us=786397 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Aug 24 05:56:10 2015 us=786427 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 24 05:56:10 2015 us=786492 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Aug 24 05:56:10 2015 us=786547 [server] Peer Connection Initiated with [AF_INET]1.2.3.4:1194
Mon Aug 24 05:56:13 2015 us=239451 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Aug 24 05:56:13 2015 us=473485 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.4,ping 10,ping-restart 120,ifconfig 10.8.0.128 255.255.255.0'
Mon Aug 24 05:56:13 2015 us=473742 OPTIONS IMPORT: timers and/or timeouts modified
Mon Aug 24 05:56:13 2015 us=473771 OPTIONS IMPORT: --ifconfig/up options modified
Mon Aug 24 05:56:13 2015 us=473795 OPTIONS IMPORT: route options modified
Mon Aug 24 05:56:13 2015 us=473817 OPTIONS IMPORT: route-related options modified
Mon Aug 24 05:56:13 2015 us=473840 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Aug 24 05:56:13 2015 us=474595 ROUTE_GATEWAY 9.8.7.6/255.255.255.0 IFACE=eth0 HWADDR=0c:c4:7a:15:f6:02
Mon Aug 24 05:56:13 2015 us=475832 TUN/TAP device tap0 opened
Mon Aug 24 05:56:13 2015 us=475909 TUN/TAP TX queue length set to 100
Mon Aug 24 05:56:13 2015 us=475982 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Aug 24 05:56:13 2015 us=476078 /sbin/ip link set dev tap0 up mtu 1500
Mon Aug 24 05:56:13 2015 us=496019 /sbin/ip addr add dev tap0 10.8.0.128/24 broadcast 10.8.0.255
Mon Aug 24 05:56:13 2015 us=499736 /sbin/ip route add 1.2.3.4/32 via 9.8.7.6
Mon Aug 24 05:56:13 2015 us=502112 /sbin/ip route add 0.0.0.0/1 via 10.8.0.4
Mon Aug 24 05:56:13 2015 us=504262 /sbin/ip route add 128.0.0.0/1 via 10.8.0.4
Mon Aug 24 05:56:13 2015 us=506411 /sbin/ip route add 0.0.0.0/2 via 9.8.7.6
Mon Aug 24 05:56:13 2015 us=508530 /sbin/ip route add 64.0.0.0/2 via 9.8.7.6
Mon Aug 24 05:56:13 2015 us=510655 /sbin/ip route add 128.0.0.0/2 via 9.8.7.6
Mon Aug 24 05:56:13 2015 us=512827 /sbin/ip route add 192.0.0.0/2 via 9.8.7.6
Mon Aug 24 05:56:13 2015 us=514931 Initialization Sequence Completed
Mon Aug 24 05:57:20 2015 us=954039 event_wait : Interrupted system call (code=4)
Mon Aug 24 05:57:20 2015 us=954685 TCP/UDP: Closing socket
Mon Aug 24 05:57:20 2015 us=954815 /sbin/ip route del 192.0.0.0/2
Mon Aug 24 05:57:20 2015 us=961248 /sbin/ip route del 128.0.0.0/2
Mon Aug 24 05:57:20 2015 us=967783 /sbin/ip route del 64.0.0.0/2
Mon Aug 24 05:57:20 2015 us=974192 /sbin/ip route del 0.0.0.0/2
Mon Aug 24 05:57:20 2015 us=980543 /sbin/ip route del 1.2.3.4/32
Mon Aug 24 05:57:20 2015 us=986990 /sbin/ip route del 0.0.0.0/1
Mon Aug 24 05:57:20 2015 us=993537 /sbin/ip route del 128.0.0.0/1
Mon Aug 24 05:57:21 2015 us=187 Closing TUN/TAP interface
Mon Aug 24 05:57:21 2015 us=285 /sbin/ip addr del dev tap0 10.8.0.128/24
Mon Aug 24 05:57:21 2015 us=36057 SIGINT[hard,] received, process exiting

I am not new to networking but new to VPN setups and have been working on this for a few weeks now, so any assistance would be appreciated. Please help! ^_^

Traffic

The most obvious question .. do you have administrator access to the server or not ?

Jaws12

Traffic wroteThe most obvious question .. do you have administrator access to the server or not ?

Yes I have administrator/sudo access to all systems involved in this setup.

Traffic

Jaws12 wrote am attempting to set up an OpenVPN server bridging the VPN subnet with the internal 10.* NIC of the server system

So what is your server LAN subnet ?

Jaws12

Traffic wrote
Jaws12 wrote am attempting to set up an OpenVPN server bridging the VPN subnet with the internal 10.* NIC of the server system
So what is your server LAN subnet ?

The OpenVPN server system in question has an internal IP of 10.33.53.20 [broadcast: 10.33.53.127, subnet mask: 255.255.255.128]. It can also connect to other systems on the internal network with slightly different subnets (another server on the internal network has an IP address of 10.35.74.133 [broadcast: 10.35.74.159, subnet mask: 255.255.255.224], for example, another server 10.3.203.81 [broadcast: 10.3.203.127, subnet mask: 255.255.255.192).

The internal interconnectivity of these different subnets on the server side is managed by our server host provider, but all of our systems at the Chicago location can communicate with each other on their internal 10.* IP addresses.

[On a semi-related forum note, is there anything I need to confirm or do to make my posts get moderated faster/show up more quickly? The amount of time it takes for my responses to show up seems to slow down the forum conversation immensely.]

Thanks! ^_^

Traffic

Jaws12 wroteHopefully I am just doing something simply stupid

Jaws12 wroteOpenVPN server system in question has an internal IP of 10.33.53.20

Jaws12 wroteserver-bridge 10.8.0.4 255.255.255.0 10.8.0.128 10.8.0.254

should be:

server-bridge 10.33.53.xxx 255.255.255.0 10.33.53.128 10.33.53.254

where xxx is the server side default gateway.

Probably worth reviewing this:
ethernet-bridging

Jaws12

Traffic wroteshould be:
server-bridge 10.33.53.xxx 255.255.255.0 10.33.53.128 10.33.53.254
where xxx is the server side default gateway.

Probably worth reviewing this:
ethernet-bridging

I attempted to change the configuration with the following values:

server-bridge 10.33.53.1 255.255.255.0 10.33.53.200 10.33.53.254

and again, the client received an IP address, 10.33.53.200, but I was still unable to ping/reach any server-side resources from the client. Investigating further, it seems like the routing table/default gateway of our network configuration is more complex than simply being 10.33.53.1, as we might expect:

(With Bridge/OpenVPN running)
(public IP changed to 1.2.3.4, 1.2.3.2 reflects public IP minus 2 in fourth octet, 1.2.3.3 reflects minus 1 in fourth octet)

-bash-3.2$ sudo route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
1.2.3.2         0.0.0.0         255.255.255.248 U     0      0        0 eth0
10.33.53.0      0.0.0.0         255.255.255.128 U     0      0        0 br0
10.33.53.0      0.0.0.0         255.255.255.128 U     0      0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth1
10.0.0.0        10.33.53.1      255.0.0.0       UG    0      0        0 br0
0.0.0.0         1.2.3.3         0.0.0.0         UG    0      0        0 eth0

Also for further reference, here is my 'bridge-start' script that I am using to create the bridge device:

#!/bin/sh
br="br0"

tap="tap0"

eth="eth1"
eth_ip="10.33.53.20"
eth_netmask="255.255.255.128"
eth_broadcast="10.33.53.127"

for t in $tap; do
    openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

for t in $tap; do
    ifconfig $t 0.0.0.0 promisc up
done

ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast

Traffic

Jaws12 wrote(With Bridge/OpenVPN running)
(public IP changed to 1.2.3.4

This infers your server is the default gateway for your server side LAN .. and so what ever your server's IP address is, it is the default gateway. You do not use the upstream internet gateway in OpenVPN.

So:

server-bridge 10.33.53.1 255.255.255.0 10.33.53.200 10.33.53.254

is probably correct. (Of course, you need to understand your network)

If your client can connect and get an IP in the DHCP range 10.33.53.200 10.33.53.254 but cannot ping devices on the server LAN then most likely check your firewalls.

However,

Jaws12 wrote***Note: "route 0.0.0.0 192.0.0.0 net_gateway" lines were added to stop pushing of route directives from VPN server

This is why I asked about administrative access to the server .. Remove those lines from your client config and remove the push "redirect-gateway" from your server config, then try again.

Finally, unless you know what you need a bridge for .. a tunnel is better performance and easier to manage.