Hi:
I'm tring to setup and openvpn server with windows 8, and client is a 3g router (Teltonika)
I have followed this guide:
https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide
Server connects and i can succcesfully ping from the windows machine to 10.8.0.1
It seems client "nearly" connects, but I cannot ping it from the server.
Here is the text from the vpn connection, before client tries to connect:
Sat Sep 05 10:53:43 2015 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\server.log: Acceso denegado. (errno=5)
Sat Sep 05 10:53:43 2015 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Sat Sep 05 10:53:43 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Sat Sep 05 10:53:43 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat Sep 05 10:53:43 2015 Need hold release from management interface, waiting...
Sat Sep 05 10:53:44 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat Sep 05 10:53:44 2015 MANAGEMENT: CMD 'state on'
Sat Sep 05 10:53:44 2015 MANAGEMENT: CMD 'log all on'
Sat Sep 05 10:53:44 2015 MANAGEMENT: CMD 'hold off'
Sat Sep 05 10:53:44 2015 MANAGEMENT: CMD 'hold release'
Sat Sep 05 10:53:44 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat Sep 05 10:53:44 2015 Note: cannot open openvpn-status.log for WRITE
Sat Sep 05 10:53:44 2015 Note: cannot open ipp.txt for READ/WRITE
Sat Sep 05 10:53:44 2015 Diffie-Hellman initialized with 1024 bit key
Sat Sep 05 10:53:44 2015 Socket Buffers: R=[65536->65536] S=[64512->64512]
Sat Sep 05 10:53:44 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Sep 05 10:53:44 2015 MANAGEMENT: >STATE:1441443224,ASSIGN_IP,,10.8.0.1,
Sat Sep 05 10:53:44 2015 open_tun, tt->ipv6=0
Sat Sep 05 10:53:44 2015 TAP-WIN32 device [VPN Cholopa] opened: \\.\Global\{08F12F12-79B9-4EB5-8793-36F414D3737B}.tap
Sat Sep 05 10:53:44 2015 TAP-Windows Driver Version 9.21
Sat Sep 05 10:53:44 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {08F12F12-79B9-4EB5-8793-36F414D3737B} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sat Sep 05 10:53:44 2015 Sleeping for 10 seconds...
Sat Sep 05 10:53:54 2015 NOTE: FlushIpNetTable failed on interface [11] {08F12F12-79B9-4EB5-8793-36F414D3737B} (status=5) : Acceso denegado.
Sat Sep 05 10:53:54 2015 MANAGEMENT: >STATE:1441443234,ADD_ROUTES,,,
Sat Sep 05 10:53:54 2015 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sat Sep 05 10:53:54 2015 ROUTE: route addition failed using CreateIpForwardEntry: Acceso denegado. [status=5 if_index=11]
Sat Sep 05 10:53:54 2015 Route addition via IPAPI failed [adaptive]
Sat Sep 05 10:53:54 2015 Route addition fallback to route.exe
Sat Sep 05 10:53:54 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Sep 05 10:53:54 2015 ERROR: Windows route add command failed [adaptive]: returned error code 1
Sat Sep 05 10:53:54 2015 UDPv4 link local (bound): [undef]
Sat Sep 05 10:53:54 2015 UDPv4 link remote: [undef]
Sat Sep 05 10:53:54 2015 MULTI: multi_init called, r=256 v=256
Sat Sep 05 10:53:54 2015 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Sep 05 10:53:54 2015 IFCONFIG POOL LIST
Sat Sep 05 10:53:54 2015 Initialization Sequence Completed
Sat Sep 05 10:53:54 2015 MANAGEMENT: >STATE:1441443234,CONNECTED,SUCCESS,10.8.0.1,
And here is the text I get when the client tries to connect:
Sat Sep 05 11:02:47 2015 80.29.242.101:48324 TLS: Initial packet from [AF_INET]80.29.242.101:48324, sid=34b90a69 d17ff1ad
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 VERIFY OK: depth=1, C=SP, ST=MD, L=LasRozasdeMadrid, O=OpenVPN, OU=openvpn-pacho, CN=changeme, name=build-key-server server, emailAddress=
XX@gmail.com
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 VERIFY OK: depth=0, C=SP, ST=MD, L=LasRozasdeMadrid, O=OpenVPN, OU=changeme, CN=modem-3g, name=changeme, emailAddress=
xx@gmail.com
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Sep 05 11:02:50 2015 80.29.242.101:48324 [modem-3g] Peer Connection Initiated with [AF_INET]80.29.242.101:48324
Sat Sep 05 11:02:50 2015 modem-3g/80.29.242.101:48324 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sat Sep 05 11:02:50 2015 modem-3g/80.29.242.101:48324 MULTI: Learn: 10.8.0.6 -> modem-3g/80.29.242.101:48324
Sat Sep 05 11:02:50 2015 modem-3g/80.29.242.101:48324 MULTI: primary virtual IP for modem-3g/80.29.242.101:48324: 10.8.0.6
Sat Sep 05 11:02:53 2015 modem-3g/80.29.242.101:48324 PUSH: Received control message: 'PUSH_REQUEST'
Sat Sep 05 11:02:53 2015 modem-3g/80.29.242.101:48324 send_push_reply(): safe_cap=940
Sat Sep 05 11:02:53 2015 modem-3g/80.29.242.101:48324 SENT CONTROL [modem-3g]: 'PUSH_REPLY,route-metric 512,route 0.0.0.0 0.0.0.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
This is the routes I get in the client:
Network Target IPv4-Gateway Metric
ppp 0.0.0.0/0 10.64.64.64 0
vpn 0.0.0.0/0 10.8.0.5 512
vpn 10.8.0.1 10.8.0.5 512
vpn 10.8.0.5 0.0.0.0 0
ppp 10.64.64.64 0.0.0.0 0
lan 192.168.1.0/24 0.0.0.0 0
Any help very much apprecciate.
Thanks in advance.
Regards,
