I am providing my server log at verb 4, along with my revised ccd files.
In my log, I start the server, connect with client A (tyltw10), and client B (macbook).
Client A (tyltw10) 10.16.0.6 cannot ping Client B (macbook) 10.16.0.10
Client B (macbook) 10.16.0.10 CAN ping Client A (tyltw10) 10.16.0.6
Clients both have all firewalls disabled
Clients can both reach 10.250.0.1, which is behind the VPN
ccd file contents:
iroute 10.16.0.0
server log:
[root@ip-10-0-10-205 openvpn]# service openvpn start
Starting openvpn: [ OK ]
[root@ip-10-0-10-205 openvpn]# cat openvpn-bridge.log
Mon Sep 28 20:48:00 2015 us=275826 Current Parameter Settings:
Mon Sep 28 20:48:00 2015 us=275872 config = 'server02.conf'
Mon Sep 28 20:48:00 2015 us=275880 mode = 1
Mon Sep 28 20:48:00 2015 us=275887 persist_config = DISABLED
Mon Sep 28 20:48:00 2015 us=275893 persist_mode = 1
Mon Sep 28 20:48:00 2015 us=275899 show_ciphers = DISABLED
Mon Sep 28 20:48:00 2015 us=275905 show_digests = DISABLED
Mon Sep 28 20:48:00 2015 us=275911 show_engines = DISABLED
Mon Sep 28 20:48:00 2015 us=275916 genkey = DISABLED
Mon Sep 28 20:48:00 2015 us=275922 key_pass_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=275928 show_tls_ciphers = DISABLED
Mon Sep 28 20:48:00 2015 us=275933 Connection profiles [default]:
Mon Sep 28 20:48:00 2015 us=275939 proto = tcp-server
Mon Sep 28 20:48:00 2015 us=275945 local = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=275951 local_port = 4321
Mon Sep 28 20:48:00 2015 us=275957 remote = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=275963 remote_port = 4321
Mon Sep 28 20:48:00 2015 us=275969 remote_float = DISABLED
Mon Sep 28 20:48:00 2015 us=275974 bind_defined = DISABLED
Mon Sep 28 20:48:00 2015 us=275980 bind_local = ENABLED
Mon Sep 28 20:48:00 2015 us=275986 connect_retry_seconds = 5
Mon Sep 28 20:48:00 2015 us=275991 connect_timeout = 10
Mon Sep 28 20:48:00 2015 us=275997 connect_retry_max = 0
Mon Sep 28 20:48:00 2015 us=276003 socks_proxy_server = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276009 socks_proxy_port = 0
Mon Sep 28 20:48:00 2015 us=276015 socks_proxy_retry = DISABLED
Mon Sep 28 20:48:00 2015 us=276020 tun_mtu = 1500
Mon Sep 28 20:48:00 2015 us=276026 tun_mtu_defined = ENABLED
Mon Sep 28 20:48:00 2015 us=276032 link_mtu = 1500
Mon Sep 28 20:48:00 2015 us=276038 link_mtu_defined = DISABLED
Mon Sep 28 20:48:00 2015 us=276044 tun_mtu_extra = 0
Mon Sep 28 20:48:00 2015 us=276050 tun_mtu_extra_defined = DISABLED
Mon Sep 28 20:48:00 2015 us=276055 mtu_discover_type = -1
Mon Sep 28 20:48:00 2015 us=276061 fragment = 0
Mon Sep 28 20:48:00 2015 us=276067 mssfix = 1450
Mon Sep 28 20:48:00 2015 us=276073 explicit_exit_notification = 0
Mon Sep 28 20:48:00 2015 us=276079 Connection profiles END
Mon Sep 28 20:48:00 2015 us=276084 remote_random = DISABLED
Mon Sep 28 20:48:00 2015 us=276090 ipchange = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276096 dev = 'tun'
Mon Sep 28 20:48:00 2015 us=276101 dev_type = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276107 dev_node = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276113 lladdr = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276119 topology = 1
Mon Sep 28 20:48:00 2015 us=276124 tun_ipv6 = DISABLED
Mon Sep 28 20:48:00 2015 us=276130 ifconfig_local = '10.16.0.1'
Mon Sep 28 20:48:00 2015 us=276135 ifconfig_remote_netmask = '10.16.0.2'
Mon Sep 28 20:48:00 2015 us=276141 ifconfig_noexec = DISABLED
Mon Sep 28 20:48:00 2015 us=276147 ifconfig_nowarn = DISABLED
Mon Sep 28 20:48:00 2015 us=276152 ifconfig_ipv6_local = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276158 ifconfig_ipv6_netbits = 0
Mon Sep 28 20:48:00 2015 us=276164 ifconfig_ipv6_remote = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276170 shaper = 0
Mon Sep 28 20:48:00 2015 us=276175 mtu_test = 0
Mon Sep 28 20:48:00 2015 us=276181 mlock = DISABLED
Mon Sep 28 20:48:00 2015 us=276186 keepalive_ping = 10
Mon Sep 28 20:48:00 2015 us=276192 keepalive_timeout = 120
Mon Sep 28 20:48:00 2015 us=276198 inactivity_timeout = 0
Mon Sep 28 20:48:00 2015 us=276203 ping_send_timeout = 10
Mon Sep 28 20:48:00 2015 us=276209 ping_rec_timeout = 240
Mon Sep 28 20:48:00 2015 us=276215 ping_rec_timeout_action = 2
Mon Sep 28 20:48:00 2015 us=276220 ping_timer_remote = DISABLED
Mon Sep 28 20:48:00 2015 us=276226 remap_sigusr1 = 0
Mon Sep 28 20:48:00 2015 us=276232 persist_tun = ENABLED
Mon Sep 28 20:48:00 2015 us=276237 persist_local_ip = DISABLED
Mon Sep 28 20:48:00 2015 us=276243 persist_remote_ip = DISABLED
Mon Sep 28 20:48:00 2015 us=276249 persist_key = ENABLED
Mon Sep 28 20:48:00 2015 us=276254 passtos = DISABLED
Mon Sep 28 20:48:00 2015 us=276260 resolve_retry_seconds = 1000000000
Mon Sep 28 20:48:00 2015 us=276270 username = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276276 groupname = 'nobody'
Mon Sep 28 20:48:00 2015 us=276282 chroot_dir = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276288 cd_dir = '/etc/openvpn'
Mon Sep 28 20:48:00 2015 us=276294 writepid = '/var/run/openvpn/server02.pid'
Mon Sep 28 20:48:00 2015 us=276299 up_script = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276305 down_script = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276311 down_pre = DISABLED
Mon Sep 28 20:48:00 2015 us=276316 up_restart = DISABLED
Mon Sep 28 20:48:00 2015 us=276322 up_delay = DISABLED
Mon Sep 28 20:48:00 2015 us=276327 daemon = ENABLED
Mon Sep 28 20:48:00 2015 us=276333 inetd = 0
Mon Sep 28 20:48:00 2015 us=276339 log = ENABLED
Mon Sep 28 20:48:00 2015 us=276344 suppress_timestamps = DISABLED
Mon Sep 28 20:48:00 2015 us=276350 nice = 0
Mon Sep 28 20:48:00 2015 us=276356 verbosity = 4
Mon Sep 28 20:48:00 2015 us=276361 mute = 0
Mon Sep 28 20:48:00 2015 us=276367 gremlin = 0
Mon Sep 28 20:48:00 2015 us=276372 status_file = 'openvpn-status-bridge.log'
Mon Sep 28 20:48:00 2015 us=276378 status_file_version = 1
Mon Sep 28 20:48:00 2015 us=276384 status_file_update_freq = 60
Mon Sep 28 20:48:00 2015 us=276389 occ = ENABLED
Mon Sep 28 20:48:00 2015 us=276395 rcvbuf = 65536
Mon Sep 28 20:48:00 2015 us=276400 sndbuf = 65536
Mon Sep 28 20:48:00 2015 us=276406 mark = 0
Mon Sep 28 20:48:00 2015 us=276412 sockflags = 0
Mon Sep 28 20:48:00 2015 us=276417 fast_io = DISABLED
Mon Sep 28 20:48:00 2015 us=276423 lzo = 7
Mon Sep 28 20:48:00 2015 us=276428 route_script = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276434 route_default_gateway = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276440 route_default_metric = 0
Mon Sep 28 20:48:00 2015 us=276445 route_noexec = DISABLED
Mon Sep 28 20:48:00 2015 us=276451 route_delay = 0
Mon Sep 28 20:48:00 2015 us=276457 route_delay_window = 30
Mon Sep 28 20:48:00 2015 us=276463 route_delay_defined = DISABLED
Mon Sep 28 20:48:00 2015 us=276468 route_nopull = DISABLED
Mon Sep 28 20:48:00 2015 us=276474 route_gateway_via_dhcp = DISABLED
Mon Sep 28 20:48:00 2015 us=276480 max_routes = 100
Mon Sep 28 20:48:00 2015 us=276485 allow_pull_fqdn = DISABLED
Mon Sep 28 20:48:00 2015 us=276491 route 10.16.0.0/nil/nil/nil
Mon Sep 28 20:48:00 2015 us=276497 route 10.16.0.0/255.255.0.0/nil/nil
Mon Sep 28 20:48:00 2015 us=276503 management_addr = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276509 management_port = 0
Mon Sep 28 20:48:00 2015 us=276515 management_user_pass = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276523 management_log_history_cache = 250
Mon Sep 28 20:48:00 2015 us=276529 management_echo_buffer_size = 100
Mon Sep 28 20:48:00 2015 us=276535 management_write_peer_info_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276541 management_client_user = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276547 management_client_group = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276552 management_flags = 0
Mon Sep 28 20:48:00 2015 us=276558 shared_secret_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276564 key_direction = 0
Mon Sep 28 20:48:00 2015 us=276570 ciphername_defined = ENABLED
Mon Sep 28 20:48:00 2015 us=276575 ciphername = 'BF-CBC'
Mon Sep 28 20:48:00 2015 us=276581 authname_defined = ENABLED
Mon Sep 28 20:48:00 2015 us=276587 authname = 'SHA1'
Mon Sep 28 20:48:00 2015 us=276592 prng_hash = 'SHA1'
Mon Sep 28 20:48:00 2015 us=276598 prng_nonce_secret_len = 16
Mon Sep 28 20:48:00 2015 us=276604 keysize = 0
Mon Sep 28 20:48:00 2015 us=276610 engine = DISABLED
Mon Sep 28 20:48:00 2015 us=276616 replay = ENABLED
Mon Sep 28 20:48:00 2015 us=276621 mute_replay_warnings = DISABLED
Mon Sep 28 20:48:00 2015 us=276627 replay_window = 64
Mon Sep 28 20:48:00 2015 us=276633 replay_time = 15
Mon Sep 28 20:48:00 2015 us=276638 packet_id_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276644 use_iv = ENABLED
Mon Sep 28 20:48:00 2015 us=276650 test_crypto = DISABLED
Mon Sep 28 20:48:00 2015 us=276655 tls_server = ENABLED
Mon Sep 28 20:48:00 2015 us=276664 tls_client = DISABLED
Mon Sep 28 20:48:00 2015 us=276671 key_method = 2
Mon Sep 28 20:48:00 2015 us=276676 ca_file = 'ca.crt'
Mon Sep 28 20:48:00 2015 us=276682 ca_path = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276688 dh_file = 'dh2048.pem'
Mon Sep 28 20:48:00 2015 us=276694 cert_file = 'server.crt'
Mon Sep 28 20:48:00 2015 us=276699 priv_key_file = 'server.key'
Mon Sep 28 20:48:00 2015 us=276705 pkcs12_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276733 cipher_list = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276740 tls_verify = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276746 tls_export_cert = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276752 verify_x509_type = 0
Mon Sep 28 20:48:00 2015 us=276758 verify_x509_name = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276763 crl_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276769 ns_cert_type = 0
Mon Sep 28 20:48:00 2015 us=276775 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276781 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276786 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276792 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276800 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276806 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276812 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276817 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276823 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276829 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276834 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276840 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276845 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276851 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276857 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276862 remote_cert_ku[i] = 0
Mon Sep 28 20:48:00 2015 us=276868 remote_cert_eku = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276874 ssl_flags = 0
Mon Sep 28 20:48:00 2015 us=276879 tls_timeout = 2
Mon Sep 28 20:48:00 2015 us=276885 renegotiate_bytes = 0
Mon Sep 28 20:48:00 2015 us=276891 renegotiate_packets = 0
Mon Sep 28 20:48:00 2015 us=276897 renegotiate_seconds = 3600
Mon Sep 28 20:48:00 2015 us=276902 handshake_window = 60
Mon Sep 28 20:48:00 2015 us=276908 transition_window = 3600
Mon Sep 28 20:48:00 2015 us=276914 single_session = DISABLED
Mon Sep 28 20:48:00 2015 us=276920 push_peer_info = DISABLED
Mon Sep 28 20:48:00 2015 us=276926 tls_exit = DISABLED
Mon Sep 28 20:48:00 2015 us=276931 tls_auth_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=276937 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276943 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276949 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276955 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276960 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276966 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276972 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276977 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276983 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276989 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=276997 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=277003 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=277009 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=277015 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=277020 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=277026 pkcs11_protected_authentication = DISABLED
Mon Sep 28 20:48:00 2015 us=277032 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277038 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277044 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277050 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277060 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277066 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277072 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277077 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277083 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277089 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277094 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277100 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277105 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277111 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277117 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277122 pkcs11_private_mode = 00000000
Mon Sep 28 20:48:00 2015 us=277128 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277133 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277139 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277145 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277150 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277156 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277161 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277167 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277173 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277178 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277184 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277189 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277195 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277200 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277206 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277212 pkcs11_cert_private = DISABLED
Mon Sep 28 20:48:00 2015 us=277217 pkcs11_pin_cache_period = -1
Mon Sep 28 20:48:00 2015 us=277223 pkcs11_id = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=277229 pkcs11_id_management = DISABLED
Mon Sep 28 20:48:00 2015 us=277236 server_network = 10.16.0.0
Mon Sep 28 20:48:00 2015 us=277242 server_netmask = 255.255.0.0
Mon Sep 28 20:48:00 2015 us=277254 server_network_ipv6 = ::
Mon Sep 28 20:48:00 2015 us=277261 server_netbits_ipv6 = 0
Mon Sep 28 20:48:00 2015 us=277267 server_bridge_ip = 0.0.0.0
Mon Sep 28 20:48:00 2015 us=277274 server_bridge_netmask = 0.0.0.0
Mon Sep 28 20:48:00 2015 us=277280 server_bridge_pool_start = 0.0.0.0
Mon Sep 28 20:48:00 2015 us=277286 server_bridge_pool_end = 0.0.0.0
Mon Sep 28 20:48:00 2015 us=277292 push_entry = 'route 10.0.0.0 255.255.0.0'
Mon Sep 28 20:48:00 2015 us=277298 push_entry = 'route 10.250.0.0 255.255.0.0'
Mon Sep 28 20:48:00 2015 us=277304 push_entry = 'route 10.10.0.0 255.255.0.0'
Mon Sep 28 20:48:00 2015 us=277310 push_entry = 'route 10.11.0.0 255.255.0.0'
Mon Sep 28 20:48:00 2015 us=277316 push_entry = 'route 10.16.0.0 255.255.0.0'
Mon Sep 28 20:48:00 2015 us=277321 push_entry = 'route 10.16.0.0 255.255.0.0'
Mon Sep 28 20:48:00 2015 us=277327 push_entry = 'topology net30'
Mon Sep 28 20:48:00 2015 us=277333 push_entry = 'ping 10'
Mon Sep 28 20:48:00 2015 us=277338 push_entry = 'ping-restart 120'
Mon Sep 28 20:48:00 2015 us=277344 ifconfig_pool_defined = ENABLED
Mon Sep 28 20:48:00 2015 us=277351 ifconfig_pool_start = 10.16.0.4
Mon Sep 28 20:48:00 2015 us=277357 ifconfig_pool_end = 10.16.255.251
Mon Sep 28 20:48:00 2015 us=277363 ifconfig_pool_netmask = 0.0.0.0
Mon Sep 28 20:48:00 2015 us=277369 ifconfig_pool_persist_filename = 'ipp-bridge.txt'
Mon Sep 28 20:48:00 2015 us=277375 ifconfig_pool_persist_refresh_freq = 600
Mon Sep 28 20:48:00 2015 us=277381 ifconfig_ipv6_pool_defined = DISABLED
Mon Sep 28 20:48:00 2015 us=277387 ifconfig_ipv6_pool_base = ::
Mon Sep 28 20:48:00 2015 us=277393 ifconfig_ipv6_pool_netbits = 0
Mon Sep 28 20:48:00 2015 us=277399 n_bcast_buf = 256
Mon Sep 28 20:48:00 2015 us=277405 tcp_queue_limit = 64
Mon Sep 28 20:48:00 2015 us=277414 real_hash_size = 256
Mon Sep 28 20:48:00 2015 us=277420 virtual_hash_size = 256
Mon Sep 28 20:48:00 2015 us=277426 client_connect_script = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=277432 learn_address_script = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=277438 client_disconnect_script = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=277444 client_config_dir = 'client-configs'
Mon Sep 28 20:48:00 2015 us=277450 ccd_exclusive = DISABLED
Mon Sep 28 20:48:00 2015 us=277455 tmp_dir = '/tmp'
Mon Sep 28 20:48:00 2015 us=277461 push_ifconfig_defined = DISABLED
Mon Sep 28 20:48:00 2015 us=277467 push_ifconfig_local = 0.0.0.0
Mon Sep 28 20:48:00 2015 us=277474 push_ifconfig_remote_netmask = 0.0.0.0
Mon Sep 28 20:48:00 2015 us=277479 push_ifconfig_ipv6_defined = DISABLED
Mon Sep 28 20:48:00 2015 us=277486 push_ifconfig_ipv6_local = ::/0
Mon Sep 28 20:48:00 2015 us=277492 push_ifconfig_ipv6_remote = ::
Mon Sep 28 20:48:00 2015 us=277498 enable_c2c = ENABLED
Mon Sep 28 20:48:00 2015 us=277503 duplicate_cn = ENABLED
Mon Sep 28 20:48:00 2015 us=277509 cf_max = 0
Mon Sep 28 20:48:00 2015 us=277515 cf_per = 0
Mon Sep 28 20:48:00 2015 us=277521 max_clients = 1024
Mon Sep 28 20:48:00 2015 us=277527 max_routes_per_client = 256
Mon Sep 28 20:48:00 2015 us=277532 auth_user_pass_verify_script = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=277538 auth_user_pass_verify_script_via_file = DISABLED
Mon Sep 28 20:48:00 2015 us=277544 port_share_host = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=277550 port_share_port = 0
Mon Sep 28 20:48:00 2015 us=277556 client = DISABLED
Mon Sep 28 20:48:00 2015 us=277561 pull = DISABLED
Mon Sep 28 20:48:00 2015 us=277567 auth_user_pass_file = '[UNDEF]'
Mon Sep 28 20:48:00 2015 us=277574 OpenVPN 2.3.6 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec 10 2014
Mon Sep 28 20:48:00 2015 us=277586 library versions: OpenSSL 1.0.1k-fips 8 Jan 2015, LZO 2.08
Mon Sep 28 20:48:00 2015 us=277645 WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
Mon Sep 28 20:48:00 2015 us=277654 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Mon Sep 28 20:48:00 2015 us=291198 Diffie-Hellman initialized with 2048 bit key
Mon Sep 28 20:48:00 2015 us=291519 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Sep 28 20:48:00 2015 us=291544 Socket Buffers: R=[87380->131072] S=[20480->131072]
Mon Sep 28 20:48:00 2015 us=291621 ROUTE_GATEWAY 10.0.10.1/255.255.255.0 IFACE=eth0 HWADDR=0a:7a:7d:c0:94:fb
Mon Sep 28 20:48:00 2015 us=292047 TUN/TAP device tun1 opened
Mon Sep 28 20:48:00 2015 us=292065 TUN/TAP TX queue length set to 100
Mon Sep 28 20:48:00 2015 us=292077 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Sep 28 20:48:00 2015 us=292095 /sbin/ip link set dev tun1 up mtu 1500
Mon Sep 28 20:48:00 2015 us=293344 /sbin/ip addr add dev tun1 local 10.16.0.1 peer 10.16.0.2
Mon Sep 28 20:48:00 2015 us=294950 /sbin/ip route add 10.16.0.0/32 via 10.16.0.2
Mon Sep 28 20:48:00 2015 us=295663 /sbin/ip route add 10.16.0.0/16 via 10.16.0.2
Mon Sep 28 20:48:00 2015 us=296784 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 28 20:48:00 2015 us=298683 GID set to nobody
Mon Sep 28 20:48:00 2015 us=298714 Listening for incoming TCP connection on [undef]
Mon Sep 28 20:48:00 2015 us=298734 TCPv4_SERVER link local (bound): [undef]
Mon Sep 28 20:48:00 2015 us=298743 TCPv4_SERVER link remote: [undef]
Mon Sep 28 20:48:00 2015 us=298751 MULTI: multi_init called, r=256 v=256
Mon Sep 28 20:48:00 2015 us=324773 IFCONFIG POOL: base=10.16.0.4 size=16382, ipv6=0
Mon Sep 28 20:48:00 2015 us=324803 IFCONFIG POOL LIST
Mon Sep 28 20:48:00 2015 us=324860 MULTI: TCP INIT maxclients=1024 maxevents=1028
Mon Sep 28 20:48:00 2015 us=324887 Initialization Sequence Completed
Mon Sep 28 20:48:12 2015 us=568287 MULTI: multi_create_instance called
Mon Sep 28 20:48:12 2015 us=568366 Re-using SSL/TLS context
Mon Sep 28 20:48:12 2015 us=568401 LZO compression initialized
Mon Sep 28 20:48:12 2015 us=568534 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Sep 28 20:48:12 2015 us=568563 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 28 20:48:12 2015 us=568600 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Sep 28 20:48:12 2015 us=568607 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Sep 28 20:48:12 2015 us=568621 Local Options hash (VER=V4): 'c0103fa8'
Mon Sep 28 20:48:12 2015 us=568632 Expected Remote Options hash (VER=V4): '69109d17'
Mon Sep 28 20:48:12 2015 us=568657 TCP connection established with [AF_INET]69.198.16.154:49757
Mon Sep 28 20:48:12 2015 us=568666 TCPv4_SERVER link local: [undef]
Mon Sep 28 20:48:12 2015 us=568673 TCPv4_SERVER link remote: [AF_INET]69.198.16.154:49757
Mon Sep 28 20:48:13 2015 us=534965 69.198.16.154:49757 TLS: Initial packet from [AF_INET]69.198.16.154:49757, sid=36405502 2a4e57cc
Mon Sep 28 20:48:15 2015 us=584109 69.198.16.154:49757 VERIFY OK: depth=1, C=US, ST=TX, L=Dallas, O=frijoleville, OU=wubbalubbadubdub, CN=vpn.shortchangehero.com, name=vpn, emailAddress=o0beaner@gmail.com
Mon Sep 28 20:48:15 2015 us=584287 69.198.16.154:49757 VERIFY OK: depth=0, C=US, ST=TX, L=Dallas, O=frijoleville, OU=wubbalubbadubdub, CN=tyltw10, name=tyltw10, emailAddress=o0beaner@gmail.com
Mon Sep 28 20:48:15 2015 us=894801 69.198.16.154:49757 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Sep 28 20:48:15 2015 us=894843 69.198.16.154:49757 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 28 20:48:15 2015 us=894890 69.198.16.154:49757 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Sep 28 20:48:15 2015 us=894899 69.198.16.154:49757 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 28 20:48:16 2015 us=76406 69.198.16.154:49757 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Sep 28 20:48:16 2015 us=76461 69.198.16.154:49757 [tyltw10] Peer Connection Initiated with [AF_INET]69.198.16.154:49757
Mon Sep 28 20:48:16 2015 us=76500 tyltw10/69.198.16.154:49757 OPTIONS IMPORT: reading client specific options from: client-configs/tyltw10
Mon Sep 28 20:48:16 2015 us=76561 tyltw10/69.198.16.154:49757 MULTI_sva: pool returned IPv4=10.16.0.6, IPv6=(Not enabled)
Mon Sep 28 20:48:16 2015 us=76594 tyltw10/69.198.16.154:49757 MULTI: Learn: 10.16.0.6 -> tyltw10/69.198.16.154:49757
Mon Sep 28 20:48:16 2015 us=76602 tyltw10/69.198.16.154:49757 MULTI: primary virtual IP for tyltw10/69.198.16.154:49757: 10.16.0.6
Mon Sep 28 20:48:16 2015 us=76610 tyltw10/69.198.16.154:49757 MULTI: internal route 10.16.0.0 -> tyltw10/69.198.16.154:49757
Mon Sep 28 20:48:16 2015 us=76620 tyltw10/69.198.16.154:49757 MULTI: Learn: 10.16.0.0 -> tyltw10/69.198.16.154:49757
Mon Sep 28 20:48:18 2015 us=356080 tyltw10/69.198.16.154:49757 PUSH: Received control message: 'PUSH_REQUEST'
Mon Sep 28 20:48:18 2015 us=356121 tyltw10/69.198.16.154:49757 send_push_reply(): safe_cap=940
Mon Sep 28 20:48:18 2015 us=356143 tyltw10/69.198.16.154:49757 SENT CONTROL [tyltw10]: 'PUSH_REPLY,route 10.0.0.0 255.255.0.0,route 10.250.0.0 255.255.0.0,route 10.10.0.0 255.255.0.0,route 10.11.0.0 255.255.0.0,route 10.16.0.0 255.255.0.0,route 10.16.0.0 255.255.0.0,topology net30,ping 10,ping-restart 120,ifconfig 10.16.0.6 10.16.0.5' (status=1)
Mon Sep 28 20:48:18 2015 us=784199 tyltw10/69.198.16.154:49757 MULTI: bad source address from client [::], packet dropped
Mon Sep 28 20:48:34 2015 us=719038 MULTI: multi_create_instance called
Mon Sep 28 20:48:34 2015 us=719106 Re-using SSL/TLS context
Mon Sep 28 20:48:34 2015 us=719134 LZO compression initialized
Mon Sep 28 20:48:34 2015 us=719214 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Sep 28 20:48:34 2015 us=719235 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 28 20:48:34 2015 us=719274 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Sep 28 20:48:34 2015 us=719281 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Sep 28 20:48:34 2015 us=719295 Local Options hash (VER=V4): 'c0103fa8'
Mon Sep 28 20:48:34 2015 us=719306 Expected Remote Options hash (VER=V4): '69109d17'
Mon Sep 28 20:48:34 2015 us=719325 TCP connection established with [AF_INET]54.240.217.9:51708
Mon Sep 28 20:48:34 2015 us=719333 TCPv4_SERVER link local: [undef]
Mon Sep 28 20:48:34 2015 us=719340 TCPv4_SERVER link remote: [AF_INET]54.240.217.9:51708
Mon Sep 28 20:48:35 2015 us=680497 54.240.217.9:51708 TLS: Initial packet from [AF_INET]54.240.217.9:51708, sid=b069e593 d7659b80
Mon Sep 28 20:48:37 2015 us=684565 54.240.217.9:51708 VERIFY OK: depth=1, C=US, ST=TX, L=Dallas, O=frijoleville, OU=wubbalubbadubdub, CN=vpn.shortchangehero.com, name=vpn, emailAddress=o0beaner@gmail.com
Mon Sep 28 20:48:37 2015 us=684753 54.240.217.9:51708 VERIFY OK: depth=0, C=US, ST=TX, L=Dallas, O=frijoleville, OU=wubbalubbadubdub, CN=macbook, name=macbook, emailAddress=o0beaner@gmail.com
Mon Sep 28 20:48:37 2015 us=961548 54.240.217.9:51708 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Sep 28 20:48:37 2015 us=961590 54.240.217.9:51708 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 28 20:48:37 2015 us=961635 54.240.217.9:51708 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Sep 28 20:48:37 2015 us=961643 54.240.217.9:51708 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 28 20:48:38 2015 us=120539 54.240.217.9:51708 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Sep 28 20:48:38 2015 us=120593 54.240.217.9:51708 [macbook] Peer Connection Initiated with [AF_INET]54.240.217.9:51708
Mon Sep 28 20:48:38 2015 us=120631 macbook/54.240.217.9:51708 OPTIONS IMPORT: reading client specific options from: client-configs/macbook
Mon Sep 28 20:48:38 2015 us=120691 macbook/54.240.217.9:51708 MULTI_sva: pool returned IPv4=10.16.0.10, IPv6=(Not enabled)
Mon Sep 28 20:48:38 2015 us=120750 macbook/54.240.217.9:51708 MULTI: Learn: 10.16.0.10 -> macbook/54.240.217.9:51708
Mon Sep 28 20:48:38 2015 us=120761 macbook/54.240.217.9:51708 MULTI: primary virtual IP for macbook/54.240.217.9:51708: 10.16.0.10
Mon Sep 28 20:48:38 2015 us=120769 macbook/54.240.217.9:51708 MULTI: internal route 10.16.0.0 -> macbook/54.240.217.9:51708
Mon Sep 28 20:48:38 2015 us=120778 macbook/54.240.217.9:51708 MULTI: Learn: 10.16.0.0 -> macbook/54.240.217.9:51708
Mon Sep 28 20:48:40 2015 us=154275 macbook/54.240.217.9:51708 PUSH: Received control message: 'PUSH_REQUEST'
Mon Sep 28 20:48:40 2015 us=154359 macbook/54.240.217.9:51708 send_push_reply(): safe_cap=940
Mon Sep 28 20:48:40 2015 us=155388 macbook/54.240.217.9:51708 SENT CONTROL [macbook]: 'PUSH_REPLY,route 10.0.0.0 255.255.0.0,route 10.250.0.0 255.255.0.0,route 10.10.0.0 255.255.0.0,route 10.11.0.0 255.255.0.0,route 10.16.0.0 255.255.0.0,route 10.16.0.0 255.255.0.0,topology net30,ping 10,ping-restart 120,ifconfig 10.16.0.10 10.16.0.9' (status=1)
