Please go easy - I have tried to find out what I can in this forum and using the documentation without needing to post my specific problems but I've run out of ideas. I'm also not a networking expert so might have approached this request for help wrong. I used verb 6 in line with a sticky I saw about how to ask for help.
My setup
- I have an OpenVPN server running on Windows 7 PC. It is on a home network and has a VPN IP address of 10.8.0.1. LAN IP address of 192.168.1.237.
- I also have a Teltonika 4G router which is running my only client, VPN IP address = 10.8.0.2. LAN IP address = 192.168.4.1.
- Connected to the Teltonika router is a Windows 10 PC (wifi connection LAN IP address = 192.168.4.137) and an IP CCTV camera (ethernet cable connection LAN IP address = 192.168.4.20).
- I would like to be able to stream the CCTV camera to the server PC, and send emails from it to email addresses anywhere.
The problem so far
I have set up the server and client successfully in that they can intiate and handshake etc. I can ping the client from the server PC but cannot use the admin ping function via the 4G router web interface to ping the server. This confuses me as they appear to be exchanging security details/hand shaking when they initialise the VPN connnection.
I have made rules on the PC and router firewalls to allow port 1194 to be forwarded. I have tried manually configuring (as opposed to entering in the Teltonika web-interface) an instantiation of the client on the PC connected to the 4G router over wifi. This connected with the server but I couldn't ping either end.
Accessing the client's LAN seems to be impossible (to me, at this point) as the sample configs only talk about providing client access to the server's LAN as far as I can tell. Someone may tell me that I can achieve CCTV over 4G VPN without accessing client's LAN from the server, in which case I don't care about client LAN access - just the IP camera services (rtsp streams and email).
Here's my server config. I'm afraid I can't see how to extract the client config from the 4G router but I'll list what it asks for and what I submitted on the OpenVPV page.
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
route 198.168.4.0 255.255.255.0
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 6
I have a config\ccd folder with this in a text file in it:
iroute 192.168.4.0 255.255.255.0
Here's what I put in the client on the router:
TUN
Port 1194
LZO
Encryption BF-CBC 128
Auth TLS
Remote host/IP address XXX.XXX.XXX.XXX (obviously removed for privacy)
resolve retry infinite
keep alive 10 60
remote network IP address 10.8.00
remote network IP netmask 255.255.255.0
Certificate Authority - copied from key generation files on server computer
Client certificate - copied from key generation files on server computer
Client Key - copied from key generation files on server computer
Here's the log from the server on the PC:
Tue Dec 08 04:12:17 2015 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Tue Dec 08 04:12:17 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Tue Dec 08 04:12:17 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.xxx.xxx.1:25340
Tue Dec 08 04:12:17 2015 Need hold release from management interface, waiting...
Tue Dec 08 04:12:18 2015 MANAGEMENT: Client connected from [AF_INET]127.xxx.xxx.1:25340
Tue Dec 08 04:12:18 2015 MANAGEMENT: CMD 'state on'
Tue Dec 08 04:12:18 2015 MANAGEMENT: CMD 'log all on'
Tue Dec 08 04:12:18 2015 MANAGEMENT: CMD 'hold off'
Tue Dec 08 04:12:18 2015 MANAGEMENT: CMD 'hold release'
Tue Dec 08 04:12:18 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Dec 08 04:12:18 2015 Diffie-Hellman initialized with 1024 bit key
Tue Dec 08 04:12:18 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Dec 08 04:12:18 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Dec 08 04:12:18 2015 MANAGEMENT: >STATE:1449547938,ASSIGN_IP,,10.8.0.1,
Tue Dec 08 04:12:18 2015 open_tun, tt->ipv6=0
Tue Dec 08 04:12:18 2015 TAP-WIN32 device [Local Area Connection 6] opened: \\.\Global\{4A0A5579-B682-4B61-80CF-A55878E6B1F7}.tap
Tue Dec 08 04:12:18 2015 TAP-Windows Driver Version 9.21 Wed Dec 09 00:56:07 2015 us=548814 Current Parameter Settings:
Wed Dec 09 00:56:07 2015 us=548814 config = 'config.ovpn'
Wed Dec 09 00:56:07 2015 us=548814 mode = 1
Wed Dec 09 00:56:07 2015 us=548814 show_ciphers = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 show_digests = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 show_engines = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 genkey = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 key_pass_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 show_tls_ciphers = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 Connection profiles [default]:
Wed Dec 09 00:56:07 2015 us=548814 proto = udp
Wed Dec 09 00:56:07 2015 us=548814 local = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 local_port = 1194
Wed Dec 09 00:56:07 2015 us=548814 remote = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 remote_port = 1194
Wed Dec 09 00:56:07 2015 us=548814 remote_float = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 bind_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 bind_local = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 connect_retry_seconds = 5
Wed Dec 09 00:56:07 2015 us=548814 connect_timeout = 10
Wed Dec 09 00:56:07 2015 us=548814 connect_retry_max = 0
Wed Dec 09 00:56:07 2015 us=548814 socks_proxy_server = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 socks_proxy_port = 0
Wed Dec 09 00:56:07 2015 us=548814 socks_proxy_retry = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 tun_mtu = 1500
Wed Dec 09 00:56:07 2015 us=548814 tun_mtu_defined = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 link_mtu = 1500
Wed Dec 09 00:56:07 2015 us=548814 link_mtu_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 tun_mtu_extra = 0
Wed Dec 09 00:56:07 2015 us=548814 tun_mtu_extra_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 mtu_discover_type = -1
Wed Dec 09 00:56:07 2015 us=548814 fragment = 0
Wed Dec 09 00:56:07 2015 us=548814 mssfix = 1450
Wed Dec 09 00:56:07 2015 us=548814 explicit_exit_notification = 0
Wed Dec 09 00:56:07 2015 us=548814 Connection profiles END
Wed Dec 09 00:56:07 2015 us=548814 remote_random = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 ipchange = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 dev = 'tun'
Wed Dec 09 00:56:07 2015 us=548814 dev_type = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 dev_node = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 lladdr = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 topology = 3
Wed Dec 09 00:56:07 2015 us=548814 tun_ipv6 = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_local = '10.8.0.1'
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_remote_netmask = '255.255.255.0'
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_noexec = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_nowarn = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_ipv6_local = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_ipv6_netbits = 0
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_ipv6_remote = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 shaper = 0
Wed Dec 09 00:56:07 2015 us=548814 mtu_test = 0
Wed Dec 09 00:56:07 2015 us=548814 mlock = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 keepalive_ping = 10
Wed Dec 09 00:56:07 2015 us=548814 keepalive_timeout = 120
Wed Dec 09 00:56:07 2015 us=548814 inactivity_timeout = 0
Wed Dec 09 00:56:07 2015 us=548814 ping_send_timeout = 10
Wed Dec 09 00:56:07 2015 us=548814 ping_rec_timeout = 240
Wed Dec 09 00:56:07 2015 us=548814 ping_rec_timeout_action = 2
Wed Dec 09 00:56:07 2015 us=548814 ping_timer_remote = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 remap_sigusr1 = 0
Wed Dec 09 00:56:07 2015 us=548814 persist_tun = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 persist_local_ip = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 persist_remote_ip = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 persist_key = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 passtos = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 resolve_retry_seconds = 1000000000
Wed Dec 09 00:56:07 2015 us=548814 username = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 groupname = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 chroot_dir = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 cd_dir = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 writepid = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 up_script = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 down_script = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 down_pre = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 up_restart = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 up_delay = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 daemon = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 inetd = 0
Wed Dec 09 00:56:07 2015 us=548814 log = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 suppress_timestamps = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 nice = 0
Wed Dec 09 00:56:07 2015 us=548814 verbosity = 6
Wed Dec 09 00:56:07 2015 us=548814 mute = 0
Wed Dec 09 00:56:07 2015 us=548814 status_file = 'openvpn-status.log'
Wed Dec 09 00:56:07 2015 us=548814 status_file_version = 1
Wed Dec 09 00:56:07 2015 us=548814 status_file_update_freq = 60
Wed Dec 09 00:56:07 2015 us=548814 occ = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 rcvbuf = 0
Wed Dec 09 00:56:07 2015 us=548814 sndbuf = 0
Wed Dec 09 00:56:07 2015 us=548814 sockflags = 0
Wed Dec 09 00:56:07 2015 us=548814 fast_io = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 lzo = 7
Wed Dec 09 00:56:07 2015 us=548814 route_script = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 route_default_gateway = '10.8.0.2'
Wed Dec 09 00:56:07 2015 us=548814 route_default_metric = 0
Wed Dec 09 00:56:07 2015 us=548814 route_noexec = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 route_delay = 0
Wed Dec 09 00:56:07 2015 us=548814 route_delay_window = 30
Wed Dec 09 00:56:07 2015 us=548814 route_delay_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 route_nopull = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 route_gateway_via_dhcp = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 max_routes = 100
Wed Dec 09 00:56:07 2015 us=548814 allow_pull_fqdn = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 route 198.168.4.0/255.255.255.0/nil/nil
Wed Dec 09 00:56:07 2015 us=548814 management_addr = '127.0.0.1'
Wed Dec 09 00:56:07 2015 us=548814 management_port = 25340
Wed Dec 09 00:56:07 2015 us=548814 management_user_pass = 'stdin'
Wed Dec 09 00:56:07 2015 us=548814 management_log_history_cache = 250
Wed Dec 09 00:56:07 2015 us=548814 management_echo_buffer_size = 100
Wed Dec 09 00:56:07 2015 us=548814 management_write_peer_info_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 management_client_user = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 management_client_group = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 management_flags = 6
Wed Dec 09 00:56:07 2015 us=548814 shared_secret_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 key_direction = 0
Wed Dec 09 00:56:07 2015 us=548814 ciphername_defined = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 ciphername = 'BF-CBC'
Wed Dec 09 00:56:07 2015 us=548814 authname_defined = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 authname = 'SHA1'
Wed Dec 09 00:56:07 2015 us=548814 prng_hash = 'SHA1'
Wed Dec 09 00:56:07 2015 us=548814 prng_nonce_secret_len = 16
Wed Dec 09 00:56:07 2015 us=548814 keysize = 0
Wed Dec 09 00:56:07 2015 us=548814 engine = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 replay = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 mute_replay_warnings = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 replay_window = 64
Wed Dec 09 00:56:07 2015 us=548814 replay_time = 15
Wed Dec 09 00:56:07 2015 us=548814 packet_id_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 use_iv = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 test_crypto = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 tls_server = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 tls_client = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 key_method = 2
Wed Dec 09 00:56:07 2015 us=548814 ca_file = 'ca.crt'
Wed Dec 09 00:56:07 2015 us=548814 ca_path = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 dh_file = 'dh1024.pem'
Wed Dec 09 00:56:07 2015 us=548814 cert_file = 'server.crt'
Wed Dec 09 00:56:07 2015 us=548814 priv_key_file = 'server.key'
Wed Dec 09 00:56:07 2015 us=548814 pkcs12_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 cryptoapi_cert = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 cipher_list = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 tls_verify = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 tls_export_cert = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 verify_x509_type = 0
Wed Dec 09 00:56:07 2015 us=548814 verify_x509_name = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 crl_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 ns_cert_type = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_ku[i] = 0
Wed Dec 09 00:56:07 2015 us=548814 remote_cert_eku = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 ssl_flags = 0
Wed Dec 09 00:56:07 2015 us=548814 tls_timeout = 2
Wed Dec 09 00:56:07 2015 us=548814 renegotiate_bytes = 0
Wed Dec 09 00:56:07 2015 us=548814 renegotiate_packets = 0
Wed Dec 09 00:56:07 2015 us=548814 renegotiate_seconds = 3600
Wed Dec 09 00:56:07 2015 us=548814 handshake_window = 60
Wed Dec 09 00:56:07 2015 us=548814 transition_window = 3600
Wed Dec 09 00:56:07 2015 us=548814 single_session = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 push_peer_info = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 tls_exit = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 tls_auth_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_protected_authentication = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_private_mode = 00000000
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_cert_private = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_pin_cache_period = -1
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_id = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 pkcs11_id_management = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 server_network = 10.8.0.0
Wed Dec 09 00:56:07 2015 us=548814 server_netmask = 255.255.255.0
Wed Dec 09 00:56:07 2015 us=548814 server_network_ipv6 = ::
Wed Dec 09 00:56:07 2015 us=548814 server_netbits_ipv6 = 0
Wed Dec 09 00:56:07 2015 us=548814 server_bridge_ip = 0.0.0.0
Wed Dec 09 00:56:07 2015 us=548814 server_bridge_netmask = 0.0.0.0
Wed Dec 09 00:56:07 2015 us=548814 server_bridge_pool_start = 0.0.0.0
Wed Dec 09 00:56:07 2015 us=548814 server_bridge_pool_end = 0.0.0.0
Wed Dec 09 00:56:07 2015 us=548814 push_entry = 'route-gateway 10.8.0.1'
Wed Dec 09 00:56:07 2015 us=548814 push_entry = 'topology subnet'
Wed Dec 09 00:56:07 2015 us=548814 push_entry = 'ping 10'
Wed Dec 09 00:56:07 2015 us=548814 push_entry = 'ping-restart 120'
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_pool_defined = ENABLED
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_pool_start = 10.8.0.2
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_pool_end = 10.8.0.253
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_pool_netmask = 255.255.255.0
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_pool_persist_filename = 'ipp.txt'
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_pool_persist_refresh_freq = 600
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_ipv6_pool_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_ipv6_pool_base = ::
Wed Dec 09 00:56:07 2015 us=548814 ifconfig_ipv6_pool_netbits = 0
Wed Dec 09 00:56:07 2015 us=548814 n_bcast_buf = 256
Wed Dec 09 00:56:07 2015 us=548814 tcp_queue_limit = 64
Wed Dec 09 00:56:07 2015 us=548814 real_hash_size = 256
Wed Dec 09 00:56:07 2015 us=548814 virtual_hash_size = 256
Wed Dec 09 00:56:07 2015 us=548814 client_connect_script = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 learn_address_script = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 client_disconnect_script = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 client_config_dir = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 ccd_exclusive = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 tmp_dir = 'C:\Users\MATTER~1\AppData\Local\Temp\'
Wed Dec 09 00:56:07 2015 us=548814 push_ifconfig_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 push_ifconfig_local = 0.0.0.0
Wed Dec 09 00:56:07 2015 us=548814 push_ifconfig_remote_netmask = 0.0.0.0
Wed Dec 09 00:56:07 2015 us=548814 push_ifconfig_ipv6_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 push_ifconfig_ipv6_local = ::/0
Wed Dec 09 00:56:07 2015 us=548814 push_ifconfig_ipv6_remote = ::
Wed Dec 09 00:56:07 2015 us=548814 enable_c2c = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 duplicate_cn = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 cf_max = 0
Wed Dec 09 00:56:07 2015 us=548814 cf_per = 0
Wed Dec 09 00:56:07 2015 us=548814 max_clients = 1024
Wed Dec 09 00:56:07 2015 us=548814 max_routes_per_client = 256
Wed Dec 09 00:56:07 2015 us=548814 auth_user_pass_verify_script = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 auth_user_pass_verify_script_via_file = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 client = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 pull = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 auth_user_pass_file = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 show_net_up = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 route_method = 0
Wed Dec 09 00:56:07 2015 us=548814 ip_win32_defined = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 ip_win32_type = 3
Wed Dec 09 00:56:07 2015 us=548814 dhcp_masq_offset = 0
Wed Dec 09 00:56:07 2015 us=548814 dhcp_lease_time = 31536000
Wed Dec 09 00:56:07 2015 us=548814 tap_sleep = 10
Wed Dec 09 00:56:07 2015 us=548814 dhcp_options = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 dhcp_renew = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 dhcp_pre_release = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 dhcp_release = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 domain = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 netbios_scope = '[UNDEF]'
Wed Dec 09 00:56:07 2015 us=548814 netbios_node_type = 0
Wed Dec 09 00:56:07 2015 us=548814 disable_nbt = DISABLED
Wed Dec 09 00:56:07 2015 us=548814 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Wed Dec 09 00:56:07 2015 us=548814 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Enter Management Password:
Wed Dec 09 00:56:07 2015 us=548814 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Dec 09 00:56:07 2015 us=548814 Need hold release from management interface, waiting...
Wed Dec 09 00:56:08 2015 us=23815 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Dec 09 00:56:08 2015 us=123815 MANAGEMENT: CMD 'state on'
Wed Dec 09 00:56:08 2015 us=123815 MANAGEMENT: CMD 'log all on'
Wed Dec 09 00:56:08 2015 us=203815 MANAGEMENT: CMD 'hold off'
Wed Dec 09 00:56:08 2015 us=203815 MANAGEMENT: CMD 'hold release'
Wed Dec 09 00:56:08 2015 us=203815 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Wed Dec 09 00:56:08 2015 us=298815 Diffie-Hellman initialized with 1024 bit key
Wed Dec 09 00:56:08 2015 us=298815 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:3 ]
Wed Dec 09 00:56:08 2015 us=298815 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Dec 09 00:56:08 2015 us=303815 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Dec 09 00:56:08 2015 us=303815 MANAGEMENT: >STATE:1449622568,ASSIGN_IP,,10.8.0.1,
Wed Dec 09 00:56:08 2015 us=303815 open_tun, tt->ipv6=0
Wed Dec 09 00:56:08 2015 us=303815 TAP-WIN32 device [Local Area Connection 6] opened: \\.\Global\{4A0A5579-B682-4B61-80CF-A55878E6B1F7}.tap
Wed Dec 09 00:56:08 2015 us=303815 TAP-Windows Driver Version 9.21
Wed Dec 09 00:56:08 2015 us=303815 TAP-Windows MTU=1500
Wed Dec 09 00:56:08 2015 us=303815 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.1/255.255.255.0 [SUCCEEDED]
Wed Dec 09 00:56:08 2015 us=303815 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.0 on interface {4A0A5579-B682-4B61-80CF-A55878E6B1F7} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Dec 09 00:56:08 2015 us=303815 Sleeping for 10 seconds...
Wed Dec 09 00:56:18 2015 us=308833 Successful ARP Flush on interface [23] {4A0A5579-B682-4B61-80CF-A55878E6B1F7}
Wed Dec 09 00:56:18 2015 us=308833 MANAGEMENT: >STATE:1449622578,ADD_ROUTES,,,
Wed Dec 09 00:56:18 2015 us=308833 C:\Windows\system32\route.exe ADD 198.168.4.0 MASK 255.255.255.0 10.8.0.2
Wed Dec 09 00:56:18 2015 us=308833 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Dec 09 00:56:18 2015 us=308833 Route addition via IPAPI succeeded [adaptive]
Wed Dec 09 00:56:18 2015 us=308833 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Dec 09 00:56:18 2015 us=308833 UDPv4 link local (bound): [undef]
Wed Dec 09 00:56:18 2015 us=308833 UDPv4 link remote: [undef]
Wed Dec 09 00:56:18 2015 us=308833 MULTI: multi_init called, r=256 v=256
Wed Dec 09 00:56:18 2015 us=308833 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Wed Dec 09 00:56:18 2015 us=308833 ifconfig_pool_read(), in='client1,10.8.0.2', TODO: IPv6
Wed Dec 09 00:56:18 2015 us=308833 succeeded -> ifconfig_pool_set()
Wed Dec 09 00:56:18 2015 us=308833 IFCONFIG POOL LIST
Wed Dec 09 00:56:18 2015 us=308833 client1,10.8.0.2
Wed Dec 09 00:56:18 2015 us=308833 Initialization Sequence Completed
Wed Dec 09 00:56:18 2015 us=308833 MANAGEMENT: >STATE:1449622578,CONNECTED,SUCCESS,10.8.0.1,
Wed Dec 09 00:58:02 2015 us=903003 MULTI: multi_create_instance called
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 Re-using SSL/TLS context
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 LZO compression initialized
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:3 ]
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 Local Options hash (VER=V4): '530fdded'
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 Expected Remote Options hash (VER=V4): '41690919'
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 UDPv4 READ [14] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Wed Dec 09 00:58:02 2015 us=903003 xxx.xxx.xxx.81:49185 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.81:49185, sid=460dc923 fa0248b7
Wed Dec 09 00:58:02 2015 us=908003 xxx.xxx.xxx.81:49185 UDPv4 WRITE [26] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Wed Dec 09 00:58:02 2015 us=998003 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 0 ]
Wed Dec 09 00:58:03 2015 us=3003 xxx.xxx.xxx.81:49185 UDPv4 READ [82] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=68
Wed Dec 09 00:58:03 2015 us=13003 xxx.xxx.xxx.81:49185 UDPv4 WRITE [126] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ 1 ] pid=1 DATA len=100
Wed Dec 09 00:58:03 2015 us=13003 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Wed Dec 09 00:58:03 2015 us=13003 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=100
Wed Dec 09 00:58:03 2015 us=13003 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=100
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 1 ]
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=5 DATA len=100
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 2 ]
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=100
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 3 ]
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=100
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 4 ]
Wed Dec 09 00:58:03 2015 us=108004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=8 DATA len=100
Wed Dec 09 00:58:03 2015 us=203004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 5 ]
Wed Dec 09 00:58:03 2015 us=208004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=9 DATA len=100
Wed Dec 09 00:58:03 2015 us=208004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 6 ]
Wed Dec 09 00:58:03 2015 us=208004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=10 DATA len=100
Wed Dec 09 00:58:03 2015 us=208004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 7 ]
Wed Dec 09 00:58:03 2015 us=208004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=11 DATA len=100
Wed Dec 09 00:58:03 2015 us=208004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 8 ]
Wed Dec 09 00:58:03 2015 us=208004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=12 DATA len=100
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 9 ]
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=13 DATA len=100
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 10 ]
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=14 DATA len=100
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 11 ]
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=15 DATA len=100
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 12 ]
Wed Dec 09 00:58:03 2015 us=308004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=16 DATA len=100
Wed Dec 09 00:58:03 2015 us=388004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 13 ]
Wed Dec 09 00:58:03 2015 us=388004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=17 DATA len=100
Wed Dec 09 00:58:03 2015 us=398004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 14 ]
Wed Dec 09 00:58:03 2015 us=398004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=18 DATA len=100
Wed Dec 09 00:58:03 2015 us=408004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 15 ]
Wed Dec 09 00:58:03 2015 us=413004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=19 DATA len=100
Wed Dec 09 00:58:03 2015 us=413004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 16 ]
Wed Dec 09 00:58:03 2015 us=413004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=20 DATA len=100
Wed Dec 09 00:58:03 2015 us=473004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 17 ]
Wed Dec 09 00:58:03 2015 us=473004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=21 DATA len=100
Wed Dec 09 00:58:03 2015 us=498004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 18 ]
Wed Dec 09 00:58:03 2015 us=498004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=22 DATA len=100
Wed Dec 09 00:58:03 2015 us=498004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 19 ]
Wed Dec 09 00:58:03 2015 us=498004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=23 DATA len=100
Wed Dec 09 00:58:03 2015 us=508004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 20 ]
Wed Dec 09 00:58:03 2015 us=508004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=24 DATA len=100
Wed Dec 09 00:58:03 2015 us=563004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 21 ]
Wed Dec 09 00:58:03 2015 us=563004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=25 DATA len=100
Wed Dec 09 00:58:03 2015 us=583004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 22 ]
Wed Dec 09 00:58:03 2015 us=583004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [114] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=26 DATA len=100
Wed Dec 09 00:58:03 2015 us=588004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 23 ]
Wed Dec 09 00:58:03 2015 us=593004 xxx.xxx.xxx.81:49185 UDPv4 WRITE [84] to [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=27 DATA len=70
Wed Dec 09 00:58:03 2015 us=613004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 24 ]
Wed Dec 09 00:58:03 2015 us=653004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 25 ]
Wed Dec 09 00:58:03 2015 us=673004 xxx.xxx.xxx.81:49185 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 26 ]
Wed Dec 09 00:58:03 2015 us=908005 xxx.xxx.xxx.81:49185 UDPv4 READ [126] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ 27 ] pid=2 DATA len=100
Wed Dec 09 00:58:03 2015 us=908005 xxx.xxx.xxx.81:49185 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 2 ]
Wed Dec 09 00:58:03 2015 us=923005 xxx.xxx.xxx.81:49185 UDPv4 READ [114] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=100
Wed Dec 09 00:58:03 2015 us=923005 xxx.xxx.xxx.81:49185 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 3 ]
Wed Dec 09 00:58:03 2015 us=928005 xxx.xxx.xxx.81:49185 UDPv4 READ [114] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=100
Wed Dec 09 00:58:03 2015 us=928005 xxx.xxx.xxx.81:49185 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 4 ]
Wed Dec 09 00:58:03 2015 us=928005 xxx.xxx.xxx.81:49185 UDPv4 READ [114] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=5 DATA len=100
Wed Dec 09 00:58:03 2015 us=928005 xxx.xxx.xxx.81:49185 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 5 ]
Wed Dec 09 00:58:04 2015 us=13005 xxx.xxx.xxx.81:49185 UDPv4 READ [114] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=100
Wed Dec 09 00:58:04 2015 us=13005 xxx.xxx.xxx.81:49185 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 6 ]
Wed Dec 09 00:58:04 2015 us=23005 xxx.xxx.xxx.81:49185 UDPv4 READ [114] from [AF_INET]xxx.xxx.xxx.81:49185: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=100
Wed Dec 09 00:58:04 2015 us=23005 xxx.xxx.xxx.81:49185 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.81:49185: P_ACK_V1 kid=0 [ 7 ]
Tue Dec 08 04:12:18 2015 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.1/255.255.255.0 [SUCCEEDED]
Tue Dec 08 04:12:18 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.0 on interface {4A0A5579-B682-4B61-80CF-A55878E6B1F7} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Dec 08 04:12:18 2015 Sleeping for 10 seconds...
Tue Dec 08 04:12:28 2015 Successful ARP Flush on interface [23] {4A0A5579-B682-4B61-80CF-A55878E6B1F7}
Tue Dec 08 04:12:28 2015 UDPv4 link local (bound): [undef]
Tue Dec 08 04:12:28 2015 UDPv4 link remote: [undef]
Tue Dec 08 04:12:28 2015 MULTI: multi_init called, r=256 v=256
Tue Dec 08 04:12:28 2015 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Tue Dec 08 04:12:28 2015 IFCONFIG POOL LIST
Tue Dec 08 04:12:28 2015 Initialization Sequence Completed
Tue Dec 08 04:12:28 2015 MANAGEMENT: >STATE:1449547948,CONNECTED,SUCCESS,10.8.0.1,
Tue Dec 08 04:16:43 2015 xxx.xxx.xxx.130:50975 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.130:50975, sid=7be4f6f6 61a7aa64
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 VERIFY OK: depth=1, C=UK, ST=GL, L=xxx, O=xxx, OU=RAND, CN=xxx, name=TESTER, emailAddress=mail@host.domain
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 VERIFY OK: depth=0, C=UK, ST=GL, L=xxx, O=xxx, OU=RAND, CN=client1, name=TESTER, emailAddress=mail@host.domain
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Dec 08 04:16:54 2015 xxx.xxx.xxx.130:50975 [client1] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx..130:50975
Tue Dec 08 04:16:54 2015 client1/xxx.xxx.xxx.130:50975 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Tue Dec 08 04:16:54 2015 client1/xxx.xxx.xxx.130:50975 MULTI: Learn: 10.8.0.2 -> client1/xxx.xxx.xxx.130:50975
Tue Dec 08 04:16:54 2015 client1/xxx.xxx.xxx.130:50975 MULTI: primary virtual IP for client1/xxx.xxx.xxx.130:50975: 10.8.0.2
Tue Dec 08 04:16:57 2015 client1/xxx.xxx.xxx.130:50975 PUSH: Received control message: 'PUSH_REQUEST'
Tue Dec 08 04:16:57 2015 client1/xxx.xxx.xxx.130:50975 send_push_reply(): safe_cap=940
Tue Dec 08 04:16:57 2015 client1/xxx.xxx.xxx.130:50975 SENT CONTROL [client1]: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0' (status=1)
And so on...
Here's what I can glean from the client router system logs:
Wed Dec 9 00:52:45 2015 daemon.notice openvpn(client_client1)[7674]: [server] Inactivity timeout (--ping-restart), restarting
Wed Dec 9 00:52:45 2015 daemon.notice openvpn(client_client1)[7674]: TCP/UDP: Closing socket
Wed Dec 9 00:52:45 2015 daemon.notice openvpn(client_client1)[7674]: SIGUSR1[soft,ping-restart] received, process restarting
Wed Dec 9 00:52:45 2015 daemon.notice openvpn(client_client1)[7674]: Restart pause, 2 second(s)
Wed Dec 9 00:52:47 2015 daemon.warn openvpn(client_client1)[7674]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: Re-using SSL/TLS context
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: LZO compression initialized
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: Socket Buffers: R=[163840->131072] S=[163840->131072]
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: UDPv4 link local: [undef]
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: UDPv4 link remote: [AF_INET]xxx.xxx.xxx.88:1194
Wed Dec 9 00:52:47 2015 daemon.notice openvpn(client_client1)[7674]: TLS: Initial packet from [AF_INET]xxx.xxx.xxx.88:1194, sid=08a7e60b 7e5299b8
Wed Dec 9 00:52:48 2015 daemon.notice openvpn(client_client1)[7674]: VERIFY OK: depth=1, C=UK, ST=GL, L=BRISTOL, O=OurTeam, OU=RAND, CN=OurTeam, name=TESTER, emailAddress=mail@host.domain
Wed Dec 9 00:52:48 2015 daemon.notice openvpn(client_client1)[7674]: VERIFY OK: depth=0, C=UK, ST=GL, L=BRISTOL, O=OurTeam, OU=RAND, CN=server, name=TESTER, emailAddress=mail@host.domain
Wed Dec 9 00:52:49 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 9 00:52:49 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 9 00:52:49 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 9 00:52:49 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 9 00:52:49 2015 daemon.notice openvpn(client_client1)[7674]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Dec 9 00:52:49 2015 daemon.notice openvpn(client_client1)[7674]: [server] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.88:1194
Wed Dec 9 00:52:51 2015 daemon.notice openvpn(client_client1)[7674]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Dec 9 00:52:51 2015 daemon.notice openvpn(client_client1)[7674]: PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Wed Dec 9 00:52:52 2015 daemon.notice openvpn(client_client1)[7674]: OPTIONS IMPORT: timers and/or timeouts modified
Wed Dec 9 00:52:52 2015 daemon.notice openvpn(client_client1)[7674]: OPTIONS IMPORT: --ifconfig/up options modified
Wed Dec 9 00:52:52 2015 daemon.notice openvpn(client_client1)[7674]: OPTIONS IMPORT: route-related options modified
Wed Dec 9 00:52:52 2015 daemon.notice openvpn(client_client1)[7674]: Preserving previous TUN/TAP instance: tun_c_client1
Wed Dec 9 00:52:52 2015 daemon.notice openvpn(client_client1)[7674]: Initialization Sequence Completed
Wed Dec 9 00:55:03 2015 daemon.info hostapd: wlan0: STA 28:c2:dd:a1:0a:13 WPA: group key handshake completed (RSN)
Wed Dec 9 00:58:04 2015 daemon.notice openvpn(client_client1)[7674]: [server] Inactivity timeout (--ping-restart), restarting
Wed Dec 9 00:58:04 2015 daemon.notice openvpn(client_client1)[7674]: TCP/UDP: Closing socket
Wed Dec 9 00:58:04 2015 daemon.notice openvpn(client_client1)[7674]: SIGUSR1[soft,ping-restart] received, process restarting
Wed Dec 9 00:58:04 2015 daemon.notice openvpn(client_client1)[7674]: Restart pause, 2 second(s)
Wed Dec 9 00:58:06 2015 daemon.warn openvpn(client_client1)[7674]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: Re-using SSL/TLS context
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: LZO compression initialized
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: Socket Buffers: R=[163840->131072] S=[163840->131072]
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: UDPv4 link local: [undef]
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: UDPv4 link remote: [AF_INET]xxx.xxx.xxx.88:1194
Wed Dec 9 00:58:06 2015 daemon.notice openvpn(client_client1)[7674]: TLS: Initial packet from [AF_INET]xxx.xxx.xxx.88:1194, sid=45bd4b02 174ae7a5
Wed Dec 9 00:58:07 2015 daemon.notice openvpn(client_client1)[7674]: VERIFY OK: depth=1, C=UK, ST=GL, L=BRISTOL, O=OurTeam, OU=RAND, CN=OurTeam, name=TESTER, emailAddress=mail@host.domain
Wed Dec 9 00:58:07 2015 daemon.notice openvpn(client_client1)[7674]: VERIFY OK: depth=0, C=UK, ST=GL, L=BRISTOL, O=OurTeam, OU=RAND, CN=server, name=TESTER, emailAddress=mail@host.domain
Wed Dec 9 00:58:08 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 9 00:58:08 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 9 00:58:08 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Dec 9 00:58:08 2015 daemon.notice openvpn(client_client1)[7674]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 9 00:58:08 2015 daemon.notice openvpn(client_client1)[7674]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Dec 9 00:58:08 2015 daemon.notice openvpn(client_client1)[7674]: [server] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.88:1194
Wed Dec 9 00:58:10 2015 daemon.notice openvpn(client_client1)[7674]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Dec 9 00:58:10 2015 daemon.notice openvpn(client_client1)[7674]: PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Wed Dec 9 00:58:10 2015 daemon.notice openvpn(client_client1)[7674]: OPTIONS IMPORT: timers and/or timeouts modified
Wed Dec 9 00:58:10 2015 daemon.notice openvpn(client_client1)[7674]: OPTIONS IMPORT: --ifconfig/up options modified
Wed Dec 9 00:58:10 2015 daemon.notice openvpn(client_client1)[7674]: OPTIONS IMPORT: route-related options modified
Wed Dec 9 00:58:10 2015 daemon.notice openvpn(client_client1)[7674]: Preserving previous TUN/TAP instance: tun_c_client1
Wed Dec 9 00:58:10 2015 daemon.notice openvpn(client_client1)[7674]: Initialization Sequence Completed
Wed Dec 9 01:03:43 2015 daemon.notice netifd: wan (5394): Sending renew...
Wed Dec 9 01:03:43 2015 daemon.notice netifd: wan (5394): Lease of 188.30.143.81 obtained, lease time 7200
Wed Dec 9 01:05:03 2015 daemon.info hostapd: wlan0: STA 28:c2:dd:a1:0a:13 WPA: group key handshake completed (RSN)
Wed Dec 9 01:15:03 2015 daemon.info hostapd: wlan0: STA 28:c2:dd:a1:0a:13 WPA: group key handshake completed (RSN)
Wed Dec 9 01:25:03 2015 daemon.info hostapd: wlan0: STA 28:c2:dd:a1:0a:13 WPA: group key handshake completed (RSN)
Wed Dec 9 01:35:03 2015 daemon.info hostapd: wlan0: STA 28:c2:dd:a1:0a:13 WPA: group key handshake completed (RSN)
Thank you very much for reading and considering helping me. Please say if there is more info I can provide that would be useful.
Simon
