Hello,
I am using pfSense firewall OpenVPN in main office and branch office working fine. The scenario is:
-Main office: LAN 192.168.0.0/24. Server mode Peer to peer (Shared Key). Tun mode UDP. Default port 1194. Encryption AES-128-CBC. SHA1.
-Branch office: LAN 192.168.1.0/24. Same security configuration to match main office.
I have configured IPV4 Tunnel Network 192.168.168.0/24.
Well, now the pfsense of the branch office will disappear and I will provide a raspberry pi with raspbian. I have installed and configured openvpn. The vpn.conf file is:
dev tun
remote mainoffice.dyndns.org
ifconfig 192.168.1.12 192.168.0.67
secret static.key
cipher AES-128-CBC
verb 8
I have stored the shared key from main office in the static.key file.
In the raspbian system, I have used:
net.ipv4.ip_forward = 1
sysctl -p /etc/sysctl.conf
sudo iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
sudo apt-get install iptables-persistent
sudo /etc/init.d/iptables-persistent save
sudo /etc/init.d/iptables-persistent reload
Well, in pfsense, I can see VPN up but, there is no traffic and in raspbian, it seems that the connection is not working at all. This is what I can see using "sudo openvpn --config vpn.conf":
Fri Dec 18 09:38:23 2015 us=537636 Current Parameter Settings:
Fri Dec 18 09:38:23 2015 us=542748 config = 'vpn.conf'
Fri Dec 18 09:38:23 2015 us=549778 mode = 0
Fri Dec 18 09:38:23 2015 us=550964 persist_config = DISABLED
Fri Dec 18 09:38:23 2015 us=552087 persist_mode = 1
Fri Dec 18 09:38:23 2015 us=554220 show_ciphers = DISABLED
Fri Dec 18 09:38:23 2015 us=555402 show_digests = DISABLED
Fri Dec 18 09:38:23 2015 us=558036 show_engines = DISABLED
Fri Dec 18 09:38:23 2015 us=559657 genkey = DISABLED
Fri Dec 18 09:38:23 2015 us=560858 key_pass_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=561856 show_tls_ciphers = DISABLED
Fri Dec 18 09:38:23 2015 us=564618 Connection profiles [default]:
Fri Dec 18 09:38:23 2015 us=570614 proto = udp
Fri Dec 18 09:38:23 2015 us=570967 local = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=571204 local_port = 1194
Fri Dec 18 09:38:23 2015 us=571424 remote = 'xuti.dyndns.org'
Fri Dec 18 09:38:23 2015 us=572761 remote_port = 1194
Fri Dec 18 09:38:23 2015 us=573093 remote_float = DISABLED
Fri Dec 18 09:38:23 2015 us=574788 bind_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=575122 bind_local = ENABLED
Fri Dec 18 09:38:23 2015 us=576583 connect_retry_seconds = 5
Fri Dec 18 09:38:23 2015 us=576919 connect_timeout = 10
Fri Dec 18 09:38:23 2015 us=577835 connect_retry_max = 0
Fri Dec 18 09:38:23 2015 us=578125 socks_proxy_server = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=578346 socks_proxy_port = 0
Fri Dec 18 09:38:23 2015 us=580956 socks_proxy_retry = DISABLED
Fri Dec 18 09:38:23 2015 us=581314 Connection profiles END
Fri Dec 18 09:38:23 2015 us=583056 remote_random = DISABLED
Fri Dec 18 09:38:23 2015 us=584300 ipchange = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=584632 dev = 'tun'
Fri Dec 18 09:38:23 2015 us=584860 dev_type = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=590606 dev_node = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=592917 lladdr = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=593210 topology = 1
Fri Dec 18 09:38:23 2015 us=594504 tun_ipv6 = DISABLED
Fri Dec 18 09:38:23 2015 us=595689 ifconfig_local = '192.168.1.12'
Fri Dec 18 09:38:23 2015 us=596597 ifconfig_remote_netmask = '192.168.0.67'
Fri Dec 18 09:38:23 2015 us=599588 ifconfig_noexec = DISABLED
Fri Dec 18 09:38:23 2015 us=602136 ifconfig_nowarn = DISABLED
Fri Dec 18 09:38:23 2015 us=603350 ifconfig_ipv6_local = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=603696 ifconfig_ipv6_netbits = 0
Fri Dec 18 09:38:23 2015 us=603929 ifconfig_ipv6_remote = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=604149 shaper = 0
Fri Dec 18 09:38:23 2015 us=606902 tun_mtu = 1500
Fri Dec 18 09:38:23 2015 us=607251 tun_mtu_defined = ENABLED
Fri Dec 18 09:38:23 2015 us=609715 link_mtu = 1500
Fri Dec 18 09:38:23 2015 us=611268 link_mtu_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=611569 tun_mtu_extra = 0
Fri Dec 18 09:38:23 2015 us=616295 tun_mtu_extra_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=616707 fragment = 0
Fri Dec 18 09:38:23 2015 us=617820 mtu_discover_type = -1
Fri Dec 18 09:38:23 2015 us=618145 mtu_test = 0
Fri Dec 18 09:38:23 2015 us=618373 mlock = DISABLED
Fri Dec 18 09:38:23 2015 us=620829 keepalive_ping = 0
Fri Dec 18 09:38:23 2015 us=621176 keepalive_timeout = 0
Fri Dec 18 09:38:23 2015 us=621407 inactivity_timeout = 0
Fri Dec 18 09:38:23 2015 us=621640 ping_send_timeout = 0
Fri Dec 18 09:38:23 2015 us=621868 ping_rec_timeout = 0
Fri Dec 18 09:38:23 2015 us=623863 ping_rec_timeout_action = 0
Fri Dec 18 09:38:23 2015 us=625842 ping_timer_remote = DISABLED
Fri Dec 18 09:38:23 2015 us=628148 remap_sigusr1 = 0
Fri Dec 18 09:38:23 2015 us=631330 explicit_exit_notification = 0
Fri Dec 18 09:38:23 2015 us=631676 persist_tun = DISABLED
Fri Dec 18 09:38:23 2015 us=632869 persist_local_ip = DISABLED
Fri Dec 18 09:38:23 2015 us=633202 persist_remote_ip = DISABLED
Fri Dec 18 09:38:23 2015 us=638390 persist_key = DISABLED
Fri Dec 18 09:38:23 2015 us=639754 mssfix = 1450
Fri Dec 18 09:38:23 2015 us=641863 passtos = DISABLED
Fri Dec 18 09:38:23 2015 us=642204 resolve_retry_seconds = 1000000000
Fri Dec 18 09:38:23 2015 us=642446 username = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=644039 groupname = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=644674 chroot_dir = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=647692 cd_dir = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=648039 writepid = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=650387 up_script = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=652325 down_script = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=652656 down_pre = DISABLED
Fri Dec 18 09:38:23 2015 us=652885 up_restart = DISABLED
Fri Dec 18 09:38:23 2015 us=653109 up_delay = DISABLED
Fri Dec 18 09:38:23 2015 us=654351 daemon = DISABLED
Fri Dec 18 09:38:23 2015 us=660484 inetd = 0
Fri Dec 18 09:38:23 2015 us=663260 log = DISABLED
Fri Dec 18 09:38:23 2015 us=663608 suppress_timestamps = DISABLED
Fri Dec 18 09:38:23 2015 us=663843 nice = 0
Fri Dec 18 09:38:23 2015 us=664126 verbosity = 8
Fri Dec 18 09:38:23 2015 us=665573 mute = 0
Fri Dec 18 09:38:23 2015 us=667578 gremlin = 0
Fri Dec 18 09:38:23 2015 us=667904 status_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=668133 status_file_version = 1
Fri Dec 18 09:38:23 2015 us=669833 status_file_update_freq = 60
Fri Dec 18 09:38:23 2015 us=670175 occ = ENABLED
Fri Dec 18 09:38:23 2015 us=671925 rcvbuf = 65536
Fri Dec 18 09:38:23 2015 us=673519 sndbuf = 65536
Fri Dec 18 09:38:23 2015 us=673812 sockflags = 0
Fri Dec 18 09:38:23 2015 us=676186 fast_io = DISABLED
Fri Dec 18 09:38:23 2015 us=677395 lzo = 0
Fri Dec 18 09:38:23 2015 us=679727 route_script = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=681006 route_default_gateway = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=683038 route_default_metric = 0
Fri Dec 18 09:38:23 2015 us=684619 route_noexec = DISABLED
Fri Dec 18 09:38:23 2015 us=684958 route_delay = 0
Fri Dec 18 09:38:23 2015 us=689666 route_delay_window = 30
Fri Dec 18 09:38:23 2015 us=692130 route_delay_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=698203 route_nopull = DISABLED
Fri Dec 18 09:38:23 2015 us=699169 route_gateway_via_dhcp = DISABLED
Fri Dec 18 09:38:23 2015 us=702251 max_routes = 100
Fri Dec 18 09:38:23 2015 us=702601 allow_pull_fqdn = DISABLED
Fri Dec 18 09:38:23 2015 us=702840 management_addr = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=703889 management_port = 0
Fri Dec 18 09:38:23 2015 us=704365 management_user_pass = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=704616 management_log_history_cache = 250
Fri Dec 18 09:38:23 2015 us=707863 management_echo_buffer_size = 100
Fri Dec 18 09:38:23 2015 us=709333 management_write_peer_info_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=709795 management_client_user = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=710046 management_client_group = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=710282 management_flags = 0
Fri Dec 18 09:38:23 2015 us=710515 shared_secret_file = 'static.key'
Fri Dec 18 09:38:23 2015 us=711569 key_direction = 0
Fri Dec 18 09:38:23 2015 us=713569 ciphername_defined = ENABLED
Fri Dec 18 09:38:23 2015 us=714766 ciphername = 'AES-128-CBC'
Fri Dec 18 09:38:23 2015 us=715106 authname_defined = ENABLED
Fri Dec 18 09:38:23 2015 us=715348 authname = 'SHA1'
Fri Dec 18 09:38:23 2015 us=715576 prng_hash = 'SHA1'
Fri Dec 18 09:38:23 2015 us=718902 prng_nonce_secret_len = 16
Fri Dec 18 09:38:23 2015 us=720154 keysize = 0
Fri Dec 18 09:38:23 2015 us=721379 engine = DISABLED
Fri Dec 18 09:38:23 2015 us=723661 replay = ENABLED
Fri Dec 18 09:38:23 2015 us=724007 mute_replay_warnings = DISABLED
Fri Dec 18 09:38:23 2015 us=725476 replay_window = 64
Fri Dec 18 09:38:23 2015 us=729939 replay_time = 15
Fri Dec 18 09:38:23 2015 us=731972 packet_id_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=732299 use_iv = ENABLED
Fri Dec 18 09:38:23 2015 us=733419 test_crypto = DISABLED
Fri Dec 18 09:38:23 2015 us=734383 tls_server = DISABLED
Fri Dec 18 09:38:23 2015 us=737255 tls_client = DISABLED
Fri Dec 18 09:38:23 2015 us=737620 key_method = 2
Fri Dec 18 09:38:23 2015 us=738680 ca_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=740246 ca_path = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=742522 dh_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=742878 cert_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=743114 priv_key_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=744169 pkcs12_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=752118 cipher_list = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=753825 tls_verify = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=754166 tls_export_cert = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=755152 tls_remote = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=761455 crl_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=761752 ns_cert_type = 0
Fri Dec 18 09:38:23 2015 us=763998 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=764337 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=764570 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=764795 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=765249 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=765517 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=765742 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=765962 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=767761 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=768174 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=768476 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=769769 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=770080 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=772492 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=774029 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=774833 remote_cert_ku[i] = 0
Fri Dec 18 09:38:23 2015 us=776820 remote_cert_eku = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=780338 tls_timeout = 2
Fri Dec 18 09:38:23 2015 us=780693 renegotiate_bytes = 0
Fri Dec 18 09:38:23 2015 us=781166 renegotiate_packets = 0
Fri Dec 18 09:38:23 2015 us=781417 renegotiate_seconds = 3600
Fri Dec 18 09:38:23 2015 us=781643 handshake_window = 60
Fri Dec 18 09:38:23 2015 us=784411 transition_window = 3600
Fri Dec 18 09:38:23 2015 us=784761 single_session = DISABLED
Fri Dec 18 09:38:23 2015 us=786674 push_peer_info = DISABLED
Fri Dec 18 09:38:23 2015 us=787875 tls_exit = DISABLED
Fri Dec 18 09:38:23 2015 us=788210 tls_auth_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=791523 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=792828 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=793167 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=793409 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=794437 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=794752 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=796871 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=798568 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=802515 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=802856 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=809315 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=809799 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=813634 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=814976 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=815308 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=816473 pkcs11_protected_authentication = DISABLED
Fri Dec 18 09:38:23 2015 us=818606 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=818953 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=819753 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=821162 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=823540 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=823886 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=824257 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=825399 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=825737 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=825980 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=828775 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=834421 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=835635 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=835975 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=836211 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=837256 pkcs11_private_mode = 00000000
Fri Dec 18 09:38:23 2015 us=839722 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=840133 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=841309 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=841697 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=843120 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=843469 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=844173 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=847566 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=847909 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=849139 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=855676 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=856984 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=857326 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=859194 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=859681 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=860750 pkcs11_cert_private = DISABLED
Fri Dec 18 09:38:23 2015 us=862275 pkcs11_pin_cache_period = -1
Fri Dec 18 09:38:23 2015 us=862611 pkcs11_id = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=865374 pkcs11_id_management = DISABLED
Fri Dec 18 09:38:23 2015 us=867278 server_network = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=867655 server_netmask = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=868718 server_network_ipv6 = ::
Fri Dec 18 09:38:23 2015 us=871643 server_netbits_ipv6 = 0
Fri Dec 18 09:38:23 2015 us=872958 server_bridge_ip = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=873307 server_bridge_netmask = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=876570 server_bridge_pool_start = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=878088 server_bridge_pool_end = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=878387 ifconfig_pool_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=878743 ifconfig_pool_start = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=880921 ifconfig_pool_end = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=882169 ifconfig_pool_netmask = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=883981 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=884336 ifconfig_pool_persist_refresh_freq = 600
Fri Dec 18 09:38:23 2015 us=884577 ifconfig_ipv6_pool_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=884825 ifconfig_ipv6_pool_base = ::
Fri Dec 18 09:38:23 2015 us=891882 ifconfig_ipv6_pool_netbits = 0
Fri Dec 18 09:38:23 2015 us=893312 n_bcast_buf = 256
Fri Dec 18 09:38:23 2015 us=893588 tcp_queue_limit = 64
Fri Dec 18 09:38:23 2015 us=893822 real_hash_size = 256
Fri Dec 18 09:38:23 2015 us=894811 virtual_hash_size = 256
Fri Dec 18 09:38:23 2015 us=895603 client_connect_script = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=898580 learn_address_script = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=898985 client_disconnect_script = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=899226 client_config_dir = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=899588 ccd_exclusive = DISABLED
Fri Dec 18 09:38:23 2015 us=902465 tmp_dir = '/tmp'
Fri Dec 18 09:38:23 2015 us=902823 push_ifconfig_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=903089 push_ifconfig_local = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=904535 push_ifconfig_remote_netmask = 0.0.0.0
Fri Dec 18 09:38:23 2015 us=904880 push_ifconfig_ipv6_defined = DISABLED
Fri Dec 18 09:38:23 2015 us=905245 push_ifconfig_ipv6_local = ::/0
Fri Dec 18 09:38:23 2015 us=907550 push_ifconfig_ipv6_remote = ::
Fri Dec 18 09:38:23 2015 us=910700 enable_c2c = DISABLED
Fri Dec 18 09:38:23 2015 us=911006 duplicate_cn = DISABLED
Fri Dec 18 09:38:23 2015 us=911237 cf_max = 0
Fri Dec 18 09:38:23 2015 us=929025 cf_per = 0
Fri Dec 18 09:38:23 2015 us=930921 max_clients = 1024
Fri Dec 18 09:38:23 2015 us=931269 max_routes_per_client = 256
Fri Dec 18 09:38:23 2015 us=931511 auth_user_pass_verify_script = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=931743 auth_user_pass_verify_script_via_file = DISABLED
Fri Dec 18 09:38:23 2015 us=931979 ssl_flags = 0
Fri Dec 18 09:38:23 2015 us=932953 port_share_host = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=935658 port_share_port = 0
Fri Dec 18 09:38:23 2015 us=936004 client = DISABLED
Fri Dec 18 09:38:23 2015 us=936407 pull = DISABLED
Fri Dec 18 09:38:23 2015 us=937445 auth_user_pass_file = '[UNDEF]'
Fri Dec 18 09:38:23 2015 us=939406 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Fri Dec 18 09:38:23 2015 us=944178 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Fri Dec 18 09:38:23 2015 us=947457 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Dec 18 09:38:23 2015 us=949630 PO_INIT maxevents=4 flags=0x00000002
Fri Dec 18 09:38:23 2015 us=956459 PID packet_id_init seq_backtrack=64 time_backtrack=15
Fri Dec 18 09:38:23 2015 us=962012 WARNING: file 'static.key' is group or others accessible
Fri Dec 18 09:38:23 2015 us=963717 CRYPTO INFO: n_DES_cblocks=0
Fri Dec 18 09:38:23 2015 us=964644 CRYPTO INFO: n_DES_cblocks=0
Fri Dec 18 09:38:23 2015 us=966041 CRYPTO INFO: n_DES_cblocks=0
Fri Dec 18 09:38:23 2015 us=967731 CRYPTO INFO: n_DES_cblocks=0
Fri Dec 18 09:38:23 2015 us=970743 Static Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 18 09:38:23 2015 us=971171 Static Encrypt: CIPHER KEY: 021b599f 06446f72 abe331cd 3a8e13ee
Fri Dec 18 09:38:23 2015 us=973903 Static Encrypt: CIPHER block_size=16 iv_size=16
Fri Dec 18 09:38:23 2015 us=980721 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 18 09:38:23 2015 us=981953 Static Encrypt: HMAC KEY: 11b442c7 16a7f5d8 03c5f508 93d1641e 90bb31de
Fri Dec 18 09:38:23 2015 us=984715 Static Encrypt: HMAC size=20 block_size=64
Fri Dec 18 09:38:23 2015 us=986045 Static Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 18 09:38:23 2015 us=986433 Static Decrypt: CIPHER KEY: 021b599f 06446f72 abe331cd 3a8e13ee
Fri Dec 18 09:38:23 2015 us=987472 Static Decrypt: CIPHER block_size=16 iv_size=16
Fri Dec 18 09:38:23 2015 us=994974 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 18 09:38:23 2015 us=996856 Static Decrypt: HMAC KEY: 11b442c7 16a7f5d8 03c5f508 93d1641e 90bb31de
Fri Dec 18 09:38:24 2015 us=3185 Static Decrypt: HMAC size=20 block_size=64
Fri Dec 18 09:38:24 2015 us=6017 MTU DYNAMIC mtu=1450, flags=2, 1560 -> 1450
Fri Dec 18 09:38:24 2015 us=7529 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Dec 18 09:38:24 2015 us=73511 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=1
Fri Dec 18 09:38:24 2015 us=74492 GDG: route[1] 0.0.0.0/0.0.0.0/192.168.1.1 m=0
Fri Dec 18 09:38:24 2015 us=74763 GDG: route[2] 192.168.0.0/255.255.255.0/192.168.1.67 m=0
Fri Dec 18 09:38:24 2015 us=75064 GDG: route[3] 192.168.1.0/255.255.255.0/0.0.0.0 m=0
Fri Dec 18 09:38:24 2015 us=75279 GDG: route[4] 192.168.74.0/255.255.255.0/192.168.1.67 m=0
Fri Dec 18 09:38:24 2015 us=75489 GDG: route[5] 192.168.112.0/255.255.255.0/192.168.1.67 m=0
Fri Dec 18 09:38:24 2015 us=75844 GDG: best=192.168.1.1[1] lm=0
Fri Dec 18 09:38:24 2015 us=76058 WARNING: potential TUN/TAP adapter subnet conflict between local LAN [192.168.1.0/255.255.255.0] and remote VPN [192.168.1.12/255.255.255.255]
Fri Dec 18 09:38:24 2015 us=91322 TUN/TAP device tun0 opened
Fri Dec 18 09:38:24 2015 us=98371 TUN/TAP TX queue length set to 100
Fri Dec 18 09:38:24 2015 us=104282 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Dec 18 09:38:24 2015 us=108057 /sbin/ifconfig tun0 192.168.1.12 pointopoint 192.168.0.67 mtu 1500
Fri Dec 18 09:38:24 2015 us=208517 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:4 ET:0 EL:0 ]
Fri Dec 18 09:38:24 2015 us=210440 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 192.168.0.67 192.168.1.12,cipher AES-128-CBC,auth SHA1,keysize 128,secret'
Fri Dec 18 09:38:24 2015 us=214966 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 192.168.1.12 192.168.0.67,cipher AES-128-CBC,auth SHA1,keysize 128,secret'
Fri Dec 18 09:38:24 2015 us=216493 Local Options hash (VER=V4): '86afb64e'
Fri Dec 18 09:38:24 2015 us=225036 Expected Remote Options hash (VER=V4): '0eb87086'
Fri Dec 18 09:38:24 2015 us=226503 UDPv4 link local (bound): [undef]
Fri Dec 18 09:38:24 2015 us=227658 UDPv4 link remote: [AF_INET]81.61.161.39:1194
Fri Dec 18 09:38:24 2015 us=233040 TIMER: coarse timer wakeup 1 seconds
Fri Dec 18 09:38:24 2015 us=238479 RANDOM USEC=239582
Fri Dec 18 09:38:24 2015 us=249211 PO_CTL rwflags=0x0001 ev=3 arg=0x7f5fd0c4
Fri Dec 18 09:38:24 2015 us=259761 PO_CTL rwflags=0x0001 ev=4 arg=0x7f5fd04c
Fri Dec 18 09:38:24 2015 us=261003 I/O WAIT TR|Tw|SR|Sw [1/239582]
Fri Dec 18 09:38:25 2015 us=504989 I/O WAIT status=0x0020
Fri Dec 18 09:38:25 2015 us=506399 TIMER: coarse timer wakeup 1 seconds
Fri Dec 18 09:38:25 2015 us=507506 PO_CTL rwflags=0x0001 ev=3 arg=0x7f5fd0c4
Fri Dec 18 09:38:25 2015 us=508582 PO_CTL rwflags=0x0001 ev=4 arg=0x7f5fd04c
Fri Dec 18 09:38:25 2015 us=509692 I/O WAIT TR|Tw|SR|Sw [1/239582]
^CFri Dec 18 09:38:25 2015 us=905701 event_wait : Interrupted system call (code=4)
Fri Dec 18 09:38:25 2015 us=905975 I/O WAIT status=0x0010
Fri Dec 18 09:38:25 2015 us=906205 TCP/UDP: Closing socket
Fri Dec 18 09:38:25 2015 us=906446 Closing TUN/TAP interface
Fri Dec 18 09:38:25 2015 us=906648 /sbin/ifconfig tun0 0.0.0.0
Fri Dec 18 09:38:26 2015 us=80403 PID packet_id_free
Fri Dec 18 09:38:26 2015 us=80800 SIGINT[hard,] received, process exiting
Fri Dec 18 09:38:26 2015 us=84253 PKCS#11: Removing providers
Fri Dec 18 09:38:26 2015 us=84504 PKCS#11: Releasing sessions
Fri Dec 18 09:38:26 2015 us=84646 PKCS#11: Terminating slotevent
Fri Dec 18 09:38:26 2015 us=84790 PKCS#11: Marking as uninitialized
Is there any missing configuration in my vpn.conf file?
Thank you so much
