Clients (Win8 and Win10) don't connect

panumenoun

Greetings.

I have an OpenVPN server on which I can connect with several machines:
Linux, FreeBSD, Android, Mac, Iphone, Windows 7 and Windows 7 VM.
But: I can not properly connect with Windows 8 nor Windows 10.
Yes: Indeed I am running with Administrator Privileges.

Here is the client log:

NOTE: FlushIpNetTable failed on interface [12]
...
ROUTE: route addition failed using CreateIpForwardEntry
Route addition via IPAPI failed [adaptive]
Route addition fallback to route.exe
env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
ERROR: Windows route add command failed [adaptive]: returned error code 1
C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.0.0.33
ROUTE: route addition failed using CreateIpForwardEntry: denied.

The conf of client.ovpn is the default and is used with sucess on Win7:

client

;dev tap
dev tun

;dev-node MyTap

;proto tcp
proto udp

remote xxx.xxx.xxx.xxx 1194

;remote-random

resolv-retry infinite

nobind

user nobody
group nogroup

persist-key
persist-tun

;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

;mute-replay-warnings

ns-cert-type server
;tls-auth ta.key 1

;cipher x

omp-lzo

# Set log file verbosity.
verb 3

# Silence repeating messages
;mute 20

This is the server.conf :

port 1194

;proto tcp
proto udp

;dev tap
dev tun

;dev-node MyTap

ca ca.crt
cert server.crt
key server.key # This file should be kept secret

dh dh2048.pem

server 10.0.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

;server-bridge

;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248

;client-config-dir ccd
;route 10.9.0.0 255.255.255.252

;learn-address ./script

push "redirect-gateway def1 bypass-dhcp"

push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"

client-to-client

;duplicate-cn

keepalive 10 120

;tls-auth ta.key 0 # This file is secret

;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES

comp-lzo

;max-clients 100

user nobody
group nogroup

persist-key
persist-tun

status openvpn-status.log

;log openvpn.log
;log-append openvpn.log

verb 3

;mute 20

Any suggestion? Thanks in advance.

OpenVPN is great.

Regards.

Traffic

panumenoun wroteROUTE: route addition failed using CreateIpForwardEntry: denied.

This suggests that you do not have elevated privileges ..

Using the OpenVPN-GUI on W7/8/10 etc ..

Being logged in as administrator is not sufficient for OpenVPN to work.
You must select OpenvpnGUI.exe and <right-click>:"Run As Administrator" ..

This is a security measure imposed by Microsoft not OpenVPN.

panumenoun

Traffic wrote Using the OpenVPN-GUI on W7/8/10 etc ..

Being logged in as administrator is not sufficient for OpenVPN to work.
You must select OpenvpnGUI.exe and <right-click>:"Run As Administrator" ..

Traffic, I am aware about such security measure. And I am running as administrator (<right-click>:"Run As Administrator") in all Windows machines, but it is seens it is not enough for Win8 and Win10. As I said, on Win7 everything is fine.

Traffic

And yet .. Windows appears to deny you access:

panumenoun wroteC:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.0.0.33
ROUTE: route addition failed using CreateIpForwardEntry: denied.

Can you try without the --user/--group options in the client config ?

panumenoun

[/quote]Can you try without the --user/--group options in the client config ?[/quote]

Traffic,

I did that, just as Mac devices requires, and no sucess.

Traffic

Can you try starting using the Openvpn-service please.
https://openvpn.net/index.php/open-source/documentation/howto.html#startup

panumenoun

Traffic wroteCan you try starting using the Openvpn-service please.
https://openvpn.net/index.php/open-source/documentation/howto.html#startup

Traffic,

Unfortunately, openvpn as an automatic service it did not solve the problem.

I've downloaded the the Win 10 virtual machine from the development environment of MS:
https://dev.windows.com/en-us/downloads/virtual-machines

And the same error persists: "ERROR: Windows route add command failed [adaptive]: returned error code 1"

And I also turned off the firewall but it did not solve.

Just to remember:
I am running OpenVPN as Administrator <right-click>

I don't know what else I can try.

Traffic

Try opening an elevated command prompt and start openvpn manually:

C:\path to\openvpn\config> openvpn --config client.ovpn

panumenoun

The same error message occurs when I run it manually.

> openvpn --config client.ovpn

I've found the same issue on another forum related to the program itself, and solved with a new version of the software:
https://www.privateinternetaccess.com/forum/discussion/18379/windows-10-open-vpn

Would it be possible to be an issue related to OpenVPN program itself?
Is there an alternative config for Win10 and Win8? Becasue on Win7 it works properly.

Traffic

panumenoun wroteI've found the same issue on another forum related to the program itself, and solved with a new version of the software:
<...>

That is an old version of openvpn .. what do you use now ?

panumenoun

Traffic wroteThat is an old version of openvpn .. what do you use now ?

I am using the last version of OpenVPN 2.3.9, released on 16.12.2015:
https://openvpn.net/index.php/download/community-downloads.html

It is not connecting properly yet, but now it is possible to ping other machines and reach services on 10.0.0.1/24.

panumenoun

Is there a configuration, other than the official, to use on new Windows machines?

Can anyone suggest one or post the one you use?

Thanks.

Traffic

panumenoun wroteIt is not connecting properly yet, but now it is possible to ping other machines and reach services on 10.0.0.1/24

That suggests openvpn is connecting properly ..

Please post details of configs and logs.