VPN client connects, but cannot ping VPN server

db533

I'm trying to set up a VPN to enable remote access to a LAN. I want to be able to connect the VPN and then have any traffic that is addressed to my LAN (10.45.213.0/24) to be routed via the VPN, thus giving me access to all devices on my LAN when travelling. (All other internet traffic should be routed to the standard gateway, not via the VPN).

I have a FreeNAS server (10.45.213.20/24) that is running OpenVPN in a jail (10.45.213.53/24). I have managed to get the VPN client (on Win8.1) to connect to the VPN server and get an IP address assigned (10.8.0.4) for the VPN subnet (10.8.0.0/24). But once I connect, I cannot ping the VPN server (1.8.0.1) or any device on the LAN. Sounds like an issue with routing, but I can't spot where I have an error.

Windows firewall is fully disabled on the Win8.1 machine that is running the client and NAT is in place on the server, see below.

Server openvpn.conf:

port 10011                                                                                                                                       
proto udp                                                                                                                                        
dev tun                                                                                                                                          
topology subnet                                                                                                                                  
ca /mnt/openvpn/keys/ca.crt                                                                                                                      
cert /mnt/openvpn/keys/openvpn-server.crt #Server key created previously                                                                         
key /mnt/openvpn/keys/openvpn-server.key                                                                                                         
dh /mnt/openvpn/keys/dh2048.pem #Diffie-Hellman parameters are now 2048 bits long                                                                
server 10.8.0.0 255.255.255.0 #Purple network                                                                                                    
ifconfig-pool-persist ipp.txt                                                                                                                    
push "route 10.45.213.0 255.255.255.0" 
route 10.45.213.53 255.255.255.0 10.8.0.1 
keepalive 10 120                                                                                                                                 
group nobody                                                                                                                                     
user nobody                                                                                                                                      
comp-lzo                                                                                                                                         
persist-key                                                                                                                                      
persist-tun                                                                                                                                      
verb 6

client conf:

client
dev tun
proto udp
remote xxx.xxx.xxx.xxx 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert dainis-laptop.crt
key dainis-laptop.key
#tls-auth auth.key 1
ns-cert-type server
comp-lzo
verb 6

Port 443 is forwarded to port 10011 in my router and is confirmed to be open.

Server log:

Jan  5 21:47:00 openvpn5 syslogd: kernel boot file is /boot/kernel/kernel
Jan  5 21:47:00 openvpn5 openvpn[40557]: Current Parameter Settings:
Jan  5 21:47:00 openvpn5 openvpn[40557]:   config = '/mnt/openvpn/openvpn.conf'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   mode = 1
Jan  5 21:47:00 openvpn5 openvpn[40557]:   show_ciphers = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   show_digests = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   show_engines = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   genkey = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   key_pass_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   show_tls_ciphers = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]: Connection profiles [default]:
Jan  5 21:47:00 openvpn5 openvpn[40557]:   proto = udp
Jan  5 21:47:00 openvpn5 openvpn[40557]:   local = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   local_port = 10011
Jan  5 21:47:00 openvpn5 openvpn[40557]:   remote = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   remote_port = 10011
Jan  5 21:47:00 openvpn5 openvpn[40557]:   remote_float = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   bind_defined = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   bind_local = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   connect_retry_seconds = 5
Jan  5 21:47:00 openvpn5 openvpn[40557]:   connect_timeout = 10
Jan  5 21:47:00 openvpn5 openvpn[40557]:   connect_retry_max = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   socks_proxy_server = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   socks_proxy_port = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   socks_proxy_retry = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tun_mtu = 1500
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tun_mtu_defined = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   link_mtu = 1500
Jan  5 21:47:00 openvpn5 openvpn[40557]:   link_mtu_defined = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tun_mtu_extra = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tun_mtu_extra_defined = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   mtu_discover_type = -1
Jan  5 21:47:00 openvpn5 openvpn[40557]:   fragment = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   mssfix = 1450
Jan  5 21:47:00 openvpn5 openvpn[40557]:   explicit_exit_notification = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]: Connection profiles END
Jan  5 21:47:00 openvpn5 openvpn[40557]:   remote_random = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ipchange = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   dev = 'tun'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   dev_type = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   dev_node = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   lladdr = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   topology = 3
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tun_ipv6 = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_local = '10.8.0.1'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_remote_netmask = '255.255.255.0'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_noexec = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_nowarn = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_ipv6_local = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_ipv6_netbits = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_ipv6_remote = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   shaper = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   mtu_test = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   mlock = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   keepalive_ping = 10
Jan  5 21:47:00 openvpn5 openvpn[40557]:   keepalive_timeout = 120
Jan  5 21:47:00 openvpn5 openvpn[40557]:   inactivity_timeout = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ping_send_timeout = 10
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ping_rec_timeout = 240
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ping_rec_timeout_action = 2
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ping_timer_remote = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   remap_sigusr1 = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   persist_tun = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   persist_local_ip = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   persist_remote_ip = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   persist_key = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   passtos = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   resolve_retry_seconds = 1000000000
Jan  5 21:47:00 openvpn5 openvpn[40557]:   username = 'nobody'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   groupname = 'nobody'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   chroot_dir = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   cd_dir = '/mnt/openvpn'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   writepid = '/var/run/openvpn.pid'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   up_script = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   down_script = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   down_pre = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   up_restart = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   up_delay = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   daemon = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   inetd = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   log = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   suppress_timestamps = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   nice = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   verbosity = 6
Jan  5 21:47:00 openvpn5 openvpn[40557]:   mute = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   gremlin = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   status_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   status_file_version = 1
Jan  5 21:47:00 openvpn5 openvpn[40557]:   status_file_update_freq = 60
Jan  5 21:47:00 openvpn5 openvpn[40557]:   occ = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   rcvbuf = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   sndbuf = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   sockflags = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   fast_io = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   lzo = 7
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_script = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_default_gateway = '10.8.0.2'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_default_metric = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_noexec = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_delay = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_delay_window = 30
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_delay_defined = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_nopull = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route_gateway_via_dhcp = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   max_routes = 100
Jan  5 21:47:00 openvpn5 openvpn[40557]:   allow_pull_fqdn = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   route 10.45.213.53/255.255.255.0/10.8.0.1/nil
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_addr = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_port = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_user_pass = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_log_history_cache = 250
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_echo_buffer_size = 100
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_write_peer_info_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_client_user = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_client_group = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   management_flags = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   shared_secret_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   key_direction = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ciphername_defined = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ciphername = 'BF-CBC'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   authname_defined = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   authname = 'SHA1'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   prng_hash = 'SHA1'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   prng_nonce_secret_len = 16
Jan  5 21:47:00 openvpn5 openvpn[40557]:   keysize = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   engine = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   replay = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   mute_replay_warnings = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   replay_window = 64
Jan  5 21:47:00 openvpn5 openvpn[40557]:   replay_time = 15
Jan  5 21:47:00 openvpn5 openvpn[40557]:   packet_id_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   use_iv = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   test_crypto = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tls_server = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tls_client = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   key_method = 2
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ca_file = '/mnt/openvpn/keys/ca.crt'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ca_path = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   dh_file = '/mnt/openvpn/keys/dh2048.pem'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   cert_file = '/mnt/openvpn/keys/openvpn-server.crt'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   extra_certs_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   priv_key_file = '/mnt/openvpn/keys/openvpn-server.key'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   pkcs12_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   cipher_list = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tls_verify = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tls_export_cert = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   verify_x509_type = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   verify_x509_name = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   crl_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ns_cert_type = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   remote_cert_ku[i] = 0
Jan  5 21:47:00 openvpn5 last message repeated 15 times
Jan  5 21:47:00 openvpn5 openvpn[40557]:   remote_cert_eku = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ssl_flags = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tls_timeout = 2
Jan  5 21:47:00 openvpn5 openvpn[40557]:   renegotiate_bytes = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   renegotiate_packets = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   renegotiate_seconds = 3600
Jan  5 21:47:00 openvpn5 openvpn[40557]:   handshake_window = 60
Jan  5 21:47:00 openvpn5 openvpn[40557]:   transition_window = 3600
Jan  5 21:47:00 openvpn5 openvpn[40557]:   single_session = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_peer_info = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tls_exit = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tls_auth_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_network = 10.8.0.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_netmask = 255.255.255.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_network_ipv6 = ::
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_netbits_ipv6 = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_bridge_ip = 0.0.0.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_bridge_netmask = 0.0.0.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_bridge_pool_start = 0.0.0.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   server_bridge_pool_end = 0.0.0.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_entry = 'route 10.45.213.0 255.255.255.0'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_entry = 'route-gateway 10.8.0.1'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_entry = 'topology subnet'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_entry = 'ping 10'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_entry = 'ping-restart 120'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_pool_defined = ENABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_pool_start = 10.8.0.2
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_pool_end = 10.8.0.253
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_pool_netmask = 255.255.255.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_pool_persist_filename = 'ipp.txt'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_pool_persist_refresh_freq = 600
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_ipv6_pool_defined = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_ipv6_pool_base = ::
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ifconfig_ipv6_pool_netbits = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   n_bcast_buf = 256
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tcp_queue_limit = 64
Jan  5 21:47:00 openvpn5 openvpn[40557]:   real_hash_size = 256
Jan  5 21:47:00 openvpn5 openvpn[40557]:   virtual_hash_size = 256
Jan  5 21:47:00 openvpn5 openvpn[40557]:   client_connect_script = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   learn_address_script = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   client_disconnect_script = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   client_config_dir = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   ccd_exclusive = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   tmp_dir = '/tmp'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_ifconfig_defined = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_ifconfig_local = 0.0.0.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_ifconfig_remote_netmask = 0.0.0.0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_ifconfig_ipv6_defined = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_ifconfig_ipv6_local = ::/0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   push_ifconfig_ipv6_remote = ::
Jan  5 21:47:00 openvpn5 openvpn[40557]:   enable_c2c = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   duplicate_cn = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   cf_max = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   cf_per = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   max_clients = 1024
Jan  5 21:47:00 openvpn5 openvpn[40557]:   max_routes_per_client = 256
Jan  5 21:47:00 openvpn5 openvpn[40557]:   auth_user_pass_verify_script = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   auth_user_pass_verify_script_via_file = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   port_share_host = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]:   port_share_port = 0
Jan  5 21:47:00 openvpn5 openvpn[40557]:   client = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   pull = DISABLED
Jan  5 21:47:00 openvpn5 openvpn[40557]:   auth_user_pass_file = '[UNDEF]'
Jan  5 21:47:00 openvpn5 openvpn[40557]: OpenVPN 2.3.9 amd64-portbld-freebsd9.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Dec 22 2015
Jan  5 21:47:00 openvpn5 openvpn[40557]: library versions: OpenSSL 0.9.8za-freebsd 5 Jun 2014, LZO 2.09
Jan  5 21:47:00 openvpn5 openvpn[40558]: Diffie-Hellman initialized with 2048 bit key
Jan  5 21:47:00 openvpn5 openvpn[40558]: WARNING: file '/mnt/openvpn/keys/openvpn-server.key' is group or others accessible
Jan  5 21:47:00 openvpn5 openvpn[40558]: TLS-Auth MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Jan  5 21:47:00 openvpn5 openvpn[40558]: Socket Buffers: R=[42080->42080] S=[9216->9216]
Jan  5 21:47:00 openvpn5 openvpn[40558]: ROUTE_GATEWAY 10.45.213.5
Jan  5 21:47:00 openvpn5 openvpn[40558]: TUN/TAP device /dev/tun0 opened
Jan  5 21:47:00 openvpn5 openvpn[40558]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Jan  5 21:47:00 openvpn5 openvpn[40558]: /sbin/ifconfig tun0 10.8.0.1 10.8.0.2 mtu 1500 netmask 255.255.255.0 up
Jan  5 21:47:00 openvpn5 openvpn[40558]: /sbin/route add -net 10.8.0.0 10.8.0.1 255.255.255.0
Jan  5 21:47:00 openvpn5 openvpn[40558]: /sbin/route add -net 10.45.213.53 10.8.0.1 255.255.255.0
Jan  5 21:47:00 openvpn5 openvpn[40558]: ERROR: FreeBSD route add command failed: external program exited with error status: 1
Jan  5 21:47:00 openvpn5 openvpn[40558]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Jan  5 21:47:00 openvpn5 openvpn[40558]: GID set to nobody
Jan  5 21:47:00 openvpn5 openvpn[40558]: UID set to nobody
Jan  5 21:47:00 openvpn5 openvpn[40558]: UDPv4 link local (bound): [undef]
Jan  5 21:47:00 openvpn5 openvpn[40558]: UDPv4 link remote: [undef]
Jan  5 21:47:00 openvpn5 openvpn[40558]: MULTI: multi_init called, r=256 v=256
Jan  5 21:47:00 openvpn5 openvpn[40558]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Jan  5 21:47:00 openvpn5 openvpn[40558]: ifconfig_pool_read(), in='dainis-laptop,10.8.0.4', TODO: IPv6
Jan  5 21:47:00 openvpn5 openvpn[40558]: succeeded -> ifconfig_pool_set()
Jan  5 21:47:00 openvpn5 openvpn[40558]: IFCONFIG POOL LIST
Jan  5 21:47:00 openvpn5 openvpn[40558]: dainis-laptop,10.8.0.4
Jan  5 21:47:00 openvpn5 openvpn[40558]: Initialization Sequence Completed
Jan  5 21:47:10 openvpn5 openvpn[40558]: MULTI: multi_create_instance called
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Re-using SSL/TLS context
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 LZO compression initialized
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Local Options hash (VER=V4): '530fdded'
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Expected Remote Options hash (VER=V4): '41690919'
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [14] from [AF_INET]10.45.213.5:59046: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 TLS: Initial packet from [AF_INET]10.45.213.5:59046, sid=d7879bf2 93481d19
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [26] to [AF_INET]10.45.213.5:59046: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [22] from [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 0 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [307] from [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=293
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [1200] to [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ 1 ] pid=1 DATA len=1174
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [1188] to [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=1174
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [1188] to [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=1174
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [132] to [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=118
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [22] from [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 1 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [22] from [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 2 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [22] from [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 3 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [1200] from [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ 4 ] pid=2 DATA len=1174
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [22] to [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 2 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [1188] from [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=1174
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [22] to [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 3 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [852] from [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=838
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 VERIFY OK: depth=1, C=LV, ST=Adazu novads, L=Baltezers, O=Personal, OU=Personal, CN=lucijas, name=EasyRSA, emailAddress=db5331@gmail.com
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 VERIFY OK: depth=0, C=LV, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=dainis-laptop, name=EasyRSA, emailAddress=db5331@gmail.com
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [85] to [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ 4 ] pid=5 DATA len=59
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [388] from [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ 5 ] pid=5 DATA len=362
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 WRITE [292] to [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ 5 ] pid=6 DATA len=266
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 UDPv4 READ [22] from [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 6 ]
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jan  5 21:47:10 openvpn5 openvpn[40558]: 10.45.213.5:59046 [dainis-laptop] Peer Connection Initiated with [AF_INET]10.45.213.5:59046
Jan  5 21:47:10 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=(Not enabled)
Jan  5 21:47:10 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 MULTI: Learn: 10.8.0.4 -> dainis-laptop/10.45.213.5:59046
Jan  5 21:47:10 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 MULTI: primary virtual IP for dainis-laptop/10.45.213.5:59046: 10.8.0.4
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 READ [104] from [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=90
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 PUSH: Received control message: 'PUSH_REQUEST'
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 send_push_reply(): safe_cap=940
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 SENT CONTROL [dainis-laptop]: 'PUSH_REPLY,route 10.45.213.0 255.255.255.0,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0' (status=1)
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 WRITE [22] to [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 6 ]
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 WRITE [216] to [AF_INET]10.45.213.5:59046: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=202
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 READ [22] from [AF_INET]10.45.213.5:59046: P_ACK_V1 kid=0 [ 7 ]
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 READ [101] from [AF_INET]10.45.213.5:59046: P_DATA_V1 kid=0 DATA len=100
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 MULTI: bad source address from client [::], packet dropped
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 READ [85] from [AF_INET]10.45.213.5:59046: P_DATA_V1 kid=0 DATA len=84
Jan  5 21:47:12 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 READ [117] from [AF_INET]10.45.213.5:59046: P_DATA_V1 kid=0 DATA len=116
Jan  5 21:47:13 openvpn5 openvpn[40558]: dainis-laptop/10.45.213.5:59046 UDPv4 READ [173] from [AF_INET]10.45.213.5:59046: P_DATA_V1 kid=0 DATA len=172

"MULTI: bad source address from client [::], packet dropped" looks suspicious 4 lines from the bottom...

Client log:

Tue Jan 05 19:21:15 2016 us=559114 Current Parameter Settings:
Tue Jan 05 19:21:15 2016 us=560115   config = 'dainis-laptop.ovpn'
Tue Jan 05 19:21:15 2016 us=560115   mode = 0
Tue Jan 05 19:21:15 2016 us=560115   show_ciphers = DISABLED
Tue Jan 05 19:21:15 2016 us=560115   show_digests = DISABLED
Tue Jan 05 19:21:15 2016 us=560115   show_engines = DISABLED
Tue Jan 05 19:21:15 2016 us=560115   genkey = DISABLED
Tue Jan 05 19:21:15 2016 us=560115   key_pass_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   show_tls_ciphers = DISABLED
Tue Jan 05 19:21:15 2016 us=561115 Connection profiles [default]:
Tue Jan 05 19:21:15 2016 us=561115   proto = udp
Tue Jan 05 19:21:15 2016 us=561115   local = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   local_port = 0
Tue Jan 05 19:21:15 2016 us=561115   remote = 'lucijas.homeip.net'
Tue Jan 05 19:21:15 2016 us=561115   remote_port = 443
Tue Jan 05 19:21:15 2016 us=561115   remote_float = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   bind_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   bind_local = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   connect_retry_seconds = 5
Tue Jan 05 19:21:15 2016 us=561115   connect_timeout = 10
Tue Jan 05 19:21:15 2016 us=561115   connect_retry_max = 0
Tue Jan 05 19:21:15 2016 us=561115   socks_proxy_server = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   socks_proxy_port = 0
Tue Jan 05 19:21:15 2016 us=561115   socks_proxy_retry = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   tun_mtu = 1500
Tue Jan 05 19:21:15 2016 us=561115   tun_mtu_defined = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   link_mtu = 1500
Tue Jan 05 19:21:15 2016 us=561115   link_mtu_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   tun_mtu_extra = 0
Tue Jan 05 19:21:15 2016 us=561115   tun_mtu_extra_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   mtu_discover_type = -1
Tue Jan 05 19:21:15 2016 us=561115   fragment = 0
Tue Jan 05 19:21:15 2016 us=561115   mssfix = 1450
Tue Jan 05 19:21:15 2016 us=561115   explicit_exit_notification = 0
Tue Jan 05 19:21:15 2016 us=561115 Connection profiles END
Tue Jan 05 19:21:15 2016 us=561115   remote_random = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   ipchange = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   dev = 'tun'
Tue Jan 05 19:21:15 2016 us=561115   dev_type = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   dev_node = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   lladdr = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   topology = 1
Tue Jan 05 19:21:15 2016 us=561115   tun_ipv6 = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   ifconfig_local = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   ifconfig_remote_netmask = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   ifconfig_noexec = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   ifconfig_nowarn = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   ifconfig_ipv6_local = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   ifconfig_ipv6_netbits = 0
Tue Jan 05 19:21:15 2016 us=561115   ifconfig_ipv6_remote = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   shaper = 0
Tue Jan 05 19:21:15 2016 us=561115   mtu_test = 0
Tue Jan 05 19:21:15 2016 us=561115   mlock = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   keepalive_ping = 0
Tue Jan 05 19:21:15 2016 us=561115   keepalive_timeout = 0
Tue Jan 05 19:21:15 2016 us=561115   inactivity_timeout = 0
Tue Jan 05 19:21:15 2016 us=561115   ping_send_timeout = 0
Tue Jan 05 19:21:15 2016 us=561115   ping_rec_timeout = 0
Tue Jan 05 19:21:15 2016 us=561115   ping_rec_timeout_action = 0
Tue Jan 05 19:21:15 2016 us=561115   ping_timer_remote = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   remap_sigusr1 = 0
Tue Jan 05 19:21:15 2016 us=561115   persist_tun = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   persist_local_ip = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   persist_remote_ip = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   persist_key = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   passtos = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   resolve_retry_seconds = 1000000000
Tue Jan 05 19:21:15 2016 us=561115   username = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   groupname = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   chroot_dir = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   cd_dir = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   writepid = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   up_script = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   down_script = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   down_pre = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   up_restart = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   up_delay = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   daemon = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   inetd = 0
Tue Jan 05 19:21:15 2016 us=561115   log = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   suppress_timestamps = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   nice = 0
Tue Jan 05 19:21:15 2016 us=561115   verbosity = 6
Tue Jan 05 19:21:15 2016 us=561115   mute = 0
Tue Jan 05 19:21:15 2016 us=561115   gremlin = 0
Tue Jan 05 19:21:15 2016 us=561115   status_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   status_file_version = 1
Tue Jan 05 19:21:15 2016 us=561115   status_file_update_freq = 60
Tue Jan 05 19:21:15 2016 us=561115   occ = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   rcvbuf = 0
Tue Jan 05 19:21:15 2016 us=561115   sndbuf = 0
Tue Jan 05 19:21:15 2016 us=561115   sockflags = 0
Tue Jan 05 19:21:15 2016 us=561115   fast_io = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   lzo = 7
Tue Jan 05 19:21:15 2016 us=561115   route_script = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   route_default_gateway = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   route_default_metric = 0
Tue Jan 05 19:21:15 2016 us=561115   route_noexec = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   route_delay = 5
Tue Jan 05 19:21:15 2016 us=561115   route_delay_window = 30
Tue Jan 05 19:21:15 2016 us=561115   route_delay_defined = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   route_nopull = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   route_gateway_via_dhcp = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   max_routes = 100
Tue Jan 05 19:21:15 2016 us=561115   allow_pull_fqdn = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   management_addr = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   management_port = 0
Tue Jan 05 19:21:15 2016 us=561115   management_user_pass = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   management_log_history_cache = 250
Tue Jan 05 19:21:15 2016 us=561115   management_echo_buffer_size = 100
Tue Jan 05 19:21:15 2016 us=561115   management_write_peer_info_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   management_client_user = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   management_client_group = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   management_flags = 0
Tue Jan 05 19:21:15 2016 us=561115   shared_secret_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   key_direction = 0
Tue Jan 05 19:21:15 2016 us=561115   ciphername_defined = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   ciphername = 'BF-CBC'
Tue Jan 05 19:21:15 2016 us=561115   authname_defined = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   authname = 'SHA1'
Tue Jan 05 19:21:15 2016 us=561115   prng_hash = 'SHA1'
Tue Jan 05 19:21:15 2016 us=561115   prng_nonce_secret_len = 16
Tue Jan 05 19:21:15 2016 us=561115   keysize = 0
Tue Jan 05 19:21:15 2016 us=561115   engine = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   replay = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   mute_replay_warnings = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   replay_window = 64
Tue Jan 05 19:21:15 2016 us=561115   replay_time = 15
Tue Jan 05 19:21:15 2016 us=561115   packet_id_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   use_iv = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   test_crypto = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   tls_server = DISABLED
Tue Jan 05 19:21:15 2016 us=561115   tls_client = ENABLED
Tue Jan 05 19:21:15 2016 us=561115   key_method = 2
Tue Jan 05 19:21:15 2016 us=561115   ca_file = 'ca.crt'
Tue Jan 05 19:21:15 2016 us=561115   ca_path = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   dh_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   cert_file = 'dainis-laptop.crt'
Tue Jan 05 19:21:15 2016 us=561115   extra_certs_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   priv_key_file = 'dainis-laptop.key'
Tue Jan 05 19:21:15 2016 us=561115   pkcs12_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   cryptoapi_cert = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   cipher_list = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   tls_verify = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   tls_export_cert = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   verify_x509_type = 0
Tue Jan 05 19:21:15 2016 us=561115   verify_x509_name = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   crl_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=561115   ns_cert_type = 1
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=561115   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=562117   remote_cert_ku[i] = 0
Tue Jan 05 19:21:15 2016 us=562117   remote_cert_eku = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=562117   ssl_flags = 0
Tue Jan 05 19:21:15 2016 us=562117   tls_timeout = 2
Tue Jan 05 19:21:15 2016 us=562117   renegotiate_bytes = 0
Tue Jan 05 19:21:15 2016 us=562117   renegotiate_packets = 0
Tue Jan 05 19:21:15 2016 us=562117   renegotiate_seconds = 3600
Tue Jan 05 19:21:15 2016 us=562117   handshake_window = 60
Tue Jan 05 19:21:15 2016 us=562117   transition_window = 3600
Tue Jan 05 19:21:15 2016 us=562117   single_session = DISABLED
Tue Jan 05 19:21:15 2016 us=562117   push_peer_info = DISABLED
Tue Jan 05 19:21:15 2016 us=562117   tls_exit = DISABLED
Tue Jan 05 19:21:15 2016 us=562117   tls_auth_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=562117   pkcs11_protected_authentication = DISABLED
Tue Jan 05 19:21:15 2016 us=562117   pkcs11_private_mode = 00000000
Tue Jan 05 19:21:15 2016 us=562117   pkcs11_cert_private = DISABLED
Tue Jan 05 19:21:15 2016 us=562117   pkcs11_pin_cache_period = -1
Tue Jan 05 19:21:15 2016 us=562117   pkcs11_id = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=562117   pkcs11_id_management = DISABLED
Tue Jan 05 19:21:15 2016 us=562117   server_network = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=562117   server_netmask = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   server_network_ipv6 = ::
Tue Jan 05 19:21:15 2016 us=563118   server_netbits_ipv6 = 0
Tue Jan 05 19:21:15 2016 us=563118   server_bridge_ip = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   server_bridge_netmask = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   server_bridge_pool_start = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   server_bridge_pool_end = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_pool_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_pool_start = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_pool_end = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_pool_netmask = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_pool_persist_refresh_freq = 600
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_ipv6_pool_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_ipv6_pool_base = ::
Tue Jan 05 19:21:15 2016 us=563118   ifconfig_ipv6_pool_netbits = 0
Tue Jan 05 19:21:15 2016 us=563118   n_bcast_buf = 256
Tue Jan 05 19:21:15 2016 us=563118   tcp_queue_limit = 64
Tue Jan 05 19:21:15 2016 us=563118   real_hash_size = 256
Tue Jan 05 19:21:15 2016 us=563118   virtual_hash_size = 256
Tue Jan 05 19:21:15 2016 us=563118   client_connect_script = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   learn_address_script = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   client_disconnect_script = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   client_config_dir = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   ccd_exclusive = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   tmp_dir = 'C:\Users\Dainis\AppData\Local\Temp\'
Tue Jan 05 19:21:15 2016 us=563118   push_ifconfig_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   push_ifconfig_local = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   push_ifconfig_remote_netmask = 0.0.0.0
Tue Jan 05 19:21:15 2016 us=563118   push_ifconfig_ipv6_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   push_ifconfig_ipv6_local = ::/0
Tue Jan 05 19:21:15 2016 us=563118   push_ifconfig_ipv6_remote = ::
Tue Jan 05 19:21:15 2016 us=563118   enable_c2c = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   duplicate_cn = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   cf_max = 0
Tue Jan 05 19:21:15 2016 us=563118   cf_per = 0
Tue Jan 05 19:21:15 2016 us=563118   max_clients = 1024
Tue Jan 05 19:21:15 2016 us=563118   max_routes_per_client = 256
Tue Jan 05 19:21:15 2016 us=563118   auth_user_pass_verify_script = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   auth_user_pass_verify_script_via_file = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   client = ENABLED
Tue Jan 05 19:21:15 2016 us=563118   pull = ENABLED
Tue Jan 05 19:21:15 2016 us=563118   auth_user_pass_file = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   show_net_up = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   route_method = 0
Tue Jan 05 19:21:15 2016 us=563118   block_outside_dns = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   ip_win32_defined = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   ip_win32_type = 3
Tue Jan 05 19:21:15 2016 us=563118   dhcp_masq_offset = 0
Tue Jan 05 19:21:15 2016 us=563118   dhcp_lease_time = 31536000
Tue Jan 05 19:21:15 2016 us=563118   tap_sleep = 0
Tue Jan 05 19:21:15 2016 us=563118   dhcp_options = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   dhcp_renew = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   dhcp_pre_release = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   dhcp_release = DISABLED
Tue Jan 05 19:21:15 2016 us=563118   domain = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   netbios_scope = '[UNDEF]'
Tue Jan 05 19:21:15 2016 us=563118   netbios_node_type = 0
Tue Jan 05 19:21:15 2016 us=563118   disable_nbt = DISABLED
Tue Jan 05 19:21:15 2016 us=563118 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan  4 2016
Tue Jan 05 19:21:15 2016 us=563118 Windows version 6.2 (Windows 8 or greater)
Tue Jan 05 19:21:15 2016 us=563118 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Tue Jan 05 19:21:15 2016 us=665330 LZO compression initialized
Tue Jan 05 19:21:15 2016 us=665330 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Jan 05 19:21:15 2016 us=665330 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Jan 05 19:21:15 2016 us=669330 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Jan 05 19:21:15 2016 us=669330 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Jan 05 19:21:15 2016 us=669330 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Jan 05 19:21:15 2016 us=669330 Local Options hash (VER=V4): '41690919'
Tue Jan 05 19:21:15 2016 us=669330 Expected Remote Options hash (VER=V4): '530fdded'
Tue Jan 05 19:21:15 2016 us=669330 UDPv4 link local: [undef]
Tue Jan 05 19:21:15 2016 us=669330 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:443
Tue Jan 05 19:21:15 2016 us=669330 UDPv4 WRITE [14] to [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jan 05 19:21:15 2016 us=669330 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Tue Jan 05 19:21:15 2016 us=709863 UDPv4 READ [26] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue Jan 05 19:21:15 2016 us=709863 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:443, sid=819b8df2 00609d13
Tue Jan 05 19:21:15 2016 us=709863 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 0 ]
Tue Jan 05 19:21:15 2016 us=709863 UDPv4 WRITE [307] to [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=293
Tue Jan 05 19:21:15 2016 us=787628 UDPv4 READ [1200] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ 1 ] pid=1 DATA len=1174
Tue Jan 05 19:21:15 2016 us=787628 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 1 ]
Tue Jan 05 19:21:15 2016 us=793109 UDPv4 READ [1188] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=1174
Tue Jan 05 19:21:15 2016 us=793109 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 2 ]
Tue Jan 05 19:21:15 2016 us=808795 UDPv4 READ [1188] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=1174
Tue Jan 05 19:21:15 2016 us=808795 VERIFY OK: depth=1, C=LV, ST=Adazu novads, L=Baltezers, O=Personal, OU=Personal, CN=lucijas, name=EasyRSA, emailAddress=db5331@gmail.com
Tue Jan 05 19:21:15 2016 us=808795 VERIFY OK: nsCertType=SERVER
Tue Jan 05 19:21:15 2016 us=808795 VERIFY OK: depth=0, C=LV, ST=Adazu novads, L=Baltezers, O=Personal, OU=Personal, CN=openvpn-server, name=EasyRSA, emailAddress=db5331@gmail.com
Tue Jan 05 19:21:15 2016 us=808795 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 3 ]
Tue Jan 05 19:21:15 2016 us=808795 UDPv4 READ [132] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=118
Tue Jan 05 19:21:15 2016 us=847353 UDPv4 WRITE [1200] to [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ 4 ] pid=2 DATA len=1174
Tue Jan 05 19:21:15 2016 us=847353 UDPv4 WRITE [1188] to [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=1174
Tue Jan 05 19:21:15 2016 us=847353 UDPv4 WRITE [852] to [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=4 DATA len=838
Tue Jan 05 19:21:16 2016 us=88355 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 2 ]
Tue Jan 05 19:21:16 2016 us=88355 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 3 ]
Tue Jan 05 19:21:16 2016 us=89338 UDPv4 READ [85] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ 4 ] pid=5 DATA len=59
Tue Jan 05 19:21:16 2016 us=89338 UDPv4 WRITE [388] to [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ 5 ] pid=5 DATA len=362
Tue Jan 05 19:21:16 2016 us=152454 UDPv4 READ [292] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ 5 ] pid=6 DATA len=266
Tue Jan 05 19:21:16 2016 us=152454 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 05 19:21:16 2016 us=152454 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 05 19:21:16 2016 us=152454 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 05 19:21:16 2016 us=152454 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 05 19:21:16 2016 us=152454 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 6 ]
Tue Jan 05 19:21:16 2016 us=152454 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Jan 05 19:21:16 2016 us=152454 [openvpn-server] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:443
Tue Jan 05 19:21:18 2016 us=589637 SENT CONTROL [openvpn-server]: 'PUSH_REQUEST' (status=1)
Tue Jan 05 19:21:18 2016 us=589637 UDPv4 WRITE [104] to [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=6 DATA len=90
Tue Jan 05 19:21:19 2016 us=94143 UDPv4 READ [22] from [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 6 ]
Tue Jan 05 19:21:19 2016 us=94143 UDPv4 READ [216] from [AF_INET]xxx.xxx.xxx.xxx:443: P_CONTROL_V1 kid=0 [ ] pid=7 DATA len=202
Tue Jan 05 19:21:19 2016 us=94143 PUSH: Received control message: 'PUSH_REPLY,route 10.45.213.0 255.255.255.0,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0'
Tue Jan 05 19:21:19 2016 us=94143 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jan 05 19:21:19 2016 us=94143 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jan 05 19:21:19 2016 us=94143 OPTIONS IMPORT: route options modified
Tue Jan 05 19:21:19 2016 us=94143 OPTIONS IMPORT: route-related options modified
Tue Jan 05 19:21:19 2016 us=94143 ROUTE_GATEWAY 172.20.10.1/255.255.255.240 I=14 HWADDR=b0:10:41:a7:83:b7
Tue Jan 05 19:21:19 2016 us=109771 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jan 05 19:21:19 2016 us=109771 open_tun, tt->ipv6=0
Tue Jan 05 19:21:19 2016 us=109771 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{EB80ED3C-8FF8-41D0-B522-AED729C55E6C}.tap
Tue Jan 05 19:21:19 2016 us=109771 TAP-Windows Driver Version 9.21 
Tue Jan 05 19:21:19 2016 us=109771 TAP-Windows MTU=1500
Tue Jan 05 19:21:19 2016 us=125403 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.4/255.255.255.0 [SUCCEEDED]
Tue Jan 05 19:21:19 2016 us=125403 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.4/255.255.255.0 on interface {EB80ED3C-8FF8-41D0-B522-AED729C55E6C} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Jan 05 19:21:19 2016 us=125403 Successful ARP Flush on interface [45] {EB80ED3C-8FF8-41D0-B522-AED729C55E6C}
Tue Jan 05 19:21:19 2016 us=143514 UDPv4 WRITE [22] to [AF_INET]xxx.xxx.xxx.xxx:443: P_ACK_V1 kid=0 [ 7 ]
Tue Jan 05 19:21:19 2016 us=173535 TUN READ [141]
Tue Jan 05 19:21:19 2016 us=173535 UDPv4 WRITE [173] to [AF_INET]xxx.xxx.xxx.xxx:443: P_DATA_V1 kid=0 DATA len=172
Tue Jan 05 19:21:19 2016 us=181540 TUN READ [64]
Tue Jan 05 19:21:23 2016 us=194141 UDPv4 WRITE [93] to [AF_INET]xxx.xxx.xxx.xxx:443: P_DATA_V1 kid=0 DATA len=92
Tue Jan 05 19:21:24 2016 us=425058 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Tue Jan 05 19:21:24 2016 us=425058 C:\windows\system32\route.exe ADD 10.45.213.0 MASK 255.255.255.0 10.8.0.1
Tue Jan 05 19:21:24 2016 us=425058 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists.   [status=5010 if_index=45]
Tue Jan 05 19:21:24 2016 us=425058 Route addition via IPAPI failed [adaptive]
Tue Jan 05 19:21:24 2016 us=425058 Route addition fallback to route.exe
Tue Jan 05 19:21:24 2016 us=425058 env_block: add PATH=C:\windows\System32;C:\windows;C:\windows\System32\Wbem
Tue Jan 05 19:21:24 2016 us=463191 Initialization Sequence Completed
Tue Jan 05 19:21:24 2016 us=729347 TUN READ [70]
Tue Jan 05 19:21:24 2016 us=729347 UDPv4 WRITE [109] to [AF_INET]xxx.xxx.xxx.xxx:443: P_DATA_V1 kid=0 DATA len=108
Tue Jan 05 19:21:35 2016 us=597462 TCP/UDP: Closing socket
Tue Jan 05 19:21:35 2016 us=597462 C:\windows\system32\route.exe DELETE 10.45.213.0 MASK 255.255.255.0 10.8.0.1
Tue Jan 05 19:21:35 2016 us=597462 Route deletion via IPAPI succeeded [adaptive]
Tue Jan 05 19:21:35 2016 us=597462 Closing TUN/TAP interface
Tue Jan 05 19:21:35 2016 us=597462 SIGTERM[hard,] received, process exiting

"ROUTE: route addition failed using CreateIpForwardEntry: The object already exists. [status=5010 if_index=45]" also looks suspicious, but there is no route to 10.45.213.0 before the VPN connection was establised. The routing table before the VPN client connects is as follows:

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      172.20.10.1     172.20.10.14     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      172.20.10.0  255.255.255.240         On-link      172.20.10.14    281
     172.20.10.14  255.255.255.255         On-link      172.20.10.14    281
     172.20.10.15  255.255.255.255         On-link      172.20.10.14    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      172.20.10.14    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      172.20.10.14    281
===========================================================================

Once connected it is as follows:

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      10.45.213.5    10.45.213.103     25
         10.8.0.0    255.255.255.0         On-link          10.8.0.4    276
         10.8.0.4  255.255.255.255         On-link          10.8.0.4    276
       10.8.0.255  255.255.255.255         On-link          10.8.0.4    276
      10.45.213.0    255.255.255.0         10.8.0.1         10.8.0.4     20
      10.45.213.0    255.255.255.0         On-link     10.45.213.103    281
    10.45.213.103  255.255.255.255         On-link     10.45.213.103    281
    10.45.213.255  255.255.255.255         On-link     10.45.213.103    281
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     10.45.213.103    281
        224.0.0.0        240.0.0.0         On-link          10.8.0.4    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     10.45.213.103    281
  255.255.255.255  255.255.255.255         On-link          10.8.0.4    276
===========================================================================

The OpenVPN server has NAT rules configured using ipfw.

root@openvpn5:/usr/home/dainis # [b]ipfw list [/b]                                                                                                      
00100 nat 1 ip from 10.8.0.0/24 to any out via epair7b                                                                                           
00200 nat 1 ip from any to any in via epair7b                                                                                                    
65535 allow ip from any to any

Once I have connected to the VPN, ipconfig /all on the client shows that it has been assigned 10.8.0.4, put ping to 10.8.0.1 times out.

Ethernet adapter Ethernet 2:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-EB-80-ED-3C
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::1df4:da4a:251f:8be1%45(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.8.0.4(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : 05 January 2016 21:59:39
   Lease Expires . . . . . . . . . . : 04 January 2017 21:59:39
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 10.8.0.254
   DHCPv6 IAID . . . . . . . . . . . : 755040235
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-78-9B-F2-14-58-D0-11-F7-61

   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Anyone have any ideas what I am missing?

Traffic

db533 wroteServer openvpn.conf:
Code:
route 10.45.213.53 255.255.255.0 10.8.0.1

change to:

route 10.45.213.0 255.255.255.0

db533 wroteThe OpenVPN server has NAT rules configured using ipfw.
Code:
00100 nat 1 ip from 10.8.0.0/24 to any out via epair7b
00200 nat 1 ip from any to any in via epair7b <---

I doubt you require the second line ..

db533

OK, I made the changes, stopped and restarted the openvpn server and then connected. I still can't ping the VPN server (10.8.0.1) or any PC beyond the VPN.

As I understand it, this change would tell my client to route all traffic bound for my LAN to the VPN subnet, not just traffic that is bound for my OpenVPN jail (10.45.213.53). That's probably a change that I did indeed need to make. Thanks!

But if my client can't ping the VPN server that is the gateway to my LAN (10.45.213.0/24), then that seems to be the fundamental issue to solve, no?

What can I change to get my client to be able to ping (and route via) the VPN server at 10.8.0.1?

Traffic

db533 wroteI have a FreeNAS server (10.45.213.20/24) that is running OpenVPN in a jail (10.45.213.53/24)

Please undo this and remove the jail for testing.

Also, please post the client route table before and after connecting. (You previously posted client then server)

Also, make sure your firewalls are not interfering.

db533

The jail is a virtual FreeBSD server. That's how you create isolated environments on a FreeNAS server. That's the host on which OpenVPN has been installed. Can't (and shouldn't) be removed.

The 2 routing tables are both from the client. The first was before the client connected, the second after.

I'll check that firewall was not reenabled when I tested. That I don't remember.

Traffic

db533 wroteThe 2 routing tables are both from the client. The first was before the client connected, the second after.

I assure you .. they are not .. check again.

EG:
Server (Note the gateway/interface):

db533 wrote

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      10.45.213.5    10.45.213.103     25

Client (Note the gateway/interface):

db533 wrote

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      172.20.10.1     172.20.10.14     25

db533

Both routes were from my client, but it looks like the wifi adapeter had connected to the LAN in the second route print.

Disabled the Windows firewall on domain, public and private profiles on the client.

ipconfig /all on client before connecting to the VPN. Here the client has connected via wireless to a Personal hotspot from my iPad, thus is not connected to my LAN:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Dainis-laptop
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Peer-Peer
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet 2:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-EB-80-ED-3C
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 17:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter #2
   Physical Address. . . . . . . . . : B0-10-41-A7-83-B7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 16:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft Hosted Network Virtual Adapter #2
   Physical Address. . . . . . . . . : B0-10-41-A7-83-B7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter WiFi:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Realtek RTL8723BE 802.11 b/g/n Wi-Fi Adapter
   Physical Address. . . . . . . . . : B0-10-41-A7-83-B7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::c8fe:63d3:cf1c:52be%14(Preferred) 
   IPv4 Address. . . . . . . . . . . : 172.20.10.14(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.240
   Lease Obtained. . . . . . . . . . : 06 January 2016 22:01:33
   Lease Expires . . . . . . . . . . : 07 January 2016 21:47:10
   Default Gateway . . . . . . . . . : 172.20.10.1
   DHCP Server . . . . . . . . . . . : 172.20.10.1
   DHCPv6 IAID . . . . . . . . . . . : 430968897
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-78-9B-F2-14-58-D0-11-F7-61
   DNS Servers . . . . . . . . . . . : 172.20.10.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : lan
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 14-58-D0-11-F7-61
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:1c69:11a7:53eb:f5f1(Preferred) 
   Link-local IPv6 Address . . . . . : fe80::1c69:11a7:53eb:f5f1%4(Preferred) 
   Default Gateway . . . . . . . . . : ::
   DHCPv6 IAID . . . . . . . . . . . : 452984832
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-78-9B-F2-14-58-D0-11-F7-61
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{C0B03AA0-46D5-4A65-84CF-C71F1140F654}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #5
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

route print before connecting to the VPN:

===========================================================================
Interface List
 29...00 ff eb 80 ed 3c ......TAP-Windows Adapter V9
 16...b0 10 41 a7 83 b7 ......Microsoft Wi-Fi Direct Virtual Adapter #2
 15...b0 10 41 a7 83 b7 ......Microsoft Hosted Network Virtual Adapter #2
 14...b0 10 41 a7 83 b7 ......Realtek RTL8723BE 802.11 b/g/n Wi-Fi Adapter
  3...14 58 d0 11 f7 61 ......Realtek PCIe GBE Family Controller
  1...........................Software Loopback Interface 1
  4...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 21...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      172.20.10.1     172.20.10.14     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      172.20.10.0  255.255.255.240         On-link      172.20.10.14    281
     172.20.10.14  255.255.255.255         On-link      172.20.10.14    281
     172.20.10.15  255.255.255.255         On-link      172.20.10.14    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      172.20.10.14    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      172.20.10.14    281
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  4    306 ::/0                     On-link
  1    306 ::1/128                  On-link
  4    306 2001::/32                On-link
  4    306 2001:0:5ef5:79fb:1c69:11a7:53eb:f5f1/128
                                    On-link
 14    281 fe80::/64                On-link
  4    306 fe80::/64                On-link
  4    306 fe80::1c69:11a7:53eb:f5f1/128
                                    On-link
 14    281 fe80::c8fe:63d3:cf1c:52be/128
                                    On-link
  1    306 ff00::/8                 On-link
 14    281 ff00::/8                 On-link
  4    306 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

ip config /all once connected to the VPN:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Dainis-laptop
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Peer-Peer
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet 2:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-EB-80-ED-3C
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::1df4:da4a:251f:8be1%29(Preferred) 
   IPv4 Address. . . . . . . . . . . : 10.8.0.4(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : 06 January 2016 22:13:18
   Lease Expires . . . . . . . . . . : 05 January 2017 22:13:16
   Default Gateway . . . . . . . . . : 
   DHCP Server . . . . . . . . . . . : 10.8.0.254
   DHCPv6 IAID . . . . . . . . . . . : 755040235
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-78-9B-F2-14-58-D0-11-F7-61
   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Wireless LAN adapter Local Area Connection* 17:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter #2
   Physical Address. . . . . . . . . : B0-10-41-A7-83-B7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 16:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft Hosted Network Virtual Adapter #2
   Physical Address. . . . . . . . . : B0-10-41-A7-83-B7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter WiFi:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Realtek RTL8723BE 802.11 b/g/n Wi-Fi Adapter
   Physical Address. . . . . . . . . : B0-10-41-A7-83-B7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::c8fe:63d3:cf1c:52be%14(Preferred) 
   IPv4 Address. . . . . . . . . . . : 172.20.10.14(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.240
   Lease Obtained. . . . . . . . . . : 06 January 2016 22:01:33
   Lease Expires . . . . . . . . . . : 07 January 2016 21:47:10
   Default Gateway . . . . . . . . . : 172.20.10.1
   DHCP Server . . . . . . . . . . . : 172.20.10.1
   DHCPv6 IAID . . . . . . . . . . . : 430968897
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-78-9B-F2-14-58-D0-11-F7-61
   DNS Servers . . . . . . . . . . . : 172.20.10.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : lan
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 14-58-D0-11-F7-61
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:1c69:11a7:53eb:f5f1(Preferred) 
   Link-local IPv6 Address . . . . . : fe80::1c69:11a7:53eb:f5f1%4(Preferred) 
   Default Gateway . . . . . . . . . : ::
   DHCPv6 IAID . . . . . . . . . . . : 452984832
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-78-9B-F2-14-58-D0-11-F7-61
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{C0B03AA0-46D5-4A65-84CF-C71F1140F654}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #5
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{EB80ED3C-8FF8-41D0-B522-AED729C55E6C}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

route print on client once connected. I have highlighted in red the additional routes that have been created once the VPN connection has been established:

===========================================================================
Interface List
 29...00 ff eb 80 ed 3c ......TAP-Windows Adapter V9
 16...b0 10 41 a7 83 b7 ......Microsoft Wi-Fi Direct Virtual Adapter #2
 15...b0 10 41 a7 83 b7 ......Microsoft Hosted Network Virtual Adapter #2
 14...b0 10 41 a7 83 b7 ......Realtek RTL8723BE 802.11 b/g/n Wi-Fi Adapter
  3...14 58 d0 11 f7 61 ......Realtek PCIe GBE Family Controller
  1...........................Software Loopback Interface 1
  4...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 21...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
 28...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      172.20.10.1     172.20.10.14     25
[color=#FF0000]         10.8.0.0    255.255.255.0         On-link          10.8.0.4    276
         10.8.0.4  255.255.255.255         On-link          10.8.0.4    276
       10.8.0.255  255.255.255.255         On-link          10.8.0.4    276
      10.45.213.0    255.255.255.0         10.8.0.1         10.8.0.4     20
[/color]        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      172.20.10.0  255.255.255.240         On-link      172.20.10.14    281
     172.20.10.14  255.255.255.255         On-link      172.20.10.14    281
     172.20.10.15  255.255.255.255         On-link      172.20.10.14    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link          10.8.0.4    276
        224.0.0.0        240.0.0.0         On-link      172.20.10.14    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
[color=#FF0000]  255.255.255.255  255.255.255.255         On-link          10.8.0.4    276[/color]
  255.255.255.255  255.255.255.255         On-link      172.20.10.14    281
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  4    306 ::/0                     On-link
  1    306 ::1/128                  On-link
  4    306 2001::/32                On-link
  4    306 2001:0:5ef5:79fb:1c69:11a7:53eb:f5f1/128
                                    On-link
[color=#FF0000] 29    276 fe80::/64                On-link
[/color] 14    281 fe80::/64                On-link
  4    306 fe80::/64                On-link
  4    306 fe80::1c69:11a7:53eb:f5f1/128
                                    On-link
[color=#FF0000] 29    276 fe80::1df4:da4a:251f:8be1/128[/color]
                                    On-link
 14    281 fe80::c8fe:63d3:cf1c:52be/128
                                    On-link
  1    306 ff00::/8                 On-link
[color=#FF0000] 29    276 ff00::/8                 On-link[/color]
 14    281 ff00::/8                 On-link
  4    306 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

What I had not noticed before was that IPv6 routes have also been added. Could this be where the issue lies?

Traffic

db533 wroteBoth routes were from my client, but it looks like the wifi adapeter had connected to the LAN in the second route print

Use either wireless or ethernet and completely disable the other .. otherwise openvpn will behave as you are seeing.

db533

I had no wired connection during these last tests or the original tests. I was explaining that my original route print for when the client had connected was not taken at the correct time, confirming your assertion that it was flawed.