Problem with pushing all traffic through

crs

I have set up server on one VM and client on another. I can establish connection and ping eachother but i cant push all my traffic. My browser still use normal internet. On server i changed

ip_forward to 1
DEFAULT_FORWARD_POLICY to ACCEPT

in /etc/ufw/before.rules i added

# START OPENVPN RULES
# NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
# Allow traffic from OpenVPN client to eth0
-A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE
COMMIT
# END OPENVPN RULES

my server conf

dev tun
proto udp
port 17003
user nobody
group nogroup
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
client-cert-not-required
plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so login

and client

client
dev tun
remote 10.80.x.x
proto udp
port 17003
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
verb 3

Is there anything else i should do to make this work?

Traffic

Please set --verb 4 in your server config and then post your server and client logs.
(Remove any personal information)

crs

server

Mon Feb 8 11:39:54 2016 us=486325 Current Parameter Settings:
Mon Feb 8 11:39:54 2016 us=486403 config = 'openvpn.conf'
Mon Feb 8 11:39:54 2016 us=486413 mode = 1
Mon Feb 8 11:39:54 2016 us=486420 persist_config = DISABLED
Mon Feb 8 11:39:54 2016 us=486426 persist_mode = 1
Mon Feb 8 11:39:54 2016 us=486433 show_ciphers = DISABLED
Mon Feb 8 11:39:54 2016 us=486439 show_digests = DISABLED
Mon Feb 8 11:39:54 2016 us=486446 show_engines = DISABLED
Mon Feb 8 11:39:54 2016 us=486452 genkey = DISABLED
Mon Feb 8 11:39:54 2016 us=486458 key_pass_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486465 show_tls_ciphers = DISABLED
Mon Feb 8 11:39:54 2016 us=486472 Connection profiles [default]:
Mon Feb 8 11:39:54 2016 us=486479 proto = udp
Mon Feb 8 11:39:54 2016 us=486486 local = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486492 local_port = 17003
Mon Feb 8 11:39:54 2016 us=486499 remote = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486506 remote_port = 17003
Mon Feb 8 11:39:54 2016 us=486512 remote_float = DISABLED
Mon Feb 8 11:39:54 2016 us=486519 bind_defined = DISABLED
Mon Feb 8 11:39:54 2016 us=486525 bind_local = ENABLED
Mon Feb 8 11:39:54 2016 us=486532 connect_retry_seconds = 5
Mon Feb 8 11:39:54 2016 us=486538 connect_timeout = 10
Mon Feb 8 11:39:54 2016 us=486545 connect_retry_max = 0
Mon Feb 8 11:39:54 2016 us=486552 socks_proxy_server = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486559 socks_proxy_port = 0
Mon Feb 8 11:39:54 2016 us=486568 socks_proxy_retry = DISABLED
Mon Feb 8 11:39:54 2016 us=486578 tun_mtu = 1500
Mon Feb 8 11:39:54 2016 us=486588 tun_mtu_defined = ENABLED
Mon Feb 8 11:39:54 2016 us=486599 link_mtu = 1500
Mon Feb 8 11:39:54 2016 us=486611 link_mtu_defined = DISABLED
Mon Feb 8 11:39:54 2016 us=486618 tun_mtu_extra = 0
Mon Feb 8 11:39:54 2016 us=486624 tun_mtu_extra_defined = DISABLED
Mon Feb 8 11:39:54 2016 us=486631 mtu_discover_type = -1
Mon Feb 8 11:39:54 2016 us=486637 fragment = 0
Mon Feb 8 11:39:54 2016 us=486645 mssfix = 1450
Mon Feb 8 11:39:54 2016 us=486659 explicit_exit_notification = 0
Mon Feb 8 11:39:54 2016 us=486676 Connection profiles END
Mon Feb 8 11:39:54 2016 us=486686 remote_random = DISABLED
Mon Feb 8 11:39:54 2016 us=486733 ipchange = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486746 dev = 'tun'
Mon Feb 8 11:39:54 2016 us=486755 dev_type = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486766 dev_node = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486773 lladdr = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486780 topology = 1
Mon Feb 8 11:39:54 2016 us=486786 tun_ipv6 = DISABLED
Mon Feb 8 11:39:54 2016 us=486793 ifconfig_local = '10.8.0.1'
Mon Feb 8 11:39:54 2016 us=486800 ifconfig_remote_netmask = '10.8.0.2'
Mon Feb 8 11:39:54 2016 us=486806 ifconfig_noexec = DISABLED
Mon Feb 8 11:39:54 2016 us=486813 ifconfig_nowarn = DISABLED
Mon Feb 8 11:39:54 2016 us=486819 ifconfig_ipv6_local = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486826 ifconfig_ipv6_netbits = 0
Mon Feb 8 11:39:54 2016 us=486832 ifconfig_ipv6_remote = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486839 shaper = 0
Mon Feb 8 11:39:54 2016 us=486845 mtu_test = 0
Mon Feb 8 11:39:54 2016 us=486852 mlock = DISABLED
Mon Feb 8 11:39:54 2016 us=486858 keepalive_ping = 10
Mon Feb 8 11:39:54 2016 us=486865 keepalive_timeout = 120
Mon Feb 8 11:39:54 2016 us=486871 inactivity_timeout = 0
Mon Feb 8 11:39:54 2016 us=486878 ping_send_timeout = 10
Mon Feb 8 11:39:54 2016 us=486884 ping_rec_timeout = 240
Mon Feb 8 11:39:54 2016 us=486891 ping_rec_timeout_action = 2
Mon Feb 8 11:39:54 2016 us=486901 ping_timer_remote = DISABLED
Mon Feb 8 11:39:54 2016 us=486908 remap_sigusr1 = 0
Mon Feb 8 11:39:54 2016 us=486915 persist_tun = ENABLED
Mon Feb 8 11:39:54 2016 us=486921 persist_local_ip = DISABLED
Mon Feb 8 11:39:54 2016 us=486928 persist_remote_ip = DISABLED
Mon Feb 8 11:39:54 2016 us=486935 persist_key = ENABLED
Mon Feb 8 11:39:54 2016 us=486941 passtos = DISABLED
Mon Feb 8 11:39:54 2016 us=486948 resolve_retry_seconds = 1000000000
Mon Feb 8 11:39:54 2016 us=486960 username = 'nobody'
Mon Feb 8 11:39:54 2016 us=486967 groupname = 'nogroup'
Mon Feb 8 11:39:54 2016 us=486973 chroot_dir = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486980 cd_dir = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486986 writepid = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486993 up_script = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=486999 down_script = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487006 down_pre = DISABLED
Mon Feb 8 11:39:54 2016 us=487012 up_restart = DISABLED
Mon Feb 8 11:39:54 2016 us=487019 up_delay = DISABLED
Mon Feb 8 11:39:54 2016 us=487025 daemon = DISABLED
Mon Feb 8 11:39:54 2016 us=487032 inetd = 0
Mon Feb 8 11:39:54 2016 us=487038 log = ENABLED
Mon Feb 8 11:39:54 2016 us=487045 suppress_timestamps = DISABLED
Mon Feb 8 11:39:54 2016 us=487051 nice = 0
Mon Feb 8 11:39:54 2016 us=487058 verbosity = 4
Mon Feb 8 11:39:54 2016 us=487064 mute = 0
Mon Feb 8 11:39:54 2016 us=487071 gremlin = 0
Mon Feb 8 11:39:54 2016 us=487077 status_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487084 status_file_version = 1
Mon Feb 8 11:39:54 2016 us=487090 status_file_update_freq = 60
Mon Feb 8 11:39:54 2016 us=487097 occ = ENABLED
Mon Feb 8 11:39:54 2016 us=487103 rcvbuf = 65536
Mon Feb 8 11:39:54 2016 us=487110 sndbuf = 65536
Mon Feb 8 11:39:54 2016 us=487116 mark = 0
Mon Feb 8 11:39:54 2016 us=487123 sockflags = 0
Mon Feb 8 11:39:54 2016 us=487129 fast_io = DISABLED
Mon Feb 8 11:39:54 2016 us=487136 lzo = 7
Mon Feb 8 11:39:54 2016 us=487142 route_script = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487149 route_default_gateway = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487155 route_default_metric = 0
Mon Feb 8 11:39:54 2016 us=487162 route_noexec = DISABLED
Mon Feb 8 11:39:54 2016 us=487168 route_delay = 0
Mon Feb 8 11:39:54 2016 us=487175 route_delay_window = 30
Mon Feb 8 11:39:54 2016 us=487182 route_delay_defined = DISABLED
Mon Feb 8 11:39:54 2016 us=487188 route_nopull = DISABLED
Mon Feb 8 11:39:54 2016 us=487195 route_gateway_via_dhcp = DISABLED
Mon Feb 8 11:39:54 2016 us=487201 max_routes = 100
Mon Feb 8 11:39:54 2016 us=487207 allow_pull_fqdn = DISABLED
Mon Feb 8 11:39:54 2016 us=487214 route 10.8.0.0/255.255.255.0/nil/nil
Mon Feb 8 11:39:54 2016 us=487221 management_addr = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487228 management_port = 0
Mon Feb 8 11:39:54 2016 us=487234 management_user_pass = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487241 management_log_history_cache = 250
Mon Feb 8 11:39:54 2016 us=487247 management_echo_buffer_size = 100
Mon Feb 8 11:39:54 2016 us=487254 management_write_peer_info_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487260 management_client_user = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487267 management_client_group = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487273 management_flags = 0
Mon Feb 8 11:39:54 2016 us=487285 plugin[0] /usr/lib/openvpn/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn/openvpn-plugin-auth-pam.so] [login]'
Mon Feb 8 11:39:54 2016 us=487293 shared_secret_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487300 key_direction = 0
Mon Feb 8 11:39:54 2016 us=487307 ciphername_defined = ENABLED
Mon Feb 8 11:39:54 2016 us=487313 ciphername = 'BF-CBC'
Mon Feb 8 11:39:54 2016 us=487320 authname_defined = ENABLED
Mon Feb 8 11:39:54 2016 us=487326 authname = 'SHA1'
Mon Feb 8 11:39:54 2016 us=487332 prng_hash = 'SHA1'
Mon Feb 8 11:39:54 2016 us=487339 prng_nonce_secret_len = 16
Mon Feb 8 11:39:54 2016 us=487345 keysize = 0
Mon Feb 8 11:39:54 2016 us=487352 engine = DISABLED
Mon Feb 8 11:39:54 2016 us=487358 replay = ENABLED
Mon Feb 8 11:39:54 2016 us=487365 mute_replay_warnings = DISABLED
Mon Feb 8 11:39:54 2016 us=487371 replay_window = 64
Mon Feb 8 11:39:54 2016 us=487378 replay_time = 15
Mon Feb 8 11:39:54 2016 us=487384 packet_id_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487391 use_iv = ENABLED
Mon Feb 8 11:39:54 2016 us=487397 test_crypto = DISABLED
Mon Feb 8 11:39:54 2016 us=487403 tls_server = ENABLED
Mon Feb 8 11:39:54 2016 us=487415 tls_client = DISABLED
Mon Feb 8 11:39:54 2016 us=487422 key_method = 2
Mon Feb 8 11:39:54 2016 us=487428 ca_file = 'ca.crt'
Mon Feb 8 11:39:54 2016 us=487434 ca_path = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487441 dh_file = 'dh2048.pem'
Mon Feb 8 11:39:54 2016 us=487447 cert_file = 'server.crt'
Mon Feb 8 11:39:54 2016 us=487454 priv_key_file = 'server.key'
Mon Feb 8 11:39:54 2016 us=487461 pkcs12_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487467 cipher_list = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487474 tls_verify = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487480 tls_export_cert = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487486 verify_x509_type = 0
Mon Feb 8 11:39:54 2016 us=487493 verify_x509_name = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487499 crl_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487506 ns_cert_type = 0
Mon Feb 8 11:39:54 2016 us=487513 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487519 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487526 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487532 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487538 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487545 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487551 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487557 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487564 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487570 remote_cert_ku = 0
Mon Feb 8 11:39:54 2016 us=487577 remote_cert_ku[i] = 0
Mon Feb 8 11:39:54 2016 us=487583 remote_cert_ku[i] = 0
Mon Feb 8 11:39:54 2016 us=487589 remote_cert_ku[i] = 0
Mon Feb 8 11:39:54 2016 us=487596 remote_cert_ku[i] = 0
Mon Feb 8 11:39:54 2016 us=487602 remote_cert_ku[i] = 0
Mon Feb 8 11:39:54 2016 us=487608 remote_cert_ku[i] = 0
Mon Feb 8 11:39:54 2016 us=487615 remote_cert_eku = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487622 ssl_flags = 1
Mon Feb 8 11:39:54 2016 us=487628 tls_timeout = 2
Mon Feb 8 11:39:54 2016 us=487635 renegotiate_bytes = 0
Mon Feb 8 11:39:54 2016 us=487641 renegotiate_packets = 0
Mon Feb 8 11:39:54 2016 us=487648 renegotiate_seconds = 3600
Mon Feb 8 11:39:54 2016 us=487654 handshake_window = 60
Mon Feb 8 11:39:54 2016 us=487661 transition_window = 3600
Mon Feb 8 11:39:54 2016 us=487667 single_session = DISABLED
Mon Feb 8 11:39:54 2016 us=487706 push_peer_info = DISABLED
Mon Feb 8 11:39:54 2016 us=487716 tls_exit = DISABLED
Mon Feb 8 11:39:54 2016 us=487722 tls_auth_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=487729 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487736 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487742 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487748 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487755 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487761 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487768 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487774 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487781 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487787 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487794 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487800 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487807 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487813 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487819 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487826 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:39:54 2016 us=487833 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487840 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487846 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487853 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487863 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487870 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487877 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487883 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487890 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487896 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487902 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487909 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487915 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487922 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487928 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487935 pkcs11_private_mode = 00000000
Mon Feb 8 11:39:54 2016 us=487941 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487948 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487954 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487960 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487967 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487973 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487980 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487986 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487992 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=487999 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=488005 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=488011 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=488018 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=488024 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=488030 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=488037 pkcs11_cert_private = DISABLED
Mon Feb 8 11:39:54 2016 us=488043 pkcs11_pin_cache_period = -1
Mon Feb 8 11:39:54 2016 us=488050 pkcs11_id = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488056 pkcs11_id_management = DISABLED
Mon Feb 8 11:39:54 2016 us=488064 server_network = 10.8.0.0
Mon Feb 8 11:39:54 2016 us=488071 server_netmask = 255.255.255.0
Mon Feb 8 11:39:54 2016 us=488085 server_network_ipv6 = ::
Mon Feb 8 11:39:54 2016 us=488092 server_netbits_ipv6 = 0
Mon Feb 8 11:39:54 2016 us=488100 server_bridge_ip = 0.0.0.0
Mon Feb 8 11:39:54 2016 us=488107 server_bridge_netmask = 0.0.0.0
Mon Feb 8 11:39:54 2016 us=488114 server_bridge_pool_start = 0.0.0.0
Mon Feb 8 11:39:54 2016 us=488121 server_bridge_pool_end = 0.0.0.0
Mon Feb 8 11:39:54 2016 us=488128 push_entry = 'redirect-gateway def1 bypass-dhcp'
Mon Feb 8 11:39:54 2016 us=488134 push_entry = 'dhcp-option DNS 8.8.8.8'
Mon Feb 8 11:39:54 2016 us=488141 push_entry = 'route 10.8.0.1'
Mon Feb 8 11:39:54 2016 us=488147 push_entry = 'topology net30'
Mon Feb 8 11:39:54 2016 us=488154 push_entry = 'ping 10'
Mon Feb 8 11:39:54 2016 us=488160 push_entry = 'ping-restart 120'
Mon Feb 8 11:39:54 2016 us=488167 ifconfig_pool_defined = ENABLED
Mon Feb 8 11:39:54 2016 us=488174 ifconfig_pool_start = 10.8.0.4
Mon Feb 8 11:39:54 2016 us=488181 ifconfig_pool_end = 10.8.0.251
Mon Feb 8 11:39:54 2016 us=488188 ifconfig_pool_netmask = 0.0.0.0
Mon Feb 8 11:39:54 2016 us=488195 ifconfig_pool_persist_filename = 'ipp.txt'
Mon Feb 8 11:39:54 2016 us=488201 ifconfig_pool_persist_refresh_freq = 600
Mon Feb 8 11:39:54 2016 us=488208 ifconfig_ipv6_pool_defined = DISABLED
Mon Feb 8 11:39:54 2016 us=488215 ifconfig_ipv6_pool_base = ::
Mon Feb 8 11:39:54 2016 us=488222 ifconfig_ipv6_pool_netbits = 0
Mon Feb 8 11:39:54 2016 us=488228 n_bcast_buf = 256
Mon Feb 8 11:39:54 2016 us=488234 tcp_queue_limit = 64
Mon Feb 8 11:39:54 2016 us=488241 real_hash_size = 256
Mon Feb 8 11:39:54 2016 us=488247 virtual_hash_size = 256
Mon Feb 8 11:39:54 2016 us=488254 client_connect_script = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488260 learn_address_script = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488270 client_disconnect_script = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488277 client_config_dir = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488283 ccd_exclusive = DISABLED
Mon Feb 8 11:39:54 2016 us=488290 tmp_dir = '/tmp'
Mon Feb 8 11:39:54 2016 us=488296 push_ifconfig_defined = DISABLED
Mon Feb 8 11:39:54 2016 us=488303 push_ifconfig_local = 0.0.0.0
Mon Feb 8 11:39:54 2016 us=488310 push_ifconfig_remote_netmask = 0.0.0.0
Mon Feb 8 11:39:54 2016 us=488317 push_ifconfig_ipv6_defined = DISABLED
Mon Feb 8 11:39:54 2016 us=488324 push_ifconfig_ipv6_local = ::/0
Mon Feb 8 11:39:54 2016 us=488331 push_ifconfig_ipv6_remote = ::
Mon Feb 8 11:39:54 2016 us=488337 enable_c2c = DISABLED
Mon Feb 8 11:39:54 2016 us=488343 duplicate_cn = DISABLED
Mon Feb 8 11:39:54 2016 us=488350 cf_max = 0
Mon Feb 8 11:39:54 2016 us=488356 cf_per = 0
Mon Feb 8 11:39:54 2016 us=488362 max_clients = 1024
Mon Feb 8 11:39:54 2016 us=488369 max_routes_per_client = 256
Mon Feb 8 11:39:54 2016 us=488375 auth_user_pass_verify_script = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488381 auth_user_pass_verify_script_via_file = DISABLED
Mon Feb 8 11:39:54 2016 us=488388 port_share_host = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488394 port_share_port = 0
Mon Feb 8 11:39:54 2016 us=488401 client = DISABLED
Mon Feb 8 11:39:54 2016 us=488407 pull = DISABLED
Mon Feb 8 11:39:54 2016 us=488414 auth_user_pass_file = '[UNDEF]'
Mon Feb 8 11:39:54 2016 us=488422 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
AUTH-PAM: BACKGROUND: INIT service='login'
Mon Feb 8 11:39:54 2016 us=488940 PLUGIN_INIT: POST /usr/lib/openvpn/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn/openvpn-plugin-auth-pam.so] [login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Mon Feb 8 11:39:54 2016 us=508625 Diffie-Hellman initialized with 2048 bit key
Mon Feb 8 11:39:54 2016 us=508693 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Mon Feb 8 11:39:54 2016 us=509128 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Feb 8 11:39:54 2016 us=509186 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Feb 8 11:39:54 2016 us=509331 ROUTE_GATEWAY 10.80.0.254/255.255.255.0 IFACE=eth0 HWADDR=x:x:x:x:x:
Mon Feb 8 11:39:54 2016 us=528011 TUN/TAP device tun0 opened
Mon Feb 8 11:39:54 2016 us=528051 TUN/TAP TX queue length set to 100
Mon Feb 8 11:39:54 2016 us=528069 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Feb 8 11:39:54 2016 us=528088 /sbin/ip link set dev tun0 up mtu 1500
Mon Feb 8 11:39:54 2016 us=539542 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Feb 8 11:39:54 2016 us=550275 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Feb 8 11:39:54 2016 us=556349 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Feb 8 11:39:54 2016 us=556728 GID set to nogroup
Mon Feb 8 11:39:54 2016 us=556743 UID set to nobody
Mon Feb 8 11:39:54 2016 us=556754 UDPv4 link local (bound): [undef]
Mon Feb 8 11:39:54 2016 us=556760 UDPv4 link remote: [undef]
Mon Feb 8 11:39:54 2016 us=556773 MULTI: multi_init called, r=256 v=256
Mon Feb 8 11:39:54 2016 us=556801 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Feb 8 11:39:54 2016 us=556819 ifconfig_pool_read(), in='msi,10.8.0.4', TODO: IPv6
Mon Feb 8 11:39:54 2016 us=556829 succeeded -> ifconfig_pool_set()
Mon Feb 8 11:39:54 2016 us=556837 IFCONFIG POOL LIST
Mon Feb 8 11:39:54 2016 us=556844 msi,10.8.0.4
Mon Feb 8 11:39:54 2016 us=556864 Initialization Sequence Completed
Mon Feb 8 11:42:22 2016 us=246838 MULTI: multi_create_instance called
Mon Feb 8 11:42:22 2016 us=246959 10.80.0.225:51965 Re-using SSL/TLS context
Mon Feb 8 11:42:22 2016 us=247008 10.80.0.225:51965 LZO compression initialized
Mon Feb 8 11:42:22 2016 us=247136 10.80.0.225:51965 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Feb 8 11:42:22 2016 us=247153 10.80.0.225:51965 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Feb 8 11:42:22 2016 us=247195 10.80.0.225:51965 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Feb 8 11:42:22 2016 us=247203 10.80.0.225:51965 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Feb 8 11:42:22 2016 us=247219 10.80.0.225:51965 Local Options hash (VER=V4): '530fdded'
Mon Feb 8 11:42:22 2016 us=247230 10.80.0.225:51965 Expected Remote Options hash (VER=V4): '41690919'
Mon Feb 8 11:42:22 2016 us=247259 10.80.0.225:51965 TLS: Initial packet from [AF_INET]10.80.0.225:51965, sid=57d85b48 60697563
AUTH-PAM: BACKGROUND: received command code: 0
AUTH-PAM: BACKGROUND: USER: km
AUTH-PAM: BACKGROUND: my_conv[0] query='Password: ' style=1
Mon Feb 8 11:42:22 2016 us=325107 10.80.0.225:51965 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Mon Feb 8 11:42:22 2016 us=325186 10.80.0.225:51965 TLS: Username/Password authentication succeeded for username 'km'
Mon Feb 8 11:42:22 2016 us=325325 10.80.0.225:51965 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Feb 8 11:42:22 2016 us=325335 10.80.0.225:51965 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 8 11:42:22 2016 us=325377 10.80.0.225:51965 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Feb 8 11:42:22 2016 us=325385 10.80.0.225:51965 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 8 11:42:22 2016 us=327813 10.80.0.225:51965 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA
Mon Feb 8 11:42:22 2016 us=327885 10.80.0.225:51965 [] Peer Connection Initiated with [AF_INET]10.80.0.225:51965
Mon Feb 8 11:42:22 2016 us=327910 10.80.0.225:51965 MULTI_sva: pool returned IPv4=10.8.0.10, IPv6=(Not enabled)
Mon Feb 8 11:42:22 2016 us=327934 10.80.0.225:51965 MULTI: Learn: 10.8.0.10 -> 10.80.0.225:51965
Mon Feb 8 11:42:22 2016 us=327941 10.80.0.225:51965 MULTI: primary virtual IP for 10.80.0.225:51965: 10.8.0.10
Mon Feb 8 11:42:24 2016 us=467652 10.80.0.225:51965 PUSH: Received control message: 'PUSH_REQUEST'
Mon Feb 8 11:42:24 2016 us=467720 10.80.0.225:51965 send_push_reply(): safe_cap=940
Mon Feb 8 11:42:24 2016 us=467757 10.80.0.225:51965 SENT CONTROL [UNDEF]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9' (status=1)

and client

Mon Feb 8 11:53:41 2016 us=566206 Current Parameter Settings:
Mon Feb 8 11:53:41 2016 us=566276 config = 'client.conf'
Mon Feb 8 11:53:41 2016 us=566285 mode = 0
Mon Feb 8 11:53:41 2016 us=566292 persist_config = DISABLED
Mon Feb 8 11:53:41 2016 us=566299 persist_mode = 1
Mon Feb 8 11:53:41 2016 us=566305 show_ciphers = DISABLED
Mon Feb 8 11:53:41 2016 us=566312 show_digests = DISABLED
Mon Feb 8 11:53:41 2016 us=566318 show_engines = DISABLED
Mon Feb 8 11:53:41 2016 us=566325 genkey = DISABLED
Mon Feb 8 11:53:41 2016 us=566332 key_pass_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=566342 show_tls_ciphers = DISABLED
Mon Feb 8 11:53:41 2016 us=566351 Connection profiles [default]:
Mon Feb 8 11:53:41 2016 us=566362 proto = udp
Mon Feb 8 11:53:41 2016 us=566371 local = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=566430 local_port = 0
Mon Feb 8 11:53:41 2016 us=566437 remote = '10.80.0.209'
Mon Feb 8 11:53:41 2016 us=566444 remote_port = 17003
Mon Feb 8 11:53:41 2016 us=566451 remote_float = DISABLED
Mon Feb 8 11:53:41 2016 us=566458 bind_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=566464 bind_local = DISABLED
Mon Feb 8 11:53:41 2016 us=566471 connect_retry_seconds = 5
Mon Feb 8 11:53:41 2016 us=566478 connect_timeout = 10
Mon Feb 8 11:53:41 2016 us=566486 connect_retry_max = 0
Mon Feb 8 11:53:41 2016 us=566498 socks_proxy_server = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=566506 socks_proxy_port = 0
Mon Feb 8 11:53:41 2016 us=566529 socks_proxy_retry = DISABLED
Mon Feb 8 11:53:41 2016 us=566540 tun_mtu = 1500
Mon Feb 8 11:53:41 2016 us=566549 tun_mtu_defined = ENABLED
Mon Feb 8 11:53:41 2016 us=566559 link_mtu = 1500
Mon Feb 8 11:53:41 2016 us=566599 link_mtu_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=566618 tun_mtu_extra = 0
Mon Feb 8 11:53:41 2016 us=566629 tun_mtu_extra_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=567415 mtu_discover_type = -1
Mon Feb 8 11:53:41 2016 us=567435 fragment = 0
Mon Feb 8 11:53:41 2016 us=567442 mssfix = 1450
Mon Feb 8 11:53:41 2016 us=567449 explicit_exit_notification = 0
Mon Feb 8 11:53:41 2016 us=567456 Connection profiles END
Mon Feb 8 11:53:41 2016 us=567462 remote_random = DISABLED
Mon Feb 8 11:53:41 2016 us=567468 ipchange = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567475 dev = 'tun'
Mon Feb 8 11:53:41 2016 us=567481 dev_type = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567487 dev_node = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567494 lladdr = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567500 topology = 1
Mon Feb 8 11:53:41 2016 us=567506 tun_ipv6 = DISABLED
Mon Feb 8 11:53:41 2016 us=567513 ifconfig_local = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567519 ifconfig_remote_netmask = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567525 ifconfig_noexec = DISABLED
Mon Feb 8 11:53:41 2016 us=567531 ifconfig_nowarn = DISABLED
Mon Feb 8 11:53:41 2016 us=567538 ifconfig_ipv6_local = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567544 ifconfig_ipv6_netbits = 0
Mon Feb 8 11:53:41 2016 us=567550 ifconfig_ipv6_remote = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567557 shaper = 0
Mon Feb 8 11:53:41 2016 us=567563 mtu_test = 0
Mon Feb 8 11:53:41 2016 us=567569 mlock = DISABLED
Mon Feb 8 11:53:41 2016 us=567576 keepalive_ping = 0
Mon Feb 8 11:53:41 2016 us=567582 keepalive_timeout = 0
Mon Feb 8 11:53:41 2016 us=567588 inactivity_timeout = 0
Mon Feb 8 11:53:41 2016 us=567594 ping_send_timeout = 0
Mon Feb 8 11:53:41 2016 us=567601 ping_rec_timeout = 0
Mon Feb 8 11:53:41 2016 us=567607 ping_rec_timeout_action = 0
Mon Feb 8 11:53:41 2016 us=567613 ping_timer_remote = DISABLED
Mon Feb 8 11:53:41 2016 us=567620 remap_sigusr1 = 0
Mon Feb 8 11:53:41 2016 us=567648 persist_tun = ENABLED
Mon Feb 8 11:53:41 2016 us=567656 persist_local_ip = DISABLED
Mon Feb 8 11:53:41 2016 us=567663 persist_remote_ip = DISABLED
Mon Feb 8 11:53:41 2016 us=567669 persist_key = ENABLED
Mon Feb 8 11:53:41 2016 us=567675 passtos = DISABLED
Mon Feb 8 11:53:41 2016 us=567682 resolve_retry_seconds = 1000000000
Mon Feb 8 11:53:41 2016 us=567688 username = 'nobody'
Mon Feb 8 11:53:41 2016 us=567694 groupname = 'nogroup'
Mon Feb 8 11:53:41 2016 us=567701 chroot_dir = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567707 cd_dir = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567713 writepid = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567719 up_script = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567726 down_script = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567732 down_pre = DISABLED
Mon Feb 8 11:53:41 2016 us=567738 up_restart = DISABLED
Mon Feb 8 11:53:41 2016 us=567745 up_delay = DISABLED
Mon Feb 8 11:53:41 2016 us=567751 daemon = DISABLED
Mon Feb 8 11:53:41 2016 us=567757 inetd = 0
Mon Feb 8 11:53:41 2016 us=567764 log = ENABLED
Mon Feb 8 11:53:41 2016 us=567770 suppress_timestamps = DISABLED
Mon Feb 8 11:53:41 2016 us=567776 nice = 0
Mon Feb 8 11:53:41 2016 us=567783 verbosity = 4
Mon Feb 8 11:53:41 2016 us=567789 mute = 0
Mon Feb 8 11:53:41 2016 us=567795 gremlin = 0
Mon Feb 8 11:53:41 2016 us=567802 status_file = '/var/log/openvpn/status.log'
Mon Feb 8 11:53:41 2016 us=567808 status_file_version = 1
Mon Feb 8 11:53:41 2016 us=567814 status_file_update_freq = 60
Mon Feb 8 11:53:41 2016 us=567824 occ = ENABLED
Mon Feb 8 11:53:41 2016 us=567831 rcvbuf = 65536
Mon Feb 8 11:53:41 2016 us=567838 sndbuf = 65536
Mon Feb 8 11:53:41 2016 us=567844 mark = 0
Mon Feb 8 11:53:41 2016 us=567851 sockflags = 0
Mon Feb 8 11:53:41 2016 us=567862 fast_io = DISABLED
Mon Feb 8 11:53:41 2016 us=567869 lzo = 7
Mon Feb 8 11:53:41 2016 us=567875 route_script = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567881 route_default_gateway = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567888 route_default_metric = 0
Mon Feb 8 11:53:41 2016 us=567894 route_noexec = DISABLED
Mon Feb 8 11:53:41 2016 us=567901 route_delay = 0
Mon Feb 8 11:53:41 2016 us=567907 route_delay_window = 30
Mon Feb 8 11:53:41 2016 us=567914 route_delay_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=567920 route_nopull = DISABLED
Mon Feb 8 11:53:41 2016 us=567926 route_gateway_via_dhcp = DISABLED
Mon Feb 8 11:53:41 2016 us=567932 max_routes = 100
Mon Feb 8 11:53:41 2016 us=567939 allow_pull_fqdn = DISABLED
Mon Feb 8 11:53:41 2016 us=567945 management_addr = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567952 management_port = 0
Mon Feb 8 11:53:41 2016 us=567958 management_user_pass = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567964 management_log_history_cache = 250
Mon Feb 8 11:53:41 2016 us=567971 management_echo_buffer_size = 100
Mon Feb 8 11:53:41 2016 us=567977 management_write_peer_info_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567983 management_client_user = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567990 management_client_group = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=567996 management_flags = 0
Mon Feb 8 11:53:41 2016 us=568002 shared_secret_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568009 key_direction = 0
Mon Feb 8 11:53:41 2016 us=568015 ciphername_defined = ENABLED
Mon Feb 8 11:53:41 2016 us=568021 ciphername = 'BF-CBC'
Mon Feb 8 11:53:41 2016 us=568028 authname_defined = ENABLED
Mon Feb 8 11:53:41 2016 us=568034 authname = 'SHA1'
Mon Feb 8 11:53:41 2016 us=568040 prng_hash = 'SHA1'
Mon Feb 8 11:53:41 2016 us=568046 prng_nonce_secret_len = 16
Mon Feb 8 11:53:41 2016 us=568053 keysize = 0
Mon Feb 8 11:53:41 2016 us=568059 engine = DISABLED
Mon Feb 8 11:53:41 2016 us=568065 replay = ENABLED
Mon Feb 8 11:53:41 2016 us=568071 mute_replay_warnings = DISABLED
Mon Feb 8 11:53:41 2016 us=568078 replay_window = 64
Mon Feb 8 11:53:41 2016 us=568084 replay_time = 15
Mon Feb 8 11:53:41 2016 us=568090 packet_id_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568097 use_iv = ENABLED
Mon Feb 8 11:53:41 2016 us=568103 test_crypto = DISABLED
Mon Feb 8 11:53:41 2016 us=568109 tls_server = DISABLED
Mon Feb 8 11:53:41 2016 us=568115 tls_client = ENABLED
Mon Feb 8 11:53:41 2016 us=568121 key_method = 2
Mon Feb 8 11:53:41 2016 us=568128 ca_file = 'ca.crt'
Mon Feb 8 11:53:41 2016 us=568134 ca_path = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568140 dh_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568146 cert_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568152 priv_key_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568159 pkcs12_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568165 cipher_list = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568171 tls_verify = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568177 tls_export_cert = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568183 verify_x509_type = 0
Mon Feb 8 11:53:41 2016 us=568190 verify_x509_name = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568196 crl_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568202 ns_cert_type = 0
Mon Feb 8 11:53:41 2016 us=568209 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568215 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568221 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568227 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568233 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568239 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568246 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568252 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568258 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568264 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568270 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568276 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568282 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568292 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568299 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568305 remote_cert_ku[i] = 0
Mon Feb 8 11:53:41 2016 us=568311 remote_cert_eku = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568318 ssl_flags = 0
Mon Feb 8 11:53:41 2016 us=568324 tls_timeout = 2
Mon Feb 8 11:53:41 2016 us=568330 renegotiate_bytes = 0
Mon Feb 8 11:53:41 2016 us=568336 renegotiate_packets = 0
Mon Feb 8 11:53:41 2016 us=568342 renegotiate_seconds = 3600
Mon Feb 8 11:53:41 2016 us=568349 handshake_window = 60
Mon Feb 8 11:53:41 2016 us=568355 transition_window = 3600
Mon Feb 8 11:53:41 2016 us=568361 single_session = DISABLED
Mon Feb 8 11:53:41 2016 us=568367 push_peer_info = DISABLED
Mon Feb 8 11:53:41 2016 us=568374 tls_exit = DISABLED
Mon Feb 8 11:53:41 2016 us=568380 tls_auth_file = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568386 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568392 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568398 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568404 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568410 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568417 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568423 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568429 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568435 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568441 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568447 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568453 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568459 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568465 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568472 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568478 pkcs11_protected_authentication = DISABLED
Mon Feb 8 11:53:41 2016 us=568484 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568491 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568497 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568503 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568509 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568516 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568522 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568528 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568535 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568541 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568547 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568554 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568560 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568566 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568573 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568579 pkcs11_private_mode = 00000000
Mon Feb 8 11:53:41 2016 us=568585 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568591 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568597 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568678 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568686 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568692 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568698 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568704 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568710 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568717 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568723 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568729 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568744 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568751 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568757 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568763 pkcs11_cert_private = DISABLED
Mon Feb 8 11:53:41 2016 us=568769 pkcs11_pin_cache_period = -1
Mon Feb 8 11:53:41 2016 us=568775 pkcs11_id = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568782 pkcs11_id_management = DISABLED
Mon Feb 8 11:53:41 2016 us=568794 server_network = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568801 server_netmask = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568818 server_network_ipv6 = ::
Mon Feb 8 11:53:41 2016 us=568825 server_netbits_ipv6 = 0
Mon Feb 8 11:53:41 2016 us=568832 server_bridge_ip = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568839 server_bridge_netmask = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568846 server_bridge_pool_start = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568853 server_bridge_pool_end = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568859 ifconfig_pool_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=568867 ifconfig_pool_start = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568873 ifconfig_pool_end = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568880 ifconfig_pool_netmask = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568887 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568893 ifconfig_pool_persist_refresh_freq = 600
Mon Feb 8 11:53:41 2016 us=568900 ifconfig_ipv6_pool_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=568906 ifconfig_ipv6_pool_base = ::
Mon Feb 8 11:53:41 2016 us=568913 ifconfig_ipv6_pool_netbits = 0
Mon Feb 8 11:53:41 2016 us=568919 n_bcast_buf = 256
Mon Feb 8 11:53:41 2016 us=568925 tcp_queue_limit = 64
Mon Feb 8 11:53:41 2016 us=568931 real_hash_size = 256
Mon Feb 8 11:53:41 2016 us=568937 virtual_hash_size = 256
Mon Feb 8 11:53:41 2016 us=568944 client_connect_script = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568950 learn_address_script = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568956 client_disconnect_script = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568963 client_config_dir = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=568969 ccd_exclusive = DISABLED
Mon Feb 8 11:53:41 2016 us=568975 tmp_dir = '/tmp'
Mon Feb 8 11:53:41 2016 us=568981 push_ifconfig_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=568988 push_ifconfig_local = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=568995 push_ifconfig_remote_netmask = 0.0.0.0
Mon Feb 8 11:53:41 2016 us=569001 push_ifconfig_ipv6_defined = DISABLED
Mon Feb 8 11:53:41 2016 us=569008 push_ifconfig_ipv6_local = ::/0
Mon Feb 8 11:53:41 2016 us=569015 push_ifconfig_ipv6_remote = ::
Mon Feb 8 11:53:41 2016 us=569021 enable_c2c = DISABLED
Mon Feb 8 11:53:41 2016 us=569028 duplicate_cn = DISABLED
Mon Feb 8 11:53:41 2016 us=569034 cf_max = 0
Mon Feb 8 11:53:41 2016 us=569040 cf_per = 0
Mon Feb 8 11:53:41 2016 us=569046 max_clients = 1024
Mon Feb 8 11:53:41 2016 us=569053 max_routes_per_client = 256
Mon Feb 8 11:53:41 2016 us=569059 auth_user_pass_verify_script = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=569066 auth_user_pass_verify_script_via_file = DISABLED
Mon Feb 8 11:53:41 2016 us=569072 port_share_host = '[UNDEF]'
Mon Feb 8 11:53:41 2016 us=569079 port_share_port = 0
Mon Feb 8 11:53:41 2016 us=569085 client = ENABLED
Mon Feb 8 11:53:41 2016 us=569091 pull = ENABLED
Mon Feb 8 11:53:41 2016 us=569098 auth_user_pass_file = 'stdin'
Mon Feb 8 11:53:41 2016 us=569105 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
Mon Feb 8 11:53:46 2016 us=115166 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Feb 8 11:53:46 2016 us=115609 LZO compression initialized
Mon Feb 8 11:53:46 2016 us=115669 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Feb 8 11:53:46 2016 us=115704 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Feb 8 11:53:46 2016 us=115760 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Feb 8 11:53:46 2016 us=115807 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Feb 8 11:53:46 2016 us=115855 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Feb 8 11:53:46 2016 us=115923 Local Options hash (VER=V4): '41690919'
Mon Feb 8 11:53:46 2016 us=115935 Expected Remote Options hash (VER=V4): '530fdded'
Mon Feb 8 11:53:46 2016 us=116459 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Mon Feb 8 11:53:46 2016 us=116480 UDPv4 link local: [undef]
Mon Feb 8 11:53:46 2016 us=116494 UDPv4 link remote: [AF_INET]10.80.0.209:17003
Mon Feb 8 11:53:46 2016 us=117833 TLS: Initial packet from [AF_INET]10.80.0.209:17003, sid=e724d022 44c58eed
Mon Feb 8 11:53:46 2016 us=118010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Feb 8 11:53:46 2016 us=142368 VERIFY OK: depth=1, C=PL, ST=MA, L=WWA, O=BBC, OU=Server, CN=BBC CA, name=Server, emailAddress=firmawp.pl
Mon Feb 8 11:53:46 2016 us=142600 VERIFY OK: depth=0, C=PL, ST=MA, L=WWA, O=BBC, OU=Server, CN=server, name=Server, emailAddress=firmawp.pl
Mon Feb 8 11:53:46 2016 us=199551 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Feb 8 11:53:46 2016 us=199637 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 8 11:53:46 2016 us=199697 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Feb 8 11:53:46 2016 us=199716 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Feb 8 11:53:46 2016 us=200071 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Feb 8 11:53:46 2016 us=200111 [server] Peer Connection Initiated with [AF_INET]10.80.0.209:17003
Mon Feb 8 11:53:48 2016 us=630951 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Feb 8 11:53:48 2016 us=632406 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13'
Mon Feb 8 11:53:48 2016 us=632508 OPTIONS IMPORT: timers and/or timeouts modified
Mon Feb 8 11:53:48 2016 us=632526 OPTIONS IMPORT: --ifconfig/up options modified
Mon Feb 8 11:53:48 2016 us=632535 OPTIONS IMPORT: route options modified
Mon Feb 8 11:53:48 2016 us=632543 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Feb 8 11:53:48 2016 us=632739 ROUTE_GATEWAY 10.80.0.254/255.255.255.0 IFACE=eth0 HWADDR=x:x:x:x:x
Mon Feb 8 11:53:48 2016 us=632958 TUN/TAP device tun0 opened
Mon Feb 8 11:53:48 2016 us=632976 TUN/TAP TX queue length set to 100
Mon Feb 8 11:53:48 2016 us=632989 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Feb 8 11:53:48 2016 us=633004 /sbin/ip link set dev tun0 up mtu 1500
Mon Feb 8 11:53:48 2016 us=641096 /sbin/ip addr add dev tun0 local 10.8.0.14 peer 10.8.0.13
Mon Feb 8 11:53:48 2016 us=648285 /sbin/ip route add 10.80.0.209/32 via 10.80.0.254
RTNETLINK answers: File exists
Mon Feb 8 11:53:48 2016 us=654415 ERROR: Linux route add command failed: external program exited with error status: 2
Mon Feb 8 11:53:48 2016 us=654464 /sbin/ip route add 0.0.0.0/1 via 10.8.0.13
Mon Feb 8 11:53:48 2016 us=661753 /sbin/ip route add 128.0.0.0/1 via 10.8.0.13
Mon Feb 8 11:53:48 2016 us=669391 /sbin/ip route add 10.8.0.1/32 via 10.8.0.13
Mon Feb 8 11:53:48 2016 us=676216 GID set to nogroup
Mon Feb 8 11:53:48 2016 us=676264 UID set to nobody
Mon Feb 8 11:53:48 2016 us=676272 Initialization Sequence Completed

Traffic

crs wroteI have set up server on one VM and client on another. I can establish connection and ping eachother but i cant push all my traffic. My browser still use normal internet

I presume all these VM's are one PC ?

crs

Yes they are, should this be a problem?

Traffic

Your configs are fairly standard and your logs appear to show a successful connection.

crs wroteMy browser still use normal internet

As all these VMs are on one PC what internet do you expect them to use ?

For a simple test, on your VM client while connected to your VM server, try tracing the route to google ..

crs

I have 2 VM's with bridged connection to my PC. When i set up without push command in server config my browser use bridged connection to connect to internet. When i use push i cant browse internet. My browser keep loading pages but time out and i cant ping anything outside my VPN.

Your configs are fairly standard and your logs appear to show a successful connection

are they? For me its look like there are some errors with route tables.

Mon Feb 8 11:53:48 2016 us=632739 ROUTE_GATEWAY 10.80.0.254/255.255.255.0 IFACE=eth0 HWADDR=x:x:x:x:x
Mon Feb 8 11:53:48 2016 us=632958 TUN/TAP device tun0 opened
Mon Feb 8 11:53:48 2016 us=632976 TUN/TAP TX queue length set to 100
Mon Feb 8 11:53:48 2016 us=632989 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Feb 8 11:53:48 2016 us=633004 /sbin/ip link set dev tun0 up mtu 1500
Mon Feb 8 11:53:48 2016 us=641096 /sbin/ip addr add dev tun0 local 10.8.0.14 peer 10.8.0.13
Mon Feb 8 11:53:48 2016 us=648285 /sbin/ip route add 10.80.0.209/32 via 10.80.0.254
RTNETLINK answers: File exists
Mon Feb 8 11:53:48 2016 us=654415 ERROR: Linux route add command failed: external program exited with error status: 2
Mon Feb 8 11:53:48 2016 us=654464 /sbin/ip route add 0.0.0.0/1 via 10.8.0.13
Mon Feb 8 11:53:48 2016 us=661753 /sbin/ip route add 128.0.0.0/1 via 10.8.0.13
Mon Feb 8 11:53:48 2016 us=669391 /sbin/ip route add 10.8.0.1/32 via 10.8.0.13
Mon Feb 8 11:53:48 2016 us=676216 GID set to nogroup
Mon Feb 8 11:53:48 2016 us=676264 UID set to nobody
Mon Feb 8 11:53:48 2016 us=676272 Initialization Sequence Completed

Traffic

crs wroteFor me its look like there are some errors with route tables.

Quote:

Mon Feb 8 11:53:48 2016 us=648285 /sbin/ip route add 10.80.0.209/32 via 10.80.0.254
RTNETLINK answers: File exists
Mon Feb 8 11:53:48 2016 us=654415 ERROR: Linux route add command failed: external program exited with error status: 2

This is caused by your client and server being on the same LAN. You can probably resolve this by using this in your server config:

push "redirect-gateway def1 bypass-dhcp autolocal"

crs wroteWhen i set up without push command in server config my browser use bridged connection to connect to internet. When i use push i cant browse internet

Have you enabled IP_Forwarding on your server ?

crs

push "redirect-gateway def1 bypass-dhcp autolocal"

with this i still get the same error

Have you enabled IP_Forwarding on your server ?

yes i did

Traffic

Please post ifconfig of server.

crs

as0t0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.27.224.1 P-t-P:172.27.224.1 Mask:255.255.248.0
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:200
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

eth0 Link encap:Ethernet HWaddr 08:00:27:dc:f6:74
inet addr:10.80.0.232 Bcast:10.80.0.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fedc:f674/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12022 errors:0 dropped:0 overruns:0 frame:0
TX packets:5956 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:10916963 (10.9 MB) TX bytes:867966 (867.9 KB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:864 errors:0 dropped:0 overruns:0 frame:0
TX packets:864 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:88804 (88.8 KB) TX bytes:88804 (88.8 KB)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:102 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:6816 (6.8 KB) TX bytes:0 (0.0 B)

ifconfig of server when running vpn

Traffic

crs wroteas0t0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.27.224.1 P-t-P:172.27.224.1 Mask:255.255.248.0

I presume this a connection to an OpenVPN access Server ?

crs

Yes but i want to use my tun connection. When i start server and client i can see in console that they are connected by they dont show up in access server

crs

I couldn't solve this so i set up everything on clean machines just like in my first post and then added "local" in server config. On clean machines it works fine. I dont know what was wrong. Probably routing table was set up badly.