Connect clients with static IP address with each others

thanhpd

Hello everyone, I want to ask about setup openvpn so that clients with static assigned ip from server be able to communicate with other clients. I can do that when each client getting dynamic IP, however I have no clue about this problem. Performing a Google search just return either how to setup client with static IP or how to config clients to communicate with each other, not both.

I've enabled client-to-client as well as client config directory, but I can't ping both server and other clients.

server.conf

port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
mode server
tls-server
topology subnet
ifconfig 10.8.0.1 10.8.0.255
ifconfig-pool 10.8.0.100 10.8.0.199
push "redirect-gateway def1 bypass-dhcp"
push "route-gateway 10.8.0.1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem
client-config-dir ccd

One example of client file in ccd, the other is just the same, with different ip but still satisfied /30 subnet mask as in How-to guide

ipconfig-push 10.8.0.5 10.8.0.6

I am grateful to have your guidance. Please let me know if you need more info, thank you.

Traffic

thanhpd wrotetopology subnet
ifconfig 10.8.0.1 10.8.0.255

You need a subnet mask .. e.g 255.255.255.0

Or even better:
See --server in The Manual v23x

thanhpd

Thank you, I've modified the server.conf as below:

local 128.199.109.48
port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
mode server
tls-server
topology subnet
push "topology [topology]"

if dev tap OR (dev tun AND topology == subnet):
   ifconfig 10.8.0.1 255.255.255.0
   if !nopool:
     ifconfig-pool 10.8.0.100 10.8.0.254 255.255.255.0
   push "route-gateway 10.8.0.1"
   if route-gateway unset:
     route-gateway 10.8.0.2

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 2
crl-verify crl.pem
client-config-dir ccd

However, it keeps saying that it can't recognize the if clause at the bolded line.

Mar 13 09:01:01 VPN-Server systemd: Started Session 5 of user root.
Mar 13 09:01:01 VPN-Server systemd: Starting Session 5 of user root.
Mar 13 09:01:03 VPN-Server systemd: Starting OpenVPN Robust And Highly Flexible Tunneling Application On server...
[b]Mar 13 09:01:03 VPN-Server openvpn[2133]: Options error: Unrecognized option or missing parameter(s) in server.conf:16: if (2.3.10)[/b]
Mar 13 09:01:03 VPN-Server openvpn[2133]: Use --help for more information.
Mar 13 09:01:03 VPN-Server systemd: openvpn@server.service: control process exited, code=exited status=1
Mar 13 09:01:03 VPN-Server systemd: Failed to start OpenVPN Robust And Highly Flexible Tunneling Application On server.
Mar 13 09:01:03 VPN-Server systemd: Unit openvpn@server.service entered failed state.
Mar 13 09:01:03 VPN-Server systemd: openvpn@server.service failed.

Is there anything wrong that I've missed?

Traffic

thanhpd wrote

push "topology [topology]"

if dev tap OR (dev tun AND topology == subnet):
   ifconfig 10.8.0.1 255.255.255.0
   if !nopool:
     ifconfig-pool 10.8.0.100 10.8.0.254 255.255.255.0
   push "route-gateway 10.8.0.1"
   if route-gateway unset:
     route-gateway 10.8.0.2

Don't just blindly copy and paste text to your config .. Read the HOWTO ..

HOWTO: For OpenVPN Community Edition

Tip:

server 10.8.0.0 255.255.255.0

:roll:

thanhpd

Thank you, I thought that I misunderstand the expand server command part previously, to implement it I just need to enter just one command, not the whole code snippet. Is the snippet below okay? I keep getting "waiting for tun/tap interface to come up"

port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
topology subnet
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 2
crl-verify crl.pem
client-config-dir ccd

Traffic

thanhpd wroteverb 2

Set to verb 4 and then post your log file. (Remove your private data)

thanhpd

Here is the log:

Mar 13 10:53:49 VPN-Server systemd: Starting OpenVPN Robust And Highly Flexible Tunneling Application On server...
Mar 13 10:53:49 VPN-Server openvpn[3628]: Current Parameter Settings:
Mar 13 10:53:49 VPN-Server openvpn[3628]:  config = 'server.conf'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mode = 1
Mar 13 10:53:49 VPN-Server openvpn[3628]:  persist_config = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  persist_mode = 1
Mar 13 10:53:49 VPN-Server openvpn[3628]:  show_ciphers = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  show_digests = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  show_engines = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  genkey = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  key_pass_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  show_tls_ciphers = DISABLED
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <warn>  (tun0): failed to disable userspace IPv6LL address handling
Mar 13 10:53:49 VPN-Server dbus[444]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service'
Mar 13 10:53:49 VPN-Server systemd: Starting Network Manager Script Dispatcher Service...
Mar 13 10:53:49 VPN-Server dbus-daemon: dbus[444]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service'
Mar 13 10:53:49 VPN-Server openvpn[3628]: Connection profiles [default]:
Mar 13 10:53:49 VPN-Server openvpn[3628]:  proto = udp
Mar 13 10:53:49 VPN-Server openvpn[3628]:  local = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  local_port = 1194
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_port = 1194
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_float = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  bind_defined = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  bind_local = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  connect_retry_seconds = 5
Mar 13 10:53:49 VPN-Server openvpn[3628]:  connect_timeout = 10
Mar 13 10:53:49 VPN-Server openvpn[3628]:  connect_retry_max = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  socks_proxy_server = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  socks_proxy_port = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  socks_proxy_retry = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tun_mtu = 1500
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tun_mtu_defined = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  link_mtu = 1500
Mar 13 10:53:49 VPN-Server openvpn[3628]:  link_mtu_defined = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tun_mtu_extra = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tun_mtu_extra_defined = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mtu_discover_type = -1
Mar 13 10:53:49 VPN-Server openvpn[3628]:  fragment = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mssfix = 1450
Mar 13 10:53:49 VPN-Server openvpn[3628]:  explicit_exit_notification = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]: Connection profiles END
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_random = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ipchange = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  dev = 'tun'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  dev_type = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  dev_node = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  lladdr = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  topology = 3
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tun_ipv6 = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_local = '10.8.0.1'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_remote_netmask = '255.255.255.0'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_noexec = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_nowarn = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_ipv6_local = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_ipv6_netbits = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_ipv6_remote = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  shaper = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mtu_test = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mlock = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  keepalive_ping = 10
Mar 13 10:53:49 VPN-Server openvpn[3628]:  keepalive_timeout = 120
Mar 13 10:53:49 VPN-Server openvpn[3628]:  inactivity_timeout = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ping_send_timeout = 10
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ping_rec_timeout = 240
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ping_rec_timeout_action = 2
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ping_timer_remote = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remap_sigusr1 = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  persist_tun = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  persist_local_ip = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  persist_remote_ip = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  persist_key = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  passtos = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  resolve_retry_seconds = 1000000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  username = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  groupname = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  chroot_dir = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  cd_dir = '/etc/openvpn/'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  writepid = '/var/run/openvpn/server.pid'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  up_script = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  down_script = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  down_pre = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  up_restart = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  up_delay = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  daemon = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  inetd = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  log = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  suppress_timestamps = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  nice = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  verbosity = 4
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mute = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  gremlin = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  status_file = 'openvpn-status.log'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  status_file_version = 1
Mar 13 10:53:49 VPN-Server openvpn[3628]:  status_file_update_freq = 60
Mar 13 10:53:49 VPN-Server openvpn[3628]:  occ = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  rcvbuf = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  sndbuf = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mark = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  sockflags = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  fast_io = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  lzo = 7
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_script = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_default_gateway = '10.8.0.2'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_default_metric = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_noexec = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_delay = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_delay_window = 30
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_delay_defined = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_nopull = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  route_gateway_via_dhcp = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  max_routes = 100
Mar 13 10:53:49 VPN-Server openvpn[3628]:  allow_pull_fqdn = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_addr = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_port = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_user_pass = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_log_history_cache = 250
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_echo_buffer_size = 100
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_write_peer_info_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_client_user = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_client_group = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  management_flags = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  shared_secret_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  key_direction = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ciphername_defined = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ciphername = 'BF-CBC'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  authname_defined = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  authname = 'SHA1'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  prng_hash = 'SHA1'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  prng_nonce_secret_len = 16
Mar 13 10:53:49 VPN-Server openvpn[3628]:  keysize = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  engine = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  replay = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  mute_replay_warnings = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  replay_window = 64
Mar 13 10:53:49 VPN-Server openvpn[3628]:  replay_time = 15
Mar 13 10:53:49 VPN-Server openvpn[3628]:  packet_id_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  use_iv = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  test_crypto = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tls_server = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tls_client = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  key_method = 2
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ca_file = 'ca.crt'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ca_path = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  dh_file = 'dh.pem'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  cert_file = 'server.crt'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  extra_certs_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  priv_key_file = 'server.key'
Mar 13 10:53:49 VPN-Server dbus-daemon: dbus[444]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs12_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  cipher_list = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tls_verify = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tls_export_cert = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  verify_x509_type = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  verify_x509_name = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  crl_file = 'crl.pem'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ns_cert_type = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_ku[i] = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  remote_cert_eku = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ssl_flags = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tls_timeout = 2
Mar 13 10:53:49 VPN-Server openvpn[3628]:  renegotiate_bytes = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  renegotiate_packets = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  renegotiate_seconds = 3600
Mar 13 10:53:49 VPN-Server openvpn[3628]:  handshake_window = 60
Mar 13 10:53:49 VPN-Server openvpn[3628]:  transition_window = 3600
Mar 13 10:53:49 VPN-Server openvpn[3628]:  single_session = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_peer_info = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tls_exit = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tls_auth_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_protected_authentication = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_private_mode = 00000000
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_cert_private = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_pin_cache_period = -1
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_id = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pkcs11_id_management = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_network = 10.8.0.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_netmask = 255.255.255.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_network_ipv6 = ::
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_netbits_ipv6 = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_bridge_ip = 0.0.0.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_bridge_netmask = 0.0.0.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_bridge_pool_start = 0.0.0.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  server_bridge_pool_end = 0.0.0.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_entry = 'redirect-gateway def1 bypass-dhcp'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_entry = 'dhcp-option DNS 8.8.8.8'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_entry = 'dhcp-option DNS 8.8.4.4'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_entry = 'route-gateway 10.8.0.1'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_entry = 'topology subnet'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_entry = 'ping 10'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_entry = 'ping-restart 120'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_pool_defined = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_pool_start = 10.8.0.2
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_pool_end = 10.8.0.253
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_pool_netmask = 255.255.255.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_pool_persist_filename = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_pool_persist_refresh_freq = 600
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_ipv6_pool_defined = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_ipv6_pool_base = ::
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ifconfig_ipv6_pool_netbits = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  n_bcast_buf = 256
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tcp_queue_limit = 64
Mar 13 10:53:49 VPN-Server openvpn[3628]:  real_hash_size = 256
Mar 13 10:53:49 VPN-Server openvpn[3628]:  virtual_hash_size = 256
Mar 13 10:53:49 VPN-Server openvpn[3628]:  client_connect_script = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  learn_address_script = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  client_disconnect_script = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  client_config_dir = 'ccd'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  ccd_exclusive = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  tmp_dir = '/tmp'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_ifconfig_defined = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_ifconfig_local = 0.0.0.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_ifconfig_remote_netmask = 0.0.0.0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_ifconfig_ipv6_defined = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_ifconfig_ipv6_local = ::/0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  push_ifconfig_ipv6_remote = ::
Mar 13 10:53:49 VPN-Server openvpn[3628]:  enable_c2c = ENABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  duplicate_cn = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  cf_max = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  cf_per = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  max_clients = 1024
Mar 13 10:53:49 VPN-Server openvpn[3628]:  max_routes_per_client = 256
Mar 13 10:53:49 VPN-Server openvpn[3628]:  auth_user_pass_verify_script = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  auth_user_pass_verify_script_via_file = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  port_share_host = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]:  port_share_port = 0
Mar 13 10:53:49 VPN-Server openvpn[3628]:  client = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  pull = DISABLED
Mar 13 10:53:49 VPN-Server openvpn[3628]:  auth_user_pass_file = '[UNDEF]'
Mar 13 10:53:49 VPN-Server openvpn[3628]: OpenVPN 2.3.10 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan  4 2016
Mar 13 10:53:49 VPN-Server openvpn[3628]: library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Mar 13 10:53:49 VPN-Server dbus[444]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher'
Mar 13 10:53:49 VPN-Server systemd: PID file /var/run/openvpn/server.pid not readable (yet?) after start.
Mar 13 10:53:49 VPN-Server systemd: Started Network Manager Script Dispatcher Service.
Mar 13 10:53:49 VPN-Server nm-dispatcher: Dispatching action 'down' for tun0
Mar 13 10:53:49 VPN-Server openvpn[3633]: Diffie-Hellman initialized with 2048 bit key
Mar 13 10:53:49 VPN-Server openvpn[3633]: TLS-Auth MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mar 13 10:53:49 VPN-Server openvpn[3633]: Socket Buffers: R=[212992->212992] S=[212992->212992]
Mar 13 10:53:49 VPN-Server openvpn[3633]: TUN/TAP device tun0 opened
Mar 13 10:53:49 VPN-Server openvpn[3633]: TUN/TAP TX queue length set to 100
Mar 13 10:53:49 VPN-Server openvpn[3633]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mar 13 10:53:49 VPN-Server openvpn[3633]: /usr/sbin/ip link set dev tun0 up mtu 1500
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): new Tun device (carrier: OFF, driver: 'tun', ifindex: 20)
Mar 13 10:53:49 VPN-Server systemd: Started OpenVPN Robust And Highly Flexible Tunneling Application On server.
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): link connected
Mar 13 10:53:49 VPN-Server openvpn[3633]: /usr/sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  keyfile: add connection in-memory (40c10c0f-006f-4d20-8523-5e58ff1f5f72,"tun0")
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: unmanaged -> unavailable (reason 'connection-assumed') [10 20 41]
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: unavailable -> disconnected (reason 'connection-assumed') [20 30 41]
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): Activation: starting connection 'tun0' (40c10c0f-006f-4d20-8523-5e58ff1f5f72)
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: disconnected -> prepare (reason 'none') [30 40 0]
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: prepare -> config (reason 'none') [40 50 0]
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: config -> ip-config (reason 'none') [50 70 0]
Mar 13 10:53:49 VPN-Server openvpn[3633]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mar 13 10:53:49 VPN-Server openvpn[3633]: UDPv4 link local (bound): [undef]
Mar 13 10:53:49 VPN-Server openvpn[3633]: UDPv4 link remote: [undef]
Mar 13 10:53:49 VPN-Server openvpn[3633]: MULTI: multi_init called, r=256 v=256
Mar 13 10:53:49 VPN-Server openvpn[3633]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Mar 13 10:53:49 VPN-Server openvpn[3633]: Initialization Sequence Completed
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: ip-config -> ip-check (reason 'none') [70 80 0]
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: ip-check -> secondaries (reason 'none') [80 90 0]
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): device state change: secondaries -> activated (reason 'none') [90 100 0]
Mar 13 10:53:49 VPN-Server NetworkManager[443]: <info>  (tun0): Activation: successful, device activated.
Mar 13 10:53:49 VPN-Server nm-dispatcher: Dispatching action 'up' for tun0
Mar 13 10:53:49 VPN-Server systemd-logind: Removed session 19.
Mar 13 10:53:53 VPN-Server dhclient[3596]: DHCPDISCOVER on eth1 to 255.255.255.255 port 67 interval 20 (xid=0x42e5a0d8)
Mar 13 10:53:53 VPN-Server openvpn[3633]: MULTI: multi_create_instance called
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 Re-using SSL/TLS context
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 LZO compression initialized
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 Local Options hash (VER=V4): '530fdded'
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 Expected Remote Options hash (VER=V4): '41690919'
Mar 13 10:53:53 VPN-Server openvpn[3633]: 42.113.168.117:57442 TLS: Initial packet from [AF_INET]42.113.168.117:57442, sid=bae95fb8 165b9834
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 CRL CHECK OK: CN=ChangeMe
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 VERIFY OK: depth=1, CN=ChangeMe
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 CRL CHECK OK: CN=client1
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 VERIFY OK: depth=0, CN=client1
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mar 13 10:53:54 VPN-Server openvpn[3633]: 42.113.168.117:57442 [client1] Peer Connection Initiated with [AF_INET]42.113.168.117:57442
Mar 13 10:53:54 VPN-Server openvpn[3633]: client1/42.113.168.117:57442 OPTIONS IMPORT: reading client specific options from: ccd/client1
Mar 13 10:53:54 VPN-Server openvpn[3633]: client1/42.113.168.117:57442 MULTI: Learn: 10.8.0.9 -> client1/42.113.168.117:57442
Mar 13 10:53:54 VPN-Server openvpn[3633]: client1/42.113.168.117:57442 MULTI: primary virtual IP for client1/42.113.168.117:57442: 10.8.0.9
Mar 13 10:53:56 VPN-Server openvpn[3633]: client1/42.113.168.117:57442 PUSH: Received control message: 'PUSH_REQUEST'
Mar 13 10:53:56 VPN-Server openvpn[3633]: client1/42.113.168.117:57442 send_push_reply(): safe_cap=940
Mar 13 10:53:56 VPN-Server openvpn[3633]: client1/42.113.168.117:57442 SENT CONTROL [client1]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.9 10.8.0.10' (status=1)
Mar 13 10:53:56 VPN-Server openvpn[3633]: client1/42.113.168.117:57442 MULTI: bad source address from client [::], packet dropped