I've an issue with my configuration
I've 2 Openvpn instances with 1 externe IP and 1 external alias IP (IP failover). VPS Ovh.
Distribution : Linux Debian 8.0 (64bits)
External IP : Located in France
Alias IP : located in Spain
Depending on how I declare to alias IP in /etc/network/interfaces, i managed to connect only In france or only in Spain.
I want to switch between the both vpn when I want without modifications in interfaces file.
Only In France with this configuration :
auto eth0
iface eth0 inet static
address 92.222.64.220
netmask 255.255.255.255
post-up /sbin/ifconfig eth0:0 164.132.121.73 netmask 255.255.255.255 broadcast 164.132.121.73
post-down /sbin/ifconfig eth0:0 down
post-up /sbin/ip route add 92.222.64.1 dev eth0
post-up /sbin/ip route add default via 92.222.64.1
pre-down /sbin/ip route del default via 92.222.64.1
pre-down /sbin/ip route del 92.222.64.1 dev eth0
dns-nameserver 213.186.33.99
dns-search ovh.net
Only In Spain with configuration :
auto eth0
iface eth0 inet static
address 92.222.64.220
netmask 255.255.255.255
post-up /sbin/ip route add 92.222.64.1 dev eth0
post-up /sbin/ip route add default via 92.222.64.1
pre-down /sbin/ip route del default via 92.222.64.1
pre-down /sbin/ip route del 92.222.64.1 dev eth0
dns-nameserver 213.186.33.99
dns-search ovh.net
auto eth0:0
iface eth0:0 inet static
address 164.132.121.73
netmask 255.255.255.255
broadcast 164.132.121.73
This is my Openvpn Servers configurations:
FRANCE :
port 17633
proto udp
dev tun0
ca /etc/openvpn/server_fr/ca.crt
cert /etc/openvpn/server_fr/srvcert.crt
key /etc/openvpn/server_fr/srvcert.key # This file should be kept secret
dh /etc/openvpn/server_fr/dh2048.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status_fr.log
verb 4
log-append /var/log/openvpn_fr.log
SPAIN :
port 17634
proto udp
dev tun1
ca /etc/openvpn/server_es/ca.crt
cert /etc/openvpn/server_es/srvcert.crt
key /etc/openvpn/server_es/srvcert.key # This file should be kept secret
dh /etc/openvpn/server_es/dh2048.pem
server 10.8.1.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status_es.log
verb 4
log-append /var/log/openvpn_es.log
This is my Openvpn Client configurations:
FRANCE :
client
dev tun0
proto udp
remote 92.222.64.220 17633
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client_fr.crt
key client_fr.key
ns-cert-type server
comp-lzo
verb 4
SPAIN
client
dev tun1
proto udp
remote 164.132.121.73 17634
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client_es.crt
key client_es.key
ns-cert-type server
comp-lzo
verb 4
IPTABLES :
iptables -A INPUT -i eth0 -p udp --dport 17633 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 17634 -j ACCEPT
iptables -A FORWARD -i tun+ -o eth0 -j ACCEPT
iptables -A FORWARD -i eth0 -o tun+ -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 92.222.64.220
iptables -t nat -A POSTROUTING -s 10.8.1.0/24 -o eth0 -j SNAT --to-source 164.132.121.73
LOGS Side Client :
Mon Apr 18 13:06:53 2016 pkcs11_protected_authentication = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_protected_authentication = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_protected_authentication = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_private_mode = 00000000
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_cert_private = DISABLED
Mon Apr 18 13:06:53 2016 pkcs11_pin_cache_period = -1
Mon Apr 18 13:06:53 2016 pkcs11_id = '[UNDEF]'
Mon Apr 18 13:06:53 2016 pkcs11_id_management = DISABLED
Mon Apr 18 13:06:53 2016 server_network = 0.0.0.0
Mon Apr 18 13:06:53 2016 server_netmask = 0.0.0.0
Mon Apr 18 13:06:53 2016 server_network_ipv6 = ::
Mon Apr 18 13:06:53 2016 server_netbits_ipv6 = 0
Mon Apr 18 13:06:53 2016 server_bridge_ip = 0.0.0.0
Mon Apr 18 13:06:53 2016 server_bridge_netmask = 0.0.0.0
Mon Apr 18 13:06:53 2016 server_bridge_pool_start = 0.0.0.0
Mon Apr 18 13:06:53 2016 server_bridge_pool_end = 0.0.0.0
Mon Apr 18 13:06:53 2016 ifconfig_pool_defined = DISABLED
Mon Apr 18 13:06:53 2016 ifconfig_pool_start = 0.0.0.0
Mon Apr 18 13:06:53 2016 ifconfig_pool_end = 0.0.0.0
Mon Apr 18 13:06:53 2016 ifconfig_pool_netmask = 0.0.0.0
Mon Apr 18 13:06:53 2016 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Apr 18 13:06:53 2016 ifconfig_pool_persist_refresh_freq = 600
Mon Apr 18 13:06:53 2016 ifconfig_ipv6_pool_defined = DISABLED
Mon Apr 18 13:06:53 2016 ifconfig_ipv6_pool_base = ::
Mon Apr 18 13:06:53 2016 ifconfig_ipv6_pool_netbits = 0
Mon Apr 18 13:06:53 2016 n_bcast_buf = 256
Mon Apr 18 13:06:53 2016 tcp_queue_limit = 64
Mon Apr 18 13:06:53 2016 real_hash_size = 256
Mon Apr 18 13:06:53 2016 virtual_hash_size = 256
Mon Apr 18 13:06:53 2016 client_connect_script = '[UNDEF]'
Mon Apr 18 13:06:53 2016 learn_address_script = '[UNDEF]'
Mon Apr 18 13:06:53 2016 client_disconnect_script = '[UNDEF]'
Mon Apr 18 13:06:53 2016 client_config_dir = '[UNDEF]'
Mon Apr 18 13:06:53 2016 ccd_exclusive = DISABLED
Mon Apr 18 13:06:53 2016 tmp_dir = 'C:\Users\Enrique\AppData\Local\Temp\'
Mon Apr 18 13:06:53 2016 push_ifconfig_defined = DISABLED
Mon Apr 18 13:06:53 2016 push_ifconfig_local = 0.0.0.0
Mon Apr 18 13:06:53 2016 push_ifconfig_remote_netmask = 0.0.0.0
Mon Apr 18 13:06:53 2016 push_ifconfig_ipv6_defined = DISABLED
Mon Apr 18 13:06:53 2016 push_ifconfig_ipv6_local = ::/0
Mon Apr 18 13:06:53 2016 push_ifconfig_ipv6_remote = ::
Mon Apr 18 13:06:53 2016 enable_c2c = DISABLED
Mon Apr 18 13:06:53 2016 duplicate_cn = DISABLED
Mon Apr 18 13:06:53 2016 cf_max = 0
Mon Apr 18 13:06:53 2016 cf_per = 0
Mon Apr 18 13:06:53 2016 max_clients = 1024
Mon Apr 18 13:06:53 2016 max_routes_per_client = 256
Mon Apr 18 13:06:53 2016 auth_user_pass_verify_script = '[UNDEF]'
Mon Apr 18 13:06:53 2016 auth_user_pass_verify_script_via_file = DISABLED
Mon Apr 18 13:06:53 2016 client = ENABLED
Mon Apr 18 13:06:53 2016 pull = ENABLED
Mon Apr 18 13:06:53 2016 auth_user_pass_file = '[UNDEF]'
Mon Apr 18 13:06:53 2016 show_net_up = DISABLED
Mon Apr 18 13:06:53 2016 route_method = 0
Mon Apr 18 13:06:53 2016 block_outside_dns = DISABLED
Mon Apr 18 13:06:53 2016 ip_win32_defined = DISABLED
Mon Apr 18 13:06:53 2016 ip_win32_type = 3
Mon Apr 18 13:06:53 2016 dhcp_masq_offset = 0
Mon Apr 18 13:06:53 2016 dhcp_lease_time = 31536000
Mon Apr 18 13:06:53 2016 tap_sleep = 0
Mon Apr 18 13:06:53 2016 dhcp_options = DISABLED
Mon Apr 18 13:06:53 2016 dhcp_renew = DISABLED
Mon Apr 18 13:06:53 2016 dhcp_pre_release = DISABLED
Mon Apr 18 13:06:53 2016 dhcp_release = DISABLED
Mon Apr 18 13:06:53 2016 domain = '[UNDEF]'
Mon Apr 18 13:06:53 2016 netbios_scope = '[UNDEF]'
Mon Apr 18 13:06:53 2016 netbios_node_type = 0
Mon Apr 18 13:06:53 2016 disable_nbt = DISABLED
Mon Apr 18 13:06:53 2016 OpenVPN 2.3.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 16 2015
Mon Apr 18 13:06:53 2016 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Mon Apr 18 13:06:53 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Mon Apr 18 13:06:53 2016 Need hold release from management interface, waiting...
Mon Apr 18 13:06:53 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Mon Apr 18 13:06:53 2016 MANAGEMENT: CMD 'state on'
Mon Apr 18 13:06:53 2016 MANAGEMENT: CMD 'log all on'
Mon Apr 18 13:06:54 2016 MANAGEMENT: CMD 'hold off'
Mon Apr 18 13:06:54 2016 MANAGEMENT: CMD 'hold release'
Mon Apr 18 13:06:54 2016 LZO compression initialized
Mon Apr 18 13:06:54 2016 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Apr 18 13:06:54 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Apr 18 13:06:54 2016 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Apr 18 13:06:54 2016 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Apr 18 13:06:54 2016 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Apr 18 13:06:54 2016 Local Options hash (VER=V4): '41690919'
Mon Apr 18 13:06:54 2016 Expected Remote Options hash (VER=V4): '530fdded'
Mon Apr 18 13:06:54 2016 UDPv4 link local: [undef]
Mon Apr 18 13:06:54 2016 UDPv4 link remote: [AF_INET]164.132.121.73:17634
Mon Apr 18 13:06:54 2016 MANAGEMENT: >STATE:1460965014,WAIT,,
LOGS side Servers Configuration Spain not Work
Mon Apr 18 09:36:53 2016 us=385064 Current Parameter Settings:
Mon Apr 18 09:36:53 2016 us=385154 config = '/etc/openvpn/server_es.conf'
Mon Apr 18 09:36:53 2016 us=385166 mode = 1
Mon Apr 18 09:36:53 2016 us=385173 persist_config = DISABLED
Mon Apr 18 09:36:53 2016 us=385180 persist_mode = 1
Mon Apr 18 09:36:53 2016 us=385186 show_ciphers = DISABLED
Mon Apr 18 09:36:53 2016 us=385193 show_digests = DISABLED
Mon Apr 18 09:36:53 2016 us=385199 show_engines = DISABLED
Mon Apr 18 09:36:53 2016 us=385206 genkey = DISABLED
Mon Apr 18 09:36:53 2016 us=385212 key_pass_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385219 show_tls_ciphers = DISABLED
Mon Apr 18 09:36:53 2016 us=385229 Connection profiles [default]:
Mon Apr 18 09:36:53 2016 us=385236 proto = udp
Mon Apr 18 09:36:53 2016 us=385243 local = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385250 local_port = 17634
Mon Apr 18 09:36:53 2016 us=385256 remote = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385263 remote_port = 17634
Mon Apr 18 09:36:53 2016 us=385269 remote_float = DISABLED
Mon Apr 18 09:36:53 2016 us=385275 bind_defined = DISABLED
Mon Apr 18 09:36:53 2016 us=385281 bind_local = ENABLED
Mon Apr 18 09:36:53 2016 us=385288 connect_retry_seconds = 5
Mon Apr 18 09:36:53 2016 us=385294 connect_timeout = 10
Mon Apr 18 09:36:53 2016 us=385300 connect_retry_max = 0
Mon Apr 18 09:36:53 2016 us=385306 socks_proxy_server = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385313 socks_proxy_port = 0
Mon Apr 18 09:36:53 2016 us=385319 socks_proxy_retry = DISABLED
Mon Apr 18 09:36:53 2016 us=385325 tun_mtu = 1500
Mon Apr 18 09:36:53 2016 us=385331 tun_mtu_defined = ENABLED
Mon Apr 18 09:36:53 2016 us=385338 link_mtu = 1500
Mon Apr 18 09:36:53 2016 us=385344 link_mtu_defined = DISABLED
Mon Apr 18 09:36:53 2016 us=385354 tun_mtu_extra = 0
Mon Apr 18 09:36:53 2016 us=385361 tun_mtu_extra_defined = DISABLED
Mon Apr 18 09:36:53 2016 us=385368 mtu_discover_type = -1
Mon Apr 18 09:36:53 2016 us=385374 fragment = 0
Mon Apr 18 09:36:53 2016 us=385380 mssfix = 1450
Mon Apr 18 09:36:53 2016 us=385386 explicit_exit_notification = 0
Mon Apr 18 09:36:53 2016 us=385393 Connection profiles END
Mon Apr 18 09:36:53 2016 us=385399 remote_random = DISABLED
Mon Apr 18 09:36:53 2016 us=385405 ipchange = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385411 dev = 'tun1'
Mon Apr 18 09:36:53 2016 us=385418 dev_type = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385424 dev_node = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385430 lladdr = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385437 topology = 1
Mon Apr 18 09:36:53 2016 us=385443 tun_ipv6 = DISABLED
Mon Apr 18 09:36:53 2016 us=385449 ifconfig_local = '10.8.1.1'
Mon Apr 18 09:36:53 2016 us=385456 ifconfig_remote_netmask = '10.8.1.2'
Mon Apr 18 09:36:53 2016 us=385463 ifconfig_noexec = DISABLED
Mon Apr 18 09:36:53 2016 us=385469 ifconfig_nowarn = DISABLED
Mon Apr 18 09:36:53 2016 us=385475 ifconfig_ipv6_local = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385481 ifconfig_ipv6_netbits = 0
Mon Apr 18 09:36:53 2016 us=385488 ifconfig_ipv6_remote = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385494 shaper = 0
Mon Apr 18 09:36:53 2016 us=385500 mtu_test = 0
Mon Apr 18 09:36:53 2016 us=385506 mlock = DISABLED
Mon Apr 18 09:36:53 2016 us=385512 keepalive_ping = 10
Mon Apr 18 09:36:53 2016 us=385519 keepalive_timeout = 120
Mon Apr 18 09:36:53 2016 us=385525 inactivity_timeout = 0
Mon Apr 18 09:36:53 2016 us=385531 ping_send_timeout = 10
Mon Apr 18 09:36:53 2016 us=385537 ping_rec_timeout = 240
Mon Apr 18 09:36:53 2016 us=385543 ping_rec_timeout_action = 2
Mon Apr 18 09:36:53 2016 us=385549 ping_timer_remote = DISABLED
Mon Apr 18 09:36:53 2016 us=385556 remap_sigusr1 = 0
Mon Apr 18 09:36:53 2016 us=385563 persist_tun = ENABLED
Mon Apr 18 09:36:53 2016 us=385569 persist_local_ip = DISABLED
Mon Apr 18 09:36:53 2016 us=385576 persist_remote_ip = DISABLED
Mon Apr 18 09:36:53 2016 us=385582 persist_key = ENABLED
Mon Apr 18 09:36:53 2016 us=385588 passtos = DISABLED
Mon Apr 18 09:36:53 2016 us=385594 resolve_retry_seconds = 1000000000
Mon Apr 18 09:36:53 2016 us=385610 username = 'nobody'
Mon Apr 18 09:36:53 2016 us=385617 groupname = 'nogroup'
Mon Apr 18 09:36:53 2016 us=385624 chroot_dir = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385630 cd_dir = '/etc/openvpn'
Mon Apr 18 09:36:53 2016 us=385636 writepid = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385643 up_script = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385649 down_script = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385655 down_pre = DISABLED
Mon Apr 18 09:36:53 2016 us=385661 up_restart = DISABLED
Mon Apr 18 09:36:53 2016 us=385667 up_delay = DISABLED
Mon Apr 18 09:36:53 2016 us=385674 daemon = ENABLED
Mon Apr 18 09:36:53 2016 us=385681 inetd = 0
Mon Apr 18 09:36:53 2016 us=385687 log = ENABLED
Mon Apr 18 09:36:53 2016 us=385694 suppress_timestamps = DISABLED
Mon Apr 18 09:36:53 2016 us=385700 nice = 0
Mon Apr 18 09:36:53 2016 us=385706 verbosity = 4
Mon Apr 18 09:36:53 2016 us=385712 mute = 0
Mon Apr 18 09:36:53 2016 us=385718 gremlin = 0
Mon Apr 18 09:36:53 2016 us=385724 status_file = 'openvpn-status_es.log'
Mon Apr 18 09:36:53 2016 us=385731 status_file_version = 1
Mon Apr 18 09:36:53 2016 us=385737 status_file_update_freq = 10
Mon Apr 18 09:36:53 2016 us=385743 occ = ENABLED
Mon Apr 18 09:36:53 2016 us=385749 rcvbuf = 65536
Mon Apr 18 09:36:53 2016 us=385756 sndbuf = 65536
Mon Apr 18 09:36:53 2016 us=385762 mark = 0
Mon Apr 18 09:36:53 2016 us=385768 sockflags = 0
Mon Apr 18 09:36:53 2016 us=385774 fast_io = DISABLED
Mon Apr 18 09:36:53 2016 us=385780 lzo = 7
Mon Apr 18 09:36:53 2016 us=385787 route_script = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385794 route_default_gateway = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385800 route_default_metric = 0
Mon Apr 18 09:36:53 2016 us=385807 route_noexec = DISABLED
Mon Apr 18 09:36:53 2016 us=385813 route_delay = 0
Mon Apr 18 09:36:53 2016 us=385820 route_delay_window = 30
Mon Apr 18 09:36:53 2016 us=385826 route_delay_defined = DISABLED
Mon Apr 18 09:36:53 2016 us=385832 route_nopull = DISABLED
Mon Apr 18 09:36:53 2016 us=385839 route_gateway_via_dhcp = DISABLED
Mon Apr 18 09:36:53 2016 us=385845 max_routes = 100
Mon Apr 18 09:36:53 2016 us=385851 allow_pull_fqdn = DISABLED
Mon Apr 18 09:36:53 2016 us=385864 route 10.8.1.0/255.255.255.0/nil/nil
Mon Apr 18 09:36:53 2016 us=385871 management_addr = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385877 management_port = 0
Mon Apr 18 09:36:53 2016 us=385884 management_user_pass = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385891 management_log_history_cache = 250
Mon Apr 18 09:36:53 2016 us=385898 management_echo_buffer_size = 100
Mon Apr 18 09:36:53 2016 us=385904 management_write_peer_info_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385910 management_client_user = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385917 management_client_group = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385923 management_flags = 0
Mon Apr 18 09:36:53 2016 us=385933 shared_secret_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=385940 key_direction = 0
Mon Apr 18 09:36:53 2016 us=385946 ciphername_defined = ENABLED
Mon Apr 18 09:36:53 2016 us=385953 ciphername = 'BF-CBC'
Mon Apr 18 09:36:53 2016 us=385959 authname_defined = ENABLED
Mon Apr 18 09:36:53 2016 us=385965 authname = 'SHA1'
Mon Apr 18 09:36:53 2016 us=385971 prng_hash = 'SHA1'
Mon Apr 18 09:36:53 2016 us=385977 prng_nonce_secret_len = 16
Mon Apr 18 09:36:53 2016 us=385984 keysize = 0
Mon Apr 18 09:36:53 2016 us=385990 engine = DISABLED
Mon Apr 18 09:36:53 2016 us=385997 replay = ENABLED
Mon Apr 18 09:36:53 2016 us=386004 mute_replay_warnings = DISABLED
Mon Apr 18 09:36:53 2016 us=386010 replay_window = 64
Mon Apr 18 09:36:53 2016 us=386017 replay_time = 15
Mon Apr 18 09:36:53 2016 us=386023 packet_id_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=386984 use_iv = ENABLED
Mon Apr 18 09:36:53 2016 us=386993 test_crypto = DISABLED
Mon Apr 18 09:36:53 2016 us=387001 tls_server = ENABLED
Mon Apr 18 09:36:53 2016 us=387008 tls_client = DISABLED
Mon Apr 18 09:36:53 2016 us=387015 key_method = 2
Mon Apr 18 09:36:53 2016 us=387032 ca_file = '/etc/openvpn/server_es/ca.crt'
Mon Apr 18 09:36:53 2016 us=387039 ca_path = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387047 dh_file = '/etc/openvpn/server_es/dh2048.pem'
Mon Apr 18 09:36:53 2016 us=387053 cert_file = '/etc/openvpn/server_es/srvcert.crt'
Mon Apr 18 09:36:53 2016 us=387061 priv_key_file = '/etc/openvpn/server_es/srvcert.key'
Mon Apr 18 09:36:53 2016 us=387068 pkcs12_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387075 cipher_list = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387082 tls_verify = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387088 tls_export_cert = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387094 verify_x509_type = 0
Mon Apr 18 09:36:53 2016 us=387101 verify_x509_name = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387107 crl_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387113 ns_cert_type = 0
Mon Apr 18 09:36:53 2016 us=387120 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387126 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387132 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387138 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387144 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387150 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387156 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387163 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387169 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387175 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387181 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387187 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387193 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387199 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387205 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387211 remote_cert_ku[i] = 0
Mon Apr 18 09:36:53 2016 us=387218 remote_cert_eku = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387224 ssl_flags = 0
Mon Apr 18 09:36:53 2016 us=387231 tls_timeout = 2
Mon Apr 18 09:36:53 2016 us=387237 renegotiate_bytes = 0
Mon Apr 18 09:36:53 2016 us=387243 renegotiate_packets = 0
Mon Apr 18 09:36:53 2016 us=387249 renegotiate_seconds = 3600
Mon Apr 18 09:36:53 2016 us=387256 handshake_window = 60
Mon Apr 18 09:36:53 2016 us=387262 transition_window = 3600
Mon Apr 18 09:36:53 2016 us=387269 single_session = DISABLED
Mon Apr 18 09:36:53 2016 us=387275 push_peer_info = DISABLED
Mon Apr 18 09:36:53 2016 us=387281 tls_exit = DISABLED
Mon Apr 18 09:36:53 2016 us=387287 tls_auth_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387293 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387300 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387306 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387312 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387318 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387325 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387331 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387337 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387343 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387349 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387356 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387362 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387369 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387375 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387381 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387387 pkcs11_protected_authentication = DISABLED
Mon Apr 18 09:36:53 2016 us=387394 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387400 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387406 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387412 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387425 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387431 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387438 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387444 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387450 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387456 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387462 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387469 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387475 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387481 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387487 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387493 pkcs11_private_mode = 00000000
Mon Apr 18 09:36:53 2016 us=387499 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387505 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387511 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387517 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387524 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387530 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387536 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387542 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387549 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387556 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387562 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387569 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387575 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387581 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387587 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387593 pkcs11_cert_private = DISABLED
Mon Apr 18 09:36:53 2016 us=387600 pkcs11_pin_cache_period = -1
Mon Apr 18 09:36:53 2016 us=387606 pkcs11_id = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387612 pkcs11_id_management = DISABLED
Mon Apr 18 09:36:53 2016 us=387623 server_network = 10.8.1.0
Mon Apr 18 09:36:53 2016 us=387630 server_netmask = 255.255.255.0
Mon Apr 18 09:36:53 2016 us=387641 server_network_ipv6 = ::
Mon Apr 18 09:36:53 2016 us=387647 server_netbits_ipv6 = 0
Mon Apr 18 09:36:53 2016 us=387655 server_bridge_ip = 0.0.0.0
Mon Apr 18 09:36:53 2016 us=387663 server_bridge_netmask = 0.0.0.0
Mon Apr 18 09:36:53 2016 us=387671 server_bridge_pool_start = 0.0.0.0
Mon Apr 18 09:36:53 2016 us=387678 server_bridge_pool_end = 0.0.0.0
Mon Apr 18 09:36:53 2016 us=387684 push_entry = 'redirect-gateway def1 bypass-dhcp'
Mon Apr 18 09:36:53 2016 us=387691 push_entry = 'dhcp-option DNS 208.67.222.222'
Mon Apr 18 09:36:53 2016 us=387697 push_entry = 'dhcp-option DNS 208.67.220.220'
Mon Apr 18 09:36:53 2016 us=387704 push_entry = 'route 10.8.1.1'
Mon Apr 18 09:36:53 2016 us=387710 push_entry = 'topology net30'
Mon Apr 18 09:36:53 2016 us=387716 push_entry = 'ping 10'
Mon Apr 18 09:36:53 2016 us=387723 push_entry = 'ping-restart 120'
Mon Apr 18 09:36:53 2016 us=387729 ifconfig_pool_defined = ENABLED
Mon Apr 18 09:36:53 2016 us=387736 ifconfig_pool_start = 10.8.1.4
Mon Apr 18 09:36:53 2016 us=387746 ifconfig_pool_end = 10.8.1.251
Mon Apr 18 09:36:53 2016 us=387753 ifconfig_pool_netmask = 0.0.0.0
Mon Apr 18 09:36:53 2016 us=387760 ifconfig_pool_persist_filename = 'ipp_es.txt'
Mon Apr 18 09:36:53 2016 us=387767 ifconfig_pool_persist_refresh_freq = 600
Mon Apr 18 09:36:53 2016 us=387774 ifconfig_ipv6_pool_defined = DISABLED
Mon Apr 18 09:36:53 2016 us=387782 ifconfig_ipv6_pool_base = ::
Mon Apr 18 09:36:53 2016 us=387789 ifconfig_ipv6_pool_netbits = 0
Mon Apr 18 09:36:53 2016 us=387796 n_bcast_buf = 256
Mon Apr 18 09:36:53 2016 us=387804 tcp_queue_limit = 64
Mon Apr 18 09:36:53 2016 us=387811 real_hash_size = 256
Mon Apr 18 09:36:53 2016 us=387819 virtual_hash_size = 256
Mon Apr 18 09:36:53 2016 us=387826 client_connect_script = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387841 learn_address_script = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387847 client_disconnect_script = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387854 client_config_dir = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387860 ccd_exclusive = DISABLED
Mon Apr 18 09:36:53 2016 us=387867 tmp_dir = '/tmp'
Mon Apr 18 09:36:53 2016 us=387873 push_ifconfig_defined = DISABLED
Mon Apr 18 09:36:53 2016 us=387881 push_ifconfig_local = 0.0.0.0
Mon Apr 18 09:36:53 2016 us=387888 push_ifconfig_remote_netmask = 0.0.0.0
Mon Apr 18 09:36:53 2016 us=387894 push_ifconfig_ipv6_defined = DISABLED
Mon Apr 18 09:36:53 2016 us=387901 push_ifconfig_ipv6_local = ::/0
Mon Apr 18 09:36:53 2016 us=387908 push_ifconfig_ipv6_remote = ::
Mon Apr 18 09:36:53 2016 us=387914 enable_c2c = DISABLED
Mon Apr 18 09:36:53 2016 us=387921 duplicate_cn = DISABLED
Mon Apr 18 09:36:53 2016 us=387927 cf_max = 0
Mon Apr 18 09:36:53 2016 us=387934 cf_per = 0
Mon Apr 18 09:36:53 2016 us=387940 max_clients = 1024
Mon Apr 18 09:36:53 2016 us=387946 max_routes_per_client = 256
Mon Apr 18 09:36:53 2016 us=387953 auth_user_pass_verify_script = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387959 auth_user_pass_verify_script_via_file = DISABLED
Mon Apr 18 09:36:53 2016 us=387965 port_share_host = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=387972 port_share_port = 0
Mon Apr 18 09:36:53 2016 us=387978 client = DISABLED
Mon Apr 18 09:36:53 2016 us=387984 pull = DISABLED
Mon Apr 18 09:36:53 2016 us=387990 auth_user_pass_file = '[UNDEF]'
Mon Apr 18 09:36:53 2016 us=388006 OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 12 2015
Mon Apr 18 09:36:53 2016 us=388024 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Mon Apr 18 09:36:53 2016 us=412449 Diffie-Hellman initialized with 2048 bit key
Mon Apr 18 09:36:53 2016 us=412903 WARNING: file '/etc/openvpn/server_es/srvcert.key' is group or others accessible
Mon Apr 18 09:36:53 2016 us=413123 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Apr 18 09:36:53 2016 us=413155 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Apr 18 09:36:53 2016 us=413288 ROUTE_GATEWAY 92.222.64.1
Mon Apr 18 09:36:53 2016 us=419275 TUN/TAP device tun1 opened
Mon Apr 18 09:36:53 2016 us=419308 TUN/TAP TX queue length set to 100
Mon Apr 18 09:36:53 2016 us=419326 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Apr 18 09:36:53 2016 us=419347 /sbin/ip link set dev tun1 up mtu 1500
Mon Apr 18 09:36:53 2016 us=421943 /sbin/ip addr add dev tun1 local 10.8.1.1 peer 10.8.1.2
Mon Apr 18 09:36:53 2016 us=427897 /sbin/ip route add 10.8.1.0/24 via 10.8.1.2
Mon Apr 18 09:36:53 2016 us=429953 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Apr 18 09:36:53 2016 us=433414 GID set to nogroup
Mon Apr 18 09:36:53 2016 us=433457 UID set to nobody
Mon Apr 18 09:36:53 2016 us=433478 UDPv4 link local (bound): [undef]
Mon Apr 18 09:36:53 2016 us=433486 UDPv4 link remote: [undef]
Mon Apr 18 09:36:53 2016 us=433495 MULTI: multi_init called, r=256 v=256
Mon Apr 18 09:36:53 2016 us=433558 IFCONFIG POOL: base=10.8.1.4 size=62, ipv6=0
Mon Apr 18 09:36:53 2016 us=433579 ifconfig_pool_read(), in='client_es,10.8.1.4', TODO: IPv6
Mon Apr 18 09:36:53 2016 us=433593 succeeded -> ifconfig_pool_set()
Mon Apr 18 09:36:53 2016 us=433602 ifconfig_pool_read(), in='client_fr,10.8.1.8', TODO: IPv6
Mon Apr 18 09:36:53 2016 us=433609 succeeded -> ifconfig_pool_set()
Mon Apr 18 09:36:53 2016 us=433617 ifconfig_pool_read(), in='ES_CLIENT,10.8.1.12', TODO: IPv6
Mon Apr 18 09:36:53 2016 us=433624 succeeded -> ifconfig_pool_set()
Mon Apr 18 09:36:53 2016 us=433632 IFCONFIG POOL LIST
Mon Apr 18 09:36:53 2016 us=433641 client_es,10.8.1.4
Mon Apr 18 09:36:53 2016 us=433647 client_fr,10.8.1.8
Mon Apr 18 09:36:53 2016 us=433654 ES_CLIENT,10.8.1.12
Mon Apr 18 09:36:53 2016 us=433680 Initialization Sequence Completed
Mon Apr 18 09:37:02 2016 us=386342 MULTI: multi_create_instance called
Mon Apr 18 09:37:02 2016 us=386402 1.39.97.31:14403 Re-using SSL/TLS context
Mon Apr 18 09:37:02 2016 us=386460 1.39.97.31:14403 LZO compression initialized
Mon Apr 18 09:37:02 2016 us=386697 1.39.97.31:14403 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Apr 18 09:37:02 2016 us=386719 1.39.97.31:14403 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Apr 18 09:37:02 2016 us=386770 1.39.97.31:14403 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Apr 18 09:37:02 2016 us=386781 1.39.97.31:14403 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Apr 18 09:37:02 2016 us=386823 1.39.97.31:14403 Local Options hash (VER=V4): '530fdded'
Mon Apr 18 09:37:02 2016 us=386839 1.39.97.31:14403 Expected Remote Options hash (VER=V4): '41690919'
Mon Apr 18 09:37:02 2016 us=386893 1.39.97.31:14403 TLS: Initial packet from [AF_INET]1.39.97.31:14403, sid=1f917ded 8956ae69
Mon Apr 18 09:37:02 2016 us=386967 1.39.97.31:14403 write UDPv4: Operation not permitted (code=1)
Mon Apr 18 09:37:04 2016 us=245940 1.39.97.31:14403 write UDPv4: Operation not permitted (code=1)
Mon Apr 18 09:37:08 2016 us=296773 1.39.97.31:14403 write UDPv4: Operation not permitted (code=1)
Mon Apr 18 09:37:16 2016 us=182645 1.39.97.31:14403 write UDPv4: Operation not permitted (code=1)
Mon Apr 18 09:37:32 2016 us=977049 1.39.97.31:14403 write UDPv4: Operation not permitted (code=1)
Mon Apr 18 09:38:02 2016 us=951258 1.39.97.31:14403 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Apr 18 09:38:02 2016 us=951280 1.39.97.31:14403 TLS Error: TLS handshake failed
Mon Apr 18 09:38:02 2016 us=951520 1.39.97.31:14403 SIGUSR1[soft,tls-error] received, client-instance restarting
Where is my problem ?
