pfSense OpenVPN client to CentOS 6.5 OpenVPN server

cologuy

I've got a CentOS 6.5 server running OpenVPN 2.0.9 and I'm trying to setup a tunnel to pfSense 2.1.4 OpenVPN client.

The server has a WAN IP address and a tun0 netowork of 10.0.1.0/24. On the client end I have a 192.168.0.0/24 network. I need to access FreePBX running on the server via the 10.0.1.x tunnel.

The openVPN server connects and shows to be up but I'm not able to ping across the tunnel.

ifconfig on the server shows:

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
             inet addr:10.0.1.1  P-t-P:10.0.1.2  Mask:255.255.255.255

route on the server shows:

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.1.2           *                255.255.255.255 UH    0      0        0 tun0
10.0.1.0           10.0.1.2     255.255.255.0   UG    0      0        0 tun0
xxx.xxx.xxx.0   *                255.255.240.0   U     0      0        0 eth0
link-local           *                255.255.0.0     U     1002   0        0 eth0
default             xxx.xxx.xxx.1   0.0.0.0         UG    0      0        0 eth0

Where xxx.xxx.xxx is my WAN address

The status page for OpenVPN shows a virtual IP of 10.0.1.6 and shows to be UP.

I have the OpenVPN connected but I'm not able to ping across the tunnel. I can ping 10.0.1.1 from
the server. I cannot ping 10.0.1.2.

On the client from pfSense diagnostics I can ping 10.0.1.1 but not 10.0.1.2

This is the server conf:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.0.1.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-128-CBC   # AES
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
verb 5

Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    fail2ban-FTP  tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:21
2    fail2ban-BadBots  tcp  --  0.0.0.0/0     0.0.0.0/0          multiport dports 80,443
3    fail2ban-PBX-GUI  tcp  --  0.0.0.0/0     0.0.0.0/0
4    fail2ban-SIP  all  --  0.0.0.0/0              0.0.0.0/0
5    fail2ban-SSH  tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:22

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Chain fail2ban-BadBots (1 references)
num  target     prot opt source               destination
1    RETURN     all  --  0.0.0.0/0            0.0.0.0/0

Chain fail2ban-FTP (1 references)
num  target     prot opt source               destination
1    RETURN     all  --  0.0.0.0/0            0.0.0.0/0

Chain fail2ban-PBX-GUI (1 references)
num  target     prot opt source               destination
1    RETURN     all  --  0.0.0.0/0            0.0.0.0/0

Chain fail2ban-SIP (1 references)
num  target     prot opt source               destination
1    RETURN     all  --  0.0.0.0/0            0.0.0.0/0

Chain fail2ban-SSH (1 references)
num  target     prot opt source               destination
1    RETURN     all  --  0.0.0.0/0            0.0.0.0/0

Table: nat
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination
1    MASQUERADE  all  --  10.0.1.0/24          0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

The client settings:

Mode is set to SSL/TLS
Enable authentication of TLS packets is unchecked
I've setup my certs in the cert Manager
I'm using AES-128-CBC as encryption
Tunnel network is set to 10.0.1.0/24
Remote Network is blank
Compress tunnel is checked. 
verb 5

Can anyone spot something I've setup wrong or something I'm missing?

Traffic

cologuy wroteI've got a CentOS 6.5 server running OpenVPN 2.0.9

Are you sure this is the version ?

Please check your log for details.

cologuy

This is a Digital Ocean server installed from a droplet. I suspect they have monkeyed around with the CentOS distro since it should be at least OpenVpn 2.2.2.

This is what I get on the server:

openvpn --version
OpenVPN 2.0.9 x86_64-redhat-linux-gnu [SSL] [LZO] [EPOLL] built on Nov 12 2010
Developed by James Yonan
Copyright (C) 2002-2005 OpenVPN Solutions LLC <info@openvpn.net>

cat /etc/centos-release
CentOS release 6.5 (Final)

yum install openvpn
Package openvpn-2.0.9-1.el6.rf.x86_64 already installed and latest version
Nothing to do

Traffic

cologuy wroteopenvpn --version
OpenVPN 2.0.9 x86_64-redhat-linux-gnu [SSL] [LZO] [EPOLL] built on Nov 12 2010

I would check if your distro has anyway to update this .. that is seriously old :shock:

Perhaps you can use the OpenVPN repo or maybe build the source yourself.

However:

Traffic wroteI can ping 10.0.1.1 from the server. I cannot ping 10.0.1.2.

cologuy wroteOn the client from pfSense diagnostics I can ping 10.0.1.1 but not 10.0.1.2

cologuy wroteThe status page for OpenVPN shows a virtual IP of 10.0.1.6 and shows to be UP

You are using --topology net30 and so 10.0.1.2 is not pingable by design .. See --topology in The Manual v23x

Try --topology subnet :mrgreen:

cologuy

I was able to upgrade to OpenVPN 2.3.10 without any issues and the VPN connection seems to come up. It's odd they had such an old release on CentOS 6.5.

My problem in understanding this is I'm not clear on what IP is assigned to the server? So using the net30 setup I have what IP would be pingable on the server end, anything? Would I ping or connect to 10.0.1.1 or something else? Or do I need to switch to subnet mode? I can't connect to 10.0.1.1 so there must be something I'm missing.

Traffic

Please post your server and clients logs at --verb 4 (remove private data)

cologuy

Client side:

Apr 21 16:15:56 	openvpn[56195]: Initialization Sequence Completed
Apr 21 16:15:56 	openvpn[56195]: /sbin/route add -net 10.0.1.1 10.0.1.5 255.255.255.255
Apr 21 16:15:56 	openvpn[56195]: /usr/local/sbin/ovpn-linkup ovpnc1 1500 1538 10.0.1.6 10.0.1.5 init
Apr 21 16:15:56 	openvpn[56195]: /sbin/ifconfig ovpnc1 10.0.1.6 10.0.1.5 mtu 1500 netmask 255.255.255.255 up
Apr 21 16:15:56 	openvpn[56195]: do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=0
Apr 21 16:15:56 	openvpn[56195]: TUN/TAP device /dev/tun1 opened
Apr 21 16:15:56 	openvpn[56195]: TUN/TAP device ovpnc1 exists previously, keep at program end
Apr 21 16:15:56 	openvpn[56195]: ROUTE_GATEWAY AAA.AAA.AAA.1 (my WAN IP)
Apr 21 16:15:56 	openvpn[56195]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Apr 21 16:15:56 	openvpn[56195]: OPTIONS IMPORT: route options modified
Apr 21 16:15:56 	openvpn[56195]: OPTIONS IMPORT: --ifconfig/up options modified
Apr 21 16:15:56 	openvpn[56195]: OPTIONS IMPORT: timers and/or timeouts modified
Apr 21 16:15:56 	openvpn[56195]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.0.1.1,topology net30,ping 10,ping-restart 120,ifconfig 10.0.1.6 10.0.1.5'
Apr 21 16:15:56 	openvpn[56195]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Apr 21 16:15:53 	openvpn[56195]: [server] Peer Connection Initiated with [AF_INET]SSS.SSS.SSS.SSS:1194
Apr 21 16:15:53 	openvpn[56195]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Apr 21 16:15:53 	openvpn[56195]: Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Apr 21 16:15:53 	openvpn[56195]: Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Apr 21 16:15:52 	openvpn[56195]: VERIFY OK: 
Apr 21 16:15:52 	openvpn[56195]: VERIFY OK: 
Apr 21 16:15:52 	openvpn[56195]: TLS: Initial packet from [AF_INET]SSS.SSS.SSS.SSS:1194, sid=e38ad55d cbdb5349
Apr 21 16:15:52 	openvpn[56195]: UDPv4 link remote: [AF_INET]SSS.SSS.SSS.SSS:1194
Apr 21 16:15:52 	openvpn[56195]: UDPv4 link local (bound): [AF_INET]AAA.AAA.AAA.AAA
Apr 21 16:15:52 	openvpn[55961]: Expected Remote Options hash (VER=V4): '584a4c94'
Apr 21 16:15:52 	openvpn[55961]: Local Options hash (VER=V4): '80515265'
Apr 21 16:15:52 	openvpn[55961]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1538,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth [null-digest],keysize 128,key-method 2,tls-server'
Apr 21 16:15:52 	openvpn[55961]: Local Options String: 'V4,dev-type tun,link-mtu 1538,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth [null-digest],keysize 128,key-method 2,tls-client'
Apr 21 16:15:52 	openvpn[55961]: Data Channel MTU parms [ L:1538 D:1450 EF:38 EB:135 ET:0 EL:0 AF:3/1 ]
Apr 21 16:15:52 	openvpn[55961]: Socket Buffers: R=[42080->65536] S=[57344->65536]
Apr 21 16:15:52 	openvpn[55961]: Control Channel MTU parms [ L:1538 D:138 EF:38 EB:0 ET:0 EL:0 ]
Apr 21 16:15:52 	openvpn[55961]: LZO compression initialized
Apr 21 16:15:52 	openvpn[55961]: ******* WARNING *******: null MAC specified, no authentication will be used
Apr 21 16:15:52 	openvpn[55961]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Apr 21 16:15:52 	openvpn[55961]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Apr 21 16:15:52 	openvpn[55961]: WARNING: using --pull/--client and --ifconfig together is probably not what you want
Apr 21 16:15:52 	openvpn[55961]: MANAGEMENT: unix domain socket listening on /var/etc/openvpn/client1.sock
Apr 21 16:15:52 	openvpn[55961]: OpenVPN 2.3.2 i386-portbld-freebsd8.3 [SSL (OpenSSL)] [LZO] [eurephia] [MH] [IPv6] built on Mar 27 2014
Apr 21 16:15:52 	openvpn[55961]: auth_user_pass_file = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: pull = ENABLED
Apr 21 16:15:52 	openvpn[55961]: client = ENABLED
Apr 21 16:15:52 	openvpn[55961]: port_share_port = 0
Apr 21 16:15:52 	openvpn[55961]: port_share_host = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: auth_user_pass_verify_script_via_file = DISABLED
Apr 21 16:15:52 	openvpn[55961]: auth_user_pass_verify_script = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: max_routes_per_client = 256
Apr 21 16:15:52 	openvpn[55961]: max_clients = 1024
Apr 21 16:15:52 	openvpn[55961]: cf_per = 0
Apr 21 16:15:52 	openvpn[55961]: cf_max = 0
Apr 21 16:15:52 	openvpn[55961]: duplicate_cn = DISABLED
Apr 21 16:15:52 	openvpn[55961]: enable_c2c = DISABLED
Apr 21 16:15:52 	openvpn[55961]: push_ifconfig_ipv6_remote = ::
Apr 21 16:15:52 	openvpn[55961]: push_ifconfig_ipv6_local = ::/0
Apr 21 16:15:52 	openvpn[55961]: push_ifconfig_ipv6_defined = DISABLED
Apr 21 16:15:52 	openvpn[55961]: push_ifconfig_remote_netmask = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: push_ifconfig_local = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: push_ifconfig_defined = DISABLED
Apr 21 16:15:52 	openvpn[55961]: tmp_dir = '/tmp'
Apr 21 16:15:52 	openvpn[55961]: ccd_exclusive = DISABLED
Apr 21 16:15:52 	openvpn[55961]: client_config_dir = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: client_disconnect_script = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: learn_address_script = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: client_connect_script = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: virtual_hash_size = 256
Apr 21 16:15:52 	openvpn[55961]: real_hash_size = 256
Apr 21 16:15:52 	openvpn[55961]: tcp_queue_limit = 64
Apr 21 16:15:52 	openvpn[55961]: n_bcast_buf = 256
Apr 21 16:15:52 	openvpn[55961]: ifconfig_ipv6_pool_netbits = 0
Apr 21 16:15:52 	openvpn[55961]: ifconfig_ipv6_pool_base = ::
Apr 21 16:15:52 	openvpn[55961]: ifconfig_ipv6_pool_defined = DISABLED
Apr 21 16:15:52 	openvpn[55961]: ifconfig_pool_persist_refresh_freq = 600
Apr 21 16:15:52 	openvpn[55961]: ifconfig_pool_persist_filename = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: ifconfig_pool_netmask = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: ifconfig_pool_end = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: ifconfig_pool_start = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: ifconfig_pool_defined = DISABLED
Apr 21 16:15:52 	openvpn[55961]: server_bridge_pool_end = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: server_bridge_pool_start = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: server_bridge_netmask = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: server_bridge_ip = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: server_netbits_ipv6 = 0
Apr 21 16:15:52 	openvpn[55961]: server_network_ipv6 = ::
Apr 21 16:15:52 	openvpn[55961]: server_netmask = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: server_network = 0.0.0.0
Apr 21 16:15:52 	openvpn[55961]: tls_auth_file = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: tls_exit = DISABLED
Apr 21 16:15:52 	openvpn[55961]: push_peer_info = DISABLED
Apr 21 16:15:52 	openvpn[55961]: single_session = DISABLED
Apr 21 16:15:52 	openvpn[55961]: transition_window = 3600
Apr 21 16:15:52 	openvpn[55961]: handshake_window = 60
Apr 21 16:15:52 	openvpn[55961]: renegotiate_seconds = 3600
Apr 21 16:15:52 	openvpn[55961]: renegotiate_packets = 0
Apr 21 16:15:52 	openvpn[55961]: renegotiate_bytes = 0
Apr 21 16:15:52 	openvpn[55961]: tls_timeout = 2
Apr 21 16:15:52 	openvpn[55961]: ssl_flags = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_eku = '[UNDEF]'
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:52 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:51 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:51 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:51 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:51 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:51 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:51 	openvpn[55961]: remote_cert_ku[i] = 0
Apr 21 16:15:51 	openvpn[55961]: ns_cert_type = 0
Apr 21 16:15:51 	openvpn[55961]: crl_file = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: verify_x509_name = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: verify_x509_type = 0
Apr 21 16:15:51 	openvpn[55961]: tls_export_cert = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: tls_verify = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: cipher_list = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: pkcs12_file = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: priv_key_file = '/var/etc/openvpn/client1.key'
Apr 21 16:15:51 	openvpn[55961]: cert_file = '/var/etc/openvpn/client1.cert'
Apr 21 16:15:51 	openvpn[55961]: dh_file = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: ca_path = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: ca_file = '/var/etc/openvpn/client1.ca'
Apr 21 16:15:51 	openvpn[55961]: key_method = 2
Apr 21 16:15:51 	openvpn[55961]: tls_client = ENABLED
Apr 21 16:15:51 	openvpn[55961]: tls_server = DISABLED
Apr 21 16:15:51 	openvpn[55961]: test_crypto = DISABLED
Apr 21 16:15:51 	openvpn[55961]: use_iv = ENABLED
Apr 21 16:15:51 	openvpn[55961]: packet_id_file = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: replay_time = 15
Apr 21 16:15:51 	openvpn[55961]: replay_window = 64
Apr 21 16:15:51 	openvpn[55961]: mute_replay_warnings = DISABLED
Apr 21 16:15:51 	openvpn[55961]: replay = ENABLED
Apr 21 16:15:51 	openvpn[55961]: engine = DISABLED
Apr 21 16:15:51 	openvpn[55961]: keysize = 0
Apr 21 16:15:51 	openvpn[55961]: prng_nonce_secret_len = 16
Apr 21 16:15:51 	openvpn[55961]: prng_hash = 'SHA1'
Apr 21 16:15:51 	openvpn[55961]: authname = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: authname_defined = DISABLED
Apr 21 16:15:51 	openvpn[55961]: ciphername = 'AES-128-CBC'
Apr 21 16:15:51 	openvpn[55961]: ciphername_defined = ENABLED
Apr 21 16:15:51 	openvpn[55961]: key_direction = 0
Apr 21 16:15:51 	openvpn[55961]: shared_secret_file = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: management_flags = 256
Apr 21 16:15:51 	openvpn[55961]: management_client_group = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: management_client_user = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: management_write_peer_info_file = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: management_echo_buffer_size = 100
Apr 21 16:15:51 	openvpn[55961]: management_log_history_cache = 250
Apr 21 16:15:51 	openvpn[55961]: management_user_pass = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: management_port = 0
Apr 21 16:15:51 	openvpn[55961]: management_addr = '/var/etc/openvpn/client1.sock'
Apr 21 16:15:51 	openvpn[55961]: allow_pull_fqdn = DISABLED
Apr 21 16:15:51 	openvpn[55961]: max_routes = 100
Apr 21 16:15:51 	openvpn[55961]: route_gateway_via_dhcp = DISABLED
Apr 21 16:15:51 	openvpn[55961]: route_nopull = DISABLED
Apr 21 16:15:51 	openvpn[55961]: route_delay_defined = DISABLED
Apr 21 16:15:51 	openvpn[55961]: route_delay_window = 30
Apr 21 16:15:51 	openvpn[55961]: route_delay = 0
Apr 21 16:15:51 	openvpn[55961]: route_noexec = DISABLED
Apr 21 16:15:51 	openvpn[55961]: route_default_metric = 0
Apr 21 16:15:51 	openvpn[55961]: route_default_gateway = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: route_script = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: lzo = 7
Apr 21 16:15:51 	openvpn[55961]: fast_io = DISABLED
Apr 21 16:15:51 	openvpn[55961]: sockflags = 0
Apr 21 16:15:51 	openvpn[55961]: sndbuf = 65536
Apr 21 16:15:51 	openvpn[55961]: rcvbuf = 65536
Apr 21 16:15:51 	openvpn[55961]: occ = ENABLED
Apr 21 16:15:51 	openvpn[55961]: status_file_update_freq = 60
Apr 21 16:15:51 	openvpn[55961]: status_file_version = 1
Apr 21 16:15:51 	openvpn[55961]: status_file = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: gremlin = 0
Apr 21 16:15:51 	openvpn[55961]: mute = 0
Apr 21 16:15:51 	openvpn[55961]: verbosity = 4
Apr 21 16:15:51 	openvpn[55961]: nice = 0
Apr 21 16:15:51 	openvpn[55961]: suppress_timestamps = DISABLED
Apr 21 16:15:51 	openvpn[55961]: log = DISABLED
Apr 21 16:15:51 	openvpn[55961]: inetd = 0
Apr 21 16:15:51 	openvpn[55961]: daemon = ENABLED
Apr 21 16:15:51 	openvpn[55961]: up_delay = DISABLED
Apr 21 16:15:51 	openvpn[55961]: up_restart = DISABLED
Apr 21 16:15:51 	openvpn[55961]: down_pre = DISABLED
Apr 21 16:15:51 	openvpn[55961]: down_script = '/usr/local/sbin/ovpn-linkdown'
Apr 21 16:15:51 	openvpn[55961]: up_script = '/usr/local/sbin/ovpn-linkup'
Apr 21 16:15:51 	openvpn[55961]: writepid = '/var/run/openvpn_client1.pid'
Apr 21 16:15:51 	openvpn[55961]: cd_dir = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: chroot_dir = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: groupname = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: username = '[UNDEF]'
Apr 21 16:15:51 	openvpn[55961]: resolve_retry_seconds = 1000000000
Apr 21 16:15:51 	openvpn[55961]: passtos = DISABLED
Apr 21 16:15:51 	openvpn[55961]: persist_key = ENABLED
Apr 21 16:15:51 	openvpn[55961]: persist_remote_ip = DISABLED
Apr 21 16:15:51 	openvpn[55961]: persist_local_ip = DISABLED
Apr 21 16:15:51 	openvpn[55961]: persist_tun = ENABLED
Apr 21 16:15:51 	openvpn[55961]: remap_sigusr1 = 0
Apr 21 16:15:51 	openvpn[55961]: ping_timer_remote = ENABLED
Apr 21 16:15:51 	openvpn[55961]: ping_rec_timeout_action = 2

Server:

Thu Apr 21 17:26:26 2016 us=857285 Current Parameter Settings:
Thu Apr 21 17:26:26 2016 us=862970   config = 'server.conf'
Thu Apr 21 17:26:26 2016 us=863259   mode = 1
Thu Apr 21 17:26:26 2016 us=863427   persist_config = DISABLED
Thu Apr 21 17:26:26 2016 us=863794   persist_mode = 1
Thu Apr 21 17:26:26 2016 us=864001   show_ciphers = DISABLED
Thu Apr 21 17:26:26 2016 us=864134   show_digests = DISABLED
Thu Apr 21 17:26:26 2016 us=864294   show_engines = DISABLED
Thu Apr 21 17:26:26 2016 us=864417   genkey = DISABLED
Thu Apr 21 17:26:26 2016 us=864510   key_pass_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=864799   show_tls_ciphers = DISABLED
Thu Apr 21 17:26:26 2016 us=865130 Connection profiles [default]:
Thu Apr 21 17:26:26 2016 us=865293   proto = udp
Thu Apr 21 17:26:26 2016 us=865421   local = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=872218   local_port = 1194
Thu Apr 21 17:26:26 2016 us=872425   remote = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=872715   remote_port = 1194
Thu Apr 21 17:26:26 2016 us=872880   remote_float = DISABLED
Thu Apr 21 17:26:26 2016 us=873006   bind_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=873131   bind_local = ENABLED
Thu Apr 21 17:26:26 2016 us=873254   connect_retry_seconds = 5
Thu Apr 21 17:26:26 2016 us=873346   connect_timeout = 10
Thu Apr 21 17:26:26 2016 us=873466   connect_retry_max = 0
Thu Apr 21 17:26:26 2016 us=873793   socks_proxy_server = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=873923   socks_proxy_port = 0
Thu Apr 21 17:26:26 2016 us=874045   socks_proxy_retry = DISABLED
Thu Apr 21 17:26:26 2016 us=874169   tun_mtu = 1500
Thu Apr 21 17:26:26 2016 us=874293   tun_mtu_defined = ENABLED
Thu Apr 21 17:26:26 2016 us=874419   link_mtu = 1500
Thu Apr 21 17:26:26 2016 us=874668   link_mtu_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=874881   tun_mtu_extra = 0
Thu Apr 21 17:26:26 2016 us=875493   tun_mtu_extra_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=878980   mtu_discover_type = -1
Thu Apr 21 17:26:26 2016 us=879148   fragment = 0
Thu Apr 21 17:26:26 2016 us=879274   mssfix = 1450
Thu Apr 21 17:26:26 2016 us=879397   explicit_exit_notification = 0
Thu Apr 21 17:26:26 2016 us=879811 Connection profiles END
Thu Apr 21 17:26:26 2016 us=879977   remote_random = DISABLED
Thu Apr 21 17:26:26 2016 us=880068   ipchange = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=880189   dev = 'tun'
Thu Apr 21 17:26:26 2016 us=880307   dev_type = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=880398   dev_node = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=880519   lladdr = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=880774   topology = 1
Thu Apr 21 17:26:26 2016 us=880895   tun_ipv6 = DISABLED
Thu Apr 21 17:26:26 2016 us=881014   ifconfig_local = '10.0.1.1'
Thu Apr 21 17:26:26 2016 us=881104   ifconfig_remote_netmask = '10.0.1.2'
Thu Apr 21 17:26:26 2016 us=884667   ifconfig_noexec = DISABLED
Thu Apr 21 17:26:26 2016 us=884868   ifconfig_nowarn = DISABLED
Thu Apr 21 17:26:26 2016 us=884952   ifconfig_ipv6_local = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=885035   ifconfig_ipv6_netbits = 0
Thu Apr 21 17:26:26 2016 us=885118   ifconfig_ipv6_remote = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=885203   shaper = 0
Thu Apr 21 17:26:26 2016 us=885288   mtu_test = 0
Thu Apr 21 17:26:26 2016 us=885403   mlock = DISABLED
Thu Apr 21 17:26:26 2016 us=885527   keepalive_ping = 10
Thu Apr 21 17:26:26 2016 us=885859   keepalive_timeout = 120
Thu Apr 21 17:26:26 2016 us=885983   inactivity_timeout = 0
Thu Apr 21 17:26:26 2016 us=886078   ping_send_timeout = 10
Thu Apr 21 17:26:26 2016 us=886201   ping_rec_timeout = 240
Thu Apr 21 17:26:26 2016 us=886324   ping_rec_timeout_action = 2
Thu Apr 21 17:26:26 2016 us=886408   ping_timer_remote = DISABLED
Thu Apr 21 17:26:26 2016 us=886492   remap_sigusr1 = 0
Thu Apr 21 17:26:26 2016 us=886701   persist_tun = ENABLED
Thu Apr 21 17:26:26 2016 us=886816   persist_local_ip = DISABLED
Thu Apr 21 17:26:26 2016 us=886949   persist_remote_ip = DISABLED
Thu Apr 21 17:26:26 2016 us=887064   persist_key = ENABLED
Thu Apr 21 17:26:26 2016 us=887149   passtos = DISABLED
Thu Apr 21 17:26:26 2016 us=887235   resolve_retry_seconds = 1000000000
Thu Apr 21 17:26:26 2016 us=887449   username = 'nobody'
Thu Apr 21 17:26:26 2016 us=889484   groupname = 'nobody'
Thu Apr 21 17:26:26 2016 us=889729   chroot_dir = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=889816   cd_dir = '/etc/openvpn'
Thu Apr 21 17:26:26 2016 us=889926   writepid = '/var/run/openvpn/server.pid'
Thu Apr 21 17:26:26 2016 us=889983   up_script = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=890065   down_script = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=890175   down_pre = DISABLED
Thu Apr 21 17:26:26 2016 us=890261   up_restart = DISABLED
Thu Apr 21 17:26:26 2016 us=890345   up_delay = DISABLED
Thu Apr 21 17:26:26 2016 us=890426   daemon = ENABLED
Thu Apr 21 17:26:26 2016 us=890507   inetd = 0
Thu Apr 21 17:26:26 2016 us=890682   log = ENABLED
Thu Apr 21 17:26:26 2016 us=890802   suppress_timestamps = DISABLED
Thu Apr 21 17:26:26 2016 us=890932   nice = 0
Thu Apr 21 17:26:26 2016 us=891021   verbosity = 4
Thu Apr 21 17:26:26 2016 us=891129   mute = 0
Thu Apr 21 17:26:26 2016 us=891211   gremlin = 0
Thu Apr 21 17:26:26 2016 us=891295   status_file = 'openvpn-status.log'
Thu Apr 21 17:26:26 2016 us=891379   status_file_version = 1
Thu Apr 21 17:26:26 2016 us=891463   status_file_update_freq = 60
Thu Apr 21 17:26:26 2016 us=891632   occ = ENABLED
Thu Apr 21 17:26:26 2016 us=891751   rcvbuf = 0
Thu Apr 21 17:26:26 2016 us=891807   sndbuf = 0
Thu Apr 21 17:26:26 2016 us=891890   mark = 0
Thu Apr 21 17:26:26 2016 us=891974   sockflags = 0
Thu Apr 21 17:26:26 2016 us=895785   fast_io = DISABLED
Thu Apr 21 17:26:26 2016 us=895872   lzo = 7
Thu Apr 21 17:26:26 2016 us=895956   route_script = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=896042   route_default_gateway = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=896125   route_default_metric = 0
Thu Apr 21 17:26:26 2016 us=896207   route_noexec = DISABLED
Thu Apr 21 17:26:26 2016 us=896291   route_delay = 0
Thu Apr 21 17:26:26 2016 us=896373   route_delay_window = 30
Thu Apr 21 17:26:26 2016 us=896455   route_delay_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=896650   route_nopull = DISABLED
Thu Apr 21 17:26:26 2016 us=896741   route_gateway_via_dhcp = DISABLED
Thu Apr 21 17:26:26 2016 us=896825   max_routes = 100
Thu Apr 21 17:26:26 2016 us=896907   allow_pull_fqdn = DISABLED
Thu Apr 21 17:26:26 2016 us=896991   route 10.0.1.0/255.255.255.0/nil/nil
Thu Apr 21 17:26:26 2016 us=897073   management_addr = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=897154   management_port = 0
Thu Apr 21 17:26:26 2016 us=897234   management_user_pass = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=897318   management_log_history_cache = 250
Thu Apr 21 17:26:26 2016 us=897398   management_echo_buffer_size = 100
Thu Apr 21 17:26:26 2016 us=897453   management_write_peer_info_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=897616   management_client_user = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=897729   management_client_group = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=897783   management_flags = 0
Thu Apr 21 17:26:26 2016 us=897862   shared_secret_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=897942   key_direction = 0
Thu Apr 21 17:26:26 2016 us=898023   ciphername_defined = ENABLED
Thu Apr 21 17:26:26 2016 us=898108   ciphername = 'AES-128-CBC'
Thu Apr 21 17:26:26 2016 us=898196   authname_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=898280   authname = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=898391   prng_hash = 'SHA1'
Thu Apr 21 17:26:26 2016 us=898448   prng_nonce_secret_len = 16
Thu Apr 21 17:26:26 2016 us=898642   keysize = 0
Thu Apr 21 17:26:26 2016 us=901711   engine = DISABLED
Thu Apr 21 17:26:26 2016 us=901809   replay = ENABLED
Thu Apr 21 17:26:26 2016 us=901918   mute_replay_warnings = DISABLED
Thu Apr 21 17:26:26 2016 us=902003   replay_window = 64
Thu Apr 21 17:26:26 2016 us=902087   replay_time = 15
Thu Apr 21 17:26:26 2016 us=902172   packet_id_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=902258   use_iv = ENABLED
Thu Apr 21 17:26:26 2016 us=902347   test_crypto = DISABLED
Thu Apr 21 17:26:26 2016 us=902429   tls_server = ENABLED
Thu Apr 21 17:26:26 2016 us=902509   tls_client = DISABLED
Thu Apr 21 17:26:26 2016 us=902843   key_method = 2
Thu Apr 21 17:26:26 2016 us=903123   ca_file = 'ca.crt'
Thu Apr 21 17:26:26 2016 us=903214   ca_path = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=903299   dh_file = 'dh1024.pem'
Thu Apr 21 17:26:26 2016 us=903385   cert_file = 'server.crt'
Thu Apr 21 17:26:26 2016 us=903496   extra_certs_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=903672   priv_key_file = 'server.key'
Thu Apr 21 17:26:26 2016 us=903789   pkcs12_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=903872   cipher_list = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=903955   tls_verify = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=904039   tls_export_cert = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=904125   verify_x509_type = 0
Thu Apr 21 17:26:26 2016 us=904206   verify_x509_name = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=904287   crl_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=904369   ns_cert_type = 0
Thu Apr 21 17:26:26 2016 us=904451   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=904506   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=904706   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=904788   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=904868   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=904948   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=905002   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=905082   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=905169   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=905278   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=905334   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=905413   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=905492   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=909887   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=910011   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=910099   remote_cert_ku[i] = 0
Thu Apr 21 17:26:26 2016 us=910186   remote_cert_eku = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=910295   ssl_flags = 0
Thu Apr 21 17:26:26 2016 us=910379   tls_timeout = 2
Thu Apr 21 17:26:26 2016 us=910461   renegotiate_bytes = 0
Thu Apr 21 17:26:26 2016 us=910630   renegotiate_packets = 0
Thu Apr 21 17:26:26 2016 us=910725   renegotiate_seconds = 3600
Thu Apr 21 17:26:26 2016 us=910806   handshake_window = 60
Thu Apr 21 17:26:26 2016 us=910933   transition_window = 3600
Thu Apr 21 17:26:26 2016 us=911045   single_session = DISABLED
Thu Apr 21 17:26:26 2016 us=911126   push_peer_info = DISABLED
Thu Apr 21 17:26:26 2016 us=911182   tls_exit = DISABLED
Thu Apr 21 17:26:26 2016 us=911263   tls_auth_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=911381   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=911471   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=911720   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=911843   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=916772   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=917017   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=917149   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=917276   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=917397   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=917520   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=917930   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=918055   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=918180   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=918305   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=918432   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=918684   pkcs11_protected_authentication = DISABLED
Thu Apr 21 17:26:26 2016 us=919011   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=919139   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=919262   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=919386   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=924820   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=924986   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=925108   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=925199   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=925317   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=925436   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=925528   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=925858   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=925980   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=926102   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=926226   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=926349   pkcs11_private_mode = 00000000
Thu Apr 21 17:26:26 2016 us=926475   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=926730   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=926971   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=927100   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=927223   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=927345   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=927852   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=927970   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=928091   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=928183   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=928304   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=928426   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=928641   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=928807   pkcs11_cert_private = DISABLED
Thu Apr 21 17:26:26 2016 us=928931   pkcs11_pin_cache_period = -1
Thu Apr 21 17:26:26 2016 us=929054   pkcs11_id = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=929176   pkcs11_id_management = DISABLED
Thu Apr 21 17:26:26 2016 us=929304   server_network = 10.0.1.0
Thu Apr 21 17:26:26 2016 us=929430   server_netmask = 255.255.255.0
Thu Apr 21 17:26:26 2016 us=929846   server_network_ipv6 = ::
Thu Apr 21 17:26:26 2016 us=930012   server_netbits_ipv6 = 0
Thu Apr 21 17:26:26 2016 us=930168   server_bridge_ip = 0.0.0.0
Thu Apr 21 17:26:26 2016 us=933989   server_bridge_netmask = 0.0.0.0
Thu Apr 21 17:26:26 2016 us=934195   server_bridge_pool_start = 0.0.0.0
Thu Apr 21 17:26:26 2016 us=934364   server_bridge_pool_end = 0.0.0.0
Thu Apr 21 17:26:26 2016 us=934532   push_entry = 'dhcp-option DNS 8.8.8.8'
Thu Apr 21 17:26:26 2016 us=935022   push_entry = 'dhcp-option DNS 8.8.4.4'
Thu Apr 21 17:26:26 2016 us=935192   push_entry = 'route 10.0.1.1'
Thu Apr 21 17:26:26 2016 us=935355   push_entry = 'topology net30'
Thu Apr 21 17:26:26 2016 us=935481   push_entry = 'ping 10'
Thu Apr 21 17:26:26 2016 us=935820   push_entry = 'ping-restart 120'
Thu Apr 21 17:26:26 2016 us=936024   ifconfig_pool_defined = ENABLED
Thu Apr 21 17:26:26 2016 us=936189   ifconfig_pool_start = 10.0.1.4
Thu Apr 21 17:26:26 2016 us=936352   ifconfig_pool_end = 10.0.1.251
Thu Apr 21 17:26:26 2016 us=936480   ifconfig_pool_netmask = 0.0.0.0
Thu Apr 21 17:26:26 2016 us=940918   ifconfig_pool_persist_filename = 'ipp.txt'
Thu Apr 21 17:26:26 2016 us=941084   ifconfig_pool_persist_refresh_freq = 600
Thu Apr 21 17:26:26 2016 us=941496   ifconfig_ipv6_pool_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=941787   ifconfig_ipv6_pool_base = ::
Thu Apr 21 17:26:26 2016 us=941919   ifconfig_ipv6_pool_netbits = 0
Thu Apr 21 17:26:26 2016 us=942042   n_bcast_buf = 256
Thu Apr 21 17:26:26 2016 us=942167   tcp_queue_limit = 64
Thu Apr 21 17:26:26 2016 us=945810   real_hash_size = 256
Thu Apr 21 17:26:26 2016 us=946020   virtual_hash_size = 256
Thu Apr 21 17:26:26 2016 us=946185   client_connect_script = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=946351   learn_address_script = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=946518   client_disconnect_script = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=947138   client_config_dir = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=947305   ccd_exclusive = DISABLED
Thu Apr 21 17:26:26 2016 us=947434   tmp_dir = '/tmp'
Thu Apr 21 17:26:26 2016 us=947761   push_ifconfig_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=947930   push_ifconfig_local = 0.0.0.0
Thu Apr 21 17:26:26 2016 us=948091   push_ifconfig_remote_netmask = 0.0.0.0
Thu Apr 21 17:26:26 2016 us=948218   push_ifconfig_ipv6_defined = DISABLED
Thu Apr 21 17:26:26 2016 us=948347   push_ifconfig_ipv6_local = ::/0
Thu Apr 21 17:26:26 2016 us=948506   push_ifconfig_ipv6_remote = ::
Thu Apr 21 17:26:26 2016 us=952327   enable_c2c = DISABLED
Thu Apr 21 17:26:26 2016 us=952781   duplicate_cn = DISABLED
Thu Apr 21 17:26:26 2016 us=952988   cf_max = 0
Thu Apr 21 17:26:26 2016 us=953117   cf_per = 0
Thu Apr 21 17:26:26 2016 us=953277   max_clients = 1024
Thu Apr 21 17:26:26 2016 us=953403   max_routes_per_client = 256
Thu Apr 21 17:26:26 2016 us=953530   auth_user_pass_verify_script = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=953941   auth_user_pass_verify_script_via_file = DISABLED
Thu Apr 21 17:26:26 2016 us=954106   port_share_host = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=954239   port_share_port = 0
Thu Apr 21 17:26:26 2016 us=954437   client = DISABLED
Thu Apr 21 17:26:26 2016 us=954737   pull = DISABLED
Thu Apr 21 17:26:26 2016 us=955061   auth_user_pass_file = '[UNDEF]'
Thu Apr 21 17:26:26 2016 us=955358 OpenVPN 2.3.10 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan  4 2016
Thu Apr 21 17:26:26 2016 us=960043 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.03
Thu Apr 21 17:26:27 2016 us=119802 Diffie-Hellman initialized with 1024 bit key
Thu Apr 21 17:26:27 2016 us=155149 ******* WARNING *******: null MAC specified, no authentication will be used
Thu Apr 21 17:26:27 2016 us=159385 TLS-Auth MTU parms [ L:1538 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Apr 21 17:26:27 2016 us=160458 Socket Buffers: R=[124928->124928] S=[124928->124928]
Thu Apr 21 17:26:27 2016 us=172376 ROUTE_GATEWAY SSS.SSS.SSS.1/255.255.240.0 IFACE=eth0 HWADDR=04:01:bb:59:73:01
Thu Apr 21 17:26:27 2016 us=265978 TUN/TAP device tun0 opened
Thu Apr 21 17:26:27 2016 us=266521 TUN/TAP TX queue length set to 100
Thu Apr 21 17:26:27 2016 us=267146 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Apr 21 17:26:27 2016 us=277853 /sbin/ip link set dev tun0 up mtu 1500
Thu Apr 21 17:26:27 2016 us=364144 /sbin/ip addr add dev tun0 local 10.0.1.1 peer 10.0.1.2
Thu Apr 21 17:26:27 2016 us=425671 /sbin/ip route add 10.0.1.0/24 via 10.0.1.2
Thu Apr 21 17:26:27 2016 us=482177 Data Channel MTU parms [ L:1538 D:1450 EF:38 EB:143 ET:0 EL:3 AF:3/1 ]
Thu Apr 21 17:26:27 2016 us=621954 GID set to nobody
Thu Apr 21 17:26:27 2016 us=633941 UID set to nobody
Thu Apr 21 17:26:27 2016 us=634398 UDPv4 link local (bound): [undef]
Thu Apr 21 17:26:27 2016 us=634811 UDPv4 link remote: [undef]
Thu Apr 21 17:26:27 2016 us=635308 MULTI: multi_init called, r=256 v=256
Thu Apr 21 17:26:27 2016 us=640127 IFCONFIG POOL: base=10.0.1.4 size=62, ipv6=0
Thu Apr 21 17:26:27 2016 us=640957 ifconfig_pool_read(), in='client,10.0.1.4', TODO: IPv6
Thu Apr 21 17:26:27 2016 us=644478 succeeded -> ifconfig_pool_set()
Thu Apr 21 17:26:27 2016 us=644937 IFCONFIG POOL LIST
Thu Apr 21 17:26:27 2016 us=645184 client,10.0.1.4
Thu Apr 21 17:26:27 2016 us=652983 Initialization Sequence Completed

AAA.AAA.AAA.AAA is local WAN IP, SSS.SSS.SSS.SSS is server WAN IP.