Hi all I'm having troubles setting up my OpenVPN server und ubuntu 16.04. I want to redirect the client (Windows 10) traffic and access my LAN from a remote location. The connection works but no gateway is assigned on the client. I cannot ping PCs in the local LAN and the client's internet conneciton is not working. My local LAN is 10.80.1.0 with subnet mask 255.255.255.0 The PC that runs the OpenVPN server has the local IP 10.80.1.204 I have used the default subnet for the vpn server: 10.8.0.0 with subnet mask 255.255.255.0 My [b]server config[/b] looks like this: [code]port 1194 proto udp dev tun ca ./easy-rsa2/keys/ca.crt cert ./easy-rsa2/keys/server.crt key ./easy-rsa2/keys/server.key dh ./easy-rsa2/keys/dh2048.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 10.80.1.0 255.255.255.0" push "redirect-gateway def1 bypass-dhcp" client-to-client keepalive 10 120 comp-lzo user nobody group nogroup status openvpn-status.log verb 3[/code] My [b]client config[/b] looks like this: [code]client dev tun proto udp remote [server public ip] 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert client1.crt key client1.key remote-cert-tls server comp-lzo verb 3[/code] Also i have edited the following files on my server: [b]/etc/rc.local[/b] [code]route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.80.1.204 iptables -A FORWARD -o eth0 -i tun0 -s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE[/code] [b]/etc/eysctl.conf[/b] [code]net.ipv4.ip_forward=1[/code] On my windows 10 client, running [b]ipconfig[/b] gives: [code] Ethernet-Adapter Ethernet 2: Verbindungsspezifisches DNS-Suffix: Verbindungslokale IPv6-Adresse . : fe80::9da3:284d:5870:d5fd%3 IPv4-Adresse . . . . . . . . . . : 10.8.0.6 Subnetzmaske . . . . . . . . . . : 255.255.255.252 Standardgateway . . . . . . . . . :[/code] Thank you for your help!

I'm wondering why you need to mention your 10.80.1.0/24 LAN at all. Does it work if you comment out your statement: [code]push "route 10.80.1.0 255.255.255.0"?[/code] I agree with TinCanTech that your iptables stuff can be vastly simplified. I got mine down to just one line: [url]https://thefrugalnondualist.wordpress.com/2016/08/13/installing-openvpn-on-a-nat-ipv4-vps[/url] Also, for Windows clients, consider adding: [code]push "dhcp-option DNS 208.67.222.222" push "dhcp-option DNS 208.67.220.220"[/code]

no gateway / no access to local lan

niam

Hi all

I'm having troubles setting up my OpenVPN server und ubuntu 16.04.
I want to redirect the client (Windows 10) traffic and access my LAN from a remote location.

The connection works but no gateway is assigned on the client. I cannot ping PCs in the local LAN and the client's internet conneciton is not working.

My local LAN is 10.80.1.0 with subnet mask 255.255.255.0
The PC that runs the OpenVPN server has the local IP 10.80.1.204
I have used the default subnet for the vpn server: 10.8.0.0 with subnet mask 255.255.255.0

My server config looks like this:

port 1194
proto udp
dev tun
ca ./easy-rsa2/keys/ca.crt
cert ./easy-rsa2/keys/server.crt
key ./easy-rsa2/keys/server.key
dh ./easy-rsa2/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.80.1.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nogroup
status openvpn-status.log
verb 3

My client config looks like this:

client
dev tun
proto udp
remote [server public ip] 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
comp-lzo
verb 3

Also i have edited the following files on my server:
/etc/rc.local

route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.80.1.204
iptables -A FORWARD -o eth0 -i tun0 -s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

/etc/eysctl.conf

net.ipv4.ip_forward=1

On my windows 10 client, running ipconfig gives:

Ethernet-Adapter Ethernet 2:

   Verbindungsspezifisches DNS-Suffix:
   Verbindungslokale IPv6-Adresse  . : fe80::9da3:284d:5870:d5fd%3
   IPv4-Adresse  . . . . . . . . . . : 10.8.0.6
   Subnetzmaske  . . . . . . . . . . : 255.255.255.252
   Standardgateway . . . . . . . . . :

Thank you for your help!

TinCanTech

niam wrote

route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.80.1.204
iptables -A FORWARD -o eth0 -i tun0 -s 10.8.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Replace all of the above with:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

This assumes eth0 is the name assigned to your ethernet.

niam

thank you, but unfortunately the client still does not have a gateway and the correct subnet mask.

TinCanTech

Please post your server and client log @ verb 4 (remove public ip addresses)

niam

Hello,
very sorry for the delay. Here are the log files:
Server:

Sun Aug  7 21:28:15 2016 us=52108 Current Parameter Settings:
Sun Aug  7 21:28:15 2016 us=52149   config = '/etc/openvpn/server.conf'
Sun Aug  7 21:28:15 2016 us=52157   mode = 1
Sun Aug  7 21:28:15 2016 us=52163   persist_config = DISABLED
Sun Aug  7 21:28:15 2016 us=52168   persist_mode = 1
Sun Aug  7 21:28:15 2016 us=52172   show_ciphers = DISABLED
Sun Aug  7 21:28:15 2016 us=52177   show_digests = DISABLED
Sun Aug  7 21:28:15 2016 us=52181   show_engines = DISABLED
Sun Aug  7 21:28:15 2016 us=52186   genkey = DISABLED
Sun Aug  7 21:28:15 2016 us=52191   key_pass_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52195   show_tls_ciphers = DISABLED
Sun Aug  7 21:28:15 2016 us=52200 Connection profiles [default]:
Sun Aug  7 21:28:15 2016 us=52205   proto = udp
Sun Aug  7 21:28:15 2016 us=52210   local = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52215   local_port = 1194
Sun Aug  7 21:28:15 2016 us=52220   remote = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52224   remote_port = 1194
Sun Aug  7 21:28:15 2016 us=52229   remote_float = DISABLED
Sun Aug  7 21:28:15 2016 us=52234   bind_defined = DISABLED
Sun Aug  7 21:28:15 2016 us=52238   bind_local = ENABLED
Sun Aug  7 21:28:15 2016 us=52243   connect_retry_seconds = 5
Sun Aug  7 21:28:15 2016 us=52247   connect_timeout = 10
Sun Aug  7 21:28:15 2016 us=52252   connect_retry_max = 0
Sun Aug  7 21:28:15 2016 us=52257   socks_proxy_server = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52261   socks_proxy_port = 0
Sun Aug  7 21:28:15 2016 us=52266   socks_proxy_retry = DISABLED
Sun Aug  7 21:28:15 2016 us=52270   tun_mtu = 1500
Sun Aug  7 21:28:15 2016 us=52275   tun_mtu_defined = ENABLED
Sun Aug  7 21:28:15 2016 us=52279   link_mtu = 1500
Sun Aug  7 21:28:15 2016 us=52284   link_mtu_defined = DISABLED
Sun Aug  7 21:28:15 2016 us=52288   tun_mtu_extra = 0
Sun Aug  7 21:28:15 2016 us=52293   tun_mtu_extra_defined = DISABLED
Sun Aug  7 21:28:15 2016 us=52298   mtu_discover_type = -1
Sun Aug  7 21:28:15 2016 us=52302   fragment = 0
Sun Aug  7 21:28:15 2016 us=52307   mssfix = 1450
Sun Aug  7 21:28:15 2016 us=52311   explicit_exit_notification = 0
Sun Aug  7 21:28:15 2016 us=52316 Connection profiles END
Sun Aug  7 21:28:15 2016 us=52321   remote_random = DISABLED
Sun Aug  7 21:28:15 2016 us=52325   ipchange = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52330   dev = 'tun'
Sun Aug  7 21:28:15 2016 us=52334   dev_type = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52339   dev_node = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52343   lladdr = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52348   topology = 1
Sun Aug  7 21:28:15 2016 us=52352   tun_ipv6 = DISABLED
Sun Aug  7 21:28:15 2016 us=52357   ifconfig_local = '10.8.0.1'
Sun Aug  7 21:28:15 2016 us=52362   ifconfig_remote_netmask = '10.8.0.2'
Sun Aug  7 21:28:15 2016 us=52366   ifconfig_noexec = DISABLED
Sun Aug  7 21:28:15 2016 us=52371   ifconfig_nowarn = DISABLED
Sun Aug  7 21:28:15 2016 us=52376   ifconfig_ipv6_local = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52380   ifconfig_ipv6_netbits = 0
Sun Aug  7 21:28:15 2016 us=52385   ifconfig_ipv6_remote = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52390   shaper = 0
Sun Aug  7 21:28:15 2016 us=52394   mtu_test = 0
Sun Aug  7 21:28:15 2016 us=52399   mlock = DISABLED
Sun Aug  7 21:28:15 2016 us=52403   keepalive_ping = 10
Sun Aug  7 21:28:15 2016 us=52408   keepalive_timeout = 120
Sun Aug  7 21:28:15 2016 us=52412   inactivity_timeout = 0
Sun Aug  7 21:28:15 2016 us=52417   ping_send_timeout = 10
Sun Aug  7 21:28:15 2016 us=52421   ping_rec_timeout = 240
Sun Aug  7 21:28:15 2016 us=52426   ping_rec_timeout_action = 2
Sun Aug  7 21:28:15 2016 us=52431   ping_timer_remote = DISABLED
Sun Aug  7 21:28:15 2016 us=52435   remap_sigusr1 = 0
Sun Aug  7 21:28:15 2016 us=52440   persist_tun = ENABLED
Sun Aug  7 21:28:15 2016 us=52444   persist_local_ip = DISABLED
Sun Aug  7 21:28:15 2016 us=52449   persist_remote_ip = DISABLED
Sun Aug  7 21:28:15 2016 us=52453   persist_key = ENABLED
Sun Aug  7 21:28:15 2016 us=52458   passtos = DISABLED
Sun Aug  7 21:28:15 2016 us=52462   resolve_retry_seconds = 1000000000
Sun Aug  7 21:28:15 2016 us=52467   username = 'nobody'
Sun Aug  7 21:28:15 2016 us=52476   groupname = 'nogroup'
Sun Aug  7 21:28:15 2016 us=52481   chroot_dir = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52485   cd_dir = '/etc/openvpn'
Sun Aug  7 21:28:15 2016 us=52490   writepid = '/run/openvpn/server.pid'
Sun Aug  7 21:28:15 2016 us=52495   up_script = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52499   down_script = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52504   down_pre = DISABLED
Sun Aug  7 21:28:15 2016 us=52508   up_restart = DISABLED
Sun Aug  7 21:28:15 2016 us=52513   up_delay = DISABLED
Sun Aug  7 21:28:15 2016 us=52517   daemon = ENABLED
Sun Aug  7 21:28:15 2016 us=52522   inetd = 0
Sun Aug  7 21:28:15 2016 us=52526   log = ENABLED
Sun Aug  7 21:28:15 2016 us=52531   suppress_timestamps = DISABLED
Sun Aug  7 21:28:15 2016 us=52535   nice = 0
Sun Aug  7 21:28:15 2016 us=52540   verbosity = 4
Sun Aug  7 21:28:15 2016 us=52544   mute = 0
Sun Aug  7 21:28:15 2016 us=52549   gremlin = 0
Sun Aug  7 21:28:15 2016 us=52554   status_file = 'openvpn-status.log'
Sun Aug  7 21:28:15 2016 us=52560   status_file_version = 1
Sun Aug  7 21:28:15 2016 us=52565   status_file_update_freq = 10
Sun Aug  7 21:28:15 2016 us=52569   occ = ENABLED
Sun Aug  7 21:28:15 2016 us=52574   rcvbuf = 0
Sun Aug  7 21:28:15 2016 us=52579   sndbuf = 0
Sun Aug  7 21:28:15 2016 us=52583   mark = 0
Sun Aug  7 21:28:15 2016 us=52588   sockflags = 0
Sun Aug  7 21:28:15 2016 us=52592   fast_io = DISABLED
Sun Aug  7 21:28:15 2016 us=52597   lzo = 7
Sun Aug  7 21:28:15 2016 us=52601   route_script = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52606   route_default_gateway = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52611   route_default_metric = 0
Sun Aug  7 21:28:15 2016 us=52616   route_noexec = DISABLED
Sun Aug  7 21:28:15 2016 us=52620   route_delay = 0
Sun Aug  7 21:28:15 2016 us=52625   route_delay_window = 30
Sun Aug  7 21:28:15 2016 us=52630   route_delay_defined = DISABLED
Sun Aug  7 21:28:15 2016 us=52634   route_nopull = DISABLED
Sun Aug  7 21:28:15 2016 us=52639   route_gateway_via_dhcp = DISABLED
Sun Aug  7 21:28:15 2016 us=52644   max_routes = 100
Sun Aug  7 21:28:15 2016 us=52648   allow_pull_fqdn = DISABLED
Sun Aug  7 21:28:15 2016 us=52654   route 10.8.0.0/255.255.255.0/nil/nil
Sun Aug  7 21:28:15 2016 us=52659   management_addr = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52663   management_port = 0
Sun Aug  7 21:28:15 2016 us=52668   management_user_pass = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52672   management_log_history_cache = 250
Sun Aug  7 21:28:15 2016 us=52677   management_echo_buffer_size = 100
Sun Aug  7 21:28:15 2016 us=52682   management_write_peer_info_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52687   management_client_user = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52692   management_client_group = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52696   management_flags = 0
Sun Aug  7 21:28:15 2016 us=52701   shared_secret_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52706   key_direction = 0
Sun Aug  7 21:28:15 2016 us=52711   ciphername_defined = ENABLED
Sun Aug  7 21:28:15 2016 us=52715   ciphername = 'BF-CBC'
Sun Aug  7 21:28:15 2016 us=52720   authname_defined = ENABLED
Sun Aug  7 21:28:15 2016 us=52725   authname = 'SHA1'
Sun Aug  7 21:28:15 2016 us=52730   prng_hash = 'SHA1'
Sun Aug  7 21:28:15 2016 us=52734   prng_nonce_secret_len = 16
Sun Aug  7 21:28:15 2016 us=52739   keysize = 0
Sun Aug  7 21:28:15 2016 us=52744   engine = DISABLED
Sun Aug  7 21:28:15 2016 us=52748   replay = ENABLED
Sun Aug  7 21:28:15 2016 us=52753   mute_replay_warnings = DISABLED
Sun Aug  7 21:28:15 2016 us=52758   replay_window = 64
Sun Aug  7 21:28:15 2016 us=52763   replay_time = 15
Sun Aug  7 21:28:15 2016 us=52768   packet_id_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52773   use_iv = ENABLED
Sun Aug  7 21:28:15 2016 us=52778   test_crypto = DISABLED
Sun Aug  7 21:28:15 2016 us=52782   tls_server = ENABLED
Sun Aug  7 21:28:15 2016 us=52787   tls_client = DISABLED
Sun Aug  7 21:28:15 2016 us=52791   key_method = 2
Sun Aug  7 21:28:15 2016 us=52796   ca_file = './easy-rsa2/keys/ca.crt'
Sun Aug  7 21:28:15 2016 us=52801   ca_path = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52809   dh_file = './easy-rsa2/keys/dh2048.pem'
Sun Aug  7 21:28:15 2016 us=52814   cert_file = './easy-rsa2/keys/server.crt'
Sun Aug  7 21:28:15 2016 us=52819   extra_certs_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52824   priv_key_file = './easy-rsa2/keys/server.key'
Sun Aug  7 21:28:15 2016 us=52829   pkcs12_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52833   cipher_list = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52838   tls_verify = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52842   tls_export_cert = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52847   verify_x509_type = 0
Sun Aug  7 21:28:15 2016 us=52852   verify_x509_name = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52856   crl_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52861   ns_cert_type = 0
Sun Aug  7 21:28:15 2016 us=52866   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52870   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52875   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52879   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52884   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52888   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52893   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52897   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52902   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52906   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52911   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52915   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52919   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52924   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52928   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52933   remote_cert_ku[i] = 0
Sun Aug  7 21:28:15 2016 us=52938   remote_cert_eku = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52942   ssl_flags = 0
Sun Aug  7 21:28:15 2016 us=52947   tls_timeout = 2
Sun Aug  7 21:28:15 2016 us=52951   renegotiate_bytes = 0
Sun Aug  7 21:28:15 2016 us=52956   renegotiate_packets = 0
Sun Aug  7 21:28:15 2016 us=52961   renegotiate_seconds = 3600
Sun Aug  7 21:28:15 2016 us=52965   handshake_window = 60
Sun Aug  7 21:28:15 2016 us=52970   transition_window = 3600
Sun Aug  7 21:28:15 2016 us=52974   single_session = DISABLED
Sun Aug  7 21:28:15 2016 us=52979   push_peer_info = DISABLED
Sun Aug  7 21:28:15 2016 us=52984   tls_exit = DISABLED
Sun Aug  7 21:28:15 2016 us=52988   tls_auth_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=52993   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=52998   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53003   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53007   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53012   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53016   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53021   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53025   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53030   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53035   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53039   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53044   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53048   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53053   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53057   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53062   pkcs11_protected_authentication = DISABLED
Sun Aug  7 21:28:15 2016 us=53067   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53072   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53076   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53081   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53085   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53090   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53097   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53102   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53107   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53112   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53116   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53121   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53126   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53131   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53136   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53140   pkcs11_private_mode = 00000000
Sun Aug  7 21:28:15 2016 us=53145   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53150   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53155   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53159   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53164   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53168   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53173   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53177   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53182   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53186   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53191   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53195   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53199   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53204   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53209   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53213   pkcs11_cert_private = DISABLED
Sun Aug  7 21:28:15 2016 us=53218   pkcs11_pin_cache_period = -1
Sun Aug  7 21:28:15 2016 us=53223   pkcs11_id = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53228   pkcs11_id_management = DISABLED
Sun Aug  7 21:28:15 2016 us=53234   server_network = 10.8.0.0
Sun Aug  7 21:28:15 2016 us=53239   server_netmask = 255.255.255.0
Sun Aug  7 21:28:15 2016 us=53246   server_network_ipv6 = ::
Sun Aug  7 21:28:15 2016 us=53251   server_netbits_ipv6 = 0
Sun Aug  7 21:28:15 2016 us=53256   server_bridge_ip = 0.0.0.0
Sun Aug  7 21:28:15 2016 us=53261   server_bridge_netmask = 0.0.0.0
Sun Aug  7 21:28:15 2016 us=53267   server_bridge_pool_start = 0.0.0.0
Sun Aug  7 21:28:15 2016 us=53272   server_bridge_pool_end = 0.0.0.0
Sun Aug  7 21:28:15 2016 us=53277   push_entry = 'route 10.80.1.0 255.255.255.0'
Sun Aug  7 21:28:15 2016 us=53282   push_entry = 'redirect-gateway def1 bypass-dhcp'
Sun Aug  7 21:28:15 2016 us=53287   push_entry = 'route 10.8.0.0 255.255.255.0'
Sun Aug  7 21:28:15 2016 us=53292   push_entry = 'topology net30'
Sun Aug  7 21:28:15 2016 us=53297   push_entry = 'ping 10'
Sun Aug  7 21:28:15 2016 us=53301   push_entry = 'ping-restart 120'
Sun Aug  7 21:28:15 2016 us=53307   ifconfig_pool_defined = ENABLED
Sun Aug  7 21:28:15 2016 us=53312   ifconfig_pool_start = 10.8.0.4
Sun Aug  7 21:28:15 2016 us=53319   ifconfig_pool_end = 10.8.0.251
Sun Aug  7 21:28:15 2016 us=53326   ifconfig_pool_netmask = 0.0.0.0
Sun Aug  7 21:28:15 2016 us=53331   ifconfig_pool_persist_filename = 'ipp.txt'
Sun Aug  7 21:28:15 2016 us=53336   ifconfig_pool_persist_refresh_freq = 600
Sun Aug  7 21:28:15 2016 us=53341   ifconfig_ipv6_pool_defined = DISABLED
Sun Aug  7 21:28:15 2016 us=53347   ifconfig_ipv6_pool_base = ::
Sun Aug  7 21:28:15 2016 us=53352   ifconfig_ipv6_pool_netbits = 0
Sun Aug  7 21:28:15 2016 us=53356   n_bcast_buf = 256
Sun Aug  7 21:28:15 2016 us=53361   tcp_queue_limit = 64
Sun Aug  7 21:28:15 2016 us=53366   real_hash_size = 256
Sun Aug  7 21:28:15 2016 us=53371   virtual_hash_size = 256
Sun Aug  7 21:28:15 2016 us=53376   client_connect_script = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53381   learn_address_script = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53386   client_disconnect_script = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53390   client_config_dir = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53395   ccd_exclusive = DISABLED
Sun Aug  7 21:28:15 2016 us=53404   tmp_dir = '/tmp'
Sun Aug  7 21:28:15 2016 us=53409   push_ifconfig_defined = DISABLED
Sun Aug  7 21:28:15 2016 us=53414   push_ifconfig_local = 0.0.0.0
Sun Aug  7 21:28:15 2016 us=53420   push_ifconfig_remote_netmask = 0.0.0.0
Sun Aug  7 21:28:15 2016 us=53425   push_ifconfig_ipv6_defined = DISABLED
Sun Aug  7 21:28:15 2016 us=53432   push_ifconfig_ipv6_local = ::/0
Sun Aug  7 21:28:15 2016 us=53437   push_ifconfig_ipv6_remote = ::
Sun Aug  7 21:28:15 2016 us=53442   enable_c2c = ENABLED
Sun Aug  7 21:28:15 2016 us=53447   duplicate_cn = DISABLED
Sun Aug  7 21:28:15 2016 us=53452   cf_max = 0
Sun Aug  7 21:28:15 2016 us=53456   cf_per = 0
Sun Aug  7 21:28:15 2016 us=53461   max_clients = 1024
Sun Aug  7 21:28:15 2016 us=53466   max_routes_per_client = 256
Sun Aug  7 21:28:15 2016 us=53470   auth_user_pass_verify_script = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53475   auth_user_pass_verify_script_via_file = DISABLED
Sun Aug  7 21:28:15 2016 us=53480   port_share_host = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53485   port_share_port = 0
Sun Aug  7 21:28:15 2016 us=53489   client = DISABLED
Sun Aug  7 21:28:15 2016 us=53494   pull = DISABLED
Sun Aug  7 21:28:15 2016 us=53499   auth_user_pass_file = '[UNDEF]'
Sun Aug  7 21:28:15 2016 us=53506 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb  2 2016
Sun Aug  7 21:28:15 2016 us=53514 library versions: OpenSSL 1.0.2g-fips  1 Mar 2016, LZO 2.08
Sun Aug  7 21:28:15 2016 us=54529 Diffie-Hellman initialized with 2048 bit key
Sun Aug  7 21:28:15 2016 us=54806 WARNING: file './easy-rsa2/keys/server.key' is group or others accessible
Sun Aug  7 21:28:15 2016 us=55026 TLS-Auth MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Aug  7 21:28:15 2016 us=55047 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun Aug  7 21:28:15 2016 us=55151 ROUTE_GATEWAY 10.80.1.1/255.255.255.0 IFACE=enp3s0 HWADDR=40:8d:5c:5a:8a:4f
Sun Aug  7 21:28:15 2016 us=56030 TUN/TAP device tun0 opened
Sun Aug  7 21:28:15 2016 us=56065 TUN/TAP TX queue length set to 100
Sun Aug  7 21:28:15 2016 us=56083 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Aug  7 21:28:15 2016 us=56108 /sbin/ip link set dev tun0 up mtu 1500
Sun Aug  7 21:28:15 2016 us=57318 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Aug  7 21:28:15 2016 us=58574 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Aug  7 21:28:15 2016 us=59637 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Sun Aug  7 21:28:15 2016 us=60158 GID set to nogroup
Sun Aug  7 21:28:15 2016 us=60183 UID set to nobody
Sun Aug  7 21:28:15 2016 us=60196 UDPv4 link local (bound): [undef]
Sun Aug  7 21:28:15 2016 us=60205 UDPv4 link remote: [undef]
Sun Aug  7 21:28:15 2016 us=60218 MULTI: multi_init called, r=256 v=256
Sun Aug  7 21:28:15 2016 us=60249 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Aug  7 21:28:15 2016 us=60266 ifconfig_pool_read(), in='[client_name],10.8.0.4', TODO: IPv6
Sun Aug  7 21:28:15 2016 us=60277 succeeded -> ifconfig_pool_set()
Sun Aug  7 21:28:15 2016 us=60286 IFCONFIG POOL LIST
Sun Aug  7 21:28:15 2016 us=60296 [client_name],10.8.0.4
Sun Aug  7 21:28:15 2016 us=60323 Initialization Sequence Completed
Sun Aug  7 21:28:27 2016 us=470875 MULTI: multi_create_instance called
Sun Aug  7 21:28:27 2016 us=471011 [client_public_ip]:53420 Re-using SSL/TLS context
Sun Aug  7 21:28:27 2016 us=471062 [client_public_ip]:53420 LZO compression initialized
Sun Aug  7 21:28:27 2016 us=471214 [client_public_ip]:53420 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Aug  7 21:28:27 2016 us=471238 [client_public_ip]:53420 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Sun Aug  7 21:28:27 2016 us=471281 [client_public_ip]:53420 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Aug  7 21:28:27 2016 us=471342 [client_public_ip]:53420 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Aug  7 21:28:27 2016 us=471391 [client_public_ip]:53420 Local Options hash (VER=V4): '530fdded'
Sun Aug  7 21:28:27 2016 us=471416 [client_public_ip]:53420 Expected Remote Options hash (VER=V4): '41690919'
Sun Aug  7 21:28:27 2016 us=471465 [client_public_ip]:53420 TLS: Initial packet from [AF_INET][client_public_ip]:53420, sid=2918b515 e510536a
Sun Aug  7 21:28:27 2016 us=493956 [client_public_ip]:53420 VERIFY OK: depth=1, C=xyz, ST=xyz, L=xyz, O=xyz, OU=xyz, CN=xyz, name=xyz, emailAddress=xyz
Sun Aug  7 21:28:27 2016 us=494065 [client_public_ip]:53420 VERIFY OK: depth=0, C=xyz, ST=xyz, L=xyz, O=xyz, OU=xyz, CN=xyz, name=xyz, emailAddress=xyz
Sun Aug  7 21:28:27 2016 us=498694 [client_public_ip]:53420 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug  7 21:28:27 2016 us=498719 [client_public_ip]:53420 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug  7 21:28:27 2016 us=498762 [client_public_ip]:53420 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug  7 21:28:27 2016 us=498771 [client_public_ip]:53420 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug  7 21:28:27 2016 us=499768 [client_public_ip]:53420 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun Aug  7 21:28:27 2016 us=499803 [client_public_ip]:53420 [[client_name]] Peer Connection Initiated with [AF_INET][client_public_ip]:53420
Sun Aug  7 21:28:27 2016 us=499819 [client_name]/[client_public_ip]:53420 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Aug  7 21:28:27 2016 us=499840 [client_name]/[client_public_ip]:53420 MULTI: Learn: 10.8.0.6 -> [client_name]/[client_public_ip]:53420
Sun Aug  7 21:28:27 2016 us=499845 [client_name]/[client_public_ip]:53420 MULTI: primary virtual IP for [client_name]/[client_public_ip]:53420: 10.8.0.6
Sun Aug  7 21:28:29 2016 us=649115 [client_name]/[client_public_ip]:53420 PUSH: Received control message: 'PUSH_REQUEST'
Sun Aug  7 21:28:29 2016 us=649179 [client_name]/[client_public_ip]:53420 send_push_reply(): safe_cap=940
Sun Aug  7 21:28:29 2016 us=649221 [client_name]/[client_public_ip]:53420 SENT CONTROL [[client_name]]: 'PUSH_REPLY,route 10.80.1.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Sun Aug  7 21:28:29 2016 us=834112 [client_name]/[client_public_ip]:53420 MULTI: bad source address from client [::], packet dropped

Client:

Sun Aug 07 21:28:26 2016 us=36882 Current Parameter Settings:
Sun Aug 07 21:28:26 2016 us=36882   config = 'client_name.ovpn'
Sun Aug 07 21:28:26 2016 us=36882   mode = 0
Sun Aug 07 21:28:26 2016 us=36882   show_ciphers = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   show_digests = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   show_engines = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   genkey = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   key_pass_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   show_tls_ciphers = DISABLED
Sun Aug 07 21:28:26 2016 us=36882 Connection profiles [default]:
Sun Aug 07 21:28:26 2016 us=36882   proto = udp
Sun Aug 07 21:28:26 2016 us=36882   local = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   local_port = 0
Sun Aug 07 21:28:26 2016 us=36882   remote = '[server_public_ip]'
Sun Aug 07 21:28:26 2016 us=36882   remote_port = 1194
Sun Aug 07 21:28:26 2016 us=36882   remote_float = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   bind_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   bind_local = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   connect_retry_seconds = 5
Sun Aug 07 21:28:26 2016 us=36882   connect_timeout = 10
Sun Aug 07 21:28:26 2016 us=36882   connect_retry_max = 0
Sun Aug 07 21:28:26 2016 us=36882   socks_proxy_server = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   socks_proxy_port = 0
Sun Aug 07 21:28:26 2016 us=36882   socks_proxy_retry = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   tun_mtu = 1500
Sun Aug 07 21:28:26 2016 us=36882   tun_mtu_defined = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   link_mtu = 1500
Sun Aug 07 21:28:26 2016 us=36882   link_mtu_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   tun_mtu_extra = 0
Sun Aug 07 21:28:26 2016 us=36882   tun_mtu_extra_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   mtu_discover_type = -1
Sun Aug 07 21:28:26 2016 us=36882   fragment = 0
Sun Aug 07 21:28:26 2016 us=36882   mssfix = 1450
Sun Aug 07 21:28:26 2016 us=36882   explicit_exit_notification = 0
Sun Aug 07 21:28:26 2016 us=36882 Connection profiles END
Sun Aug 07 21:28:26 2016 us=36882   remote_random = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   ipchange = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   dev = 'tun'
Sun Aug 07 21:28:26 2016 us=36882   dev_type = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   dev_node = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   lladdr = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   topology = 1
Sun Aug 07 21:28:26 2016 us=36882   tun_ipv6 = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   ifconfig_local = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   ifconfig_remote_netmask = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   ifconfig_noexec = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   ifconfig_nowarn = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   ifconfig_ipv6_local = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   ifconfig_ipv6_netbits = 0
Sun Aug 07 21:28:26 2016 us=36882   ifconfig_ipv6_remote = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   shaper = 0
Sun Aug 07 21:28:26 2016 us=36882   mtu_test = 0
Sun Aug 07 21:28:26 2016 us=36882   mlock = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   keepalive_ping = 0
Sun Aug 07 21:28:26 2016 us=36882   keepalive_timeout = 0
Sun Aug 07 21:28:26 2016 us=36882   inactivity_timeout = 0
Sun Aug 07 21:28:26 2016 us=36882   ping_send_timeout = 0
Sun Aug 07 21:28:26 2016 us=36882   ping_rec_timeout = 0
Sun Aug 07 21:28:26 2016 us=36882   ping_rec_timeout_action = 0
Sun Aug 07 21:28:26 2016 us=36882   ping_timer_remote = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   remap_sigusr1 = 0
Sun Aug 07 21:28:26 2016 us=36882   persist_tun = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   persist_local_ip = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   persist_remote_ip = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   persist_key = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   passtos = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   resolve_retry_seconds = 1000000000
Sun Aug 07 21:28:26 2016 us=36882   username = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   groupname = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   chroot_dir = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   cd_dir = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   writepid = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   up_script = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   down_script = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   down_pre = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   up_restart = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   up_delay = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   daemon = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   inetd = 0
Sun Aug 07 21:28:26 2016 us=36882   log = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   suppress_timestamps = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   nice = 0
Sun Aug 07 21:28:26 2016 us=36882   verbosity = 4
Sun Aug 07 21:28:26 2016 us=36882   mute = 0
Sun Aug 07 21:28:26 2016 us=36882   gremlin = 0
Sun Aug 07 21:28:26 2016 us=36882   status_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   status_file_version = 1
Sun Aug 07 21:28:26 2016 us=36882   status_file_update_freq = 60
Sun Aug 07 21:28:26 2016 us=36882   occ = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   rcvbuf = 0
Sun Aug 07 21:28:26 2016 us=36882   sndbuf = 0
Sun Aug 07 21:28:26 2016 us=36882   sockflags = 0
Sun Aug 07 21:28:26 2016 us=36882   fast_io = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   lzo = 7
Sun Aug 07 21:28:26 2016 us=36882   route_script = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   route_default_gateway = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   route_default_metric = 0
Sun Aug 07 21:28:26 2016 us=36882   route_noexec = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   route_delay = 5
Sun Aug 07 21:28:26 2016 us=36882   route_delay_window = 30
Sun Aug 07 21:28:26 2016 us=36882   route_delay_defined = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   route_nopull = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   route_gateway_via_dhcp = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   max_routes = 100
Sun Aug 07 21:28:26 2016 us=36882   allow_pull_fqdn = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   management_addr = '127.0.0.1'
Sun Aug 07 21:28:26 2016 us=36882   management_port = 25340
Sun Aug 07 21:28:26 2016 us=36882   management_user_pass = 'stdin'
Sun Aug 07 21:28:26 2016 us=36882   management_log_history_cache = 250
Sun Aug 07 21:28:26 2016 us=36882   management_echo_buffer_size = 100
Sun Aug 07 21:28:26 2016 us=36882   management_write_peer_info_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   management_client_user = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   management_client_group = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   management_flags = 6
Sun Aug 07 21:28:26 2016 us=36882   shared_secret_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   key_direction = 0
Sun Aug 07 21:28:26 2016 us=36882   ciphername_defined = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   ciphername = 'BF-CBC'
Sun Aug 07 21:28:26 2016 us=36882   authname_defined = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   authname = 'SHA1'
Sun Aug 07 21:28:26 2016 us=36882   prng_hash = 'SHA1'
Sun Aug 07 21:28:26 2016 us=36882   prng_nonce_secret_len = 16
Sun Aug 07 21:28:26 2016 us=36882   keysize = 0
Sun Aug 07 21:28:26 2016 us=36882   engine = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   replay = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   mute_replay_warnings = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   replay_window = 64
Sun Aug 07 21:28:26 2016 us=36882   replay_time = 15
Sun Aug 07 21:28:26 2016 us=36882   packet_id_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=36882   use_iv = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   test_crypto = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   tls_server = DISABLED
Sun Aug 07 21:28:26 2016 us=36882   tls_client = ENABLED
Sun Aug 07 21:28:26 2016 us=36882   key_method = 2
Sun Aug 07 21:28:26 2016 us=52509   ca_file = 'ca.crt'
Sun Aug 07 21:28:26 2016 us=52509   ca_path = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   dh_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   cert_file = 'client_name.crt'
Sun Aug 07 21:28:26 2016 us=52509   extra_certs_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   priv_key_file = 'client_name.key'
Sun Aug 07 21:28:26 2016 us=52509   pkcs12_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   cryptoapi_cert = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   cipher_list = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   tls_verify = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   tls_export_cert = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   verify_x509_type = 0
Sun Aug 07 21:28:26 2016 us=52509   verify_x509_name = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   crl_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   ns_cert_type = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 160
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 136
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_ku[i] = 0
Sun Aug 07 21:28:26 2016 us=52509   remote_cert_eku = 'TLS Web Server Authentication'
Sun Aug 07 21:28:26 2016 us=52509   ssl_flags = 0
Sun Aug 07 21:28:26 2016 us=52509   tls_timeout = 2
Sun Aug 07 21:28:26 2016 us=52509   renegotiate_bytes = 0
Sun Aug 07 21:28:26 2016 us=52509   renegotiate_packets = 0
Sun Aug 07 21:28:26 2016 us=52509   renegotiate_seconds = 3600
Sun Aug 07 21:28:26 2016 us=52509   handshake_window = 60
Sun Aug 07 21:28:26 2016 us=52509   transition_window = 3600
Sun Aug 07 21:28:26 2016 us=52509   single_session = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   push_peer_info = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   tls_exit = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   tls_auth_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_protected_authentication = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_private_mode = 00000000
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_cert_private = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_pin_cache_period = -1
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_id = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   pkcs11_id_management = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   server_network = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   server_netmask = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   server_network_ipv6 = ::
Sun Aug 07 21:28:26 2016 us=52509   server_netbits_ipv6 = 0
Sun Aug 07 21:28:26 2016 us=52509   server_bridge_ip = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   server_bridge_netmask = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   server_bridge_pool_start = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   server_bridge_pool_end = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_pool_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_pool_start = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_pool_end = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_pool_netmask = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_pool_persist_refresh_freq = 600
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_ipv6_pool_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_ipv6_pool_base = ::
Sun Aug 07 21:28:26 2016 us=52509   ifconfig_ipv6_pool_netbits = 0
Sun Aug 07 21:28:26 2016 us=52509   n_bcast_buf = 256
Sun Aug 07 21:28:26 2016 us=52509   tcp_queue_limit = 64
Sun Aug 07 21:28:26 2016 us=52509   real_hash_size = 256
Sun Aug 07 21:28:26 2016 us=52509   virtual_hash_size = 256
Sun Aug 07 21:28:26 2016 us=52509   client_connect_script = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   learn_address_script = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   client_disconnect_script = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   client_config_dir = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   ccd_exclusive = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   tmp_dir = 'C:\Users\namre\AppData\Local\Temp\'
Sun Aug 07 21:28:26 2016 us=52509   push_ifconfig_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   push_ifconfig_local = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   push_ifconfig_remote_netmask = 0.0.0.0
Sun Aug 07 21:28:26 2016 us=52509   push_ifconfig_ipv6_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   push_ifconfig_ipv6_local = ::/0
Sun Aug 07 21:28:26 2016 us=52509   push_ifconfig_ipv6_remote = ::
Sun Aug 07 21:28:26 2016 us=52509   enable_c2c = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   duplicate_cn = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   cf_max = 0
Sun Aug 07 21:28:26 2016 us=52509   cf_per = 0
Sun Aug 07 21:28:26 2016 us=52509   max_clients = 1024
Sun Aug 07 21:28:26 2016 us=52509   max_routes_per_client = 256
Sun Aug 07 21:28:26 2016 us=52509   auth_user_pass_verify_script = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   auth_user_pass_verify_script_via_file = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   client = ENABLED
Sun Aug 07 21:28:26 2016 us=52509   pull = ENABLED
Sun Aug 07 21:28:26 2016 us=52509   auth_user_pass_file = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   show_net_up = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   route_method = 0
Sun Aug 07 21:28:26 2016 us=52509   block_outside_dns = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   ip_win32_defined = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   ip_win32_type = 3
Sun Aug 07 21:28:26 2016 us=52509   dhcp_masq_offset = 0
Sun Aug 07 21:28:26 2016 us=52509   dhcp_lease_time = 31536000
Sun Aug 07 21:28:26 2016 us=52509   tap_sleep = 0
Sun Aug 07 21:28:26 2016 us=52509   dhcp_options = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   dhcp_renew = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   dhcp_pre_release = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   dhcp_release = DISABLED
Sun Aug 07 21:28:26 2016 us=52509   domain = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   netbios_scope = '[UNDEF]'
Sun Aug 07 21:28:26 2016 us=52509   netbios_node_type = 0
Sun Aug 07 21:28:26 2016 us=52509   disable_nbt = DISABLED
Sun Aug 07 21:28:26 2016 us=52509 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Sun Aug 07 21:28:26 2016 us=52509 Windows version 6.2 (Windows 8 or greater) 64bit
Sun Aug 07 21:28:26 2016 us=52509 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Enter Management Password:
Sun Aug 07 21:28:26 2016 us=52509 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Aug 07 21:28:26 2016 us=52509 Need hold release from management interface, waiting...
Sun Aug 07 21:28:26 2016 us=541015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Aug 07 21:28:26 2016 us=656698 MANAGEMENT: CMD 'state on'
Sun Aug 07 21:28:26 2016 us=656698 MANAGEMENT: CMD 'log all on'
Sun Aug 07 21:28:26 2016 us=804334 MANAGEMENT: CMD 'hold off'
Sun Aug 07 21:28:26 2016 us=804334 MANAGEMENT: CMD 'hold release'
Sun Aug 07 21:28:26 2016 us=904602 LZO compression initialized
Sun Aug 07 21:28:26 2016 us=904602 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Aug 07 21:28:26 2016 us=904602 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Aug 07 21:28:26 2016 us=904602 MANAGEMENT: >STATE:1470598106,RESOLVE,,,
Sun Aug 07 21:28:26 2016 us=904602 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Sun Aug 07 21:28:26 2016 us=904602 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Aug 07 21:28:26 2016 us=904602 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Aug 07 21:28:26 2016 us=904602 Local Options hash (VER=V4): '41690919'
Sun Aug 07 21:28:26 2016 us=904602 Expected Remote Options hash (VER=V4): '530fdded'
Sun Aug 07 21:28:26 2016 us=904602 UDPv4 link local: [undef]
Sun Aug 07 21:28:26 2016 us=904602 UDPv4 link remote: [AF_INET][server_public_ip]:1194
Sun Aug 07 21:28:26 2016 us=904602 MANAGEMENT: >STATE:1470598106,WAIT,,,
Sun Aug 07 21:28:26 2016 us=904602 MANAGEMENT: >STATE:1470598106,AUTH,,,
Sun Aug 07 21:28:26 2016 us=904602 TLS: Initial packet from [AF_INET][server_public_ip]:1194, sid=91dc3308 49593bb1
Sun Aug 07 21:28:26 2016 us=924733 VERIFY OK: depth=1, C=xyz, ST=xyz, L=xyz, O=xyz, OU=xyz, CN=xyz, name=xyz, emailAddress=xyz
Sun Aug 07 21:28:26 2016 us=924733 Validating certificate key usage
Sun Aug 07 21:28:26 2016 us=924733 ++ Certificate has key usage  00a0, expects 00a0
Sun Aug 07 21:28:26 2016 us=924733 VERIFY KU OK
Sun Aug 07 21:28:26 2016 us=924733 Validating certificate extended key usage
Sun Aug 07 21:28:26 2016 us=924733 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Aug 07 21:28:26 2016 us=924733 VERIFY EKU OK
Sun Aug 07 21:28:26 2016 us=924733 VERIFY OK: depth=0, C=xyz, ST=xyz, L=xyz, O=xyz, OU=xyz, CN=xyz, name=xyz, emailAddress=xyz
Sun Aug 07 21:28:26 2016 us=941939 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug 07 21:28:26 2016 us=941939 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug 07 21:28:26 2016 us=941939 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug 07 21:28:26 2016 us=941939 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug 07 21:28:26 2016 us=941939 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun Aug 07 21:28:26 2016 us=941939 [[server_public_ip]] Peer Connection Initiated with [AF_INET][server_public_ip]:1194
Sun Aug 07 21:28:28 2016 us=10563 MANAGEMENT: >STATE:1470598108,GET_CONFIG,,,
Sun Aug 07 21:28:29 2016 us=91949 SENT CONTROL [[server_public_ip]]: 'PUSH_REQUEST' (status=1)
Sun Aug 07 21:28:29 2016 us=91949 PUSH: Received control message: 'PUSH_REPLY,route 10.80.1.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sun Aug 07 21:28:29 2016 us=91949 OPTIONS IMPORT: timers and/or timeouts modified
Sun Aug 07 21:28:29 2016 us=91949 OPTIONS IMPORT: --ifconfig/up options modified
Sun Aug 07 21:28:29 2016 us=91949 OPTIONS IMPORT: route options modified
Sun Aug 07 21:28:29 2016 us=91949 ROUTE_GATEWAY [server_and_client_public_gateway]/255.255.255.0 I=9 HWADDR=10:60:4b:4a:55:4a
Sun Aug 07 21:28:29 2016 us=107558 ROUTE: bypass_host_route[0]=[unknow_ip_in_public_subnet]
Sun Aug 07 21:28:29 2016 us=107558 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Aug 07 21:28:29 2016 us=107558 MANAGEMENT: >STATE:1470598109,ASSIGN_IP,,10.8.0.6,
Sun Aug 07 21:28:29 2016 us=107558 open_tun, tt->ipv6=0
Sun Aug 07 21:28:29 2016 us=107558 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{1AF48D4A-E12D-4F30-98FB-C02EC1CCE167}.tap
Sun Aug 07 21:28:29 2016 us=107558 TAP-Windows Driver Version 9.21 
Sun Aug 07 21:28:29 2016 us=107558 TAP-Windows MTU=1500
Sun Aug 07 21:28:29 2016 us=123189 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {1AF48D4A-E12D-4F30-98FB-C02EC1CCE167} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sun Aug 07 21:28:29 2016 us=123189 Successful ARP Flush on interface [3] {1AF48D4A-E12D-4F30-98FB-C02EC1CCE167}
Sun Aug 07 21:28:34 2016 us=350957 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Sun Aug 07 21:28:34 2016 us=350957 C:\WINDOWS\system32\route.exe ADD [server_public_ip] MASK 255.255.255.255 [server_and_client_public_gateway] IF 9
Sun Aug 07 21:28:34 2016 us=350957 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Sun Aug 07 21:28:34 2016 us=350957 Route addition via IPAPI succeeded [adaptive]
Sun Aug 07 21:28:34 2016 us=350957 C:\WINDOWS\system32\route.exe ADD [unknow_ip_in_public_subnet] MASK 255.255.255.255 [server_and_client_public_gateway]
Sun Aug 07 21:28:34 2016 us=350957 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Sun Aug 07 21:28:34 2016 us=350957 Route addition via IPAPI succeeded [adaptive]
Sun Aug 07 21:28:34 2016 us=350957 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Sun Aug 07 21:28:34 2016 us=368584 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Sun Aug 07 21:28:34 2016 us=368584 Route addition via IPAPI succeeded [adaptive]
Sun Aug 07 21:28:34 2016 us=369084 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Sun Aug 07 21:28:34 2016 us=373094 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Sun Aug 07 21:28:34 2016 us=373094 Route addition via IPAPI succeeded [adaptive]
Sun Aug 07 21:28:34 2016 us=373094 MANAGEMENT: >STATE:1470598114,ADD_ROUTES,,,
Sun Aug 07 21:28:34 2016 us=373094 C:\WINDOWS\system32\route.exe ADD 10.80.1.0 MASK 255.255.255.0 10.8.0.5
Sun Aug 07 21:28:34 2016 us=373094 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Sun Aug 07 21:28:34 2016 us=373094 Route addition via IPAPI succeeded [adaptive]
Sun Aug 07 21:28:34 2016 us=373094 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Sun Aug 07 21:28:34 2016 us=373094 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Sun Aug 07 21:28:34 2016 us=373094 Route addition via IPAPI succeeded [adaptive]
Sun Aug 07 21:28:34 2016 us=373094 Initialization Sequence Completed
Sun Aug 07 21:28:34 2016 us=373094 MANAGEMENT: >STATE:1470598114,CONNECTED,SUCCESS,10.8.0.6,[server_public_ip]

I see one problem at the bottom of the server log file, could that be it?

TinCanTech

According to your logs, openvpn is working as expected. You must have done something else wrong.

I presume you have enabled IP_Forward on the server ?

niam

Yes net.ipv4.ip_forward=1 is set in /etc/sysctl.conf on the server.

thefrugalnondualist

I'm wondering why you need to mention your 10.80.1.0/24 LAN at all. Does it work if you comment out your statement:

push "route 10.80.1.0 255.255.255.0"?

I agree with TinCanTech that your iptables stuff can be vastly simplified. I got mine down to just one line:

https://thefrugalnondualist.wordpress.com/2016/08/13/installing-openvpn-on-a-nat-ipv4-vps

Also, for Windows clients, consider adding:

push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"