Can't connect tap VPN win10

pietprecies

Hello,
This is for me the first time posting on this forum so excuse me if I did something wrong.

I'm busy setting up a TAP server on my raspberry pi.
On the pi's side everything seems to work correctly but when I try connecting I got the error: "Authenticate/Decrypt packet error: packet HMAC authentication failed"
But it will still connect. But when im connected I can't ping any other devices and my IP will stay the same (not the one off the VPN servers network)
When im looking at the network tab in windows I see:

Unknown network | Acces type: No network acces
Public network | Connections: tap
(some names may differ a smill bit, my computer is set to dutch so I needed to translate it)

My client is a Windows 10 machine running version 1511
It is a nearly fresh install. only essentials like office, a virus scanner (panda anti-virus free) and drivers are installed.

This is the client configuration file: (Public IP addresss and certificates removed)

client
dev tap0
proto udp
remote {Public ip address here} 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 3

<ca>
-----BEGIN CERTIFICATE-----
{lets remove this one}
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
{and this one}
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
{and this one}
-----END PRIVATE KEY-----
</key>

And the server configuration file:

dev tap0
#tun-mtu 1500
#tun-ipv6
tls-server
proto udp
port 1194


ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem

topology subnet

user nobody
group nogroup

server-bridge 192.168.178.30 255.255.255.0 192.168.178.31 192.168.178.49

#server-ipv6 2001:db8::/64

mssfix
persist-key
persist-tun

#log /var/log/openvpn
status /var/log/openvpn-status.log
verb 4
client-to-client

keepalive 10 120
mute 50

#set the dns servers
push "dhcp-option DNS 192.168.178.1"
#set the WINS server (SAMBA)
push "dhcp-option WINS 192.168.178.4"
#For windows, to make the network recognized
push "route 0.0.0.0 0.0.0.0 192.168.178.30"
cipher AES-256-CBC
auth SHA512

log-append /var/log/openvpn
comp-lzo
#replay-window 128

The server has 3 bridge files to:

bridge-conf:

#!/bin/bash

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth0"
eth_ip="192.168.178.30"
eth_netmask="255.255.255.0"
eth_broadcast="192.168.178.255"
eth_gateway="192.168.178.1"
eth_mac="b8:27:eb:3a:90:ca"


# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged together
tap="tap0"

bridge-start:

#!/bin/bash

. /etc/openvpn/bridge/bridge-conf
#################################
# Set up Ethernet bridge on Linux
# Requires: bridge-utils
#################################

for t in $tap; do
    openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

for t in $tap; do
    ifconfig $t 0.0.0.0 promisc up
    iptables -A INPUT -i $t -j ACCEPT
    done

iptables -A INPUT -i $br -j ACCEPT
iptables -A FORWARD -i $br -j ACCEPT

ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast
ip link set $br address $eth_mac
route add default gw $eth_gateway $br

And bridge-stop:

#!/bin/bash

. /etc/openvpn/bridge/bridge-conf
####################################
# Tear Down Ethernet bridge on Linux
####################################


iptables -D INPUT -i $br -j ACCEPT
iptables -D FORWARD -i $br -j ACCEPT

ifconfig $br down
brctl delbr $br

for t in $tap; do
    openvpn --rmtun --dev $t
    iptables -D INPUT -i $t -j ACCEPT
done

ifconfig $eth $eth_ip netmask $eth_netmask broadcast $eth_broadcast
route add default gw $eth_gateway $eth

I hope someone can help me find a solution so I can browse the web via the VPN and acces devices on the VPN server's network

If I placed this on the wrong location or did something wrong please notify me

Thanks in advance!

TinCanTech

Try removing this from your client config

pietprecies wrotepersist-key
persist-tun

pietprecies

Thanks for your reply Tincantech,
I Just tested it, but sadly it didnt work.

When I try pinging The server this is The output:
Pinging 192.168.178.30 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 192.168.178.30:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Maybe usefull:
The routers IP: 192.168.178.1
Pi/server IP: 192.168.178.30
Desired client adresses: 192.168.178.31~49

I also found out that in the routers client list the clients IP doesnt show up.

pietprecies

TinCanTech wroteTry removing this from your client config
pietprecies wrotepersist-key
persist-tun

(Didn't quote you in my 1st response so i'm quoting you here, idk exactly how forums work (new to it) so not sure if you readed my original response)

I also have the log from the PC connecting to the server (***.***.***.*** where my public IP is)

Wed Aug 17 21:58:52 2016 OpenVPN 2.3.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Nov  7 2014
Wed Aug 17 21:58:52 2016 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.05
Enter Management Password:
Wed Aug 17 21:58:52 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Wed Aug 17 21:58:52 2016 Need hold release from management interface, waiting...
Wed Aug 17 21:58:52 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Wed Aug 17 21:58:52 2016 MANAGEMENT: CMD 'state on'
Wed Aug 17 21:58:52 2016 MANAGEMENT: CMD 'log all on'
Wed Aug 17 21:58:52 2016 MANAGEMENT: CMD 'hold off'
Wed Aug 17 21:58:52 2016 MANAGEMENT: CMD 'hold release'
Wed Aug 17 21:58:52 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Aug 17 21:58:52 2016 UDPv4 link local: [undef]
Wed Aug 17 21:58:52 2016 UDPv4 link remote: [AF_INET]***.***.***.****:1194
Wed Aug 17 21:58:52 2016 MANAGEMENT: >STATE:1471463932,WAIT,,,
Wed Aug 17 21:58:53 2016 MANAGEMENT: >STATE:1471463933,AUTH,,,
Wed Aug 17 21:58:53 2016 TLS: Initial packet from [AF_INET]***.***.***.***:1194, sid=f3aa16ec d5b858dd
Wed Aug 17 21:58:53 2016 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Aug 17 21:58:53 2016 VERIFY OK: nsCertType=SERVER
Wed Aug 17 21:58:53 2016 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Aug 17 21:58:54 2016 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1634'
Wed Aug 17 21:58:54 2016 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA512'
Wed Aug 17 21:58:54 2016 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Aug 17 21:58:54 2016 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 17 21:58:54 2016 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Aug 17 21:58:54 2016 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 17 21:58:54 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Aug 17 21:58:54 2016 [server] Peer Connection Initiated with [AF_INET]***.***.***.***:1194
Wed Aug 17 21:58:54 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:58:54 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:58:55 2016 MANAGEMENT: >STATE:1471463935,GET_CONFIG,,,
Wed Aug 17 21:58:56 2016 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Aug 17 21:58:56 2016 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.178.1,dhcp-option WINS 192.168.178.4,route 0.0.0.0 0.0.0.0 192.168.178.1,route-gateway 192.168.178.30,ping 10,ping-restart 120,ifconfig 192.168.178.31 255.255.255.0'
Wed Aug 17 21:58:56 2016 OPTIONS IMPORT: timers and/or timeouts modified
Wed Aug 17 21:58:56 2016 OPTIONS IMPORT: --ifconfig/up options modified
Wed Aug 17 21:58:56 2016 OPTIONS IMPORT: route options modified
Wed Aug 17 21:58:56 2016 OPTIONS IMPORT: route-related options modified
Wed Aug 17 21:58:56 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Aug 17 21:58:56 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Aug 17 21:58:56 2016 MANAGEMENT: >STATE:1471463936,ASSIGN_IP,,192.168.178.31,
Wed Aug 17 21:58:56 2016 open_tun, tt->ipv6=0
Wed Aug 17 21:58:56 2016 TAP-WIN32 device [tap] opened: \\.\Global\{FBD1B6AB-1E30-485E-B6F8-C7EF7E8B8757}.tap
Wed Aug 17 21:58:56 2016 TAP-Windows Driver Version 9.21 
Wed Aug 17 21:58:56 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.178.31/255.255.255.0 on interface {FBD1B6AB-1E30-485E-B6F8-C7EF7E8B8757} [DHCP-serv: 192.168.178.0, lease-time: 31536000]
Wed Aug 17 21:58:56 2016 Successful ARP Flush on interface [16] {FBD1B6AB-1E30-485E-B6F8-C7EF7E8B8757}
Wed Aug 17 21:59:01 2016 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=1 u/d=up
Wed Aug 17 21:59:01 2016 MANAGEMENT: >STATE:1471463941,ADD_ROUTES,,,
Wed Aug 17 21:59:01 2016 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 192.168.178.1
Wed Aug 17 21:59:01 2016 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Aug 17 21:59:01 2016 Route addition via IPAPI succeeded [adaptive]
Wed Aug 17 21:59:01 2016 Initialization Sequence Completed
Wed Aug 17 21:59:01 2016 MANAGEMENT: >STATE:1471463941,CONNECTED,SUCCESS,192.168.178.31,***.***.***.***
Wed Aug 17 21:59:06 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:59:15 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:59:25 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:59:35 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:59:38 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:59:47 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 21:59:57 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:00:08 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:00:18 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:00:28 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:00:37 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:00:42 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:00:51 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:00:56 2016 [server] Inactivity timeout (--ping-restart), restarting
Wed Aug 17 22:00:56 2016 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 192.168.178.1
Wed Aug 17 22:00:56 2016 Route deletion via IPAPI succeeded [adaptive]
Wed Aug 17 22:00:56 2016 Closing TUN/TAP interface
Wed Aug 17 22:00:56 2016 SIGUSR1[soft,ping-restart] received, process restarting
Wed Aug 17 22:00:56 2016 MANAGEMENT: >STATE:1471464056,RECONNECTING,ping-restart,,
Wed Aug 17 22:00:56 2016 Restart pause, 2 second(s)
Wed Aug 17 22:00:58 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Aug 17 22:00:58 2016 UDPv4 link local: [undef]
Wed Aug 17 22:00:58 2016 UDPv4 link remote: [AF_INET]***.***.***.***:1194
Wed Aug 17 22:00:58 2016 MANAGEMENT: >STATE:1471464058,WAIT,,,
Wed Aug 17 22:00:58 2016 MANAGEMENT: >STATE:1471464058,AUTH,,,
Wed Aug 17 22:00:58 2016 TLS: Initial packet from [AF_INET]***.***.***.***:1194, sid=2069d274 d4df497a
Wed Aug 17 22:00:59 2016 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Aug 17 22:00:59 2016 VERIFY OK: nsCertType=SERVER
Wed Aug 17 22:00:59 2016 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Wed Aug 17 22:00:59 2016 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1634'
Wed Aug 17 22:00:59 2016 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA512'
Wed Aug 17 22:00:59 2016 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Aug 17 22:00:59 2016 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 17 22:00:59 2016 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Aug 17 22:00:59 2016 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 17 22:00:59 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Aug 17 22:00:59 2016 [server] Peer Connection Initiated with [AF_INET]***.***.***.***:1194
Wed Aug 17 22:01:00 2016 MANAGEMENT: >STATE:1471464060,GET_CONFIG,,,
Wed Aug 17 22:01:01 2016 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Aug 17 22:01:01 2016 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.178.1,dhcp-option WINS 192.168.178.4,route 0.0.0.0 0.0.0.0 192.168.178.1,route-gateway 192.168.178.30,ping 10,ping-restart 120,ifconfig 192.168.178.31 255.255.255.0'
Wed Aug 17 22:01:01 2016 OPTIONS IMPORT: timers and/or timeouts modified
Wed Aug 17 22:01:01 2016 OPTIONS IMPORT: --ifconfig/up options modified
Wed Aug 17 22:01:01 2016 OPTIONS IMPORT: route options modified
Wed Aug 17 22:01:01 2016 OPTIONS IMPORT: route-related options modified
Wed Aug 17 22:01:01 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Aug 17 22:01:01 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Aug 17 22:01:01 2016 MANAGEMENT: >STATE:1471464061,ASSIGN_IP,,192.168.178.31,
Wed Aug 17 22:01:01 2016 open_tun, tt->ipv6=0
Wed Aug 17 22:01:01 2016 TAP-WIN32 device [tap] opened: \\.\Global\{FBD1B6AB-1E30-485E-B6F8-C7EF7E8B8757}.tap
Wed Aug 17 22:01:01 2016 TAP-Windows Driver Version 9.21 
Wed Aug 17 22:01:01 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.178.31/255.255.255.0 on interface {FBD1B6AB-1E30-485E-B6F8-C7EF7E8B8757} [DHCP-serv: 192.168.178.0, lease-time: 31536000]
Wed Aug 17 22:01:01 2016 Successful ARP Flush on interface [16] {FBD1B6AB-1E30-485E-B6F8-C7EF7E8B8757}
Wed Aug 17 22:01:06 2016 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=1 u/d=up
Wed Aug 17 22:01:06 2016 MANAGEMENT: >STATE:1471464066,ADD_ROUTES,,,
Wed Aug 17 22:01:06 2016 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 192.168.178.1
Wed Aug 17 22:01:06 2016 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Wed Aug 17 22:01:06 2016 Route addition via IPAPI succeeded [adaptive]
Wed Aug 17 22:01:06 2016 Initialization Sequence Completed
Wed Aug 17 22:01:06 2016 MANAGEMENT: >STATE:1471464066,CONNECTED,SUCCESS,192.168.178.31,***.***.***.***
Wed Aug 17 22:01:11 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:21 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:31 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:42 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:47 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:57 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:02:03 2016 C:\Windows\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 192.168.178.1
Wed Aug 17 22:02:03 2016 Route deletion via IPAPI succeeded [adaptive]
Wed Aug 17 22:02:03 2016 Closing TUN/TAP interface
Wed Aug 17 22:02:03 2016 SIGTERM[hard,] received, process exiting
Wed Aug 17 22:02:03 2016 MANAGEMENT: >STATE:1471464123,EXITING,SIGTERM,,

what worries my is the last part wich spits out some errors

Wed Aug 17 22:01:11 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:21 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:31 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:42 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:47 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Aug 17 22:01:57 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed

I thought that it maybe would be related and posting it would help

TinCanTech

pietprecies wrotenot sure if you readed my original response

I see most posts here .. sometimes people need time to read the HOWTO.

Remove this from your server config:

pietprecies wrotepush "route 0.0.0.0 0.0.0.0 192.168.178.30"

pietprecies wroteserver-bridge 192.168.178.30 255.255.255.0 192.168.178.31 192.168.178.49

See --server-bridge in The Manual v23x .. notice the first parameter gateway not IP address of the bridge :geek:

pietprecies

TinCanTech wrote Remove this from your server config:
pietprecies wrotepush "route 0.0.0.0 0.0.0.0 192.168.178.30"

pietprecies wroteserver-bridge 192.168.178.30 255.255.255.0 192.168.178.31 192.168.178.49
See --server-bridge in The Manual v23x .. notice the first parameter gateway not IP address of the bridge :geek:

Thanks for your reply again!
I again tried your awnswers but when I connect it my laptop still doesn't use the VPN.

This is the routing table on my laptop when connected (laptop isn't on the same network as the vpn):

===========================================================================
Interface List
  7...74 d0 2b 47 0b 28 ......Qualcomm Atheros AR8161 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
 12...1e 71 d9 9b d3 d3 ......Microsoft Wi-Fi Direct Virtual Adapter
  6...00 ff 37 3e 42 f6 ......TAP-Windows Adapter V9
 16...6c 71 d9 9b d3 d3 ......Qualcomm Atheros AR9485WB-EG Wireless Network Adapter
  1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.43.1    192.168.43.41     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     192.168.43.0    255.255.255.0         On-link     192.168.43.41    281
    192.168.43.41  255.255.255.255         On-link     192.168.43.41    281
   192.168.43.255  255.255.255.255         On-link     192.168.43.41    281
    192.168.178.0    255.255.255.0         On-link    192.168.178.31    276
   192.168.178.31  255.255.255.255         On-link    192.168.178.31    276
  192.168.178.255  255.255.255.255         On-link    192.168.178.31    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.43.41    281
        224.0.0.0        240.0.0.0         On-link    192.168.178.31    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.43.41    281
  255.255.255.255  255.255.255.255         On-link    192.168.178.31    276
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
 16    281 fe80::/64                On-link
  6    276 fe80::/64                On-link
  6    276 fe80::9050:3ae1:d672:a7f9/128
                                    On-link
 16    281 fe80::a10d:e9de:fd8:da83/128
                                    On-link
  1    306 ff00::/8                 On-link
 16    281 ff00::/8                 On-link
  6    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

The router still doesn't list the client's ip in the routers client list.

I tried commenting out some other things on the client and server config after reading the article you referred to (auth SHA512, cipher, mssfix) but with no succes so I changed it back.

TinCanTech

pietprecies wroteI again tried your awnswers but when I connect it my laptop still doesn't use the VPN

But your client can now connect ?

pietprecies

TinCanTech wrote
pietprecies wroteI again tried your awnswers but when I connect it my laptop still doesn't use the VPN
But your client can now connect ?

When I try to connect it says it is connected and I get a pop-up saying I got a new ip. But when I go to a site like whatsmyip.org the old IP is still in place, not the IP of the network which the vpn server is on. Nor can I ping the server, gateway or any other device on the network. So yes and no,
openvpn says it is connected (getting the green monitor icon thingy) but the connection seems not to be working.

TinCanTech

So now you are connected and you should know that .. If you read the documentation you would understand.

Now you need to read this carefully:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

Because you have a TAP VPN you do not need to use iptables.

pietprecies

TinCanTech wroteSo now you are connected and you should know that .. If you read the documentation you would understand.

Now you need to read this carefully:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

Because you have a TAP VPN you do not need to use iptables.

Okay, thanks for the reply again, very much apriciate it 🙂
I will try it right now

pietprecies

pietprecies wrote
TinCanTech wroteSo now you are connected and you should know that .. If you read the documentation you would understand.

Now you need to read this carefully:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

Because you have a TAP VPN you do not need to use iptables.
Okay, thanks for the reply again, very much apriciate it 🙂
I will try it right now

Ok, the routing table seems ok now on the client but still unable to ping any device on the server's side.

And the client's log file still gives me an error, maybe there is some kind of problem with the keys?

Thu Aug 18 14:55:41 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed

TinCanTech

pietprecies wrotethe client's log file still gives me an error, maybe there is some kind of problem with the keys?

Thu Aug 18 14:55:41 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed

This is puzzling ..

Please provide full details of your client and server openvpn version, which you can find in your log files.

pietprecies

TinCanTech wrote
pietprecies wrotethe client's log file still gives me an error, maybe there is some kind of problem with the keys?
Thu Aug 18 14:55:41 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
This is puzzling ..

Please provide full details of your client and server openvpn version, which you can find in your log files.

When I run openvpn --version on raspbian it outputs:

OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>
Compile time defines: enable_crypto=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_maintainer_mode=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_win32_dll=yes enable_x509_alt_username=yes with_crypto_library=openssl with_gnu_ld=yes with_ifconfig_path=/sbin/ifconfig with_iproute_path=/sbin/ip with_mem_check=no with_plugindir='${prefix}/lib/openvpn' with_route_path=/sbin/route with_sysroot=no

on the laptop I installed the .exe called openvpn-install-2.3.11-I601-x86_64.exe from the download page (https://openvpn.net/index.php/open-source/downloads.html)

pietprecies

pietprecies wrote

TinCanTech wrote
pietprecies wrotethe client's log file still gives me an error, maybe there is some kind of problem with the keys?
Thu Aug 18 14:55:41 2016 Authenticate/Decrypt packet error: packet HMAC authentication failed
This is puzzling ..

Please provide full details of your client and server openvpn version, which you can find in your log files.

When I run openvpn --version on raspbian it outputs:

OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>
Compile time defines: enable_crypto=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_maintainer_mode=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_win32_dll=yes enable_x509_alt_username=yes with_crypto_library=openssl with_gnu_ld=yes with_ifconfig_path=/sbin/ifconfig with_iproute_path=/sbin/ip with_mem_check=no with_plugindir='${prefix}/lib/openvpn' with_route_path=/sbin/route with_sysroot=no

on the laptop I installed the .exe called openvpn-install-2.3.11-I601-x86_64.exe from the download page (https://openvpn.net/index.php/open-source/downloads.html)

Edit: nvm, this was a stupid message