Linux users work great, they can communicate with the proper networks that I need them to. Back and fourth.
Windows 10 on the other hand (Firewalls disabled etc) can only produce:
> ping <gw>
General failure
> ping <assigned IP>
100% success rate
Now, I'll cut the configs short (no need to see what port i'm using etc) and here's the network setup (rough):
The idea is to segregate `userOne` from the normal `192.168.19.0` network by assigning it into `192.168.6.0`, but also push `192.168.0.0` to the user so that `userOne` can access a few servers located on that network.
Here's the server.conf
proto tcp-server
dev tun
mode server
tls-server
topology "subnet"
push "topology subnet"
ifconfig 192.168.19.1 255.255.255.0
ifconfig-pool 192.168.19.4 192.168.19.250
route 192.168.5.0 255.255.255.0 192.168.19.1
client-config-dir ccd
persist-key
persist-tun
client.conf
client
dev tun
dev-node "tap0"
proto tcp-client
remote <ip> <port>
nobind
verb 4
Now, the key exchange etc is working fine.. So i removed those from this post, they're long and embedded in the conf.
**Important**: If i use the backup config (that i want to use) I never get a gateway (or IP depending on if i swap the second IP parameter to a netmask or not).
Here's the conf that I'm currently using in CCD:
userOne
push "route 192.168.0.0 255.255.255.0 192.168.19.1"
push "route-gateway 192.168.19.1"
What I've also tried:
userOne (backup)
ifconfig-push 192.168.6.78 192.168.6.77
push "route 192.168.0.0 255.255.255.0 192.168.19.1"
push "route-gateway 192.168.19.1"
I've also tried `ifconfig-push 192.168.6.77 255.255.255.252`.<br>
None of which actually works. Unless I use the first config (that doesn't try to push a gateway or IP out of the default) - I get a "169..." auto assigned by Windows.
Here's the clients log:
Mon Oct 03 17:13:41 2016 server_network = 0.0.0.0
Mon Oct 03 17:13:41 2016 server_netmask = 0.0.0.0
Mon Oct 03 17:13:41 2016 server_network_ipv6 = ::
Mon Oct 03 17:13:41 2016 server_netbits_ipv6 = 0
Mon Oct 03 17:13:41 2016 server_bridge_ip = 0.0.0.0
Mon Oct 03 17:13:41 2016 server_bridge_netmask = 0.0.0.0
Mon Oct 03 17:13:41 2016 server_bridge_pool_start = 0.0.0.0
Mon Oct 03 17:13:41 2016 server_bridge_pool_end = 0.0.0.0
Mon Oct 03 17:13:41 2016 ifconfig_pool_defined = DISABLED
Mon Oct 03 17:13:41 2016 ifconfig_pool_start = 0.0.0.0
Mon Oct 03 17:13:41 2016 ifconfig_pool_end = 0.0.0.0
Mon Oct 03 17:13:41 2016 ifconfig_pool_netmask = 0.0.0.0
Mon Oct 03 17:13:41 2016 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Oct 03 17:13:41 2016 ifconfig_pool_persist_refresh_freq = 600
Mon Oct 03 17:13:41 2016 ifconfig_ipv6_pool_defined = DISABLED
Mon Oct 03 17:13:41 2016 ifconfig_ipv6_pool_base = ::
Mon Oct 03 17:13:41 2016 ifconfig_ipv6_pool_netbits = 0
Mon Oct 03 17:13:41 2016 n_bcast_buf = 256
Mon Oct 03 17:13:41 2016 tcp_queue_limit = 64
Mon Oct 03 17:13:41 2016 real_hash_size = 256
Mon Oct 03 17:13:41 2016 virtual_hash_size = 256
Mon Oct 03 17:13:41 2016 client_connect_script = '[UNDEF]'
Mon Oct 03 17:13:41 2016 learn_address_script = '[UNDEF]'
Mon Oct 03 17:13:41 2016 client_disconnect_script = '[UNDEF]'
Mon Oct 03 17:13:41 2016 client_config_dir = '[UNDEF]'
Mon Oct 03 17:13:41 2016 ccd_exclusive = DISABLED
Mon Oct 03 17:13:41 2016 tmp_dir = 'C:\Users\userOne\AppData\Local\Temp\'
Mon Oct 03 17:13:41 2016 push_ifconfig_defined = DISABLED
Mon Oct 03 17:13:41 2016 push_ifconfig_local = 0.0.0.0
Mon Oct 03 17:13:41 2016 push_ifconfig_remote_netmask = 0.0.0.0
Mon Oct 03 17:13:41 2016 push_ifconfig_ipv6_defined = DISABLED
Mon Oct 03 17:13:41 2016 push_ifconfig_ipv6_local = ::/0
Mon Oct 03 17:13:41 2016 push_ifconfig_ipv6_remote = ::
Mon Oct 03 17:13:41 2016 enable_c2c = DISABLED
Mon Oct 03 17:13:41 2016 duplicate_cn = DISABLED
Mon Oct 03 17:13:41 2016 cf_max = 0
Mon Oct 03 17:13:41 2016 cf_per = 0
Mon Oct 03 17:13:41 2016 max_clients = 1024
Mon Oct 03 17:13:41 2016 max_routes_per_client = 256
Mon Oct 03 17:13:41 2016 auth_user_pass_verify_script = '[UNDEF]'
Mon Oct 03 17:13:41 2016 auth_user_pass_verify_script_via_file = DISABLED
Mon Oct 03 17:13:41 2016 client = ENABLED
Mon Oct 03 17:13:41 2016 pull = ENABLED
Mon Oct 03 17:13:41 2016 auth_user_pass_file = 'C:\Program Files\OpenVPN\config\user.pwd'
Mon Oct 03 17:13:41 2016 show_net_up = DISABLED
Mon Oct 03 17:13:41 2016 route_method = 0
Mon Oct 03 17:13:41 2016 ip_win32_defined = DISABLED
Mon Oct 03 17:13:41 2016 ip_win32_type = 3
Mon Oct 03 17:13:41 2016 dhcp_masq_offset = 0
Mon Oct 03 17:13:41 2016 dhcp_lease_time = 31536000
Mon Oct 03 17:13:41 2016 tap_sleep = 0
Mon Oct 03 17:13:41 2016 dhcp_options = DISABLED
Mon Oct 03 17:13:41 2016 dhcp_renew = DISABLED
Mon Oct 03 17:13:41 2016 dhcp_pre_release = DISABLED
Mon Oct 03 17:13:41 2016 dhcp_release = DISABLED
Mon Oct 03 17:13:41 2016 domain = '[UNDEF]'
Mon Oct 03 17:13:41 2016 netbios_scope = '[UNDEF]'
Mon Oct 03 17:13:41 2016 netbios_node_type = 0
Mon Oct 03 17:13:41 2016 disable_nbt = DISABLED
Mon Oct 03 17:13:41 2016 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Mon Oct 03 17:13:41 2016 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Mon Oct 03 17:13:41 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Oct 03 17:13:41 2016 Need hold release from management interface, waiting...
Mon Oct 03 17:13:42 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Oct 03 17:13:42 2016 MANAGEMENT: CMD 'state on'
Mon Oct 03 17:13:42 2016 MANAGEMENT: CMD 'log all on'
Mon Oct 03 17:13:42 2016 MANAGEMENT: CMD 'hold off'
Mon Oct 03 17:13:42 2016 MANAGEMENT: CMD 'hold release'
Mon Oct 03 17:13:42 2016 Control Channel Authentication: tls-auth using INLINE static key file
Mon Oct 03 17:13:42 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 03 17:13:42 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 03 17:13:42 2016 LZO compression initialized
Mon Oct 03 17:13:42 2016 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Oct 03 17:13:42 2016 Socket Buffers: R=[65536->65536] S=[64512->64512]
Mon Oct 03 17:13:42 2016 MANAGEMENT: >STATE:1475507622,RESOLVE,,,
Mon Oct 03 17:13:42 2016 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Oct 03 17:13:42 2016 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Oct 03 17:13:42 2016 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Oct 03 17:13:42 2016 Local Options hash (VER=V4): '0bdd0804'
Mon Oct 03 17:13:42 2016 Expected Remote Options hash (VER=V4): 'a642654b'
Mon Oct 03 17:13:42 2016 Attempting to establish TCP connection with [AF_INET]EXTERNAL_IP:21 [nonblock]
Mon Oct 03 17:13:42 2016 MANAGEMENT: >STATE:1475507622,TCP_CONNECT,,,
Mon Oct 03 17:13:43 2016 TCP connection established with [AF_INET]EXTERNAL_IP:21
Mon Oct 03 17:13:43 2016 TCPv4_CLIENT link local: [undef]
Mon Oct 03 17:13:43 2016 TCPv4_CLIENT link remote: [AF_INET]EXTERNAL_IP:21
Mon Oct 03 17:13:43 2016 MANAGEMENT: >STATE:1475507623,WAIT,,,
Mon Oct 03 17:13:43 2016 MANAGEMENT: >STATE:1475507623,AUTH,,,
Mon Oct 03 17:13:43 2016 TLS: Initial packet from [AF_INET]EXTERNAL_IP:21, sid=d932d481 3ac3d31d
Mon Oct 03 17:13:43 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Oct 03 17:13:45 2016 VERIFY OK: depth=1, C=SE,
Mon Oct 03 17:13:45 2016 VERIFY OK: nsCertType=SERVER
Mon Oct 03 17:13:45 2016 VERIFY OK: depth=0, C=SE,
Mon Oct 03 17:13:48 2016 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Oct 03 17:13:48 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 03 17:13:48 2016 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Oct 03 17:13:48 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 03 17:13:48 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Oct 03 17:13:48 2016 [soekris] Peer Connection Initiated with [AF_INET]EXTERNAL_IP:21
Mon Oct 03 17:13:49 2016 MANAGEMENT: >STATE:1475507629,GET_CONFIG,,,
Mon Oct 03 17:13:50 2016 SENT CONTROL [soekris]: 'PUSH_REQUEST' (status=1)
Mon Oct 03 17:13:50 2016 PUSH: Received control message: 'PUSH_REPLY,topology subnet,ping 10,ping-restart 120,route 192.168.19.0 255.255.255.0 192.168.19.1,route-gateway 192.168.19.1,ifconfig 192.168.19.9 255.255.255.0'
Mon Oct 03 17:13:50 2016 OPTIONS IMPORT: timers and/or timeouts modified
Mon Oct 03 17:13:50 2016 OPTIONS IMPORT: --ifconfig/up options modified
Mon Oct 03 17:13:50 2016 OPTIONS IMPORT: route options modified
Mon Oct 03 17:13:50 2016 OPTIONS IMPORT: route-related options modified
Mon Oct 03 17:13:50 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Oct 03 17:13:50 2016 MANAGEMENT: >STATE:1475507630,ASSIGN_IP,,192.168.19.9,
Mon Oct 03 17:13:50 2016 open_tun, tt->ipv6=0
Mon Oct 03 17:13:50 2016 TAP-WIN32 device [tap0] opened: \\.\Global\{33934E69-2B38-410A-87B9-62E69FC21CED}.tap
Mon Oct 03 17:13:50 2016 TAP-Windows Driver Version 9.21
Mon Oct 03 17:13:50 2016 TAP-Windows MTU=1500
Mon Oct 03 17:13:51 2016 NETSH: C:\Windows\system32\netsh.exe interface ip set address tap0 dhcp
Mon Oct 03 17:13:51 2016 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.19.0/192.168.19.9/255.255.255.0 [SUCCEEDED]
Mon Oct 03 17:13:51 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.19.9/255.255.255.0 on interface {33934E69-2B38-410A-87B9-62E69FC21CED} [DHCP-serv: 192.168.19.254, lease-time: 31536000]
Mon Oct 03 17:13:51 2016 Successful ARP Flush on interface [3] {33934E69-2B38-410A-87B9-62E69FC21CED}
Mon Oct 03 17:13:56 2016 us=15184 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Mon Oct 03 17:13:56 2016 us=15184 MANAGEMENT: >STATE:1475507636,ADD_ROUTES,,,
Mon Oct 03 17:13:56 2016 us=15184 C:\Windows\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 192.168.19.1
Mon Oct 03 17:13:56 2016 us=15184 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Oct 03 17:13:56 2016 us=15184 Route addition via IPAPI succeeded [adaptive]
Mon Oct 03 17:13:56 2016 us=15184 Initialization Sequence Completed
Mon Oct 03 17:13:56 2016 us=15184 MANAGEMENT: >STATE:1475507636,CONNECTED,SUCCESS,192.168.19.9,EXTERNAL_IP
And here's the routes:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 wifi.1 wifi 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.0.0 255.255.255.0 192.168.19.1 192.168.19.9 20
192.168.19.0 255.255.255.0 On-link 192.168.19.9 276
192.168.19.9 255.255.255.255 On-link 192.168.19.9 276
192.168.19.255 255.255.255.255 On-link 192.168.19.9 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.19.9 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.19.9 276
===========================================================================
Persistent Routes:
None
Log when using the backup (the difference)
Mon Oct 03 17:45:02 2016 us=805978 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Mon Oct 03 17:45:02 2016 us=805978 OpenVPN ROUTE: failed to parse/resolve route for host/network: 172.16.0.0
Tried with:
* openvpn-install-2.3.12-I601-x86_64.exe
* openvpn-install-2.3.6-I603-x86_64.exe
None of which works.<br>
By "nothing works" I mean I can't ping anywhere or access anything on any network except my clients own IP.
