I am running an OpenVPN server with both public IPv4/IPv6. Clients obtain an IPv4 from the following config, and IPv6 from our router (they are bridged so they get IPv6 router advertisements) Server: [code]dev tap proto udp6 port 1194 management 127.0.0.1 1194 server-bridge 125.125.29.1 255.255.255.128 125.125.29.109 125.125.29.111 ifconfig-pool-persist pool-persist-tap #push "tun-ipv6" - not needed in version 2.4 push "route remote_host 255.255.255.255 net_gateway" push "route 125.125.28.0 255.255.254.0 125.125.29.1" keepalive 5 15 persist-key persist-tun comp-lzo script-security 2 up ./upscript down ./downscript mute-replay-warnings client-cert-not-required username-as-common-name client-config-dir clients auth-user-pass-verify ./auth_radius.pl via-file syslog openvpn-tap.log status status-tap.log verb 2[/code] When I was using version 2.3, I used an IPv6 route to my clients (those who supported IPv6) in order to route IPv6 traffic to our servers through the tunnel: client: [code]route-ipv6 2021:248::/32 2021:248:2320:1::2[/code] and it used to work correctly. IPv6 traffic to the internet went through my ISP, and IPv6 traffic to 2021:248::/32 went through the OpenVPN tunnel.. After upgrading my server and clients to 2.4, I get the following error: [b]add_route_ipv6(): not adding 2021:248::/32: no IPv6 address been configured on interface Ethernet.[/b] ipconfig proves that both my LAN and TAP adapters have an IPv6 address, and I use route delay to my client configs. I get the same error when I try to connect to my server using either its IPv4 or IPv6 interface. I event tried using [code]redirect-gateway ipv6[/code] on my clients, even if this is not what I exactly want, but apart from the error i mentioned before, I also get the following errors: [b]OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options[/b] I don't think that the parameters above apply to my stateless IPv6 configuration and messing around with route-ipv6-gateway was not succesful.

Please add full configs and logs. Please see: [url=https://forums.openvpn.net/viewtopic.php?f=30&t=22603]HOWTO: Request Help ![/url]

It's a tap device, and it has already an IPv6 address obtained from our router via Router Advertisement: [code]Connection-specific DNS Suffix . : xxx.xxx Description . . . . . . . . . . . : TAP-Windows Adapter V9 Physical Address. . . . . . . . . : 00-FF-A0-C5-DE-CA DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IPv6 Address. . . . . . . . . . . : 2021:248:2320:1:a9c3:31d9:3c0e:e2d3(Preferred) Temporary IPv6 Address. . . . . . : 2021:248:2320:1:6997:b94f:dd7:c178(Preferred) Link-local IPv6 Address . . . . . : fe80::a9c3:31d9:3c0e:e2d3%22(Preferred) IPv4 Address. . . . . . . . . . . : 125.125.29.102(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.128 Lease Obtained. . . . . . . . . . : xxx Lease Expires . . . . . . . . . . : xxx Default Gateway . . . . . . . . . : fe80::21e:bdff:fe30:4b1b%22 DHCP Server . . . . . . . . . . . : 125.125.29.0 DHCPv6 IAID . . . . . . . . . . . : 369164192 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1C-70-CA-01-00-22-xx-xx-F3-58 DNS Servers . . . . . . . . . . . : 125.125.29.11 177.29.211.34[/code] [quote="TinCanTech"] Clients obtain an IPv4 from the following config, [b]and IPv6 from our router (they are bridged so they get IPv6 router advertisements)[/b]Is that working ?[/quote] It is working for a long time as we also use OpenVPN for users/clients whose ISP provides only IPv4, and they successfully get IPv6 on their TAP adapter via our setup . [quote="TinCanTech"] Perhaps you meant:[quote="The Manual"]If --[b]server-bridge[/b] is used without any parameters, it will enable a DHCP-proxy mode, where connecting OpenVPN clients will receive an IP address for their TAP adapter from the DHCP server running on the OpenVPN server-side LAN.[/quote][/quote] Understood, but this is not my case. Clients receive an IPv4 address from my OpenVPN config, no other (IPv4) DHCP server is present in this subnet. Clients get IPv6 RAs because they are on the same VLAN with our router, I hope this is clear to you. Thank you!

I tried setting an IPv4 DHCP server on my LAN, and disabling the following line on my server config: [code]server-bridge 125.125.29.1 255.255.255.128 125.125.29.109 125.125.29.111 ifconfig-pool-persist pool-persist-tap[/code] and istead just use: [code]server-bridge[/code] without parameters. My clients now obtain a DHCP address from the DHCP server and not from OpenVPN server. They still obtain IPv6 address via RAs, but I still get the same error: [code]add_route_ipv6(): not adding 2021:248::/32: no IPv6 address been configured on interface Ethernet[/code]

Unfortunately, I do not have the equipment necessary to test your setup (no v6 dhcp server) It appears that openvpn does not recognise the ipv6 address on the TAP so, for testing, can you please try this approach: Instead of getting the v6 address from RA's please add to your config: [code]ifconfig-ipv6 {ipv6-address/bits} {ipv6-remote}[/code]either directly to the client config or pushed from the server .. and let us know the result, thanks 8-) I have asked the devs and they are [i]curious[/i] but we need to flesh this out a little more.

Are you assigning the same v6 address as you would receive via v6 RA's ? Can you post the configs and logs again ? Also, see trac #[url=https://community.openvpn.net/openvpn]832[/url] Thanks for working on this with me.

v2.4 IPv4/IPv6 not working as expected

meres

I am running an OpenVPN server with both public IPv4/IPv6.
Clients obtain an IPv4 from the following config, and IPv6 from our router (they are bridged so they get IPv6 router advertisements)

Server:

dev tap
proto udp6
port 1194
management 127.0.0.1 1194
server-bridge 125.125.29.1 255.255.255.128 125.125.29.109 125.125.29.111
ifconfig-pool-persist pool-persist-tap
#push "tun-ipv6" - not needed in version 2.4
push "route remote_host 255.255.255.255 net_gateway"
push "route 125.125.28.0 255.255.254.0 125.125.29.1"
keepalive 5 15
persist-key
persist-tun
comp-lzo
script-security 2
up ./upscript
down ./downscript
mute-replay-warnings
client-cert-not-required
username-as-common-name
client-config-dir clients
auth-user-pass-verify ./auth_radius.pl via-file
syslog openvpn-tap.log
status status-tap.log
verb 2

When I was using version 2.3, I used an IPv6 route to my clients (those who supported IPv6) in order to route IPv6 traffic to our servers through the tunnel:
client:

route-ipv6 2021:248::/32 2021:248:2320:1::2

and it used to work correctly. IPv6 traffic to the internet went through my ISP, and IPv6 traffic to 2021:248::/32 went through the OpenVPN tunnel..

After upgrading my server and clients to 2.4, I get the following error:
add_route_ipv6(): not adding 2021:248::/32: no IPv6 address been configured on interface Ethernet.
ipconfig proves that both my LAN and TAP adapters have an IPv6 address, and I use route delay to my client configs.
I get the same error when I try to connect to my server using either its IPv4 or IPv6 interface.
I event tried using

redirect-gateway ipv6

on my clients, even if this is not what I exactly want, but apart from the error i mentioned before, I also get the following errors:
OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
I don't think that the parameters above apply to my stateless IPv6 configuration and messing around with route-ipv6-gateway was not succesful.

TinCanTech

Please add full configs and logs.

Please see:
HOWTO: Request Help !

meres

Hello again, the configs/logs below:

server.conf

dev tap
proto udp
port 1194
management 127.0.0.1 1194
server-bridge 125.125.29.1 255.255.255.128 125.125.29.109 125.125.29.111
ifconfig-pool-persist pool-persist-tap
push "route remote_host 255.255.255.255 net_gateway"
push "route 125.125.28.0 255.255.254.0 125.125.29.1"
#push "tun-ipv6" - not needed in version 2.4
dh      keys/dh1024.pem
ca      new-ssl/sha256/CA/ca.crt
cert    new-ssl/sha256/cert.crt
key     new-ssl/sha256/key.key
keepalive 5 15
persist-key
persist-tun
comp-lzo
script-security 2
up ./upscript
down ./downscript
mute-replay-warnings
client-cert-not-required
username-as-common-name
client-config-dir clients
auth-user-pass-verify ./auth_radius.pl via-file
syslog openvpn-tap.log
verb 4

client.conf

dev tap
remote 125.125.29.2
tls-client
ca ca.crt
verify-x509-name xxx.xxx name
mute-replay-warnings
pull
route 125.125.212.0 255.255.255.0
# uncomment to enable default gateway redirection
#redirect-gateway def1
# uncomment to enable IPv6 routing - not supported on macOS
route-ipv6 2021:248::/32 2021:248:2320:1::2
#redirect-gateway ipv6 
route-method exe
route-delay 2
auth-user-pass
verb 4
comp-lzo

client log

Fri Jan 27 21:30:43 2017 us=17498 Current Parameter Settings:
Fri Jan 27 21:30:43 2017 us=17498   config = 'client.ovpn'
Fri Jan 27 21:30:43 2017 us=17498   mode = 0
Fri Jan 27 21:30:43 2017 us=17498   show_ciphers = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   show_digests = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   show_engines = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   genkey = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   key_pass_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   show_tls_ciphers = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   connect_retry_max = 0
Fri Jan 27 21:30:43 2017 us=17498 Connection profiles [0]:
Fri Jan 27 21:30:43 2017 us=17498   proto = udp
Fri Jan 27 21:30:43 2017 us=17498   local = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   local_port = '1194'
Fri Jan 27 21:30:43 2017 us=17498   remote = '125.125.29.2'
Fri Jan 27 21:30:43 2017 us=17498   remote_port = '1194'
Fri Jan 27 21:30:43 2017 us=17498   remote_float = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   bind_defined = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   bind_local = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   bind_ipv6_only = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   connect_retry_seconds = 5
Fri Jan 27 21:30:43 2017 us=17498   connect_timeout = 120
Fri Jan 27 21:30:43 2017 us=17498   socks_proxy_server = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   socks_proxy_port = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   tun_mtu = 1500
Fri Jan 27 21:30:43 2017 us=17498   tun_mtu_defined = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   link_mtu = 1500
Fri Jan 27 21:30:43 2017 us=17498   link_mtu_defined = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   tun_mtu_extra = 32
Fri Jan 27 21:30:43 2017 us=17498   tun_mtu_extra_defined = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   mtu_discover_type = -1
Fri Jan 27 21:30:43 2017 us=17498   fragment = 0
Fri Jan 27 21:30:43 2017 us=17498   mssfix = 1450
Fri Jan 27 21:30:43 2017 us=17498   explicit_exit_notification = 0
Fri Jan 27 21:30:43 2017 us=17498 Connection profiles END
Fri Jan 27 21:30:43 2017 us=17498   remote_random = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   ipchange = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   dev = 'tap'
Fri Jan 27 21:30:43 2017 us=17498   dev_type = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   dev_node = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   lladdr = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   topology = 1
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_local = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_remote_netmask = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_noexec = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_nowarn = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_ipv6_local = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_ipv6_netbits = 0
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_ipv6_remote = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   shaper = 0
Fri Jan 27 21:30:43 2017 us=17498   mtu_test = 0
Fri Jan 27 21:30:43 2017 us=17498   mlock = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   keepalive_ping = 0
Fri Jan 27 21:30:43 2017 us=17498   keepalive_timeout = 0
Fri Jan 27 21:30:43 2017 us=17498   inactivity_timeout = 0
Fri Jan 27 21:30:43 2017 us=17498   ping_send_timeout = 0
Fri Jan 27 21:30:43 2017 us=17498   ping_rec_timeout = 0
Fri Jan 27 21:30:43 2017 us=17498   ping_rec_timeout_action = 0
Fri Jan 27 21:30:43 2017 us=17498   ping_timer_remote = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   remap_sigusr1 = 0
Fri Jan 27 21:30:43 2017 us=17498   persist_tun = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   persist_local_ip = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   persist_remote_ip = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   persist_key = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   passtos = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   resolve_retry_seconds = 1000000000
Fri Jan 27 21:30:43 2017 us=17498   resolve_in_advance = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   username = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   groupname = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   chroot_dir = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   cd_dir = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   writepid = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   up_script = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   down_script = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   down_pre = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   up_restart = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   up_delay = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   daemon = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   inetd = 0
Fri Jan 27 21:30:43 2017 us=17498   log = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   suppress_timestamps = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   machine_readable_output = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   nice = 0
Fri Jan 27 21:30:43 2017 us=17498   verbosity = 4
Fri Jan 27 21:30:43 2017 us=17498   mute = 0
Fri Jan 27 21:30:43 2017 us=17498   gremlin = 0
Fri Jan 27 21:30:43 2017 us=17498   status_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   status_file_version = 1
Fri Jan 27 21:30:43 2017 us=17498   status_file_update_freq = 60
Fri Jan 27 21:30:43 2017 us=17498   occ = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   rcvbuf = 0
Fri Jan 27 21:30:43 2017 us=17498   sndbuf = 0
Fri Jan 27 21:30:43 2017 us=17498   sockflags = 0
Fri Jan 27 21:30:43 2017 us=17498   fast_io = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   comp.alg = 2
Fri Jan 27 21:30:43 2017 us=17498   comp.flags = 1
Fri Jan 27 21:30:43 2017 us=17498   route_script = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   route_default_gateway = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   route_default_metric = 0
Fri Jan 27 21:30:43 2017 us=17498   route_noexec = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   route_delay = 2
Fri Jan 27 21:30:43 2017 us=17498   route_delay_window = 30
Fri Jan 27 21:30:43 2017 us=17498   route_delay_defined = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   route_nopull = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   route_gateway_via_dhcp = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   allow_pull_fqdn = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   route 125.125.212.0/255.255.255.0/default (not set)/default (not set)
Fri Jan 27 21:30:43 2017 us=17498   management_addr = '127.0.0.1'
Fri Jan 27 21:30:43 2017 us=17498   management_port = '25342'
Fri Jan 27 21:30:43 2017 us=17498   management_user_pass = 'stdin'
Fri Jan 27 21:30:43 2017 us=17498   management_log_history_cache = 250
Fri Jan 27 21:30:43 2017 us=17498   management_echo_buffer_size = 100
Fri Jan 27 21:30:43 2017 us=17498   management_write_peer_info_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   management_client_user = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   management_client_group = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   management_flags = 6
Fri Jan 27 21:30:43 2017 us=17498   shared_secret_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   key_direction = 0
Fri Jan 27 21:30:43 2017 us=17498   ciphername = 'BF-CBC'
Fri Jan 27 21:30:43 2017 us=17498   ncp_enabled = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri Jan 27 21:30:43 2017 us=17498   authname = 'SHA1'
Fri Jan 27 21:30:43 2017 us=17498   prng_hash = 'SHA1'
Fri Jan 27 21:30:43 2017 us=17498   prng_nonce_secret_len = 16
Fri Jan 27 21:30:43 2017 us=17498   keysize = 0
Fri Jan 27 21:30:43 2017 us=17498   engine = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   replay = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   mute_replay_warnings = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   replay_window = 64
Fri Jan 27 21:30:43 2017 us=17498   replay_time = 15
Fri Jan 27 21:30:43 2017 us=17498   packet_id_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   use_iv = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   test_crypto = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   tls_server = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   tls_client = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   key_method = 2
Fri Jan 27 21:30:43 2017 us=17498   ca_file = 'ca.crt'
Fri Jan 27 21:30:43 2017 us=17498   ca_path = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   dh_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   cert_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   extra_certs_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   priv_key_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   pkcs12_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   cryptoapi_cert = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   cipher_list = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   tls_verify = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   tls_export_cert = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   verify_x509_type = 2
Fri Jan 27 21:30:43 2017 us=17498   verify_x509_name = 'xxxx'
Fri Jan 27 21:30:43 2017 us=17498   crl_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   ns_cert_type = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_ku[i] = 0
Fri Jan 27 21:30:43 2017 us=17498   remote_cert_eku = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   ssl_flags = 0
Fri Jan 27 21:30:43 2017 us=17498   tls_timeout = 2
Fri Jan 27 21:30:43 2017 us=17498   renegotiate_bytes = -1
Fri Jan 27 21:30:43 2017 us=17498   renegotiate_packets = 0
Fri Jan 27 21:30:43 2017 us=17498   renegotiate_seconds = 3600
Fri Jan 27 21:30:43 2017 us=17498   handshake_window = 60
Fri Jan 27 21:30:43 2017 us=17498   transition_window = 3600
Fri Jan 27 21:30:43 2017 us=17498   single_session = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   push_peer_info = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   tls_exit = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   tls_auth_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   tls_crypt_file = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_private_mode = 00000000
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_cert_private = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_pin_cache_period = -1
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_id = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   pkcs11_id_management = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   server_network = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   server_netmask = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   server_network_ipv6 = ::
Fri Jan 27 21:30:43 2017 us=17498   server_netbits_ipv6 = 0
Fri Jan 27 21:30:43 2017 us=17498   server_bridge_ip = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   server_bridge_netmask = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   server_bridge_pool_start = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   server_bridge_pool_end = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_pool_defined = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_pool_start = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_pool_end = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_pool_netmask = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_pool_persist_refresh_freq = 600
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_ipv6_pool_defined = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_ipv6_pool_base = ::
Fri Jan 27 21:30:43 2017 us=17498   ifconfig_ipv6_pool_netbits = 0
Fri Jan 27 21:30:43 2017 us=17498   n_bcast_buf = 256
Fri Jan 27 21:30:43 2017 us=17498   tcp_queue_limit = 64
Fri Jan 27 21:30:43 2017 us=17498   real_hash_size = 256
Fri Jan 27 21:30:43 2017 us=17498   virtual_hash_size = 256
Fri Jan 27 21:30:43 2017 us=17498   client_connect_script = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   learn_address_script = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   client_disconnect_script = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   client_config_dir = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   ccd_exclusive = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   tmp_dir = 'C:\Users\admin\AppData\Local\Temp\'
Fri Jan 27 21:30:43 2017 us=17498   push_ifconfig_defined = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   push_ifconfig_local = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jan 27 21:30:43 2017 us=17498   push_ifconfig_ipv6_defined = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   push_ifconfig_ipv6_local = ::/0
Fri Jan 27 21:30:43 2017 us=17498   push_ifconfig_ipv6_remote = ::
Fri Jan 27 21:30:43 2017 us=17498   enable_c2c = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   duplicate_cn = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   cf_max = 0
Fri Jan 27 21:30:43 2017 us=17498   cf_per = 0
Fri Jan 27 21:30:43 2017 us=17498   max_clients = 1024
Fri Jan 27 21:30:43 2017 us=17498   max_routes_per_client = 256
Fri Jan 27 21:30:43 2017 us=17498   auth_user_pass_verify_script = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   auth_user_pass_verify_script_via_file = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   auth_token_generate = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   auth_token_lifetime = 0
Fri Jan 27 21:30:43 2017 us=17498   client = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   pull = ENABLED
Fri Jan 27 21:30:43 2017 us=17498   show_net_up = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   route_method = 2
Fri Jan 27 21:30:43 2017 us=17498   block_outside_dns = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   ip_win32_defined = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   ip_win32_type = 3
Fri Jan 27 21:30:43 2017 us=17498   dhcp_masq_offset = 0
Fri Jan 27 21:30:43 2017 us=17498   dhcp_lease_time = 31536000
Fri Jan 27 21:30:43 2017 us=17498   tap_sleep = 0
Fri Jan 27 21:30:43 2017 us=17498   dhcp_options = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   dhcp_renew = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   dhcp_pre_release = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   dhcp_release = DISABLED
Fri Jan 27 21:30:43 2017 us=17498   domain = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   netbios_scope = '[UNDEF]'
Fri Jan 27 21:30:43 2017 us=17498   netbios_node_type = 0
Fri Jan 27 21:30:43 2017 us=17498   disable_nbt = DISABLED
Fri Jan 27 21:30:43 2017 us=17498 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Fri Jan 27 21:30:43 2017 us=17498 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Jan 27 21:30:43 2017 us=17498 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Enter Management Password:
Fri Jan 27 21:30:43 2017 us=17498 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Fri Jan 27 21:30:43 2017 us=17498 Need hold release from management interface, waiting...
Fri Jan 27 21:30:43 2017 us=517498 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Fri Jan 27 21:30:43 2017 us=626875 MANAGEMENT: CMD 'state on'
Fri Jan 27 21:30:43 2017 us=626875 MANAGEMENT: CMD 'log all on'
Fri Jan 27 21:30:43 2017 us=751875 MANAGEMENT: CMD 'hold off'
Fri Jan 27 21:30:43 2017 us=751875 MANAGEMENT: CMD 'hold release'
Fri Jan 27 21:30:43 2017 us=876875 LZO compression initializing
Fri Jan 27 21:30:43 2017 us=876875 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Fri Jan 27 21:30:43 2017 us=876875 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Fri Jan 27 21:30:43 2017 us=876875 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Jan 27 21:30:43 2017 us=876875 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Jan 27 21:30:43 2017 us=876875 TCP/UDP: Preserving recently used remote address: [AF_INET]125.125.29.2:1194
Fri Jan 27 21:30:43 2017 us=876875 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Jan 27 21:30:43 2017 us=876875 UDP link local (bound): [AF_INET][undef]:1194
Fri Jan 27 21:30:43 2017 us=876875 UDP link remote: [AF_INET]125.125.29.2:1194
Fri Jan 27 21:30:43 2017 us=876875 MANAGEMENT: >STATE:1485545443,WAIT,,,,,,
Fri Jan 27 21:30:43 2017 us=892500 MANAGEMENT: >STATE:1485545443,AUTH,,,,,,
Fri Jan 27 21:30:43 2017 us=892500 TLS: Initial packet from [AF_INET]125.125.29.2:1194, sid=eacdb494 6627162b
Fri Jan 27 21:30:43 2017 us=892500 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Jan 27 21:30:43 2017 us=923750 VERIFY OK: depth=1, xxx
Fri Jan 27 21:30:43 2017 us=923750 VERIFY X509NAME OK: xxx
Fri Jan 27 21:30:43 2017 us=923750 VERIFY OK: xxx
Fri Jan 27 21:30:44 2017 us=158126 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Jan 27 21:30:44 2017 us=158126 [xxxxxx] Peer Connection Initiated with [AF_INET]125.125.29.2:1194
Fri Jan 27 21:30:45 2017 us=408128 MANAGEMENT: >STATE:1485545445,GET_CONFIG,,,,,,
Fri Jan 27 21:30:45 2017 us=408128 SENT CONTROL [xxxxxx]: 'PUSH_REQUEST' (status=1)
Fri Jan 27 21:30:45 2017 us=423754 PUSH: Received control message: 'PUSH_REPLY,route remote_host 255.255.255.255 net_gateway,route 125.125.28.0 255.255.254.0 125.125.29.1,route-gateway 125.125.29.1,ping 5,ping-restart 15,ifconfig 125.125.29.109 255.255.255.128,peer-id 0,cipher AES-256-GCM'
Fri Jan 27 21:30:45 2017 us=423754 OPTIONS IMPORT: timers and/or timeouts modified
Fri Jan 27 21:30:45 2017 us=423754 OPTIONS IMPORT: --ifconfig/up options modified
Fri Jan 27 21:30:45 2017 us=423754 OPTIONS IMPORT: route options modified
Fri Jan 27 21:30:45 2017 us=423754 OPTIONS IMPORT: route-related options modified
Fri Jan 27 21:30:45 2017 us=423754 OPTIONS IMPORT: peer-id set
Fri Jan 27 21:30:45 2017 us=423754 OPTIONS IMPORT: adjusting link_mtu to 1657
Fri Jan 27 21:30:45 2017 us=423754 OPTIONS IMPORT: data channel crypto options modified
Fri Jan 27 21:30:45 2017 us=423754 Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ]
Fri Jan 27 21:30:45 2017 us=423754 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 27 21:30:45 2017 us=423754 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 27 21:30:45 2017 us=423754 interactive service msg_channel=0
Fri Jan 27 21:30:45 2017 us=423754 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=3 HWADDR=00:22:15:54:f3:58
Fri Jan 27 21:30:45 2017 us=423754 GDG6: remote_host_ipv6=n/a
Fri Jan 27 21:30:45 2017 us=423754 GetBestInterfaceEx() returned if=3
Fri Jan 27 21:30:45 2017 us=423754 GDG6: II=3 DP=::/0 NH=fe80::dc9f:dbff:fe03:5a45
Fri Jan 27 21:30:45 2017 us=423754 GDG6: Metric=256, Loopback=0, AA=1, I=0
Fri Jan 27 21:30:45 2017 us=423754 ROUTE6_GATEWAY fe80::dc9f:dbff:fe03:5a45 I=3
Fri Jan 27 21:30:45 2017 us=423754 open_tun
Fri Jan 27 21:30:45 2017 us=423754 TAP-WIN32 device [Ethernet] opened: \\.\Global\{A0C5DECA-47F9-4643-A312-7FDDD9802C4C}.tap
Fri Jan 27 21:30:45 2017 us=423754 TAP-Windows Driver Version 9.21 
Fri Jan 27 21:30:45 2017 us=423754 TAP-Windows MTU=1500
Fri Jan 27 21:30:45 2017 us=423754 Notified TAP-Windows driver to set a DHCP IP/netmask of 125.125.29.109/255.255.255.128 on interface {A0C5DECA-47F9-4643-A312-7FDDD9802C4C} [DHCP-serv: 125.125.29.0, lease-time: 31536000]
Fri Jan 27 21:30:45 2017 us=423754 Successful ARP Flush on interface [22] {A0C5DECA-47F9-4643-A312-7FDDD9802C4C}
Fri Jan 27 21:30:45 2017 us=439379 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Jan 27 21:30:45 2017 us=439379 MANAGEMENT: >STATE:1485545445,ASSIGN_IP,,125.125.29.109,,,,
Fri Jan 27 21:30:47 2017 us=142508 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Fri Jan 27 21:30:47 2017 us=142508 MANAGEMENT: >STATE:1485545447,ADD_ROUTES,,,,,,
Fri Jan 27 21:30:47 2017 us=142508 C:\Windows\system32\route.exe ADD 125.125.212.0 MASK 255.255.255.0 125.125.29.1
Fri Jan 27 21:30:47 2017 us=142508 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Fri Jan 27 21:30:47 2017 us=158134 C:\Windows\system32\route.exe ADD 125.125.29.2 MASK 255.255.255.255 192.168.2.1
Fri Jan 27 21:30:47 2017 us=158134 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Fri Jan 27 21:30:47 2017 us=189384 C:\Windows\system32\route.exe ADD 125.125.28.0 MASK 255.255.254.0 125.125.29.1
Fri Jan 27 21:30:47 2017 us=189384 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Fri Jan 27 21:30:47 2017 us=205009 add_route_ipv6(): not adding 2021:248::/32: no IPv6 address been configured on interface Ethernet
Fri Jan 27 21:30:47 2017 us=205009 Initialization Sequence Completed
Fri Jan 27 21:30:47 2017 us=205009 MANAGEMENT: >STATE:1485545447,CONNECTED,SUCCESS,125.125.29.109,125.125.29.2,1194,,
Fri Jan 27 21:30:47 2017 us=314384 Recursive routing detected, drop tun packet to [AF_INET]125.125.29.2:1194

server log

Fri Jan 27 21:33:54 2017 us=237565 Current Parameter Settings:
Fri Jan 27 21:33:54 2017 us=237573   config = '/etc/openvpn/tap.conf'
Fri Jan 27 21:33:54 2017 us=237581   mode = 1
Fri Jan 27 21:33:54 2017 us=237588   persist_config = DISABLED
Fri Jan 27 21:33:54 2017 us=237595   persist_mode = 1
Fri Jan 27 21:33:54 2017 us=237602   show_ciphers = DISABLED
Fri Jan 27 21:33:54 2017 us=237609   show_digests = DISABLED
Fri Jan 27 21:33:54 2017 us=237616   show_engines = DISABLED
Fri Jan 27 21:33:54 2017 us=237623   genkey = DISABLED
Fri Jan 27 21:33:54 2017 us=237630   key_pass_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237637   show_tls_ciphers = DISABLED
Fri Jan 27 21:33:54 2017 us=237644   connect_retry_max = 0
Fri Jan 27 21:33:54 2017 us=237651 Connection profiles [0]:
Fri Jan 27 21:33:54 2017 us=237659   proto = udp
Fri Jan 27 21:33:54 2017 us=237666   local = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237673   local_port = '1194'
Fri Jan 27 21:33:54 2017 us=237680   remote = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237687   remote_port = '1194'
Fri Jan 27 21:33:54 2017 us=237694   remote_float = DISABLED
Fri Jan 27 21:33:54 2017 us=237701   bind_defined = DISABLED
Fri Jan 27 21:33:54 2017 us=237709   bind_local = ENABLED
Fri Jan 27 21:33:54 2017 us=237716   bind_ipv6_only = DISABLED
Fri Jan 27 21:33:54 2017 us=237723   connect_retry_seconds = 5
Fri Jan 27 21:33:54 2017 us=237730   connect_timeout = 120
Fri Jan 27 21:33:54 2017 us=237738   socks_proxy_server = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237745   socks_proxy_port = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237752   tun_mtu = 1500
Fri Jan 27 21:33:54 2017 us=237759   tun_mtu_defined = ENABLED
Fri Jan 27 21:33:54 2017 us=237766   link_mtu = 1500
Fri Jan 27 21:33:54 2017 us=237773   link_mtu_defined = DISABLED
Fri Jan 27 21:33:54 2017 us=237785   tun_mtu_extra = 32
Fri Jan 27 21:33:54 2017 us=237792   tun_mtu_extra_defined = ENABLED
Fri Jan 27 21:33:54 2017 us=237799   mtu_discover_type = -1
Fri Jan 27 21:33:54 2017 us=237807   fragment = 0
Fri Jan 27 21:33:54 2017 us=237818   mssfix = 1450
Fri Jan 27 21:33:54 2017 us=237826   explicit_exit_notification = 0
Fri Jan 27 21:33:54 2017 us=237833 Connection profiles END
Fri Jan 27 21:33:54 2017 us=237840   remote_random = DISABLED
Fri Jan 27 21:33:54 2017 us=237847   ipchange = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237854   dev = 'tap'
Fri Jan 27 21:33:54 2017 us=237861   dev_type = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237867   dev_node = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237874   lladdr = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237882   topology = 1
Fri Jan 27 21:33:54 2017 us=237889   ifconfig_local = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237896   ifconfig_remote_netmask = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237903   ifconfig_noexec = DISABLED
Fri Jan 27 21:33:54 2017 us=237910   ifconfig_nowarn = DISABLED
Fri Jan 27 21:33:54 2017 us=237917   ifconfig_ipv6_local = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237924   ifconfig_ipv6_netbits = 0
Fri Jan 27 21:33:54 2017 us=237931   ifconfig_ipv6_remote = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=237938   shaper = 0
Fri Jan 27 21:33:54 2017 us=237945   mtu_test = 0
Fri Jan 27 21:33:54 2017 us=237952   mlock = DISABLED
Fri Jan 27 21:33:54 2017 us=237959   keepalive_ping = 5
Fri Jan 27 21:33:54 2017 us=237966   keepalive_timeout = 15
Fri Jan 27 21:33:54 2017 us=237973   inactivity_timeout = 0
Fri Jan 27 21:33:54 2017 us=237980   ping_send_timeout = 5
Fri Jan 27 21:33:54 2017 us=237987   ping_rec_timeout = 30
Fri Jan 27 21:33:54 2017 us=237994   ping_rec_timeout_action = 2
Fri Jan 27 21:33:54 2017 us=238001   ping_timer_remote = DISABLED
Fri Jan 27 21:33:54 2017 us=238008   remap_sigusr1 = 0
Fri Jan 27 21:33:54 2017 us=238015   persist_tun = ENABLED
Fri Jan 27 21:33:54 2017 us=238021   persist_local_ip = DISABLED
Fri Jan 27 21:33:54 2017 us=238028   persist_remote_ip = DISABLED
Fri Jan 27 21:33:54 2017 us=238035   persist_key = ENABLED
Fri Jan 27 21:33:54 2017 us=238056   passtos = DISABLED
Fri Jan 27 21:33:54 2017 us=238064   resolve_retry_seconds = 1000000000
Fri Jan 27 21:33:54 2017 us=238071   resolve_in_advance = DISABLED
Fri Jan 27 21:33:54 2017 us=238078   username = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238087   groupname = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238094   chroot_dir = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238101   cd_dir = '/etc/openvpn'
Fri Jan 27 21:33:54 2017 us=238108   writepid = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238115   up_script = './upscript'
Fri Jan 27 21:33:54 2017 us=238122   down_script = './downscript'
Fri Jan 27 21:33:54 2017 us=238133   down_pre = DISABLED
Fri Jan 27 21:33:54 2017 us=238140   up_restart = DISABLED
Fri Jan 27 21:33:54 2017 us=238147   up_delay = DISABLED
Fri Jan 27 21:33:54 2017 us=238157   daemon = ENABLED
Fri Jan 27 21:33:54 2017 us=238164   inetd = 0
Fri Jan 27 21:33:54 2017 us=238171   log = ENABLED
Fri Jan 27 21:33:54 2017 us=238178   suppress_timestamps = DISABLED
Fri Jan 27 21:33:54 2017 us=238185   machine_readable_output = DISABLED
Fri Jan 27 21:33:54 2017 us=238192   nice = 0
Fri Jan 27 21:33:54 2017 us=238199   verbosity = 4
Fri Jan 27 21:33:54 2017 us=238206   mute = 0
Fri Jan 27 21:33:54 2017 us=238213   gremlin = 0
Fri Jan 27 21:33:54 2017 us=238220   status_file = '/run/openvpn/tap.status'
Fri Jan 27 21:33:54 2017 us=238228   status_file_version = 1
Fri Jan 27 21:33:54 2017 us=238235   status_file_update_freq = 10
Fri Jan 27 21:33:54 2017 us=238241   occ = ENABLED
Fri Jan 27 21:33:54 2017 us=238248   rcvbuf = 0
Fri Jan 27 21:33:54 2017 us=238255   sndbuf = 0
Fri Jan 27 21:33:54 2017 us=238262   mark = 0
Fri Jan 27 21:33:54 2017 us=238269   sockflags = 0
Fri Jan 27 21:33:54 2017 us=238276   fast_io = DISABLED
Fri Jan 27 21:33:54 2017 us=238283   comp.alg = 2
Fri Jan 27 21:33:54 2017 us=238290   comp.flags = 1
Fri Jan 27 21:33:54 2017 us=238297   route_script = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238305   route_default_gateway = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238312   route_default_metric = 0
Fri Jan 27 21:33:54 2017 us=238319   route_noexec = DISABLED
Fri Jan 27 21:33:54 2017 us=238327   route_delay = 0
Fri Jan 27 21:33:54 2017 us=238334   route_delay_window = 30
Fri Jan 27 21:33:54 2017 us=238345   route_delay_defined = DISABLED
Fri Jan 27 21:33:54 2017 us=238352   route_nopull = DISABLED
Fri Jan 27 21:33:54 2017 us=238359   route_gateway_via_dhcp = DISABLED
Fri Jan 27 21:33:54 2017 us=238366   allow_pull_fqdn = DISABLED
Fri Jan 27 21:33:54 2017 us=238373   management_addr = '127.0.0.1'
Fri Jan 27 21:33:54 2017 us=238380   management_port = '1194'
Fri Jan 27 21:33:54 2017 us=238387   management_user_pass = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238394   management_log_history_cache = 250
Fri Jan 27 21:33:54 2017 us=238401   management_echo_buffer_size = 100
Fri Jan 27 21:33:54 2017 us=238409   management_write_peer_info_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238416   management_client_user = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238423   management_client_group = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238430   management_flags = 0
Fri Jan 27 21:33:54 2017 us=238437   shared_secret_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238444   key_direction = 0
Fri Jan 27 21:33:54 2017 us=238451   ciphername = 'BF-CBC'
Fri Jan 27 21:33:54 2017 us=238458   ncp_enabled = ENABLED
Fri Jan 27 21:33:54 2017 us=238465   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri Jan 27 21:33:54 2017 us=238472   authname = 'SHA1'
Fri Jan 27 21:33:54 2017 us=238484   prng_hash = 'SHA1'
Fri Jan 27 21:33:54 2017 us=238491   prng_nonce_secret_len = 16
Fri Jan 27 21:33:54 2017 us=238498   keysize = 0
Fri Jan 27 21:33:54 2017 us=238505   engine = DISABLED
Fri Jan 27 21:33:54 2017 us=238512   replay = ENABLED
Fri Jan 27 21:33:54 2017 us=238519   mute_replay_warnings = ENABLED
Fri Jan 27 21:33:54 2017 us=238526   replay_window = 64
Fri Jan 27 21:33:54 2017 us=238533   replay_time = 15
Fri Jan 27 21:33:54 2017 us=238540   packet_id_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238547   use_iv = ENABLED
Fri Jan 27 21:33:54 2017 us=238558   test_crypto = DISABLED
Fri Jan 27 21:33:54 2017 us=238566   tls_server = ENABLED
Fri Jan 27 21:33:54 2017 us=238573   tls_client = DISABLED
Fri Jan 27 21:33:54 2017 us=238580   key_method = 2
Fri Jan 27 21:33:54 2017 us=238587   ca_file = 'ca.crt'
Fri Jan 27 21:33:54 2017 us=238594   ca_path = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238601   dh_file = 'keys/dh1024.pem'
Fri Jan 27 21:33:54 2017 us=238608   cert_file = 'cert.crt'
Fri Jan 27 21:33:54 2017 us=238616   extra_certs_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238623   priv_key_file = 'key.key'
Fri Jan 27 21:33:54 2017 us=238630   pkcs12_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238637   cipher_list = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238644   tls_verify = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238651   tls_export_cert = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238658   verify_x509_type = 0
Fri Jan 27 21:33:54 2017 us=238665   verify_x509_name = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238672   crl_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238679   ns_cert_type = 0
Fri Jan 27 21:33:54 2017 us=238686   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238692   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238699   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238706   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238713   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238720   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238727   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238733   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238740   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238747   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238754   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238761   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238768   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238775   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238782   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238788   remote_cert_ku[i] = 0
Fri Jan 27 21:33:54 2017 us=238795   remote_cert_eku = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238802   ssl_flags = 5
Fri Jan 27 21:33:54 2017 us=238809   tls_timeout = 2
Fri Jan 27 21:33:54 2017 us=238816   renegotiate_bytes = -1
Fri Jan 27 21:33:54 2017 us=238823   renegotiate_packets = 0
Fri Jan 27 21:33:54 2017 us=238830   renegotiate_seconds = 3600
Fri Jan 27 21:33:54 2017 us=238837   handshake_window = 60
Fri Jan 27 21:33:54 2017 us=238844   transition_window = 3600
Fri Jan 27 21:33:54 2017 us=238851   single_session = DISABLED
Fri Jan 27 21:33:54 2017 us=238858   push_peer_info = DISABLED
Fri Jan 27 21:33:54 2017 us=238865   tls_exit = DISABLED
Fri Jan 27 21:33:54 2017 us=238872   tls_auth_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238879   tls_crypt_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=238886   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238893   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238900   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238907   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238914   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238921   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238928   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238935   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238942   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238949   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238956   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238963   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238970   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238977   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238984   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=238996   pkcs11_protected_authentication = DISABLED
Fri Jan 27 21:33:54 2017 us=239004   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239011   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239018   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239024   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239031   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239038   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239045   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239052   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239059   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239066   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239073   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239080   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239087   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239094   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239101   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239108   pkcs11_private_mode = 00000000
Fri Jan 27 21:33:54 2017 us=239115   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239122   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239129   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239136   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239143   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239165   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239172   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239179   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239187   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239194   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239201   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239208   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239215   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239223   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239230   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239237   pkcs11_cert_private = DISABLED
Fri Jan 27 21:33:54 2017 us=239245   pkcs11_pin_cache_period = -1
Fri Jan 27 21:33:54 2017 us=239252   pkcs11_id = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=239259   pkcs11_id_management = DISABLED
Fri Jan 27 21:33:54 2017 us=239268   server_network = 0.0.0.0
Fri Jan 27 21:33:54 2017 us=239281   server_netmask = 0.0.0.0
Fri Jan 27 21:33:54 2017 us=239290   server_network_ipv6 = ::
Fri Jan 27 21:33:54 2017 us=239297   server_netbits_ipv6 = 0
Fri Jan 27 21:33:54 2017 us=239306   server_bridge_ip = 125.125.29.1
Fri Jan 27 21:33:54 2017 us=239314   server_bridge_netmask = 255.255.255.128
Fri Jan 27 21:33:54 2017 us=239322   server_bridge_pool_start = 125.125.29.109
Fri Jan 27 21:33:54 2017 us=239330   server_bridge_pool_end = 125.125.29.111
Fri Jan 27 21:33:54 2017 us=239338   push_entry = 'route remote_host 255.255.255.255 net_gateway'
Fri Jan 27 21:33:54 2017 us=239345   push_entry = 'route 125.125.28.0 255.255.254.0 125.125.29.1'
Fri Jan 27 21:33:54 2017 us=239352   push_entry = 'route-gateway 125.125.29.1'
Fri Jan 27 21:33:54 2017 us=239359   push_entry = 'ping 5'
Fri Jan 27 21:33:54 2017 us=239367   push_entry = 'ping-restart 15'
Fri Jan 27 21:33:54 2017 us=239376   ifconfig_pool_defined = ENABLED
Fri Jan 27 21:33:54 2017 us=239385   ifconfig_pool_start = 125.125.29.109
Fri Jan 27 21:33:54 2017 us=239393   ifconfig_pool_end = 125.125.29.111
Fri Jan 27 21:33:54 2017 us=239401   ifconfig_pool_netmask = 255.255.255.128
Fri Jan 27 21:33:54 2017 us=239408   ifconfig_pool_persist_filename = 'pool-persist-tap'
Fri Jan 27 21:33:54 2017 us=239416   ifconfig_pool_persist_refresh_freq = 600
Fri Jan 27 21:33:54 2017 us=239423   ifconfig_ipv6_pool_defined = DISABLED
Fri Jan 27 21:33:54 2017 us=239431   ifconfig_ipv6_pool_base = ::
Fri Jan 27 21:33:54 2017 us=239438   ifconfig_ipv6_pool_netbits = 0
Fri Jan 27 21:33:54 2017 us=239450   n_bcast_buf = 256
Fri Jan 27 21:33:54 2017 us=239458   tcp_queue_limit = 64
Fri Jan 27 21:33:54 2017 us=239465   real_hash_size = 256
Fri Jan 27 21:33:54 2017 us=239472   virtual_hash_size = 256
Fri Jan 27 21:33:54 2017 us=239479   client_connect_script = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=239486   learn_address_script = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=239493   client_disconnect_script = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=239501   client_config_dir = 'clients'
Fri Jan 27 21:33:54 2017 us=239508   ccd_exclusive = DISABLED
Fri Jan 27 21:33:54 2017 us=239515   tmp_dir = '/tmp'
Fri Jan 27 21:33:54 2017 us=239522   push_ifconfig_defined = DISABLED
Fri Jan 27 21:33:54 2017 us=239530   push_ifconfig_local = 0.0.0.0
Fri Jan 27 21:33:54 2017 us=239537   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jan 27 21:33:54 2017 us=239545   push_ifconfig_ipv6_defined = DISABLED
Fri Jan 27 21:33:54 2017 us=239552   push_ifconfig_ipv6_local = ::/0
Fri Jan 27 21:33:54 2017 us=239560   push_ifconfig_ipv6_remote = ::
Fri Jan 27 21:33:54 2017 us=239567   enable_c2c = DISABLED
Fri Jan 27 21:33:54 2017 us=239574   duplicate_cn = DISABLED
Fri Jan 27 21:33:54 2017 us=239581   cf_max = 0
Fri Jan 27 21:33:54 2017 us=239588   cf_per = 0
Fri Jan 27 21:33:54 2017 us=239595   max_clients = 1024
Fri Jan 27 21:33:54 2017 us=239606   max_routes_per_client = 256
Fri Jan 27 21:33:54 2017 us=239613   auth_user_pass_verify_script = './auth_radius.pl'
Fri Jan 27 21:33:54 2017 us=239620   auth_user_pass_verify_script_via_file = ENABLED
Fri Jan 27 21:33:54 2017 us=239627   auth_token_generate = DISABLED
Fri Jan 27 21:33:54 2017 us=239634   auth_token_lifetime = 0
Fri Jan 27 21:33:54 2017 us=239642   port_share_host = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=239651   port_share_port = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=239658   client = DISABLED
Fri Jan 27 21:33:54 2017 us=239665   pull = DISABLED
Fri Jan 27 21:33:54 2017 us=239672   auth_user_pass_file = '[UNDEF]'
Fri Jan 27 21:33:54 2017 us=239681 OpenVPN 2.4_rc1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Dec  2 2016
Fri Jan 27 21:33:54 2017 us=239716 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Fri Jan 27 21:33:54 2017 us=250515 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1194
Fri Jan 27 21:33:54 2017 us=251876 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Fri Jan 27 21:33:54 2017 us=252087 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 27 21:33:54 2017 us=252827 Diffie-Hellman initialized with 1024 bit key
Fri Jan 27 21:33:54 2017 us=260530 Failed to extract curve from certificate (UNDEF), using secp384r1 instead.
Fri Jan 27 21:33:54 2017 us=260553 ECDH curve secp384r1 added
Fri Jan 27 21:33:54 2017 us=260655 TLS-Auth MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Fri Jan 27 21:33:54 2017 us=261694 TUN/TAP device tap0 opened
Fri Jan 27 21:33:54 2017 us=261711 TUN/TAP TX queue length set to 100
Fri Jan 27 21:33:54 2017 us=261740 ./upscript tap0 1500 1654   init
Fri Jan 27 21:33:54 2017 us=283849 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Fri Jan 27 21:33:54 2017 us=283907 Could not determine IPv4/IPv6 protocol. Using AF_INET
Fri Jan 27 21:33:54 2017 us=283935 Socket Buffers: R=[212992->212992] S=[212992->212992]
Fri Jan 27 21:33:54 2017 us=283961 UDPv4 link local (bound): [AF_INET][undef]:1194
Fri Jan 27 21:33:54 2017 us=283970 UDPv4 link remote: [AF_UNSPEC]
Fri Jan 27 21:33:54 2017 us=283992 MULTI: multi_init called, r=256 v=256
Fri Jan 27 21:33:54 2017 us=284054 IFCONFIG POOL: base=125.125.29.109 size=3, ipv6=0
Fri Jan 27 21:33:54 2017 us=284072 ifconfig_pool_read(), in='user1,125.125.29.109', TODO: IPv6
Fri Jan 27 21:33:54 2017 us=284084 succeeded -> ifconfig_pool_set()
Fri Jan 27 21:33:54 2017 us=284093 ifconfig_pool_read(), in='user2,125.125.29.110', TODO: IPv6
Fri Jan 27 21:33:54 2017 us=284118 succeeded -> ifconfig_pool_set()
Fri Jan 27 21:33:54 2017 us=284127 ifconfig_pool_read(), in='user3,125.125.29.111', TODO: IPv6
Fri Jan 27 21:33:54 2017 us=284135 succeeded -> ifconfig_pool_set()
Fri Jan 27 21:33:54 2017 us=284145 IFCONFIG POOL LIST
Fri Jan 27 21:33:54 2017 us=284155 user1,125.125.29.109
Fri Jan 27 21:33:54 2017 us=284164 user2,125.125.29.110
Fri Jan 27 21:33:54 2017 us=284180 user3,125.125.29.111
Fri Jan 27 21:33:54 2017 us=284289 Initialization Sequence Completed
Fri Jan 27 21:34:05 2017 us=991374 MULTI: multi_create_instance called
Fri Jan 27 21:34:05 2017 us=991499 177.29.72.204:1194 Re-using SSL/TLS context
Fri Jan 27 21:34:05 2017 us=991530 177.29.72.204:1194 LZO compression initializing
Fri Jan 27 21:34:05 2017 us=991857 177.29.72.204:1194 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Fri Jan 27 21:34:05 2017 us=991870 177.29.72.204:1194 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Fri Jan 27 21:34:05 2017 us=991912 177.29.72.204:1194 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Jan 27 21:34:05 2017 us=991923 177.29.72.204:1194 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Jan 27 21:34:05 2017 us=991961 177.29.72.204:1194 TLS: Initial packet from [AF_INET]177.29.72.204:1194, sid=92a2fd52 264495d9
Fri Jan 27 21:34:06 2017 us=62873 177.29.72.204:1194 peer info: IV_VER=2.4.0
Fri Jan 27 21:34:06 2017 us=62948 177.29.72.204:1194 peer info: IV_PLAT=win
Fri Jan 27 21:34:06 2017 us=62957 177.29.72.204:1194 peer info: IV_PROTO=2
Fri Jan 27 21:34:06 2017 us=62967 177.29.72.204:1194 peer info: IV_NCP=2
Fri Jan 27 21:34:06 2017 us=62975 177.29.72.204:1194 peer info: IV_LZ4=1
Fri Jan 27 21:34:06 2017 us=62983 177.29.72.204:1194 peer info: IV_LZ4v2=1
Fri Jan 27 21:34:06 2017 us=62991 177.29.72.204:1194 peer info: IV_LZO=1
Fri Jan 27 21:34:06 2017 us=63000 177.29.72.204:1194 peer info: IV_COMP_STUB=1
Fri Jan 27 21:34:06 2017 us=63009 177.29.72.204:1194 peer info: IV_COMP_STUBv2=1
Fri Jan 27 21:34:06 2017 us=63017 177.29.72.204:1194 peer info: IV_TCPNL=1
Fri Jan 27 21:34:06 2017 us=63026 177.29.72.204:1194 peer info: IV_GUI_VER=OpenVPN_GUI_11
Fri Jan 27 21:34:06 2017 us=256564 177.29.72.204:1194 TLS: Username/Password authentication succeeded for username 'user1' [CN SET]
Fri Jan 27 21:34:06 2017 us=275920 177.29.72.204:1194 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384
Fri Jan 27 21:34:06 2017 us=276019 177.29.72.204:1194 [user1] Peer Connection Initiated with [AF_INET]177.29.72.204:1194
Fri Jan 27 21:34:06 2017 us=276080 user1/177.29.72.204:1194 MULTI_sva: pool returned IPv4=125.125.29.109, IPv6=(Not enabled)
Fri Jan 27 21:34:07 2017 us=491799 user1/177.29.72.204:1194 PUSH: Received control message: 'PUSH_REQUEST'
Fri Jan 27 21:34:07 2017 us=491934 user1/177.29.72.204:1194 SENT CONTROL [user1]: 'PUSH_REPLY,route remote_host 255.255.255.255 net_gateway,route 125.125.28.0 255.255.254.0 125.125.29.1,route-gateway 125.125.29.1,ping 5,ping-restart 15,ifconfig 125.125.29.109 255.255.255.128,peer-id 0,cipher AES-256-GCM' (status=1)
Fri Jan 27 21:34:07 2017 us=491965 user1/177.29.72.204:1194 Data Channel MTU parms [ L:1582 D:1450 EF:50 EB:411 ET:32 EL:3 ]
Fri Jan 27 21:34:07 2017 us=492087 user1/177.29.72.204:1194 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 27 21:34:07 2017 us=492100 user1/177.29.72.204:1194 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 27 21:34:09 2017 us=74731 user1/177.29.72.204:1194 MULTI: Learn: 00:ff:a0:c5:de:ca -> user1/177.29.72.204:1194

TinCanTech

meres wroteFri Jan 27 21:30:47 2017 us=205009 add_route_ipv6(): not adding 2021:248::/32: no IPv6 address been configured on interface Ethernet

I have not tested your setup myself .. But I would hazard a guess that the tun device needs an IPv6 address.

meres wroteClients obtain an IPv4 from the following config, and IPv6 from our router (they are bridged so they get IPv6 router advertisements)

Is that working ?

Perhaps you meant:

The Manual wroteIf --server-bridge is used without any parameters, it will enable a DHCP-proxy mode, where connecting OpenVPN clients will receive an IP address for their TAP adapter from the DHCP server running on the OpenVPN server-side LAN.

meres

It's a tap device, and it has already an IPv6 address obtained from our router via Router Advertisement:

Connection-specific DNS Suffix  . : xxx.xxx
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-A0-C5-DE-CA
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2021:248:2320:1:a9c3:31d9:3c0e:e2d3(Preferred)
Temporary IPv6 Address. . . . . . : 2021:248:2320:1:6997:b94f:dd7:c178(Preferred)
Link-local IPv6 Address . . . . . : fe80::a9c3:31d9:3c0e:e2d3%22(Preferred)
IPv4 Address. . . . . . . . . . . : 125.125.29.102(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.128
Lease Obtained. . . . . . . . . . : xxx
Lease Expires . . . . . . . . . . : xxx
Default Gateway . . . . . . . . . : fe80::21e:bdff:fe30:4b1b%22
DHCP Server . . . . . . . . . . . : 125.125.29.0
DHCPv6 IAID . . . . . . . . . . . : 369164192
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1C-70-CA-01-00-22-xx-xx-F3-58
DNS Servers . . . . . . . . . . . : 125.125.29.11
                                    177.29.211.34

TinCanTech wrote Clients obtain an IPv4 from the following config, and IPv6 from our router (they are bridged so they get IPv6 router advertisements)Is that working ?

It is working for a long time as we also use OpenVPN for users/clients whose ISP provides only IPv4, and they successfully get IPv6 on their TAP adapter via our setup .

TinCanTech wrote Perhaps you meant:
The Manual wroteIf --server-bridge is used without any parameters, it will enable a DHCP-proxy mode, where connecting OpenVPN clients will receive an IP address for their TAP adapter from the DHCP server running on the OpenVPN server-side LAN.

Understood, but this is not my case. Clients receive an IPv4 address from my OpenVPN config, no other (IPv4) DHCP server is present in this subnet.
Clients get IPv6 RAs because they are on the same VLAN with our router, I hope this is clear to you.
Thank you!

meres

I tried setting an IPv4 DHCP server on my LAN, and disabling the following line on my server config:

server-bridge 125.125.29.1 255.255.255.128 125.125.29.109 125.125.29.111
ifconfig-pool-persist pool-persist-tap

and istead just use:

server-bridge

without parameters.

My clients now obtain a DHCP address from the DHCP server and not from OpenVPN server.
They still obtain IPv6 address via RAs, but I still get the same error:

add_route_ipv6(): not adding 2021:248::/32: no IPv6 address been configured on interface Ethernet

TinCanTech

Unfortunately, I do not have the equipment necessary to test your setup (no v6 dhcp server)

It appears that openvpn does not recognise the ipv6 address on the TAP so,
for testing, can you please try this approach:

Instead of getting the v6 address from RA's please add to your config:

ifconfig-ipv6 {ipv6-address/bits} {ipv6-remote}

either directly to the client config or pushed from the server .. and let us know the result, thanks 8-)

I have asked the devs and they are curious but we need to flesh this out a little more.

meres

TinCanTech wroteUnfortunately, I do not have the equipment necessary to test your setup (no v6 dhcp server)

It appears that openvpn does not recognise the ipv6 address on the TAP so,
for testing, can you please try this approach:

Instead of getting the v6 address from RA's please add to your config:
ifconfig-ipv6 {ipv6-address/bits} {ipv6-remote}
either directly to the client config or pushed from the server .. and let us know the result, thanks 8-)

I have asked the devs and they are curious but we need to flesh this out a little more.

That worked!
I added the config you suggested on my client and I got:

Sat Jan 28 19:12:47 2017 us=156574 add_route_ipv6(2021:248::/32 -> 2021:248:2320:1::2 metric -1) dev Ethernet
Sat Jan 28 19:12:47 2017 us=156574 C:\Windows\system32\netsh.exe interface ipv6 add route 2021:248::/32 interface=24 2021:248:2320:1::2 store=active

TinCanTech

Are you assigning the same v6 address as you would receive via v6 RA's ?

Can you post the configs and logs again ?

Also, see trac #832

Thanks for working on this with me.

meres

TinCanTech wroteAre you assigning the same v6 address as you would receive via v6 RA's ?
Can you post the configs and logs again ?
Also, see trac #832
Thanks for working on this with me.

I am not assigning the same v6 address ass the "second part" of the v6 address is random, I assigned 2021:248:2320:1:aaaa:bbbb:cccc:dddd which was successfully set to my windows tap adapter:

 Autoconfiguration Enabled . . . . : Yes
 IPv6 Address. . . . . . . . . . . : 2021:248:2320:1:a9c3:31d9:3c0e:e2d3(Preferred)
 IPv6 Address. . . . . . . . . . . : 2021:248:2320:1:aaaa:bbbb:cccc:dddd(Preferred)
 Temporary IPv6 Address. . . . . . : 2021:248:2320:1:2168:8e77:e0f0:cb03(Preferred)

Server.conf (same)

dev tap
proto udp
port 1194
management 127.0.0.1 1194
server-bridge 125.125.29.1 255.255.255.128 125.125.29.109 125.125.29.111
ifconfig-pool-persist pool-persist-tap
push "route remote_host 255.255.255.255 net_gateway"
push "route 125.125.28.0 255.255.254.0 125.125.29.1"
#push "tun-ipv6" - not needed in version 2.4
dh      keys/dh1024.pem
ca      new-ssl/sha256/CA/ca.crt
cert    new-ssl/sha256/cert.crt
key     new-ssl/sha256/key.key
keepalive 5 15
persist-key
persist-tun
comp-lzo
script-security 2
up ./upscript
down ./downscript
mute-replay-warnings
client-cert-not-required
username-as-common-name
client-config-dir clients
auth-user-pass-verify ./auth_radius.pl via-file
syslog openvpn-tap.log
verb 4

client.conf

dev tap
remote 125.125.29.2
tls-client
ca ca.crt
verify-x509-name xxx.xxx name
mute-replay-warnings
pull
route 125.125.212.0 255.255.255.0
# uncomment to enable default gateway redirection
#redirect-gateway def1
# uncomment to enable IPv6 routing - not supported on macOS
[b]ifconfig-ipv6 2001:648:2320:1:aaaa:bbbb:cccc:dddd/64  2021:248:2320:1::2[/b]
route-ipv6 2021:248::/32 2021:248:2320:1::2
#redirect-gateway ipv6
route-method exe
route-delay 2
auth-user-pass
verb 4
comp-lzo

client log

Sun Jan 29 00:39:59 2017 us=615338 Current Parameter Settings:
Sun Jan 29 00:39:59 2017 us=615338   config = 'client.ovpn'
Sun Jan 29 00:39:59 2017 us=615338   mode = 0
Sun Jan 29 00:39:59 2017 us=615338   show_ciphers = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   show_digests = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   show_engines = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   genkey = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   key_pass_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   show_tls_ciphers = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   connect_retry_max = 0
Sun Jan 29 00:39:59 2017 us=615338 Connection profiles [0]:
Sun Jan 29 00:39:59 2017 us=615338   proto = udp
Sun Jan 29 00:39:59 2017 us=615338   local = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   local_port = '1194'
Sun Jan 29 00:39:59 2017 us=615338   remote = '125.125.29.2'
Sun Jan 29 00:39:59 2017 us=615338   remote_port = '1194'
Sun Jan 29 00:39:59 2017 us=615338   remote_float = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   bind_defined = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   bind_local = ENABLED
Sun Jan 29 00:39:59 2017 us=615338   bind_ipv6_only = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   connect_retry_seconds = 5
Sun Jan 29 00:39:59 2017 us=615338   connect_timeout = 120
Sun Jan 29 00:39:59 2017 us=615338   socks_proxy_server = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   socks_proxy_port = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   tun_mtu = 1500
Sun Jan 29 00:39:59 2017 us=615338   tun_mtu_defined = ENABLED
Sun Jan 29 00:39:59 2017 us=615338   link_mtu = 1500
Sun Jan 29 00:39:59 2017 us=615338   link_mtu_defined = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   tun_mtu_extra = 32
Sun Jan 29 00:39:59 2017 us=615338   tun_mtu_extra_defined = ENABLED
Sun Jan 29 00:39:59 2017 us=615338   mtu_discover_type = -1
Sun Jan 29 00:39:59 2017 us=615338   fragment = 0
Sun Jan 29 00:39:59 2017 us=615338   mssfix = 1450
Sun Jan 29 00:39:59 2017 us=615338   explicit_exit_notification = 0
Sun Jan 29 00:39:59 2017 us=615338 Connection profiles END
Sun Jan 29 00:39:59 2017 us=615338   remote_random = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   ipchange = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   dev = 'tap'
Sun Jan 29 00:39:59 2017 us=615338   dev_type = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   dev_node = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   lladdr = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   topology = 1
Sun Jan 29 00:39:59 2017 us=615338   ifconfig_local = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   ifconfig_remote_netmask = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=615338   ifconfig_noexec = DISABLED
Sun Jan 29 00:39:59 2017 us=615338   ifconfig_nowarn = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   ifconfig_ipv6_local = '2021:248:2320:1:aaaa:bbbb:cccc:dddd'
Sun Jan 29 00:39:59 2017 us=616337   ifconfig_ipv6_netbits = 64
Sun Jan 29 00:39:59 2017 us=616337   ifconfig_ipv6_remote = '2021:248:2320:1::2'
Sun Jan 29 00:39:59 2017 us=616337   shaper = 0
Sun Jan 29 00:39:59 2017 us=616337   mtu_test = 0
Sun Jan 29 00:39:59 2017 us=616337   mlock = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   keepalive_ping = 0
Sun Jan 29 00:39:59 2017 us=616337   keepalive_timeout = 0
Sun Jan 29 00:39:59 2017 us=616337   inactivity_timeout = 0
Sun Jan 29 00:39:59 2017 us=616337   ping_send_timeout = 0
Sun Jan 29 00:39:59 2017 us=616337   ping_rec_timeout = 0
Sun Jan 29 00:39:59 2017 us=616337   ping_rec_timeout_action = 0
Sun Jan 29 00:39:59 2017 us=616337   ping_timer_remote = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   remap_sigusr1 = 0
Sun Jan 29 00:39:59 2017 us=616337   persist_tun = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   persist_local_ip = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   persist_remote_ip = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   persist_key = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   passtos = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   resolve_retry_seconds = 1000000000
Sun Jan 29 00:39:59 2017 us=616337   resolve_in_advance = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   username = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   groupname = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   chroot_dir = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   cd_dir = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   writepid = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   up_script = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   down_script = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   down_pre = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   up_restart = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   up_delay = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   daemon = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   inetd = 0
Sun Jan 29 00:39:59 2017 us=616337   log = ENABLED
Sun Jan 29 00:39:59 2017 us=616337   suppress_timestamps = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   machine_readable_output = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   nice = 0
Sun Jan 29 00:39:59 2017 us=616337   verbosity = 4
Sun Jan 29 00:39:59 2017 us=616337   mute = 0
Sun Jan 29 00:39:59 2017 us=616337   gremlin = 0
Sun Jan 29 00:39:59 2017 us=616337   status_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   status_file_version = 1
Sun Jan 29 00:39:59 2017 us=616337   status_file_update_freq = 60
Sun Jan 29 00:39:59 2017 us=616337   occ = ENABLED
Sun Jan 29 00:39:59 2017 us=616337   rcvbuf = 0
Sun Jan 29 00:39:59 2017 us=616337   sndbuf = 0
Sun Jan 29 00:39:59 2017 us=616337   sockflags = 0
Sun Jan 29 00:39:59 2017 us=616337   fast_io = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   comp.alg = 2
Sun Jan 29 00:39:59 2017 us=616337   comp.flags = 1
Sun Jan 29 00:39:59 2017 us=616337   route_script = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   route_default_gateway = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=616337   route_default_metric = 0
Sun Jan 29 00:39:59 2017 us=616337   route_noexec = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   route_delay = 2
Sun Jan 29 00:39:59 2017 us=616337   route_delay_window = 30
Sun Jan 29 00:39:59 2017 us=616337   route_delay_defined = ENABLED
Sun Jan 29 00:39:59 2017 us=616337   route_nopull = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   route_gateway_via_dhcp = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   allow_pull_fqdn = DISABLED
Sun Jan 29 00:39:59 2017 us=616337   route 177.29.212.0/255.255.255.0/default (not set)/default (not set)
Sun Jan 29 00:39:59 2017 us=616337   management_addr = '127.0.0.1'
Sun Jan 29 00:39:59 2017 us=616337   management_port = '25341'
Sun Jan 29 00:39:59 2017 us=616337   management_user_pass = 'stdin'
Sun Jan 29 00:39:59 2017 us=616337   management_log_history_cache = 250
Sun Jan 29 00:39:59 2017 us=616337   management_echo_buffer_size = 100
Sun Jan 29 00:39:59 2017 us=616337   management_write_peer_info_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   management_client_user = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   management_client_group = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   management_flags = 6
Sun Jan 29 00:39:59 2017 us=617337   shared_secret_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   key_direction = 0
Sun Jan 29 00:39:59 2017 us=617337   ciphername = 'BF-CBC'
Sun Jan 29 00:39:59 2017 us=617337   ncp_enabled = ENABLED
Sun Jan 29 00:39:59 2017 us=617337   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Jan 29 00:39:59 2017 us=617337   authname = 'SHA1'
Sun Jan 29 00:39:59 2017 us=617337   prng_hash = 'SHA1'
Sun Jan 29 00:39:59 2017 us=617337   prng_nonce_secret_len = 16
Sun Jan 29 00:39:59 2017 us=617337   keysize = 0
Sun Jan 29 00:39:59 2017 us=617337   engine = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   replay = ENABLED
Sun Jan 29 00:39:59 2017 us=617337   mute_replay_warnings = ENABLED
Sun Jan 29 00:39:59 2017 us=617337   replay_window = 64
Sun Jan 29 00:39:59 2017 us=617337   replay_time = 15
Sun Jan 29 00:39:59 2017 us=617337   packet_id_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   use_iv = ENABLED
Sun Jan 29 00:39:59 2017 us=617337   test_crypto = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   tls_server = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   tls_client = ENABLED
Sun Jan 29 00:39:59 2017 us=617337   key_method = 2
Sun Jan 29 00:39:59 2017 us=617337   ca_file = 'ca.crt'
Sun Jan 29 00:39:59 2017 us=617337   ca_path = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   dh_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   cert_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   extra_certs_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   priv_key_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   pkcs12_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   cryptoapi_cert = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   cipher_list = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   tls_verify = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   tls_export_cert = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   verify_x509_type = 2
Sun Jan 29 00:39:59 2017 us=617337   verify_x509_name = 'xxx'
Sun Jan 29 00:39:59 2017 us=617337   crl_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   ns_cert_type = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_ku[i] = 0
Sun Jan 29 00:39:59 2017 us=617337   remote_cert_eku = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   ssl_flags = 0
Sun Jan 29 00:39:59 2017 us=617337   tls_timeout = 2
Sun Jan 29 00:39:59 2017 us=617337   renegotiate_bytes = -1
Sun Jan 29 00:39:59 2017 us=617337   renegotiate_packets = 0
Sun Jan 29 00:39:59 2017 us=617337   renegotiate_seconds = 3600
Sun Jan 29 00:39:59 2017 us=617337   handshake_window = 60
Sun Jan 29 00:39:59 2017 us=617337   transition_window = 3600
Sun Jan 29 00:39:59 2017 us=617337   single_session = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   push_peer_info = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   tls_exit = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   tls_auth_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   tls_crypt_file = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=617337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_private_mode = 00000000
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_cert_private = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_pin_cache_period = -1
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_id = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   pkcs11_id_management = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   server_network = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   server_netmask = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   server_network_ipv6 = ::
Sun Jan 29 00:39:59 2017 us=618337   server_netbits_ipv6 = 0
Sun Jan 29 00:39:59 2017 us=618337   server_bridge_ip = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   server_bridge_netmask = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   server_bridge_pool_start = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   server_bridge_pool_end = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_pool_defined = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_pool_start = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_pool_end = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_pool_netmask = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_pool_persist_refresh_freq = 600
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_ipv6_pool_defined = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_ipv6_pool_base = ::
Sun Jan 29 00:39:59 2017 us=618337   ifconfig_ipv6_pool_netbits = 0
Sun Jan 29 00:39:59 2017 us=618337   n_bcast_buf = 256
Sun Jan 29 00:39:59 2017 us=618337   tcp_queue_limit = 64
Sun Jan 29 00:39:59 2017 us=618337   real_hash_size = 256
Sun Jan 29 00:39:59 2017 us=618337   virtual_hash_size = 256
Sun Jan 29 00:39:59 2017 us=618337   client_connect_script = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   learn_address_script = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   client_disconnect_script = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   client_config_dir = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   ccd_exclusive = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   tmp_dir = 'C:\Users\admin\AppData\Local\Temp\'
Sun Jan 29 00:39:59 2017 us=618337   push_ifconfig_defined = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   push_ifconfig_local = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   push_ifconfig_remote_netmask = 0.0.0.0
Sun Jan 29 00:39:59 2017 us=618337   push_ifconfig_ipv6_defined = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   push_ifconfig_ipv6_local = ::/0
Sun Jan 29 00:39:59 2017 us=618337   push_ifconfig_ipv6_remote = ::
Sun Jan 29 00:39:59 2017 us=618337   enable_c2c = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   duplicate_cn = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   cf_max = 0
Sun Jan 29 00:39:59 2017 us=618337   cf_per = 0
Sun Jan 29 00:39:59 2017 us=618337   max_clients = 1024
Sun Jan 29 00:39:59 2017 us=618337   max_routes_per_client = 256
Sun Jan 29 00:39:59 2017 us=618337   auth_user_pass_verify_script = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   auth_user_pass_verify_script_via_file = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   auth_token_generate = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   auth_token_lifetime = 0
Sun Jan 29 00:39:59 2017 us=618337   client = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   pull = ENABLED
Sun Jan 29 00:39:59 2017 us=618337   auth_user_pass_file = 'grnet-login.conf'
Sun Jan 29 00:39:59 2017 us=618337   show_net_up = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   route_method = 2
Sun Jan 29 00:39:59 2017 us=618337   block_outside_dns = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   ip_win32_defined = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   ip_win32_type = 3
Sun Jan 29 00:39:59 2017 us=618337   dhcp_masq_offset = 0
Sun Jan 29 00:39:59 2017 us=618337   dhcp_lease_time = 31536000
Sun Jan 29 00:39:59 2017 us=618337   tap_sleep = 0
Sun Jan 29 00:39:59 2017 us=618337   dhcp_options = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   dhcp_renew = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   dhcp_pre_release = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   dhcp_release = DISABLED
Sun Jan 29 00:39:59 2017 us=618337   domain = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   netbios_scope = '[UNDEF]'
Sun Jan 29 00:39:59 2017 us=618337   netbios_node_type = 0
Sun Jan 29 00:39:59 2017 us=618337   disable_nbt = DISABLED
Sun Jan 29 00:39:59 2017 us=618337 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Sun Jan 29 00:39:59 2017 us=618337 Windows version 6.2 (Windows 8 or greater) 64bit
Sun Jan 29 00:39:59 2017 us=618337 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Enter Management Password:
Sun Jan 29 00:39:59 2017 us=619337 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Sun Jan 29 00:39:59 2017 us=619337 Need hold release from management interface, waiting...
Sun Jan 29 00:40:00 2017 us=95366 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Sun Jan 29 00:40:00 2017 us=196371 MANAGEMENT: CMD 'state on'
Sun Jan 29 00:40:00 2017 us=196371 MANAGEMENT: CMD 'log all on'
Sun Jan 29 00:40:00 2017 us=363381 MANAGEMENT: CMD 'hold off'
Sun Jan 29 00:40:00 2017 us=365381 MANAGEMENT: CMD 'hold release'
Sun Jan 29 00:40:00 2017 us=488388 LZO compression initializing
Sun Jan 29 00:40:00 2017 us=488388 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Jan 29 00:40:00 2017 us=488388 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Sun Jan 29 00:40:00 2017 us=488388 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Jan 29 00:40:00 2017 us=488388 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Jan 29 00:40:00 2017 us=488388 TCP/UDP: Preserving recently used remote address: [AF_INET]125.125.29.2:1194
Sun Jan 29 00:40:00 2017 us=489388 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Jan 29 00:40:00 2017 us=489388 UDP link local (bound): [AF_INET][undef]:1194
Sun Jan 29 00:40:00 2017 us=489388 UDP link remote: [AF_INET]125.125.29.2:1194
Sun Jan 29 00:40:00 2017 us=489388 MANAGEMENT: >STATE:1485643200,WAIT,,,,,,
Sun Jan 29 00:40:00 2017 us=509390 MANAGEMENT: >STATE:1485643200,AUTH,,,,,,
Sun Jan 29 00:40:00 2017 us=509390 TLS: Initial packet from [AF_INET]125.125.29.2:1194, sid=1da0f772 07bd86b3
Sun Jan 29 00:40:00 2017 us=509390 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Jan 29 00:40:00 2017 us=535391 VERIFY OK: depth=1, xxx
Sun Jan 29 00:40:00 2017 us=535391 VERIFY X509NAME OK: xxx
Sun Jan 29 00:40:00 2017 us=535391 VERIFY OK: depth=0, xxx
Sun Jan 29 00:40:00 2017 us=806407 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun Jan 29 00:40:00 2017 us=806407 [xxx] Peer Connection Initiated with [AF_INET]125.125.29.2:1194
Sun Jan 29 00:40:02 2017 us=62479 MANAGEMENT: >STATE:1485643202,GET_CONFIG,,,,,,
Sun Jan 29 00:40:02 2017 us=62479 SENT CONTROL [xxx]: 'PUSH_REQUEST' (status=1)
Sun Jan 29 00:40:02 2017 us=82480 PUSH: Received control message: 'PUSH_REPLY,route remote_host 255.255.255.255 net_gateway,route 125.125.28.0 255.255.254.0 125.125.29.1,route-gateway 125.125.29.1,ping 5,ping-restart 15,ifconfig 125.125.29.110 255.255.255.128,peer-id 0,cipher AES-256-GCM'
Sun Jan 29 00:40:02 2017 us=82480 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jan 29 00:40:02 2017 us=82480 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jan 29 00:40:02 2017 us=82480 OPTIONS IMPORT: route options modified
Sun Jan 29 00:40:02 2017 us=82480 OPTIONS IMPORT: route-related options modified
Sun Jan 29 00:40:02 2017 us=82480 OPTIONS IMPORT: peer-id set
Sun Jan 29 00:40:02 2017 us=82480 OPTIONS IMPORT: adjusting link_mtu to 1657
Sun Jan 29 00:40:02 2017 us=82480 OPTIONS IMPORT: data channel crypto options modified
Sun Jan 29 00:40:02 2017 us=82480 Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ]
Sun Jan 29 00:40:02 2017 us=83480 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jan 29 00:40:02 2017 us=83480 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jan 29 00:40:02 2017 us=83480 interactive service msg_channel=0
Sun Jan 29 00:40:02 2017 us=86481 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=3 HWADDR=00:22:15:54:f3:58
Sun Jan 29 00:40:02 2017 us=86481 GDG6: remote_host_ipv6=n/a
Sun Jan 29 00:40:02 2017 us=86481 GetBestInterfaceEx() returned if=3
Sun Jan 29 00:40:02 2017 us=86481 GDG6: II=3 DP=::/0 NH=fe80::dc9f:dbff:fe03:5a45
Sun Jan 29 00:40:02 2017 us=87481 GDG6: Metric=256, Loopback=0, AA=1, I=0
Sun Jan 29 00:40:02 2017 us=87481 ROUTE6_GATEWAY fe80::dc9f:dbff:fe03:5a45 I=3
Sun Jan 29 00:40:02 2017 us=87481 open_tun
Sun Jan 29 00:40:02 2017 us=88481 TAP-WIN32 device [Ethernet] opened: \\.\Global\{A0C5DECA-47F9-4643-A312-7FDDD9802C4C}.tap
Sun Jan 29 00:40:02 2017 us=88481 TAP-Windows Driver Version 9.21 
Sun Jan 29 00:40:02 2017 us=88481 TAP-Windows MTU=1500
Sun Jan 29 00:40:02 2017 us=89481 Notified TAP-Windows driver to set a DHCP IP/netmask of 125.125.29.110/255.255.255.128 on interface {A0C5DECA-47F9-4643-A312-7FDDD9802C4C} [DHCP-serv: 125.125.29.0, lease-time: 31536000]
Sun Jan 29 00:40:02 2017 us=90482 Successful ARP Flush on interface [24] {A0C5DECA-47F9-4643-A312-7FDDD9802C4C}
Sun Jan 29 00:40:02 2017 us=92482 do_ifconfig, tt->did_ifconfig_ipv6_setup=1
Sun Jan 29 00:40:02 2017 us=92482 MANAGEMENT: >STATE:1485643202,ASSIGN_IP,,125.125.29.110,,,,,2021:248:2320:1:aaaa:bbbb:cccc:dddd
Sun Jan 29 00:40:03 2017 us=92539 NETSH: C:\Windows\system32\netsh.exe interface ipv6 set address interface=24 2021:248:2320:1:aaaa:bbbb:cccc:dddd store=active
Sun Jan 29 00:40:03 2017 us=184544 add_route_ipv6(2021:248:2320:1::/64 -> 2021:248:2320:1:aaaa:bbbb:cccc:dddd metric 0) dev Ethernet
Sun Jan 29 00:40:03 2017 us=184544 C:\Windows\system32\netsh.exe interface ipv6 add route 2021:248:2320:1::/64 interface=24 2021:248:2320:1:aaaa:bbbb:cccc:dddd store=active
Sun Jan 29 00:40:03 2017 us=184544 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Sun Jan 29 00:40:05 2017 us=61653 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Sun Jan 29 00:40:05 2017 us=61653 MANAGEMENT: >STATE:1485643205,ADD_ROUTES,,,,,,
Sun Jan 29 00:40:05 2017 us=61653 C:\Windows\system32\route.exe ADD 177.29.212.0 MASK 255.255.255.0 125.125.29.1
Sun Jan 29 00:40:05 2017 us=61653 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Sun Jan 29 00:40:05 2017 us=84655 C:\Windows\system32\route.exe ADD 125.125.29.2 MASK 255.255.255.255 192.168.2.1
Sun Jan 29 00:40:05 2017 us=84655 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Sun Jan 29 00:40:05 2017 us=109656 C:\Windows\system32\route.exe ADD 125.125.28.0 MASK 255.255.254.0 125.125.29.1
Sun Jan 29 00:40:05 2017 us=109656 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Sun Jan 29 00:40:05 2017 us=129658 add_route_ipv6(2021:248::/32 -> 2021:248:2320:1::2 metric -1) dev Ethernet
Sun Jan 29 00:40:05 2017 us=129658 C:\Windows\system32\netsh.exe interface ipv6 add route 2021:248::/32 interface=24 2021:248:2320:1::2 store=active
Sun Jan 29 00:40:05 2017 us=129658 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Sun Jan 29 00:40:05 2017 us=197662 Initialization Sequence Completed
Sun Jan 29 00:40:05 2017 us=197662 MANAGEMENT: >STATE:1485643205,CONNECTED,SUCCESS,125.125.29.110,125.125.29.2,1194,,,2021:248:2320:1:aaaa:bbbb:cccc:dddd

server log - sorry for the edit, the previous one was verb2

Sun Jan 29 00:56:27 2017 us=932045 WARNING: POTENTIALLY DANGEROUS OPTION --verify-client-cert none|optional (or --client-cert-not-required) may accept clients which do not present a certificate
Sun Jan 29 00:56:27 2017 us=932125 Current Parameter Settings:
Sun Jan 29 00:56:27 2017 us=932138   config = '/etc/openvpn/tap.conf'
Sun Jan 29 00:56:27 2017 us=932146   mode = 1
Sun Jan 29 00:56:27 2017 us=932153   persist_config = DISABLED
Sun Jan 29 00:56:27 2017 us=932160   persist_mode = 1
Sun Jan 29 00:56:27 2017 us=932167   show_ciphers = DISABLED
Sun Jan 29 00:56:27 2017 us=932174   show_digests = DISABLED
Sun Jan 29 00:56:27 2017 us=932181   show_engines = DISABLED
Sun Jan 29 00:56:27 2017 us=932188   genkey = DISABLED
Sun Jan 29 00:56:27 2017 us=932195   key_pass_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932202   show_tls_ciphers = DISABLED
Sun Jan 29 00:56:27 2017 us=932209   connect_retry_max = 0
Sun Jan 29 00:56:27 2017 us=932217 Connection profiles [0]:
Sun Jan 29 00:56:27 2017 us=932224   proto = udp
Sun Jan 29 00:56:27 2017 us=932232   local = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932239   local_port = '1194'
Sun Jan 29 00:56:27 2017 us=932247   remote = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932254   remote_port = '1194'
Sun Jan 29 00:56:27 2017 us=932261   remote_float = DISABLED
Sun Jan 29 00:56:27 2017 us=932269   bind_defined = DISABLED
Sun Jan 29 00:56:27 2017 us=932278   bind_local = ENABLED
Sun Jan 29 00:56:27 2017 us=932286   bind_ipv6_only = DISABLED
Sun Jan 29 00:56:27 2017 us=932294   connect_retry_seconds = 5
Sun Jan 29 00:56:27 2017 us=932302   connect_timeout = 120
Sun Jan 29 00:56:27 2017 us=932328   socks_proxy_server = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932337   socks_proxy_port = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932345   tun_mtu = 1500
Sun Jan 29 00:56:27 2017 us=932353   tun_mtu_defined = ENABLED
Sun Jan 29 00:56:27 2017 us=932361   link_mtu = 1500
Sun Jan 29 00:56:27 2017 us=932368   link_mtu_defined = DISABLED
Sun Jan 29 00:56:27 2017 us=932375   tun_mtu_extra = 32
Sun Jan 29 00:56:27 2017 us=932382   tun_mtu_extra_defined = ENABLED
Sun Jan 29 00:56:27 2017 us=932389   mtu_discover_type = -1
Sun Jan 29 00:56:27 2017 us=932396   fragment = 0
Sun Jan 29 00:56:27 2017 us=932403   mssfix = 1450
Sun Jan 29 00:56:27 2017 us=932411   explicit_exit_notification = 0
Sun Jan 29 00:56:27 2017 us=932418 Connection profiles END
Sun Jan 29 00:56:27 2017 us=932425   remote_random = DISABLED
Sun Jan 29 00:56:27 2017 us=932433   ipchange = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932441   dev = 'tap'
Sun Jan 29 00:56:27 2017 us=932449   dev_type = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932457   dev_node = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932464   lladdr = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932472   topology = 1
Sun Jan 29 00:56:27 2017 us=932480   ifconfig_local = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932492   ifconfig_remote_netmask = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932500   ifconfig_noexec = DISABLED
Sun Jan 29 00:56:27 2017 us=932510   ifconfig_nowarn = DISABLED
Sun Jan 29 00:56:27 2017 us=932517   ifconfig_ipv6_local = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932524   ifconfig_ipv6_netbits = 0
Sun Jan 29 00:56:27 2017 us=932531   ifconfig_ipv6_remote = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932539   shaper = 0
Sun Jan 29 00:56:27 2017 us=932546   mtu_test = 0
Sun Jan 29 00:56:27 2017 us=932553   mlock = DISABLED
Sun Jan 29 00:56:27 2017 us=932561   keepalive_ping = 5
Sun Jan 29 00:56:27 2017 us=932569   keepalive_timeout = 15
Sun Jan 29 00:56:27 2017 us=932578   inactivity_timeout = 0
Sun Jan 29 00:56:27 2017 us=932585   ping_send_timeout = 5
Sun Jan 29 00:56:27 2017 us=932593   ping_rec_timeout = 30
Sun Jan 29 00:56:27 2017 us=932600   ping_rec_timeout_action = 2
Sun Jan 29 00:56:27 2017 us=932607   ping_timer_remote = DISABLED
Sun Jan 29 00:56:27 2017 us=932615   remap_sigusr1 = 0
Sun Jan 29 00:56:27 2017 us=932622   persist_tun = ENABLED
Sun Jan 29 00:56:27 2017 us=932629   persist_local_ip = DISABLED
Sun Jan 29 00:56:27 2017 us=932636   persist_remote_ip = DISABLED
Sun Jan 29 00:56:27 2017 us=932643   persist_key = ENABLED
Sun Jan 29 00:56:27 2017 us=932657   passtos = DISABLED
Sun Jan 29 00:56:27 2017 us=932665   resolve_retry_seconds = 1000000000
Sun Jan 29 00:56:27 2017 us=932672   resolve_in_advance = DISABLED
Sun Jan 29 00:56:27 2017 us=932679   username = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932687   groupname = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932694   chroot_dir = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932701   cd_dir = '/etc/openvpn'
Sun Jan 29 00:56:27 2017 us=932708   writepid = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932715   up_script = './upscript'
Sun Jan 29 00:56:27 2017 us=932722   down_script = './downscript'
Sun Jan 29 00:56:27 2017 us=932729   down_pre = DISABLED
Sun Jan 29 00:56:27 2017 us=932736   up_restart = DISABLED
Sun Jan 29 00:56:27 2017 us=932743   up_delay = DISABLED
Sun Jan 29 00:56:27 2017 us=932750   daemon = ENABLED
Sun Jan 29 00:56:27 2017 us=932758   inetd = 0
Sun Jan 29 00:56:27 2017 us=932765   log = ENABLED
Sun Jan 29 00:56:27 2017 us=932772   suppress_timestamps = DISABLED
Sun Jan 29 00:56:27 2017 us=932779   machine_readable_output = DISABLED
Sun Jan 29 00:56:27 2017 us=932786   nice = 0
Sun Jan 29 00:56:27 2017 us=932794   verbosity = 4
Sun Jan 29 00:56:27 2017 us=932801   mute = 0
Sun Jan 29 00:56:27 2017 us=932808   gremlin = 0
Sun Jan 29 00:56:27 2017 us=932815   status_file = '/run/openvpn/tap.status'
Sun Jan 29 00:56:27 2017 us=932822   status_file_version = 1
Sun Jan 29 00:56:27 2017 us=932829   status_file_update_freq = 10
Sun Jan 29 00:56:27 2017 us=932837   occ = ENABLED
Sun Jan 29 00:56:27 2017 us=932852   rcvbuf = 0
Sun Jan 29 00:56:27 2017 us=932859   sndbuf = 0
Sun Jan 29 00:56:27 2017 us=932866   mark = 0
Sun Jan 29 00:56:27 2017 us=932873   sockflags = 0
Sun Jan 29 00:56:27 2017 us=932880   fast_io = DISABLED
Sun Jan 29 00:56:27 2017 us=932887   comp.alg = 2
Sun Jan 29 00:56:27 2017 us=932894   comp.flags = 1
Sun Jan 29 00:56:27 2017 us=932901   route_script = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932908   route_default_gateway = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932915   route_default_metric = 0
Sun Jan 29 00:56:27 2017 us=932922   route_noexec = DISABLED
Sun Jan 29 00:56:27 2017 us=932930   route_delay = 0
Sun Jan 29 00:56:27 2017 us=932937   route_delay_window = 30
Sun Jan 29 00:56:27 2017 us=932944   route_delay_defined = DISABLED
Sun Jan 29 00:56:27 2017 us=932951   route_nopull = DISABLED
Sun Jan 29 00:56:27 2017 us=932958   route_gateway_via_dhcp = DISABLED
Sun Jan 29 00:56:27 2017 us=932965   allow_pull_fqdn = DISABLED
Sun Jan 29 00:56:27 2017 us=932973   management_addr = '127.0.0.1'
Sun Jan 29 00:56:27 2017 us=932980   management_port = '1194'
Sun Jan 29 00:56:27 2017 us=932987   management_user_pass = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=932994   management_log_history_cache = 250
Sun Jan 29 00:56:27 2017 us=933002   management_echo_buffer_size = 100
Sun Jan 29 00:56:27 2017 us=933009   management_write_peer_info_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=933017   management_client_user = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=933024   management_client_group = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=933031   management_flags = 0
Sun Jan 29 00:56:27 2017 us=933038   shared_secret_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=933045   key_direction = 0
Sun Jan 29 00:56:27 2017 us=933052   ciphername = 'BF-CBC'
Sun Jan 29 00:56:27 2017 us=933059   ncp_enabled = ENABLED
Sun Jan 29 00:56:27 2017 us=933067   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Jan 29 00:56:27 2017 us=933074   authname = 'SHA1'
Sun Jan 29 00:56:27 2017 us=933082   prng_hash = 'SHA1'
Sun Jan 29 00:56:27 2017 us=933092   prng_nonce_secret_len = 16
Sun Jan 29 00:56:27 2017 us=933099   keysize = 0
Sun Jan 29 00:56:27 2017 us=933106   engine = DISABLED
Sun Jan 29 00:56:27 2017 us=933113   replay = ENABLED
Sun Jan 29 00:56:27 2017 us=933120   mute_replay_warnings = ENABLED
Sun Jan 29 00:56:27 2017 us=933127   replay_window = 64
Sun Jan 29 00:56:27 2017 us=935871   replay_time = 15
Sun Jan 29 00:56:27 2017 us=935883   packet_id_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=935894   use_iv = ENABLED
Sun Jan 29 00:56:27 2017 us=935909   test_crypto = DISABLED
Sun Jan 29 00:56:27 2017 us=935917   tls_server = ENABLED
Sun Jan 29 00:56:27 2017 us=935925   tls_client = DISABLED
Sun Jan 29 00:56:27 2017 us=935933   key_method = 2
Sun Jan 29 00:56:27 2017 us=935941   ca_file = 'ca.crt'
Sun Jan 29 00:56:27 2017 us=935948   ca_path = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=935956   dh_file = 'keys/dh1024.pem'
Sun Jan 29 00:56:27 2017 us=935963   cert_file = 'cert.crt'
Sun Jan 29 00:56:27 2017 us=935971   extra_certs_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=935978   priv_key_file = 'new-ssl/key.key'
Sun Jan 29 00:56:27 2017 us=935985   pkcs12_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=935993   cipher_list = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936001   tls_verify = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936008   tls_export_cert = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936015   verify_x509_type = 0
Sun Jan 29 00:56:27 2017 us=936022   verify_x509_name = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936030   crl_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936037   ns_cert_type = 0
Sun Jan 29 00:56:27 2017 us=936044   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936051   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936058   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936065   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936072   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936079   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936086   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936093   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936100   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936107   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936114   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936121   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936128   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936135   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936144   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936154   remote_cert_ku[i] = 0
Sun Jan 29 00:56:27 2017 us=936165   remote_cert_eku = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936172   ssl_flags = 5
Sun Jan 29 00:56:27 2017 us=936179   tls_timeout = 2
Sun Jan 29 00:56:27 2017 us=936186   renegotiate_bytes = -1
Sun Jan 29 00:56:27 2017 us=936193   renegotiate_packets = 0
Sun Jan 29 00:56:27 2017 us=936200   renegotiate_seconds = 3600
Sun Jan 29 00:56:27 2017 us=936207   handshake_window = 60
Sun Jan 29 00:56:27 2017 us=936214   transition_window = 3600
Sun Jan 29 00:56:27 2017 us=936221   single_session = DISABLED
Sun Jan 29 00:56:27 2017 us=936229   push_peer_info = DISABLED
Sun Jan 29 00:56:27 2017 us=936236   tls_exit = DISABLED
Sun Jan 29 00:56:27 2017 us=936243   tls_auth_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936250   tls_crypt_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936257   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936264   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936271   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936278   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936285   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936292   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936299   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936306   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936313   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936320   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936327   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936334   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936341   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936349   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936357   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936371   pkcs11_protected_authentication = DISABLED
Sun Jan 29 00:56:27 2017 us=936380   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936389   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936397   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936406   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936414   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936421   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936428   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936435   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936443   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936450   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936458   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936469   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936476   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936483   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936490   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936497   pkcs11_private_mode = 00000000
Sun Jan 29 00:56:27 2017 us=936504   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936510   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936518   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936525   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936532   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936539   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936546   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936553   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936560   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936567   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936574   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936581   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936588   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936595   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936602   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936609   pkcs11_cert_private = DISABLED
Sun Jan 29 00:56:27 2017 us=936617   pkcs11_pin_cache_period = -1
Sun Jan 29 00:56:27 2017 us=936624   pkcs11_id = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936631   pkcs11_id_management = DISABLED
Sun Jan 29 00:56:27 2017 us=936640   server_network = 0.0.0.0
Sun Jan 29 00:56:27 2017 us=936648   server_netmask = 0.0.0.0
Sun Jan 29 00:56:27 2017 us=936657   server_network_ipv6 = ::
Sun Jan 29 00:56:27 2017 us=936664   server_netbits_ipv6 = 0
Sun Jan 29 00:56:27 2017 us=936673   server_bridge_ip = 125.125.29.1
Sun Jan 29 00:56:27 2017 us=936681   server_bridge_netmask = 255.255.255.128
Sun Jan 29 00:56:27 2017 us=936689   server_bridge_pool_start = 125.125.29.109
Sun Jan 29 00:56:27 2017 us=936697   server_bridge_pool_end = 125.125.29.111
Sun Jan 29 00:56:27 2017 us=936706   push_entry = 'route remote_host 255.255.255.255 net_gateway'
Sun Jan 29 00:56:27 2017 us=936716   push_entry = 'route 125.125.28.0 255.255.254.0 125.125.29.1'
Sun Jan 29 00:56:27 2017 us=936726   push_entry = 'route-gateway 125.125.29.1'
Sun Jan 29 00:56:27 2017 us=936735   push_entry = 'ping 5'
Sun Jan 29 00:56:27 2017 us=936743   push_entry = 'ping-restart 15'
Sun Jan 29 00:56:27 2017 us=936753   ifconfig_pool_defined = ENABLED
Sun Jan 29 00:56:27 2017 us=936762   ifconfig_pool_start = 125.125.29.109
Sun Jan 29 00:56:27 2017 us=936772   ifconfig_pool_end = 125.125.29.111
Sun Jan 29 00:56:27 2017 us=936781   ifconfig_pool_netmask = 255.255.255.128
Sun Jan 29 00:56:27 2017 us=936788   ifconfig_pool_persist_filename = 'pool-persist-tap'
Sun Jan 29 00:56:27 2017 us=936797   ifconfig_pool_persist_refresh_freq = 600
Sun Jan 29 00:56:27 2017 us=936804   ifconfig_ipv6_pool_defined = DISABLED
Sun Jan 29 00:56:27 2017 us=936812   ifconfig_ipv6_pool_base = ::
Sun Jan 29 00:56:27 2017 us=936820   ifconfig_ipv6_pool_netbits = 0
Sun Jan 29 00:56:27 2017 us=936832   n_bcast_buf = 256
Sun Jan 29 00:56:27 2017 us=936840   tcp_queue_limit = 64
Sun Jan 29 00:56:27 2017 us=936852   real_hash_size = 256
Sun Jan 29 00:56:27 2017 us=936859   virtual_hash_size = 256
Sun Jan 29 00:56:27 2017 us=936866   client_connect_script = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936874   learn_address_script = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936881   client_disconnect_script = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=936889   client_config_dir = 'clients'
Sun Jan 29 00:56:27 2017 us=936897   ccd_exclusive = DISABLED
Sun Jan 29 00:56:27 2017 us=936904   tmp_dir = '/tmp'
Sun Jan 29 00:56:27 2017 us=936912   push_ifconfig_defined = DISABLED
Sun Jan 29 00:56:27 2017 us=936920   push_ifconfig_local = 0.0.0.0
Sun Jan 29 00:56:27 2017 us=936928   push_ifconfig_remote_netmask = 0.0.0.0
Sun Jan 29 00:56:27 2017 us=936936   push_ifconfig_ipv6_defined = DISABLED
Sun Jan 29 00:56:27 2017 us=936947   push_ifconfig_ipv6_local = ::/0
Sun Jan 29 00:56:27 2017 us=936957   push_ifconfig_ipv6_remote = ::
Sun Jan 29 00:56:27 2017 us=936967   enable_c2c = DISABLED
Sun Jan 29 00:56:27 2017 us=936974   duplicate_cn = DISABLED
Sun Jan 29 00:56:27 2017 us=936982   cf_max = 0
Sun Jan 29 00:56:27 2017 us=936989   cf_per = 0
Sun Jan 29 00:56:27 2017 us=936997   max_clients = 1024
Sun Jan 29 00:56:27 2017 us=937004   max_routes_per_client = 256
Sun Jan 29 00:56:27 2017 us=937012   auth_user_pass_verify_script = './auth_radius.pl'
Sun Jan 29 00:56:27 2017 us=937022   auth_user_pass_verify_script_via_file = ENABLED
Sun Jan 29 00:56:27 2017 us=937033   auth_token_generate = DISABLED
Sun Jan 29 00:56:27 2017 us=937045   auth_token_lifetime = 0
Sun Jan 29 00:56:27 2017 us=937054   port_share_host = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=937061   port_share_port = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=937068   client = DISABLED
Sun Jan 29 00:56:27 2017 us=937076   pull = DISABLED
Sun Jan 29 00:56:27 2017 us=937083   auth_user_pass_file = '[UNDEF]'
Sun Jan 29 00:56:27 2017 us=937091 OpenVPN 2.4.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Dec 27 2016
Sun Jan 29 00:56:27 2017 us=938137 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Sun Jan 29 00:56:27 2017 us=946257 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1194
Sun Jan 29 00:56:27 2017 us=947371 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Sun Jan 29 00:56:27 2017 us=947605 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Jan 29 00:56:27 2017 us=948399 Diffie-Hellman initialized with 1024 bit key
Sun Jan 29 00:56:27 2017 us=948991 Failed to extract curve from certificate (UNDEF), using secp384r1 instead.
Sun Jan 29 00:56:27 2017 us=949010 ECDH curve secp384r1 added
Sun Jan 29 00:56:27 2017 us=949101 TLS-Auth MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Jan 29 00:56:27 2017 us=953444 TUN/TAP device tap0 opened
Sun Jan 29 00:56:27 2017 us=953498 TUN/TAP TX queue length set to 100
Sun Jan 29 00:56:27 2017 us=953537 ./upscript tap0 1500 1654   init
Sun Jan 29 00:56:27 2017 us=979285 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Sun Jan 29 00:56:27 2017 us=979370 Could not determine IPv4/IPv6 protocol. Using AF_INET
Sun Jan 29 00:56:27 2017 us=979399 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun Jan 29 00:56:27 2017 us=979432 UDPv4 link local (bound): [AF_INET][undef]:1194
Sun Jan 29 00:56:27 2017 us=979450 UDPv4 link remote: [AF_UNSPEC]
Sun Jan 29 00:56:27 2017 us=979471 MULTI: multi_init called, r=256 v=256
Sun Jan 29 00:56:27 2017 us=979538 IFCONFIG POOL: base=125.125.29.109 size=3, ipv6=0
Sun Jan 29 00:56:27 2017 us=979556 ifconfig_pool_read(), in='user2,125.125.29.109', TODO: IPv6
Sun Jan 29 00:56:27 2017 us=979579 succeeded -> ifconfig_pool_set()
Sun Jan 29 00:56:27 2017 us=979587 ifconfig_pool_read(), in='user1,125.125.29.110', TODO: IPv6
Sun Jan 29 00:56:27 2017 us=979611 succeeded -> ifconfig_pool_set()
Sun Jan 29 00:56:27 2017 us=979619 ifconfig_pool_read(), in='user3,125.125.29.111', TODO: IPv6
Sun Jan 29 00:56:27 2017 us=979628 succeeded -> ifconfig_pool_set()
Sun Jan 29 00:56:27 2017 us=979638 IFCONFIG POOL LIST
Sun Jan 29 00:56:27 2017 us=979647 user2,125.125.29.109
Sun Jan 29 00:56:27 2017 us=979656 user1,125.125.29.110
Sun Jan 29 00:56:27 2017 us=979665 user3,125.125.29.111
Sun Jan 29 00:56:27 2017 us=979774 Initialization Sequence Completed
Sun Jan 29 00:56:48 2017 us=7020 MULTI: multi_create_instance called
Sun Jan 29 00:56:48 2017 us=7187 22.2272.204:1194 Re-using SSL/TLS context
Sun Jan 29 00:56:48 2017 us=7211 22.2272.204:1194 LZO compression initializing
Sun Jan 29 00:56:48 2017 us=7599 22.2272.204:1194 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Jan 29 00:56:48 2017 us=7613 22.2272.204:1194 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Sun Jan 29 00:56:48 2017 us=7655 22.2272.204:1194 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Jan 29 00:56:48 2017 us=7666 22.2272.204:1194 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Jan 29 00:56:48 2017 us=7711 22.2272.204:1194 TLS: Initial packet from [AF_INET]22.2272.204:1194, sid=504c1845 21ff6921
Sun Jan 29 00:56:48 2017 us=82113 22.2272.204:1194 peer info: IV_VER=2.4.0
Sun Jan 29 00:56:48 2017 us=82190 22.2272.204:1194 peer info: IV_PLAT=win
Sun Jan 29 00:56:48 2017 us=82202 22.2272.204:1194 peer info: IV_PROTO=2
Sun Jan 29 00:56:48 2017 us=82210 22.2272.204:1194 peer info: IV_NCP=2
Sun Jan 29 00:56:48 2017 us=82217 22.2272.204:1194 peer info: IV_LZ4=1
Sun Jan 29 00:56:48 2017 us=82225 22.2272.204:1194 peer info: IV_LZ4v2=1
Sun Jan 29 00:56:48 2017 us=82233 22.2272.204:1194 peer info: IV_LZO=1
Sun Jan 29 00:56:48 2017 us=82241 22.2272.204:1194 peer info: IV_COMP_STUB=1
Sun Jan 29 00:56:48 2017 us=82249 22.2272.204:1194 peer info: IV_COMP_STUBv2=1
Sun Jan 29 00:56:48 2017 us=82257 22.2272.204:1194 peer info: IV_TCPNL=1
Sun Jan 29 00:56:48 2017 us=82266 22.2272.204:1194 peer info: IV_GUI_VER=OpenVPN_GUI_11
Sun Jan 29 00:56:48 2017 us=307762 22.2272.204:1194 TLS: Username/Password authentication succeeded for username 'user1' [CN SET]
Sun Jan 29 00:56:48 2017 us=307863 22.2272.204:1194 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1574', remote='link-mtu 1582'
Sun Jan 29 00:56:48 2017 us=307883 22.2272.204:1194 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-GCM'
Sun Jan 29 00:56:48 2017 us=307900 22.2272.204:1194 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
Sun Jan 29 00:56:48 2017 us=307913 22.2272.204:1194 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
Sun Jan 29 00:56:48 2017 us=328362 22.2272.204:1194 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384
Sun Jan 29 00:56:48 2017 us=328403 22.2272.204:1194 [user1] Peer Connection Initiated with [AF_INET]22.2272.204:1194
Sun Jan 29 00:56:48 2017 us=328452 user1/22.2272.204:1194 MULTI_sva: pool returned IPv4=125.125.29.110, IPv6=(Not enabled)
Sun Jan 29 00:56:49 2017 us=451148 user1/22.2272.204:1194 PUSH: Received control message: 'PUSH_REQUEST'
Sun Jan 29 00:56:49 2017 us=451272 user1/22.2272.204:1194 SENT CONTROL [user1]: 'PUSH_REPLY,route remote_host 255.255.255.255 net_gateway,route 125.125.28.0 255.255.254.0 125.125.29.1,route-gateway 125.125.29.1,ping 5,ping-restart 15,ifconfig 125.125.29.110 255.255.255.128,peer-id 0,cipher AES-256-GCM' (status=1)
Sun Jan 29 00:56:49 2017 us=451302 user1/22.2272.204:1194 Data Channel MTU parms [ L:1582 D:1450 EF:50 EB:411 ET:32 EL:3 ]
Sun Jan 29 00:56:49 2017 us=451419 user1/22.2272.204:1194 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jan 29 00:56:49 2017 us=451455 user1/22.2272.204:1194 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Jan 29 00:56:52 2017 us=96754 user1/22.2272.204:1194 MULTI: Learn: 00:ff:a0:c5:de:ca -> user1/22.2272.204:1194