OpenVPN connects but can't access anything

CocodaMonkey

I can connect an outside client to my OpenVPN server and it properly gets assigned the ip of 10.65.0.6. My OpenVPN server also is assigned the IP of 10.65.0.1. I've enabled client-to-client in the server config but these two computers cannot ping each other when both are connected. I'm really only looking to get the client talking to the server, I'm not trying to get onto the servers real subnet.

Any help as to what I'm missing would be much appreciated.

OpenVPN version 2.3.14 on both server and client machines.
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
server 10.65.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 4 Server Log

Mon Dec 19 19:02:59 2016 us=577479 Current Parameter Settings:
Mon Dec 19 19:02:59 2016 us=577479   config = 'server.ovpn'
Mon Dec 19 19:02:59 2016 us=577479   mode = 1
Mon Dec 19 19:02:59 2016 us=577479   show_ciphers = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   show_digests = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   show_engines = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   genkey = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   key_pass_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   show_tls_ciphers = DISABLED
Mon Dec 19 19:02:59 2016 us=577479 Connection profiles [default]:
Mon Dec 19 19:02:59 2016 us=577479   proto = udp
Mon Dec 19 19:02:59 2016 us=577479   local = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   local_port = 1194
Mon Dec 19 19:02:59 2016 us=577479   remote = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   remote_port = 1194
Mon Dec 19 19:02:59 2016 us=577479   remote_float = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   bind_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   bind_local = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   connect_retry_seconds = 5
Mon Dec 19 19:02:59 2016 us=577479   connect_timeout = 10
Mon Dec 19 19:02:59 2016 us=577479   connect_retry_max = 0
Mon Dec 19 19:02:59 2016 us=577479   socks_proxy_server = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   socks_proxy_port = 0
Mon Dec 19 19:02:59 2016 us=577479   socks_proxy_retry = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   tun_mtu = 1500
Mon Dec 19 19:02:59 2016 us=577479   tun_mtu_defined = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   link_mtu = 1500
Mon Dec 19 19:02:59 2016 us=577479   link_mtu_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   tun_mtu_extra = 0
Mon Dec 19 19:02:59 2016 us=577479   tun_mtu_extra_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   mtu_discover_type = -1
Mon Dec 19 19:02:59 2016 us=577479   fragment = 0
Mon Dec 19 19:02:59 2016 us=577479   mssfix = 1450
Mon Dec 19 19:02:59 2016 us=577479   explicit_exit_notification = 0
Mon Dec 19 19:02:59 2016 us=577479 Connection profiles END
Mon Dec 19 19:02:59 2016 us=577479   remote_random = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   ipchange = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   dev = 'tun'
Mon Dec 19 19:02:59 2016 us=577479   dev_type = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   dev_node = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   lladdr = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   topology = 1
Mon Dec 19 19:02:59 2016 us=577479   tun_ipv6 = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_local = '10.65.0.1'
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_remote_netmask = '10.65.0.2'
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_noexec = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_nowarn = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_ipv6_local = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_ipv6_netbits = 0
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_ipv6_remote = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   shaper = 0
Mon Dec 19 19:02:59 2016 us=577479   mtu_test = 0
Mon Dec 19 19:02:59 2016 us=577479   mlock = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   keepalive_ping = 10
Mon Dec 19 19:02:59 2016 us=577479   keepalive_timeout = 120
Mon Dec 19 19:02:59 2016 us=577479   inactivity_timeout = 0
Mon Dec 19 19:02:59 2016 us=577479   ping_send_timeout = 10
Mon Dec 19 19:02:59 2016 us=577479   ping_rec_timeout = 240
Mon Dec 19 19:02:59 2016 us=577479   ping_rec_timeout_action = 2
Mon Dec 19 19:02:59 2016 us=577479   ping_timer_remote = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   remap_sigusr1 = 0
Mon Dec 19 19:02:59 2016 us=577479   persist_tun = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   persist_local_ip = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   persist_remote_ip = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   persist_key = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   passtos = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   resolve_retry_seconds = 1000000000
Mon Dec 19 19:02:59 2016 us=577479   username = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   groupname = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   chroot_dir = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   cd_dir = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   writepid = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   up_script = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   down_script = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   down_pre = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   up_restart = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   up_delay = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   daemon = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   inetd = 0
Mon Dec 19 19:02:59 2016 us=577479   log = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   suppress_timestamps = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   nice = 0
Mon Dec 19 19:02:59 2016 us=577479   verbosity = 4
Mon Dec 19 19:02:59 2016 us=577479   mute = 0
Mon Dec 19 19:02:59 2016 us=577479   gremlin = 0
Mon Dec 19 19:02:59 2016 us=577479   status_file = 'openvpn-status.log'
Mon Dec 19 19:02:59 2016 us=577479   status_file_version = 1
Mon Dec 19 19:02:59 2016 us=577479   status_file_update_freq = 60
Mon Dec 19 19:02:59 2016 us=577479   occ = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   rcvbuf = 0
Mon Dec 19 19:02:59 2016 us=577479   sndbuf = 0
Mon Dec 19 19:02:59 2016 us=577479   sockflags = 0
Mon Dec 19 19:02:59 2016 us=577479   fast_io = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   lzo = 0
Mon Dec 19 19:02:59 2016 us=577479   route_script = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   route_default_gateway = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   route_default_metric = 0
Mon Dec 19 19:02:59 2016 us=577479   route_noexec = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   route_delay = 0
Mon Dec 19 19:02:59 2016 us=577479   route_delay_window = 30
Mon Dec 19 19:02:59 2016 us=577479   route_delay_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   route_nopull = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   route_gateway_via_dhcp = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   max_routes = 100
Mon Dec 19 19:02:59 2016 us=577479   allow_pull_fqdn = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   route 10.65.0.0/255.255.255.0/default (not set)/default (not set)
Mon Dec 19 19:02:59 2016 us=577479   management_addr = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   management_port = 0
Mon Dec 19 19:02:59 2016 us=577479   management_user_pass = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   management_log_history_cache = 250
Mon Dec 19 19:02:59 2016 us=577479   management_echo_buffer_size = 100
Mon Dec 19 19:02:59 2016 us=577479   management_write_peer_info_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   management_client_user = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   management_client_group = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   management_flags = 0
Mon Dec 19 19:02:59 2016 us=577479   shared_secret_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   key_direction = 0
Mon Dec 19 19:02:59 2016 us=577479   ciphername_defined = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   ciphername = 'AES-256-CBC'
Mon Dec 19 19:02:59 2016 us=577479   authname_defined = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   authname = 'SHA1'
Mon Dec 19 19:02:59 2016 us=577479   prng_hash = 'SHA1'
Mon Dec 19 19:02:59 2016 us=577479   prng_nonce_secret_len = 16
Mon Dec 19 19:02:59 2016 us=577479   keysize = 0
Mon Dec 19 19:02:59 2016 us=577479   engine = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   replay = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   mute_replay_warnings = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   replay_window = 64
Mon Dec 19 19:02:59 2016 us=577479   replay_time = 15
Mon Dec 19 19:02:59 2016 us=577479   packet_id_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   use_iv = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   test_crypto = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   tls_server = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   tls_client = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   key_method = 2
Mon Dec 19 19:02:59 2016 us=577479   ca_file = 'ca.crt'
Mon Dec 19 19:02:59 2016 us=577479   ca_path = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   dh_file = 'dh1024.pem'
Mon Dec 19 19:02:59 2016 us=577479   cert_file = 'server.crt'
Mon Dec 19 19:02:59 2016 us=577479   extra_certs_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   priv_key_file = 'server.key'
Mon Dec 19 19:02:59 2016 us=577479   pkcs12_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   cryptoapi_cert = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   cipher_list = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   tls_verify = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   tls_export_cert = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   verify_x509_type = 0
Mon Dec 19 19:02:59 2016 us=577479   verify_x509_name = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   crl_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   ns_cert_type = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_ku[i] = 0
Mon Dec 19 19:02:59 2016 us=577479   remote_cert_eku = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   ssl_flags = 0
Mon Dec 19 19:02:59 2016 us=577479   tls_timeout = 2
Mon Dec 19 19:02:59 2016 us=577479   renegotiate_bytes = -1
Mon Dec 19 19:02:59 2016 us=577479   renegotiate_packets = 0
Mon Dec 19 19:02:59 2016 us=577479   renegotiate_seconds = 3600
Mon Dec 19 19:02:59 2016 us=577479   handshake_window = 60
Mon Dec 19 19:02:59 2016 us=577479   transition_window = 3600
Mon Dec 19 19:02:59 2016 us=577479   single_session = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   push_peer_info = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   tls_exit = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   tls_auth_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_private_mode = 00000000
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_cert_private = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_pin_cache_period = -1
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_id = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   pkcs11_id_management = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   server_network = 10.65.0.0
Mon Dec 19 19:02:59 2016 us=577479   server_netmask = 255.255.255.0
Mon Dec 19 19:02:59 2016 us=577479   server_network_ipv6 = ::
Mon Dec 19 19:02:59 2016 us=577479   server_netbits_ipv6 = 0
Mon Dec 19 19:02:59 2016 us=577479   server_bridge_ip = 0.0.0.0
Mon Dec 19 19:02:59 2016 us=577479   server_bridge_netmask = 0.0.0.0
Mon Dec 19 19:02:59 2016 us=577479   server_bridge_pool_start = 0.0.0.0
Mon Dec 19 19:02:59 2016 us=577479   server_bridge_pool_end = 0.0.0.0
Mon Dec 19 19:02:59 2016 us=577479   push_entry = 'route 10.65.0.0 255.255.255.0'
Mon Dec 19 19:02:59 2016 us=577479   push_entry = 'topology net30'
Mon Dec 19 19:02:59 2016 us=577479   push_entry = 'ping 10'
Mon Dec 19 19:02:59 2016 us=577479   push_entry = 'ping-restart 120'
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_pool_defined = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_pool_start = 10.65.0.4
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_pool_end = 10.65.0.251
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_pool_netmask = 0.0.0.0
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_pool_persist_filename = 'ipp.txt'
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_pool_persist_refresh_freq = 600
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_ipv6_pool_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_ipv6_pool_base = ::
Mon Dec 19 19:02:59 2016 us=577479   ifconfig_ipv6_pool_netbits = 0
Mon Dec 19 19:02:59 2016 us=577479   n_bcast_buf = 256
Mon Dec 19 19:02:59 2016 us=577479   tcp_queue_limit = 64
Mon Dec 19 19:02:59 2016 us=577479   real_hash_size = 256
Mon Dec 19 19:02:59 2016 us=577479   virtual_hash_size = 256
Mon Dec 19 19:02:59 2016 us=577479   client_connect_script = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   learn_address_script = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   client_disconnect_script = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   client_config_dir = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   ccd_exclusive = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   tmp_dir = 'C:\Windows\TEMP\'
Mon Dec 19 19:02:59 2016 us=577479   push_ifconfig_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   push_ifconfig_local = 0.0.0.0
Mon Dec 19 19:02:59 2016 us=577479   push_ifconfig_remote_netmask = 0.0.0.0
Mon Dec 19 19:02:59 2016 us=577479   push_ifconfig_ipv6_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   push_ifconfig_ipv6_local = ::/0
Mon Dec 19 19:02:59 2016 us=577479   push_ifconfig_ipv6_remote = ::
Mon Dec 19 19:02:59 2016 us=577479   enable_c2c = ENABLED
Mon Dec 19 19:02:59 2016 us=577479   duplicate_cn = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   cf_max = 0
Mon Dec 19 19:02:59 2016 us=577479   cf_per = 0
Mon Dec 19 19:02:59 2016 us=577479   max_clients = 1024
Mon Dec 19 19:02:59 2016 us=577479   max_routes_per_client = 256
Mon Dec 19 19:02:59 2016 us=577479   auth_user_pass_verify_script = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   auth_user_pass_verify_script_via_file = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   client = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   pull = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   auth_user_pass_file = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   show_net_up = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   route_method = 0
Mon Dec 19 19:02:59 2016 us=577479   block_outside_dns = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   ip_win32_defined = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   ip_win32_type = 3
Mon Dec 19 19:02:59 2016 us=577479   dhcp_masq_offset = 0
Mon Dec 19 19:02:59 2016 us=577479   dhcp_lease_time = 31536000
Mon Dec 19 19:02:59 2016 us=577479   tap_sleep = 10
Mon Dec 19 19:02:59 2016 us=577479   dhcp_options = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   dhcp_renew = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   dhcp_pre_release = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   dhcp_release = DISABLED
Mon Dec 19 19:02:59 2016 us=577479   domain = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   netbios_scope = '[UNDEF]'
Mon Dec 19 19:02:59 2016 us=577479   netbios_node_type = 0
Mon Dec 19 19:02:59 2016 us=577479   disable_nbt = DISABLED
Mon Dec 19 19:02:59 2016 us=577479 OpenVPN 2.3.14 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  7 2016
Mon Dec 19 19:02:59 2016 us=577479 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Dec 19 19:02:59 2016 us=577479 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Mon Dec 19 19:02:59 2016 us=593109 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Mon Dec 19 19:02:59 2016 us=811849 Diffie-Hellman initialized with 1024 bit key
Mon Dec 19 19:02:59 2016 us=811849 TLS-Auth MTU parms [ L:1557 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Dec 19 19:02:59 2016 us=811849 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Dec 19 19:02:59 2016 us=827475 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=12 HWADDR=38:2c:4a:c6:6e:23
Mon Dec 19 19:02:59 2016 us=827475 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Dec 19 19:02:59 2016 us=827475 open_tun, tt->ipv6=0
Mon Dec 19 19:02:59 2016 us=827475 TAP-WIN32 device [Ethernet 4] opened: \\.\Global\{03414737-1B78-4BD8-B0C6-657F4344CA1E}.tap
Mon Dec 19 19:02:59 2016 us=827475 TAP-Windows Driver Version 9.21 
Mon Dec 19 19:02:59 2016 us=827475 TAP-Windows MTU=1500
Mon Dec 19 19:02:59 2016 us=827475 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.65.0.1/255.255.255.252 on interface {03414737-1B78-4BD8-B0C6-657F4344CA1E} [DHCP-serv: 10.65.0.2, lease-time: 31536000]
Mon Dec 19 19:02:59 2016 us=827475 Sleeping for 10 seconds...
Mon Dec 19 19:03:09 2016 us=841652 Successful ARP Flush on interface [16] {03414737-1B78-4BD8-B0C6-657F4344CA1E}
Mon Dec 19 19:03:09 2016 us=841652 C:\Windows\system32\route.exe ADD 10.65.0.0 MASK 255.255.255.0 10.65.0.2
Mon Dec 19 19:03:09 2016 us=841652 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Dec 19 19:03:09 2016 us=841652 Route addition via IPAPI succeeded [adaptive]
Mon Dec 19 19:03:09 2016 us=841652 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:12 ET:0 EL:3 ]
Mon Dec 19 19:03:09 2016 us=841652 UDPv4 link local (bound): [undef]
Mon Dec 19 19:03:09 2016 us=841652 UDPv4 link remote: [undef]
Mon Dec 19 19:03:09 2016 us=841652 MULTI: multi_init called, r=256 v=256
Mon Dec 19 19:03:09 2016 us=841652 IFCONFIG POOL: base=10.65.0.4 size=62, ipv6=0
Mon Dec 19 19:03:09 2016 us=841652 ifconfig_pool_read(), in='Client1,10.65.0.4', TODO: IPv6
Mon Dec 19 19:03:09 2016 us=841652 succeeded -> ifconfig_pool_set()
Mon Dec 19 19:03:09 2016 us=841652 IFCONFIG POOL LIST
Mon Dec 19 19:03:09 2016 us=841652 Client1,10.65.0.4
Mon Dec 19 19:03:09 2016 us=841652 Initialization Sequence Completed
Mon Dec 19 19:03:40 2016 us=50212 MULTI: multi_create_instance called
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 Re-using SSL/TLS context
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 Control Channel MTU parms [ L:1557 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:12 ET:0 EL:3 ]
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 Local Options hash (VER=V4): '8114d01c'
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 Expected Remote Options hash (VER=V4): '2dd3fcaf'
Mon Dec 19 19:03:40 2016 us=50212 CLIENTIPREMOVED:62666 TLS: Initial packet from [AF_INET]CLIENTIPREMOVED:62666, sid=e8891160 5ecd0813
Mon Dec 19 19:03:40 2016 us=159585 CLIENTIPREMOVED:62666 VERIFY OK: depth=1, C=CA, ST=AB, L=Edmonton, O=Krawford, OU=remote, CN=burns, name=EasyRSA, emailAddress=edm@krawford.com
Mon Dec 19 19:03:40 2016 us=159585 CLIENTIPREMOVED:62666 VERIFY OK: depth=0, C=CA, ST=AB, L=Edmonton, O=Krawford, OU=remote, CN=Client1, name=EasyRSA, emailAddress=luke@dintegratech.com
Mon Dec 19 19:03:40 2016 us=222068 CLIENTIPREMOVED:62666 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Dec 19 19:03:40 2016 us=222068 CLIENTIPREMOVED:62666 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 19 19:03:40 2016 us=222068 CLIENTIPREMOVED:62666 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Dec 19 19:03:40 2016 us=222068 CLIENTIPREMOVED:62666 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 19 19:03:40 2016 us=268959 CLIENTIPREMOVED:62666 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Mon Dec 19 19:03:40 2016 us=268959 CLIENTIPREMOVED:62666 [Client1] Peer Connection Initiated with [AF_INET]CLIENTIPREMOVED:62666
Mon Dec 19 19:03:40 2016 us=268959 Client1/CLIENTIPREMOVED:62666 MULTI_sva: pool returned IPv4=10.65.0.6, IPv6=(Not enabled)
Mon Dec 19 19:03:40 2016 us=268959 Client1/CLIENTIPREMOVED:62666 MULTI: Learn: 10.65.0.6 -> Client1/CLIENTIPREMOVED:62666
Mon Dec 19 19:03:40 2016 us=268959 Client1/CLIENTIPREMOVED:62666 MULTI: primary virtual IP for Client1/CLIENTIPREMOVED:62666: 10.65.0.6
Mon Dec 19 19:03:42 2016 us=472067 Client1/CLIENTIPREMOVED:62666 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 19 19:03:42 2016 us=472067 Client1/CLIENTIPREMOVED:62666 send_push_reply(): safe_cap=940
Mon Dec 19 19:03:42 2016 us=472067 Client1/CLIENTIPREMOVED:62666 SENT CONTROL [Client1]: 'PUSH_REPLY,route 10.65.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.65.0.6 10.65.0.5' (status=1)
Mon Dec 19 19:03:42 2016 us=722064 Client1/CLIENTIPREMOVED:62666 MULTI: bad source address from client [::], packet dropped

client
dev tun
proto udp
remote IPRemoved 1194
float
keepalive 10 120
ns-cert-type server
resolv-retry infinite
nobind
cipher AES-256-CBC
<ca>
-----BEGIN CERTIFICATE-----
Key removed
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
Key removed
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
Key removed
-----END PRIVATE KEY-----
</key>
verb 4 Client Log

Mon Dec 19 19:05:39 2016 us=672954 Current Parameter Settings:
Mon Dec 19 19:05:39 2016 us=672954   config = 'Client1.ovpn'
Mon Dec 19 19:05:39 2016 us=672954   mode = 0
Mon Dec 19 19:05:39 2016 us=672954   show_ciphers = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   show_digests = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   show_engines = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   genkey = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   key_pass_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   show_tls_ciphers = DISABLED
Mon Dec 19 19:05:39 2016 us=672954 Connection profiles [default]:
Mon Dec 19 19:05:39 2016 us=672954   proto = udp
Mon Dec 19 19:05:39 2016 us=672954   local = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   local_port = 0
Mon Dec 19 19:05:39 2016 us=672954   remote = 'SERVERIPREMOVED'
Mon Dec 19 19:05:39 2016 us=672954   remote_port = 1194
Mon Dec 19 19:05:39 2016 us=672954   remote_float = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   bind_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   bind_local = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   connect_retry_seconds = 5
Mon Dec 19 19:05:39 2016 us=672954   connect_timeout = 10
Mon Dec 19 19:05:39 2016 us=672954   connect_retry_max = 0
Mon Dec 19 19:05:39 2016 us=672954   socks_proxy_server = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   socks_proxy_port = 0
Mon Dec 19 19:05:39 2016 us=672954   socks_proxy_retry = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   tun_mtu = 1500
Mon Dec 19 19:05:39 2016 us=672954   tun_mtu_defined = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   link_mtu = 1500
Mon Dec 19 19:05:39 2016 us=672954   link_mtu_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   tun_mtu_extra = 0
Mon Dec 19 19:05:39 2016 us=672954   tun_mtu_extra_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   mtu_discover_type = -1
Mon Dec 19 19:05:39 2016 us=672954   fragment = 0
Mon Dec 19 19:05:39 2016 us=672954   mssfix = 1450
Mon Dec 19 19:05:39 2016 us=672954   explicit_exit_notification = 0
Mon Dec 19 19:05:39 2016 us=672954 Connection profiles END
Mon Dec 19 19:05:39 2016 us=672954   remote_random = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ipchange = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   dev = 'tun'
Mon Dec 19 19:05:39 2016 us=672954   dev_type = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   dev_node = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   lladdr = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   topology = 1
Mon Dec 19 19:05:39 2016 us=672954   tun_ipv6 = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_local = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_remote_netmask = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_noexec = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_nowarn = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_ipv6_local = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_ipv6_netbits = 0
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_ipv6_remote = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   shaper = 0
Mon Dec 19 19:05:39 2016 us=672954   mtu_test = 0
Mon Dec 19 19:05:39 2016 us=672954   mlock = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   keepalive_ping = 10
Mon Dec 19 19:05:39 2016 us=672954   keepalive_timeout = 120
Mon Dec 19 19:05:39 2016 us=672954   inactivity_timeout = 0
Mon Dec 19 19:05:39 2016 us=672954   ping_send_timeout = 10
Mon Dec 19 19:05:39 2016 us=672954   ping_rec_timeout = 120
Mon Dec 19 19:05:39 2016 us=672954   ping_rec_timeout_action = 2
Mon Dec 19 19:05:39 2016 us=672954   ping_timer_remote = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   remap_sigusr1 = 0
Mon Dec 19 19:05:39 2016 us=672954   persist_tun = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   persist_local_ip = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   persist_remote_ip = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   persist_key = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   passtos = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   resolve_retry_seconds = 1000000000
Mon Dec 19 19:05:39 2016 us=672954   username = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   groupname = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   chroot_dir = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   cd_dir = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   writepid = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   up_script = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   down_script = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   down_pre = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   up_restart = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   up_delay = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   daemon = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   inetd = 0
Mon Dec 19 19:05:39 2016 us=672954   log = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   suppress_timestamps = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   nice = 0
Mon Dec 19 19:05:39 2016 us=672954   verbosity = 4
Mon Dec 19 19:05:39 2016 us=672954   mute = 0
Mon Dec 19 19:05:39 2016 us=672954   gremlin = 0
Mon Dec 19 19:05:39 2016 us=672954   status_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   status_file_version = 1
Mon Dec 19 19:05:39 2016 us=672954   status_file_update_freq = 60
Mon Dec 19 19:05:39 2016 us=672954   occ = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   rcvbuf = 0
Mon Dec 19 19:05:39 2016 us=672954   sndbuf = 0
Mon Dec 19 19:05:39 2016 us=672954   sockflags = 0
Mon Dec 19 19:05:39 2016 us=672954   fast_io = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   lzo = 0
Mon Dec 19 19:05:39 2016 us=672954   route_script = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   route_default_gateway = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   route_default_metric = 0
Mon Dec 19 19:05:39 2016 us=672954   route_noexec = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   route_delay = 5
Mon Dec 19 19:05:39 2016 us=672954   route_delay_window = 30
Mon Dec 19 19:05:39 2016 us=672954   route_delay_defined = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   route_nopull = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   route_gateway_via_dhcp = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   max_routes = 100
Mon Dec 19 19:05:39 2016 us=672954   allow_pull_fqdn = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   management_addr = '127.0.0.1'
Mon Dec 19 19:05:39 2016 us=672954   management_port = 25340
Mon Dec 19 19:05:39 2016 us=672954   management_user_pass = 'stdin'
Mon Dec 19 19:05:39 2016 us=672954   management_log_history_cache = 250
Mon Dec 19 19:05:39 2016 us=672954   management_echo_buffer_size = 100
Mon Dec 19 19:05:39 2016 us=672954   management_write_peer_info_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   management_client_user = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   management_client_group = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   management_flags = 6
Mon Dec 19 19:05:39 2016 us=672954   shared_secret_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   key_direction = 0
Mon Dec 19 19:05:39 2016 us=672954   ciphername_defined = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   ciphername = 'AES-256-CBC'
Mon Dec 19 19:05:39 2016 us=672954   authname_defined = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   authname = 'SHA1'
Mon Dec 19 19:05:39 2016 us=672954   prng_hash = 'SHA1'
Mon Dec 19 19:05:39 2016 us=672954   prng_nonce_secret_len = 16
Mon Dec 19 19:05:39 2016 us=672954   keysize = 0
Mon Dec 19 19:05:39 2016 us=672954   engine = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   replay = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   mute_replay_warnings = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   replay_window = 64
Mon Dec 19 19:05:39 2016 us=672954   replay_time = 15
Mon Dec 19 19:05:39 2016 us=672954   packet_id_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   use_iv = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   test_crypto = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   tls_server = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   tls_client = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   key_method = 2
Mon Dec 19 19:05:39 2016 us=672954   ca_file = '[[INLINE]]'
Mon Dec 19 19:05:39 2016 us=672954   ca_path = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   dh_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   cert_file = '[[INLINE]]'
Mon Dec 19 19:05:39 2016 us=672954   extra_certs_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   priv_key_file = '[[INLINE]]'
Mon Dec 19 19:05:39 2016 us=672954   pkcs12_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   cryptoapi_cert = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   cipher_list = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   tls_verify = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   tls_export_cert = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   verify_x509_type = 0
Mon Dec 19 19:05:39 2016 us=672954   verify_x509_name = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   crl_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   ns_cert_type = 1
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_ku[i] = 0
Mon Dec 19 19:05:39 2016 us=672954   remote_cert_eku = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   ssl_flags = 0
Mon Dec 19 19:05:39 2016 us=672954   tls_timeout = 2
Mon Dec 19 19:05:39 2016 us=672954   renegotiate_bytes = -1
Mon Dec 19 19:05:39 2016 us=672954   renegotiate_packets = 0
Mon Dec 19 19:05:39 2016 us=672954   renegotiate_seconds = 3600
Mon Dec 19 19:05:39 2016 us=672954   handshake_window = 60
Mon Dec 19 19:05:39 2016 us=672954   transition_window = 3600
Mon Dec 19 19:05:39 2016 us=672954   single_session = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   push_peer_info = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   tls_exit = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   tls_auth_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_protected_authentication = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_private_mode = 00000000
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_cert_private = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_pin_cache_period = -1
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_id = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   pkcs11_id_management = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   server_network = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   server_netmask = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   server_network_ipv6 = ::
Mon Dec 19 19:05:39 2016 us=672954   server_netbits_ipv6 = 0
Mon Dec 19 19:05:39 2016 us=672954   server_bridge_ip = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   server_bridge_netmask = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   server_bridge_pool_start = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   server_bridge_pool_end = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_pool_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_pool_start = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_pool_end = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_pool_netmask = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_pool_persist_refresh_freq = 600
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_ipv6_pool_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_ipv6_pool_base = ::
Mon Dec 19 19:05:39 2016 us=672954   ifconfig_ipv6_pool_netbits = 0
Mon Dec 19 19:05:39 2016 us=672954   n_bcast_buf = 256
Mon Dec 19 19:05:39 2016 us=672954   tcp_queue_limit = 64
Mon Dec 19 19:05:39 2016 us=672954   real_hash_size = 256
Mon Dec 19 19:05:39 2016 us=672954   virtual_hash_size = 256
Mon Dec 19 19:05:39 2016 us=672954   client_connect_script = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   learn_address_script = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   client_disconnect_script = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   client_config_dir = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   ccd_exclusive = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   tmp_dir = 'C:\Users\Luke\AppData\Local\Temp\'
Mon Dec 19 19:05:39 2016 us=672954   push_ifconfig_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   push_ifconfig_local = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   push_ifconfig_remote_netmask = 0.0.0.0
Mon Dec 19 19:05:39 2016 us=672954   push_ifconfig_ipv6_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   push_ifconfig_ipv6_local = ::/0
Mon Dec 19 19:05:39 2016 us=672954   push_ifconfig_ipv6_remote = ::
Mon Dec 19 19:05:39 2016 us=672954   enable_c2c = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   duplicate_cn = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   cf_max = 0
Mon Dec 19 19:05:39 2016 us=672954   cf_per = 0
Mon Dec 19 19:05:39 2016 us=672954   max_clients = 1024
Mon Dec 19 19:05:39 2016 us=672954   max_routes_per_client = 256
Mon Dec 19 19:05:39 2016 us=672954   auth_user_pass_verify_script = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   auth_user_pass_verify_script_via_file = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   client = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   pull = ENABLED
Mon Dec 19 19:05:39 2016 us=672954   auth_user_pass_file = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   show_net_up = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   route_method = 0
Mon Dec 19 19:05:39 2016 us=672954   block_outside_dns = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ip_win32_defined = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   ip_win32_type = 3
Mon Dec 19 19:05:39 2016 us=672954   dhcp_masq_offset = 0
Mon Dec 19 19:05:39 2016 us=672954   dhcp_lease_time = 31536000
Mon Dec 19 19:05:39 2016 us=672954   tap_sleep = 0
Mon Dec 19 19:05:39 2016 us=672954   dhcp_options = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   dhcp_renew = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   dhcp_pre_release = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   dhcp_release = DISABLED
Mon Dec 19 19:05:39 2016 us=672954   domain = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   netbios_scope = '[UNDEF]'
Mon Dec 19 19:05:39 2016 us=672954   netbios_node_type = 0
Mon Dec 19 19:05:39 2016 us=672954   disable_nbt = DISABLED
Mon Dec 19 19:05:39 2016 us=672954 OpenVPN 2.3.14 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  7 2016
Mon Dec 19 19:05:39 2016 us=672954 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Dec 19 19:05:39 2016 us=672954 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Enter Management Password:
Mon Dec 19 19:05:39 2016 us=672954 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Dec 19 19:05:39 2016 us=672954 Need hold release from management interface, waiting...
Mon Dec 19 19:05:40 2016 us=177255 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Dec 19 19:05:40 2016 us=280481 MANAGEMENT: CMD 'state on'
Mon Dec 19 19:05:40 2016 us=280481 MANAGEMENT: CMD 'log all on'
Mon Dec 19 19:05:40 2016 us=380292 MANAGEMENT: CMD 'hold off'
Mon Dec 19 19:05:40 2016 us=380292 MANAGEMENT: CMD 'hold release'
Mon Dec 19 19:05:40 2016 us=464697 Control Channel MTU parms [ L:1557 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Dec 19 19:05:40 2016 us=464697 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Dec 19 19:05:40 2016 us=464697 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:12 ET:0 EL:3 ]
Mon Dec 19 19:05:40 2016 us=464697 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Dec 19 19:05:40 2016 us=464697 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Dec 19 19:05:40 2016 us=464697 Local Options hash (VER=V4): '2dd3fcaf'
Mon Dec 19 19:05:40 2016 us=464697 Expected Remote Options hash (VER=V4): '8114d01c'
Mon Dec 19 19:05:40 2016 us=464697 UDPv4 link local: [undef]
Mon Dec 19 19:05:40 2016 us=464697 UDPv4 link remote: [AF_INET]SERVERIPREMOVED:1194
Mon Dec 19 19:05:40 2016 us=464697 MANAGEMENT: >STATE:1482199540,WAIT,,,
Mon Dec 19 19:05:40 2016 us=533216 MANAGEMENT: >STATE:1482199540,AUTH,,,
Mon Dec 19 19:05:40 2016 us=533216 TLS: Initial packet from [AF_INET]SERVERIPREMOVED:1194, sid=6a4fcc85 ccd2afaa
Mon Dec 19 19:05:40 2016 us=580220 VERIFY OK: depth=1, C=CA, ST=AB, L=Edmonton, O=Krawford, OU=remote, CN=burns, name=EasyRSA, emailAddress=edm@krawford.com
Mon Dec 19 19:05:40 2016 us=580220 VERIFY OK: nsCertType=SERVER
Mon Dec 19 19:05:40 2016 us=580220 VERIFY OK: depth=0, C=CA, ST=AB, L=Edmonton, O=Krawford, OU=remote, CN=Server, name=Server, emailAddress=edm@krawford.com
Mon Dec 19 19:05:40 2016 us=695676 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Dec 19 19:05:40 2016 us=695676 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 19 19:05:40 2016 us=695676 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Dec 19 19:05:40 2016 us=695676 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 19 19:05:40 2016 us=695676 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Mon Dec 19 19:05:40 2016 us=695676 [Server] Peer Connection Initiated with [AF_INET]SERVERIPREMOVED:1194
Mon Dec 19 19:05:41 2016 us=798875 MANAGEMENT: >STATE:1482199541,GET_CONFIG,,,
Mon Dec 19 19:05:42 2016 us=900748 SENT CONTROL [Server]: 'PUSH_REQUEST' (status=1)
Mon Dec 19 19:05:42 2016 us=938514 PUSH: Received control message: 'PUSH_REPLY,route 10.65.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.65.0.6 10.65.0.5'
Mon Dec 19 19:05:42 2016 us=938514 OPTIONS IMPORT: timers and/or timeouts modified
Mon Dec 19 19:05:42 2016 us=938514 OPTIONS IMPORT: --ifconfig/up options modified
Mon Dec 19 19:05:42 2016 us=938514 OPTIONS IMPORT: route options modified
Mon Dec 19 19:05:42 2016 us=954189 ROUTE_GATEWAY 50.99.188.1/255.255.252.0 I=7 HWADDR=00:0f:3d:88:17:9e
Mon Dec 19 19:05:42 2016 us=954189 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Dec 19 19:05:42 2016 us=954189 MANAGEMENT: >STATE:1482199542,ASSIGN_IP,,10.65.0.6,
Mon Dec 19 19:05:42 2016 us=954189 open_tun, tt->ipv6=0
Mon Dec 19 19:05:42 2016 us=954189 TAP-WIN32 device [Ethernet] opened: \\.\Global\{76B6AA14-2F4D-4286-8D0E-678DA2EFF7CF}.tap
Mon Dec 19 19:05:42 2016 us=954189 TAP-Windows Driver Version 9.21 
Mon Dec 19 19:05:42 2016 us=954189 TAP-Windows MTU=1500
Mon Dec 19 19:05:42 2016 us=954189 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.65.0.6/255.255.255.252 on interface {76B6AA14-2F4D-4286-8D0E-678DA2EFF7CF} [DHCP-serv: 10.65.0.5, lease-time: 31536000]
Mon Dec 19 19:05:42 2016 us=954189 Successful ARP Flush on interface [8] {76B6AA14-2F4D-4286-8D0E-678DA2EFF7CF}
Mon Dec 19 19:05:47 2016 us=160697 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Mon Dec 19 19:05:47 2016 us=160697 MANAGEMENT: >STATE:1482199547,ADD_ROUTES,,,
Mon Dec 19 19:05:47 2016 us=160697 C:\WINDOWS\system32\route.exe ADD 10.65.0.0 MASK 255.255.255.0 10.65.0.5
Mon Dec 19 19:05:47 2016 us=160697 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Mon Dec 19 19:05:47 2016 us=160697 Route addition via IPAPI succeeded [adaptive]
Mon Dec 19 19:05:47 2016 us=160697 Initialization Sequence Completed
Mon Dec 19 19:05:47 2016 us=160697 MANAGEMENT: >STATE:1482199547,CONNECTED,SUCCESS,10.65.0.6,SERVERIPREMOVED

SomeGuy

It looks like both your client and server logs confirm the VPN link is up.
If the server s unable to ping the remote client tun IP and the client cannot ping the remote server's tun IP, then the usual causes for troubles are:
* routing
* network-filter/firewall

As for routing, the usual method for the start of openvpn is for it to automatically add a "-host" routing rule on the client machines routing table for the openvpn tun's interface's IP address as a "-host" entry. Please confirm you have a routing entry on the client that tells the client the specific IP address on the OpenVPN server's end of the tun interface used as the other end of the client tunnel, is listed in the client's routing table.

In this case, your log claims a push for topology config as "net30" so assuming IPv4 and 32 bit address space, this leaves 2 bits for a "subnet" between the server and your client. (This tends to be the most compatible across the most OS.)

To be sure it is not a problem, please add to your server config the line and restart the OpenVPN service:

topology net30

Check your "ifconfig-pool-persist" file "ipp.txt" and look for the address assignment for this client. If "net30" is in-place, then the IP address listed in "ipp.txt" should be the first address in a /30 network. The OpenVPN server IP address (according to the client) will probably be the second address in this /30, and the third address in this /30 should be assigned to your client's tunnel interface leaving the 4th and last address in this /30 (subnet) reserved for a "broadcast" between these 2 members.

Considering that you have the IP address "10.65.0.6" on your client, and the logs suggest a pushing for a route to "10.65.0.5", if a net30 topology, then I would expect your ipp would identify your /30 as 10.65.0.4, and your link's broadcast as being 10.65.0.7, so:

For this client from theview of the OpenVPN server:
* 10.65.0.4 : Network identifier
* 10.65.0.5 : from the client's point of view, the IP address server's end of the tunnel
* 10.65.0.6 : the client's tunnel IP address when talking through 10.65.0.5
* 10.65.0.7 : broadcast address for this /30

Let's see if your client has 2 routes I would expect: (assuming linux client)

netstat -rn
...
10.65.0.0     10.65.0.5     255.255.255.0   UG        0 0          0 tun0
10.65.0.5     0.0.0.0         255.255.255.255 UH        0 0          0 tun0
...

Basically, you are looking for a /32 (host) routing entry that described the IP address on the tunnel interface which is on the server's side, and then looking for a /24 (network) routing entry for the whole 10.65.0.0/24 to be reachable through the IP address on the client's tun interface (as a gateway)which describes the server end of the tunnel.

For windows, the output of "route -rn" would look different, but still convey the same information. Do you have routing entries for this "host" and "network" out the tunnel on your client? If not, maybe your windows client is not adding routes.

From server log:

Mon Dec 19 19:02:59 2016 us=577479   push_entry = 'route 10.65.0.0 255.255.255.0'
Mon Dec 19 19:02:59 2016 us=577479   push_entry = 'topology net30'

It is pushing a route for the /24.

From the client log:

Mon Dec 19 19:05:47 2016 us=160697 C:\WINDOWS\system32\route.exe ADD 10.65.0.0 MASK 255.255.255.0 10.65.0.5
Mon Dec 19 19:05:47 2016 us=160697 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4

The server logs suggest that the OpenVPN server is "push"-ing the route changes, and the client logs suggest your client is calling "route.exe" to add them without error, but still confirm the routes are there when the link is up so routing can be eliminate as a source of trouble.

If you have confirmed it is not a routing issue, then the next most likely cause for trouble is a firewall or network filter that is denying access.

Looking through your logs, it looks like you are using a Windows box as the OpenVPN server, and a Windows box as the OpenVPN client.

For a troubleshooting step, try disabling all firewall rules on the client and server, and then from the client try:

ping 10.65.0.1

and maybe

tracert 10.65.0.1

If both of these work, then you have confirmation that routing really is working, and if they work with the firewall rules disabled, but fail when firewall rules are enabled, then you have a strong indication that the issue with being unable to ping the server as being caused by a network filter or firewall rule on the server or client or both.

If anything here helps, please identify what was useful and what did not help so anyone else searching for it may benefit.

CocodaMonkey

I tried adding "topology net30" as well as "topology subnet" to the server config and it didn't seem to make any difference. As this is a new setup I'm not worried about supporting any legacy systems. As far as I can see I wouldn't really want to be using net30 but I may be mistaken.

As for the routes, I'm not very good at reading this but as far as I can see they are listed correctly.

Client IPv4 Routing table while connected

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      50.99.188.1     ClientIPRemoved  25
        10.65.0.0    255.255.255.0        10.65.0.5        10.65.0.6     35
        10.65.0.4  255.255.255.252         On-link         10.65.0.6    291
        10.65.0.6  255.255.255.255         On-link         10.65.0.6    291
        10.65.0.7  255.255.255.255         On-link         10.65.0.6    291
      50.99.188.0    255.255.252.0         On-link      ClientIPRemoved 281
    ClientIPRemoved  255.255.255.255       On-link      ClientIPRemoved 281
    50.99.191.255  255.255.255.255         On-link      ClientIPRemoved 281
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    331
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    331
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    331
     192.168.70.0    255.255.255.0         On-link     192.168.70.70    281
    192.168.70.70  255.255.255.255         On-link     192.168.70.70    281
   192.168.70.255  255.255.255.255         On-link     192.168.70.70    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    331
        224.0.0.0        240.0.0.0         On-link     192.168.70.70    281
        224.0.0.0        240.0.0.0         On-link      ClientIPRemoved 281
        224.0.0.0        240.0.0.0         On-link         10.65.0.6    291
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    331
  255.255.255.255  255.255.255.255         On-link     192.168.70.70    281
  255.255.255.255  255.255.255.255         On-link      ClientIPRemoved 281

Server IPv4 Routing table while connected

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1     192.168.0.23    266
        10.65.0.0    255.255.255.0        10.65.0.2        10.65.0.1     20
        10.65.0.0  255.255.255.252         On-link         10.65.0.1    276
        10.65.0.1  255.255.255.255         On-link         10.65.0.1    276
        10.65.0.3  255.255.255.255         On-link         10.65.0.1    276
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.0.0    255.255.255.0         On-link      192.168.0.23    266
     192.168.0.23  255.255.255.255         On-link      192.168.0.23    266
    192.168.0.255  255.255.255.255         On-link      192.168.0.23    266
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link         10.65.0.1    276
        224.0.0.0        240.0.0.0         On-link      192.168.0.23    266
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link         10.65.0.1    276
  255.255.255.255  255.255.255.255         On-link      192.168.0.23    266

As for firewalls, I'd already disabled them on both the client and server, I did double check just to make sure. On the router all I did was forward port 1194 to the server. Which I believe is the only port that needs to be forwarded.

The server's local network is 192.168.0.0 and the clients local network is 192.168.70.0. I'm aware that this isn't ideal but I don't think it would cause any conflicts with this as I'm not trying to push the client onto the servers local network and I don't intend to do it at any point.

SomeGuy

Assuming this is from the client:

        10.65.0.0    255.255.255.0        10.65.0.5        10.65.0.6     35
        10.65.0.4  255.255.255.252         On-link         10.65.0.6    291
        10.65.0.6  255.255.255.255         On-link         10.65.0.6    291
        10.65.0.7  255.255.255.255         On-link         10.65.0.6    291

I brought up an OpenVPN client from windows and had it connect to an OpenVPN server running on linux, and the routing table in windows for:

route print -4 10.65.0.*

(replacing the first 3 octets with the first three octets my network uses) shows similar results on my windows machine which works.

The GW is the 2nd address in the /30 as the other end of the clients tunnel, and the "Interface" IP address is the actual IP address on the client's size of the tunnel.

It is probably not a routing issue on the client.

Looking at the routing table on the server, and only focusing on the VPN subnet, I do not see issues there (like overlapping ranges, or wrong interface by IP.)

When linux is the server for the OpenVPN service, the linux admin has to enable IP forwarding so the Linux-based OpenVPN server can act as a router.

With ancient versions of MS Windows, there was a checkbox in the network interface section under protocols for IPv4 to enable IP Forwarding/gateway, but I do not see this in modern windows.

As a simple test, with likely serious security issues if you allow other users to use your vpn, consider visiting you windows-based OpenVPN server, visit the network interfaces:
* "Start/Box" -> "Settings" -> "Network & Internet" -> (scroll down, look lower-right for text:) "Network & Sharing Center" (click)
* Left-side of next window "Network Sharing Center" locate a link for "Change Adapter Setting" and click that.
* Locate the interface that is your "TAP" device, and right-click and in the menu choose "Properties"
* New "Properties" window, locate tab at top for "Sharing" and click.
* Under "Sharing" Tab , locate checkbox for "Allow other users to connect through this computers Internet Connection" and check that checkbox.
* Under "Select Private Network" choose the network interface that has your default gateway for Internet access
* Click "OK"
* Maybe restart your openvpn service (dont' reboot the whole server, just restart the service) on this modified windows box after making this change.
* Re-connect with your client after the OpenVPN server returns.

With the firewalls on client and server still disabled, see if you can ping the OpenVPN server IP address 10.65.0.1 from the windows client.

if that works, then the issue was the windows OpenVPN server was not acting like a router, and the problem has been diagnosed.

If that is the problem, then you have the problem of deciding if that is the best solution. If you share your OpenVPN server with other people, there are security risks in opening up sharing through your server. You should then investigate custom network filtering rules to limit what tunnel subnet users can access, or find a less bulky way of enabling forwarding of traffic on an interface but only to other members on that interface and not through resources your OpenVPN server can access, or some mixture of both of these.

Does enabling "Internet Connection Sharing" on your Windows-based OpenVPN server allow each client machine to "see" the server over the tunnel?

CocodaMonkey

OK, I've changed nothing since my last post and now it's working. I'm really at a loss, super glad it's working but don't know what is going on. I'll look at it again in the morning to see if I can explain this. Either way, I greatly appreciate your help.

SomeGuy

Congrats. Good to hear it is working for you. :-)

CocodaMonkey

It looks like what fixed it for me was putting "topology subnet" in the server config. I remember trying it and thought it had failed but apparently left it in when I was getting frustrated. Anyway, everything is working as I want it to so thank you again for your help and pointing me in the right direction.

SomeGuy

CocodaMonkey wroteIt looks like what fixed it for me was putting "topology subnet" in the server config. I remember trying it and thought it had failed but apparently left it in when I was getting frustrated. Anyway, everything is working as I want it to so thank you again for your help and pointing me in the right direction.

Thanks for returning with a follow-up of what it was that helped you!

Such things help other people with google searches for answers to the same problems.

Congrats on a working OpenVPN and finding out what it was that finally made it work for you. :-)