OpenVPN connects but cant connect to LAN

uskwarrior

Hi Team,

Last week I was able to finally configure an OPENVPN server on my Linksys DD-WRT router. However I am stuck at a point where I am unable to access my LAN when connected to the VPN from outside. I have been breaking my head since a week on this with no luck. Any help/guidance would be highly appreciated. I am able to connect to the VPN and get the address 10.8.0.6 but cant access the LAN 10.10.10.0/24 or 192.168.1.0/24. Also I am not able to ping the VPN default gateway 10.8.0.1 or the LAN gateway 10.10.10.1 or the WAN gateway 192.168.1.254.
Another thing is that If i connect to the OPEN VPN server through multiple clients, I get the same ip address. Is this expected?

Following is my setup:
http://tinypic.com/view.php?pic=1r6std&s=9

LAN Subnet: 192.168.1.0/24
Modem/Gateway: 192.168.1.254
DD WRT Router WAN IP: 192.168.1.79/24
DD WRT ROUTER LAN IP: 10.10.10.1/24
VPN SCOPE: 10.8.0.0/24
VPN CLIENT IP ADDRESS: 10.8.0.6

Following is the configuration:

OPENVPN SERVER CONFIG
push route "10.10.10.0 255.255.255.0"
server 10.8.0.0 255.255.255.0
dev tun0
proto udp
keepalive 10 120
cipher AES-256-CBC
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001

OPENVPN CLIENT CONFIG
client
dev tun0
proto udp
remote rootsec.ddns.net 1194 udp
resolv-retry infinite
nobind
persist-key
persist-tun
float
route-delay 30
ca ca.crt
cert client1.crt
key client1.key
cipher AES-256-CBC
ns-cert-type server
comp-lzo
verb 4

IPTABLES CONFIG
iptables -I INPUT -i tun0 -j ACCEPT
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A INPUT -p tcp -s 0.0.0.0 -j ACCEPT
iptables -I FORWARD 1 --source 10.8.0.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE
iptables -I INPUT -p udp -m udp --dport 1194 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I INPUT -p udp --dport 1194 -j ACCEPT
iptables -I INPUT -p udp -m udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 &#-106;source 10.10.10.0/24 -j ACCEPT

IPCONFIG/ ROUTE TABLE AFTER CONNECTING
Ethernet adapter Connexion au r??seau local 3:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-1C-9E-D2-14
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.8.0.6(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Lease Obtained. . . . . . . . . . : Monday, January 09, 2017 10:17:37 AM
Lease Expires . . . . . . . . . . : Tuesday, January 09, 2018 10:17:37 AM
Default Gateway . . . . . . . . . :
DHCP Server . . . . . . . . . . . : 10.8.0.5
NetBIOS over Tcpip. . . . . . . . : Enabled
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.43.1 192.168.43.90 25
10.8.0.1 255.255.255.255 10.8.0.5 10.8.0.6 20
10.8.0.4 255.255.255.252 On-link 10.8.0.6 276
10.8.0.6 255.255.255.255 On-link 10.8.0.6 276
10.8.0.7 255.255.255.255 On-link 10.8.0.6 276
10.10.10.0 255.255.255.0 10.8.0.5 10.8.0.6 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.43.0 255.255.255.0 On-link 192.168.43.90 281
192.168.43.90 255.255.255.255 On-link 192.168.43.90 281
192.168.43.255 255.255.255.255 On-link 192.168.43.90 281
192.168.44.0 255.255.255.0 On-link 192.168.44.1 276
192.168.44.1 255.255.255.255 On-link 192.168.44.1 276
192.168.44.255 255.255.255.255 On-link 192.168.44.1 276
192.168.160.0 255.255.255.0 On-link 192.168.160.1 276
192.168.160.1 255.255.255.255 On-link 192.168.160.1 276
192.168.160.255 255.255.255.255 On-link 192.168.160.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.43.90 281
224.0.0.0 240.0.0.0 On-link 192.168.160.1 276
224.0.0.0 240.0.0.0 On-link 192.168.44.1 276
224.0.0.0 240.0.0.0 On-link 10.8.0.6 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.43.90 281
255.255.255.255 255.255.255.255 On-link 192.168.160.1 276
255.255.255.255 255.255.255.255 On-link 192.168.44.1 276
255.255.255.255 255.255.255.255 On-link 10.8.0.6 276
===========================================================================
Persistent Routes:
None

CLIENT LOG
Mon Jan 09 10:17:32 2017 us=352445 Current Parameter Settings:
Mon Jan 09 10:17:32 2017 us=353445 config = 'client.ovpn'
Mon Jan 09 10:17:32 2017 us=353445 mode = 0
Mon Jan 09 10:17:32 2017 us=353445 show_ciphers = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 show_digests = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 show_engines = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 genkey = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 key_pass_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 show_tls_ciphers = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 Connection profiles [default]:
Mon Jan 09 10:17:32 2017 us=353445 proto = udp
Mon Jan 09 10:17:32 2017 us=353445 local = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 local_port = 0
Mon Jan 09 10:17:32 2017 us=353445 remote = 'rootsec.ddns.net'
Mon Jan 09 10:17:32 2017 us=353445 remote_port = 1194
Mon Jan 09 10:17:32 2017 us=353445 remote_float = ENABLED
Mon Jan 09 10:17:32 2017 us=353445 bind_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 bind_local = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 connect_retry_seconds = 5
Mon Jan 09 10:17:32 2017 us=353445 connect_timeout = 10
Mon Jan 09 10:17:32 2017 us=353445 connect_retry_max = 0
Mon Jan 09 10:17:32 2017 us=353445 socks_proxy_server = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 socks_proxy_port = 0
Mon Jan 09 10:17:32 2017 us=353445 socks_proxy_retry = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 tun_mtu = 1500
Mon Jan 09 10:17:32 2017 us=353445 tun_mtu_defined = ENABLED
Mon Jan 09 10:17:32 2017 us=353445 link_mtu = 1500
Mon Jan 09 10:17:32 2017 us=353445 link_mtu_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 tun_mtu_extra = 0
Mon Jan 09 10:17:32 2017 us=353445 tun_mtu_extra_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 mtu_discover_type = -1
Mon Jan 09 10:17:32 2017 us=353445 fragment = 0
Mon Jan 09 10:17:32 2017 us=353445 mssfix = 1450
Mon Jan 09 10:17:32 2017 us=353445 explicit_exit_notification = 0
Mon Jan 09 10:17:32 2017 us=353445 Connection profiles END
Mon Jan 09 10:17:32 2017 us=353445 remote_random = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 ipchange = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 dev = 'tun0'
Mon Jan 09 10:17:32 2017 us=353445 dev_type = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 dev_node = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 lladdr = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 topology = 1
Mon Jan 09 10:17:32 2017 us=353445 tun_ipv6 = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 ifconfig_local = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 ifconfig_remote_netmask = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 ifconfig_noexec = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 ifconfig_nowarn = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 ifconfig_ipv6_local = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 ifconfig_ipv6_netbits = 0
Mon Jan 09 10:17:32 2017 us=353445 ifconfig_ipv6_remote = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 shaper = 0
Mon Jan 09 10:17:32 2017 us=353445 mtu_test = 0
Mon Jan 09 10:17:32 2017 us=353445 mlock = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 keepalive_ping = 0
Mon Jan 09 10:17:32 2017 us=353445 keepalive_timeout = 0
Mon Jan 09 10:17:32 2017 us=353445 inactivity_timeout = 0
Mon Jan 09 10:17:32 2017 us=353445 ping_send_timeout = 0
Mon Jan 09 10:17:32 2017 us=353445 ping_rec_timeout = 0
Mon Jan 09 10:17:32 2017 us=353445 ping_rec_timeout_action = 0
Mon Jan 09 10:17:32 2017 us=353445 ping_timer_remote = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 remap_sigusr1 = 0
Mon Jan 09 10:17:32 2017 us=353445 persist_tun = ENABLED
Mon Jan 09 10:17:32 2017 us=353445 persist_local_ip = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 persist_remote_ip = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 persist_key = ENABLED
Mon Jan 09 10:17:32 2017 us=353445 passtos = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 resolve_retry_seconds = 1000000000
Mon Jan 09 10:17:32 2017 us=353445 username = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 groupname = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 chroot_dir = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 cd_dir = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 writepid = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 up_script = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 down_script = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 down_pre = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 up_restart = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 up_delay = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 daemon = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 inetd = 0
Mon Jan 09 10:17:32 2017 us=353445 log = ENABLED
Mon Jan 09 10:17:32 2017 us=353445 suppress_timestamps = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 nice = 0
Mon Jan 09 10:17:32 2017 us=353445 verbosity = 4
Mon Jan 09 10:17:32 2017 us=353445 mute = 0
Mon Jan 09 10:17:32 2017 us=353445 gremlin = 0
Mon Jan 09 10:17:32 2017 us=353445 status_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 status_file_version = 1
Mon Jan 09 10:17:32 2017 us=353445 status_file_update_freq = 60
Mon Jan 09 10:17:32 2017 us=353445 occ = ENABLED
Mon Jan 09 10:17:32 2017 us=353445 rcvbuf = 0
Mon Jan 09 10:17:32 2017 us=353445 sndbuf = 0
Mon Jan 09 10:17:32 2017 us=353445 sockflags = 0
Mon Jan 09 10:17:32 2017 us=353445 fast_io = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 lzo = 7
Mon Jan 09 10:17:32 2017 us=353445 route_script = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 route_default_gateway = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=353445 route_default_metric = 0
Mon Jan 09 10:17:32 2017 us=353445 route_noexec = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 route_delay = 30
Mon Jan 09 10:17:32 2017 us=353445 route_delay_window = 30
Mon Jan 09 10:17:32 2017 us=353445 route_delay_defined = ENABLED
Mon Jan 09 10:17:32 2017 us=353445 route_nopull = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 route_gateway_via_dhcp = DISABLED
Mon Jan 09 10:17:32 2017 us=353445 max_routes = 100
Mon Jan 09 10:17:32 2017 us=353445 allow_pull_fqdn = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 management_addr = '127.0.0.1'
Mon Jan 09 10:17:32 2017 us=354445 management_port = 25340
Mon Jan 09 10:17:32 2017 us=354445 management_user_pass = 'stdin'
Mon Jan 09 10:17:32 2017 us=354445 management_log_history_cache = 250
Mon Jan 09 10:17:32 2017 us=354445 management_echo_buffer_size = 100
Mon Jan 09 10:17:32 2017 us=354445 management_write_peer_info_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 management_client_user = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 management_client_group = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 management_flags = 6
Mon Jan 09 10:17:32 2017 us=354445 shared_secret_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 key_direction = 0
Mon Jan 09 10:17:32 2017 us=354445 ciphername_defined = ENABLED
Mon Jan 09 10:17:32 2017 us=354445 ciphername = 'AES-256-CBC'
Mon Jan 09 10:17:32 2017 us=354445 authname_defined = ENABLED
Mon Jan 09 10:17:32 2017 us=354445 authname = 'SHA1'
Mon Jan 09 10:17:32 2017 us=354445 prng_hash = 'SHA1'
Mon Jan 09 10:17:32 2017 us=354445 prng_nonce_secret_len = 16
Mon Jan 09 10:17:32 2017 us=354445 keysize = 0
Mon Jan 09 10:17:32 2017 us=354445 engine = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 replay = ENABLED
Mon Jan 09 10:17:32 2017 us=354445 mute_replay_warnings = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 replay_window = 64
Mon Jan 09 10:17:32 2017 us=354445 replay_time = 15
Mon Jan 09 10:17:32 2017 us=354445 packet_id_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 use_iv = ENABLED
Mon Jan 09 10:17:32 2017 us=354445 test_crypto = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 tls_server = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 tls_client = ENABLED
Mon Jan 09 10:17:32 2017 us=354445 key_method = 2
Mon Jan 09 10:17:32 2017 us=354445 ca_file = 'ca.crt'
Mon Jan 09 10:17:32 2017 us=354445 ca_path = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 dh_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 cert_file = 'client1.crt'
Mon Jan 09 10:17:32 2017 us=354445 extra_certs_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 priv_key_file = 'client1.key'
Mon Jan 09 10:17:32 2017 us=354445 pkcs12_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 cryptoapi_cert = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 cipher_list = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 tls_verify = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 tls_export_cert = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 verify_x509_type = 0
Mon Jan 09 10:17:32 2017 us=354445 verify_x509_name = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 crl_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 ns_cert_type = 1
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku[i] = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku[i] = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku[i] = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku[i] = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku[i] = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_ku[i] = 0
Mon Jan 09 10:17:32 2017 us=354445 remote_cert_eku = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 ssl_flags = 0
Mon Jan 09 10:17:32 2017 us=354445 tls_timeout = 2
Mon Jan 09 10:17:32 2017 us=354445 renegotiate_bytes = -1
Mon Jan 09 10:17:32 2017 us=354445 renegotiate_packets = 0
Mon Jan 09 10:17:32 2017 us=354445 renegotiate_seconds = 3600
Mon Jan 09 10:17:32 2017 us=354445 handshake_window = 60
Mon Jan 09 10:17:32 2017 us=354445 transition_window = 3600
Mon Jan 09 10:17:32 2017 us=354445 single_session = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 push_peer_info = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 tls_exit = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 tls_auth_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_protected_authentication = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_private_mode = 00000000
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_cert_private = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_pin_cache_period = -1
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_id = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=354445 pkcs11_id_management = DISABLED
Mon Jan 09 10:17:32 2017 us=354445 server_network = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=354445 server_netmask = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 server_network_ipv6 = ::
Mon Jan 09 10:17:32 2017 us=356445 server_netbits_ipv6 = 0
Mon Jan 09 10:17:32 2017 us=356445 server_bridge_ip = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 server_bridge_netmask = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 server_bridge_pool_start = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 server_bridge_pool_end = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_pool_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_pool_start = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_pool_end = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_pool_netmask = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_pool_persist_refresh_freq = 600
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_ipv6_pool_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_ipv6_pool_base = ::
Mon Jan 09 10:17:32 2017 us=356445 ifconfig_ipv6_pool_netbits = 0
Mon Jan 09 10:17:32 2017 us=356445 n_bcast_buf = 256
Mon Jan 09 10:17:32 2017 us=356445 tcp_queue_limit = 64
Mon Jan 09 10:17:32 2017 us=356445 real_hash_size = 256
Mon Jan 09 10:17:32 2017 us=356445 virtual_hash_size = 256
Mon Jan 09 10:17:32 2017 us=356445 client_connect_script = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 learn_address_script = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 client_disconnect_script = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 client_config_dir = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 ccd_exclusive = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 tmp_dir = 'C:\Users\b0579120\AppData\Local\Temp\'
Mon Jan 09 10:17:32 2017 us=356445 push_ifconfig_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 push_ifconfig_local = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 push_ifconfig_remote_netmask = 0.0.0.0
Mon Jan 09 10:17:32 2017 us=356445 push_ifconfig_ipv6_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 push_ifconfig_ipv6_local = ::/0
Mon Jan 09 10:17:32 2017 us=356445 push_ifconfig_ipv6_remote = ::
Mon Jan 09 10:17:32 2017 us=356445 enable_c2c = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 duplicate_cn = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 cf_max = 0
Mon Jan 09 10:17:32 2017 us=356445 cf_per = 0
Mon Jan 09 10:17:32 2017 us=356445 max_clients = 1024
Mon Jan 09 10:17:32 2017 us=356445 max_routes_per_client = 256
Mon Jan 09 10:17:32 2017 us=356445 auth_user_pass_verify_script = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 auth_user_pass_verify_script_via_file = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 client = ENABLED
Mon Jan 09 10:17:32 2017 us=356445 pull = ENABLED
Mon Jan 09 10:17:32 2017 us=356445 auth_user_pass_file = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 show_net_up = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 route_method = 0
Mon Jan 09 10:17:32 2017 us=356445 block_outside_dns = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 ip_win32_defined = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 ip_win32_type = 3
Mon Jan 09 10:17:32 2017 us=356445 dhcp_masq_offset = 0
Mon Jan 09 10:17:32 2017 us=356445 dhcp_lease_time = 31536000
Mon Jan 09 10:17:32 2017 us=356445 tap_sleep = 0
Mon Jan 09 10:17:32 2017 us=356445 dhcp_options = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 dhcp_renew = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 dhcp_pre_release = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 dhcp_release = DISABLED
Mon Jan 09 10:17:32 2017 us=356445 domain = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=356445 netbios_scope = '[UNDEF]'
Mon Jan 09 10:17:32 2017 us=357445 netbios_node_type = 0
Mon Jan 09 10:17:32 2017 us=357445 disable_nbt = DISABLED
Mon Jan 09 10:17:32 2017 us=357445 OpenVPN 2.3.14 x86_64-w64-mingw32 [SSL (OpenSSL )] [LZO] [PKCS11] [IPv6] built on Dec 7 2016
Mon Jan 09 10:17:32 2017 us=357445 Windows version 6.1 (Windows 7) 64bit
Mon Jan 09 10:17:32 2017 us=357445 library versions: OpenSSL 1.0.2i 22 Sep 2016, LZO 2.09
Enter Management Password:
Mon Jan 09 10:17:32 2017 us=359445 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jan 09 10:17:32 2017 us=359445 Need hold release from management interface, waiting...
Mon Jan 09 10:17:32 2017 us=744484 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jan 09 10:17:32 2017 us=844494 MANAGEMENT: CMD 'state on'
Mon Jan 09 10:17:32 2017 us=844494 MANAGEMENT: CMD 'log all on'
Mon Jan 09 10:17:33 2017 us=61515 MANAGEMENT: CMD 'hold off'
Mon Jan 09 10:17:33 2017 us=63516 MANAGEMENT: CMD 'hold release'
Mon Jan 09 10:17:33 2017 us=303540 LZO compression initialized
Mon Jan 09 10:17:33 2017 us=303540 Control Channel MTU parms [ L:1558 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Jan 09 10:17:33 2017 us=303540 Socket Buffers: R=[8192->8192] S=[64512->64512]
Mon Jan 09 10:17:33 2017 us=303540 MANAGEMENT: >STATE:1483975053,RESOLVE,,,
Mon Jan 09 10:17:33 2017 us=354545 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Jan 09 10:17:33 2017 us=354545 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Jan 09 10:17:33 2017 us=354545 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Jan 09 10:17:33 2017 us=354545 Local Options hash (VER=V4): '22188c5b'
Mon Jan 09 10:17:33 2017 us=354545 Expected Remote Options hash (VER=V4): 'a8f55717'
Mon Jan 09 10:17:33 2017 us=354545 UDPv4 link local: [undef]
Mon Jan 09 10:17:33 2017 us=354545 UDPv4 link remote: [AF_INET]216.252.79.155:1194
Mon Jan 09 10:17:33 2017 us=354545 MANAGEMENT: >STATE:1483975053,WAIT,,,
Mon Jan 09 10:17:33 2017 us=447554 MANAGEMENT: >STATE:1483975053,AUTH,,,
Mon Jan 09 10:17:33 2017 us=447554 TLS: Initial packet from [AF_INET]216.252.79.155:1194, sid=c5c5ab07 1aa86547
Mon Jan 09 10:17:34 2017 us=408650 VERIFY OK: depth=1, C=CA, ST=QC, L=Montreal, O=RootSec, OU=IT, CN=Gatekeeper, name=Gatekeeper, emailAddress=kmendhurwar@rootsec.ca
Mon Jan 09 10:17:34 2017 us=409650 VERIFY OK: nsCertType=SERVER
Mon Jan 09 10:17:34 2017 us=409650 VERIFY OK: depth=0, C=CA, ST=QC, L=Montreal, O=OpenVPN, OU=IT, CN=Gatekeeper, name=Gatekeeper, emailAddress=kmendhurwar@rootsec.ca
Mon Jan 09 10:17:35 2017 us=76717 NOTE: Options consistency check may be skewed by version differences
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tun'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1558'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1500'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher AES-256-CBC'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA1'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 256'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Mon Jan 09 10:17:35 2017 us=76717 WARNING: 'tls-server' is present in local config but missing in remote config, local='tls-server'
Mon Jan 09 10:17:35 2017 us=76717 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Jan 09 10:17:35 2017 us=76717 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 09 10:17:35 2017 us=76717 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Jan 09 10:17:35 2017 us=76717 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 09 10:17:35 2017 us=78717 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Jan 09 10:17:35 2017 us=78717 [Gatekeeper] Peer Connection Initiated with [AF_INET]216.252.79.155:1194
Mon Jan 09 10:17:36 2017 us=316841 MANAGEMENT: >STATE:1483975056,GET_CONFIG,,,
Mon Jan 09 10:17:37 2017 us=555965 SENT CONTROL [Gatekeeper]: 'PUSH_REQUEST' (status=1)
Mon Jan 09 10:17:37 2017 us=611970 PUSH: Received control message: 'PUSH_REPLY,route 10.10.10.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mon Jan 09 10:17:37 2017 us=611970 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jan 09 10:17:37 2017 us=611970 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jan 09 10:17:37 2017 us=611970 OPTIONS IMPORT: route options modified
Mon Jan 09 10:17:37 2017 us=621971 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=13 HWADDR=48:45:20:2c:84:a4
Mon Jan 09 10:17:37 2017 us=623972 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jan 09 10:17:37 2017 us=623972 MANAGEMENT: >STATE:1483975057,ASSIGN_IP,,10.8.0.6,
Mon Jan 09 10:17:37 2017 us=623972 open_tun, tt->ipv6=0
Mon Jan 09 10:17:37 2017 us=624972 TAP-WIN32 device [Connexion au r??seau local 3] opened: \\.\Global\{1C9ED214-D0E2-41D2-ADFB-D745A3D393CA}.tap
Mon Jan 09 10:17:37 2017 us=624972 TAP-Windows Driver Version 9.21
Mon Jan 09 10:17:37 2017 us=624972 TAP-Windows MTU=1500
Mon Jan 09 10:17:37 2017 us=631972 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {1C9ED214-D0E2-41D2-ADFB-D745A3D393CA} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Jan 09 10:17:37 2017 us=631972 Successful ARP Flush on interface [23] {1C9ED214-D0E2-41D2-ADFB-D745A3D393CA}
Mon Jan 09 10:17:47 2017 us=891998 Bad LZO decompression header byte: 42
Mon Jan 09 10:17:57 2017 us=137923 Bad LZO decompression header byte: 42
Mon Jan 09 10:18:07 2017 us=238933 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Mon Jan 09 10:18:07 2017 us=238933 MANAGEMENT: >STATE:1483975087,ADD_ROUTES,,,
Mon Jan 09 10:18:07 2017 us=238933 C:\WINDOWS\system32\route.exe ADD 10.10.10.0 MASK 255.255.255.0 10.8.0.5
Mon Jan 09 10:18:07 2017 us=243933 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Jan 09 10:18:07 2017 us=243933 Route addition via IPAPI succeeded [adaptive]
Mon Jan 09 10:18:07 2017 us=243933 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Mon Jan 09 10:18:07 2017 us=251934 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Mon Jan 09 10:18:07 2017 us=251934 Route addition via IPAPI succeeded [adaptive]
Mon Jan 09 10:18:07 2017 us=251934 Initialization Sequence Completed
Mon Jan 09 10:18:07 2017 us=251934 MANAGEMENT: >STATE:1483975087,CONNECTED,SUCCESS,10.8.0.6,216.252.79.155
Mon Jan 09 10:18:17 2017 us=335942 Bad LZO decompression header byte: 42
Mon Jan 09 10:18:27 2017 us=426951 Bad LZO decompression header byte: 42
Mon Jan 09 10:18:37 2017 us=632972 Bad LZO decompression header byte: 42
Mon Jan 09 10:18:47 2017 us=738982 Bad LZO decompression header byte: 42
Mon Jan 09 10:18:58 2017 us=183027 Bad LZO decompression header byte: 42
Mon Jan 09 10:19:08 2017 us=411049 Bad LZO decompression header byte: 42
Mon Jan 09 10:19:18 2017 us=594068 Bad LZO decompression header byte: 42
Mon Jan 09 10:19:28 2017 us=706079 Bad LZO decompression header byte: 42
Mon Jan 09 10:19:37 2017 us=737982 [Gatekeeper] Inactivity timeout (--ping-restart), restarting
Mon Jan 09 10:19:37 2017 us=738982 TCP/UDP: Closing socket
Mon Jan 09 10:19:37 2017 us=740982 SIGUSR1[soft,ping-restart] received, process restarting
Mon Jan 09 10:19:37 2017 us=740982 MANAGEMENT: >STATE:1483975177,RECONNECTING,ping-restart,,
Mon Jan 09 10:19:37 2017 us=740982 Restart pause, 2 second(s)
Mon Jan 09 10:19:39 2017 us=742182 Re-using SSL/TLS context
Mon Jan 09 10:19:39 2017 us=743182 LZO compression initialized
Mon Jan 09 10:19:39 2017 us=743182 Control Channel MTU parms [ L:1558 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Jan 09 10:19:39 2017 us=743182 Socket Buffers: R=[8192->8192] S=[64512->64512]
Mon Jan 09 10:19:39 2017 us=743182 MANAGEMENT: >STATE:1483975179,RESOLVE,,,
Mon Jan 09 10:19:39 2017 us=777186 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Jan 09 10:19:39 2017 us=777186 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Jan 09 10:19:39 2017 us=777186 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Jan 09 10:19:39 2017 us=777186 Local Options hash (VER=V4): '22188c5b'
Mon Jan 09 10:19:39 2017 us=777186 Expected Remote Options hash (VER=V4): 'a8f55717'
Mon Jan 09 10:19:39 2017 us=778186 UDPv4 link local: [undef]
Mon Jan 09 10:19:39 2017 us=778186 UDPv4 link remote: [AF_INET]216.252.79.155:1194
Mon Jan 09 10:19:39 2017 us=778186 MANAGEMENT: >STATE:1483975179,WAIT,,,
Mon Jan 09 10:19:39 2017 us=833191 MANAGEMENT: >STATE:1483975179,AUTH,,,
Mon Jan 09 10:19:39 2017 us=833191 TLS: Initial packet from [AF_INET]216.252.79.155:1194, sid=a767d2cd 39c16f5a
Mon Jan 09 10:19:40 2017 us=668275 VERIFY OK: depth=1, C=CA, ST=QC, L=Montreal, O=RootSec, OU=IT, CN=Gatekeeper, name=Gatekeeper, emailAddress=kmendhurwar@rootsec.ca
Mon Jan 09 10:19:40 2017 us=668275 VERIFY OK: nsCertType=SERVER
Mon Jan 09 10:19:40 2017 us=668275 VERIFY OK: depth=0, C=CA, ST=QC, L=Montreal, O=OpenVPN, OU=IT, CN=Gatekeeper, name=Gatekeeper, emailAddress=kmendhurwar@rootsec.ca
Mon Jan 09 10:19:41 2017 us=507359 NOTE: Options consistency check may be skewed by version differences
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tun'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1558'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1500'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher AES-256-CBC'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA1'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 256'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Mon Jan 09 10:19:41 2017 us=507359 WARNING: 'tls-server' is present in local config but missing in remote config, local='tls-server'
Mon Jan 09 10:19:41 2017 us=508359 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Jan 09 10:19:41 2017 us=508359 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 09 10:19:41 2017 us=508359 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Jan 09 10:19:41 2017 us=508359 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 09 10:19:41 2017 us=508359 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Jan 09 10:19:41 2017 us=508359 [Gatekeeper] Peer Connection Initiated with [AF_INET]216.252.79.155:1194
Mon Jan 09 10:19:42 2017 us=615470 MANAGEMENT: >STATE:1483975182,GET_CONFIG,,,
Mon Jan 09 10:19:43 2017 us=723580 SENT CONTROL [Gatekeeper]: 'PUSH_REQUEST' (status=1)
Mon Jan 09 10:19:43 2017 us=880596 PUSH: Received control message: 'PUSH_REPLY,route 10.10.10.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mon Jan 09 10:19:43 2017 us=880596 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jan 09 10:19:43 2017 us=880596 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jan 09 10:19:43 2017 us=880596 OPTIONS IMPORT: route options modified
Mon Jan 09 10:19:43 2017 us=880596 Preserving previous TUN/TAP instance: Connexion au r??seau local 3
Mon Jan 09 10:19:43 2017 us=880596 Initialization Sequence Completed
Mon Jan 09 10:19:43 2017 us=881596 MANAGEMENT: >STATE:1483975183,CONNECTED,SUCCESS,10.8.0.6,216.252.79.155
Mon Jan 09 10:19:53 2017 us=973605 Bad LZO decompression header byte: 42
Mon Jan 09 10:20:04 2017 us=943702 Bad LZO decompression header byte: 42
Mon Jan 09 10:20:14 2017 us=282636 Bad LZO decompression header byte: 42
Mon Jan 09 10:20:24 2017 us=710679 Bad LZO decompression header byte: 42
Mon Jan 09 10:20:34 2017 us=535661 Bad LZO decompression header byte: 42
Mon Jan 09 10:20:44 2017 us=883696 Bad LZO decompression header byte: 42
Mon Jan 09 10:20:54 2017 us=43612 Bad LZO decompression header byte: 42
Mon Jan 09 10:21:04 2017 us=399647 Bad LZO decompression header byte: 42
Mon Jan 09 10:21:14 2017 us=684676 Bad LZO decompression header byte: 42
Mon Jan 09 10:21:24 2017 us=775685 Bad LZO decompression header byte: 42
Mon Jan 09 10:21:34 2017 us=326640 Bad LZO decompression header byte: 42

TinCanTech

uskwarrior wroteMon Jan 09 10:21:34 2017 us=326640 Bad LZO decompression header byte: 42

You need to enable --comp-lzo in your server config.

uskwarrior wroteI am stuck at a point where I am unable to access my LAN when connected to the VPN from outside

You need the correct iptables rule:

Change this:

uskwarrior wroteiptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE

To:

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

where eth0 is your router's ethernet interface.

uskwarrior wroteIf i connect to the OPEN VPN server through multiple clients, I get the same ip address. Is this expected?

If they all use the same cert/key then yes, this is expected.

The preferred method is to have separate cert/keys for each of your clients. Check your router manual for creating new clients or EasyRSA if that is what you are using.

Otherwise, you can enable --duplicate-cn in your server config.
See --duplicate-cn in The Manual v23x, Also, Check your router manual for --duplicate-cn .. or perhaps something like "allow duplicate clients to connect" ..

uskwarrior

@TinCanTech : Man you're god. I tried the things you told and it did the magic. I am able to connect to the LAN resources now. Thanks a ton 🙂

TinCanTech

Hey .. Well Done !

and Thank you very much for letting me know 8-)