Exhausted my troubleshooting ideas

anewuserappears

Now under the correct forum:

So I've been trying to setup OpenVPN and I seem to have hit a wall.

OpenVPN Version v 11.4.0.0
Server DD-WRT v24-sp2 (04/16/14) kongac
Client Windows 10
push "route 192.168.1.0 255.255.255.0"
server 10.8.0.0 255.255.255.0
push "dhcp-option DNS 192.168.1.1"
push "dhcp-option DOMAIN HOME"
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"

dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

# Only use crl-verify if you are using the revoke list
# otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl

# management parameter allows DD-WRT's OpenVPN
# Status web page to access the server's management port
# port must be 5001 for scripts embedded in firmware to # work
management localhost 8081 On DD-WRT OpenVPN Server GUI I also have the following:

client
dev tun
proto udp
remote myserver 8080
resolv-retry infinite
nobind
persist-key
persist-tun
float
tun-mtu 1500
ca ca.crt
cert client1.crt
key client1.key
#remote-cert-tls server
ns-cert-type server
auth SHA1
cipher AES-256-CBC
comp-lzo yes
verb 4 For DD-WRT Firewall Commands I've entered iptables -vnL INPUT --line-numbers
iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 8080 -j logaccept
iptables -A INPUT -i tun+ -j logaccept
iptables -A FORWARD -i tun+ -j logaccept
iptables -A FORWARD -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j logaccept
iptables -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j logaccept
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
iptables -A OUTPUT -o tun+ -j logaccept Sun Jan 29 18:06:00 2017 us=847707 Current Parameter Settings:
Sun Jan 29 18:06:00 2017 us=848672 config = 'openvpnconfig.ovpn'
Sun Jan 29 18:06:00 2017 us=848672 mode = 0
Sun Jan 29 18:06:00 2017 us=848672 show_ciphers = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 show_digests = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 show_engines = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 genkey = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 key_pass_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 show_tls_ciphers = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 connect_retry_max = 0
Sun Jan 29 18:06:00 2017 us=848672 Connection profiles [0]:
Sun Jan 29 18:06:00 2017 us=848672 proto = udp
Sun Jan 29 18:06:00 2017 us=848672 local = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 local_port = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 remote = 'myserver'
Sun Jan 29 18:06:00 2017 us=848672 remote_port = '8080'
Sun Jan 29 18:06:00 2017 us=848672 remote_float = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 bind_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 bind_local = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 bind_ipv6_only = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 connect_retry_seconds = 5
Sun Jan 29 18:06:00 2017 us=848672 connect_timeout = 120
Sun Jan 29 18:06:00 2017 us=848672 socks_proxy_server = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 socks_proxy_port = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 tun_mtu = 1500
Sun Jan 29 18:06:00 2017 us=848672 tun_mtu_defined = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 link_mtu = 1500
Sun Jan 29 18:06:00 2017 us=848672 link_mtu_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 tun_mtu_extra = 0
Sun Jan 29 18:06:00 2017 us=848672 tun_mtu_extra_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 mtu_discover_type = -1
Sun Jan 29 18:06:00 2017 us=848672 fragment = 0
Sun Jan 29 18:06:00 2017 us=848672 mssfix = 1450
Sun Jan 29 18:06:00 2017 us=848672 explicit_exit_notification = 0
Sun Jan 29 18:06:00 2017 us=848672 Connection profiles END
Sun Jan 29 18:06:00 2017 us=848672 remote_random = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 ipchange = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 dev = 'tun'
Sun Jan 29 18:06:00 2017 us=848672 dev_type = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 dev_node = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 lladdr = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 topology = 1
Sun Jan 29 18:06:00 2017 us=848672 ifconfig_local = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 ifconfig_remote_netmask = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 ifconfig_noexec = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 ifconfig_nowarn = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 ifconfig_ipv6_local = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 ifconfig_ipv6_netbits = 0
Sun Jan 29 18:06:00 2017 us=848672 ifconfig_ipv6_remote = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 shaper = 0
Sun Jan 29 18:06:00 2017 us=848672 mtu_test = 0
Sun Jan 29 18:06:00 2017 us=848672 mlock = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 keepalive_ping = 0
Sun Jan 29 18:06:00 2017 us=848672 keepalive_timeout = 0
Sun Jan 29 18:06:00 2017 us=848672 inactivity_timeout = 0
Sun Jan 29 18:06:00 2017 us=848672 ping_send_timeout = 0
Sun Jan 29 18:06:00 2017 us=848672 ping_rec_timeout = 0
Sun Jan 29 18:06:00 2017 us=848672 ping_rec_timeout_action = 0
Sun Jan 29 18:06:00 2017 us=848672 ping_timer_remote = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 remap_sigusr1 = 0
Sun Jan 29 18:06:00 2017 us=848672 persist_tun = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 persist_local_ip = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 persist_remote_ip = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 persist_key = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 passtos = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 resolve_retry_seconds = 1000000000
Sun Jan 29 18:06:00 2017 us=848672 resolve_in_advance = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 username = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 groupname = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 chroot_dir = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 cd_dir = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 writepid = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 up_script = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 down_script = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 down_pre = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 up_restart = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 up_delay = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 daemon = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 inetd = 0
Sun Jan 29 18:06:00 2017 us=848672 log = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 suppress_timestamps = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 machine_readable_output = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 nice = 0
Sun Jan 29 18:06:00 2017 us=848672 verbosity = 4
Sun Jan 29 18:06:00 2017 us=848672 mute = 0
Sun Jan 29 18:06:00 2017 us=848672 gremlin = 0
Sun Jan 29 18:06:00 2017 us=848672 status_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 status_file_version = 1
Sun Jan 29 18:06:00 2017 us=848672 status_file_update_freq = 60
Sun Jan 29 18:06:00 2017 us=848672 occ = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 rcvbuf = 0
Sun Jan 29 18:06:00 2017 us=848672 sndbuf = 0
Sun Jan 29 18:06:00 2017 us=848672 sockflags = 0
Sun Jan 29 18:06:00 2017 us=848672 fast_io = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 comp.alg = 2
Sun Jan 29 18:06:00 2017 us=848672 comp.flags = 0
Sun Jan 29 18:06:00 2017 us=848672 route_script = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 route_default_gateway = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 route_default_metric = 0
Sun Jan 29 18:06:00 2017 us=848672 route_noexec = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 route_delay = 5
Sun Jan 29 18:06:00 2017 us=848672 route_delay_window = 30
Sun Jan 29 18:06:00 2017 us=848672 route_delay_defined = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 route_nopull = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 route_gateway_via_dhcp = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 allow_pull_fqdn = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 management_addr = '127.0.0.1'
Sun Jan 29 18:06:00 2017 us=848672 management_port = '25340'
Sun Jan 29 18:06:00 2017 us=848672 management_user_pass = 'stdin'
Sun Jan 29 18:06:00 2017 us=848672 management_log_history_cache = 250
Sun Jan 29 18:06:00 2017 us=848672 management_echo_buffer_size = 100
Sun Jan 29 18:06:00 2017 us=848672 management_write_peer_info_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 management_client_user = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 management_client_group = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 management_flags = 6
Sun Jan 29 18:06:00 2017 us=848672 shared_secret_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 key_direction = 0
Sun Jan 29 18:06:00 2017 us=848672 ciphername = 'AES-256-CBC'
Sun Jan 29 18:06:00 2017 us=848672 ncp_enabled = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Jan 29 18:06:00 2017 us=848672 authname = 'SHA1'
Sun Jan 29 18:06:00 2017 us=848672 prng_hash = 'SHA1'
Sun Jan 29 18:06:00 2017 us=848672 prng_nonce_secret_len = 16
Sun Jan 29 18:06:00 2017 us=848672 keysize = 0
Sun Jan 29 18:06:00 2017 us=848672 engine = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 replay = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 mute_replay_warnings = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 replay_window = 64
Sun Jan 29 18:06:00 2017 us=848672 replay_time = 15
Sun Jan 29 18:06:00 2017 us=848672 packet_id_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 use_iv = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 test_crypto = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 tls_server = DISABLED
Sun Jan 29 18:06:00 2017 us=848672 tls_client = ENABLED
Sun Jan 29 18:06:00 2017 us=848672 key_method = 2
Sun Jan 29 18:06:00 2017 us=848672 ca_file = 'ca.crt'
Sun Jan 29 18:06:00 2017 us=848672 ca_path = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 dh_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 cert_file = 'client1.crt'
Sun Jan 29 18:06:00 2017 us=848672 extra_certs_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 priv_key_file = 'client1.key'
Sun Jan 29 18:06:00 2017 us=848672 pkcs12_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 cryptoapi_cert = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 cipher_list = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 tls_verify = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 tls_export_cert = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 verify_x509_type = 0
Sun Jan 29 18:06:00 2017 us=848672 verify_x509_name = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 crl_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=848672 ns_cert_type = 1
Sun Jan 29 18:06:00 2017 us=848672 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=848672 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=848672 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=848672 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku[i] = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku[i] = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku[i] = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku[i] = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku[i] = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_ku[i] = 0
Sun Jan 29 18:06:00 2017 us=849708 remote_cert_eku = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 ssl_flags = 0
Sun Jan 29 18:06:00 2017 us=849708 tls_timeout = 2
Sun Jan 29 18:06:00 2017 us=849708 renegotiate_bytes = -1
Sun Jan 29 18:06:00 2017 us=849708 renegotiate_packets = 0
Sun Jan 29 18:06:00 2017 us=849708 renegotiate_seconds = 3600
Sun Jan 29 18:06:00 2017 us=849708 handshake_window = 60
Sun Jan 29 18:06:00 2017 us=849708 transition_window = 3600
Sun Jan 29 18:06:00 2017 us=849708 single_session = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 push_peer_info = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 tls_exit = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 tls_auth_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 tls_crypt_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_protected_authentication = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_private_mode = 00000000
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_cert_private = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_pin_cache_period = -1
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_id = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 pkcs11_id_management = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 server_network = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 server_netmask = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 server_network_ipv6 = ::
Sun Jan 29 18:06:00 2017 us=849708 server_netbits_ipv6 = 0
Sun Jan 29 18:06:00 2017 us=849708 server_bridge_ip = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 server_bridge_netmask = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 server_bridge_pool_start = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 server_bridge_pool_end = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_pool_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_pool_start = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_pool_end = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_pool_netmask = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_pool_persist_filename = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_pool_persist_refresh_freq = 600
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_ipv6_pool_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_ipv6_pool_base = ::
Sun Jan 29 18:06:00 2017 us=849708 ifconfig_ipv6_pool_netbits = 0
Sun Jan 29 18:06:00 2017 us=849708 n_bcast_buf = 256
Sun Jan 29 18:06:00 2017 us=849708 tcp_queue_limit = 64
Sun Jan 29 18:06:00 2017 us=849708 real_hash_size = 256
Sun Jan 29 18:06:00 2017 us=849708 virtual_hash_size = 256
Sun Jan 29 18:06:00 2017 us=849708 client_connect_script = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 learn_address_script = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 client_disconnect_script = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 client_config_dir = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 ccd_exclusive = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 tmp_dir = 'C:\Users\<USER>\AppData\Local\Temp\'
Sun Jan 29 18:06:00 2017 us=849708 push_ifconfig_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 push_ifconfig_local = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 push_ifconfig_remote_netmask = 0.0.0.0
Sun Jan 29 18:06:00 2017 us=849708 push_ifconfig_ipv6_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 push_ifconfig_ipv6_local = ::/0
Sun Jan 29 18:06:00 2017 us=849708 push_ifconfig_ipv6_remote = ::
Sun Jan 29 18:06:00 2017 us=849708 enable_c2c = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 duplicate_cn = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 cf_max = 0
Sun Jan 29 18:06:00 2017 us=849708 cf_per = 0
Sun Jan 29 18:06:00 2017 us=849708 max_clients = 1024
Sun Jan 29 18:06:00 2017 us=849708 max_routes_per_client = 256
Sun Jan 29 18:06:00 2017 us=849708 auth_user_pass_verify_script = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 auth_user_pass_verify_script_via_file = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 auth_token_generate = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 auth_token_lifetime = 0
Sun Jan 29 18:06:00 2017 us=849708 client = ENABLED
Sun Jan 29 18:06:00 2017 us=849708 pull = ENABLED
Sun Jan 29 18:06:00 2017 us=849708 auth_user_pass_file = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 show_net_up = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 route_method = 3
Sun Jan 29 18:06:00 2017 us=849708 block_outside_dns = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 ip_win32_defined = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 ip_win32_type = 3
Sun Jan 29 18:06:00 2017 us=849708 dhcp_masq_offset = 0
Sun Jan 29 18:06:00 2017 us=849708 dhcp_lease_time = 31536000
Sun Jan 29 18:06:00 2017 us=849708 tap_sleep = 0
Sun Jan 29 18:06:00 2017 us=849708 dhcp_options = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 dhcp_renew = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 dhcp_pre_release = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 dhcp_release = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 domain = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 netbios_scope = '[UNDEF]'
Sun Jan 29 18:06:00 2017 us=849708 netbios_node_type = 0
Sun Jan 29 18:06:00 2017 us=849708 disable_nbt = DISABLED
Sun Jan 29 18:06:00 2017 us=849708 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Sun Jan 29 18:06:00 2017 us=849708 Windows version 6.2 (Windows 8 or greater) 64bit
Sun Jan 29 18:06:00 2017 us=849708 library versions: OpenSSL 1.0.2i 22 Sep 2016, LZO 2.09
Enter Management Password:
Sun Jan 29 18:06:00 2017 us=850709 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Jan 29 18:06:00 2017 us=850709 Need hold release from management interface, waiting...
Sun Jan 29 18:06:01 2017 us=329407 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Jan 29 18:06:01 2017 us=430995 MANAGEMENT: CMD 'state on'
Sun Jan 29 18:06:01 2017 us=430995 MANAGEMENT: CMD 'log all on'
Sun Jan 29 18:06:02 2017 us=993049 MANAGEMENT: CMD 'hold off'
Sun Jan 29 18:06:03 2017 us=8965 MANAGEMENT: CMD 'hold release'
Sun Jan 29 18:06:04 2017 us=236645 MANAGEMENT: CMD 'password [...]'
Sun Jan 29 18:06:04 2017 us=236645 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Jan 29 18:06:04 2017 us=241651 LZO compression initializing
Sun Jan 29 18:06:04 2017 us=242651 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Jan 29 18:06:04 2017 us=242651 MANAGEMENT: >STATE:1485731164,RESOLVE,,,,,,
Sun Jan 29 18:06:04 2017 us=245653 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun Jan 29 18:06:04 2017 us=245653 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sun Jan 29 18:06:04 2017 us=245653 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sun Jan 29 18:06:04 2017 us=245653 TCP/UDP: Preserving recently used remote address: [AF_INET]ip.ip.ip.ip:8080
Sun Jan 29 18:06:04 2017 us=245653 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Jan 29 18:06:04 2017 us=245653 UDP link local: (not bound)
Sun Jan 29 18:06:04 2017 us=245653 UDP link remote: [AF_INET]ip.ip.ip.ip:8080
Sun Jan 29 18:06:04 2017 us=245653 MANAGEMENT: >STATE:1485731164,WAIT,,,,,,
Sun Jan 29 18:06:04 2017 us=246653 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Sun Jan 29 18:06:06 2017 us=284714 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Sun Jan 29 18:06:10 2017 us=361558 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Sun Jan 29 18:06:18 2017 us=540217 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Sun Jan 29 18:06:34 2017 us=480160 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Sun Jan 29 18:07:05 2017 us=50680 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Jan 29 18:07:05 2017 us=50680 TLS Error: TLS handshake failed
Sun Jan 29 18:07:05 2017 us=50680 TCP/UDP: Closing socket
Sun Jan 29 18:07:05 2017 us=50680 SIGUSR1[soft,tls-error] received, process restarting
Sun Jan 29 18:07:05 2017 us=50680 MANAGEMENT: >STATE:1485731225,RECONNECTING,tls-error,,,,,
Sun Jan 29 18:07:05 2017 us=50680 Restart pause, 5 second(s)

I've also turned off the Windows firewall with no success and tried separately adding the openvpn.exe to the approved programs list on the firewall.

I've made sure to run the openvpn.exe as admin.

I've ran out of ideas. Any help would be greatly appreciated. Thanks.

SomeGuy

Are you able to copy/paste a server config that contains what the server actually has and is using? Too many assumptions must be made with the GUI copy/paste on how that implementation chooses to write those options to a config, and if they are actually obeyed.

Additionally, where are the server logs with server "verb" set to 4?

Having server and client logs to look at which cover the same connect-and-fail would be useful.

One example" How can be be sure the server has the complement to the client line of "ns-cert-type server"?

Also, probably not an issue for the initial connect, why not drop the tunnel MTU to 1400 instead of 1500?

anewuserappears

Thanks for the response.

Here's the server log/config: dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3

syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port 8080
proto udp
cipher aes-256-cbc
auth sha1
client-config-dir /tmp/openvpn/ccd
comp-lzo yes
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
client-to-client
fast-io
tun-mtu 1500
mtu-disc yes
server 192.168.1.0 255.255.255.0
dev tun2
tun-ipv6
push "route 192.168.1.0 255.255.255.0"
server 10.8.0.0 255.255.255.0
push "dhcp-option DNS 192.168.1.1"
push "dhcp-option DOMAIN HOME"
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
verb 4
# Only use crl-verify if you are using the revoke list
# otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl
# management parameter allows DD-WRT's OpenVPN # Status web page to access the server's management port
# port must be 5001 for scripts embedded in firmware to #
work management localhost 8081 I changed the MTU to 1500 because OpenVPN was giving me a warning and recommended to use the 1500.

It appears my connection log on the router has a very short time period before it's over written. Going to try setting up a remote logger but right now I don't have that information.

anewuserappears

Here's a connection attempt from inside of my LAN. Not my ideal test scenario but I don't have access to a public WIFI connection right now to test from outside of the LAN.
Feb 4 11:09:09 DD-WRT kern.warn kernel: ACCEPT IN=br0 OUT= MAC=<mac-address> SRC=<internal-LAN-IP> DST=<external-ISP-assigned-WAN-IP> LEN=42 TOS=0x00 PREC=0x00 TTL=128 ID=29 PROTO=UDP SPT=58036 DPT=8080 LEN=22 MARK=0x80000000