openvpn client

nufay

I set up OVPN server and get an issue with client:
It authorizes, but no traffic passes and connection terminates after 2 minutes.
My server log:

Mar 29 09:58:53 hostname1 openvpn-vtun0[10843]: MULTI: multi_create_instance called
Mar 29 09:58:53 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Re-using SSL/TLS context
Mar 29 09:58:53 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mar 29 09:58:53 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Mar 29 09:58:53 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Local Options hash (VER=V4): '239669a8'
Mar 29 09:58:53 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Expected Remote Options hash (VER=V4): '3514370b'
Mar 29 09:58:53 hostname1 openvpn-vtun0[10843]: [client ip]:53769 TLS: Initial packet from [client ip]:53769, sid=fbd777b0 fc4d3823
Mar 29 09:58:54 hostname1 openvpn-vtun0[10843]: [client ip]:53769 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/name=jthf83ndas/emailAddress=me@myhost.mydomain
Mar 29 09:58:54 hostname1 openvpn-vtun0[10843]: [client ip]:53769 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=ndushfk8hdsd/name=ndushfk8hdsd/emailAddress=me@myhost.mydomain
Mar 29 09:58:54 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 29 09:58:54 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 29 09:58:54 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 29 09:58:54 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 29 09:58:55 hostname1 openvpn-vtun0[10843]: [client ip]:53769 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mar 29 09:58:55 hostname1 openvpn-vtun0[10843]: [client ip]:53769 [ndushfk8hdsd] Peer Connection Initiated with [client ip]:53769
Mar 29 09:58:55 hostname1 openvpn-vtun0[10843]: ndushfk8hdsd/[client ip]:53769 MULTI: Learn: 172.16.40.2 -> ndushfk8hdsd/[client ip]:53769
Mar 29 09:58:55 hostname1 openvpn-vtun0[10843]: ndushfk8hdsd/[client ip]:53769 MULTI: primary virtual IP for ndushfk8hdsd/[client ip]:53769: 172.16.40.2
Mar 29 09:58:56 hostname1 openvpn-vtun0[10843]: ndushfk8hdsd/[client ip]:53769 PUSH: Received control message: 'PUSH_REQUEST'
Mar 29 09:58:56 hostname1 openvpn-vtun0[10843]: ndushfk8hdsd/[client ip]:53769 SENT CONTROL [ndushfk8hdsd]: 'PUSH_REPLY,dhcp-option DNS 172.16.11.1,route 172.16.11.0 255.255.255.0,route-gateway 172.16.40.1,topology subnet,ping 10,ping-restart 60,ifconfig 172.16.40.2 255.255.255.0' (status=1)
Mar 29 10:00:56 hostname1 openvpn-vtun0[10843]: ndushfk8hdsd/[client ip]:53769 [ndushfk8hdsd] Inactivity timeout (--ping-restart), restarting
Mar 29 10:00:56 hostname1 openvpn-vtun0[10843]: ndushfk8hdsd/[client ip]:53769 SIGUSR1[soft,ping-restart] received, client-instance restarting

client setup:

client
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote [server ip] 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
#user nobody
#group nogroup
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
;tls-auth ta.key 1
cipher BF-CBC
#comp-lzo
verb 3
;mute 20
tun-mtu 1500
auth SHA1

Am i doing something wrong?
Any suggestions?

Regards,
Nufay.

nufay

I can't understand what i did wrong.
Did i missed something in configuration?

client config:

client
dev tun
proto tcp
remote [remote ip] 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
cipher BF-CBC
comp-lzo
verb 3
auth-user-pass auth.txt
keepalive 10 120
auth SHA1

server config:
firewall:
port 1194 opened for tcp and udp traffic
port 443 opened for tcp traffic (just in case)
established and related connections allowed
icmp allowed
OVPN config:

mode server
 openvpn-option "--verb 3"
 openvpn-option "--port 1194"
 openvpn-option "--persist-key --persist-tun"
 openvpn-option --comp-lzo
 openvpn-option "--keepalive 10 120"
 openvpn-option "--proto tcp"
 server {
     name-server 172.16.11.1
     push-route 172.16.11.0/24
     subnet 172.16.40.0/24
 }

server logs when client connects:

Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: MULTI: multi_create_instance called
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: Re-using SSL/TLS context
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: LZO compression initialized
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: Local Options hash (VER=V4): 'c0103fa8'
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: Expected Remote Options hash (VER=V4): '69109d17'
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: TCP connection established with [client ip]:55510
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: TCPv4_SERVER link local: [undef]
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: TCPv4_SERVER link remote: [client ip]:55510
Mar 29 12:14:26 hostname1 openvpn-vtun0[6725]: [client ip]:55510 TLS: Initial packet from [client ip]:55510, sid=16657dd6 b0ad12d2
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/name=jthf83ndas/emailAddress=me@myhost.mydomain
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=ndushfk8hdsd/name=ndushfk8hdsd/emailAddress=me@myhost.mydomain
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: [client ip]:55510 [ndushfk8hdsd] Peer Connection Initiated with [client ip]:55510
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: ndushfk8hdsd/[client ip]:55510 MULTI: Learn: 172.16.40.2 -> ndushfk8hdsd/[client ip]:55510
Mar 29 12:14:28 hostname1 openvpn-vtun0[6725]: ndushfk8hdsd/[client ip]:55510 MULTI: primary virtual IP for ndushfk8hdsd/[client ip]:55510: 172.16.40.2
Mar 29 12:14:29 hostname1 openvpn-vtun0[6725]: ndushfk8hdsd/[client ip]:55510 PUSH: Received control message: 'PUSH_REQUEST'
Mar 29 12:14:29 hostname1 openvpn-vtun0[6725]: ndushfk8hdsd/[client ip]:55510 SENT CONTROL [ndushfk8hdsd]: 'PUSH_REPLY,dhcp-option DNS 172.16.11.1,route 172.16.11.0 255.255.255.0,route-gateway 172.16.40.1,topology subnet,ping 10,ping-restart 120,ifconfig 172.16.40.2 255.255.255.0' (status=1)
Mar 29 12:14:29 hostname1 openvpn-vtun0[6725]: ndushfk8hdsd/[client ip]:55510 Connection reset, restarting [0]
Mar 29 12:14:29 hostname1 openvpn-vtun0[6725]: ndushfk8hdsd/[client ip]:55510 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mar 29 12:14:29 hostname1 openvpn-vtun0[6725]: TCP/UDP: Closing socket

And no reconnect attempts after this, looks strange...

Regards,
Nufay.

nufay

After some problems of reading client log, i read it, here it is:

login as: root
root@10.10.1.101's password:
root@TG100:~# cat /var/log/openvpn.log
Wed Mar 29 12:07:12 2017 us=575400 Current Parameter Settings:
Wed Mar 29 12:07:12 2017 us=575977   config = 'vpn.conf'
Wed Mar 29 12:07:12 2017 us=576079   mode = 0
Wed Mar 29 12:07:12 2017 us=576141   persist_config = DISABLED
Wed Mar 29 12:07:12 2017 us=576200   persist_mode = 1
Wed Mar 29 12:07:12 2017 us=576256   show_ciphers = DISABLED
Wed Mar 29 12:07:12 2017 us=576312   show_digests = DISABLED
Wed Mar 29 12:07:12 2017 us=576368   show_engines = DISABLED
Wed Mar 29 12:07:12 2017 us=576423   genkey = DISABLED
Wed Mar 29 12:07:12 2017 us=576478   key_pass_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=576532   show_tls_ciphers = DISABLED
Wed Mar 29 12:07:12 2017 us=576589   proto = 2
Wed Mar 29 12:07:12 2017 us=576643   local = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=576701   remote_list[0] = {'rebeling.ddns.net', 1194}
Wed Mar 29 12:07:12 2017 us=576758   remote_random = DISABLED
Wed Mar 29 12:07:12 2017 us=576812   local_port = 1194
Wed Mar 29 12:07:12 2017 us=576867   remote_port = 1194
Wed Mar 29 12:07:12 2017 us=576921   remote_float = DISABLED
Wed Mar 29 12:07:12 2017 us=576991   ipchange = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=577047   bind_local = DISABLED
Wed Mar 29 12:07:12 2017 us=577103   dev = 'tun'
Wed Mar 29 12:07:12 2017 us=577158   dev_type = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=577213   dev_node = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=577269   tun_ipv6 = DISABLED
Wed Mar 29 12:07:12 2017 us=577324   ifconfig_local = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=577380   ifconfig_remote_netmask = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=577434   ifconfig_noexec = DISABLED
Wed Mar 29 12:07:12 2017 us=577490   ifconfig_nowarn = DISABLED
Wed Mar 29 12:07:12 2017 us=577545   shaper = 0
Wed Mar 29 12:07:12 2017 us=577600   tun_mtu = 1500
Wed Mar 29 12:07:12 2017 us=577655   tun_mtu_defined = ENABLED
Wed Mar 29 12:07:12 2017 us=577710   link_mtu = 1500
Wed Mar 29 12:07:12 2017 us=577786   link_mtu_defined = DISABLED
Wed Mar 29 12:07:12 2017 us=577849   tun_mtu_extra = 0
Wed Mar 29 12:07:12 2017 us=577905   tun_mtu_extra_defined = DISABLED
Wed Mar 29 12:07:12 2017 us=577969   fragment = 0
Wed Mar 29 12:07:12 2017 us=578027   mtu_discover_type = -1
Wed Mar 29 12:07:12 2017 us=578083   mtu_test = 0
Wed Mar 29 12:07:12 2017 us=578136   mlock = DISABLED
Wed Mar 29 12:07:12 2017 us=578191   keepalive_ping = 10
Wed Mar 29 12:07:12 2017 us=578246   keepalive_timeout = 120
Wed Mar 29 12:07:12 2017 us=578302   inactivity_timeout = 0
Wed Mar 29 12:07:12 2017 us=578357   ping_send_timeout = 10
Wed Mar 29 12:07:12 2017 us=578412   ping_rec_timeout = 120
Wed Mar 29 12:07:12 2017 us=578468   ping_rec_timeout_action = 2
Wed Mar 29 12:07:12 2017 us=578522   ping_timer_remote = DISABLED
Wed Mar 29 12:07:12 2017 us=578578   remap_sigusr1 = 0
Wed Mar 29 12:07:12 2017 us=578633   explicit_exit_notification = 0
Wed Mar 29 12:07:12 2017 us=578688   persist_tun = ENABLED
Wed Mar 29 12:07:12 2017 us=578743   persist_local_ip = DISABLED
Wed Mar 29 12:07:12 2017 us=578798   persist_remote_ip = DISABLED
Wed Mar 29 12:07:12 2017 us=578854   persist_key = ENABLED
Wed Mar 29 12:07:12 2017 us=578918   mssfix = 1450
Wed Mar 29 12:07:12 2017 us=578975   passtos = DISABLED
Wed Mar 29 12:07:12 2017 us=579031   resolve_retry_seconds = 1000000000
Wed Mar 29 12:07:12 2017 us=579088   connect_retry_seconds = 5
Wed Mar 29 12:07:12 2017 us=579143   username = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=579198   groupname = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=579253   chroot_dir = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=579308   cd_dir = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=579373   writepid = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=579433   up_script = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=579489   down_script = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=579543   down_pre = DISABLED
Wed Mar 29 12:07:12 2017 us=579600   up_restart = DISABLED
Wed Mar 29 12:07:12 2017 us=579656   up_delay = DISABLED
Wed Mar 29 12:07:12 2017 us=579711   daemon = DISABLED
Wed Mar 29 12:07:12 2017 us=579766   inetd = 0
Wed Mar 29 12:07:12 2017 us=579820   log = ENABLED
Wed Mar 29 12:07:12 2017 us=579875   suppress_timestamps = DISABLED
Wed Mar 29 12:07:12 2017 us=579963   nice = 0
Wed Mar 29 12:07:12 2017 us=580024   verbosity = 5
Wed Mar 29 12:07:12 2017 us=580080   mute = 0
Wed Mar 29 12:07:12 2017 us=580134   gremlin = 0
Wed Mar 29 12:07:12 2017 us=580187   status_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=580243   status_file_version = 1
Wed Mar 29 12:07:12 2017 us=580298   status_file_update_freq = 60
Wed Mar 29 12:07:12 2017 us=580352   occ = ENABLED
Wed Mar 29 12:07:12 2017 us=580407   rcvbuf = 65536
Wed Mar 29 12:07:12 2017 us=580462   sndbuf = 65536
Wed Mar 29 12:07:12 2017 us=580516   socks_proxy_server = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=580572   socks_proxy_port = 0
Wed Mar 29 12:07:12 2017 us=580627   socks_proxy_retry = DISABLED
Wed Mar 29 12:07:12 2017 us=580681   fast_io = DISABLED
Wed Mar 29 12:07:12 2017 us=580735   comp_lzo = ENABLED
Wed Mar 29 12:07:12 2017 us=580790   comp_lzo_adaptive = ENABLED
Wed Mar 29 12:07:12 2017 us=580844   route_script = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=580899   route_default_gateway = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=580963   route_noexec = DISABLED
Wed Mar 29 12:07:12 2017 us=581021   route_delay = 0
Wed Mar 29 12:07:12 2017 us=581076   route_delay_window = 30
Wed Mar 29 12:07:12 2017 us=581131   route_delay_defined = DISABLED
Wed Mar 29 12:07:12 2017 us=581185   management_addr = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=581240   management_port = 0
Wed Mar 29 12:07:12 2017 us=581295   management_user_pass = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=581352   management_log_history_cache = 250
Wed Mar 29 12:07:12 2017 us=581408   management_echo_buffer_size = 100
Wed Mar 29 12:07:12 2017 us=581462   management_query_passwords = DISABLED
Wed Mar 29 12:07:12 2017 us=581517   management_hold = DISABLED
Wed Mar 29 12:07:12 2017 us=581573   shared_secret_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=581629   key_direction = 0
Wed Mar 29 12:07:12 2017 us=581685   ciphername_defined = ENABLED
Wed Mar 29 12:07:12 2017 us=592039   ciphername = 'BF-CBC'
Wed Mar 29 12:07:12 2017 us=592177   authname_defined = ENABLED
Wed Mar 29 12:07:12 2017 us=592291   authname = 'SHA1'
Wed Mar 29 12:07:12 2017 us=592358   keysize = 0
Wed Mar 29 12:07:12 2017 us=592416   engine = DISABLED
Wed Mar 29 12:07:12 2017 us=592474   replay = ENABLED
Wed Mar 29 12:07:12 2017 us=592530   mute_replay_warnings = DISABLED
Wed Mar 29 12:07:12 2017 us=592587   replay_window = 0
Wed Mar 29 12:07:12 2017 us=592643   replay_time = 0
Wed Mar 29 12:07:12 2017 us=592701   packet_id_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=592758   use_iv = ENABLED
Wed Mar 29 12:07:12 2017 us=592815   test_crypto = DISABLED
Wed Mar 29 12:07:12 2017 us=592870   tls_server = DISABLED
Wed Mar 29 12:07:12 2017 us=592925   tls_client = ENABLED
Wed Mar 29 12:07:12 2017 us=592981   key_method = 2
Wed Mar 29 12:07:12 2017 us=593036   ca_file = 'ca.crt'
Wed Mar 29 12:07:12 2017 us=593091   dh_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=593147   cert_file = 'client.crt'
Wed Mar 29 12:07:12 2017 us=593201   priv_key_file = 'client.key'
Wed Mar 29 12:07:12 2017 us=593269   pkcs12_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=593328   cipher_list = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=593384   tls_verify = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=593438   tls_remote = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=593495   crl_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=593551   ns_cert_type = 0
Wed Mar 29 12:07:12 2017 us=593616   tls_timeout = 2
Wed Mar 29 12:07:12 2017 us=593675   renegotiate_bytes = 0
Wed Mar 29 12:07:12 2017 us=593732   renegotiate_packets = 0
Wed Mar 29 12:07:12 2017 us=593790   renegotiate_seconds = 3600
Wed Mar 29 12:07:12 2017 us=593846   handshake_window = 60
Wed Mar 29 12:07:12 2017 us=593902   transition_window = 3600
Wed Mar 29 12:07:12 2017 us=593957   single_session = DISABLED
Wed Mar 29 12:07:12 2017 us=594013   tls_exit = DISABLED
Wed Mar 29 12:07:12 2017 us=594069   tls_auth_file = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=594256   server_network = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594341   server_netmask = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594450   server_bridge_ip = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594521   server_bridge_netmask = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594585   server_bridge_pool_start = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594648   server_bridge_pool_end = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594703   ifconfig_pool_defined = DISABLED
Wed Mar 29 12:07:12 2017 us=594765   ifconfig_pool_start = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594827   ifconfig_pool_end = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594888   ifconfig_pool_netmask = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=594944   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=595000   ifconfig_pool_persist_refresh_freq = 600
Wed Mar 29 12:07:12 2017 us=595056   ifconfig_pool_linear = DISABLED
Wed Mar 29 12:07:12 2017 us=595111   n_bcast_buf = 256
Wed Mar 29 12:07:12 2017 us=595167   tcp_queue_limit = 64
Wed Mar 29 12:07:12 2017 us=595223   real_hash_size = 256
Wed Mar 29 12:07:12 2017 us=595278   virtual_hash_size = 256
Wed Mar 29 12:07:12 2017 us=595334   client_connect_script = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=595398   learn_address_script = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=595456   client_disconnect_script = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=595511   client_config_dir = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=595566   ccd_exclusive = DISABLED
Wed Mar 29 12:07:12 2017 us=595624   tmp_dir = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=595680   push_ifconfig_defined = DISABLED
Wed Mar 29 12:07:12 2017 us=595761   push_ifconfig_local = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=595830   push_ifconfig_remote_netmask = 0.0.0.0
Wed Mar 29 12:07:12 2017 us=595887   enable_c2c = DISABLED
Wed Mar 29 12:07:12 2017 us=595942   duplicate_cn = DISABLED
Wed Mar 29 12:07:12 2017 us=595998   cf_max = 0
Wed Mar 29 12:07:12 2017 us=596054   cf_per = 0
Wed Mar 29 12:07:12 2017 us=596110   max_clients = 1024
Wed Mar 29 12:07:12 2017 us=596167   max_routes_per_client = 256
Wed Mar 29 12:07:12 2017 us=596222   client_cert_not_required = DISABLED
Wed Mar 29 12:07:12 2017 us=596278   username_as_common_name = DISABLED
Wed Mar 29 12:07:12 2017 us=596343   auth_user_pass_verify_script = '[UNDEF]'
Wed Mar 29 12:07:12 2017 us=596402   auth_user_pass_verify_script_via_file = DISABLED
Wed Mar 29 12:07:12 2017 us=596459   client = ENABLED
Wed Mar 29 12:07:12 2017 us=596514   pull = ENABLED
Wed Mar 29 12:07:12 2017 us=596571   auth_user_pass_file = 'auth.txt'
Wed Mar 29 12:07:12 2017 us=596651 OpenVPN 2.0.5 arm-none-linux-gnueabi [SSL] [LZO] [EPOLL] built on Aug 19 2014
Wed Mar 29 12:07:12 2017 us=599069 WARNING: file 'auth.txt' is group or others accessible
Wed Mar 29 12:07:12 2017 us=600051 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Mar 29 12:07:12 2017 us=600162 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Mar 29 12:07:12 2017 us=624951 WARNING: file 'client.key' is group or others accessible
Wed Mar 29 12:07:12 2017 us=629499 LZO compression initialized
Wed Mar 29 12:07:12 2017 us=630195 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Mar 29 12:07:12 2017 us=709429 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 29 12:07:12 2017 us=709813 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Mar 29 12:07:12 2017 us=709903 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Mar 29 12:07:12 2017 us=710078 Local Options hash (VER=V4): '69109d17'
Wed Mar 29 12:07:12 2017 us=710184 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Mar 29 12:07:12 2017 us=710326 Attempting to establish TCP connection with [server ip]:1194
Wed Mar 29 12:07:12 2017 us=712077 TCP connection established with [server ip]:1194
Wed Mar 29 12:07:12 2017 us=712373 Socket Buffers: R=[87380->131072] S=[20320->131072]
Wed Mar 29 12:07:12 2017 us=712502 TCPv4_CLIENT link local: [undef]
Wed Mar 29 12:07:12 2017 us=712573 TCPv4_CLIENT link remote: [server ip]:1194
WRWed Mar 29 12:07:12 2017 us=722179 TLS: Initial packet from [server ip]:1194, sid=2c385eca b107fa1e
WWWWRRRWRRRWWRWRWRRWWRWRWRRWWRWRWRRWWRWRWRRWWRWRWRRWWRWRWed Mar 29 12:07:12 2017 us=890532 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/name=jthf83ndas/emailAddress=me@myhost.mydomain
Wed Mar 29 12:07:12 2017 us=894219 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=js-server/name=js-server/emailAddress=me@myhost.mydomain
WRRWWRRWWRRWWRRWWRRWWWWWRWRRRWWWRWRWRRWWRWRWRRWWRWRWRRWWRWRWRRWWRWRWRRWWRWRWRWRWRRRRRRRWWRWRWRRWWRWRWRRWWRWRWRRWWWWWRRRRRRWed Mar 29 12:07:14 2017 us=234714 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Mar 29 12:07:14 2017 us=234938 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Mar 29 12:07:14 2017 us=235273 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Mar 29 12:07:14 2017 us=235363 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WWWed Mar 29 12:07:14 2017 us=235930 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Mar 29 12:07:14 2017 us=236123 [js-server] Peer Connection Initiated with [server ip]:1194
Wed Mar 29 12:07:15 2017 us=358796 SENT CONTROL [js-server]: 'PUSH_REQUEST' (status=1)
WRRRRWed Mar 29 12:07:15 2017 us=393713 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 172.16.11.1,route 172.16.11.0 255.255.255.0,route-gateway 172.16.40.1,topology subnet,ping 10,ping-restart 120,ifconfig 172.16.40.2 255.255.255.0'
Wed Mar 29 12:07:15 2017 us=394158 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: topology (2.0.5)
Wed Mar 29 12:07:15 2017 us=394308 OPTIONS IMPORT: timers and/or timeouts modified
Wed Mar 29 12:07:15 2017 us=394365 OPTIONS IMPORT: --ifconfig/up options modified
Wed Mar 29 12:07:15 2017 us=394471 OPTIONS IMPORT: route options modified
Wed Mar 29 12:07:15 2017 us=394529 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Mar 29 12:07:15 2017 us=394691 WARNING: Since you are using --dev tun, the second argument to --ifconfig must be an IP address.  You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Wed Mar 29 12:07:15 2017 us=397643 TUN/TAP device tun0 opened
Wed Mar 29 12:07:15 2017 us=397914 TUN/TAP TX queue length set to 100
Wed Mar 29 12:07:15 2017 us=398076 /sbin/ifconfig tun0 172.16.40.2 pointopoint 255.255.255.0 mtu 1500
ifconfig: SIOCSIFDSTADDR: Invalid argument
Wed Mar 29 12:07:15 2017 us=410632 Linux ifconfig failed: shell command exited with error status: 1
Wed Mar 29 12:07:15 2017 us=410833 Exiting

I'll try to search about warnings and errors in internet, but i'll be grateful for any help.

Regards,
Nufay.

TinCanTech

nufay wroteOpenVPN 2.0.5 arm-none-linux-gnueabi [SSL] [LZO] [EPOLL] built on Aug 19 2014

nufay wroteOptions error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: topology (2.0.5)

Your client version is too old to use --topology subnet .. so you will have to use --topology net30

nufay

TinCanTech wrote
nufay wroteOpenVPN 2.0.5 arm-none-linux-gnueabi [SSL] [LZO] [EPOLL] built on Aug 19 2014
nufay wroteOptions error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: topology (2.0.5)
Your client version is too old to use --topology subnet .. so you will have to use --topology net30

Is it a server or client option?

UPD:
It's a server option, stupid question...
Thank you, all works fine.