*
Server*
Operating system:
# uname -a
Linux my_server 4.9.0-2-amd64 #1 SMP Debian 4.9.13-1 (2017-02-27) x86_64 GNU/Linux
Network setup:
# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether ad:dr:es:ss brd ff:ff:ff:ff:ff:ff
inet ip.ad.dr.ess/23 brd ipa.ddr.ess.255 scope global ens3
valid_lft forever preferred_lft forever
inet6 2001:ip:addr:ess:00:00:00:00/64 scope global mngtmpaddr dynamic
valid_lft 2591813sec preferred_lft 604613sec
inet6 fe80::5400:ff:0000:0000/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether add:re:ss: brd ff:ff:ff:ff:ff:ff
inet 10.99.0.10/16 brd 10.99.255.255 scope global ens7
valid_lft forever preferred_lft forever
inet6 fe80::5800:ff:fe58:c42b/64 scope link
valid_lft forever preferred_lft forever
29: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1470 qdisc pfifo_fast state UNKNOWN group default qlen 100
link/none
inet 10.8.0.1/24 brd 10.8.0.255 scope global tun0
valid_lft forever preferred_lft forever
inet6 2001:ip:addr:ess::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::481f:8358:8b9b:82f/64 scope link flags 800
valid_lft forever preferred_lft forever
tcp-nodelay
tcp-queue-limit 256
dev tun
ca ca.crt
cert certificate.crt
key key.key
dh dh4096.pem
topology subnet
push "topology subnet"
mode server
ifconfig 10.8.0.1 255.255.255.0
ifconfig-pool 10.8.0.10 10.8.0.99 255.255.255.0
ifconfig-ipv6 2001:xxxx:xxxx:xxx::1 2001:xxxx:xxxx:xxx::2
push "route-gateway 10.8.0.1"
ifconfig-pool-persist ipp.txt
client-config-dir ccd
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
tls-auth ta.key 0 # This file is secret
tls-server
remote-cert-eku "TLS Web Client Authentication"
cipher AES-256-CBC
auth SHA512
max-clients 6
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
opt-verify
sndbuf 0
rcvbuf 0
tun-mtu 1470
Server Log
Apr 8 20:09:53 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:56872 Connection reset, restarting [0]
Apr 8 20:09:53 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:56872 SIGUSR1[soft,connection-reset] received, client-instance restarting
Apr 8 20:09:53 vpn ovpn-vpn_server[27037]: TCP/UDP: Closing socket
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: MULTI: multi_create_instance called
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: Re-using SSL/TLS context
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1470)
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: Control Channel MTU parms [ L:1593 D:1138 EF:112 EB:0 ET:0 EL:3 ]
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: Data Channel MTU parms [ L:1593 D:1450 EF:123 EB:401 ET:0 EL:3 ]
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1470,proto TCPv4_SERVER,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1470,proto TCPv4_CLIENT,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: TCP connection established with [AF_INET]ip.ad.dr.ess:57012
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: Socket flags: TCP_NODELAY=1 succeeded
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: TCP_SERVER link local: (not bound)
Apr 8 20:10:05 vpn ovpn-vpn_server[27037]: TCP_SERVER link remote: [AF_INET]ip.ad.dr.ess:57012
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 TLS: Initial packet from [AF_INET]ip.ad.dr.ess:57012, sid=80114816 1cf6e296
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 VERIFY OK: depth=1, C=US, ST=MI, O=Business LLC, OU=VPN, CN=Business LLC CA, name=vpn, emailAddress=vpn@webaddress.com
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 Validating certificate extended key usage
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 VERIFY EKU OK
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 VERIFY OK: depth=0, C=US, ST=MI, O=Business LLC, OU=VPN, CN=my_client, name=vpn, emailAddress=vpn@webaddress.com
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_VER=2.4.0
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_PLAT=linux
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_PROTO=2
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_NCP=2
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_LZ4=1
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_LZ4v2=1
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_LZO=1
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_COMP_STUB=1
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_COMP_STUBv2=1
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 peer info: IV_TCPNL=1
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: ip.ad.dr.ess:57012 [my_client] Peer Connection Initiated with [AF_INET]ip.ad.dr.ess:57012
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 OPTIONS IMPORT: reading client specific options from: ccd/my_client
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 MULTI_sva: push_ifconfig_ipv6 2001:0000:0000:000::10x/64
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 MULTI: Learn: 10.8.0.10x -> my_client/ip.ad.dr.ess:57012
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 MULTI: primary virtual IP for my_client/ip.ad.dr.ess:57012: 10.8.0.10x
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 MULTI: Learn: 2001:0000:0000:000::10x -> my_client/ip.ad.dr.ess:57012
Apr 8 20:10:06 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 MULTI: primary virtual IPv6 for my_client/ip.ad.dr.ess:57012: 2001:0000:0000:000::10x
Apr 8 20:10:07 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 PUSH: Received control message: 'PUSH_REQUEST'
Apr 8 20:10:07 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 SENT CONTROL [my_client]: 'PUSH_REPLY,topology subnet,route-gateway 10.8.0.1,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig-ipv6 2001:0000:0000:000::10x/64 2001:0000:0000:000::1,ifconfig 10.8.0.10x 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Apr 8 20:10:07 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 Data Channel MTU parms [ L:1521 D:1450 EF:51 EB:401 ET:0 EL:3 ]
Apr 8 20:10:07 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Apr 8 20:10:07 vpn ovpn-vpn_server[27037]: my_client/ip.ad.dr.ess:57012 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
*Client*
Operating system:
# uname -a
Linux my_client 4.9.0-2-amd64 #1 SMP Debian 4.9.18-1 (2017-03-30) x86_64 GNU/Linux
Network setup:
# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp0s31f6: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
link/ether add.res.s.s brd ff:ff:ff:ff:ff:ff
3: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether ad:dr:es:s brd ff:ff:ff:ff:ff:ff
inet rou.ter.i.p/24 brd 194.169.1.255 scope global dynamic wlp2s0
valid_lft 52561sec preferred_lft 52561sec
inet6 clie:ntpu:blic:ip6:add:re:ss/64 scope global noprefixroute dynamic
valid_lft 595sec preferred_lft 595sec
inet6 fe80::a283:3285:386f:8af2/64 scope link
valid_lft forever preferred_lft forever
22: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1470 qdisc pfifo_fast state UNKNOWN group default qlen 100
link/none
inet 10.8.0.10x/24 brd 10.8.0.255 scope global tun0
valid_lft forever preferred_lft forever
inet6 publ:icip:addr:ess::10x peer publ:icip:addr:ess::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::97de:81f7:e313:642a/64 scope link flags 800
valid_lft forever preferred_lft forever
Client config:
client
dev tun
proto tcp
remote vpn.server.com 443
block-outside-dns
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
auth SHA512
tls-client
remote-cert-eku "TLS Web Server Authentication"
verb 4
sndbuf 0
rcvbuf 0
tun-mtu 1470
Client log:
Apr 8 20:09:59 my_client NetworkManager[719]: <info> [1491696599.3005] audit: op="connection-activate" uuid="ec8c177a-d916-4ec1-90d6-e7607dcfee01" name="vpn_client" pid=1892 uid=1001 result="success"
Apr 8 20:09:59 my_client NetworkManager[719]: <info> [1491696599.3044] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",0]: Started the VPN service, PID 21488
Apr 8 20:09:59 my_client NetworkManager[719]: <info> [1491696599.3096] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",0]: Saw the service appear; activating connection
Apr 8 20:09:59 my_client NetworkManager[719]: <info> [1491696599.3178] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",0]: VPN plugin: state changed: starting (3)
Apr 8 20:09:59 my_client NetworkManager[719]: <info> [1491696599.3179] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",0]: VPN connection: (ConnectInteractive) reply received
Apr 8 20:09:59 my_client nm-openvpn[21491]: OpenVPN 2.4.0 [git:master/2ff7b31604107f4e+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 2 2017
Apr 8 20:09:59 my_client nm-openvpn[21491]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.08
Apr 8 20:09:59 my_client nm-openvpn[21491]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Apr 8 20:09:59 my_client nm-openvpn[21491]: WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1470)
Apr 8 20:09:59 my_client nm-openvpn[21491]: TCP/UDP: Preserving recently used remote address: [AF_INET6]2001:0000:0000:000:gate:way:addr:443
Apr 8 20:09:59 my_client nm-openvpn[21491]: Attempting to establish TCP connection with [AF_INET6]2001:0000:0000:000:gate:way:addr:443 [nonblock]
Apr 8 20:10:00 my_client nm-openvpn[21491]: TCP: connect to [AF_INET6]2001:0000:0000:000:gate:way:addr:443 failed: Connection refused
Apr 8 20:10:00 my_client nm-openvpn[21491]: NOTE: chroot will be delayed because of --client, --pull, or --up-delay
Apr 8 20:10:00 my_client nm-openvpn[21491]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Apr 8 20:10:00 my_client nm-openvpn[21491]: SIGUSR1[connection failed(soft),init_instance] received, process restarting
Apr 8 20:10:05 my_client nm-openvpn[21491]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Apr 8 20:10:05 my_client nm-openvpn[21491]: WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1470)
Apr 8 20:10:05 my_client nm-openvpn[21491]: TCP/UDP: Preserving recently used remote address: [AF_INET]ip.add.res.s:443
Apr 8 20:10:05 my_client nm-openvpn[21491]: Attempting to establish TCP connection with [AF_INET]ip.add.res.s:443 [nonblock]
Apr 8 20:10:06 my_client nm-openvpn[21491]: TCP connection established with [AF_INET]ip.add.res.s:443
Apr 8 20:10:06 my_client nm-openvpn[21491]: TCP_CLIENT link local: (not bound)
Apr 8 20:10:06 my_client nm-openvpn[21491]: TCP_CLIENT link remote: [AF_INET]ip.add.res.s:443
Apr 8 20:10:06 my_client nm-openvpn[21491]: [vpn_server] Peer Connection Initiated with [AF_INET]ip.add.res.s:443
Apr 8 20:10:07 my_client nm-openvpn[21491]: TUN/TAP device tun0 opened
Apr 8 20:10:07 my_client nm-openvpn[21491]: /usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper --debug 0 21488 --bus-name org.freedesktop.NetworkManager.openvpn.Connection_42 --tun -- tun0 1470 1524 10.8.0.10x 255.255.255.0 init
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.7998] manager: (tun0): new Tun device (/org/freedesktop/NetworkManager/Devices/23)
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8052] devices added (path: /sys/devices/virtual/net/tun0, iface: tun0)
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8055] device added (path: /sys/devices/virtual/net/tun0, iface: tun0): no ifupdown configuration found.
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8063] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",0]: VPN connection: (IP Config Get) reply received.
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8067] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: VPN connection: (IP4 Config Get) reply received
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8104] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: VPN connection: (IP6 Config Get) reply received
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8108] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: VPN Gateway: ip.add.res.s
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Tunnel Device: "tun0"
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: IPv4 configuration:
Apr 8 20:10:07 my_client nm-openvpn[21491]: chroot to '/var/lib/openvpn/chroot' and cd to '/' succeeded
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal Gateway: 10.8.0.1
Apr 8 20:10:07 my_client nm-openvpn[21491]: GID set to nm-openvpn
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal Address: 10.8.0.10x
Apr 8 20:10:07 my_client nm-openvpn[21491]: UID set to nm-openvpn
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal Prefix: 24
Apr 8 20:10:07 my_client nm-openvpn[21491]: Initialization Sequence Completed
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal Point-to-Point Address: 10.8.0.10x
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Maximum Segment Size (MSS): 0
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Forbid Default Route: no
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal DNS: 208.67.222.222
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8109] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal DNS: 208.67.220.220
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: DNS Domain: '(none)'
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: IPv6 configuration:
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal Address: 2001:0000:0000:000::10x
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal Prefix: 64
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Internal Point-to-Point Address: 2001:0000:0000:000::1
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Maximum Segment Size (MSS): 0
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: Forbid Default Route: no
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8110] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: Data: DNS Domain: '(none)'
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8111] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: VPN plugin: state changed: started (4)
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8159] vpn-connection[0x55f468ba4880,ec8c177a-d916-4ec1-90d6-e7607dcfee01,"vpn_client",23:(tun0)]: VPN connection: (IP Config Get) complete
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8166] device (tun0): state change: unmanaged -> unavailable (reason 'connection-assumed') [10 20 41]
Apr 8 20:10:07 my_client dbus[702]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service'
Apr 8 20:10:07 my_client systemd[1]: Starting Network Manager Script Dispatcher Service...
Apr 8 20:10:07 my_client dbus[702]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher'
Apr 8 20:10:07 my_client systemd[1]: Started Network Manager Script Dispatcher Service.
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8319] keyfile: add connection in-memory (ea27f540-b865-48b5-949d-223daea0224e,"tun0")
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8323] device (tun0): state change: unavailable -> disconnected (reason 'connection-assumed') [20 30 41]
Apr 8 20:10:07 my_client nm-dispatcher: req:1 'vpn-up' [tun0]: new request (1 scripts)
Apr 8 20:10:07 my_client nm-dispatcher: req:1 'vpn-up' [tun0]: start running ordered scripts...
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8333] device (tun0): Activation: starting connection 'tun0' (ea27f540-b865-48b5-949d-223daea0224e)
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8605] device (tun0): state change: disconnected -> prepare (reason 'none') [30 40 0]
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8609] device (tun0): state change: prepare -> config (reason 'none') [40 50 0]
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8610] device (tun0): state change: config -> ip-config (reason 'none') [50 70 0]
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8615] device (tun0): state change: ip-config -> ip-check (reason 'none') [70 80 0]
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8623] device (tun0): state change: ip-check -> secondaries (reason 'none') [80 90 0]
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8626] device (tun0): state change: secondaries -> activated (reason 'none') [90 100 0]
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8659] policy: set 'tun0' (tun0) as default for IPv4 routing and DNS
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8660] policy: set 'tun0' (tun0) as default for IPv6 routing and DNS
Apr 8 20:10:07 my_client NetworkManager[719]: <info> [1491696607.8662] device (tun0): Activation: successful, device activated.
Apr 8 20:10:07 my_client nm-dispatcher: req:2 'up' [tun0]: new request (1 scripts)
Note: I have assigned the same ipv6 address prefix for the tun and eth0 interface. So, my server's public ip address on eth0 begins with 2001:0000:0000:000:: and each of my clients tun ipv6 addresses begin with the same prefix.
You are sure about this ?
When I run iptraf-ng on the server, I can see the client's icmp echo requests go out, and Google's icmp replies come back in. The echo requests/replies are in ipv6 notation.
Thanks so much!
