Thanks TinCanTech!
Still connecting but no access to my devices, like NAS (10.0.0.10) or computer (10.0.0.12)
I followed your "HOWTO: Expanding the scope of the VPN to include additional machines" link.
My config :
Server side:
push "route 10.0.0.0 255.255.255.0"
server 10.10.0.0 255.255.255.0
dev tun0
keepalive 10 120
Client side:
client
dev tun
proto udp
remote 162.253.128.26 2255
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
cipher AES-128-CBC
comp-lzo
auth-nocache
verb 3
My log:
Fri Aug 18 15:39:05 2017 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jul 14 2017
Fri Aug 18 15:39:05 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Aug 18 15:39:05 2017 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Fri Aug 18 15:39:05 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Fri Aug 18 15:39:05 2017 Need hold release from management interface, waiting...
Fri Aug 18 15:39:05 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Fri Aug 18 15:39:05 2017 MANAGEMENT: CMD 'state on'
Fri Aug 18 15:39:05 2017 MANAGEMENT: CMD 'log all on'
Fri Aug 18 15:39:05 2017 MANAGEMENT: CMD 'echo all on'
Fri Aug 18 15:39:05 2017 MANAGEMENT: CMD 'hold off'
Fri Aug 18 15:39:05 2017 MANAGEMENT: CMD 'hold release'
Fri Aug 18 15:39:05 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]162.253.128.26:2255
Fri Aug 18 15:39:05 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Aug 18 15:39:05 2017 UDP link local: (not bound)
Fri Aug 18 15:39:05 2017 UDP link remote: [AF_INET]162.253.128.26:2255
Fri Aug 18 15:39:05 2017 MANAGEMENT: >STATE:1503085145,WAIT,,,,,,
Fri Aug 18 15:39:05 2017 MANAGEMENT: >STATE:1503085145,AUTH,,,,,,
Fri Aug 18 15:39:05 2017 TLS: Initial packet from [AF_INET]162.253.128.26:2255, sid=7dda5123 a95e7ef8
Fri Aug 18 15:39:06 2017 VERIFY OK: depth=1, C=CA, ST=Quebec, L=Quebec, O=Homeworld, OU=changeme, CN=client, name=client, emailAddress=
bla@outlook.com
Fri Aug 18 15:39:06 2017 VERIFY KU OK
Fri Aug 18 15:39:06 2017 Validating certificate extended key usage
Fri Aug 18 15:39:06 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Aug 18 15:39:06 2017 VERIFY EKU OK
Fri Aug 18 15:39:06 2017 VERIFY OK: depth=0, C=CA, ST=Quebec, L=Quebec, O=Homeworld, OU=changeme, CN=server, name=server, emailAddress=
bla@outlook.com
Fri Aug 18 15:39:06 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Fri Aug 18 15:39:06 2017 [server] Peer Connection Initiated with [AF_INET]162.253.128.26:2255
Fri Aug 18 15:39:07 2017 MANAGEMENT: >STATE:1503085147,GET_CONFIG,,,,,,
Fri Aug 18 15:39:07 2017 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Aug 18 15:39:07 2017 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,route-gateway 10.10.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.10.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Fri Aug 18 15:39:07 2017 OPTIONS IMPORT: timers and/or timeouts modified
Fri Aug 18 15:39:07 2017 OPTIONS IMPORT: --ifconfig/up options modified
Fri Aug 18 15:39:07 2017 OPTIONS IMPORT: route options modified
Fri Aug 18 15:39:07 2017 OPTIONS IMPORT: route-related options modified
Fri Aug 18 15:39:07 2017 OPTIONS IMPORT: peer-id set
Fri Aug 18 15:39:07 2017 OPTIONS IMPORT: adjusting link_mtu to 1625
Fri Aug 18 15:39:07 2017 OPTIONS IMPORT: data channel crypto options modified
Fri Aug 18 15:39:07 2017 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Aug 18 15:39:07 2017 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Aug 18 15:39:07 2017 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Aug 18 15:39:07 2017 interactive service msg_channel=0
Fri Aug 18 15:39:07 2017 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=7 HWADDR=00:23:24:5b:f1:cb
Fri Aug 18 15:39:07 2017 open_tun
Fri Aug 18 15:39:07 2017 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{EFCDD0A3-9E18-42E9-B442-2F8E63FEC0CF}.tap
Fri Aug 18 15:39:07 2017 TAP-Windows Driver Version 9.21
Fri Aug 18 15:39:07 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 10.10.0.0/10.10.0.2/255.255.255.0 [SUCCEEDED]
Fri Aug 18 15:39:07 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.0.2/255.255.255.0 on interface {EFCDD0A3-9E18-42E9-B442-2F8E63FEC0CF} [DHCP-serv: 10.10.0.254, lease-time: 31536000]
Fri Aug 18 15:39:07 2017 Successful ARP Flush on interface [36] {EFCDD0A3-9E18-42E9-B442-2F8E63FEC0CF}
Fri Aug 18 15:39:07 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Aug 18 15:39:07 2017 MANAGEMENT: >STATE:1503085147,ASSIGN_IP,,10.10.0.2,,,,
Fri Aug 18 15:39:12 2017 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Fri Aug 18 15:39:12 2017 MANAGEMENT: >STATE:1503085152,ADD_ROUTES,,,,,,
Fri Aug 18 15:39:12 2017 C:\WINDOWS\system32\route.exe ADD 10.0.0.0 MASK 255.255.255.0 10.10.0.1
Fri Aug 18 15:39:12 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Fri Aug 18 15:39:12 2017 Route addition via IPAPI succeeded [adaptive]
Fri Aug 18 15:39:12 2017 Initialization Sequence Completed
Fri Aug 18 15:39:12 2017 MANAGEMENT: >STATE:1503085152,CONNECTED,SUCCESS,10.10.0.2,162.253.128.26,2255,,
