net.admin
Hi all,
This is a proof of concept test using fixed ip's and a static key. It's point to point only using udp across the internet. I control both client and server machines (both Win7 64bit), as well as the routers between both end points. No VM's are in use. No software firewall's are in place.
I am using non standard ports and (in this case) 10.8.30.1 and .2 for server and client respectfully.
With apologies I'm posting almost full logs with privacy edits only.
With this exact configuration I periodically receive replay warnings and/or Connection reset by peer (WSAECONNRESET) (code=10054). I appreciate the prior could be caused by udp and a virtual box, but I'm not using one for this test. I also (believe) the connection reset is caused by a firewall - so I've made sure there are non in place here. I don't understand why there are ping-restarts though... I'm guessing I've screwed up, but I don't see where.
The only thing I can think of is my non-standard porting ot IP's are causing issues. I'm honestly just not sure.
In order I'm supplying:
Server, Client configs, then server, client logs. Again, my apologies for the lengthy logs, but I didn't want miss anything that might be relevant.
port 11154
proto udp
dev tun
ifconfig 10.8.30.1 10.8.30.2
secret "C:\\Program Files\\OpenVPN\\config\\static.key"
cipher AES-256-CBC
auth-nocache
keepalive 5 30
; persist-key
persist-tun
status openvpn-status.log
verb 4
mute 5
explicit-exit-notify 1
dev tun
proto udp
remote xxx.xxx.xxx.xxx 11154
ifconfig 10.8.30.2 10.8.30.1
secret "C:\\Program Files\\OpenVPN\\config\\static.key"
auth-nocache
cipher AES-256-CBC
resolv-retry infinite
persist-tun
verb 4
server log:
Tue Oct 24 16:22:54 2017 us=229779 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Tue Oct 24 16:22:54 2017 us=231279 Current Parameter Settings:
Tue Oct 24 16:22:54 2017 us=231279 config = 'C:\Program Files\OpenVPN\config\server-xxx.ovpn'
Tue Oct 24 16:22:54 2017 us=231279 mode = 0
Tue Oct 24 16:22:54 2017 us=231279 show_ciphers = DISABLED
Tue Oct 24 16:22:54 2017 us=231279 show_digests = DISABLED
Tue Oct 24 16:22:54 2017 us=231279 NOTE: --mute triggered...
Tue Oct 24 16:22:54 2017 us=231279 286 variation(s) on previous 5 message(s) suppressed by --mute
Tue Oct 24 16:22:54 2017 us=231279 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Tue Oct 24 16:22:54 2017 us=231279 Windows version 6.1 (Windows 7) 64bit
Tue Oct 24 16:22:54 2017 us=231279 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Tue Oct 24 16:22:54 2017 us=231779 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:22:54 2017 us=231779 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:22:54 2017 us=231779 Incoming Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:22:54 2017 us=231779 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:22:54 2017 us=235780 interactive service msg_channel=0
Tue Oct 24 16:22:54 2017 us=235780 open_tun
Tue Oct 24 16:22:54 2017 us=236780 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{52A1289D-6653-4AC0-8173-81CADB9E070C}.tap
Tue Oct 24 16:22:54 2017 us=236780 TAP-Windows Driver Version 9.21
Tue Oct 24 16:22:54 2017 us=236780 TAP-Windows MTU=1500
Tue Oct 24 16:22:54 2017 us=241780 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.30.1/255.255.255.252 on interface {52A1289D-6653-4AC0-8173-81CADB9E070C} [DHCP-serv: 10.8.30.2, lease-time: 31536000]
Tue Oct 24 16:22:54 2017 us=241780 Successful ARP Flush on interface [17] {52A1289D-6653-4AC0-8173-81CADB9E070C}
Tue Oct 24 16:22:54 2017 us=247281 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Oct 24 16:22:54 2017 us=247281 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:396 ET:0 EL:3 ]
Tue Oct 24 16:22:54 2017 us=247281 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.2 10.8.30.1,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:22:54 2017 us=247281 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.1 10.8.30.2,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:22:54 2017 us=247281 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Tue Oct 24 16:22:54 2017 us=247281 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Oct 24 16:22:54 2017 us=247781 setsockopt(IPV6_V6ONLY=0)
Tue Oct 24 16:22:54 2017 us=247781 UDPv6 link local (bound): [AF_INET6][undef]:11154
Tue Oct 24 16:22:54 2017 us=247781 UDPv6 link remote: [AF_UNSPEC]
Tue Oct 24 16:23:24 2017 us=789159 Inactivity timeout (--ping-restart), restarting
Tue Oct 24 16:23:24 2017 us=789159 TCP/UDP: Closing socket
Tue Oct 24 16:23:24 2017 us=789159 SIGUSR1[soft,ping-restart] received, process restarting
Tue Oct 24 16:23:24 2017 us=789159 Restart pause, 5 second(s)
Tue Oct 24 16:23:29 2017 us=789294 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:23:29 2017 us=789294 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:23:29 2017 us=789294 Incoming Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:23:29 2017 us=789294 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:23:29 2017 us=789794 Preserving previous TUN/TAP instance: Local Area Connection 2
Tue Oct 24 16:23:29 2017 us=789794 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:396 ET:0 EL:3 ]
Tue Oct 24 16:23:29 2017 us=789794 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.2 10.8.30.1,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:23:29 2017 us=789794 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.1 10.8.30.2,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:23:29 2017 us=789794 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Tue Oct 24 16:23:29 2017 us=789794 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Oct 24 16:23:29 2017 us=789794 setsockopt(IPV6_V6ONLY=0)
Tue Oct 24 16:23:29 2017 us=789794 UDPv6 link local (bound): [AF_INET6][undef]:11154
Tue Oct 24 16:23:29 2017 us=789794 UDPv6 link remote: [AF_UNSPEC]
Tue Oct 24 16:23:31 2017 us=62456 Peer Connection Initiated with [AF_INET6]::ffff:60.241.224.65:39673
Tue Oct 24 16:23:31 2017 us=62456 Initialization Sequence Completed
Tue Oct 24 16:24:57 2017 us=459427 Inactivity timeout (--ping-restart), restarting
Tue Oct 24 16:24:57 2017 us=459427 TCP/UDP: Closing socket
Tue Oct 24 16:24:57 2017 us=459427 SIGUSR1[soft,ping-restart] received, process restarting
Tue Oct 24 16:24:57 2017 us=459427 Restart pause, 5 second(s)
Tue Oct 24 16:25:02 2017 us=459562 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:25:02 2017 us=459562 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:25:02 2017 us=459562 Incoming Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:25:02 2017 us=459562 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:25:02 2017 us=459562 Preserving previous TUN/TAP instance: Local Area Connection 2
Tue Oct 24 16:25:02 2017 us=460062 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:396 ET:0 EL:3 ]
Tue Oct 24 16:25:02 2017 us=460062 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.2 10.8.30.1,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:25:02 2017 us=460062 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.1 10.8.30.2,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:25:02 2017 us=460062 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Tue Oct 24 16:25:02 2017 us=460062 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Oct 24 16:25:02 2017 us=460062 setsockopt(IPV6_V6ONLY=0)
Tue Oct 24 16:25:02 2017 us=460062 UDPv6 link local (bound): [AF_INET6][undef]:11154
Tue Oct 24 16:25:02 2017 us=460062 UDPv6 link remote: [AF_UNSPEC]
Tue Oct 24 16:25:32 2017 us=46319 Inactivity timeout (--ping-restart), restarting
Tue Oct 24 16:25:32 2017 us=46319 TCP/UDP: Closing socket
Tue Oct 24 16:25:32 2017 us=46319 SIGUSR1[soft,ping-restart] received, process restarting
Tue Oct 24 16:25:32 2017 us=46319 Restart pause, 5 second
Client log:
Tue Oct 24 16:23:33 2017 us=789103 OpenVPN 2.4.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on May 11 2017
Tue Oct 24 16:23:33 2017 us=789103 Windows version 6.1 (Windows 7) 32bit
Tue Oct 24 16:23:33 2017 us=789103 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.10
Enter Management Password:
Tue Oct 24 16:23:33 2017 us=793986 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25347
Tue Oct 24 16:23:33 2017 us=794962 Need hold release from management interface, waiting...
Tue Oct 24 16:23:34 2017 us=99662 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25347
Tue Oct 24 16:23:34 2017 us=203181 MANAGEMENT: CMD 'state on'
Tue Oct 24 16:23:34 2017 us=204158 MANAGEMENT: CMD 'log all on'
Tue Oct 24 16:23:34 2017 us=592845 MANAGEMENT: CMD 'echo all on'
Tue Oct 24 16:23:34 2017 us=608470 MANAGEMENT: CMD 'hold off'
Tue Oct 24 16:23:34 2017 us=612377 MANAGEMENT: CMD 'hold release'
Tue Oct 24 16:23:34 2017 us=614330 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:23:34 2017 us=614330 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:23:34 2017 us=614330 Incoming Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Oct 24 16:23:34 2017 us=614330 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 24 16:23:34 2017 us=616283 interactive service msg_channel=0
Tue Oct 24 16:23:34 2017 us=616283 open_tun
Tue Oct 24 16:23:34 2017 us=621166 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{8E91DAA7-93B4-46EC-9AA8-64B74C82322D}.tap
Tue Oct 24 16:23:34 2017 us=621166 TAP-Windows Driver Version 9.21
Tue Oct 24 16:23:34 2017 us=621166 TAP-Windows MTU=1500
Tue Oct 24 16:23:34 2017 us=629955 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.30.2/255.255.255.252 on interface {8E91DAA7-93B4-46EC-9AA8-64B74C82322D} [DHCP-serv: 10.8.30.1, lease-time: 31536000]
Tue Oct 24 16:23:34 2017 us=656324 Successful ARP Flush on interface [18] {8E91DAA7-93B4-46EC-9AA8-64B74C82322D}
Tue Oct 24 16:23:34 2017 us=664136 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Oct 24 16:23:34 2017 us=664136 MANAGEMENT: >STATE:1508822614,ASSIGN_IP,,10.8.30.2,,,,
Tue Oct 24 16:23:34 2017 us=664136 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:396 ET:0 EL:3 ]
Tue Oct 24 16:23:34 2017 us=664136 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.1 10.8.30.2,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:23:34 2017 us=664136 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.30.2 10.8.30.1,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Tue Oct 24 16:23:34 2017 us=664136 TCP/UDP: Preserving recently used remote address: [AF_INET]xxipxx:11154
Tue Oct 24 16:23:34 2017 us=664136 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Oct 24 16:23:34 2017 us=664136 UDP link local (bound): [AF_INET][undef]:1194
Tue Oct 24 16:23:34 2017 us=664136 UDP link remote: [AF_INET]xxipxx:11154
Tue Oct 24 16:23:36 2017 us=340959 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Oct 24 16:23:44 2017 us=81490 Peer Connection Initiated with [AF_INET]xxipxx:11154
Tue Oct 24 16:23:49 2017 us=107074 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Tue Oct 24 16:23:49 2017 us=107074 Initialization Sequence Completed
Tue Oct 24 16:23:49 2017 us=107074 MANAGEMENT: >STATE:1508822629,CONNECTED,SUCCESS,10.8.30.2,xxipxx,11154,,
I am getting s connection *most times*, but sometimes it will continually try to connect unsuccessfully.
Many thanks in advance.
TinCanTech
net.admin wrote
It's point to point
No .. in fact, you are using --
topology net30 (the default)
See --
topology in
The Manual v24x
Note: Windows does not support a true point-to-point tunnel which is why net30 is the default.
Hint: You cannot use the ifconfig parameters you have chosen.
I would use the example config files, read the howto and set up the standard tunnel. As you are using 2.4 you can use all the new features, like: --tls-cipher and --ncp-ciphers .. 8-)
net.admin
Hi TCT,
I called it point to point because I have a single client and server interface - sorry, I was trying to explain the usage, but appreciate my terminology was incorrect.
I actually get that it's /30 by default, and I'm using Windows clients, which is why I used .1 & .2 in the 10.8.30.0 network (being the only usable ip's). I thought that actually was correct usage, instead of (for example) using 10.8.30.100 which is outside the usable clients for a /30. I wasn't aware I had to use 10.8.0.1 (or 10.1.0.1) and .2 exclusively..?
This was the example I started with:
# Sample OpenVPN configuration file for
# using a pre-shared static key.
dev tun
# Our remote peer
remote mypeer.mydomain
# 10.1.0.1 is our local VPN endpoint
# 10.1.0.2 is our remote VPN endpoint
ifconfig 10.1.0.1 10.1.0.2
# Our pre-shared static key
secret static.key
I expanded from there with the keepalive, auth-nocache and increased cipher just from reading the warnings and messages in the logs as I went along. The persist-tun was added to help keep the connection active and to reconnect if it dropped out.
I changed the ip (but stayed in a /30) and the port after I had it working with the default config.
I have read a little about tls-cipher, but didn't want to experiment further until I had a stable bases to do so - which is why I thought I had used a very simple setup to test with.
So, as you can see I'm quite confused as to what I've done wrong despite trying to actually solve my own problem. When you say I cannot use the ifconfig parameters I have chosen, are you referring to the ip endpoints I have used? If I switch back to 10.1.0.0 or 10.8.0.0 (/30) will that make my connections less prone to the issues I'm reporting?
Cheers for your help.
TinCanTech
What you are trying to do is "classic point-to-point" which Windows cannot do.
Therefore, you must adhere to --
topology net30 or the more user friendly --
topology subnet.
ifconfig parameters:
- NET30
- Server : ifconfig 10.8.0.1 10.8.0.2
- Client : ifconfig 10.8.0.6 10.8.0.5 (this is the recommended way though it looks backward)
Each VPN node (server or client) uses it's own NET30 subnet
eg. (S) 10.8.0.0/30 vs (C) 10.8.0.4/30
- SUBNET
- Server : ifconfig 10.8.0.1 255.255.255.0
- Client : ifconfig 10.8.0.2 255.255.255.0
Each VPN node (server or client) uses the same subnet (as specified by the netmask)
eg. (S) 10.8.0.1/24 vs (C) 10.8.0.2/24
Once again, I recommend you start with the example config files.
net.admin
Thanks TCT,
Yay windows... I didn't realise it couldn't do it.
I'll changed back to 10.8.0.1 and 2 to adhere to net30. I'll read up on topology subnet after I get it working properly.
Is there any issue with using port numbers as I have done?
Cheers
net.admin
TinCanTech wrote
ifconfig parameters:
- NET30
- Server : ifconfig 10.8.0.1 10.8.0.2
- Client : ifconfig 10.8.0.6 10.8.0.5 (this is the recommended way though it looks backward)
Each VPN node (server or client) uses it's own NET30 subnet
eg. (S) 10.8.0.0/30 vs (C) 10.8.0.4/30
Just to clarify; if I'm using 10.8.0.1 for the server and 10.8.0.2 for the client, the correct server config is ifconfig 10.8.0.1 10.8.0.2 and the client is the same except in the reverse order of 10.8.0.2 10.8.0.1 (showing local first). I just want to make sure I'm not supposed to be using ifconfig 10.8.0.1 10.8.0.2 on the server & ifconfig 10.8.0.6 10.8.0.5 on the client.
TinCanTech
Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.
net.admin
Okay. I've clearly misunderstood the syntax for ifconfig in a simple point to point tunnel. I thought it to be ifconfig 'local endpoint' 'remote endpoint' on the sever, with the reverse on the client.
TinCanTech
Quoth the Raven wrote--
topology mode
- Configure virtual addressing topology when running in --dev tun mode. This directive has no meaning in --dev tap mode, which always uses a subnet topology.
If you set this directive on the server, the --server and --server-bridge directives will automatically push your chosen topology setting to clients as well. This directive can also be manually pushed to clients. Like the --dev directive, this directive must always be compatible between client and server.
mode can be one of:
net30 -- Use a point-to-point topology, by allocating one /30 subnet per client. This is designed to allow point-to-point semantics when some or all of the connecting clients might be Windows systems. This is the default on OpenVPN 2.0.
p2p -- Use a point-to-point topology where the remote endpoint of the client's tun interface always points to the local endpoint of the server's tun interface. This mode allocates a single IP address per connecting client. Only use when ** none ** of the connecting clients are Windows systems. This mode is functionally equivalent to the --ifconfig-pool-linear directive which is available in OpenVPN 2.0, is deprecated and will be removed in OpenVPN 2.5
subnet -- Use a subnet rather than a point-to-point topology by configuring the tun interface with a local IP address and subnet mask, similar to the topology used in --dev tap and ethernet bridging mode. This mode allocates a single IP address per connecting client and works on Windows as well. Only available when server and clients are OpenVPN 2.1 or higher, or OpenVPN 2.0.x which has been manually patched with the --topology directive code. When used on Windows, requires version 8.2 or higher of the TAP-Win32 driver. When used on *nix, requires that the tun driver supports an ifconfig(8) command which sets a subnet instead of a remote endpoint IP address.
This option exists in OpenVPN 2.1 or higher.
Note: Using --topology subnet changes the interpretation of the arguments of --ifconfig to mean "address netmask", no longer "local remote".
net.admin
Does that mean this howto is now outdated?
https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html
It's the example I started with, which included:
"Server configuration file
dev tun
ifconfig 10.8.0.1 10.8.0.2
secret static.key
Client configuration file
remote myremote.mydomain
dev tun
ifconfig 10.8.0.2 10.8.0.1
secret static.key"
TinCanTech
I never actually tried this in Windows .. but it does say it will work, so maybe I am wrong.
net.admin
No worries. It's 3:30am here and I'm stopping. I'll revisit tomorrow and try again.
Thanks for your help.
TinCanTech
I tried it and it works as per that howto.
net.admin
No worries. Thanks for confirmed I'm not going completely bonkers.
I've changed back to 10.8.0.1 & 0.2 using ifconfig exactly as per the above howto.
I also noted I was running two slightly different gui versions - which I've now corrected. The server side was running a slightly older build (1 build version older).
However I'm still having the same problem.
Log from client side:
Wed Oct 25 12:25:00 2017 us=467449 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Wed Oct 25 12:25:00 2017 us=467449 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Oct 25 12:25:00 2017 us=467449 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Wed Oct 25 12:25:00 2017 us=469449 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Wed Oct 25 12:25:00 2017 us=469449 Need hold release from management interface, waiting...
Wed Oct 25 12:25:00 2017 us=834679 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Wed Oct 25 12:25:00 2017 us=936049 MANAGEMENT: CMD 'state on'
Wed Oct 25 12:25:00 2017 us=936049 MANAGEMENT: CMD 'log all on'
Wed Oct 25 12:25:01 2017 us=136255 MANAGEMENT: CMD 'echo all on'
Wed Oct 25 12:25:01 2017 us=138255 MANAGEMENT: CMD 'hold off'
Wed Oct 25 12:25:01 2017 us=140257 MANAGEMENT: CMD 'hold release'
Wed Oct 25 12:25:01 2017 us=148257 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Oct 25 12:25:01 2017 us=149257 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:25:01 2017 us=150257 Incoming Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Oct 25 12:25:01 2017 us=150257 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:25:01 2017 us=150257 interactive service msg_channel=532
Wed Oct 25 12:25:01 2017 us=150257 open_tun
Wed Oct 25 12:25:01 2017 us=153257 TAP-WIN32 device [Ethernet] opened: \\.\Global\{1ACD38EA-C015-4712-A3D4-3C27FDA2B2D8}.tap
Wed Oct 25 12:25:01 2017 us=154257 TAP-Windows Driver Version 9.21
Wed Oct 25 12:25:01 2017 us=154257 TAP-Windows MTU=1500
Wed Oct 25 12:25:01 2017 us=158257 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {1ACD38EA-C015-4712-A3D4-3C27FDA2B2D8} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Wed Oct 25 12:25:01 2017 us=172258 Successful ARP Flush on interface [4] {1ACD38EA-C015-4712-A3D4-3C27FDA2B2D8}
Wed Oct 25 12:25:01 2017 us=189258 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Oct 25 12:25:01 2017 us=190259 MANAGEMENT: >STATE:1508894701,ASSIGN_IP,,10.8.0.2,,,,
Wed Oct 25 12:25:01 2017 us=190259 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:396 ET:0 EL:3 ]
Wed Oct 25 12:25:01 2017 us=190259 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Wed Oct 25 12:25:01 2017 us=190259 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Wed Oct 25 12:25:01 2017 us=190259 TCP/UDP: Preserving recently used remote address: [AF_INET]*ip*:15201
Wed Oct 25 12:25:01 2017 us=190259 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Oct 25 12:25:01 2017 us=190259 UDP link local (bound): [AF_INET][undef]:1194
Wed Oct 25 12:25:01 2017 us=190259 UDP link remote: [AF_INET]*ip*:15201
Wed Oct 25 12:27:01 2017 us=5292 NOTE: failed to obtain options consistency info from peer -- this could occur if the remote peer is running a version of OpenVPN before 1.5-beta8 or if there is a network connectivity problem, and will not necessarily prevent OpenVPN from running (0 bytes received from peer, 0 bytes authenticated data channel traffic) -- you can disable the options consistency check with --disable-occ.
On the server side:
Wed Oct 25 12:21:00 2017 us=930315 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Wed Oct 25 12:21:00 2017 us=933537 Current Parameter Settings:
Wed Oct 25 12:21:00 2017 us=933537 config = 'C:\Program Files\OpenVPN\config\server-xxx-201.ovpn'
Wed Oct 25 12:21:00 2017 us=933537 mode = 0
Wed Oct 25 12:21:00 2017 us=933537 show_ciphers = DISABLED
Wed Oct 25 12:21:00 2017 us=933537 show_digests = DISABLED
Wed Oct 25 12:21:00 2017 us=933537 NOTE: --mute triggered...
Wed Oct 25 12:21:00 2017 us=933537 286 variation(s) on previous 5 message(s) suppressed by --mute
Wed Oct 25 12:21:00 2017 us=934611 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Wed Oct 25 12:21:00 2017 us=934611 Windows version 6.1 (Windows 7) 64bit
Wed Oct 25 12:21:00 2017 us=934611 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Wed Oct 25 12:21:00 2017 us=948576 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Oct 25 12:21:00 2017 us=951799 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:21:00 2017 us=951799 Incoming Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Oct 25 12:21:00 2017 us=951799 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:21:00 2017 us=980802 interactive service msg_channel=0
Wed Oct 25 12:21:00 2017 us=980802 open_tun
Wed Oct 25 12:21:00 2017 us=984025 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{49B67DD7-4A71-444D-B24D-6589266472D9}.tap
Wed Oct 25 12:21:00 2017 us=984025 TAP-Windows Driver Version 9.21
Wed Oct 25 12:21:00 2017 us=984025 TAP-Windows MTU=1500
Wed Oct 25 12:21:00 2017 us=986173 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {49B67DD7-4A71-444D-B24D-6589266472D9} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Wed Oct 25 12:21:00 2017 us=986173 Successful ARP Flush on interface [16] {49B67DD7-4A71-444D-B24D-6589266472D9}
Wed Oct 25 12:21:00 2017 us=993692 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Oct 25 12:21:00 2017 us=994767 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:396 ET:0 EL:3 ]
Wed Oct 25 12:21:00 2017 us=994767 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Wed Oct 25 12:21:00 2017 us=994767 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Wed Oct 25 12:21:00 2017 us=994767 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Wed Oct 25 12:21:00 2017 us=994767 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Oct 25 12:21:00 2017 us=994767 setsockopt(IPV6_V6ONLY=0)
Wed Oct 25 12:21:00 2017 us=995841 UDPv6 link local (bound): [AF_INET6][undef]:15201
Wed Oct 25 12:21:00 2017 us=995841 UDPv6 link remote: [AF_UNSPEC]
Wed Oct 25 12:21:30 2017 us=714654 Inactivity timeout (--ping-restart), restarting
Wed Oct 25 12:21:30 2017 us=714654 TCP/UDP: Closing socket
Wed Oct 25 12:21:30 2017 us=714654 SIGUSR1[soft,ping-restart] received, process restarting
Wed Oct 25 12:21:30 2017 us=714654 Restart pause, 5 second(s)
Wed Oct 25 12:21:35 2017 us=284062 Outgoing Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Oct 25 12:21:35 2017 us=284062 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:21:35 2017 us=284062 Incoming Static Key Encryption: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Oct 25 12:21:35 2017 us=284062 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:21:35 2017 us=284062 Preserving previous TUN/TAP instance: Local Area Connection 2
Wed Oct 25 12:21:35 2017 us=284062 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:396 ET:0 EL:3 ]
Wed Oct 25 12:21:35 2017 us=284062 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Wed Oct 25 12:21:35 2017 us=284062 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher AES-256-CBC,auth SHA1,keysize 256,secret'
Wed Oct 25 12:21:35 2017 us=284062 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Wed Oct 25 12:21:35 2017 us=284062 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Oct 25 12:21:35 2017 us=284062 setsockopt(IPV6_V6ONLY=0)
Wed Oct 25 12:21:35 2017 us=284062 UDPv6 link local (bound): [AF_INET6][undef]:15201
Wed Oct 25 12:21:35 2017 us=284062 UDPv6 link remote: [AF_UNSPEC]
Wed Oct 25 12:22:05 2017 us=103913 Inactivity timeout (--ping-restart), restarting
Wed Oct 25 12:22:05 2017 us=103913 TCP/UDP: Closing socket
Wed Oct 25 12:22:05 2017 us=103913 SIGUSR1[soft,ping-restart] received, process restarting
Wed Oct 25 12:22:05 2017 us=103913 Restart pause, 5 second(s)
The *only* changes to the above client and server configs are: port number now 15201 for client and server. ifconfig ip end points now per above howto. Original error remains present.
Have confirmed no firewalls between sites are blocking port 15201 for udp (or tcp for that matter) and it is correctly routed to the server machine. Windows 7 firewalls (at both ends are turned off).
Unless I've seriously missed something, I 'think' I should be getting a connection. But I'm not and don't seem to understand why, what's wrong, of what I've missed.
Thank you for your help to date.
net.admin
I just removed the port line from the server config and the port number from the end of the client remote line. Ie: returning port for client and server to default of 1194. I opened 1194 on the server side router, and ported it directly to the server ip. restarted the router, server machine and calling client machine. Tried to reconnect with exactly the same result as posted above in the logs (except it was now trying to communicate on 1194).
I'll be honest and say i don't get it.
net.admin
I may have solved it. I put the port back to 15201 and changed the keepalive from 5 30 to 10 120. I have been connected (without delay or incident) for 15 minutes without a ping-restart process appearing in the logs, but more so I've not had trouble connecting or replay warnings or the original connection errors appearing in the logs. I'll monitor it over the next hour or so with differing traffic loads and see how it fairs. So far it's proving very promising. It doesn't make sense to me though, as the keepalive directive shouldn't (in my limited understanding of openvpn) affect or cause connection errors or replay warnings. But since nothing else has changed I'm at a loss to explain it further.
TinCanTech
I don't get any timeout and the tunnel has been up for nearly 2 hours. (No --keepalive required)
This is my setup:
Server config (W10 using openvpn_gui):
dev tun_test
ifconfig 10.8.0.1 10.8.0.2
secret stat-key.key
verb 4
Client config (WXP using openvpn_gui):
remote 10.10.101.110 # These machines are on the same LAN
dev tun_test
ifconfig 10.8.0.2 10.8.0.1
secret stat-key.key
verb 4
Server log:
Wed Oct 25 12:37:26 2017 us=247871 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Wed Oct 25 12:37:26 2017 us=248873 Current Parameter Settings:
Wed Oct 25 12:37:26 2017 us=248873 config = 'stat-key.ovpn'
Wed Oct 25 12:37:26 2017 us=248873 mode = 0
Wed Oct 25 12:37:26 2017 us=248873 show_ciphers = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 show_digests = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 show_engines = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 genkey = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 key_pass_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 show_tls_ciphers = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 connect_retry_max = 0
Wed Oct 25 12:37:26 2017 us=248873 Connection profiles [0]:
Wed Oct 25 12:37:26 2017 us=248873 proto = udp
Wed Oct 25 12:37:26 2017 us=248873 local = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 local_port = '1194'
Wed Oct 25 12:37:26 2017 us=248873 remote = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 remote_port = '1194'
Wed Oct 25 12:37:26 2017 us=248873 remote_float = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 bind_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 bind_local = ENABLED
Wed Oct 25 12:37:26 2017 us=248873 bind_ipv6_only = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 connect_retry_seconds = 5
Wed Oct 25 12:37:26 2017 us=248873 connect_timeout = 120
Wed Oct 25 12:37:26 2017 us=248873 socks_proxy_server = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 socks_proxy_port = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 tun_mtu = 1500
Wed Oct 25 12:37:26 2017 us=248873 tun_mtu_defined = ENABLED
Wed Oct 25 12:37:26 2017 us=248873 link_mtu = 1500
Wed Oct 25 12:37:26 2017 us=248873 link_mtu_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 tun_mtu_extra = 0
Wed Oct 25 12:37:26 2017 us=248873 tun_mtu_extra_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 mtu_discover_type = -1
Wed Oct 25 12:37:26 2017 us=248873 fragment = 0
Wed Oct 25 12:37:26 2017 us=248873 mssfix = 1450
Wed Oct 25 12:37:26 2017 us=248873 explicit_exit_notification = 0
Wed Oct 25 12:37:26 2017 us=248873 Connection profiles END
Wed Oct 25 12:37:26 2017 us=248873 remote_random = DISABLED
Wed Oct 25 12:37:26 2017 us=248873 ipchange = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 dev = 'tun_test'
Wed Oct 25 12:37:26 2017 us=248873 dev_type = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 dev_node = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 lladdr = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=248873 topology = 1
Wed Oct 25 12:37:26 2017 us=249873 ifconfig_local = '10.8.0.1'
Wed Oct 25 12:37:26 2017 us=249873 ifconfig_remote_netmask = '10.8.0.2'
Wed Oct 25 12:37:26 2017 us=249873 ifconfig_noexec = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 ifconfig_nowarn = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 ifconfig_ipv6_local = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 ifconfig_ipv6_netbits = 0
Wed Oct 25 12:37:26 2017 us=249873 ifconfig_ipv6_remote = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 shaper = 0
Wed Oct 25 12:37:26 2017 us=249873 mtu_test = 0
Wed Oct 25 12:37:26 2017 us=249873 mlock = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 keepalive_ping = 0
Wed Oct 25 12:37:26 2017 us=249873 keepalive_timeout = 0
Wed Oct 25 12:37:26 2017 us=249873 inactivity_timeout = 0
Wed Oct 25 12:37:26 2017 us=249873 ping_send_timeout = 0
Wed Oct 25 12:37:26 2017 us=249873 ping_rec_timeout = 0
Wed Oct 25 12:37:26 2017 us=249873 ping_rec_timeout_action = 0
Wed Oct 25 12:37:26 2017 us=249873 ping_timer_remote = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 remap_sigusr1 = 0
Wed Oct 25 12:37:26 2017 us=249873 persist_tun = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 persist_local_ip = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 persist_remote_ip = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 persist_key = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 passtos = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 resolve_retry_seconds = 1000000000
Wed Oct 25 12:37:26 2017 us=249873 resolve_in_advance = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 username = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 groupname = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 chroot_dir = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 cd_dir = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 writepid = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 up_script = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 down_script = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 down_pre = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 up_restart = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 up_delay = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 daemon = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 inetd = 0
Wed Oct 25 12:37:26 2017 us=249873 log = ENABLED
Wed Oct 25 12:37:26 2017 us=249873 suppress_timestamps = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 machine_readable_output = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 nice = 0
Wed Oct 25 12:37:26 2017 us=249873 verbosity = 4
Wed Oct 25 12:37:26 2017 us=249873 mute = 0
Wed Oct 25 12:37:26 2017 us=249873 gremlin = 0
Wed Oct 25 12:37:26 2017 us=249873 status_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 status_file_version = 1
Wed Oct 25 12:37:26 2017 us=249873 status_file_update_freq = 60
Wed Oct 25 12:37:26 2017 us=249873 occ = ENABLED
Wed Oct 25 12:37:26 2017 us=249873 rcvbuf = 0
Wed Oct 25 12:37:26 2017 us=249873 sndbuf = 0
Wed Oct 25 12:37:26 2017 us=249873 sockflags = 0
Wed Oct 25 12:37:26 2017 us=249873 fast_io = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 comp.alg = 0
Wed Oct 25 12:37:26 2017 us=249873 comp.flags = 0
Wed Oct 25 12:37:26 2017 us=249873 route_script = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 route_default_gateway = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 route_default_metric = 0
Wed Oct 25 12:37:26 2017 us=249873 route_noexec = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 route_delay = 5
Wed Oct 25 12:37:26 2017 us=249873 route_delay_window = 30
Wed Oct 25 12:37:26 2017 us=249873 route_delay_defined = ENABLED
Wed Oct 25 12:37:26 2017 us=249873 route_nopull = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 route_gateway_via_dhcp = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 allow_pull_fqdn = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 management_addr = '127.0.0.1'
Wed Oct 25 12:37:26 2017 us=249873 management_port = '25354'
Wed Oct 25 12:37:26 2017 us=249873 management_user_pass = 'stdin'
Wed Oct 25 12:37:26 2017 us=249873 management_log_history_cache = 250
Wed Oct 25 12:37:26 2017 us=249873 management_echo_buffer_size = 100
Wed Oct 25 12:37:26 2017 us=249873 management_write_peer_info_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 management_client_user = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 management_client_group = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=249873 management_flags = 6
Wed Oct 25 12:37:26 2017 us=249873 shared_secret_file = 'stat-key.key'
Wed Oct 25 12:37:26 2017 us=249873 key_direction = 0
Wed Oct 25 12:37:26 2017 us=249873 ciphername = 'BF-CBC'
Wed Oct 25 12:37:26 2017 us=249873 ncp_enabled = DISABLED
Wed Oct 25 12:37:26 2017 us=249873 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed Oct 25 12:37:26 2017 us=249873 authname = 'SHA1'
Wed Oct 25 12:37:26 2017 us=249873 prng_hash = 'SHA1'
Wed Oct 25 12:37:26 2017 us=249873 prng_nonce_secret_len = 16
Wed Oct 25 12:37:26 2017 us=249873 keysize = 0
Wed Oct 25 12:37:26 2017 us=250876 engine = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 replay = ENABLED
Wed Oct 25 12:37:26 2017 us=250876 mute_replay_warnings = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 replay_window = 64
Wed Oct 25 12:37:26 2017 us=250876 replay_time = 15
Wed Oct 25 12:37:26 2017 us=250876 packet_id_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 use_iv = ENABLED
Wed Oct 25 12:37:26 2017 us=250876 test_crypto = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 tls_server = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 tls_client = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 key_method = 2
Wed Oct 25 12:37:26 2017 us=250876 ca_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 ca_path = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 dh_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 cert_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 extra_certs_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 priv_key_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 pkcs12_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 cryptoapi_cert = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 cipher_list = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 tls_verify = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 tls_export_cert = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 verify_x509_type = 0
Wed Oct 25 12:37:26 2017 us=250876 verify_x509_name = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 crl_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 ns_cert_type = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_ku[i] = 0
Wed Oct 25 12:37:26 2017 us=250876 remote_cert_eku = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 ssl_flags = 0
Wed Oct 25 12:37:26 2017 us=250876 tls_timeout = 2
Wed Oct 25 12:37:26 2017 us=250876 renegotiate_bytes = -1
Wed Oct 25 12:37:26 2017 us=250876 renegotiate_packets = 0
Wed Oct 25 12:37:26 2017 us=250876 renegotiate_seconds = 3600
Wed Oct 25 12:37:26 2017 us=250876 handshake_window = 60
Wed Oct 25 12:37:26 2017 us=250876 transition_window = 3600
Wed Oct 25 12:37:26 2017 us=250876 single_session = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 push_peer_info = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 tls_exit = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 tls_auth_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 tls_crypt_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=250876 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_private_mode = 00000000
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_cert_private = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_pin_cache_period = -1
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_id = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=251877 pkcs11_id_management = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 server_network = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 server_netmask = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 server_network_ipv6 = ::
Wed Oct 25 12:37:26 2017 us=251877 server_netbits_ipv6 = 0
Wed Oct 25 12:37:26 2017 us=251877 server_bridge_ip = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 server_bridge_netmask = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 server_bridge_pool_start = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 server_bridge_pool_end = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_pool_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_pool_start = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_pool_end = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_pool_netmask = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_pool_persist_refresh_freq = 600
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_ipv6_pool_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_ipv6_pool_base = ::
Wed Oct 25 12:37:26 2017 us=251877 ifconfig_ipv6_pool_netbits = 0
Wed Oct 25 12:37:26 2017 us=251877 n_bcast_buf = 256
Wed Oct 25 12:37:26 2017 us=251877 tcp_queue_limit = 64
Wed Oct 25 12:37:26 2017 us=251877 real_hash_size = 256
Wed Oct 25 12:37:26 2017 us=251877 virtual_hash_size = 256
Wed Oct 25 12:37:26 2017 us=251877 client_connect_script = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=251877 learn_address_script = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=251877 client_disconnect_script = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=251877 client_config_dir = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=251877 ccd_exclusive = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 tmp_dir = 'C:\Users\root\AppData\Local\Temp\'
Wed Oct 25 12:37:26 2017 us=251877 push_ifconfig_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 push_ifconfig_local = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 push_ifconfig_remote_netmask = 0.0.0.0
Wed Oct 25 12:37:26 2017 us=251877 push_ifconfig_ipv6_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 push_ifconfig_ipv6_local = ::/0
Wed Oct 25 12:37:26 2017 us=251877 push_ifconfig_ipv6_remote = ::
Wed Oct 25 12:37:26 2017 us=251877 enable_c2c = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 duplicate_cn = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 cf_max = 0
Wed Oct 25 12:37:26 2017 us=251877 cf_per = 0
Wed Oct 25 12:37:26 2017 us=251877 max_clients = 1024
Wed Oct 25 12:37:26 2017 us=251877 max_routes_per_client = 256
Wed Oct 25 12:37:26 2017 us=251877 auth_user_pass_verify_script = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=251877 auth_user_pass_verify_script_via_file = DISABLED
Wed Oct 25 12:37:26 2017 us=251877 auth_token_generate = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 auth_token_lifetime = 0
Wed Oct 25 12:37:26 2017 us=252874 client = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 pull = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 auth_user_pass_file = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=252874 show_net_up = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 route_method = 3
Wed Oct 25 12:37:26 2017 us=252874 block_outside_dns = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 ip_win32_defined = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 ip_win32_type = 3
Wed Oct 25 12:37:26 2017 us=252874 dhcp_masq_offset = 0
Wed Oct 25 12:37:26 2017 us=252874 dhcp_lease_time = 31536000
Wed Oct 25 12:37:26 2017 us=252874 tap_sleep = 0
Wed Oct 25 12:37:26 2017 us=252874 dhcp_options = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 dhcp_renew = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 dhcp_pre_release = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 domain = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=252874 netbios_scope = '[UNDEF]'
Wed Oct 25 12:37:26 2017 us=252874 netbios_node_type = 0
Wed Oct 25 12:37:26 2017 us=252874 disable_nbt = DISABLED
Wed Oct 25 12:37:26 2017 us=252874 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 23 2017
Wed Oct 25 12:37:26 2017 us=252874 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Oct 25 12:37:26 2017 us=252874 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Wed Oct 25 12:37:26 2017 us=264878 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25354
Wed Oct 25 12:37:26 2017 us=264878 Need hold release from management interface, waiting...
Wed Oct 25 12:37:26 2017 us=602745 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25354
Wed Oct 25 12:37:26 2017 us=703759 MANAGEMENT: CMD 'state on'
Wed Oct 25 12:37:26 2017 us=703759 MANAGEMENT: CMD 'log all on'
Wed Oct 25 12:37:26 2017 us=864753 MANAGEMENT: CMD 'echo all on'
Wed Oct 25 12:37:26 2017 us=866750 MANAGEMENT: CMD 'hold off'
Wed Oct 25 12:37:26 2017 us=867750 MANAGEMENT: CMD 'hold release'
Wed Oct 25 12:37:26 2017 us=868749 Outgoing Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 25 12:37:26 2017 us=868749 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Wed Oct 25 12:37:26 2017 us=868749 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:37:26 2017 us=868749 Incoming Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 25 12:37:26 2017 us=868749 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Wed Oct 25 12:37:26 2017 us=868749 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:37:26 2017 us=869749 interactive service msg_channel=576
Wed Oct 25 12:37:26 2017 us=869749 open_tun
Wed Oct 25 12:37:26 2017 us=871755 CreateFile failed on TAP device: \\.\Global\{C7DFFFC0-CE3E-4F3D-82E8-EC1A00BAE47F}.tap
Wed Oct 25 12:37:26 2017 us=871755 TAP-WIN32 device [tun_test] opened: \\.\Global\{9BCE4295-2333-49E4-87F0-15FB60B0311D}.tap
Wed Oct 25 12:37:26 2017 us=872753 TAP-Windows Driver Version 9.21
Wed Oct 25 12:37:26 2017 us=872753 TAP-Windows MTU=1500
Wed Oct 25 12:37:26 2017 us=875749 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {9BCE4295-2333-49E4-87F0-15FB60B0311D} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Wed Oct 25 12:37:26 2017 us=875749 Successful ARP Flush on interface [33] {9BCE4295-2333-49E4-87F0-15FB60B0311D}
Wed Oct 25 12:37:26 2017 us=877752 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Oct 25 12:37:26 2017 us=877752 MANAGEMENT: >STATE:1508931446,ASSIGN_IP,,10.8.0.1,,,,
Wed Oct 25 12:37:26 2017 us=877752 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:393 ET:0 EL:3 ]
Wed Oct 25 12:37:26 2017 us=877752 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Wed Oct 25 12:37:26 2017 us=877752 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Wed Oct 25 12:37:26 2017 us=877752 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Wed Oct 25 12:37:26 2017 us=877752 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Oct 25 12:37:26 2017 us=877752 setsockopt(IPV6_V6ONLY=0)
Wed Oct 25 12:37:26 2017 us=878750 UDPv6 link local (bound): [AF_INET6][undef]:1194
Wed Oct 25 12:37:26 2017 us=878750 UDPv6 link remote: [AF_UNSPEC]
Wed Oct 25 12:38:34 2017 us=289617 Peer Connection Initiated with [AF_INET6]::ffff:10.10.201.201:1194
Wed Oct 25 12:38:39 2017 us=311655 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Wed Oct 25 12:38:39 2017 us=311655 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Oct 25 12:38:39 2017 us=312654 Initialization Sequence Completed
Wed Oct 25 12:38:39 2017 us=312654 MANAGEMENT: >STATE:1508931519,CONNECTED,SUCCESS,10.8.0.1,::ffff:10.10.201.201,1194,,
Client log:
Wed Oct 25 12:38:31 2017 us=951000 Current Parameter Settings:
Wed Oct 25 12:38:31 2017 us=951000 config = 'stat-key.ovpn'
Wed Oct 25 12:38:31 2017 us=951000 mode = 0
Wed Oct 25 12:38:31 2017 us=951000 show_ciphers = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 show_digests = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 show_engines = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 genkey = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 key_pass_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 show_tls_ciphers = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 Connection profiles [default]:
Wed Oct 25 12:38:31 2017 us=951000 proto = udp
Wed Oct 25 12:38:31 2017 us=951000 local = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 local_port = 1194
Wed Oct 25 12:38:31 2017 us=951000 remote = '10.10.101.110'
Wed Oct 25 12:38:31 2017 us=951000 remote_port = 1194
Wed Oct 25 12:38:31 2017 us=951000 remote_float = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 bind_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 bind_local = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 connect_retry_seconds = 5
Wed Oct 25 12:38:31 2017 us=951000 connect_timeout = 10
Wed Oct 25 12:38:31 2017 us=951000 connect_retry_max = 0
Wed Oct 25 12:38:31 2017 us=951000 socks_proxy_server = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 socks_proxy_port = 0
Wed Oct 25 12:38:31 2017 us=951000 socks_proxy_retry = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 tun_mtu = 1500
Wed Oct 25 12:38:31 2017 us=951000 tun_mtu_defined = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 link_mtu = 1500
Wed Oct 25 12:38:31 2017 us=951000 link_mtu_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 tun_mtu_extra = 0
Wed Oct 25 12:38:31 2017 us=951000 tun_mtu_extra_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 mtu_discover_type = -1
Wed Oct 25 12:38:31 2017 us=951000 fragment = 0
Wed Oct 25 12:38:31 2017 us=951000 mssfix = 1450
Wed Oct 25 12:38:31 2017 us=951000 explicit_exit_notification = 0
Wed Oct 25 12:38:31 2017 us=951000 Connection profiles END
Wed Oct 25 12:38:31 2017 us=951000 remote_random = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 ipchange = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 dev = 'tun'
Wed Oct 25 12:38:31 2017 us=951000 dev_type = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 dev_node = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 lladdr = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 topology = 1
Wed Oct 25 12:38:31 2017 us=951000 tun_ipv6 = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 ifconfig_local = '10.8.0.2'
Wed Oct 25 12:38:31 2017 us=951000 ifconfig_remote_netmask = '10.8.0.1'
Wed Oct 25 12:38:31 2017 us=951000 ifconfig_noexec = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 ifconfig_nowarn = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 ifconfig_ipv6_local = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 ifconfig_ipv6_netbits = 0
Wed Oct 25 12:38:31 2017 us=951000 ifconfig_ipv6_remote = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 shaper = 0
Wed Oct 25 12:38:31 2017 us=951000 mtu_test = 0
Wed Oct 25 12:38:31 2017 us=951000 mlock = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 keepalive_ping = 0
Wed Oct 25 12:38:31 2017 us=951000 keepalive_timeout = 0
Wed Oct 25 12:38:31 2017 us=951000 inactivity_timeout = 0
Wed Oct 25 12:38:31 2017 us=951000 ping_send_timeout = 0
Wed Oct 25 12:38:31 2017 us=951000 ping_rec_timeout = 0
Wed Oct 25 12:38:31 2017 us=951000 ping_rec_timeout_action = 0
Wed Oct 25 12:38:31 2017 us=951000 ping_timer_remote = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 remap_sigusr1 = 0
Wed Oct 25 12:38:31 2017 us=951000 persist_tun = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 persist_local_ip = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 persist_remote_ip = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 persist_key = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 passtos = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 resolve_retry_seconds = 1000000000
Wed Oct 25 12:38:31 2017 us=951000 username = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 groupname = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 chroot_dir = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 cd_dir = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 writepid = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 up_script = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 down_script = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 down_pre = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 up_restart = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 up_delay = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 daemon = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 inetd = 0
Wed Oct 25 12:38:31 2017 us=951000 log = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 suppress_timestamps = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 nice = 0
Wed Oct 25 12:38:31 2017 us=951000 verbosity = 4
Wed Oct 25 12:38:31 2017 us=951000 mute = 0
Wed Oct 25 12:38:31 2017 us=951000 gremlin = 0
Wed Oct 25 12:38:31 2017 us=951000 status_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 status_file_version = 1
Wed Oct 25 12:38:31 2017 us=951000 status_file_update_freq = 60
Wed Oct 25 12:38:31 2017 us=951000 occ = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 rcvbuf = 0
Wed Oct 25 12:38:31 2017 us=951000 sndbuf = 0
Wed Oct 25 12:38:31 2017 us=951000 sockflags = 0
Wed Oct 25 12:38:31 2017 us=951000 fast_io = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 lzo = 0
Wed Oct 25 12:38:31 2017 us=951000 route_script = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 route_default_gateway = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 route_default_metric = 0
Wed Oct 25 12:38:31 2017 us=951000 route_noexec = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 route_delay = 5
Wed Oct 25 12:38:31 2017 us=951000 route_delay_window = 30
Wed Oct 25 12:38:31 2017 us=951000 route_delay_defined = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 route_nopull = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 route_gateway_via_dhcp = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 max_routes = 100
Wed Oct 25 12:38:31 2017 us=951000 allow_pull_fqdn = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 management_addr = '127.0.0.1'
Wed Oct 25 12:38:31 2017 us=951000 management_port = 25343
Wed Oct 25 12:38:31 2017 us=951000 management_user_pass = 'stdin'
Wed Oct 25 12:38:31 2017 us=951000 management_log_history_cache = 250
Wed Oct 25 12:38:31 2017 us=951000 management_echo_buffer_size = 100
Wed Oct 25 12:38:31 2017 us=951000 management_write_peer_info_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 management_client_user = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 management_client_group = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 management_flags = 6
Wed Oct 25 12:38:31 2017 us=951000 shared_secret_file = 'stat-key.key'
Wed Oct 25 12:38:31 2017 us=951000 key_direction = 0
Wed Oct 25 12:38:31 2017 us=951000 ciphername_defined = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 ciphername = 'BF-CBC'
Wed Oct 25 12:38:31 2017 us=951000 authname_defined = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 authname = 'SHA1'
Wed Oct 25 12:38:31 2017 us=951000 prng_hash = 'SHA1'
Wed Oct 25 12:38:31 2017 us=951000 prng_nonce_secret_len = 16
Wed Oct 25 12:38:31 2017 us=951000 keysize = 0
Wed Oct 25 12:38:31 2017 us=951000 engine = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 replay = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 mute_replay_warnings = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 replay_window = 64
Wed Oct 25 12:38:31 2017 us=951000 replay_time = 15
Wed Oct 25 12:38:31 2017 us=951000 packet_id_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 use_iv = ENABLED
Wed Oct 25 12:38:31 2017 us=951000 test_crypto = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 tls_server = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 tls_client = DISABLED
Wed Oct 25 12:38:31 2017 us=951000 key_method = 2
Wed Oct 25 12:38:31 2017 us=951000 ca_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 ca_path = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 dh_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=951000 cert_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 extra_certs_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 priv_key_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 pkcs12_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 cryptoapi_cert = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 cipher_list = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 tls_verify = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 tls_export_cert = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 verify_x509_type = 0
Wed Oct 25 12:38:31 2017 us=966625 verify_x509_name = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 crl_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 ns_cert_type = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_ku[i] = 0
Wed Oct 25 12:38:31 2017 us=966625 remote_cert_eku = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 ssl_flags = 0
Wed Oct 25 12:38:31 2017 us=966625 tls_timeout = 2
Wed Oct 25 12:38:31 2017 us=966625 renegotiate_bytes = -1
Wed Oct 25 12:38:31 2017 us=966625 renegotiate_packets = 0
Wed Oct 25 12:38:31 2017 us=966625 renegotiate_seconds = 3600
Wed Oct 25 12:38:31 2017 us=966625 handshake_window = 60
Wed Oct 25 12:38:31 2017 us=966625 transition_window = 3600
Wed Oct 25 12:38:31 2017 us=966625 single_session = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 push_peer_info = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 tls_exit = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 tls_auth_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_protected_authentication = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_private_mode = 00000000
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_cert_private = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_pin_cache_period = -1
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_id = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 pkcs11_id_management = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 server_network = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 server_netmask = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 server_network_ipv6 = ::
Wed Oct 25 12:38:31 2017 us=966625 server_netbits_ipv6 = 0
Wed Oct 25 12:38:31 2017 us=966625 server_bridge_ip = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 server_bridge_netmask = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 server_bridge_pool_start = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 server_bridge_pool_end = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_pool_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_pool_start = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_pool_end = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_pool_netmask = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_pool_persist_refresh_freq = 600
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_ipv6_pool_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_ipv6_pool_base = ::
Wed Oct 25 12:38:31 2017 us=966625 ifconfig_ipv6_pool_netbits = 0
Wed Oct 25 12:38:31 2017 us=966625 n_bcast_buf = 256
Wed Oct 25 12:38:31 2017 us=966625 tcp_queue_limit = 64
Wed Oct 25 12:38:31 2017 us=966625 real_hash_size = 256
Wed Oct 25 12:38:31 2017 us=966625 virtual_hash_size = 256
Wed Oct 25 12:38:31 2017 us=966625 client_connect_script = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 learn_address_script = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 client_disconnect_script = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 client_config_dir = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 ccd_exclusive = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 tmp_dir = 'C:\DOCUME~1\R00T\LOCALS~1\Temp\'
Wed Oct 25 12:38:31 2017 us=966625 push_ifconfig_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 push_ifconfig_local = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 push_ifconfig_remote_netmask = 0.0.0.0
Wed Oct 25 12:38:31 2017 us=966625 push_ifconfig_ipv6_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 push_ifconfig_ipv6_local = ::/0
Wed Oct 25 12:38:31 2017 us=966625 push_ifconfig_ipv6_remote = ::
Wed Oct 25 12:38:31 2017 us=966625 enable_c2c = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 duplicate_cn = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 cf_max = 0
Wed Oct 25 12:38:31 2017 us=966625 cf_per = 0
Wed Oct 25 12:38:31 2017 us=966625 max_clients = 1024
Wed Oct 25 12:38:31 2017 us=966625 max_routes_per_client = 256
Wed Oct 25 12:38:31 2017 us=966625 auth_user_pass_verify_script = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 auth_user_pass_verify_script_via_file = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 client = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 pull = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 auth_user_pass_file = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 show_net_up = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 route_method = 0
Wed Oct 25 12:38:31 2017 us=966625 block_outside_dns = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 ip_win32_defined = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 ip_win32_type = 3
Wed Oct 25 12:38:31 2017 us=966625 dhcp_masq_offset = 0
Wed Oct 25 12:38:31 2017 us=966625 dhcp_lease_time = 31536000
Wed Oct 25 12:38:31 2017 us=966625 tap_sleep = 0
Wed Oct 25 12:38:31 2017 us=966625 dhcp_options = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 dhcp_renew = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 dhcp_pre_release = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 dhcp_release = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 domain = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 netbios_scope = '[UNDEF]'
Wed Oct 25 12:38:31 2017 us=966625 netbios_node_type = 0
Wed Oct 25 12:38:31 2017 us=966625 disable_nbt = DISABLED
Wed Oct 25 12:38:31 2017 us=966625 OpenVPN 2.3.18 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Sep 26 2017
Wed Oct 25 12:38:31 2017 us=966625 Windows version 5.1 (Windows XP) 32bit
Wed Oct 25 12:38:31 2017 us=966625 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Wed Oct 25 12:38:31 2017 us=966625 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25343
Wed Oct 25 12:38:31 2017 us=966625 Need hold release from management interface, waiting...
Wed Oct 25 12:38:32 2017 us=13500 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25343
Wed Oct 25 12:38:32 2017 us=138500 MANAGEMENT: CMD 'state on'
Wed Oct 25 12:38:32 2017 us=154125 MANAGEMENT: CMD 'log all on'
Wed Oct 25 12:38:32 2017 us=654125 MANAGEMENT: CMD 'hold off'
Wed Oct 25 12:38:32 2017 us=654125 MANAGEMENT: CMD 'hold release'
Wed Oct 25 12:38:32 2017 us=654125 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 25 12:38:32 2017 us=654125 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Wed Oct 25 12:38:32 2017 us=654125 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:38:32 2017 us=654125 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Oct 25 12:38:32 2017 us=654125 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Wed Oct 25 12:38:32 2017 us=654125 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Oct 25 12:38:32 2017 us=654125 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Oct 25 12:38:32 2017 us=701000 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Oct 25 12:38:32 2017 us=701000 MANAGEMENT: >STATE:1508931512,ASSIGN_IP,,10.8.0.2,
Wed Oct 25 12:38:32 2017 us=701000 open_tun, tt->ipv6=0
Wed Oct 25 12:38:32 2017 us=716625 CreateFile failed on TAP device: \\.\Global\{320A656C-816C-409E-84AB-5F40F27A7C94}.tap
Wed Oct 25 12:38:32 2017 us=716625 TAP-WIN32 device [tun0] opened: \\.\Global\{590762D2-D9C3-401D-93DD-B9FF7605E6E6}.tap
Wed Oct 25 12:38:32 2017 us=732250 TAP-Windows Driver Version 9.9
Wed Oct 25 12:38:32 2017 us=732250 TAP-Windows MTU=1500
Wed Oct 25 12:38:32 2017 us=732250 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {590762D2-D9C3-401D-93DD-B9FF7605E6E6} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Wed Oct 25 12:38:32 2017 us=732250 Successful ARP Flush on interface [196610] {590762D2-D9C3-401D-93DD-B9FF7605E6E6}
Wed Oct 25 12:38:32 2017 us=732250 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:12 ET:0 EL:3 ]
Wed Oct 25 12:38:32 2017 us=732250 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Wed Oct 25 12:38:32 2017 us=732250 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Wed Oct 25 12:38:32 2017 us=732250 Local Options hash (VER=V4): 'd3880969'
Wed Oct 25 12:38:32 2017 us=732250 Expected Remote Options hash (VER=V4): 'c41bf3b8'
Wed Oct 25 12:38:32 2017 us=732250 UDPv4 link local (bound): [undef]
Wed Oct 25 12:38:32 2017 us=732250 UDPv4 link remote: [AF_INET]10.10.101.110:1194
Wed Oct 25 12:38:36 2017 us=60375 Peer Connection Initiated with [AF_INET]10.10.101.110:1194
Wed Oct 25 12:38:42 2017 us=247875 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Wed Oct 25 12:38:42 2017 us=247875 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Oct 25 12:38:42 2017 us=247875 Initialization Sequence Completed
Wed Oct 25 12:38:42 2017 us=247875 MANAGEMENT: >STATE:1508931522,CONNECTED,SUCCESS,10.8.0.2,10.10.101.110
net.admin
Thanks TCT.
With the keepalive in place and a constant ping across the tunnel, I don't see any restarts - which makes sense because there's traffic.
With the keepalive in place and a no ping across the tunnel, I do see restarts in time with the keepalive timeout - which makes sense because there's no traffic, so the keepalive condition is met.
Because I'm hopping over several routers between points, I'd like to keep the keepalive in place to cover the 'what if' factor that I can't control. As far as I can tell, the restarting of the tunnel (initiated by keepalive timeout) shouldn't cause any performance issues because it's condition is only met if the connection is already idle for that time. So, as I understand/have read, the minimal extra traffic and the brief loss of connection during the restart, should not be noticed because it's A) next to no traffic, and B) because for the keepalive to be enacted, the connection had to be idle prior.
Interestingly, I just span up a virtual box as the server and loaded the original config onto it (from the start of this thread) and immediately had the connection failure and replay warning. Once I changed the keepalive, I was able to connect. Both times using udp. I know from experience and your past help that udp and VB are not a good mix when using certificates. I was unsure what would happen with a secret key. So, in testing to find commonality I have determined that, in my case, keepalive 'does' have an effect on the connection ability*. I will be completely honest and say I do not understand why, but will look into the router logs at both ends for a possible answer when time permits. But also, I now have a stable single client - server usp connection using a virtual box - which I thought I wasn't able to do.
(*) There was also the differing versions (1 build between the two) from client and server - which may have contributed also. Honestly, I don't know.
Thanks for your help and time on this one. You must be a very busy chap.
Cheers
TinCanTech
net.admin wrote
Because I'm hopping over several routers between points
which is why you need the --keepalive ..
net.admin wrote
keepalive 'does' have an effect on the connection ability*. I will be completely honest and say I do not understand why
It is documented there:
https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html
Like I said "my test was local", I just wanted to test Windows and
point-to-point.
I am not totally sure but first, the IP's (a)10.8.0.1->10.8.0.2 and (b)vice-versa are both NET30 addresses
and although --topology is not enabled in the Static-Key VPN Windows still requires a NET30 style IP address.
(Bear in mind that the developers have had to find clever solutions to complex problems)
net.admin wrote
I know from experience and your past help that udp and VB are not a good mix
There are many problems .. Host machine performance .. Virtual Net-IF performance .. and SSL.
I don't fully understand it myself .. but I know from experience it is easy to overload the Host.
But I think VBox is a great product !
net.admin wrote
Thanks for your help and time on this one. You must be a very busy chap
Quite busy but not as busy as the developers !
As for my help .. I try to guide people to finding answers themselves but some people are more interesting, persistent and polite than others 8-)
(You may be interested in this :
https://community.openvpn.net/openvpn/wiki/Contributing)
net.admin
I'm posting a reply to this thread as I have news.
Before the changes to keepalive were made I suspected there might be router involvement, but I changed the keepalive and my problems seems to vanished. Well it seems there is another player in the cause. At the server end I have a tplink router. It's there because it's what I had for that site and my openvpn testing. But here's the thing; despite it having port forwarding and translation, vpn passthrough and most other niceties, it also seems to require a restart every few days. If I don't restart it, I end up with relay errors in the logs and poor connection stability. If I do restart it daily, my openvpn connection is error free.
Now I was (definitely) restarting that unit during all the above problem solving, so the keepalive did play a part. But it seems I need to look into why this tplink box is causing me grief. Insert argh moment here! 🙂
I'll post further info if I have any of merit. 🙂
