Unable to push route

duncane

I am trying to set up a VPN to connect my home PC (Windows 10) to my office LAN (Windows 2012 AD). The office LAN is 10.195.194.0 255.0.0.0 and for various reasons this can't be changed. I have used the default VPN settings of 10.8.0.0 255.255.255.0 and I have topology set to subnet. I am using tun. I have added a line to the server config to push "route 10.195.194.0 255.0.0.0".

I am able to get the VPN to connect. But the push "route 10.195.194.0 255.0.0.0" returns an error saying that 10.195.194.0 is not a valid network on 255.0.0.0. If I change the subnet to push route "10.195.194.0 255.255.255.0" the route gets pushed fine, but obviously that isn't my office LAN network so isn't much use to me.

I have added a static path to the office network by adding a Classless Static Route to the DHCP server with Destination 10.8.0.0 Mask 255.255.255.0 Gateway 10.195.194.5 (the VPN server address). This has been correctly propogated across the LAN.

I have also allowed traffic from the internet on port 1194 to access the external IP address of the office network (the address specified in the client setup) and then DNAT to change the external IP address to the VPN server internal address. I have not added any other firewall or NAT rules.

At the moment the VPN connects but I can't ping/tracert/browse to any of the office LAN resources.

What am I doing wrong? Any help would be much appreciated.

Thank you in anticipation.

Duncan.

TinCanTech

duncane wrote I am able to get the VPN to connect. But the push "route 10.195.194.0 255.0.0.0" returns an error saying that 10.195.194.0 is not a valid network on 255.0.0.0. If I change the subnet to push route "10.195.194.0 255.255.255.0" the route gets pushed fine

Can you please post your client log at verb 4 [edit] yeah .. that's not a valid net/subnet combo ..

duncane

here you go

Wed Nov 01 22:01:36 2017 us=810500 Current Parameter Settings:
Wed Nov 01 22:01:36 2017 us=810500 config = 'client.ovpn'
Wed Nov 01 22:01:36 2017 us=810500 mode = 0
Wed Nov 01 22:01:36 2017 us=810500 show_ciphers = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 show_digests = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 show_engines = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 genkey = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 key_pass_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 show_tls_ciphers = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 connect_retry_max = 0
Wed Nov 01 22:01:36 2017 us=810500 Connection profiles [0]:
Wed Nov 01 22:01:36 2017 us=810500 proto = udp
Wed Nov 01 22:01:36 2017 us=810500 local = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 local_port = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 remote = '*.*.61.33'
Wed Nov 01 22:01:36 2017 us=810500 remote_port = '1194'
Wed Nov 01 22:01:36 2017 us=810500 remote_float = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 bind_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 bind_local = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 bind_ipv6_only = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 connect_retry_seconds = 5
Wed Nov 01 22:01:36 2017 us=810500 connect_timeout = 120
Wed Nov 01 22:01:36 2017 us=810500 socks_proxy_server = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 socks_proxy_port = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 tun_mtu = 1500
Wed Nov 01 22:01:36 2017 us=810500 tun_mtu_defined = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 link_mtu = 1500
Wed Nov 01 22:01:36 2017 us=810500 link_mtu_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 tun_mtu_extra = 0
Wed Nov 01 22:01:36 2017 us=810500 tun_mtu_extra_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 mtu_discover_type = -1
Wed Nov 01 22:01:36 2017 us=810500 fragment = 0
Wed Nov 01 22:01:36 2017 us=810500 mssfix = 1450
Wed Nov 01 22:01:36 2017 us=810500 explicit_exit_notification = 0
Wed Nov 01 22:01:36 2017 us=810500 Connection profiles END
Wed Nov 01 22:01:36 2017 us=810500 remote_random = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 ipchange = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 dev = 'tun'
Wed Nov 01 22:01:36 2017 us=810500 dev_type = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 dev_node = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 lladdr = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 topology = 1
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_local = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_remote_netmask = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_noexec = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_nowarn = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_ipv6_local = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_ipv6_netbits = 0
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_ipv6_remote = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 shaper = 0
Wed Nov 01 22:01:36 2017 us=810500 mtu_test = 0
Wed Nov 01 22:01:36 2017 us=810500 mlock = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 keepalive_ping = 0
Wed Nov 01 22:01:36 2017 us=810500 keepalive_timeout = 0
Wed Nov 01 22:01:36 2017 us=810500 inactivity_timeout = 0
Wed Nov 01 22:01:36 2017 us=810500 ping_send_timeout = 0
Wed Nov 01 22:01:36 2017 us=810500 ping_rec_timeout = 0
Wed Nov 01 22:01:36 2017 us=810500 ping_rec_timeout_action = 0
Wed Nov 01 22:01:36 2017 us=810500 ping_timer_remote = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 remap_sigusr1 = 0
Wed Nov 01 22:01:36 2017 us=810500 persist_tun = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 persist_local_ip = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 persist_remote_ip = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 persist_key = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 passtos = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 resolve_retry_seconds = 1000000000
Wed Nov 01 22:01:36 2017 us=810500 resolve_in_advance = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 username = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 groupname = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 chroot_dir = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 cd_dir = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 writepid = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 up_script = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 down_script = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 down_pre = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 up_restart = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 up_delay = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 daemon = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 inetd = 0
Wed Nov 01 22:01:36 2017 us=810500 log = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 suppress_timestamps = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 machine_readable_output = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 nice = 0
Wed Nov 01 22:01:36 2017 us=810500 verbosity = 4
Wed Nov 01 22:01:36 2017 us=810500 mute = 0
Wed Nov 01 22:01:36 2017 us=810500 gremlin = 0
Wed Nov 01 22:01:36 2017 us=810500 status_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 status_file_version = 1
Wed Nov 01 22:01:36 2017 us=810500 status_file_update_freq = 60
Wed Nov 01 22:01:36 2017 us=810500 occ = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 rcvbuf = 0
Wed Nov 01 22:01:36 2017 us=810500 sndbuf = 0
Wed Nov 01 22:01:36 2017 us=810500 sockflags = 0
Wed Nov 01 22:01:36 2017 us=810500 fast_io = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 comp.alg = 0
Wed Nov 01 22:01:36 2017 us=810500 comp.flags = 0
Wed Nov 01 22:01:36 2017 us=810500 route_script = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 route_default_gateway = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 route_default_metric = 0
Wed Nov 01 22:01:36 2017 us=810500 route_noexec = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 route_delay = 5
Wed Nov 01 22:01:36 2017 us=810500 route_delay_window = 30
Wed Nov 01 22:01:36 2017 us=810500 route_delay_defined = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 route_nopull = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 route_gateway_via_dhcp = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 allow_pull_fqdn = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 management_addr = '127.0.0.1'
Wed Nov 01 22:01:36 2017 us=810500 management_port = '25340'
Wed Nov 01 22:01:36 2017 us=810500 management_user_pass = 'stdin'
Wed Nov 01 22:01:36 2017 us=810500 management_log_history_cache = 250
Wed Nov 01 22:01:36 2017 us=810500 management_echo_buffer_size = 100
Wed Nov 01 22:01:36 2017 us=810500 management_write_peer_info_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 management_client_user = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 management_client_group = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 management_flags = 6
Wed Nov 01 22:01:36 2017 us=810500 shared_secret_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 key_direction = 2
Wed Nov 01 22:01:36 2017 us=810500 ciphername = 'AES-256-CBC'
Wed Nov 01 22:01:36 2017 us=810500 ncp_enabled = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed Nov 01 22:01:36 2017 us=810500 authname = 'SHA1'
Wed Nov 01 22:01:36 2017 us=810500 prng_hash = 'SHA1'
Wed Nov 01 22:01:36 2017 us=810500 prng_nonce_secret_len = 16
Wed Nov 01 22:01:36 2017 us=810500 keysize = 0
Wed Nov 01 22:01:36 2017 us=810500 engine = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 replay = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 mute_replay_warnings = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 replay_window = 64
Wed Nov 01 22:01:36 2017 us=810500 replay_time = 15
Wed Nov 01 22:01:36 2017 us=810500 packet_id_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 use_iv = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 test_crypto = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 tls_server = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 tls_client = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 key_method = 2
Wed Nov 01 22:01:36 2017 us=810500 ca_file = 'C://Program Files//OpenVPN//config//ca.crt'
Wed Nov 01 22:01:36 2017 us=810500 ca_path = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 dh_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 cert_file = 'C://Program Files//OpenVPN//config//DuncanHome.crt'
Wed Nov 01 22:01:36 2017 us=810500 extra_certs_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 priv_key_file = 'C://Program Files//OpenVPN//config//DuncanHome.key'
Wed Nov 01 22:01:36 2017 us=810500 pkcs12_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 cryptoapi_cert = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 cipher_list = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 tls_verify = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 tls_export_cert = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 verify_x509_type = 0
Wed Nov 01 22:01:36 2017 us=810500 verify_x509_name = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 crl_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 ns_cert_type = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 65535
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku[i] = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku[i] = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku[i] = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku[i] = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku[i] = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_ku[i] = 0
Wed Nov 01 22:01:36 2017 us=810500 remote_cert_eku = 'TLS Web Server Authentication'
Wed Nov 01 22:01:36 2017 us=810500 ssl_flags = 0
Wed Nov 01 22:01:36 2017 us=810500 tls_timeout = 2
Wed Nov 01 22:01:36 2017 us=810500 renegotiate_bytes = -1
Wed Nov 01 22:01:36 2017 us=810500 renegotiate_packets = 0
Wed Nov 01 22:01:36 2017 us=810500 renegotiate_seconds = 3600
Wed Nov 01 22:01:36 2017 us=810500 handshake_window = 60
Wed Nov 01 22:01:36 2017 us=810500 transition_window = 3600
Wed Nov 01 22:01:36 2017 us=810500 single_session = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 push_peer_info = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 tls_exit = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 tls_auth_file = 'C://Program Files//OpenVPN//config//ta.key'
Wed Nov 01 22:01:36 2017 us=810500 tls_crypt_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_protected_authentication = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_private_mode = 00000000
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_cert_private = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_pin_cache_period = -1
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_id = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 pkcs11_id_management = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 server_network = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 server_netmask = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 server_network_ipv6 = ::
Wed Nov 01 22:01:36 2017 us=810500 server_netbits_ipv6 = 0
Wed Nov 01 22:01:36 2017 us=810500 server_bridge_ip = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 server_bridge_netmask = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 server_bridge_pool_start = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 server_bridge_pool_end = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_pool_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_pool_start = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_pool_end = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_pool_netmask = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_pool_persist_refresh_freq = 600
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_ipv6_pool_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_ipv6_pool_base = ::
Wed Nov 01 22:01:36 2017 us=810500 ifconfig_ipv6_pool_netbits = 0
Wed Nov 01 22:01:36 2017 us=810500 n_bcast_buf = 256
Wed Nov 01 22:01:36 2017 us=810500 tcp_queue_limit = 64
Wed Nov 01 22:01:36 2017 us=810500 real_hash_size = 256
Wed Nov 01 22:01:36 2017 us=810500 virtual_hash_size = 256
Wed Nov 01 22:01:36 2017 us=810500 client_connect_script = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 learn_address_script = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 client_disconnect_script = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 client_config_dir = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 ccd_exclusive = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 tmp_dir = 'C:\Users\duncane\AppData\Local\Temp\'
Wed Nov 01 22:01:36 2017 us=810500 push_ifconfig_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 push_ifconfig_local = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 push_ifconfig_remote_netmask = 0.0.0.0
Wed Nov 01 22:01:36 2017 us=810500 push_ifconfig_ipv6_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 push_ifconfig_ipv6_local = ::/0
Wed Nov 01 22:01:36 2017 us=810500 push_ifconfig_ipv6_remote = ::
Wed Nov 01 22:01:36 2017 us=810500 enable_c2c = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 duplicate_cn = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 cf_max = 0
Wed Nov 01 22:01:36 2017 us=810500 cf_per = 0
Wed Nov 01 22:01:36 2017 us=810500 max_clients = 1024
Wed Nov 01 22:01:36 2017 us=810500 max_routes_per_client = 256
Wed Nov 01 22:01:36 2017 us=810500 auth_user_pass_verify_script = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 auth_user_pass_verify_script_via_file = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 auth_token_generate = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 auth_token_lifetime = 0
Wed Nov 01 22:01:36 2017 us=810500 client = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 pull = ENABLED
Wed Nov 01 22:01:36 2017 us=810500 auth_user_pass_file = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 show_net_up = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 route_method = 0
Wed Nov 01 22:01:36 2017 us=810500 block_outside_dns = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 ip_win32_defined = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 ip_win32_type = 3
Wed Nov 01 22:01:36 2017 us=810500 dhcp_masq_offset = 0
Wed Nov 01 22:01:36 2017 us=810500 dhcp_lease_time = 31536000
Wed Nov 01 22:01:36 2017 us=810500 tap_sleep = 0
Wed Nov 01 22:01:36 2017 us=810500 dhcp_options = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 dhcp_renew = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 dhcp_pre_release = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 domain = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 netbios_scope = '[UNDEF]'
Wed Nov 01 22:01:36 2017 us=810500 netbios_node_type = 0
Wed Nov 01 22:01:36 2017 us=810500 disable_nbt = DISABLED
Wed Nov 01 22:01:36 2017 us=810500 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Wed Nov 01 22:01:36 2017 us=810500 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Nov 01 22:01:36 2017 us=810500 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Wed Nov 01 22:01:36 2017 us=826134 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Nov 01 22:01:36 2017 us=826134 Need hold release from management interface, waiting...
Wed Nov 01 22:01:37 2017 us=263817 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Nov 01 22:01:37 2017 us=373206 MANAGEMENT: CMD 'state on'
Wed Nov 01 22:01:37 2017 us=373206 MANAGEMENT: CMD 'log all on'
Wed Nov 01 22:01:37 2017 us=451169 MANAGEMENT: CMD 'echo all on'
Wed Nov 01 22:01:37 2017 us=451169 MANAGEMENT: CMD 'hold off'
Wed Nov 01 22:01:37 2017 us=466793 MANAGEMENT: CMD 'hold release'
Wed Nov 01 22:01:37 2017 us=560552 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 01 22:01:37 2017 us=560552 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 01 22:01:37 2017 us=560552 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Wed Nov 01 22:01:37 2017 us=560552 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Wed Nov 01 22:01:37 2017 us=560552 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Wed Nov 01 22:01:37 2017 us=560552 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Wed Nov 01 22:01:37 2017 us=560552 TCP/UDP: Preserving recently used remote address: [AF_INET]*.*.61.33:1194
Wed Nov 01 22:01:37 2017 us=560552 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Nov 01 22:01:37 2017 us=560552 UDP link local: (not bound)
Wed Nov 01 22:01:37 2017 us=560552 UDP link remote: [AF_INET]*.*.61.33:1194
Wed Nov 01 22:01:37 2017 us=560552 MANAGEMENT: >STATE:1509573697,WAIT,,,,,,
Wed Nov 01 22:01:37 2017 us=607598 MANAGEMENT: >STATE:1509573697,AUTH,,,,,,
Wed Nov 01 22:01:37 2017 us=607598 TLS: Initial packet from [AF_INET]*.*.61.33:1194, sid=712c1385 16cc6d1a
Wed Nov 01 22:01:37 2017 us=654485 VERIFY OK: depth=1, C=UK, ST=Bucks, L=Aylesbury, O=*, OU=*, CN=PDCSRV, name=PDCSRV, emailAddress=eastlandd@*.com
Wed Nov 01 22:01:37 2017 us=654485 VERIFY KU OK
Wed Nov 01 22:01:37 2017 us=654485 Validating certificate extended key usage
Wed Nov 01 22:01:37 2017 us=654485 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Nov 01 22:01:37 2017 us=654485 VERIFY EKU OK
Wed Nov 01 22:01:37 2017 us=654485 VERIFY OK: depth=0, C=UK, ST=Bucks, L=Aylesbury, O=*, OU=*, CN=PDCSRV, name=PDCSRV, emailAddress=eastlandd@*.com
Wed Nov 01 22:01:37 2017 us=763862 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Wed Nov 01 22:01:37 2017 us=763862 [PDCSRV] Peer Connection Initiated with [AF_INET]*.*.61.33:1194
Wed Nov 01 22:01:38 2017 us=779602 MANAGEMENT: >STATE:1509573698,GET_CONFIG,,,,,,
Wed Nov 01 22:01:38 2017 us=779602 SENT CONTROL [PDCSRV]: 'PUSH_REQUEST' (status=1)
Wed Nov 01 22:01:38 2017 us=810843 PUSH: Received control message: 'PUSH_REPLY,route 10.195.194.0 255.0.0.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.195.194.5,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: timers and/or timeouts modified
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: route options modified
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: route-related options modified
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: peer-id set
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: adjusting link_mtu to 1624
Wed Nov 01 22:01:38 2017 us=810843 OPTIONS IMPORT: data channel crypto options modified
Wed Nov 01 22:01:38 2017 us=810843 Data Channel: using negotiated cipher 'AES-256-GCM'
Wed Nov 01 22:01:38 2017 us=810843 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Wed Nov 01 22:01:38 2017 us=810843 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 01 22:01:38 2017 us=810843 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 01 22:01:38 2017 us=810843 interactive service msg_channel=0
Wed Nov 01 22:01:38 2017 us=810843 ROUTE_GATEWAY 192.168.1.254/255.255.255.0 I=18 HWADDR=30:52:cb:81:84:1d
Wed Nov 01 22:01:38 2017 us=841980 open_tun
Wed Nov 01 22:01:38 2017 us=841980 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{0CB33F5C-B158-47B6-98BF-FE651115A332}.tap
Wed Nov 01 22:01:38 2017 us=841980 TAP-Windows Driver Version 9.21
Wed Nov 01 22:01:38 2017 us=841980 TAP-Windows MTU=1500
Wed Nov 01 22:01:38 2017 us=841980 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.4/255.255.255.0 [SUCCEEDED]
Wed Nov 01 22:01:38 2017 us=841980 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.4/255.255.255.0 on interface {0CB33F5C-B158-47B6-98BF-FE651115A332} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Nov 01 22:01:38 2017 us=841980 DHCP option string: 06040ac3 c205
Wed Nov 01 22:01:38 2017 us=841980 Successful ARP Flush on interface [2] {0CB33F5C-B158-47B6-98BF-FE651115A332}
Wed Nov 01 22:01:38 2017 us=841980 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Nov 01 22:01:38 2017 us=841980 MANAGEMENT: >STATE:1509573698,ASSIGN_IP,,10.8.0.4,,,,
Wed Nov 01 22:01:43 2017 us=264302 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Nov 01 22:01:43 2017 us=264302 C:\WINDOWS\system32\route.exe ADD *.*.61.33 MASK 255.255.255.255 192.168.1.254
Wed Nov 01 22:01:43 2017 us=264302 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Wed Nov 01 22:01:43 2017 us=264302 Route addition via IPAPI succeeded [adaptive]
Wed Nov 01 22:01:43 2017 us=264302 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 01 22:01:43 2017 us=264302 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Wed Nov 01 22:01:43 2017 us=264302 Route addition via IPAPI succeeded [adaptive]
Wed Nov 01 22:01:43 2017 us=264302 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 01 22:01:43 2017 us=295534 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Wed Nov 01 22:01:43 2017 us=295534 Route addition via IPAPI succeeded [adaptive]
Wed Nov 01 22:01:43 2017 us=295534 MANAGEMENT: >STATE:1509573703,ADD_ROUTES,,,,,,
Wed Nov 01 22:01:43 2017 us=295534 C:\WINDOWS\system32\route.exe ADD 10.195.194.0 MASK 255.0.0.0 10.8.0.1
Wed Nov 01 22:01:43 2017 us=295534 Warning: address 10.195.194.0 is not a network address in relation to netmask 255.0.0.0
Wed Nov 01 22:01:43 2017 us=295534 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect. [status=87 if_index=2]
Wed Nov 01 22:01:43 2017 us=295534 Route addition via IPAPI failed [adaptive]
Wed Nov 01 22:01:43 2017 us=295534 Route addition fallback to route.exe
Wed Nov 01 22:01:43 2017 us=295534 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Wed Nov 01 22:02:05 2017 us=176483 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Nov 01 22:02:05 2017 us=176483 Initialization Sequence Completed
Wed Nov 01 22:02:05 2017 us=176483 MANAGEMENT: >STATE:1509573725,CONNECTED,SUCCESS,10.8.0.4,*.*.61.33,1194,,
Wed Nov 01 22:02:14 2017 us=299170 TCP/UDP: Closing socket
Wed Nov 01 22:02:14 2017 us=299170 C:\WINDOWS\system32\route.exe DELETE 10.195.194.0 MASK 255.0.0.0 10.8.0.1
Wed Nov 01 22:02:14 2017 us=299170 ROUTE: route deletion failed using DeleteIpForwardEntry: The parameter is incorrect.
Wed Nov 01 22:02:14 2017 us=299170 Route deletion via IPAPI failed [adaptive]
Wed Nov 01 22:02:14 2017 us=299170 Route deletion fallback to route.exe
Wed Nov 01 22:02:14 2017 us=299170 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Wed Nov 01 22:02:14 2017 us=346049 C:\WINDOWS\system32\route.exe DELETE *.*.61.33 MASK 255.255.255.255 192.168.1.254
Wed Nov 01 22:02:14 2017 us=346049 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 01 22:02:14 2017 us=346049 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 01 22:02:14 2017 us=361708 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 01 22:02:14 2017 us=361708 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 01 22:02:14 2017 us=361708 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 01 22:02:14 2017 us=361708 Closing TUN/TAP interface

I'm not clear why 10.195.194.0 255.0.0.0 should be an invalid network. It's a typical Class A network.Of course we probably don't need that but it is what we have to work with.

Duncan