I've been using OpenVPN for a few years now to enable my users to dial in when they're out and about (Windows Network). I run the OpenVPN on pfSense - with authentication handled via RADIUS (which dials back into our MS Active Directory Infrastructure).
This has been working great until recently when on our Windows 10 clients, I started getting this error
Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv)
register_dns request sent to the service
Then it hangs like that forever. The connection however, is up. I can ping everything at our office, dns etc is resolving correctly - everything "WORKS", but I've got users running around like their hair is on fire because the connection sequence never actually completes.
The link in the error message above just says to reset the TCP/IP stack. I highly doubt this is the problem since it happens on all our Win 10 machines - it seems to work fine on Win 7!
Any ideas on what this is? My OpenVPN server config is below, and the client I am using is OpenVPN 2.4.4-Ix01.
dev ovpns1
verb 1
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp4
cipher AES-128-CBC
auth SHA1
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local 123.123.123.123
tls-server
server 172.16.249.0 255.255.255.0
client-config-dir /var/etc/openvpn-csc/server1
verify-client-cert none
username-as-common-name
auth-user-pass-verify "/usr/local/sbin/ovpn_auth_verify user <redacted>== false server1 1194" via-env
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'My+Server+Certificate' 1"
lport 1194
management /var/etc/openvpn/server1.sock unix
push "route 10.1.1.0 255.255.255.0"
push "route 10.254.1.0 255.255.255.0"
push "dhcp-option DOMAIN trinity.local"
push "dhcp-option DNS 10.10.10.1"
push "register-dns"
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.2048
tls-auth /var/etc/openvpn/server1.tls-auth 0
ncp-ciphers AES-256-GCM:AES-128-GCM
topology subnet
push "route 10.254.1.0 255.255.255.0 10.10.10.1 1"
