Bridged VPN issues

arminbmrt

I am trying to setup a bridged vpn connection.

I have a custom piece of hardware which uses udp to communicate with the controller UI on a computer. The hardware is designed to operate on a LAN. Once the controller UI finds the hardware it will start sending udp packets back and try to establish a tcp connection. The hardware ideally uses broadcasts but can be set to a fixed ip for the controller.

I have a bridged vpn half working. When I connect I can receive the udp packets in the controller UI. The problem is the packets send from the controller UI do not arrive and the tcp connection is not established.
I think there is some routing issue but I am lost at the moment.

Server is Ubuntu 16.04 which runs behind a router (port forwarding for openvpn on the router), OpenVPN 2.3.10. IP is 192.168.1.2
Client is win10. OpenVPN GUI v11.8.0.0

port 1194
proto udp
dev tap0
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server-bridge 192.168.1.2 255.255.255.0 192.168.1.230 192.168.1.240
push "route 192.168.1.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.1.1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
keepalive 10 120
tls-auth ta.key 0 # This file is secret
key-direction 0
cipher AES-128-CBC # AES
auth SHA256
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
up "/etc/openvpn/up.sh br0"
down "/etc/openvpn/down.sh br0"
script-security 3

???

Mon Jan 22 11:57:35 2018 us=913400 Current Parameter Settings:
Mon Jan 22 11:57:35 2018 us=913471   config = '/etc/openvpn/server.conf'
Mon Jan 22 11:57:35 2018 us=913484   mode = 1
Mon Jan 22 11:57:35 2018 us=913495   persist_config = DISABLED
Mon Jan 22 11:57:35 2018 us=913505   persist_mode = 1
Mon Jan 22 11:57:35 2018 us=913514   show_ciphers = DISABLED
Mon Jan 22 11:57:35 2018 us=913523   show_digests = DISABLED
Mon Jan 22 11:57:35 2018 us=913572   show_engines = DISABLED
Mon Jan 22 11:57:35 2018 us=913583   genkey = DISABLED
Mon Jan 22 11:57:35 2018 us=913592   key_pass_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913602   show_tls_ciphers = DISABLED
Mon Jan 22 11:57:35 2018 us=913611 Connection profiles [default]:
Mon Jan 22 11:57:35 2018 us=913621   proto = udp
Mon Jan 22 11:57:35 2018 us=913630   local = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913639   local_port = 1194
Mon Jan 22 11:57:35 2018 us=913649   remote = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913658   remote_port = 1194
Mon Jan 22 11:57:35 2018 us=913667   remote_float = DISABLED
Mon Jan 22 11:57:35 2018 us=913676   bind_defined = DISABLED
Mon Jan 22 11:57:35 2018 us=913685   bind_local = ENABLED
Mon Jan 22 11:57:35 2018 us=913694   connect_retry_seconds = 5
Mon Jan 22 11:57:35 2018 us=913704   connect_timeout = 10
Mon Jan 22 11:57:35 2018 us=913713   connect_retry_max = 0
Mon Jan 22 11:57:35 2018 us=913723   socks_proxy_server = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913732   socks_proxy_port = 0
Mon Jan 22 11:57:35 2018 us=913741   socks_proxy_retry = DISABLED
Mon Jan 22 11:57:35 2018 us=913751   tun_mtu = 1500
Mon Jan 22 11:57:35 2018 us=913760   tun_mtu_defined = ENABLED
Mon Jan 22 11:57:35 2018 us=913769   link_mtu = 1500
Mon Jan 22 11:57:35 2018 us=913778   link_mtu_defined = DISABLED
Mon Jan 22 11:57:35 2018 us=913788   tun_mtu_extra = 32
Mon Jan 22 11:57:35 2018 us=913797   tun_mtu_extra_defined = ENABLED
Mon Jan 22 11:57:35 2018 us=913806   mtu_discover_type = -1
Mon Jan 22 11:57:35 2018 us=913816   fragment = 0
Mon Jan 22 11:57:35 2018 us=913825   mssfix = 1450
Mon Jan 22 11:57:35 2018 us=913835   explicit_exit_notification = 0
Mon Jan 22 11:57:35 2018 us=913844 Connection profiles END
Mon Jan 22 11:57:35 2018 us=913853   remote_random = DISABLED
Mon Jan 22 11:57:35 2018 us=913862   ipchange = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913871   dev = 'tap0'
Mon Jan 22 11:57:35 2018 us=913880   dev_type = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913890   dev_node = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913899   lladdr = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=913908   topology = 1
Mon Jan 22 11:57:35 2018 us=913918   tun_ipv6 = DISABLED
Mon Jan 22 11:57:35 2018 us=914206   ifconfig_local = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914220   ifconfig_remote_netmask = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914231   ifconfig_noexec = DISABLED
Mon Jan 22 11:57:35 2018 us=914241   ifconfig_nowarn = DISABLED
Mon Jan 22 11:57:35 2018 us=914250   ifconfig_ipv6_local = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914260   ifconfig_ipv6_netbits = 0
Mon Jan 22 11:57:35 2018 us=914269   ifconfig_ipv6_remote = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914279   shaper = 0
Mon Jan 22 11:57:35 2018 us=914289   mtu_test = 0
Mon Jan 22 11:57:35 2018 us=914298   mlock = DISABLED
Mon Jan 22 11:57:35 2018 us=914307   keepalive_ping = 10
Mon Jan 22 11:57:35 2018 us=914317   keepalive_timeout = 120
Mon Jan 22 11:57:35 2018 us=914326   inactivity_timeout = 0
Mon Jan 22 11:57:35 2018 us=914335   ping_send_timeout = 10
Mon Jan 22 11:57:35 2018 us=914344   ping_rec_timeout = 240
Mon Jan 22 11:57:35 2018 us=914354   ping_rec_timeout_action = 2
Mon Jan 22 11:57:35 2018 us=914363   ping_timer_remote = DISABLED
Mon Jan 22 11:57:35 2018 us=914372   remap_sigusr1 = 0
Mon Jan 22 11:57:35 2018 us=914381   persist_tun = ENABLED
Mon Jan 22 11:57:35 2018 us=914391   persist_local_ip = DISABLED
Mon Jan 22 11:57:35 2018 us=914400   persist_remote_ip = DISABLED
Mon Jan 22 11:57:35 2018 us=914409   persist_key = ENABLED
Mon Jan 22 11:57:35 2018 us=914418   passtos = DISABLED
Mon Jan 22 11:57:35 2018 us=914428   resolve_retry_seconds = 1000000000
Mon Jan 22 11:57:35 2018 us=914449   username = 'nobody'
Mon Jan 22 11:57:35 2018 us=914459   groupname = 'nogroup'
Mon Jan 22 11:57:35 2018 us=914468   chroot_dir = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914478   cd_dir = '/etc/openvpn'
Mon Jan 22 11:57:35 2018 us=914487   writepid = '/run/openvpn/server.pid'
Mon Jan 22 11:57:35 2018 us=914497   up_script = '/etc/openvpn/up.sh br0'
Mon Jan 22 11:57:35 2018 us=914506   down_script = '/etc/openvpn/down.sh br0'
Mon Jan 22 11:57:35 2018 us=914520   down_pre = DISABLED
Mon Jan 22 11:57:35 2018 us=914530   up_restart = DISABLED
Mon Jan 22 11:57:35 2018 us=914539   up_delay = DISABLED
Mon Jan 22 11:57:35 2018 us=914548   daemon = ENABLED
Mon Jan 22 11:57:35 2018 us=914558   inetd = 0
Mon Jan 22 11:57:35 2018 us=914567   log = ENABLED
Mon Jan 22 11:57:35 2018 us=914576   suppress_timestamps = DISABLED
Mon Jan 22 11:57:35 2018 us=914586   nice = 0
Mon Jan 22 11:57:35 2018 us=914595   verbosity = 4
Mon Jan 22 11:57:35 2018 us=914604   mute = 0
Mon Jan 22 11:57:35 2018 us=914613   gremlin = 0
Mon Jan 22 11:57:35 2018 us=914623   status_file = 'openvpn-status.log'
Mon Jan 22 11:57:35 2018 us=914632   status_file_version = 1
Mon Jan 22 11:57:35 2018 us=914641   status_file_update_freq = 10
Mon Jan 22 11:57:35 2018 us=914651   occ = ENABLED
Mon Jan 22 11:57:35 2018 us=914660   rcvbuf = 0
Mon Jan 22 11:57:35 2018 us=914669   sndbuf = 0
Mon Jan 22 11:57:35 2018 us=914679   mark = 0
Mon Jan 22 11:57:35 2018 us=914688   sockflags = 0
Mon Jan 22 11:57:35 2018 us=914697   fast_io = DISABLED
Mon Jan 22 11:57:35 2018 us=914707   lzo = 7
Mon Jan 22 11:57:35 2018 us=914716   route_script = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914726   route_default_gateway = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914735   route_default_metric = 0
Mon Jan 22 11:57:35 2018 us=914745   route_noexec = DISABLED
Mon Jan 22 11:57:35 2018 us=914754   route_delay = 0
Mon Jan 22 11:57:35 2018 us=914764   route_delay_window = 30
Mon Jan 22 11:57:35 2018 us=914773   route_delay_defined = DISABLED
Mon Jan 22 11:57:35 2018 us=914783   route_nopull = DISABLED
Mon Jan 22 11:57:35 2018 us=914792   route_gateway_via_dhcp = DISABLED
Mon Jan 22 11:57:35 2018 us=914802   max_routes = 100
Mon Jan 22 11:57:35 2018 us=914811   allow_pull_fqdn = DISABLED
Mon Jan 22 11:57:35 2018 us=914820   management_addr = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914830   management_port = 0
Mon Jan 22 11:57:35 2018 us=914839   management_user_pass = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914849   management_log_history_cache = 250
Mon Jan 22 11:57:35 2018 us=914859   management_echo_buffer_size = 100
Mon Jan 22 11:57:35 2018 us=914869   management_write_peer_info_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914878   management_client_user = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914888   management_client_group = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914898   management_flags = 0
Mon Jan 22 11:57:35 2018 us=914907   shared_secret_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=914917   key_direction = 1
Mon Jan 22 11:57:35 2018 us=914926   ciphername_defined = ENABLED
Mon Jan 22 11:57:35 2018 us=914936   ciphername = 'AES-128-CBC'
Mon Jan 22 11:57:35 2018 us=914945   authname_defined = ENABLED
Mon Jan 22 11:57:35 2018 us=914955   authname = 'SHA256'
Mon Jan 22 11:57:35 2018 us=914964   prng_hash = 'SHA1'
Mon Jan 22 11:57:35 2018 us=914973   prng_nonce_secret_len = 16
Mon Jan 22 11:57:35 2018 us=914983   keysize = 0
Mon Jan 22 11:57:35 2018 us=914993   engine = DISABLED
Mon Jan 22 11:57:35 2018 us=915002   replay = ENABLED
Mon Jan 22 11:57:35 2018 us=915012   mute_replay_warnings = DISABLED
Mon Jan 22 11:57:35 2018 us=915021   replay_window = 64
Mon Jan 22 11:57:35 2018 us=915031   replay_time = 15
Mon Jan 22 11:57:35 2018 us=915041   packet_id_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915050   use_iv = ENABLED
Mon Jan 22 11:57:35 2018 us=915060   test_crypto = DISABLED
Mon Jan 22 11:57:35 2018 us=915069   tls_server = ENABLED
Mon Jan 22 11:57:35 2018 us=915079   tls_client = DISABLED
Mon Jan 22 11:57:35 2018 us=915089   key_method = 2
Mon Jan 22 11:57:35 2018 us=915104   ca_file = 'ca.crt'
Mon Jan 22 11:57:35 2018 us=915114   ca_path = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915123   dh_file = 'dh2048.pem'
Mon Jan 22 11:57:35 2018 us=915133   cert_file = 'server.crt'
Mon Jan 22 11:57:35 2018 us=915142   extra_certs_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915152   priv_key_file = 'server.key'
Mon Jan 22 11:57:35 2018 us=915162   pkcs12_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915171   cipher_list = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915180   tls_verify = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915190   tls_export_cert = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915199   verify_x509_type = 0
Mon Jan 22 11:57:35 2018 us=915208   verify_x509_name = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915218   crl_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915227   ns_cert_type = 0
Mon Jan 22 11:57:35 2018 us=915237   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915246   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915256   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915265   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915274   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915283   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915293   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915302   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915311   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915320   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915330   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915339   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915348   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915357   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915367   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915376   remote_cert_ku[i] = 0
Mon Jan 22 11:57:35 2018 us=915385   remote_cert_eku = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915395   ssl_flags = 0
Mon Jan 22 11:57:35 2018 us=915404   tls_timeout = 2
Mon Jan 22 11:57:35 2018 us=915413   renegotiate_bytes = 0
Mon Jan 22 11:57:35 2018 us=915423   renegotiate_packets = 0
Mon Jan 22 11:57:35 2018 us=915432   renegotiate_seconds = 3600
Mon Jan 22 11:57:35 2018 us=915441   handshake_window = 60
Mon Jan 22 11:57:35 2018 us=915451   transition_window = 3600
Mon Jan 22 11:57:35 2018 us=915460   single_session = DISABLED
Mon Jan 22 11:57:35 2018 us=915469   push_peer_info = DISABLED
Mon Jan 22 11:57:35 2018 us=915479   tls_exit = DISABLED
Mon Jan 22 11:57:35 2018 us=915488   tls_auth_file = 'ta.key'
Mon Jan 22 11:57:35 2018 us=915498   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915507   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915517   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915526   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915535   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915545   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915554   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915563   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915573   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915582   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915592   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915601   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915610   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915620   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915629   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915638   pkcs11_protected_authentication = DISABLED
Mon Jan 22 11:57:35 2018 us=915648   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915658   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915668   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915677   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915687   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915701   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915710   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915720   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915729   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915738   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915748   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915757   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915766   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915776   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915785   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915794   pkcs11_private_mode = 00000000
Mon Jan 22 11:57:35 2018 us=915803   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915813   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915822   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915831   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915841   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915850   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915859   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915868   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915878   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915887   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915896   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915905   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915915   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915924   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915933   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915943   pkcs11_cert_private = DISABLED
Mon Jan 22 11:57:35 2018 us=915952   pkcs11_pin_cache_period = -1
Mon Jan 22 11:57:35 2018 us=915962   pkcs11_id = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=915971   pkcs11_id_management = DISABLED
Mon Jan 22 11:57:35 2018 us=915983   server_network = 0.0.0.0
Mon Jan 22 11:57:35 2018 us=915993   server_netmask = 0.0.0.0
Mon Jan 22 11:57:35 2018 us=916005   server_network_ipv6 = ::
Mon Jan 22 11:57:35 2018 us=916015   server_netbits_ipv6 = 0
Mon Jan 22 11:57:35 2018 us=916025   server_bridge_ip = 192.168.1.2
Mon Jan 22 11:57:35 2018 us=916036   server_bridge_netmask = 255.255.255.0
Mon Jan 22 11:57:35 2018 us=916046   server_bridge_pool_start = 192.168.1.230
Mon Jan 22 11:57:35 2018 us=916057   server_bridge_pool_end = 192.168.1.240
Mon Jan 22 11:57:35 2018 us=916067   push_entry = 'route 192.168.1.0 255.255.255.0'
Mon Jan 22 11:57:35 2018 us=916076   push_entry = 'redirect-gateway def1 bypass-dhcp'
Mon Jan 22 11:57:35 2018 us=916086   push_entry = 'dhcp-option DNS 192.168.1.1'
Mon Jan 22 11:57:35 2018 us=916095   push_entry = 'dhcp-option DNS 8.8.8.8'
Mon Jan 22 11:57:35 2018 us=916105   push_entry = 'route-gateway 192.168.1.2'
Mon Jan 22 11:57:35 2018 us=916114   push_entry = 'ping 10'
Mon Jan 22 11:57:35 2018 us=916123   push_entry = 'ping-restart 120'
Mon Jan 22 11:57:35 2018 us=916133   ifconfig_pool_defined = ENABLED
Mon Jan 22 11:57:35 2018 us=916143   ifconfig_pool_start = 192.168.1.230
Mon Jan 22 11:57:35 2018 us=916153   ifconfig_pool_end = 192.168.1.240
Mon Jan 22 11:57:35 2018 us=916163   ifconfig_pool_netmask = 255.255.255.0
Mon Jan 22 11:57:35 2018 us=916173   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916182   ifconfig_pool_persist_refresh_freq = 600
Mon Jan 22 11:57:35 2018 us=916192   ifconfig_ipv6_pool_defined = DISABLED
Mon Jan 22 11:57:35 2018 us=916202   ifconfig_ipv6_pool_base = ::
Mon Jan 22 11:57:35 2018 us=916211   ifconfig_ipv6_pool_netbits = 0
Mon Jan 22 11:57:35 2018 us=916221   n_bcast_buf = 256
Mon Jan 22 11:57:35 2018 us=916230   tcp_queue_limit = 64
Mon Jan 22 11:57:35 2018 us=916239   real_hash_size = 256
Mon Jan 22 11:57:35 2018 us=916249   virtual_hash_size = 256
Mon Jan 22 11:57:35 2018 us=916258   client_connect_script = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916272   learn_address_script = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916282   client_disconnect_script = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916291   client_config_dir = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916300   ccd_exclusive = DISABLED
Mon Jan 22 11:57:35 2018 us=916310   tmp_dir = '/tmp'
Mon Jan 22 11:57:35 2018 us=916319   push_ifconfig_defined = DISABLED
Mon Jan 22 11:57:35 2018 us=916329   push_ifconfig_local = 0.0.0.0
Mon Jan 22 11:57:35 2018 us=916339   push_ifconfig_remote_netmask = 0.0.0.0
Mon Jan 22 11:57:35 2018 us=916349   push_ifconfig_ipv6_defined = DISABLED
Mon Jan 22 11:57:35 2018 us=916359   push_ifconfig_ipv6_local = ::/0
Mon Jan 22 11:57:35 2018 us=916369   push_ifconfig_ipv6_remote = ::
Mon Jan 22 11:57:35 2018 us=916379   enable_c2c = ENABLED
Mon Jan 22 11:57:35 2018 us=916388   duplicate_cn = DISABLED
Mon Jan 22 11:57:35 2018 us=916397   cf_max = 0
Mon Jan 22 11:57:35 2018 us=916406   cf_per = 0
Mon Jan 22 11:57:35 2018 us=916416   max_clients = 1024
Mon Jan 22 11:57:35 2018 us=916425   max_routes_per_client = 256
Mon Jan 22 11:57:35 2018 us=916435   auth_user_pass_verify_script = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916444   auth_user_pass_verify_script_via_file = DISABLED
Mon Jan 22 11:57:35 2018 us=916453   port_share_host = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916462   port_share_port = 0
Mon Jan 22 11:57:35 2018 us=916472   client = DISABLED
Mon Jan 22 11:57:35 2018 us=916481   pull = DISABLED
Mon Jan 22 11:57:35 2018 us=916490   auth_user_pass_file = '[UNDEF]'
Mon Jan 22 11:57:35 2018 us=916501 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017
Mon Jan 22 11:57:35 2018 us=916519 library versions: OpenSSL 1.0.2g  1 Mar 2016, LZO 2.08
Mon Jan 22 11:57:35 2018 us=917393 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Mon Jan 22 11:57:35 2018 us=917695 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Mon Jan 22 11:57:35 2018 us=917721 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon Jan 22 11:57:35 2018 us=918107 Diffie-Hellman initialized with 2048 bit key
Mon Jan 22 11:57:35 2018 us=918539 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Mon Jan 22 11:57:35 2018 us=918578 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:57:35 2018 us=918590 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:57:35 2018 us=918606 TLS-Auth MTU parms [ L:1602 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Mon Jan 22 11:57:35 2018 us=918630 Socket Buffers: R=[212992->212992] S=[212992->212992]
Mon Jan 22 11:57:35 2018 us=923860 TUN/TAP device tap0 opened
Mon Jan 22 11:57:35 2018 us=923918 TUN/TAP TX queue length set to 100
Mon Jan 22 11:57:35 2018 us=923972 /etc/openvpn/up.sh br0 tap0 1500 1602   init
Mon Jan 22 11:57:35 2018 us=928913 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:143 ET:32 EL:3 AF:3/1 ]
Mon Jan 22 11:57:35 2018 us=929873 GID set to nogroup
Mon Jan 22 11:57:35 2018 us=929920 UID set to nobody
Mon Jan 22 11:57:35 2018 us=929936 UDPv4 link local (bound): [undef]
Mon Jan 22 11:57:35 2018 us=929945 UDPv4 link remote: [undef]
Mon Jan 22 11:57:35 2018 us=929959 MULTI: multi_init called, r=256 v=256
Mon Jan 22 11:57:35 2018 us=929998 IFCONFIG POOL: base=192.168.1.230 size=11, ipv6=0
Mon Jan 22 11:57:35 2018 us=930029 Initialization Sequence Completed
Mon Jan 22 11:58:45 2018 us=533710 MULTI: multi_create_instance called
Mon Jan 22 11:58:45 2018 us=533920 178.228.77.124:51886 Re-using SSL/TLS context
Mon Jan 22 11:58:45 2018 us=534011 178.228.77.124:51886 LZO compression initialized
Mon Jan 22 11:58:45 2018 us=534272 178.228.77.124:51886 Control Channel MTU parms [ L:1602 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Mon Jan 22 11:58:45 2018 us=534311 178.228.77.124:51886 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:143 ET:32 EL:3 AF:3/1 ]
Mon Jan 22 11:58:45 2018 us=534361 178.228.77.124:51886 Local Options String: 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA256,keysize 128,tls-auth,key-method 2,tls-server'
Mon Jan 22 11:58:45 2018 us=534386 178.228.77.124:51886 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA256,keysize 128,tls-auth,key-method 2,tls-client'
Mon Jan 22 11:58:45 2018 us=534433 178.228.77.124:51886 Local Options hash (VER=V4): 'bb71088a'
Mon Jan 22 11:58:45 2018 us=534475 178.228.77.124:51886 Expected Remote Options hash (VER=V4): '4c9b3649'
Mon Jan 22 11:58:45 2018 us=534545 178.228.77.124:51886 TLS: Initial packet from [AF_INET]178.228.77.124:51886, sid=343d7cff 8778b69f
Mon Jan 22 11:58:45 2018 us=719776 178.228.77.124:51886 VERIFY OK: depth=1, C=NL, ST=ZH, L=Delft, O=XXX, OU=BerkelaartMRT_ICT, CN=XXX CA, name=server, emailAddress=A@XXX.com
Mon Jan 22 11:58:45 2018 us=720375 178.228.77.124:51886 VERIFY OK: depth=0, C=NL, ST=ZH, L=Delft, O=XXX, OU=BerkelaartMRT_ICT, CN=client1, name=server, emailAddress=A@XXX.com
Mon Jan 22 11:58:45 2018 us=787737 178.228.77.124:51886 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Jan 22 11:58:45 2018 us=787807 178.228.77.124:51886 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:58:45 2018 us=787818 178.228.77.124:51886 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Jan 22 11:58:45 2018 us=787828 178.228.77.124:51886 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:58:45 2018 us=833078 178.228.77.124:51886 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Jan 22 11:58:45 2018 us=833219 178.228.77.124:51886 [client1] Peer Connection Initiated with [AF_INET]178.228.77.124:51886
Mon Jan 22 11:58:45 2018 us=833292 client1/178.228.77.124:51886 MULTI_sva: pool returned IPv4=192.168.1.230, IPv6=(Not enabled)
Mon Jan 22 11:58:47 2018 us=68039 client1/178.228.77.124:51886 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jan 22 11:58:47 2018 us=68171 client1/178.228.77.124:51886 send_push_reply(): safe_cap=940
Mon Jan 22 11:58:47 2018 us=68254 client1/178.228.77.124:51886 SENT CONTROL [client1]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.1.1,dhcp-option DNS 8.8.8.8,route-gateway 192.168.1.2,ping 10,ping-restart 120,ifconfig 192.168.1.230 255.255.255.0' (status=1)
Mon Jan 22 11:58:47 2018 us=156926 client1/178.228.77.124:51886 MULTI: Learn: 00:ff:7a:01:bd:8d -> client1/178.228.77.124:51886

Mon Jan 22 11:58:47 2018 us=599428 Current Parameter Settings:
Mon Jan 22 11:58:47 2018 us=599970   config = 'XXX.ovpn'
Mon Jan 22 11:58:47 2018 us=599970   mode = 0
Mon Jan 22 11:58:47 2018 us=599970   show_ciphers = DISABLED
Mon Jan 22 11:58:47 2018 us=599970   show_digests = DISABLED
Mon Jan 22 11:58:47 2018 us=599970   show_engines = DISABLED
Mon Jan 22 11:58:47 2018 us=599970   genkey = DISABLED
Mon Jan 22 11:58:47 2018 us=599970   key_pass_file = '[UNDEF]'
Mon Jan 22 11:58:47 2018 us=599970   show_tls_ciphers = DISABLED
Mon Jan 22 11:58:47 2018 us=599970   connect_retry_max = 0
Mon Jan 22 11:58:47 2018 us=599970 Connection profiles [0]:
Mon Jan 22 11:58:47 2018 us=600504   proto = udp
Mon Jan 22 11:58:47 2018 us=600504   local = '[UNDEF]'
Mon Jan 22 11:58:47 2018 us=600504   local_port = '[UNDEF]'
Mon Jan 22 11:58:47 2018 us=600504   remote = 'XXX.mooo.com'
Mon Jan 22 11:58:47 2018 us=600504   remote_port = '1194'
Mon Jan 22 11:58:47 2018 us=600504   remote_float = DISABLED
Mon Jan 22 11:58:47 2018 us=600504   bind_defined = DISABLED
Mon Jan 22 11:58:47 2018 us=600504   bind_local = DISABLED
Mon Jan 22 11:58:47 2018 us=600504   bind_ipv6_only = DISABLED
Mon Jan 22 11:58:47 2018 us=600504 NOTE: --mute triggered...
Mon Jan 22 11:58:47 2018 us=600504 271 variation(s) on previous 20 message(s) suppressed by --mute
Mon Jan 22 11:58:47 2018 us=600504 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jul 14 2017
Mon Jan 22 11:58:47 2018 us=600504 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Jan 22 11:58:47 2018 us=600504 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Mon Jan 22 11:58:47 2018 us=600932 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jan 22 11:58:47 2018 us=600932 Need hold release from management interface, waiting...
Mon Jan 22 11:58:48 2018 us=80125 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jan 22 11:58:48 2018 us=181042 MANAGEMENT: CMD 'state on'
Mon Jan 22 11:58:48 2018 us=181551 MANAGEMENT: CMD 'log all on'
Mon Jan 22 11:58:48 2018 us=235240 MANAGEMENT: CMD 'echo all on'
Mon Jan 22 11:58:48 2018 us=236743 MANAGEMENT: CMD 'hold off'
Mon Jan 22 11:58:48 2018 us=237746 MANAGEMENT: CMD 'hold release'
Mon Jan 22 11:58:48 2018 us=237746 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Mon Jan 22 11:58:48 2018 us=359068 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:58:48 2018 us=359068 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:58:48 2018 us=359068 LZO compression initializing
Mon Jan 22 11:58:48 2018 us=359068 Control Channel MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Mon Jan 22 11:58:48 2018 us=359068 MANAGEMENT: >STATE:1516618728,RESOLVE,,,,,,
Mon Jan 22 11:58:48 2018 us=586137 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Mon Jan 22 11:58:48 2018 us=586137 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA256,keysize 128,tls-auth,key-method 2,tls-client'
Mon Jan 22 11:58:48 2018 us=586137 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA256,keysize 128,tls-auth,key-method 2,tls-server'
Mon Jan 22 11:58:48 2018 us=586137 TCP/UDP: Preserving recently used remote address: [AF_INET]a.b.c.d:1194
Mon Jan 22 11:58:48 2018 us=586137 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jan 22 11:58:48 2018 us=586137 UDP link local: (not bound)
Mon Jan 22 11:58:48 2018 us=586137 UDP link remote: [AF_INET]a.b.c.d:1194
Mon Jan 22 11:58:48 2018 us=586695 MANAGEMENT: >STATE:1516618728,WAIT,,,,,,
Mon Jan 22 11:58:48 2018 us=639750 MANAGEMENT: >STATE:1516618728,AUTH,,,,,,
Mon Jan 22 11:58:48 2018 us=639750 TLS: Initial packet from [AF_INET]a.b.c.d:1194, sid=c287ff45 ecf552f6
Mon Jan 22 11:58:48 2018 us=745392 VERIFY OK: depth=1, C=NL, ST=ZH, L=Delft, O=XXX, OU=BerkelaartMRT_ICT, CN=XXX CA, name=server, emailAddress=A@XXX.com
Mon Jan 22 11:58:48 2018 us=745392 VERIFY OK: nsCertType=SERVER
Mon Jan 22 11:58:48 2018 us=745392 VERIFY OK: depth=0, C=NL, ST=ZH, L=Delft, O=XXX, OU=BerkelaartMRT_ICT, CN=server, name=server, emailAddress=A@XXX.com
Mon Jan 22 11:58:48 2018 us=894190 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Jan 22 11:58:48 2018 us=894190 [server] Peer Connection Initiated with [AF_INET]a.b.c.d:1194
Mon Jan 22 11:58:50 2018 us=106429 MANAGEMENT: >STATE:1516618730,GET_CONFIG,,,,,,
Mon Jan 22 11:58:50 2018 us=106429 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Jan 22 11:58:50 2018 us=176991 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.1.1,dhcp-option DNS 8.8.8.8,route-gateway 192.168.1.2,ping 10,ping-restart 120,ifconfig 192.168.1.230 255.255.255.0'
Mon Jan 22 11:58:50 2018 us=176991 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jan 22 11:58:50 2018 us=176991 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jan 22 11:58:50 2018 us=176991 OPTIONS IMPORT: route options modified
Mon Jan 22 11:58:50 2018 us=176991 OPTIONS IMPORT: route-related options modified
Mon Jan 22 11:58:50 2018 us=176991 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Jan 22 11:58:50 2018 us=176991 Data Channel MTU parms [ L:1602 D:1450 EF:70 EB:411 ET:32 EL:3 ]
Mon Jan 22 11:58:50 2018 us=176991 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Jan 22 11:58:50 2018 us=176991 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:58:50 2018 us=176991 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Jan 22 11:58:50 2018 us=176991 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jan 22 11:58:50 2018 us=176991 interactive service msg_channel=696
Mon Jan 22 11:58:50 2018 us=179524 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=12 HWADDR=3c:95:09:a0:18:b7
Mon Jan 22 11:58:50 2018 us=186995 open_tun
Mon Jan 22 11:58:50 2018 us=187544 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{7A01BD8D-771F-4A1C-8F50-458AF03353AB}.tap
Mon Jan 22 11:58:50 2018 us=188049 TAP-Windows Driver Version 9.21 
Mon Jan 22 11:58:50 2018 us=188049 TAP-Windows MTU=1500
Mon Jan 22 11:58:50 2018 us=189049 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.1.230/255.255.255.0 on interface {7A01BD8D-771F-4A1C-8F50-458AF03353AB} [DHCP-serv: 192.168.1.0, lease-time: 31536000]
Mon Jan 22 11:58:50 2018 us=189049 DHCP option string: 0608c0a8 01010808 0808
Mon Jan 22 11:58:50 2018 us=189503 Successful ARP Flush on interface [8] {7A01BD8D-771F-4A1C-8F50-458AF03353AB}
Mon Jan 22 11:58:50 2018 us=193512 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Mon Jan 22 11:58:50 2018 us=193512 MANAGEMENT: >STATE:1516618730,ASSIGN_IP,,192.168.1.230,,,,
Mon Jan 22 11:58:55 2018 us=10721 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Mon Jan 22 11:58:55 2018 us=11177 C:\WINDOWS\system32\route.exe ADD a.b.c.d MASK 255.255.255.255 192.168.43.1
Mon Jan 22 11:58:55 2018 us=17230 Route addition via service succeeded
Mon Jan 22 11:58:55 2018 us=17230 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.1.2
Mon Jan 22 11:58:55 2018 us=23212 Route addition via service succeeded
Mon Jan 22 11:58:55 2018 us=23212 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.1.2
Mon Jan 22 11:58:55 2018 us=27219 Route addition via service succeeded
Mon Jan 22 11:58:55 2018 us=27219 MANAGEMENT: >STATE:1516618735,ADD_ROUTES,,,,,,
Mon Jan 22 11:58:55 2018 us=27219 C:\WINDOWS\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 192.168.1.2
Mon Jan 22 11:58:55 2018 us=30732 Route addition via service succeeded
Mon Jan 22 11:58:55 2018 us=30732 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Jan 22 11:58:55 2018 us=30732 Initialization Sequence Completed
Mon Jan 22 11:58:55 2018 us=30732 MANAGEMENT: >STATE:1516618735,CONNECTED,SUCCESS,192.168.1.230,a.b.c.d,1194,,
Mon Jan 22 11:59:03 2018 us=503158 TCP/UDP: Closing socket
Mon Jan 22 11:59:03 2018 us=503158 C:\WINDOWS\system32\route.exe DELETE 192.168.1.0 MASK 255.255.255.0 192.168.1.2
Mon Jan 22 11:59:03 2018 us=505156 Route deletion via service succeeded
Mon Jan 22 11:59:03 2018 us=505156 C:\WINDOWS\system32\route.exe DELETE a.b.c.d MASK 255.255.255.255 192.168.43.1
Mon Jan 22 11:59:03 2018 us=506660 Route deletion via service succeeded
Mon Jan 22 11:59:03 2018 us=506660 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 192.168.1.2
Mon Jan 22 11:59:03 2018 us=508667 Route deletion via service succeeded
Mon Jan 22 11:59:03 2018 us=508667 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 192.168.1.2
Mon Jan 22 11:59:03 2018 us=510671 Route deletion via service succeeded
Mon Jan 22 11:59:03 2018 us=510671 Closing TUN/TAP interface
Mon Jan 22 11:59:03 2018 us=516686 TAP: DHCP address released
Mon Jan 22 11:59:03 2018 us=517187 SIGTERM[hard,] received, process exiting
Mon Jan 22 11:59:03 2018 us=517187 MANAGEMENT: >STATE:1516618743,EXITING,SIGTERM,,,,,

/etc/network/interfaces

auto lo
iface lo inet loopback

auto br0
iface br0 inet static
        address 192.168.1.2
        netmask 255.255.255.0
        gateway 192.168.1.1
        network 192.168.1.0
        broadcast 192.168.1.255
        bridge_ports eth0
        dns-nameservers 8.8.8.8 4.4.4.4

iface eth0 inet manual
        up ifconfig $IFACE 0.0.0.0 up
        up ip link set $IFACE promisc on
        down ip link set $IFACE promisc off
        down ifconfig $IFACE down

/etc/openvpn/up.sh

#!/bin/sh
BR=$1
DEV=$2
MTU=$3
/sbin/ifconfig $DEV mtu $MTU promisc up
/sbin/brctl addif $BR $DEV

/etc/openvpn/down.sh

#!/bin/sh
BR=$1
DEV=$2
/sbin/brctl delif $BR $DEV
/sbin/ifconfig $DEV down

TinCanTech

arminbmrt wrote server-bridge 192.168.1.2 255.255.255.0 192.168.1.230 192.168.1.240

The Manual wrote--server-bridge gateway netmask pool-start-IP pool-end-IP

arminbmrt

TinCanTech wrote
arminbmrt wrote server-bridge 192.168.1.2 255.255.255.0 192.168.1.230 192.168.1.240
The Manual wrote--server-bridge gateway netmask pool-start-IP pool-end-IP

Hi I changed the gateway address to 192.168.1.1 but it does not change anything.

I experimented a bit more and it also seems like I lose a lot of packets but not all. Connection to website are slow and unreliable.

Is there any data I can provide to help troubleshooting?

TinCanTech

As far as I can see openvpn is working normally.

Read this and see if there is anything you can add to your thread.

arminbmrt

I should be able to see the local devices. They seem to be able to send to the controller UI on the VPN but the other around does not work. This sound weird.

Operating system:

Linux server 4.4.0-109-generic #132-Ubuntu SMP Tue Jan 9 19:52:39 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Network setup:

br0       Link encap:Ethernet  HWaddr 2a:c7:6f:81:1b:d0
          inet addr:192.168.1.2  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::2c78:2eff:fe4d:d5e6/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:168676 errors:0 dropped:1 overruns:0 frame:0
          TX packets:171307 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:164624411 (164.6 MB)  TX bytes:164436173 (164.4 MB)

eth0      Link encap:Ethernet  HWaddr bc:5f:f4:01:8e:f6
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:243586 errors:0 dropped:0 overruns:0 frame:0
          TX packets:203717 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:268451779 (268.4 MB)  TX bytes:167326733 (167.3 MB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:43 errors:0 dropped:0 overruns:0 frame:0
          TX packets:43 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1
          RX bytes:4086 (4.0 KB)  TX bytes:4086 (4.0 KB)

tap0      Link encap:Ethernet  HWaddr 2a:c7:6f:81:1b:d0
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:31597 errors:0 dropped:0 overruns:0 frame:0
          TX packets:121209 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:2609435 (2.6 MB)  TX bytes:138962335 (138.9 MB)

Server route:

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.1.1     0.0.0.0         UG    0      0        0 br0
link-local      *               255.255.0.0     U     1000   0        0 br0
192.168.1.0     *               255.255.255.0   U     0      0        0 br0

Client:

Microsoft Windows [Version 10.0.16299.192]

Client route:

===========================================================================
Interface List
  5...98 29 a6 30 72 33 ......Realtek PCIe GBE Family Controller
  6...0a 00 27 00 00 06 ......VirtualBox Host-Only Ethernet Adapter
 15...3e 95 09 a0 18 b7 ......Microsoft Wi-Fi Direct Virtual Adapter
  8...00 ff 7a 01 bd 8d ......TAP-Windows Adapter V9
 11...00 ff 97 0b 1a 63 ......TAP-NordVPN Windows Adapter V9
 12...3c 95 09 a0 18 b7 ......Qualcomm Atheros QCA61x4A Wireless Network Adapter
 13...3c 95 09 a0 18 b8 ......Bluetooth Device (Personal Area Network)
  1...........................Software Loopback Interface 1
 14...00 00 00 00 00 00 00 e0 Microsoft Teredo Tunneling Adapter
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0   192.168.23.100    192.168.23.99     50
          0.0.0.0        128.0.0.0      192.168.1.1    192.168.1.230    291
   85.149.139.198  255.255.255.255   192.168.23.100    192.168.23.99    306
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    331
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    331
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    331
        128.0.0.0        128.0.0.0      192.168.1.1    192.168.1.230    291
      192.168.1.0    255.255.255.0         On-link     192.168.1.230    291
      192.168.1.0    255.255.255.0      192.168.1.1    192.168.1.230    291
    192.168.1.230  255.255.255.255         On-link     192.168.1.230    291
    192.168.1.255  255.255.255.255         On-link     192.168.1.230    291
     192.168.23.0    255.255.255.0         On-link     192.168.23.99    306
    192.168.23.99  255.255.255.255         On-link     192.168.23.99    306
   192.168.23.255  255.255.255.255         On-link     192.168.23.99    306
     192.168.56.0    255.255.255.0         On-link      192.168.56.1    281
     192.168.56.1  255.255.255.255         On-link      192.168.56.1    281
   192.168.56.255  255.255.255.255         On-link      192.168.56.1    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    331
        224.0.0.0        240.0.0.0         On-link      192.168.56.1    281
        224.0.0.0        240.0.0.0         On-link     192.168.23.99    306
        224.0.0.0        240.0.0.0         On-link     192.168.1.230    291
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    331
  255.255.255.255  255.255.255.255         On-link      192.168.56.1    281
  255.255.255.255  255.255.255.255         On-link     192.168.23.99    306
  255.255.255.255  255.255.255.255         On-link     192.168.1.230    291
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    331 ::1/128                  On-link
  6    281 fe80::/64                On-link
 12    306 fe80::/64                On-link
  8    291 fe80::/64                On-link
  6    281 fe80::657a:b8c3:dc1a:d266/128
                                    On-link
 12    306 fe80::d076:d29c:b23e:de5c/128
                                    On-link
  8    291 fe80::ec2b:beef:f97c:fe1e/128
                                    On-link
  1    331 ff00::/8                 On-link
  6    281 ff00::/8                 On-link
 12    306 ff00::/8                 On-link
  8    291 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

ordex

can you paste the output of 'brctl show' on the VPN server ?
Moreover, I think 'push "route 192.168.1.0 255.255.255.0"' is redundant, but not harmful.

arminbmrt

output of 'brctl show'

bridge name     bridge id               STP enabled     interfaces
br0             8000.2ac76f811bd0       no              eth0
                                                        tap0

arminbmrt

OK I tried it with an edgerouter with a known good working VPN. I place this behind the current router (fritz box) and I got similar connection problems. So I am guessing something is incorrect configured on the fritz box. I have found a solution which does not involve the fritz box. Thanks