cylon97
hello,
i have pfsense openvpn server working fully with client export utility to mac os viscosity application
same export utility for ios connects to vpn without internet access or network access such as a plex server
below is ios opevpn client log, hoping it might shed some light on this issue with some of you.
OpenVPN core 3.2 ios arm64 64-bit built on Feb 22 2018 12:39:28
2018-03-02 14:43:25 Frame=512/2048/512 mssfix-ctrl=1250
2018-03-02 14:43:25 UNUSED OPTIONS
0 [persist-tun]
1 [persist-key]
3 [ncp-ciphers] [AES-256-GCM:AES-128-GCM]
5 [tls-client]
8 [verify-x509-name] [openvpn server] [name]
2018-03-02 14:43:25 EVENT: RESOLVE
2018-03-02 14:43:25 Contacting [external isp provided ip]:443/TCP via TCP
2018-03-02 14:43:25 EVENT: WAIT
2018-03-02 14:43:25 Connecting to [dynamic dns]:443 (external isp provided ip) via TCPv4
2018-03-02 14:43:26 EVENT: CONNECTING
2018-03-02 14:43:26 Tunnel Options:V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client
2018-03-02 14:43:26 Creds: Username/Password
2018-03-02 14:43:26 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.2.9-0
IV_VER=3.2
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_LZO_STUB=1
IV_COMP_STUB=1
IV_COMP_STUBv2=1
2018-03-02 14:43:26 VERIFY OK : depth=1
cert. version : 3
serial number : 00
issuer name : deleted
subject name : deleted
issued on : 2018-02-28 16:14:32
expires on : 2028-02-26 16:14:32
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=true
key usage : Key Cert Sign, CRL Sign
2018-03-02 14:43:26 VERIFY OK : depth=0
cert. version : 3
serial number : 01
issuer name : deleted
subject name : deleted
issued on : 2018-02-28 16:14:32
expires on : 2028-02-26 16:14:32
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=false
cert. type : SSL Server
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication, ???
2018-03-02 14:43:27 SSL Handshake: TLSv1.2/TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
2018-03-02 14:43:27 Session is ACTIVE
2018-03-02 14:43:27 EVENT: GET_CONFIG
2018-03-02 14:43:27 Sending PUSH_REQUEST to server...
2018-03-02 14:43:27 OPTIONS:
0 [dhcp-option] [DNS] [10.0.8.1]
1 [dhcp-option] [DNS] [8.8.8.8]
2 [redirect-gateway] [def1]
3 [route] [10.11.12.0] [255.255.255.0]
4 [route-gateway] [10.0.8.1]
5 [topology] [subnet]
6 [ping] [10]
7 [ping-restart] [60]
8 [ifconfig] [10.0.8.2] [255.255.255.0]
9 [peer-id] [0]
10 [cipher] [AES-256-GCM]
2018-03-02 14:43:27 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: SHA256
compress: COMP_STUB
peer ID: 0
2018-03-02 14:43:27 EVENT: ASSIGN_IP
2018-03-02 14:43:27 NIP: preparing TUN network settings
2018-03-02 14:43:27 NIP: init TUN network settings with endpoint: isp provided ip
2018-03-02 14:43:27 NIP: adding IPv4 address to network settings 10.0.8.2/255.255.255.0
2018-03-02 14:43:27 NIP: adding (included) IPv4 route 10.0.8.0/24
2018-03-02 14:43:27 NIP: adding (included) IPv4 route 10.11.12.0/24
2018-03-02 14:43:27 NIP: redirecting all IPv4 traffic to TUN interface
2018-03-02 14:43:27 NIP: adding DNS 10.0.8.1
2018-03-02 14:43:27 NIP: adding DNS 8.8.8.8
2018-03-02 14:43:27 Connected via NetworkExtensionTUN
2018-03-02 14:43:27 LZO-ASYM init swap=0 asym=1
2018-03-02 14:43:27 Comp-stub init swap=1
2018-03-02 14:43:27 EVENT: CONNECTED client@ddns domain:443(isp provided ip) via /TCPv4 on NetworkExtensionTUN/10.0.8.2/ gw=[/]
