OpenVpnServer Test Route / TAP

peterpan

Hi All,

Thanks for taking a look. I've setup a openvpnserver on tomato advanced custom firmeware using the config below. When i'm trying to connect with the client config below it takes awhile and shows many TEST ROUTES but does go green. What isn't correct is 1. I can't see my lan and 2. Its not using my vpn internet connection for surfing.

TAP VPN - (have had simlair issues with TUN but wanted a bridged network hence TAP atm)

LAN 192.168.1.0 (DHCP Off the Router)
Gateway 192.168.1.1
VPN IP Range 192.168.1.0 (DHCP off the Router)

It looks to be a routing issues or DHCP no giving out DFGW but i'm not able to find the solution, your help is much appreciated as i'm sure its something simple.

Server config

Start with WAN = enabled
Interface Type = TAP
Bridge TAP with = LAN(br0)*
Protocol = TCP
Port = 443
Firewall = automatic
Authorization mode = TLS
Extra HMAC authorization (tls-auth) = disabled
client address poll = enabled DHCP
poll interval = 0
direct client to redriect internet traffic = enabled
respond to DNS = enable
advertise dns to client = enable
encryption cipher = AES-256-CBC
compression = Adaptive
TLS Renegotiation Time -1
Manage client-specific option = disabled
Allow user/pass auth = enabled
custom config = empty

Client config

client
dev tap
dev-node tap0
proto tcp
remote x.x.x.x 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Computer.crt
key Computer.key
remote-cert-tls server
cipher AES-256-CBC
verb 4
auth-user-pass
tun-mtu 1500

Client error log

Mon Mar 26 01:31:51 2018 us=206299 Current Parameter Settings:
Mon Mar 26 01:31:51 2018 us=206299 config = 'client.ovpn'
Mon Mar 26 01:31:51 2018 us=206299 mode = 0
Mon Mar 26 01:31:51 2018 us=206299 show_ciphers = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 show_digests = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 show_engines = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 genkey = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 key_pass_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 show_tls_ciphers = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 connect_retry_max = 0
Mon Mar 26 01:31:51 2018 us=206299 Connection profiles [0]:
Mon Mar 26 01:31:51 2018 us=206299 proto = tcp-client
Mon Mar 26 01:31:51 2018 us=206299 local = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 local_port = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 remote = 'x.x.x.x'
Mon Mar 26 01:31:51 2018 us=206299 remote_port = '443'
Mon Mar 26 01:31:51 2018 us=206299 remote_float = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 bind_defined = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 bind_local = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 bind_ipv6_only = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 connect_retry_seconds = 5
Mon Mar 26 01:31:51 2018 us=206299 connect_timeout = 120
Mon Mar 26 01:31:51 2018 us=206299 socks_proxy_server = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 socks_proxy_port = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 tun_mtu = 1500
Mon Mar 26 01:31:51 2018 us=206299 tun_mtu_defined = ENABLED
Mon Mar 26 01:31:51 2018 us=206299 link_mtu = 1500
Mon Mar 26 01:31:51 2018 us=206299 link_mtu_defined = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 tun_mtu_extra = 32
Mon Mar 26 01:31:51 2018 us=206299 tun_mtu_extra_defined = ENABLED
Mon Mar 26 01:31:51 2018 us=206299 mtu_discover_type = -1
Mon Mar 26 01:31:51 2018 us=206299 fragment = 0
Mon Mar 26 01:31:51 2018 us=206299 mssfix = 1450
Mon Mar 26 01:31:51 2018 us=206299 explicit_exit_notification = 0
Mon Mar 26 01:31:51 2018 us=206299 Connection profiles END
Mon Mar 26 01:31:51 2018 us=206299 remote_random = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 ipchange = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 dev = 'tap'
Mon Mar 26 01:31:51 2018 us=206299 dev_type = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 dev_node = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 lladdr = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 topology = 1
Mon Mar 26 01:31:51 2018 us=206299 ifconfig_local = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 ifconfig_remote_netmask = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 ifconfig_noexec = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 ifconfig_nowarn = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 ifconfig_ipv6_local = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 ifconfig_ipv6_netbits = 0
Mon Mar 26 01:31:51 2018 us=206299 ifconfig_ipv6_remote = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 shaper = 0
Mon Mar 26 01:31:51 2018 us=206299 mtu_test = 0
Mon Mar 26 01:31:51 2018 us=206299 mlock = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 keepalive_ping = 0
Mon Mar 26 01:31:51 2018 us=206299 keepalive_timeout = 0
Mon Mar 26 01:31:51 2018 us=206299 inactivity_timeout = 0
Mon Mar 26 01:31:51 2018 us=206299 ping_send_timeout = 0
Mon Mar 26 01:31:51 2018 us=206299 ping_rec_timeout = 0
Mon Mar 26 01:31:51 2018 us=206299 ping_rec_timeout_action = 0
Mon Mar 26 01:31:51 2018 us=206299 ping_timer_remote = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 remap_sigusr1 = 0
Mon Mar 26 01:31:51 2018 us=206299 persist_tun = ENABLED
Mon Mar 26 01:31:51 2018 us=206299 persist_local_ip = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 persist_remote_ip = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 persist_key = ENABLED
Mon Mar 26 01:31:51 2018 us=206299 passtos = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 resolve_retry_seconds = 1000000000
Mon Mar 26 01:31:51 2018 us=206299 resolve_in_advance = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 username = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 groupname = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 chroot_dir = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 cd_dir = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 writepid = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 up_script = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 down_script = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 down_pre = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 up_restart = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 up_delay = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 daemon = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 inetd = 0
Mon Mar 26 01:31:51 2018 us=206299 log = ENABLED
Mon Mar 26 01:31:51 2018 us=206299 suppress_timestamps = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 machine_readable_output = DISABLED
Mon Mar 26 01:31:51 2018 us=206299 nice = 0
Mon Mar 26 01:31:51 2018 us=206299 verbosity = 4
Mon Mar 26 01:31:51 2018 us=206299 mute = 0
Mon Mar 26 01:31:51 2018 us=206299 gremlin = 0
Mon Mar 26 01:31:51 2018 us=206299 status_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=206299 status_file_version = 1
Mon Mar 26 01:31:51 2018 us=207301 status_file_update_freq = 60
Mon Mar 26 01:31:51 2018 us=207301 occ = ENABLED
Mon Mar 26 01:31:51 2018 us=207301 rcvbuf = 0
Mon Mar 26 01:31:51 2018 us=207301 sndbuf = 0
Mon Mar 26 01:31:51 2018 us=207301 sockflags = 0
Mon Mar 26 01:31:51 2018 us=207301 fast_io = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 comp.alg = 0
Mon Mar 26 01:31:51 2018 us=207301 comp.flags = 0
Mon Mar 26 01:31:51 2018 us=207301 route_script = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 route_default_gateway = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 route_default_metric = 0
Mon Mar 26 01:31:51 2018 us=207301 route_noexec = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 route_delay = 5
Mon Mar 26 01:31:51 2018 us=207301 route_delay_window = 30
Mon Mar 26 01:31:51 2018 us=207301 route_delay_defined = ENABLED
Mon Mar 26 01:31:51 2018 us=207301 route_nopull = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 route_gateway_via_dhcp = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 allow_pull_fqdn = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 management_addr = '127.0.0.1'
Mon Mar 26 01:31:51 2018 us=207301 management_port = '25340'
Mon Mar 26 01:31:51 2018 us=207301 management_user_pass = 'stdin'
Mon Mar 26 01:31:51 2018 us=207301 management_log_history_cache = 250
Mon Mar 26 01:31:51 2018 us=207301 management_echo_buffer_size = 100
Mon Mar 26 01:31:51 2018 us=207301 management_write_peer_info_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 management_client_user = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 management_client_group = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 management_flags = 6
Mon Mar 26 01:31:51 2018 us=207301 shared_secret_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 key_direction = not set
Mon Mar 26 01:31:51 2018 us=207301 ciphername = 'AES-256-CBC'
Mon Mar 26 01:31:51 2018 us=207301 ncp_enabled = ENABLED
Mon Mar 26 01:31:51 2018 us=207301 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Mon Mar 26 01:31:51 2018 us=207301 authname = 'SHA1'
Mon Mar 26 01:31:51 2018 us=207301 prng_hash = 'SHA1'
Mon Mar 26 01:31:51 2018 us=207301 prng_nonce_secret_len = 16
Mon Mar 26 01:31:51 2018 us=207301 keysize = 0
Mon Mar 26 01:31:51 2018 us=207301 engine = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 replay = ENABLED
Mon Mar 26 01:31:51 2018 us=207301 mute_replay_warnings = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 replay_window = 64
Mon Mar 26 01:31:51 2018 us=207301 replay_time = 15
Mon Mar 26 01:31:51 2018 us=207301 packet_id_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 use_iv = ENABLED
Mon Mar 26 01:31:51 2018 us=207301 test_crypto = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 tls_server = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 tls_client = ENABLED
Mon Mar 26 01:31:51 2018 us=207301 key_method = 2
Mon Mar 26 01:31:51 2018 us=207301 ca_file = 'ca.crt'
Mon Mar 26 01:31:51 2018 us=207301 ca_path = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 dh_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 cert_file = 'BobsComputer.crt'
Mon Mar 26 01:31:51 2018 us=207301 extra_certs_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 priv_key_file = 'BobsComputer.key'
Mon Mar 26 01:31:51 2018 us=207301 pkcs12_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 cryptoapi_cert = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 cipher_list = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 tls_cert_profile = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 tls_verify = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 tls_export_cert = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 verify_x509_type = 0
Mon Mar 26 01:31:51 2018 us=207301 verify_x509_name = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 crl_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 ns_cert_type = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 65535
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku[i] = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku[i] = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku[i] = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku[i] = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku[i] = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_ku[i] = 0
Mon Mar 26 01:31:51 2018 us=207301 remote_cert_eku = 'TLS Web Server Authentication'
Mon Mar 26 01:31:51 2018 us=207301 ssl_flags = 0
Mon Mar 26 01:31:51 2018 us=207301 tls_timeout = 2
Mon Mar 26 01:31:51 2018 us=207301 renegotiate_bytes = -1
Mon Mar 26 01:31:51 2018 us=207301 renegotiate_packets = 0
Mon Mar 26 01:31:51 2018 us=207301 renegotiate_seconds = 3600
Mon Mar 26 01:31:51 2018 us=207301 handshake_window = 60
Mon Mar 26 01:31:51 2018 us=207301 transition_window = 3600
Mon Mar 26 01:31:51 2018 us=207301 single_session = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 push_peer_info = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 tls_exit = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 tls_auth_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 tls_crypt_file = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_protected_authentication = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_private_mode = 00000000
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_cert_private = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_pin_cache_period = -1
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_id = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=207301 pkcs11_id_management = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 server_network = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=207301 server_netmask = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=207301 server_network_ipv6 = ::
Mon Mar 26 01:31:51 2018 us=207301 server_netbits_ipv6 = 0
Mon Mar 26 01:31:51 2018 us=207301 server_bridge_ip = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=207301 server_bridge_netmask = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=207301 server_bridge_pool_start = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=207301 server_bridge_pool_end = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=207301 ifconfig_pool_defined = DISABLED
Mon Mar 26 01:31:51 2018 us=207301 ifconfig_pool_start = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=208301 ifconfig_pool_end = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=208301 ifconfig_pool_netmask = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=208301 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 ifconfig_pool_persist_refresh_freq = 600
Mon Mar 26 01:31:51 2018 us=208301 ifconfig_ipv6_pool_defined = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 ifconfig_ipv6_pool_base = ::
Mon Mar 26 01:31:51 2018 us=208301 ifconfig_ipv6_pool_netbits = 0
Mon Mar 26 01:31:51 2018 us=208301 n_bcast_buf = 256
Mon Mar 26 01:31:51 2018 us=208301 tcp_queue_limit = 64
Mon Mar 26 01:31:51 2018 us=208301 real_hash_size = 256
Mon Mar 26 01:31:51 2018 us=208301 virtual_hash_size = 256
Mon Mar 26 01:31:51 2018 us=208301 client_connect_script = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 learn_address_script = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 client_disconnect_script = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 client_config_dir = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 ccd_exclusive = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 tmp_dir = 'C:\Users\Rob\AppData\Local\Temp\'
Mon Mar 26 01:31:51 2018 us=208301 push_ifconfig_defined = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 push_ifconfig_local = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=208301 push_ifconfig_remote_netmask = 0.0.0.0
Mon Mar 26 01:31:51 2018 us=208301 push_ifconfig_ipv6_defined = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 push_ifconfig_ipv6_local = ::/0
Mon Mar 26 01:31:51 2018 us=208301 push_ifconfig_ipv6_remote = ::
Mon Mar 26 01:31:51 2018 us=208301 enable_c2c = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 duplicate_cn = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 cf_max = 0
Mon Mar 26 01:31:51 2018 us=208301 cf_per = 0
Mon Mar 26 01:31:51 2018 us=208301 max_clients = 1024
Mon Mar 26 01:31:51 2018 us=208301 max_routes_per_client = 256
Mon Mar 26 01:31:51 2018 us=208301 auth_user_pass_verify_script = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 auth_user_pass_verify_script_via_file = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 auth_token_generate = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 auth_token_lifetime = 0
Mon Mar 26 01:31:51 2018 us=208301 client = ENABLED
Mon Mar 26 01:31:51 2018 us=208301 pull = ENABLED
Mon Mar 26 01:31:51 2018 us=208301 auth_user_pass_file = 'stdin'
Mon Mar 26 01:31:51 2018 us=208301 show_net_up = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 route_method = 3
Mon Mar 26 01:31:51 2018 us=208301 block_outside_dns = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 ip_win32_defined = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 ip_win32_type = 3
Mon Mar 26 01:31:51 2018 us=208301 dhcp_masq_offset = 0
Mon Mar 26 01:31:51 2018 us=208301 dhcp_lease_time = 31536000
Mon Mar 26 01:31:51 2018 us=208301 tap_sleep = 0
Mon Mar 26 01:31:51 2018 us=208301 dhcp_options = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 dhcp_renew = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 dhcp_pre_release = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 domain = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 netbios_scope = '[UNDEF]'
Mon Mar 26 01:31:51 2018 us=208301 netbios_node_type = 0
Mon Mar 26 01:31:51 2018 us=208301 disable_nbt = DISABLED
Mon Mar 26 01:31:51 2018 us=208301 OpenVPN 2.4.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 1 2018
Mon Mar 26 01:31:51 2018 us=208301 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Mar 26 01:31:51 2018 us=208301 library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.10
Enter Management Password:
Mon Mar 26 01:31:51 2018 us=209303 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Mar 26 01:31:51 2018 us=209303 Need hold release from management interface, waiting...
Mon Mar 26 01:31:51 2018 us=684250 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Mar 26 01:31:51 2018 us=785257 MANAGEMENT: CMD 'state on'
Mon Mar 26 01:31:51 2018 us=785257 MANAGEMENT: CMD 'log all on'
Mon Mar 26 01:31:51 2018 us=911346 MANAGEMENT: CMD 'echo all on'
Mon Mar 26 01:31:51 2018 us=913348 MANAGEMENT: CMD 'bytecount 5'
Mon Mar 26 01:31:51 2018 us=915349 MANAGEMENT: CMD 'hold off'
Mon Mar 26 01:31:51 2018 us=916351 MANAGEMENT: CMD 'hold release'
Mon Mar 26 01:31:56 2018 us=953336 MANAGEMENT: CMD 'username "Auth" "Rob"'
Mon Mar 26 01:31:56 2018 us=959342 MANAGEMENT: CMD 'password [...]'
Mon Mar 26 01:31:56 2018 us=961344 Control Channel MTU parms [ L:1655 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Mon Mar 26 01:31:56 2018 us=961844 Data Channel MTU parms [ L:1655 D:1450 EF:123 EB:411 ET:32 EL:3 ]
Mon Mar 26 01:31:56 2018 us=961844 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1591,tun-mtu 1532,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Mar 26 01:31:56 2018 us=961844 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1591,tun-mtu 1532,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Mar 26 01:31:56 2018 us=961844 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:443
Mon Mar 26 01:31:56 2018 us=961844 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Mar 26 01:31:56 2018 us=961844 Attempting to establish TCP connection with [AF_INET]x.x.x.x:443 [nonblock]
Mon Mar 26 01:31:56 2018 us=961844 MANAGEMENT: >STATE:1522024316,TCP_CONNECT,,,,,,
Mon Mar 26 01:31:57 2018 us=962364 TCP connection established with [AF_INET]x.x.x.x:443
Mon Mar 26 01:31:57 2018 us=962364 TCP_CLIENT link local: (not bound)
Mon Mar 26 01:31:57 2018 us=962364 TCP_CLIENT link remote: [AF_INET]x.x.x.x:443
Mon Mar 26 01:31:57 2018 us=962364 MANAGEMENT: >STATE:1522024317,WAIT,,,,,,
Mon Mar 26 01:31:58 2018 us=26411 MANAGEMENT: >STATE:1522024318,AUTH,,,,,,
Mon Mar 26 01:31:58 2018 us=26411 TLS: Initial packet from [AF_INET]x.x.x.x:443, sid=c11cc31c c846ba87
Mon Mar 26 01:31:58 2018 us=27412 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Mar 26 01:31:58 2018 us=437298 VERIFY OK: depth=1, C=UK, ST=MA, L=Manchester, O=OpenVPN, OU=BOB, CN=BobServer, name=Bob, emailAddress=Me@me.com
Mon Mar 26 01:31:58 2018 us=437298 VERIFY KU OK
Mon Mar 26 01:31:58 2018 us=437298 Validating certificate extended key usage
Mon Mar 26 01:31:58 2018 us=437298 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Mar 26 01:31:58 2018 us=437298 VERIFY EKU OK
Mon Mar 26 01:31:58 2018 us=437298 VERIFY OK: depth=0, C=UK, ST=MA, L=Manchester, O=OpenVPN, OU=changeme, CN=OpenVPNServer, name=Bob, emailAddress=Me@me.com
Mon Mar 26 01:31:58 2018 us=620254 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1591', remote='link-mtu 1592'
Mon Mar 26 01:31:58 2018 us=621255 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Mon Mar 26 01:31:58 2018 us=621255 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Mon Mar 26 01:31:58 2018 us=621255 [OpenVPNServer] Peer Connection Initiated with [AF_INET]x.x.x.x:443
Mon Mar 26 01:31:59 2018 us=783740 MANAGEMENT: >STATE:1522024319,GET_CONFIG,,,,,,
Mon Mar 26 01:31:59 2018 us=783740 SENT CONTROL [OpenVPNServer]: 'PUSH_REQUEST' (status=1)
Mon Mar 26 01:31:59 2018 us=915877 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.1.1,route-gateway 192.168.1.1,redirect-gateway def1,route-gateway dhcp,ping 15,ping-restart 60,peer-id 0,cipher AES-256-GCM'
Mon Mar 26 01:31:59 2018 us=915877 OPTIONS IMPORT: timers and/or timeouts modified
Mon Mar 26 01:31:59 2018 us=915877 OPTIONS IMPORT: route options modified
Mon Mar 26 01:31:59 2018 us=915877 OPTIONS IMPORT: route-related options modified
Mon Mar 26 01:31:59 2018 us=915877 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Mar 26 01:31:59 2018 us=915877 OPTIONS IMPORT: peer-id set
Mon Mar 26 01:31:59 2018 us=915877 OPTIONS IMPORT: adjusting link_mtu to 1658
Mon Mar 26 01:31:59 2018 us=915877 OPTIONS IMPORT: data channel crypto options modified
Mon Mar 26 01:31:59 2018 us=915877 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon Mar 26 01:31:59 2018 us=915877 Data Channel MTU parms [ L:1586 D:1450 EF:54 EB:411 ET:32 EL:3 ]
Mon Mar 26 01:31:59 2018 us=915877 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Mar 26 01:31:59 2018 us=915877 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Mar 26 01:31:59 2018 us=915877 interactive service msg_channel=968
Mon Mar 26 01:31:59 2018 us=918881 ROUTE_GATEWAY 172.20.10.1/255.255.255.240 I=17 HWADDR=42:9c:28:e8:8f:04
Mon Mar 26 01:31:59 2018 us=925887 open_tun
Mon Mar 26 01:31:59 2018 us=926888 TAP-WIN32 device [Ethernet 4] opened: \\.\Global\{8A31F4BC-A34C-4CC0-B162-75ECFFD05A20}.tap
Mon Mar 26 01:31:59 2018 us=926888 TAP-Windows Driver Version 9.21
Mon Mar 26 01:31:59 2018 us=926888 TAP-Windows MTU=1500
Mon Mar 26 01:31:59 2018 us=926888 Successful ARP Flush on interface [11] {8A31F4BC-A34C-4CC0-B162-75ECFFD05A20}
Mon Mar 26 01:32:04 2018 us=128245 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:04 2018 us=128245 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:09 2018 us=6700 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:09 2018 us=6700 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:10 2018 us=4315 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:10 2018 us=4315 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:11 2018 us=128247 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:11 2018 us=128247 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:12 2018 us=130276 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:12 2018 us=130276 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:13 2018 us=14221 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:13 2018 us=14221 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:14 2018 us=472282 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:14 2018 us=472282 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:15 2018 us=143253 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:15 2018 us=143253 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:16 2018 us=129234 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:16 2018 us=129234 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:17 2018 us=265268 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:17 2018 us=265268 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:18 2018 us=157271 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:18 2018 us=157271 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:19 2018 us=127242 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:19 2018 us=127242 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:20 2018 us=157270 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:20 2018 us=157270 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:21 2018 us=192330 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:21 2018 us=192330 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:22 2018 us=131251 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:22 2018 us=131251 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:23 2018 us=38263 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:23 2018 us=38263 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:24 2018 us=263268 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:24 2018 us=263268 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:25 2018 us=279288 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:25 2018 us=279288 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:26 2018 us=239243 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:26 2018 us=239243 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:27 2018 us=200711 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:27 2018 us=200711 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:28 2018 us=159604 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:28 2018 us=159604 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:29 2018 us=131571 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:29 2018 us=131571 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:30 2018 us=400713 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:30 2018 us=400713 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:31 2018 us=360276 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:31 2018 us=360276 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:32 2018 us=391295 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:32 2018 us=391295 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:33 2018 us=323243 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:33 2018 us=323243 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 01:32:34 2018 us=134856 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
Mon Mar 26 01:32:34 2018 us=134856 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 172.20.10.1
Mon Mar 26 01:32:34 2018 us=135857 Route addition via service succeeded
Mon Mar 26 01:32:34 2018 us=136858 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.1.1
Mon Mar 26 01:32:34 2018 us=137859 Warning: route gateway is not reachable on any active network adapters: 192.168.1.1
Mon Mar 26 01:32:34 2018 us=137859 Route addition via service failed
Mon Mar 26 01:32:34 2018 us=137859 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.1.1
Mon Mar 26 01:32:34 2018 us=138860 Warning: route gateway is not reachable on any active network adapters: 192.168.1.1
Mon Mar 26 01:32:34 2018 us=138860 Route addition via service failed
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 172.20.10.1 p=0 i=17 t=4 pr=3 a=151 h=0 m=35/0/0/0/0
x.x.x.x 255.255.255.255 172.20.10.1 p=0 i=17 t=4 pr=3 a=0 h=0 m=291/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=3456 h=0 m=331/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=3456 h=0 m=331/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=3456 h=0 m=331/0/0/0/0
169.254.0.0 255.255.0.0 169.254.255.226 p=0 i=11 t=3 pr=2 a=102 h=0 m=291/0/0/0/0
169.254.255.226 255.255.255.255 169.254.255.226 p=0 i=11 t=3 pr=2 a=102 h=0 m=291/0/0/0/0
169.254.255.255 255.255.255.255 169.254.255.226 p=0 i=11 t=3 pr=2 a=102 h=0 m=291/0/0/0/0
172.20.10.0 255.255.255.240 172.20.10.2 p=0 i=17 t=3 pr=2 a=151 h=0 m=291/0/0/0/0
172.20.10.2 255.255.255.255 172.20.10.2 p=0 i=17 t=3 pr=2 a=151 h=0 m=291/0/0/0/0
172.20.10.15 255.255.255.255 172.20.10.2 p=0 i=17 t=3 pr=2 a=151 h=0 m=291/0/0/0/0
192.168.161.0 255.255.255.0 192.168.161.1 p=0 i=18 t=3 pr=2 a=3448 h=0 m=291/0/0/0/0
192.168.161.1 255.255.255.255 192.168.161.1 p=0 i=18 t=3 pr=2 a=3448 h=0 m=291/0/0/0/0
192.168.161.255 255.255.255.255 192.168.161.1 p=0 i=18 t=3 pr=2 a=3448 h=0 m=291/0/0/0/0
192.168.241.0 255.255.255.0 192.168.241.1 p=0 i=9 t=3 pr=2 a=3447 h=0 m=291/0/0/0/0
192.168.241.1 255.255.255.255 192.168.241.1 p=0 i=9 t=3 pr=2 a=3447 h=0 m=291/0/0/0/0
192.168.241.255 255.255.255.255 192.168.241.1 p=0 i=9 t=3 pr=2 a=3447 h=0 m=291/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=3456 h=0 m=331/0/0/0/0
224.0.0.0 240.0.0.0 192.168.241.1 p=0 i=9 t=3 pr=2 a=3454 h=0 m=291/0/0/0/0
224.0.0.0 240.0.0.0 192.168.161.1 p=0 i=18 t=3 pr=2 a=3454 h=0 m=291/0/0/0/0
224.0.0.0 240.0.0.0 169.254.255.226 p=0 i=11 t=3 pr=2 a=789 h=0 m=291/0/0/0/0
224.0.0.0 240.0.0.0 172.20.10.2 p=0 i=17 t=3 pr=2 a=155 h=0 m=291/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=3456 h=0 m=331/0/0/0/0
255.255.255.255 255.255.255.255 192.168.241.1 p=0 i=9 t=3 pr=2 a=3454 h=0 m=291/0/0/0/0
255.255.255.255 255.255.255.255 192.168.161.1 p=0 i=18 t=3 pr=2 a=3454 h=0 m=291/0/0/0/0
255.255.255.255 255.255.255.255 169.254.255.226 p=0 i=11 t=3 pr=2 a=789 h=0 m=291/0/0/0/0
255.255.255.255 255.255.255.255 172.20.10.2 p=0 i=17 t=3 pr=2 a=155 h=0 m=291/0/0/0/0
SYSTEM ADAPTER LIST
IPVanish Adapter
Index = 6
GUID = {503B2BB4-DCC9-4EE4-94BD-FA20DF96680D}
IP = 0.0.0.0/0.0.0.0
MAC = 00:ff:50:3b:2b:b4
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV =
DHCP LEASE OBTAINED = Mon Mar 26 01:32:34 2018
DHCP LEASE EXPIRES = Mon Mar 26 01:32:34 2018
DNS SERV =
VMware Virtual Ethernet Adapter for VMnet1
Index = 9
GUID = {5A384732-5F10-4FA2-9085-66893BD4B09C}
IP = 192.168.241.1/255.255.255.0
MAC = 00:50:56:c0:00:01
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV = 192.168.241.254/255.255.255.255
DHCP LEASE OBTAINED = Mon Mar 26 01:27:35 2018
DHCP LEASE EXPIRES = Mon Mar 26 01:57:35 2018
DNS SERV =
VMware Virtual Ethernet Adapter for VMnet8
Index = 18
GUID = {C3E36A02-E747-41DE-AE27-3464C6518B20}
IP = 192.168.161.1/255.255.255.0
MAC = 00:50:56:c0:00:08
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV = 192.168.161.254/255.255.255.255
DHCP LEASE OBTAINED = Mon Mar 26 01:27:35 2018
DHCP LEASE EXPIRES = Mon Mar 26 01:57:35 2018
PRI WINS = 192.168.161.2/255.255.255.255
SEC WINS =
DNS SERV =
Apple Mobile Device Ethernet
Index = 17
GUID = {B94110CE-BA52-45F9-B2D6-408980F6BC45}
IP = 172.20.10.2/255.255.255.240
MAC = 42:9c:28:e8:8f:04
GATEWAY = 172.20.10.1/255.255.255.255
DHCP SERV = 172.20.10.1/255.255.255.255
DHCP LEASE OBTAINED = Mon Mar 26 01:30:02 2018
DHCP LEASE EXPIRES = Tue Mar 27 01:15:38 2018
DNS SERV = 172.20.10.1/255.255.255.255
TAP-Windows Adapter V9
Index = 11
GUID = {8A31F4BC-A34C-4CC0-B162-75ECFFD05A20}
IP = 169.254.255.226/255.255.0.0
MAC = 00:ff:8a:31:f4:bc
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV = 0.0.0.0/255.255.255.255
DHCP LEASE OBTAINED = Mon Mar 26 01:32:34 2018
DHCP LEASE EXPIRES = Mon Mar 26 01:32:34 2018
DNS SERV =
Mon Mar 26 01:32:34 2018 us=164278 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Mon Mar 26 01:32:34 2018 us=164278 MANAGEMENT: >STATE:1522024354,CONNECTED,ERROR,,x.x.x.x,443,172.20.10.2,55385
Mon Mar 26 01:34:00 2018 us=155732 Connection reset, restarting [0]
Mon Mar 26 01:34:00 2018 us=155732 TCP/UDP: Closing socket
Mon Mar 26 01:34:00 2018 us=155732 SIGUSR1[soft,connection-reset] received, process restarting
Mon Mar 26 01:34:00 2018 us=155732 MANAGEMENT: >STATE:1522024440,RECONNECTING,connection-reset,,,,,
Mon Mar 26 01:34:00 2018 us=156733 Restart pause, 5 second(s)
Mon Mar 26 01:34:05 2018 us=159278 Re-using SSL/TLS context
Mon Mar 26 01:34:05 2018 us=159278 Control Channel MTU parms [ L:1655 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Mon Mar 26 01:34:05 2018 us=159278 Data Channel MTU parms [ L:1655 D:1450 EF:123 EB:411 ET:32 EL:3 ]
Mon Mar 26 01:34:05 2018 us=159278 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1591,tun-mtu 1532,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Mar 26 01:34:05 2018 us=159278 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1591,tun-mtu 1532,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Mar 26 01:34:05 2018 us=159278 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:443
Mon Mar 26 01:34:05 2018 us=159278 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Mar 26 01:34:05 2018 us=159278 Attempting to establish TCP connection with [AF_INET]x.x.x.x:443 [nonblock]
Mon Mar 26 01:34:05 2018 us=159278 MANAGEMENT: >STATE:1522024445,TCP_CONNECT,,,,,,
Mon Mar 26 01:34:06 2018 us=160817 TCP connection established with [AF_INET]x.x.x.x:443
Mon Mar 26 01:34:06 2018 us=160817 TCP_CLIENT link local: (not bound)
Mon Mar 26 01:34:06 2018 us=160817 TCP_CLIENT link remote: [AF_INET]x.x.x.x:443
Mon Mar 26 01:34:06 2018 us=160817 MANAGEMENT: >STATE:1522024446,WAIT,,,,,,
Mon Mar 26 01:34:06 2018 us=226308 MANAGEMENT: >STATE:1522024446,AUTH,,,,,,
Mon Mar 26 01:34:06 2018 us=226308 TLS: Initial packet from [AF_INET]x.x.x.x:443, sid=622f0e6a 97551d39
Mon Mar 26 01:34:06 2018 us=642894 VERIFY OK: depth=1, C=UK, ST=MA, L=Manchester, O=OpenVPN, OU=BOB, CN=BobServer, name=Bob, emailAddress=Me@me.com
Mon Mar 26 01:34:06 2018 us=642894 VERIFY KU OK
Mon Mar 26 01:34:06 2018 us=642894 Validating certificate extended key usage
Mon Mar 26 01:34:06 2018 us=642894 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Mar 26 01:34:06 2018 us=642894 VERIFY EKU OK
Mon Mar 26 01:34:06 2018 us=642894 VERIFY OK: depth=0, C=UK, ST=MA, L=Manchester, O=OpenVPN, OU=changeme, CN=OpenVPNServer, name=Bob, emailAddress=Me@me.com
Mon Mar 26 01:34:06 2018 us=841614 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1591', remote='link-mtu 1592'
Mon Mar 26 01:34:06 2018 us=841614 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Mon Mar 26 01:34:06 2018 us=842614 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Mon Mar 26 01:34:06 2018 us=842614 [OpenVPNServer] Peer Connection Initiated with [AF_INET]x.x.x.x:443
Mon Mar 26 01:34:07 2018 us=522239 MANAGEMENT: >STATE:1522024447,GET_CONFIG,,,,,,
Mon Mar 26 01:34:07 2018 us=522239 SENT CONTROL [OpenVPNServer]: 'PUSH_REQUEST' (status=1)
Mon Mar 26 01:34:07 2018 us=645287 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.1.1,route-gateway 192.168.1.1,redirect-gateway def1,route-gateway dhcp,ping 15,ping-restart 60,peer-id 0,cipher AES-256-GCM'
Mon Mar 26 01:34:07 2018 us=645287 OPTIONS IMPORT: timers and/or timeouts modified
Mon Mar 26 01:34:07 2018 us=645287 OPTIONS IMPORT: route options modified
Mon Mar 26 01:34:07 2018 us=645287 OPTIONS IMPORT: route-related options modified
Mon Mar 26 01:34:07 2018 us=645287 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Mar 26 01:34:07 2018 us=645287 OPTIONS IMPORT: peer-id set
Mon Mar 26 01:34:07 2018 us=645287 OPTIONS IMPORT: adjusting link_mtu to 1658
Mon Mar 26 01:34:07 2018 us=645287 OPTIONS IMPORT: data channel crypto options modified
Mon Mar 26 01:34:07 2018 us=645287 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon Mar 26 01:34:07 2018 us=645287 Data Channel MTU parms [ L:1586 D:1450 EF:54 EB:411 ET:32 EL:3 ]
Mon Mar 26 01:34:07 2018 us=645287 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Mar 26 01:34:07 2018 us=645287 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Mar 26 01:34:07 2018 us=645287 Preserving previous TUN/TAP instance: Ethernet 4
Mon Mar 26 01:34:07 2018 us=646288 Initialization Sequence Completed
Mon Mar 26 01:34:07 2018 us=646288 MANAGEMENT: >STATE:1522024447,CONNECTED,SUCCESS,,x.x.x.x,443,172.20.10.2,55580
Mon Mar 26 01:36:06 2018 us=915235 Connection reset, restarting [0]
Mon Mar 26 01:36:06 2018 us=916236 TCP/UDP: Closing socket
Mon Mar 26 01:36:06 2018 us=916236 SIGUSR1[soft,connection-reset] received, process restarting
Mon Mar 26 01:36:06 2018 us=916236 MANAGEMENT: >STATE:1522024566,RECONNECTING,connection-reset,,,,,
Mon Mar 26 01:36:06 2018 us=916236 Restart pause, 5 second(s)
Mon Mar 26 01:36:11 2018 us=918743 Re-using SSL/TLS context
Mon Mar 26 01:36:11 2018 us=918743 Control Channel MTU parms [ L:1655 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Mon Mar 26 01:36:11 2018 us=918743 Data Channel MTU parms [ L:1655 D:1450 EF:123 EB:411 ET:32 EL:3 ]
Mon Mar 26 01:36:11 2018 us=918743 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1591,tun-mtu 1532,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Mar 26 01:36:11 2018 us=918743 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1591,tun-mtu 1532,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Mar 26 01:36:11 2018 us=918743 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:443
Mon Mar 26 01:36:11 2018 us=918743 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Mar 26 01:36:11 2018 us=918743 Attempting to establish TCP connection with [AF_INET]x.x.x.x:443 [nonblock]
Mon Mar 26 01:36:11 2018 us=918743 MANAGEMENT: >STATE:1522024571,TCP_CONNECT,,,,,,
Mon Mar 26 01:36:12 2018 us=919235 TCP connection established with [AF_INET]x.x.x.x:443
Mon Mar 26 01:36:12 2018 us=919235 TCP_CLIENT link local: (not bound)
Mon Mar 26 01:36:12 2018 us=919235 TCP_CLIENT link remote: [AF_INET]x.x.x.x:443
Mon Mar 26 01:36:12 2018 us=919235 MANAGEMENT: >STATE:1522024572,WAIT,,,,,,
Mon Mar 26 01:36:12 2018 us=975290 MANAGEMENT: >STATE:1522024572,AUTH,,,,,,
Mon Mar 26 01:36:12 2018 us=975290 TLS: Initial packet from [AF_INET]x.x.x.x:443, sid=053055bb f8e471cd
Mon Mar 26 01:36:13 2018 us=488210 VERIFY OK: depth=1, C=UK, ST=MA, L=Manchester, O=OpenVPN, OU=BOB, CN=BobServer, name=Bob, emailAddress=Me@me.com
Mon Mar 26 01:36:13 2018 us=488710 VERIFY KU OK
Mon Mar 26 01:36:13 2018 us=488710 Validating certificate extended key usage
Mon Mar 26 01:36:13 2018 us=488710 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Mar 26 01:36:13 2018 us=488710 VERIFY EKU OK
Mon Mar 26 01:36:13 2018 us=488710 VERIFY OK: depth=0, C=UK, ST=MA, L=Manchester, O=OpenVPN, OU=changeme, CN=OpenVPNServer, name=Bob, emailAddress=Me@me.com
Mon Mar 26 01:36:13 2018 us=711239 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1591', remote='link-mtu 1592'
Mon Mar 26 01:36:13 2018 us=711239 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Mon Mar 26 01:36:13 2018 us=711239 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Mon Mar 26 01:36:13 2018 us=711239 [OpenVPNServer] Peer Connection Initiated with [AF_INET]x.x.x.x:443
Mon Mar 26 01:36:14 2018 us=526833 MANAGEMENT: >STATE:1522024574,GET_CONFIG,,,,,,
Mon Mar 26 01:36:14 2018 us=526833 SENT CONTROL [OpenVPNServer]: 'PUSH_REQUEST' (status=1)
Mon Mar 26 01:36:14 2018 us=644777 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.1.1,route-gateway 192.168.1.1,redirect-gateway def1,route-gateway dhcp,ping 15,ping-restart 60,peer-id 0,cipher AES-256-GCM'
Mon Mar 26 01:36:14 2018 us=644777 OPTIONS IMPORT: timers and/or timeouts modified
Mon Mar 26 01:36:14 2018 us=644777 OPTIONS IMPORT: route options modified
Mon Mar 26 01:36:14 2018 us=644777 OPTIONS IMPORT: route-related options modified
Mon Mar 26 01:36:14 2018 us=644777 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Mar 26 01:36:14 2018 us=644777 OPTIONS IMPORT: peer-id set
Mon Mar 26 01:36:14 2018 us=644777 OPTIONS IMPORT: adjusting link_mtu to 1658
Mon Mar 26 01:36:14 2018 us=644777 OPTIONS IMPORT: data channel crypto options modified
Mon Mar 26 01:36:14 2018 us=644777 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon Mar 26 01:36:14 2018 us=644777 Data Channel MTU parms [ L:1586 D:1450 EF:54 EB:411 ET:32 EL:3 ]
Mon Mar 26 01:36:14 2018 us=644777 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Mar 26 01:36:14 2018 us=644777 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Mar 26 01:36:14 2018 us=644777 Preserving previous TUN/TAP instance: Ethernet 4
Mon Mar 26 01:36:14 2018 us=644777 Initialization Sequence Completed
Mon Mar 26 01:36:14 2018 us=644777 MANAGEMENT: >STATE:1522024574,CONNECTED,SUCCESS,,x.x.x.x,443,172.20.10.2,55786
Mon Mar 26 01:37:16 2018 us=145310 TCP/UDP: Closing socket
Mon Mar 26 01:37:16 2018 us=145811 C:\WINDOWS\system32\route.exe DELETE x.x.x.x MASK 255.255.255.255 172.20.10.1
Mon Mar 26 01:37:16 2018 us=147312 Route deletion via service succeeded
Mon Mar 26 01:37:16 2018 us=147312 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 192.168.1.1
Mon Mar 26 01:37:16 2018 us=148813 Warning: route gateway is not reachable on any active network adapters: 192.168.1.1
Mon Mar 26 01:37:16 2018 us=148813 Route deletion via service failed
Mon Mar 26 01:37:16 2018 us=148813 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 192.168.1.1
Mon Mar 26 01:37:16 2018 us=149815 Warning: route gateway is not reachable on any active network adapters: 192.168.1.1
Mon Mar 26 01:37:16 2018 us=149815 Route deletion via service failed
Mon Mar 26 01:37:16 2018 us=150315 Closing TUN/TAP interface
Mon Mar 26 01:37:16 2018 us=150815 TAP: DHCP address released
Mon Mar 26 01:37:16 2018 us=150815 SIGTERM[hard,] received, process exiting
Mon Mar 26 01:37:16 2018 us=151816 MANAGEMENT: >STATE:1522024636,EXITING,SIGTERM,,,,,

TinCanTech

peterpan wrote I've setup a openvpnserver on tomato advanced custom firmeware

You will have to check the documentation for your device to address the problems below.

First, your server network is 192.168.1.0/24 which means you will very likely suffer from network conflicts if you travel around with your client. Change the server LAN to something more unique, like 192.168.147.0/24

Second, your server is not pushing an IP address to your client.

Third, you are using --dev tap

This means you probably need a DHCP server on your server device, see your device help for info on enabling DHCP server.

Or, more easy, is to change to using --dev tun

peterpan

TinCanTech wrote
peterpan wrote I've setup a openvpnserver on tomato advanced custom firmeware
You will have to check the documentation for your device to address the problems below.

First, your server network is 192.168.1.0/24 which means you will very likely suffer from network conflicts if you travel around with your client. Change the server LAN to something more unique, like 192.168.147.0/24
I'm only going to for now use it from one location where i'm on a 10.28.0.0 so shouldn't conflict but I will look to change the subnet later on.

Second, your server is not pushing an IP address to your client.
DHCP is checked/enabled in the option and on the server. (DHCP off the Router) I should have made this dhcp on the router is enabled to be clear.

Third, you are using --dev tap
I've already got a tap working with static key on the same server but i wanted to use certs. Also for now TAP looked easier as less hassle define the routes but this is turning out to be as tricky.

This means you probably need a DHCP server on your server device, see your device help for info on enabling DHCP server.

Or, more easy, is to change to using --dev tun
I've tired dev tun and had routing issues also but i could add push "route 192.168.0.0 255.255.255.0" though i'm sure I tired this also and had a similar issue.

peterpan

I've resolved it by added to the client config comp-lzo. As soon as that was in the TEST Route stopped and all routing was correct via TAP.