I'm trying to configure OpenVPN access from my Android 8.0 phone to my home using our Asus RT-AC68W router but can't quite get it to work the way I want. On the phone, I'm using the "OpenVPN for Android" app. On the router, I have firmware 3.0.0.4.384_20308 and a screenshot of the configuration but I can't figure out how to insert a .png file here.
The connection is made without error (it would seem) but I can only ping 2 nodes on my home network: my router at .1 and a raspberry pi at .30. I have several other nodes at .20, .100, and .146 that I want to reach but the pings fail. What information do you need from my phone's VPN configuration to help me figure out what's wrong?
Here is a snippet from the phone log:
2018-04-04 08:38:20 official build 0.6.73 running on samsung SM-G950U (msm8998), Android 8.0.0 (R16NW) API 26, ABI arm64-v8a, (samsung/dreamqltesq/dreamqltesq:8.0.0/R16NW/G950USQU2CRB9:user/release-keys)
2018-04-04 08:38:20 Building configuration???
2018-04-04 08:38:20 New OpenVPN Status (VPN_GENERATE_CONFIG->LEVEL_START):
2018-04-04 08:38:20 New OpenVPN Status (VPN_GENERATE_CONFIG->LEVEL_START):
2018-04-04 08:38:20 started Socket Thread
2018-04-04 08:38:20 Network Status: CONNECTED LTE to MOBILE VZWINTERNET
2018-04-04 08:38:20 Debug state info: CONNECTED LTE to MOBILE VZWINTERNET, pause: userPause, shouldbeconnected: true, network: SHOULDBECONNECTED
2018-04-04 08:38:20 Debug state info: CONNECTED LTE to MOBILE VZWINTERNET, pause: userPause, shouldbeconnected: true, network: SHOULDBECONNECTED
2018-04-04 08:38:20 Waiting 0s seconds between connection attempt
2018-04-04 08:38:20 P:Initializing Google Breakpad!
2018-04-04 08:38:20 Current Parameter Settings:
2018-04-04 08:38:20 config = '/data/user/0/de.blinkt.openvpn/cache/android.conf'
2018-04-04 08:38:20 mode = 0
2018-04-04 08:38:20 show_ciphers = DISABLED
2018-04-04 08:38:20 show_digests = DISABLED
2018-04-04 08:38:20 show_engines = DISABLED
2018-04-04 08:38:20 genkey = DISABLED
2018-04-04 08:38:20 key_pass_file = '[UNDEF]'
2018-04-04 08:38:20 show_tls_ciphers = DISABLED
2018-04-04 08:38:20 connect_retry_max = 0
2018-04-04 08:38:20 Connection profiles [0]:
2018-04-04 08:38:20 proto = udp
2018-04-04 08:38:20 local = '[UNDEF]'
2018-04-04 08:38:20 local_port = '[UNDEF]'
2018-04-04 08:38:20 remote = 'pmlefevre.ddns.net'
2018-04-04 08:38:20 remote_port = '1194'
2018-04-04 08:38:20 remote_float = ENABLED
2018-04-04 08:38:20 bind_defined = DISABLED
2018-04-04 08:38:20 bind_local = DISABLED
2018-04-04 08:38:20 bind_ipv6_only = DISABLED
2018-04-04 08:38:20 connect_retry_seconds = 2
2018-04-04 08:38:20 connect_timeout = 120
2018-04-04 08:38:20 socks_proxy_server = '[UNDEF]'
2018-04-04 08:38:20 socks_proxy_port = '[UNDEF]'
2018-04-04 08:38:20 tun_mtu = 1500
2018-04-04 08:38:20 tun_mtu_defined = ENABLED
2018-04-04 08:38:20 link_mtu = 1500
2018-04-04 08:38:20 link_mtu_defined = DISABLED
2018-04-04 08:38:20 tun_mtu_extra = 0
2018-04-04 08:38:20 tun_mtu_extra_defined = DISABLED
2018-04-04 08:38:20 mtu_discover_type = -1
2018-04-04 08:38:20 fragment = 0
2018-04-04 08:38:20 mssfix = 1450
2018-04-04 08:38:20 explicit_exit_notification = 0
2018-04-04 08:38:20 Connection profiles END
2018-04-04 08:38:20 remote_random = DISABLED
2018-04-04 08:38:20 ipchange = '[UNDEF]'
2018-04-04 08:38:20 dev = 'tun'
2018-04-04 08:38:20 dev_type = '[UNDEF]'
2018-04-04 08:38:20 dev_node = '[UNDEF]'
2018-04-04 08:38:20 lladdr = '[UNDEF]'
2018-04-04 08:38:20 topology = 1
2018-04-04 08:38:20 ifconfig_local = '[UNDEF]'
2018-04-04 08:38:20 ifconfig_remote_netmask = '[UNDEF]'
2018-04-04 08:38:20 ifconfig_noexec = DISABLED
2018-04-04 08:38:20 ifconfig_nowarn = ENABLED
2018-04-04 08:38:20 ifconfig_ipv6_local = '[UNDEF]'
2018-04-04 08:38:20 ifconfig_ipv6_netbits = 0
2018-04-04 08:38:20 ifconfig_ipv6_remote = '[UNDEF]'
2018-04-04 08:38:20 shaper = 0
2018-04-04 08:38:20 mtu_test = 0
2018-04-04 08:38:20 mlock = DISABLED
2018-04-04 08:38:20 keepalive_ping = 15
2018-04-04 08:38:20 keepalive_timeout = 60
2018-04-04 08:38:20 inactivity_timeout = 0
2018-04-04 08:38:20 ping_send_timeout = 15
2018-04-04 08:38:20 ping_rec_timeout = 60
2018-04-04 08:38:20 ping_rec_timeout_action = 2
2018-04-04 08:38:20 ping_timer_remote = DISABLED
2018-04-04 08:38:20 remap_sigusr1 = 0
2018-04-04 08:38:20 persist_tun = DISABLED
2018-04-04 08:38:20 persist_local_ip = DISABLED
2018-04-04 08:38:20 persist_remote_ip = DISABLED
2018-04-04 08:38:20 persist_key = DISABLED
2018-04-04 08:38:20 passtos = DISABLED
2018-04-04 08:38:20 resolve_retry_seconds = 60
2018-04-04 08:38:20 resolve_in_advance = DISABLED
2018-04-04 08:38:20 username = '[UNDEF]'
2018-04-04 08:38:20 groupname = '[UNDEF]'
2018-04-04 08:38:20 chroot_dir = '[UNDEF]'
2018-04-04 08:38:20 cd_dir = '[UNDEF]'
2018-04-04 08:38:20 writepid = '[UNDEF]'
2018-04-04 08:38:20 up_script = '[UNDEF]'
2018-04-04 08:38:20 down_script = '[UNDEF]'
2018-04-04 08:38:20 down_pre = DISABLED
2018-04-04 08:38:20 up_restart = DISABLED
2018-04-04 08:38:20 up_delay = DISABLED
2018-04-04 08:38:20 daemon = DISABLED
2018-04-04 08:38:20 inetd = 0
2018-04-04 08:38:20 log = DISABLED
2018-04-04 08:38:20 suppress_timestamps = DISABLED
2018-04-04 08:38:20 machine_readable_output = ENABLED
2018-04-04 08:38:20 nice = 0
2018-04-04 08:38:20 verbosity = 4
2018-04-04 08:38:20 mute = 0
2018-04-04 08:38:20 gremlin = 0
2018-04-04 08:38:20 status_file = '[UNDEF]'
2018-04-04 08:38:20 status_file_version = 1
2018-04-04 08:38:20 status_file_update_freq = 60
2018-04-04 08:38:20 occ = ENABLED
2018-04-04 08:38:20 rcvbuf = 0
2018-04-04 08:38:20 sndbuf = 0
2018-04-04 08:38:20 sockflags = 0
2018-04-04 08:38:20 fast_io = DISABLED
2018-04-04 08:38:20 comp.alg = 2
2018-04-04 08:38:20 comp.flags = 1
2018-04-04 08:38:20 route_script = '[UNDEF]'
2018-04-04 08:38:20 route_default_gateway = '[UNDEF]'
2018-04-04 08:38:20 route_default_metric = 0
2018-04-04 08:38:20 route_noexec = DISABLED
2018-04-04 08:38:20 route_delay = 0
2018-04-04 08:38:20 route_delay_window = 30
2018-04-04 08:38:20 route_delay_defined = DISABLED
2018-04-04 08:38:20 route_nopull = DISABLED
2018-04-04 08:38:20 route_gateway_via_dhcp = DISABLED
2018-04-04 08:38:20 allow_pull_fqdn = DISABLED
2018-04-04 08:38:20 route 10.248.0.0/255.255.255.0/vpn_gateway/default (not set)
2018-04-04 08:38:20 management_addr = '/data/user/0/de.blinkt.openvpn/cache/mgmtsocket'
2018-04-04 08:38:20 management_port = 'unix'
2018-04-04 08:38:20 management_user_pass = '[UNDEF]'
2018-04-04 08:38:20 management_log_history_cache = 250
2018-04-04 08:38:20 management_echo_buffer_size = 100
2018-04-04 08:38:20 management_write_peer_info_file = '[UNDEF]'
2018-04-04 08:38:20 management_client_user = '[UNDEF]'
2018-04-04 08:38:20 management_client_group = '[UNDEF]'
2018-04-04 08:38:20 management_flags = 4390
2018-04-04 08:38:20 shared_secret_file = '[UNDEF]'
2018-04-04 08:38:20 key_direction = (null)
2018-04-04 08:38:20 ciphername = 'AES-256-CBC'
2018-04-04 08:38:20 ncp_enabled = ENABLED
2018-04-04 08:38:20 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
2018-04-04 08:38:20 authname = 'SHA1'
2018-04-04 08:38:20 prng_hash = 'SHA1'
2018-04-04 08:38:20 prng_nonce_secret_len = 16
2018-04-04 08:38:20 keysize = 0
2018-04-04 08:38:20 engine = DISABLED
2018-04-04 08:38:20 replay = ENABLED
2018-04-04 08:38:20 mute_replay_warnings = DISABLED
2018-04-04 08:38:20 replay_window = 64
2018-04-04 08:38:20 replay_time = 15
2018-04-04 08:38:20 packet_id_file = '[UNDEF]'
2018-04-04 08:38:20 test_crypto = DISABLED
2018-04-04 08:38:20 tls_server = DISABLED
2018-04-04 08:38:20 tls_client = ENABLED
2018-04-04 08:38:20 key_method = 2
2018-04-04 08:38:20 ca_file = '[[INLINE]]'
2018-04-04 08:38:20 ca_path = '[UNDEF]'
2018-04-04 08:38:20 dh_file = '[UNDEF]'
2018-04-04 08:38:20 cert_file = '[[INLINE]]'
2018-04-04 08:38:20 extra_certs_file = '[UNDEF]'
2018-04-04 08:38:20 priv_key_file = '[[INLINE]]'
2018-04-04 08:38:20 pkcs12_file = '[UNDEF]'
2018-04-04 08:38:20 cipher_list = '[UNDEF]'
2018-04-04 08:38:20 tls_verify = '[UNDEF]'
2018-04-04 08:38:20 tls_export_cert = '[UNDEF]'
2018-04-04 08:38:20 verify_x509_type = 0
2018-04-04 08:38:20 verify_x509_name = '[UNDEF]'
2018-04-04 08:38:20 crl_file = '[UNDEF]'
2018-04-04 08:38:20 ns_cert_type = 1
2018-04-04 08:38:20 remote_cert_ku
= 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku = 0
2018-04-04 08:38:20 remote_cert_ku[i] = 0
2018-04-04 08:38:20 remote_cert_ku[i] = 0
2018-04-04 08:38:20 remote_cert_ku[i] = 0
2018-04-04 08:38:20 remote_cert_ku[i] = 0
2018-04-04 08:38:20 remote_cert_ku[i] = 0
2018-04-04 08:38:20 remote_cert_ku[i] = 0
2018-04-04 08:38:20 remote_cert_eku = '[UNDEF]'
2018-04-04 08:38:20 ssl_flags = 0
2018-04-04 08:38:20 tls_timeout = 2
2018-04-04 08:38:20 renegotiate_bytes = -1
2018-04-04 08:38:20 renegotiate_packets = 0
2018-04-04 08:38:20 renegotiate_seconds = 3600
2018-04-04 08:38:20 handshake_window = 60
2018-04-04 08:38:20 transition_window = 3600
2018-04-04 08:38:20 single_session = DISABLED
2018-04-04 08:38:20 push_peer_info = DISABLED
2018-04-04 08:38:20 tls_exit = DISABLED
2018-04-04 08:38:20 tls_auth_file = '[UNDEF]'
2018-04-04 08:38:20 tls_crypt_file = '[UNDEF]'
2018-04-04 08:38:20 client = ENABLED
2018-04-04 08:38:20 pull = ENABLED
2018-04-04 08:38:20 auth_user_pass_file = 'stdin'
2018-04-04 08:38:20 OpenVPN 2.5-icsopenvpn [git:icsopenvpn-d51333c645c12713+] android-21-arm64-v8a [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 26 2017
2018-04-04 08:38:20 library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.10
2018-04-04 08:38:20 MANAGEMENT: Connected to management server at /data/user/0/de.blinkt.openvpn/cache/mgmtsocket
2018-04-04 08:38:20 MANAGEMENT: CMD 'hold release'
2018-04-04 08:38:20 MANAGEMENT: CMD 'username 'Auth' marc'
2018-04-04 08:38:20 MANAGEMENT: CMD 'bytecount 2'
2018-04-04 08:38:20 MANAGEMENT: CMD 'password [...]'
2018-04-04 08:38:20 MANAGEMENT: CMD 'state on'
2018-04-04 08:38:20 MANAGEMENT: CMD 'proxy NONE'
2018-04-04 08:38:21 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
2018-04-04 08:38:21 New OpenVPN Status (RESOLVE->LEVEL_CONNECTING_NO_SERVER_REPLY_YET): ,,,,,
2018-04-04 08:38:21 New OpenVPN Status (RESOLVE->LEVEL_CONNECTING_NO_SERVER_REPLY_YET): ,,,,,
2018-04-04 08:38:21 LZO compression initializing
2018-04-04 08:38:21 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2018-04-04 08:38:21 MANAGEMENT: >STATE:1522849101,RESOLVE,,,,,,
2018-04-04 08:38:21 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
2018-04-04 08:38:21 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
2018-04-04 08:38:21 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
2018-04-04 08:38:21 TCP/UDP: Preserving recently used remote address: [AF_INET]76.186.26.97:1194
2018-04-04 08:38:21 Socket Buffers: R=[229376->229376] S=[229376->229376]
2018-04-04 08:38:21 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2018-04-04 08:38:21 UDP link local: (not bound)
2018-04-04 08:38:21 UDP link remote: [AF_INET]76.186.26.97:1194
2018-04-04 08:38:21 MANAGEMENT: >STATE:1522849101,WAIT,,,,,,
2018-04-04 08:38:21 New OpenVPN Status (WAIT->LEVEL_CONNECTING_NO_SERVER_REPLY_YET): ,,,,,
2018-04-04 08:38:21 New OpenVPN Status (WAIT->LEVEL_CONNECTING_NO_SERVER_REPLY_YET): ,,,,,
2018-04-04 08:38:21 MANAGEMENT: >STATE:1522849101,AUTH,,,,,,
2018-04-04 08:38:21 New OpenVPN Status (AUTH->LEVEL_CONNECTING_SERVER_REPLIED): ,,,,,
2018-04-04 08:38:21 New OpenVPN Status (AUTH->LEVEL_CONNECTING_SERVER_REPLIED): ,,,,,
2018-04-04 08:38:21 TLS: Initial packet from [AF_INET]76.186.26.97:1194, sid=c02a5219 15075437
2018-04-04 08:38:21 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2018-04-04 08:38:22 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC68W, emailAddress=me@myhost.mydomain
2018-04-04 08:38:22 VERIFY OK: nsCertType=SERVER
2018-04-04 08:38:22 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC68W, emailAddress=me@myhost.mydomain
2018-04-04 08:38:22 Control Channel: TLSv1, cipher SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2018-04-04 08:38:22 [RT-AC68W] Peer Connection Initiated with [AF_INET]76.186.26.97:1194
2018-04-04 08:38:23 New OpenVPN Status (GET_CONFIG->LEVEL_CONNECTING_SERVER_REPLIED): ,,,,,
2018-04-04 08:38:23 New OpenVPN Status (GET_CONFIG->LEVEL_CONNECTING_SERVER_REPLIED): ,,,,,
2018-04-04 08:38:23 MANAGEMENT: >STATE:1522849103,GET_CONFIG,,,,,,
2018-04-04 08:38:23 SENT CONTROL [RT-AC68W]: 'PUSH_REQUEST' (status=1)
2018-04-04 08:38:23 PUSH: Received control message: 'PUSH_REPLY,route 10.248.0.0 255.255.255.0 vpn_gateway 500,route 10.48.84.1,topology net30,ping 15,ping-restart 60,ifconfig 10.48.84.6 10.48.84.5'
2018-04-04 08:38:23 OPTIONS IMPORT: timers and/or timeouts modified
2018-04-04 08:38:23 OPTIONS IMPORT: --ifconfig/up options modified
2018-04-04 08:38:23 OPTIONS IMPORT: route options modified
2018-04-04 08:38:23 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:406 ET:0 EL:3 ]
2018-04-04 08:38:23 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2018-04-04 08:38:23 New OpenVPN Status (ASSIGN_IP->LEVEL_CONNECTING_SERVER_REPLIED): ,10.48.84.6,,,,
2018-04-04 08:38:23 New OpenVPN Status (ASSIGN_IP->LEVEL_CONNECTING_SERVER_REPLIED): ,10.48.84.6,,,,
2018-04-04 08:38:23 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2018-04-04 08:38:23 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2018-04-04 08:38:23 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2018-04-04 08:38:23 GDG: SIOCGIFHWADDR(lo) failed
2018-04-04 08:38:23 ROUTE_GATEWAY 127.100.103.119/255.0.0.0 IFACE=lo
2018-04-04 08:38:23 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2018-04-04 08:38:23 MANAGEMENT: >STATE:1522849103,ASSIGN_IP,,10.48.84.6,,,,
2018-04-04 08:38:23 MANAGEMENT: CMD 'needok 'IFCONFIG' ok'
2018-04-04 08:38:23 MANAGEMENT: >STATE:1522849103,ADD_ROUTES,,,,,,
2018-04-04 08:38:24 New OpenVPN Status (ADD_ROUTES->LEVEL_CONNECTING_SERVER_REPLIED): ,,,,,
2018-04-04 08:38:24 New OpenVPN Status (ADD_ROUTES->LEVEL_CONNECTING_SERVER_REPLIED): ,,,,,
2018-04-04 08:38:24 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2018-04-04 08:38:24 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2018-04-04 08:38:24 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2018-04-04 08:38:24 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2018-04-04 08:38:24 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2018-04-04 08:38:24 Opening tun interface:
2018-04-04 08:38:24 MANAGEMENT: CMD 'needok 'PERSIST_TUN_ACTION' OPEN_BEFORE_CLOSE'
2018-04-04 08:38:24 Warning Samsung Android 5.0+ devices ignore DNS servers outside the VPN range. To enable DNS resolution a route to your DNS Server (1.1.1.1) has been added.
2018-04-04 08:38:24 Local IPv4: 10.48.84.6/30 IPv6: null MTU: 1500
2018-04-04 08:38:24 DNS Server: 1.1.1.1, 1.0.0.1, Domain: null
2018-04-04 08:38:24 Routes: 10.48.84.1/32, 10.48.84.4/30, 10.248.0.0/24
2018-04-04 08:38:24 Routes excluded:
2018-04-04 08:38:24 VpnService routes installed: 10.48.84.1/32, 10.48.84.4/30, 10.248.0.0/24, 1.1.1.1/32
2018-04-04 08:38:24 Disallowed VPN apps:
2018-04-04 08:38:24 MANAGEMENT: CMD 'needok 'OPENTUN' ok'
2018-04-04 08:38:24 Initialization Sequence Completed
2018-04-04 08:38:24 MANAGEMENT: >STATE:1522849104,CONNECTED,SUCCESS,10.48.84.6,76.186.26.97,1194,,
2018-04-04 08:38:24 New OpenVPN Status (CONNECTED->LEVEL_CONNECTED): SUCCESS,10.48.84.6,76.186.26.97,1194,,
2018-04-04 08:38:24 New OpenVPN Status (CONNECTED->LEVEL_CONNECTED): SUCCESS,10.48.84.6,76.186.26.97,1194,,
2018-04-04 08:38:24 Debug state info: CONNECTED LTE to MOBILE VZWINTERNET, pause: userPause, shouldbeconnected: true, network: SHOULDBECONNECTED[/code]
Click here to Reply or Forward
19.57 GB (19%) of 102 GB used
Manage
Terms - Privacy
Last account activity: 0 minutes ago
Details
