Hello, i need run vpn server for full trafic, but i have there error in connect:
server.cfg:
[oconf]mode server
tls-server
port 8080
proto tcp-server
dev tap1
client-config-dir ccd
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/delta.crt
key /etc/openvpn/easy-rsa/2.0/keys/delta.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
ifconfig 10.50.10.254 255.255.255.0
ifconfig-pool 10.50.10.1 10.50.10.20 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
#route 10.20.15.0 255.255.255.0 10.50.10.254
#push "route 10.20.15.0 255.255.255.0 10.50.10.254 3"
push "route-gateway 10.50.10.254"
push "redirect-gateway def1"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /tmp/openvpn.status 1
log-append /var/log/openvpn.log
status-version 3
verb 4
mute 20
[/oconf]
Client.ovpn:
[oconf]client
remote x.x.x.x 8080
ca ca_vps.crt
cert exilim.crt
key exilim.key
comp-lzo yes
dev tun
proto tcp
nobind
auth-nocache
script-security 2
persist-key
persist-tun
pull
[/oconf]
Log:
Mon Jul 16 10:53:34 2018 OpenVPN 2.4.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 1 2018
Mon Jul 16 10:53:34 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Jul 16 10:53:34 2018 library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.10
Enter Management Password:
Mon Jul 16 10:53:35 2018 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jul 16 10:53:35 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xxxxxxxx:8080
Mon Jul 16 10:53:35 2018 Attempting to establish TCP connection with [AF_INET]xxxxxxx:8080 [nonblock]
Mon Jul 16 10:53:36 2018 TCP connection established with [AF_INET]xxxxxxxx:8080
Mon Jul 16 10:53:36 2018 TCP_CLIENT link local: (not bound)
Mon Jul 16 10:53:36 2018 TCP_CLIENT link remote: [AF_INET]xxxxxxxx:8080
Mon Jul 16 10:53:36 2018 WARNING: 'dev-type' is used inconsistently, local='dev-type tun', remote='dev-type tap'
Mon Jul 16 10:53:36 2018 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1576'
Mon Jul 16 10:53:36 2018 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Mon Jul 16 10:53:36 2018 [delta] Peer Connection Initiated with [AF_INET]xxxxxxxx:8080
Mon Jul 16 10:53:37 2018 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Mon Jul 16 10:53:37 2018 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Mon Jul 16 10:53:37 2018 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
Mon Jul 16 10:53:37 2018 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Mon Jul 16 10:53:37 2018 There is a problem in your selection of --ifconfig endpoints [local=10.50.10.1, remote=255.255.255.0]. The local and remote VPN endpoints must exist within the same 255.255.255.252 subnet. This is a limitation of --dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.
Mon Jul 16 10:53:37 2018 Exiting due to fatal error
Ty for help!
