Dear colleagues,
I'm a bit confused.
I have google cloud VM ubuntu openvpn server setup as a gateway and everything is working great - all offices are connected to it.
All remote offices firewalls are connecting fine, getting addresses from 10.0.18.0/24 network and it's corresponding certificates,
they all are able to talk to each other and route it's corresponding internal LANs to each other. Star topology.
My question is how to monitor client's forwarded traffic on server?
There is zero tun0 traffic counters shown currently - look ipconfig counters at the bottom, all packets are forwarded by kernel I assume, promiscuous mode is enabled on tun0... apps like iptraf, bmon and all others shows zero traffic on that interface, tcpdump either...
How to monitor traffic of my connected clients between each other?
Server:
OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018
library versions: OpenSSL 1.1.0g 2 Nov 2017, LZO 2.08
All clients:
OpenVPN 2.4.6 amd64-portbld-freebsd11.2 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Sep 4 2018
library versions: OpenSSL 1.0.2o-freebsd 27 Mar 2018, LZO 2.10
port 3389
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
topology subnet
server 10.18.0.0 255.255.255.0
client-config-dir ccd
client-to-client
keepalive 10 60
cipher AES-128-CBC
compress lz4-v2
push "compress lz4-v2"
max-clients 15
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log 5
log-append /var/log/openvpn/openvpn.log
verb 4
mute 20
explicit-exit-notify 1
dev ovpnc4
verb 4
dev-type tun
dev-node /dev/tun4
writepid /var/run/openvpn_client4.pid
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp4
cipher AES-128-CBC
auth SHA1
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local xx.xx.xx.xx.
engine rdrand
tls-client
client
lport 0
management /var/etc/openvpn/client4.sock unix
remote xx.xx.xx.xx 3389
route 192.168.128.0 255.255.240.0
route 192.168.12.0 255.255.255.0
route 192.168.3.0 255.255.255.0
ca /var/etc/openvpn/client4.ca
cert /var/etc/openvpn/client4.cert
key /var/etc/openvpn/client4.key
ncp-disable
compress lz4-v2
resolv-retry infinite
sndbuf 2097152
rcvbuf 2097152
Server Log verb4
Thu Jan 24 16:51:19 2019 us=185864 Current Parameter Settings:
Thu Jan 24 16:51:19 2019 us=185935 config = '/etc/openvpn/server.conf'
Thu Jan 24 16:51:19 2019 us=185946 mode = 1
Thu Jan 24 16:51:19 2019 us=185955 persist_config = DISABLED
Thu Jan 24 16:51:19 2019 us=185962 persist_mode = 1
Thu Jan 24 16:51:19 2019 us=185970 show_ciphers = DISABLED
Thu Jan 24 16:51:19 2019 us=185977 show_digests = DISABLED
Thu Jan 24 16:51:19 2019 us=185983 show_engines = DISABLED
Thu Jan 24 16:51:19 2019 us=185988 genkey = DISABLED
Thu Jan 24 16:51:19 2019 us=185993 key_pass_file = '[UNDEF]'
Thu Jan 24 16:51:19 2019 us=185998 show_tls_ciphers = DISABLED
Thu Jan 24 16:51:19 2019 us=186003 connect_retry_max = 0
Thu Jan 24 16:51:19 2019 us=186008 Connection profiles [0]:
Thu Jan 24 16:51:19 2019 us=186014 proto = udp
Thu Jan 24 16:51:19 2019 us=186019 local = '[UNDEF]'
Thu Jan 24 16:51:19 2019 us=186024 local_port = '3389'
Thu Jan 24 16:51:19 2019 us=186029 remote = '[UNDEF]'
Thu Jan 24 16:51:19 2019 us=186034 remote_port = '3389'
Thu Jan 24 16:51:19 2019 us=186039 remote_float = DISABLED
Thu Jan 24 16:51:19 2019 us=186043 bind_defined = DISABLED
Thu Jan 24 16:51:19 2019 us=186048 NOTE: --mute triggered...
Thu Jan 24 16:51:19 2019 us=186061 274 variation(s) on previous 20 message(s) suppressed by --mute
Thu Jan 24 16:51:19 2019 us=186066 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018
Thu Jan 24 16:51:19 2019 us=186087 library versions: OpenSSL 1.1.0g 2 Nov 2017, LZO 2.08
Thu Jan 24 16:51:19 2019 us=186392 WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
Thu Jan 24 16:51:19 2019 us=187306 Diffie-Hellman initialized with 2048 bit key
Thu Jan 24 16:51:19 2019 us=187972 TLS-Auth MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Jan 24 16:51:19 2019 us=188240 ROUTE_GATEWAY 10.156.0.1
Thu Jan 24 16:51:19 2019 us=190818 TUN/TAP device tun0 opened
Thu Jan 24 16:51:19 2019 us=191010 TUN/TAP TX queue length set to 100
Thu Jan 24 16:51:19 2019 us=191042 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Jan 24 16:51:19 2019 us=191060 /sbin/ip link set dev tun0 up mtu 1500
Thu Jan 24 16:51:19 2019 us=201094 /sbin/ip addr add dev tun0 10.18.0.1/24 broadcast 10.18.0.255
Thu Jan 24 16:51:19 2019 us=204572 /sbin/ip route add 192.168.128.0/20 via 10.18.0.2
Thu Jan 24 16:51:19 2019 us=206519 /sbin/ip route add 192.168.7.0/24 via 10.18.0.2
Thu Jan 24 16:51:19 2019 us=210766 /sbin/ip route add 192.168.140.0/24 via 10.18.0.2
Thu Jan 24 16:51:19 2019 us=216397 /sbin/ip route add 192.168.8.0/24 via 10.18.0.2
Thu Jan 24 16:51:19 2019 us=217850 /sbin/ip route add 192.168.12.0/24 via 10.18.0.2
Thu Jan 24 16:51:19 2019 us=219595 /sbin/ip route add 192.168.3.0/24 via 10.18.0.2
Thu Jan 24 16:51:19 2019 us=221060 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Jan 24 16:51:19 2019 us=221625 Could not determine IPv4/IPv6 protocol. Using AF_INET
Thu Jan 24 16:51:19 2019 us=221659 Socket Buffers: R=[212992->212992] S=[212992->212992]
Thu Jan 24 16:51:19 2019 us=221696 UDPv4 link local (bound): [AF_INET][undef]:3389
Thu Jan 24 16:51:19 2019 us=221706 UDPv4 link remote: [AF_UNSPEC]
Thu Jan 24 16:51:19 2019 us=221720 GID set to nogroup
Thu Jan 24 16:51:19 2019 us=221743 UID set to nobody
Thu Jan 24 16:51:19 2019 us=221759 MULTI: multi_init called, r=256 v=256
Thu Jan 24 16:51:19 2019 us=221802 IFCONFIG POOL: base=10.18.0.2 size=252, ipv6=0
Thu Jan 24 16:51:19 2019 us=222405 Initialization Sequence Completed
Thu Jan 24 16:51:51 2019 us=75674 MULTI: multi_create_instance called
Thu Jan 24 16:51:51 2019 us=75742 46.xx.xx.xx:24894 Re-using SSL/TLS context
Thu Jan 24 16:51:51 2019 us=75767 46.xx.xx.xx:24894 LZ4v2 compression initializing
Thu Jan 24 16:51:51 2019 us=75921 46.xx.xx.xx:24894 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=75931 46.xx.xx.xx:24894 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=75959 46.xx.xx.xx:24894 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 24 16:51:51 2019 us=75977 46.xx.xx.xx:24894 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 24 16:51:51 2019 us=75999 46.xx.xx.xx:24894 TLS: Initial packet from [AF_INET]46.xx.xx.xx:24894, sid=fa93d699 63f3f56e
Thu Jan 24 16:51:51 2019 us=161488 MULTI: multi_create_instance called
Thu Jan 24 16:51:51 2019 us=161597 83.xx.xx.xx:41818 Re-using SSL/TLS context
Thu Jan 24 16:51:51 2019 us=161617 83.xx.xx.xx:41818 LZ4v2 compression initializing
Thu Jan 24 16:51:51 2019 us=161738 83.xx.xx.xx:41818 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=161754 83.xx.xx.xx:41818 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=161788 83.xx.xx.xx:41818 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 24 16:51:51 2019 us=161794 83.xx.xx.xx:41818 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 24 16:51:51 2019 us=161817 83.xx.xx.xx:41818 TLS: Initial packet from [AF_INET]83.xx.xx.xx:41818, sid=bc05a28f acc378de
Thu Jan 24 16:51:51 2019 us=229433 46.xx.xx.xx:24894 VERIFY OK: depth=1, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=cert, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=229612 46.xx.xx.xx:24894 VERIFY OK: depth=0, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=office2, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=289760 MULTI: multi_create_instance called
Thu Jan 24 16:51:51 2019 us=289853 184.xx.xx.xx:3948 Re-using SSL/TLS context
Thu Jan 24 16:51:51 2019 us=289869 184.xx.xx.xx:3948 LZ4v2 compression initializing
Thu Jan 24 16:51:51 2019 us=289955 184.xx.xx.xx:3948 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=289968 184.xx.xx.xx:3948 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=290001 184.xx.xx.xx:3948 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 24 16:51:51 2019 us=290009 184.xx.xx.xx:3948 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 24 16:51:51 2019 us=290031 184.xx.xx.xx:3948 TLS: Initial packet from [AF_INET]184.xx.xx.xx:3948, sid=08bf29e7 c7a2f437
Thu Jan 24 16:51:51 2019 us=302731 46.xx.xx.xx:24894 peer info: IV_VER=2.4.6
Thu Jan 24 16:51:51 2019 us=302803 46.xx.xx.xx:24894 peer info: IV_PLAT=freebsd
Thu Jan 24 16:51:51 2019 us=302812 46.xx.xx.xx:24894 peer info: IV_PROTO=2
Thu Jan 24 16:51:51 2019 us=302818 46.xx.xx.xx:24894 peer info: IV_LZ4=1
Thu Jan 24 16:51:51 2019 us=302825 46.xx.xx.xx:24894 peer info: IV_LZ4v2=1
Thu Jan 24 16:51:51 2019 us=302831 46.xx.xx.xx:24894 peer info: IV_LZO=1
Thu Jan 24 16:51:51 2019 us=302840 46.xx.xx.xx:24894 peer info: IV_COMP_STUB=1
Thu Jan 24 16:51:51 2019 us=302847 46.xx.xx.xx:24894 peer info: IV_COMP_STUBv2=1
Thu Jan 24 16:51:51 2019 us=302853 46.xx.xx.xx:24894 peer info: IV_TCPNL=1
Thu Jan 24 16:51:51 2019 us=302957 46.xx.xx.xx:24894 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=302969 46.xx.xx.xx:24894 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=302976 46.xx.xx.xx:24894 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=302983 46.xx.xx.xx:24894 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=375462 46.xx.xx.xx:24894 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Jan 24 16:51:51 2019 us=375554 46.xx.xx.xx:24894 [office2] Peer Connection Initiated with [AF_INET]46.xx.xx.xx:24894
Thu Jan 24 16:51:51 2019 us=375614 office2/46.xx.xx.xx:24894 OPTIONS IMPORT: reading client specific options from: ccd/office2
Thu Jan 24 16:51:51 2019 us=375756 office2/46.xx.xx.xx:24894 MULTI_sva: pool returned IPv4=10.18.0.2, IPv6=(Not enabled)
Thu Jan 24 16:51:51 2019 us=375789 office2/46.xx.xx.xx:24894 MULTI: Learn: 10.18.0.2 -> office2/46.xx.xx.xx:24894
Thu Jan 24 16:51:51 2019 us=375796 office2/46.xx.xx.xx:24894 MULTI: primary virtual IP for office2/46.xx.xx.xx:24894: 10.18.0.2
Thu Jan 24 16:51:51 2019 us=375803 office2/46.xx.xx.xx:24894 MULTI: internal route 192.168.7.0/24 -> office2/46.xx.xx.xx:24894
Thu Jan 24 16:51:51 2019 us=375811 office2/46.xx.xx.xx:24894 MULTI: Learn: 192.168.7.0/24 -> office2/46.xx.xx.xx:24894
Thu Jan 24 16:51:51 2019 us=375819 office2/46.xx.xx.xx:24894 REMOVE PUSH ROUTE: 'route 192.168.7.0 255.255.255.0'
Thu Jan 24 16:51:51 2019 us=394923 83.xx.xx.xx:41818 VERIFY OK: depth=1, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=cert, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=395091 83.xx.xx.xx:41818 VERIFY OK: depth=0, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=office1, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=427323 MULTI: multi_create_instance called
Thu Jan 24 16:51:51 2019 us=427423 91.xx.xx.xx:32439 Re-using SSL/TLS context
Thu Jan 24 16:51:51 2019 us=427435 91.xx.xx.xx:32439 LZ4v2 compression initializing
Thu Jan 24 16:51:51 2019 us=427543 91.xx.xx.xx:32439 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=427552 91.xx.xx.xx:32439 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=427581 91.xx.xx.xx:32439 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 24 16:51:51 2019 us=427587 91.xx.xx.xx:32439 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 24 16:51:51 2019 us=427608 91.xx.xx.xx:32439 TLS: Initial packet from [AF_INET]91.xx.xx.xx:32439, sid=948b462f 4f3ad1a0
Thu Jan 24 16:51:51 2019 us=509708 83.xx.xx.xx:41818 peer info: IV_VER=2.4.6
Thu Jan 24 16:51:51 2019 us=509782 83.xx.xx.xx:41818 peer info: IV_PLAT=freebsd
Thu Jan 24 16:51:51 2019 us=509795 83.xx.xx.xx:41818 peer info: IV_PROTO=2
Thu Jan 24 16:51:51 2019 us=509802 83.xx.xx.xx:41818 peer info: IV_LZ4=1
Thu Jan 24 16:51:51 2019 us=509807 83.xx.xx.xx:41818 peer info: IV_LZ4v2=1
Thu Jan 24 16:51:51 2019 us=509813 83.xx.xx.xx:41818 peer info: IV_LZO=1
Thu Jan 24 16:51:51 2019 us=509819 83.xx.xx.xx:41818 peer info: IV_COMP_STUB=1
Thu Jan 24 16:51:51 2019 us=509825 83.xx.xx.xx:41818 peer info: IV_COMP_STUBv2=1
Thu Jan 24 16:51:51 2019 us=509830 83.xx.xx.xx:41818 peer info: IV_TCPNL=1
Thu Jan 24 16:51:51 2019 us=509925 83.xx.xx.xx:41818 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=509935 83.xx.xx.xx:41818 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=509942 83.xx.xx.xx:41818 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=509949 83.xx.xx.xx:41818 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=530250 91.xx.xx.xx:32439 VERIFY OK: depth=1, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=cert, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=530417 91.xx.xx.xx:32439 VERIFY OK: depth=0, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=office3, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=578823 91.xx.xx.xx:32439 peer info: IV_VER=2.4.6
Thu Jan 24 16:51:51 2019 us=578896 91.xx.xx.xx:32439 peer info: IV_PLAT=freebsd
Thu Jan 24 16:51:51 2019 us=578904 91.xx.xx.xx:32439 peer info: IV_PROTO=2
Thu Jan 24 16:51:51 2019 us=578910 91.xx.xx.xx:32439 peer info: IV_LZ4=1
Thu Jan 24 16:51:51 2019 us=578915 91.xx.xx.xx:32439 peer info: IV_LZ4v2=1
Thu Jan 24 16:51:51 2019 us=578921 91.xx.xx.xx:32439 peer info: IV_LZO=1
Thu Jan 24 16:51:51 2019 us=578927 91.xx.xx.xx:32439 peer info: IV_COMP_STUB=1
Thu Jan 24 16:51:51 2019 us=578933 91.xx.xx.xx:32439 peer info: IV_COMP_STUBv2=1
Thu Jan 24 16:51:51 2019 us=578939 91.xx.xx.xx:32439 peer info: IV_TCPNL=1
Thu Jan 24 16:51:51 2019 us=579031 91.xx.xx.xx:32439 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=579041 91.xx.xx.xx:32439 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=579068 91.xx.xx.xx:32439 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=579076 91.xx.xx.xx:32439 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=624251 83.xx.xx.xx:41818 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Jan 24 16:51:51 2019 us=624340 83.xx.xx.xx:41818 [office1] Peer Connection Initiated with [AF_INET]83.xx.xx.xx:41818
Thu Jan 24 16:51:51 2019 us=624460 office1/83.xx.xx.xx:41818 OPTIONS IMPORT: reading client specific options from: ccd/office1
Thu Jan 24 16:51:51 2019 us=624510 office1/83.xx.xx.xx:41818 MULTI_sva: pool returned IPv4=10.18.0.3, IPv6=(Not enabled)
Thu Jan 24 16:51:51 2019 us=624542 office1/83.xx.xx.xx:41818 MULTI: Learn: 10.18.0.3 -> office1/83.xx.xx.xx:41818
Thu Jan 24 16:51:51 2019 us=624550 office1/83.xx.xx.xx:41818 MULTI: primary virtual IP for office1/83.xx.xx.xx:41818: 10.18.0.3
Thu Jan 24 16:51:51 2019 us=624557 office1/83.xx.xx.xx:41818 MULTI: internal route 192.168.128.0/20 -> office1/83.xx.xx.xx:41818
Thu Jan 24 16:51:51 2019 us=624565 office1/83.xx.xx.xx:41818 MULTI: Learn: 192.168.128.0/20 -> office1/83.xx.xx.xx:41818
Thu Jan 24 16:51:51 2019 us=624574 office1/83.xx.xx.xx:41818 REMOVE PUSH ROUTE: 'route 192.168.128.0 255.255.240.0'
Thu Jan 24 16:51:51 2019 us=627048 91.xx.xx.xx:32439 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Jan 24 16:51:51 2019 us=627118 91.xx.xx.xx:32439 [office3] Peer Connection Initiated with [AF_INET]91.xx.xx.xx:32439
Thu Jan 24 16:51:51 2019 us=627165 office3/91.xx.xx.xx:32439 OPTIONS IMPORT: reading client specific options from: ccd/office3
Thu Jan 24 16:51:51 2019 us=627198 office3/91.xx.xx.xx:32439 MULTI_sva: pool returned IPv4=10.18.0.4, IPv6=(Not enabled)
Thu Jan 24 16:51:51 2019 us=627226 office3/91.xx.xx.xx:32439 MULTI: Learn: 10.18.0.4 -> office3/91.xx.xx.xx:32439
Thu Jan 24 16:51:51 2019 us=627234 office3/91.xx.xx.xx:32439 MULTI: primary virtual IP for office3/91.xx.xx.xx:32439: 10.18.0.4
Thu Jan 24 16:51:51 2019 us=627241 office3/91.xx.xx.xx:32439 MULTI: internal route 192.168.8.0/24 -> office3/91.xx.xx.xx:32439
Thu Jan 24 16:51:51 2019 us=627249 office3/91.xx.xx.xx:32439 MULTI: Learn: 192.168.8.0/24 -> office3/91.xx.xx.xx:32439
Thu Jan 24 16:51:51 2019 us=636970 184.xx.xx.xx:3948 VERIFY OK: depth=1, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=cert, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=637144 184.xx.xx.xx:3948 VERIFY OK: depth=0, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=office5, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:51 2019 us=790691 184.xx.xx.xx:3948 peer info: IV_VER=2.4.6
Thu Jan 24 16:51:51 2019 us=790766 184.xx.xx.xx:3948 peer info: IV_PLAT=freebsd
Thu Jan 24 16:51:51 2019 us=790791 184.xx.xx.xx:3948 peer info: IV_PROTO=2
Thu Jan 24 16:51:51 2019 us=790797 184.xx.xx.xx:3948 peer info: IV_LZ4=1
Thu Jan 24 16:51:51 2019 us=790803 184.xx.xx.xx:3948 peer info: IV_LZ4v2=1
Thu Jan 24 16:51:51 2019 us=790809 184.xx.xx.xx:3948 peer info: IV_LZO=1
Thu Jan 24 16:51:51 2019 us=790815 184.xx.xx.xx:3948 peer info: IV_COMP_STUB=1
Thu Jan 24 16:51:51 2019 us=790821 184.xx.xx.xx:3948 peer info: IV_COMP_STUBv2=1
Thu Jan 24 16:51:51 2019 us=790827 184.xx.xx.xx:3948 peer info: IV_TCPNL=1
Thu Jan 24 16:51:51 2019 us=790919 184.xx.xx.xx:3948 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=790929 184.xx.xx.xx:3948 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=790936 184.xx.xx.xx:3948 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:51 2019 us=790943 184.xx.xx.xx:3948 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:51 2019 us=847349 MULTI: multi_create_instance called
Thu Jan 24 16:51:51 2019 us=847447 203.xx.xx.xx:49417 Re-using SSL/TLS context
Thu Jan 24 16:51:51 2019 us=847461 203.xx.xx.xx:49417 LZ4v2 compression initializing
Thu Jan 24 16:51:51 2019 us=847599 203.xx.xx.xx:49417 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=847608 203.xx.xx.xx:49417 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Jan 24 16:51:51 2019 us=847637 203.xx.xx.xx:49417 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 24 16:51:51 2019 us=847643 203.xx.xx.xx:49417 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 24 16:51:51 2019 us=847663 203.xx.xx.xx:49417 TLS: Initial packet from [AF_INET]203.xx.xx.xx:49417, sid=4c6abf27 ef5fa47c
Thu Jan 24 16:51:51 2019 us=944584 184.xx.xx.xx:3948 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Jan 24 16:51:51 2019 us=944777 184.xx.xx.xx:3948 [office5] Peer Connection Initiated with [AF_INET]184.xx.xx.xx:3948
Thu Jan 24 16:51:51 2019 us=944917 office5/184.xx.xx.xx:3948 OPTIONS IMPORT: reading client specific options from: ccd/office5
Thu Jan 24 16:51:51 2019 us=944973 office5/184.xx.xx.xx:3948 MULTI_sva: pool returned IPv4=10.18.0.5, IPv6=(Not enabled)
Thu Jan 24 16:51:51 2019 us=945003 office5/184.xx.xx.xx:3948 MULTI: Learn: 10.18.0.5 -> office5/184.xx.xx.xx:3948
Thu Jan 24 16:51:51 2019 us=945010 office5/184.xx.xx.xx:3948 MULTI: primary virtual IP for office5/184.xx.xx.xx:3948: 10.18.0.5
Thu Jan 24 16:51:51 2019 us=945017 office5/184.xx.xx.xx:3948 MULTI: internal route 192.168.12.0/24 -> office5/184.xx.xx.xx:3948
Thu Jan 24 16:51:51 2019 us=945024 office5/184.xx.xx.xx:3948 MULTI: Learn: 192.168.12.0/24 -> office5/184.xx.xx.xx:3948
Thu Jan 24 16:51:52 2019 us=99388 office1/83.xx.xx.xx:41818 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 24 16:51:52 2019 us=99474 office1/83.xx.xx.xx:41818 SENT CONTROL [office1]: 'PUSH_REPLY,route 192.168.7.0 255.255.255.0,keepalive 10 60,compress lz4-v2,route-gateway 10.18.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.18.0.3 255.255.255.0,peer-id 1' (status=1)
Thu Jan 24 16:51:52 2019 us=392194 office2/46.xx.xx.xx:24894 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 24 16:51:52 2019 us=392288 office2/46.xx.xx.xx:24894 SENT CONTROL [office2]: 'PUSH_REPLY,route 192.168.128.0 255.255.240.0,keepalive 10 60,compress lz4-v2,route-gateway 10.18.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.18.0.2 255.255.255.0,peer-id 0' (status=1)
Thu Jan 24 16:51:52 2019 us=594946 203.xx.xx.xx:49417 VERIFY OK: depth=1, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=cert, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:52 2019 us=595137 203.xx.xx.xx:49417 VERIFY OK: depth=0, C=AE, ST=Ajman, L=Ajman, O=company_name, CN=office4, name=EasyRSA, emailAddress=email
Thu Jan 24 16:51:52 2019 us=685786 office3/91.xx.xx.xx:32439 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 24 16:51:52 2019 us=685872 office3/91.xx.xx.xx:32439 SENT CONTROL [office3]: 'PUSH_REPLY,route 192.168.7.0 255.255.255.0,route 192.168.128.0 255.255.240.0,keepalive 10 60,compress lz4-v2,route-gateway 10.18.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.18.0.4 255.255.255.0,peer-id 3' (status=1)
Thu Jan 24 16:51:52 2019 us=965762 203.xx.xx.xx:49417 peer info: IV_VER=2.4.6
Thu Jan 24 16:51:52 2019 us=965831 203.xx.xx.xx:49417 peer info: IV_PLAT=freebsd
Thu Jan 24 16:51:52 2019 us=965840 203.xx.xx.xx:49417 peer info: IV_PROTO=2
Thu Jan 24 16:51:52 2019 us=965847 203.xx.xx.xx:49417 peer info: IV_LZ4=1
Thu Jan 24 16:51:52 2019 us=965853 203.xx.xx.xx:49417 peer info: IV_LZ4v2=1
Thu Jan 24 16:51:52 2019 us=965859 203.xx.xx.xx:49417 peer info: IV_LZO=1
Thu Jan 24 16:51:52 2019 us=965866 203.xx.xx.xx:49417 peer info: IV_COMP_STUB=1
Thu Jan 24 16:51:52 2019 us=965874 203.xx.xx.xx:49417 peer info: IV_COMP_STUBv2=1
Thu Jan 24 16:51:52 2019 us=965881 203.xx.xx.xx:49417 peer info: IV_TCPNL=1
Thu Jan 24 16:51:52 2019 us=965980 203.xx.xx.xx:49417 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:52 2019 us=965990 203.xx.xx.xx:49417 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:52 2019 us=965997 203.xx.xx.xx:49417 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Jan 24 16:51:52 2019 us=966004 203.xx.xx.xx:49417 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 24 16:51:53 2019 us=34869 office5/184.xx.xx.xx:3948 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 24 16:51:53 2019 us=34960 office5/184.xx.xx.xx:3948 SENT CONTROL [office5]: 'PUSH_REPLY,route 192.168.7.0 255.255.255.0,route 192.168.128.0 255.255.240.0,keepalive 10 60,compress lz4-v2,route-gateway 10.18.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.18.0.5 255.255.255.0,peer-id 2' (status=1)
Thu Jan 24 16:51:53 2019 us=336353 203.xx.xx.xx:49417 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Jan 24 16:51:53 2019 us=336435 203.xx.xx.xx:49417 [office4] Peer Connection Initiated with [AF_INET]203.xx.xx.xx:49417
Thu Jan 24 16:51:53 2019 us=336495 office4/203.xx.xx.xx:49417 OPTIONS IMPORT: reading client specific options from: ccd/office4
Thu Jan 24 16:51:53 2019 us=336541 office4/203.xx.xx.xx:49417 MULTI_sva: pool returned IPv4=10.18.0.6, IPv6=(Not enabled)
Thu Jan 24 16:51:53 2019 us=336573 office4/203.xx.xx.xx:49417 MULTI: Learn: 10.18.0.6 -> office4/203.xx.xx.xx:49417
Thu Jan 24 16:51:53 2019 us=336667 office4/203.xx.xx.xx:49417 MULTI: primary virtual IP for office4/203.xx.xx.xx:49417: 10.18.0.6
Thu Jan 24 16:51:53 2019 us=336676 office4/203.xx.xx.xx:49417 MULTI: internal route 192.168.3.0/24 -> office4/203.xx.xx.xx:49417
Thu Jan 24 16:51:53 2019 us=336684 office4/203.xx.xx.xx:49417 MULTI: Learn: 192.168.3.0/24 -> office4/203.xx.xx.xx:49417
ifconfig ens4: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1460
inet 10.156.0.2 netmask 255.255.255.255 broadcast 0.0.0.0
inet6 fe80::4001:aff:fe9c:2 prefixlen 64 scopeid 0x20<link>
ether 42:01:0a:9c:00:02 txqueuelen 1000 (Ethernet)
RX packets 96727932 bytes 70186332365 (70.1 GB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 96190891 bytes 70055607821 (70.0 GB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 486 bytes 40541 (40.5 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 486 bytes 40541 (40.5 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.18.0.1 netmask 255.255.255.0 destination 10.18.0.1
inet6 fe80::e535:9179:f9bb:8b82 prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
RX packets 26 bytes 1938 (1.9 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 9 bytes 432 (432.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Regards,
Vladimir.
