hi
My problem is not very complicated, but yet I can not ping a client equipment to the server.
From the server to the client it works.
here is my network architecture
This is a windows 7 on which OpenVPN Server works.
We're going through a router
Then we arrive in the Teltonika router with OpenVPN integrated client.
Server : Ping 192.168.2.1 Ok
Client : ping 192.168.1.99 No Ok
I think this is the problem of server-side routing?
I'm counting on you to help me.
----
here is the server configuration file
[oconf=server]
port 1194
proto udp4
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist "C:\\Program Files\\OpenVPN\\log\\ipp.txt"
ifconfig 192.168.1.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"
client-config-dir "C:\\Program Files\\OpenVPN\\config\\ccd"
route 10.8.0.0 255.255.255.0 10.8.0.1
route 192.168.2.0 255.255.255.0
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
explicit-exit-notify 1
[/oconf]
file CCD Client
ifconfig-push 10.8.0.9 10.8.0.10
iroute 192.168.2.0 255.255.255.0
here is the client configuration file. Client is the OpnVPN Router Teltonika
[oconf=client]
option persist_key '1'
option persist_tun '1'
option name_is_hexed '1'
option verb '5'
option nobind '1'
option resolv_retry 'infinite'
option _tls_auth '0'
option proto 'udp'
option port '1194'
option comp_lzo 'yes'
option cipher 'AES-256-CBC'
option _auth 'tls'
option _tls_cipher 'all'
option key_encrypted '0'
option keepalive '10 120'
option ca '/lib/uci/upload/cbid.openvpn.636C69656E745F467265654E31.ca'
option cert '/lib/uci/upload/cbid.openvpn.636C69656E745F467265654E31.cert'
option key '/lib/uci/upload/cbid.openvpn.636C69656E745F467265654E31.key'
option auth 'none'
option enable '1'
option remote '192.168.3.220'
option dev 'tun_c_FreeN1'
option client '1'
option _route '192.168.1.0'
option route '192.168.1.0 255.255.255.0'
[/oconf]
here is the server configuration log
[olog]
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_private_mode = 00000000
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_cert_private = DISABLED
Sat Apr 13 19:39:53 2019 pkcs11_pin_cache_period = -1
Sat Apr 13 19:39:53 2019 pkcs11_id = '[UNDEF]'
Sat Apr 13 19:39:53 2019 pkcs11_id_management = DISABLED
Sat Apr 13 19:39:53 2019 server_network = 10.8.0.0
Sat Apr 13 19:39:53 2019 server_netmask = 255.255.255.0
Sat Apr 13 19:39:53 2019 server_network_ipv6 = ::
Sat Apr 13 19:39:53 2019 server_netbits_ipv6 = 0
Sat Apr 13 19:39:53 2019 server_bridge_ip = 0.0.0.0
Sat Apr 13 19:39:53 2019 server_bridge_netmask = 0.0.0.0
Sat Apr 13 19:39:53 2019 server_bridge_pool_start = 0.0.0.0
Sat Apr 13 19:39:53 2019 server_bridge_pool_end = 0.0.0.0
Sat Apr 13 19:39:53 2019 push_entry = 'route 192.168.1.0 255.255.255.0'
Sat Apr 13 19:39:53 2019 push_entry = 'route 192.168.2.0 255.255.255.0'
Sat Apr 13 19:39:53 2019 push_entry = 'route 10.8.0.1'
Sat Apr 13 19:39:53 2019 push_entry = 'topology net30'
Sat Apr 13 19:39:53 2019 push_entry = 'ping 10'
Sat Apr 13 19:39:53 2019 push_entry = 'ping-restart 120'
Sat Apr 13 19:39:53 2019 ifconfig_pool_defined = ENABLED
Sat Apr 13 19:39:53 2019 ifconfig_pool_start = 10.8.0.4
Sat Apr 13 19:39:53 2019 ifconfig_pool_end = 10.8.0.251
Sat Apr 13 19:39:53 2019 ifconfig_pool_netmask = 0.0.0.0
Sat Apr 13 19:39:53 2019 ifconfig_pool_persist_filename = 'C:\Program Files\OpenVPN\log\ipp.txt'
Sat Apr 13 19:39:53 2019 ifconfig_pool_persist_refresh_freq = 600
Sat Apr 13 19:39:53 2019 ifconfig_ipv6_pool_defined = DISABLED
Sat Apr 13 19:39:53 2019 ifconfig_ipv6_pool_base = ::
Sat Apr 13 19:39:53 2019 ifconfig_ipv6_pool_netbits = 0
Sat Apr 13 19:39:53 2019 n_bcast_buf = 256
Sat Apr 13 19:39:53 2019 tcp_queue_limit = 64
Sat Apr 13 19:39:53 2019 real_hash_size = 256
Sat Apr 13 19:39:53 2019 virtual_hash_size = 256
Sat Apr 13 19:39:53 2019 client_connect_script = '[UNDEF]'
Sat Apr 13 19:39:53 2019 learn_address_script = '[UNDEF]'
Sat Apr 13 19:39:53 2019 client_disconnect_script = '[UNDEF]'
Sat Apr 13 19:39:53 2019 client_config_dir = 'C:\Program Files\OpenVPN\config\ccd'
Sat Apr 13 19:39:53 2019 ccd_exclusive = DISABLED
Sat Apr 13 19:39:53 2019 tmp_dir = 'C:\Users\llardeur\AppData\Local\Temp\'
Sat Apr 13 19:39:53 2019 push_ifconfig_defined = DISABLED
Sat Apr 13 19:39:53 2019 push_ifconfig_local = 0.0.0.0
Sat Apr 13 19:39:53 2019 push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 13 19:39:53 2019 push_ifconfig_ipv6_defined = DISABLED
Sat Apr 13 19:39:53 2019 push_ifconfig_ipv6_local = ::/0
Sat Apr 13 19:39:53 2019 push_ifconfig_ipv6_remote = ::
Sat Apr 13 19:39:53 2019 enable_c2c = DISABLED
Sat Apr 13 19:39:53 2019 duplicate_cn = DISABLED
Sat Apr 13 19:39:53 2019 cf_max = 0
Sat Apr 13 19:39:53 2019 cf_per = 0
Sat Apr 13 19:39:53 2019 max_clients = 1024
Sat Apr 13 19:39:53 2019 max_routes_per_client = 256
Sat Apr 13 19:39:53 2019 auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 13 19:39:53 2019 auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 13 19:39:53 2019 auth_token_generate = DISABLED
Sat Apr 13 19:39:53 2019 auth_token_lifetime = 0
Sat Apr 13 19:39:53 2019 client = DISABLED
Sat Apr 13 19:39:53 2019 pull = DISABLED
Sat Apr 13 19:39:53 2019 auth_user_pass_file = '[UNDEF]'
Sat Apr 13 19:39:53 2019 show_net_up = DISABLED
Sat Apr 13 19:39:53 2019 route_method = 0
Sat Apr 13 19:39:53 2019 block_outside_dns = DISABLED
Sat Apr 13 19:39:53 2019 ip_win32_defined = DISABLED
Sat Apr 13 19:39:53 2019 ip_win32_type = 3
Sat Apr 13 19:39:53 2019 dhcp_masq_offset = 0
Sat Apr 13 19:39:53 2019 dhcp_lease_time = 31536000
Sat Apr 13 19:39:53 2019 tap_sleep = 10
Sat Apr 13 19:39:53 2019 dhcp_options = DISABLED
Sat Apr 13 19:39:53 2019 dhcp_renew = DISABLED
Sat Apr 13 19:39:53 2019 dhcp_pre_release = DISABLED
Sat Apr 13 19:39:53 2019 domain = '[UNDEF]'
Sat Apr 13 19:39:53 2019 netbios_scope = '[UNDEF]'
Sat Apr 13 19:39:53 2019 netbios_node_type = 0
Sat Apr 13 19:39:53 2019 disable_nbt = DISABLED
Sat Apr 13 19:39:53 2019 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 21 2019
Sat Apr 13 19:39:53 2019 Windows version 6.1 (Windows 7) 64bit
Sat Apr 13 19:39:53 2019 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Sat Apr 13 19:39:53 2019 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25349
Sat Apr 13 19:39:53 2019 Need hold release from management interface, waiting...
Sat Apr 13 19:39:53 2019 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25349
Sat Apr 13 19:39:53 2019 MANAGEMENT: CMD 'state on'
Sat Apr 13 19:39:53 2019 MANAGEMENT: CMD 'log all on'
Sat Apr 13 19:39:53 2019 MANAGEMENT: CMD 'echo all on'
Sat Apr 13 19:39:53 2019 MANAGEMENT: CMD 'bytecount 5'
Sat Apr 13 19:39:53 2019 MANAGEMENT: CMD 'hold off'
Sat Apr 13 19:39:53 2019 MANAGEMENT: CMD 'hold release'
Sat Apr 13 19:39:53 2019 Diffie-Hellman initialized with 1024 bit key
Sat Apr 13 19:39:53 2019 TLS-Auth MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sat Apr 13 19:39:53 2019 interactive service msg_channel=0
Sat Apr 13 19:39:53 2019 ROUTE_GATEWAY 192.168.3.1
Sat Apr 13 19:39:53 2019 open_tun
Sat Apr 13 19:39:53 2019 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{D192E076-EAA6-4E18-B18F-FC4EBE34D03A}.tap
Sat Apr 13 19:39:53 2019 TAP-Windows Driver Version 9.21
Sat Apr 13 19:39:53 2019 TAP-Windows MTU=1500
Sat Apr 13 19:39:53 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {D192E076-EAA6-4E18-B18F-FC4EBE34D03A} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sat Apr 13 19:39:53 2019 Sleeping for 10 seconds...
Sat Apr 13 19:40:03 2019 Successful ARP Flush on interface [22] {D192E076-EAA6-4E18-B18F-FC4EBE34D03A}
Sat Apr 13 19:40:03 2019 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Apr 13 19:40:03 2019 MANAGEMENT: >STATE:1555177203,ASSIGN_IP,,10.8.0.1,,,,
Sat Apr 13 19:40:03 2019 MANAGEMENT: >STATE:1555177203,ADD_ROUTES,,,,,,
Sat Apr 13 19:40:03 2019 C:\windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.1
Sat Apr 13 19:40:03 2019 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sat Apr 13 19:40:03 2019 Route addition via IPAPI succeeded [adaptive]
Sat Apr 13 19:40:03 2019 C:\windows\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.8.0.2
Sat Apr 13 19:40:03 2019 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sat Apr 13 19:40:03 2019 Route addition via IPAPI succeeded [adaptive]
Sat Apr 13 19:40:03 2019 C:\windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sat Apr 13 19:40:03 2019 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sat Apr 13 19:40:03 2019 Route addition via IPAPI succeeded [adaptive]
Sat Apr 13 19:40:03 2019 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sat Apr 13 19:40:03 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Apr 13 19:40:03 2019 UDPv4 link local (bound): [AF_INET][undef]:1194
Sat Apr 13 19:40:03 2019 UDPv4 link remote: [AF_UNSPEC]
Sat Apr 13 19:40:03 2019 MULTI: multi_init called, r=256 v=256
Sat Apr 13 19:40:03 2019 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Apr 13 19:40:03 2019 IFCONFIG POOL LIST
Sat Apr 13 19:40:03 2019 Initialization Sequence Completed
Sat Apr 13 19:40:03 2019 MANAGEMENT: >STATE:1555177203,CONNECTED,SUCCESS,10.8.0.1,,,,
Sat Apr 13 19:41:03 2019 MULTI: multi_create_instance called
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 Re-using SSL/TLS context
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 LZO compression initializing
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 TLS: Initial packet from [AF_INET]192.168.3.211:59742, sid=7db87790 7d49681b
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 VERIFY OK: depth=1, C=FR, ST=IDF, L=PARIS, O=AC, OU=ACE, CN=VPNTeltonika, name=xxx, emailAddress=xxx@yyy.fr
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 VERIFY OK: depth=0, C=FR, ST=IDF, L=PARIS, O=AC, OU=ACE, CN=clienttelto, name=xxx, emailAddress=xxx@yyy.fr
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_VER=2.4.5
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_PLAT=linux
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_PROTO=2
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_NCP=2
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_LZ4=1
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_LZ4v2=1
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_LZO=1
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_COMP_STUB=1
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_COMP_STUBv2=1
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 peer info: IV_TCPNL=1
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1538'
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Sat Apr 13 19:41:03 2019 192.168.3.211:59742 [clienttelto] Peer Connection Initiated with [AF_INET]192.168.3.211:59742
Sat Apr 13 19:41:03 2019 clienttelto/192.168.3.211:59742 OPTIONS IMPORT: reading client specific options from: C:\Program Files\OpenVPN\config\ccd\clienttelto
Sat Apr 13 19:41:03 2019 clienttelto/192.168.3.211:59742 MULTI: Learn: 10.8.0.9 -> clienttelto/192.168.3.211:59742
Sat Apr 13 19:41:03 2019 clienttelto/192.168.3.211:59742 MULTI: primary virtual IP for clienttelto/192.168.3.211:59742: 10.8.0.9
Sat Apr 13 19:41:03 2019 clienttelto/192.168.3.211:59742 MULTI: internal route 192.168.2.0/24 -> clienttelto/192.168.3.211:59742
Sat Apr 13 19:41:03 2019 clienttelto/192.168.3.211:59742 MULTI: Learn: 192.168.2.0/24 -> clienttelto/192.168.3.211:59742
Sat Apr 13 19:41:03 2019 clienttelto/192.168.3.211:59742 REMOVE PUSH ROUTE: 'route 192.168.2.0 255.255.255.0'
Sat Apr 13 19:41:05 2019 clienttelto/192.168.3.211:59742 PUSH: Received control message: 'PUSH_REQUEST'
Sat Apr 13 19:41:05 2019 clienttelto/192.168.3.211:59742 SENT CONTROL [clienttelto]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.9 10.8.0.10,peer-id 0,cipher AES-256-GCM' (status=1)
Sat Apr 13 19:41:05 2019 clienttelto/192.168.3.211:59742 Data Channel: using negotiated cipher 'AES-256-GCM'
Sat Apr 13 19:41:05 2019 clienttelto/192.168.3.211:59742 Data Channel MTU parms [ L:1550 D:1450 EF:50 EB:406 ET:0 EL:3 ]
Sat Apr 13 19:41:05 2019 clienttelto/192.168.3.211:59742 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 13 19:41:05 2019 clienttelto/192.168.3.211:59742 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 13 19:42:44 2019 MULTI: Learn: 192.168.2.1 -> clienttelto/192.168.3.211:59742
Sat Apr 13 19:58:37 2019 MULTI: Learn: 192.168.2.11 -> clienttelto/192.168.3.211:59742
Sat Apr 13 19:58:58 2019 MULTI: Learn: 192.168.2.12 -> clienttelto/192.168.3.211:59742
Sat Apr 13 20:04:41 2019 MULTI: Learn: 192.168.2.11 -> clienttelto/192.168.3.211:59742
Sat Apr 13 20:05:03 2019 MULTI: Learn: 192.168.2.12 -> clienttelto/192.168.3.211:59742
[/olog]
here is the clien configuration log
[olog]
Sat Apr 13 19:40:58 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: [server] Inactivity tim
eout (--ping-restart), restarting
Sat Apr 13 19:40:58 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: TCP/UDP: Closing socket
Sat Apr 13 19:40:58 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: SIGUSR1[soft,ping-resta
rt] received, process restarting
Sat Apr 13 19:40:58 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Restart pause, 5 second
(s)
Sat Apr 13 19:41:03 2019 daemon.warn openvpn(636C69656E745F467265654E31)[8584]: WARNING: No server certif
icate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Re-using SSL/TLS contex
t
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: LZO compression initial
izing
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Control Channel MTU par
ms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Data Channel MTU parms
[ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Local Options String (V
ER=V4): 'V4,dev-type tun,link-mtu 1538,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth [null-di
gest],keysize 256,key-method 2,tls-client'
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Expected Remote Options
String (VER=V4): 'V4,dev-type tun,link-mtu 1538,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,aut
h [null-digest],keysize 256,key-method 2,tls-server'
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: TCP/UDP: Preserving rec
ently used remote address: [AF_INET]192.168.3.220:1194
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Socket Buffers: R=[8388
608->8388608] S=[8388608->8388608]
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: UDP link local: (not bo
und)
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: UDP link remote: [AF_IN
ET]192.168.3.220:1194
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: TLS: Initial packet fro
m [AF_INET]192.168.3.220:1194, sid=239f15d0 94311a3c
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: VERIFY OK: depth=1, C=F
R, ST=IDF, L=PARIS, O=AC, OU=ACE, CN=VPNTeltonika, name=xxx, emailAddress=xxx@yyy.fr
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: VERIFY OK: depth=0, C=F
R, ST=IDF, L=PARIS, O=AC, OU=ACE, CN=server, name=xxx, emailAddress=xxx@yyy.fr
Sat Apr 13 19:41:03 2019 daemon.warn openvpn(636C69656E745F467265654E31)[8584]: WARNING: 'link-mtu' is us
ed inconsistently, local='link-mtu 1538', remote='link-mtu 1558'
Sat Apr 13 19:41:03 2019 daemon.warn openvpn(636C69656E745F467265654E31)[8584]: WARNING: 'auth' is used i
nconsistently, local='auth [null-digest]', remote='auth SHA1'
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Control Channel: TLSv1.
2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Sat Apr 13 19:41:03 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: [server] Peer Connectio
n Initiated with [AF_INET]192.168.3.220:1194
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: SENT CONTROL [server]:
'PUSH_REQUEST' (status=1)
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: PUSH: Received control
message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 1
20,ifconfig 10.8.0.9 10.8.0.10,peer-id 0,cipher AES-256-GCM'
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: OPTIONS IMPORT: timers
and/or timeouts modified
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: OPTIONS IMPORT: --ifcon
fig/up options modified
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: OPTIONS IMPORT: route o
ptions modified
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: OPTIONS IMPORT: peer-id
set
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: OPTIONS IMPORT: adjusti
ng link_mtu to 1625
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: OPTIONS IMPORT: data ch
annel crypto options modified
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Data Channel: using neg
otiated cipher 'AES-256-GCM'
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Data Channel MTU parms
[ L:1553 D:1450 EF:53 EB:406 ET:0 EL:3 ]
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Outgoing Data Channel:
Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Incoming Data Channel:
Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Preserving previous TUN
/TAP instance: tun_c_FreeN1
Sat Apr 13 19:41:04 2019 daemon.notice openvpn(636C69656E745F467265654E31)[8584]: Initialization Sequence
Completed
[/olog]
here is the server route table
===========================================================================
Liste d'Interfaces
31...00 ff dd b6 64 ba ......TeamViewer VPN Adapter
22...00 ff d1 92 e0 76 ......TAP-Windows Adapter V9
16...08 11 96 ee 48 55 ......Microsoft Virtual WiFi Miniport Adapter
13...08 11 96 ee 48 54 ......Intel(R) Centrino(R) Advanced-N 6205
10...e4 11 5b 27 db 6d ......Intel(R) 82579LM Gigabit Network Connection
23...0a 00 27 00 00 17 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
30...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #2
15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
28...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #4
29...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #5
25...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #7
24...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #8
26...00 00 00 00 00 00 00 e0 Carte Microsoft ISATAP #9
===========================================================================
IPv4 Table de routage
===========================================================================
Itinéraires actifs :
Destination réseau Masque réseau Adr. passerelle Adr. interface Métrique
0.0.0.0 0.0.0.0 192.168.3.1 192.168.1.99 10
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.99 266
10.8.0.0 255.255.255.0 On-link 10.8.0.1 20
10.8.0.0 255.255.255.0 10.8.0.2 10.8.0.1 20
10.8.0.0 255.255.255.252 On-link 10.8.0.1 276
10.8.0.1 255.255.255.255 On-link 10.8.0.1 276
10.8.0.3 255.255.255.255 On-link 10.8.0.1 276
10.8.0.9 255.255.255.255 On-link 10.8.0.1 21
10.8.0.255 255.255.255.255 On-link 10.8.0.1 276
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.99 266
192.168.1.0 255.255.255.0 10.8.0.9 10.8.0.1 21
192.168.1.99 255.255.255.255 On-link 192.168.1.99 266
192.168.1.255 255.255.255.255 On-link 192.168.1.99 266
192.168.2.0 255.255.255.0 10.8.0.2 10.8.0.1 20
192.168.56.0 255.255.255.0 On-link 192.168.56.1 266
192.168.56.1 255.255.255.255 On-link 192.168.56.1 266
192.168.56.255 255.255.255.255 On-link 192.168.56.1 266
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.99 266
224.0.0.0 240.0.0.0 On-link 192.168.56.1 266
224.0.0.0 240.0.0.0 On-link 10.8.0.1 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.99 266
255.255.255.255 255.255.255.255 On-link 192.168.56.1 266
255.255.255.255 255.255.255.255 On-link 10.8.0.1 276
===========================================================================
Itinéraires persistants :
Adresse réseau Masque réseau Adresse passerelle Métrique
0.0.0.0 0.0.0.0 192.168.1.1 Par défaut
===========================================================================
IPv6 Table de routage
===========================================================================
Itinéraires actifs :
If Metric Network Destination Gateway
1 306 ::1/128 On-link
23 266 fe80::/64 On-link
22 276 fe80::/64 On-link
23 266 fe80::2cf3:8a9:eb3e:b912/128
On-link
22 276 fe80::4053:e6f4:94b1:6bb1/128
On-link
1 306 ff00::/8 On-link
23 266 ff00::/8 On-link
22 276 ff00::/8 On-link
===========================================================================
Itinéraires persistants :
Aucun
here is the client route table
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.3.1 0.0.0.0 UG 0 0 0 eth1
10.8.0.1 10.8.0.10 255.255.255.255 UGH 0 0 0 tun_c_FreeN1
10.8.0.10 * 255.255.255.255 UH 0 0 0 tun_c_FreeN1
192.168.1.0 10.8.0.10 255.255.255.0 UG 0 0 0 tun_c_FreeN1
192.168.2.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.3.0 * 255.255.255.0 U 0 0 0 eth1
-----
Exemple ping ok serveur to client
C:\windows\system32>ping 192.168.2.1
Envoi d'une requête 'Ping' 192.168.2.1 avec 32 octets de données :
Réponse de 192.168.2.1 : octets=32 temps=1 ms TTL=64
Réponse de 192.168.2.1 : octets=32 temps=1 ms TTL=64
Réponse de 192.168.2.1 : octets=32 temps=1 ms TTL=64
Réponse de 192.168.2.1 : octets=32 temps=1 ms TTL=64
Statistiques Ping pour 192.168.2.1:
Paquets : envoyés = 4, reçus = 4, perdus = 0 (perte 0%),
Durée approximative des boucles en millisecondes :
Minimum = 1ms, Maximum = 1ms, Moyenne = 1ms
C:\windows\system32>
example ping error client ti serveur
PING 192.168.1.99 (192.168.1.99): 56 data bytes
^C
--- 192.168.1.99 ping statistics ---
11 packets transmitted, 0 packets received, 100% packet loss
root@Teltonika-RUT955:~#
-------
an extract from the ping frame with wireshark
