I have been using OpenVPN (bridged mode, i.e. TAP) successfully since 2006. I now have the need to access my home network remotely from my iPhone. So I need a second VPN server with TUN since the iOS OpenVPN app does not support TAP. Currently using OpenVPN 2.4.7 (Community).
I have spent the past several days reading howtos, manuals, guides, forums and whatnot, but I still cannot ping anything on the server's LAN from the iPhone, with this new TUN configuration. I have set up a TUN server on a separate machine from the TAP server (for now anyway). I may put both configurations on the same machine later once I get TUN working. But for now it's not working.
I am almost sure it's a routing issue but cannot figure it out (the routing stuff is a bit of black magic for me, even if I understand SOME of it). The LAN subnet is 192.168.235.0/24. The VPN subnet is 10.8.0.0/24. The client (iPhone) connects. From the client, I can ping the VPN server (10.8.0.1), but I cannot ping the server on the LAN side (192.168.235.146), nor any other machine on the LAN. I can ping stuff on the internet (i.e.
www.google.com).
Here is my server.ovpn
port xxxxx
proto udp
dev tun
dev-node PierreVPN
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
route 10.8.0.0 255.255.255.250 192.168.235.146 # Is this redundant with the route defined in router?
push "route 192.168.235.0 255.255.255.0 10.8.0.1" # Is the syntax here correct?
client-to-client
keepalive 10 120
cipher AES-256-GCM
compress lz4
max-clients 10
persist-key
persist-tun
status openvpn-status.log
verb 4
remote-cert-tls client
auth-nocache
and my client.ovpn:
client
dev tun
proto udp
remote my.vpnserver.address xxxxx
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert Extra1.crt
key Extra1.key
cipher AES-256-GCM
compress lz4
verb 4
remote-cert-tls server
auth-nocache
I have also added a route to my router on the LAN (is it needed?), specifying:
Destination IP address: 10.8.0.0
Subnet mask: 255.255.255.0
Gateway: 192.168.235.146
Interface: LAN
Not sure if this is redundant with the route directive in server.ovpn.
Here is the server log:
[olog]
Sun Apr 14 13:38:05 2019 us=710614 Current Parameter Settings:
Sun Apr 14 13:38:05 2019 us=710614 config = 'C:\Program Files\OpenVPN\config\server.ovpn'
Sun Apr 14 13:38:05 2019 us=710614 mode = 1
Sun Apr 14 13:38:05 2019 us=710614 show_ciphers = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 show_digests = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 show_engines = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 genkey = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 key_pass_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 show_tls_ciphers = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 connect_retry_max = 0
Sun Apr 14 13:38:05 2019 us=710614 Connection profiles [0]:
Sun Apr 14 13:38:05 2019 us=710614 proto = udp
Sun Apr 14 13:38:05 2019 us=710614 local = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 local_port = '57575'
Sun Apr 14 13:38:05 2019 us=710614 remote = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 remote_port = '57575'
Sun Apr 14 13:38:05 2019 us=710614 remote_float = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 bind_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 bind_local = ENABLED
Sun Apr 14 13:38:05 2019 us=710614 bind_ipv6_only = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 connect_retry_seconds = 5
Sun Apr 14 13:38:05 2019 us=710614 connect_timeout = 120
Sun Apr 14 13:38:05 2019 us=710614 socks_proxy_server = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 socks_proxy_port = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 tun_mtu = 1500
Sun Apr 14 13:38:05 2019 us=710614 tun_mtu_defined = ENABLED
Sun Apr 14 13:38:05 2019 us=710614 link_mtu = 1500
Sun Apr 14 13:38:05 2019 us=710614 link_mtu_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 tun_mtu_extra = 0
Sun Apr 14 13:38:05 2019 us=710614 tun_mtu_extra_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 mtu_discover_type = -1
Sun Apr 14 13:38:05 2019 us=710614 fragment = 0
Sun Apr 14 13:38:05 2019 us=710614 mssfix = 1450
Sun Apr 14 13:38:05 2019 us=710614 explicit_exit_notification = 0
Sun Apr 14 13:38:05 2019 us=710614 Connection profiles END
Sun Apr 14 13:38:05 2019 us=710614 remote_random = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 ipchange = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 dev = 'tun'
Sun Apr 14 13:38:05 2019 us=710614 dev_type = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 dev_node = 'PierreVPN'
Sun Apr 14 13:38:05 2019 us=710614 lladdr = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 topology = 1
Sun Apr 14 13:38:05 2019 us=710614 ifconfig_local = '10.8.0.1'
Sun Apr 14 13:38:05 2019 us=710614 ifconfig_remote_netmask = '10.8.0.2'
Sun Apr 14 13:38:05 2019 us=710614 ifconfig_noexec = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 ifconfig_nowarn = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 ifconfig_ipv6_local = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 ifconfig_ipv6_netbits = 0
Sun Apr 14 13:38:05 2019 us=710614 ifconfig_ipv6_remote = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 shaper = 0
Sun Apr 14 13:38:05 2019 us=710614 mtu_test = 0
Sun Apr 14 13:38:05 2019 us=710614 mlock = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 keepalive_ping = 10
Sun Apr 14 13:38:05 2019 us=710614 keepalive_timeout = 120
Sun Apr 14 13:38:05 2019 us=710614 inactivity_timeout = 0
Sun Apr 14 13:38:05 2019 us=710614 ping_send_timeout = 10
Sun Apr 14 13:38:05 2019 us=710614 ping_rec_timeout = 240
Sun Apr 14 13:38:05 2019 us=710614 ping_rec_timeout_action = 2
Sun Apr 14 13:38:05 2019 us=710614 ping_timer_remote = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 remap_sigusr1 = 0
Sun Apr 14 13:38:05 2019 us=710614 persist_tun = ENABLED
Sun Apr 14 13:38:05 2019 us=710614 persist_local_ip = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 persist_remote_ip = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 persist_key = ENABLED
Sun Apr 14 13:38:05 2019 us=710614 passtos = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 resolve_retry_seconds = 1000000000
Sun Apr 14 13:38:05 2019 us=710614 resolve_in_advance = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 username = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 groupname = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 chroot_dir = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 cd_dir = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 writepid = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 up_script = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 down_script = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=710614 down_pre = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 up_restart = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 up_delay = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 daemon = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 inetd = 0
Sun Apr 14 13:38:05 2019 us=710614 log = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 suppress_timestamps = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 machine_readable_output = DISABLED
Sun Apr 14 13:38:05 2019 us=710614 nice = 0
Sun Apr 14 13:38:05 2019 us=710614 verbosity = 4
Sun Apr 14 13:38:05 2019 us=710614 mute = 0
Sun Apr 14 13:38:05 2019 us=710614 gremlin = 0
Sun Apr 14 13:38:05 2019 us=710614 status_file = 'openvpn-status.log'
Sun Apr 14 13:38:05 2019 us=710614 status_file_version = 1
Sun Apr 14 13:38:05 2019 us=710614 status_file_update_freq = 60
Sun Apr 14 13:38:05 2019 us=711614 occ = ENABLED
Sun Apr 14 13:38:05 2019 us=711614 rcvbuf = 0
Sun Apr 14 13:38:05 2019 us=711614 sndbuf = 0
Sun Apr 14 13:38:05 2019 us=711614 sockflags = 0
Sun Apr 14 13:38:05 2019 us=711614 fast_io = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 comp.alg = 4
Sun Apr 14 13:38:05 2019 us=711614 comp.flags = 4
Sun Apr 14 13:38:05 2019 us=711614 route_script = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 route_default_gateway = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 route_default_metric = 0
Sun Apr 14 13:38:05 2019 us=711614 route_noexec = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 route_delay = 0
Sun Apr 14 13:38:05 2019 us=711614 route_delay_window = 30
Sun Apr 14 13:38:05 2019 us=711614 route_delay_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 route_nopull = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 route_gateway_via_dhcp = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 allow_pull_fqdn = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 route 10.8.0.0/255.255.255.0/default (not set)/default (not set)
Sun Apr 14 13:38:05 2019 us=711614 route 10.8.0.0/255.255.255.0/192.168.235.146/default (not set)
Sun Apr 14 13:38:05 2019 us=711614 management_addr = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 management_port = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 management_user_pass = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 management_log_history_cache = 250
Sun Apr 14 13:38:05 2019 us=711614 management_echo_buffer_size = 100
Sun Apr 14 13:38:05 2019 us=711614 management_write_peer_info_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 management_client_user = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 management_client_group = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 management_flags = 0
Sun Apr 14 13:38:05 2019 us=711614 shared_secret_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 key_direction = not set
Sun Apr 14 13:38:05 2019 us=711614 ciphername = 'AES-256-GCM'
Sun Apr 14 13:38:05 2019 us=711614 ncp_enabled = ENABLED
Sun Apr 14 13:38:05 2019 us=711614 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Apr 14 13:38:05 2019 us=711614 authname = 'SHA1'
Sun Apr 14 13:38:05 2019 us=711614 prng_hash = 'SHA1'
Sun Apr 14 13:38:05 2019 us=711614 prng_nonce_secret_len = 16
Sun Apr 14 13:38:05 2019 us=711614 keysize = 0
Sun Apr 14 13:38:05 2019 us=711614 engine = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 replay = ENABLED
Sun Apr 14 13:38:05 2019 us=711614 mute_replay_warnings = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 replay_window = 64
Sun Apr 14 13:38:05 2019 us=711614 replay_time = 15
Sun Apr 14 13:38:05 2019 us=711614 packet_id_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 use_iv = ENABLED
Sun Apr 14 13:38:05 2019 us=711614 test_crypto = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 tls_server = ENABLED
Sun Apr 14 13:38:05 2019 us=711614 tls_client = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 key_method = 2
Sun Apr 14 13:38:05 2019 us=711614 ca_file = 'ca.crt'
Sun Apr 14 13:38:05 2019 us=711614 ca_path = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 dh_file = 'dh2048.pem'
Sun Apr 14 13:38:05 2019 us=711614 cert_file = 'server.crt'
Sun Apr 14 13:38:05 2019 us=711614 extra_certs_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 priv_key_file = 'server.key'
Sun Apr 14 13:38:05 2019 us=711614 pkcs12_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 cryptoapi_cert = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 cipher_list = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 cipher_list_tls13 = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 tls_cert_profile = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 tls_verify = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 tls_export_cert = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 verify_x509_type = 0
Sun Apr 14 13:38:05 2019 us=711614 verify_x509_name = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 crl_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=711614 ns_cert_type = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku
= 65535
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku[i] = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku[i] = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku[i] = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku[i] = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku[i] = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_ku[i] = 0
Sun Apr 14 13:38:05 2019 us=711614 remote_cert_eku = 'TLS Web Client Authentication'
Sun Apr 14 13:38:05 2019 us=711614 ssl_flags = 0
Sun Apr 14 13:38:05 2019 us=711614 tls_timeout = 2
Sun Apr 14 13:38:05 2019 us=711614 renegotiate_bytes = -1
Sun Apr 14 13:38:05 2019 us=711614 renegotiate_packets = 0
Sun Apr 14 13:38:05 2019 us=711614 renegotiate_seconds = 3600
Sun Apr 14 13:38:05 2019 us=711614 handshake_window = 60
Sun Apr 14 13:38:05 2019 us=711614 transition_window = 3600
Sun Apr 14 13:38:05 2019 us=711614 single_session = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 push_peer_info = DISABLED
Sun Apr 14 13:38:05 2019 us=711614 tls_exit = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 tls_auth_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 tls_crypt_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_protected_authentication = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_private_mode = 00000000
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_cert_private = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_pin_cache_period = -1
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_id = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 pkcs11_id_management = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 server_network = 10.8.0.0
Sun Apr 14 13:38:05 2019 us=712613 server_netmask = 255.255.255.0
Sun Apr 14 13:38:05 2019 us=712613 server_network_ipv6 = ::
Sun Apr 14 13:38:05 2019 us=712613 server_netbits_ipv6 = 0
Sun Apr 14 13:38:05 2019 us=712613 server_bridge_ip = 0.0.0.0
Sun Apr 14 13:38:05 2019 us=712613 server_bridge_netmask = 0.0.0.0
Sun Apr 14 13:38:05 2019 us=712613 server_bridge_pool_start = 0.0.0.0
Sun Apr 14 13:38:05 2019 us=712613 server_bridge_pool_end = 0.0.0.0
Sun Apr 14 13:38:05 2019 us=712613 push_entry = 'route 192.168.235.0 255.255.255.0 10.8.0.1'
Sun Apr 14 13:38:05 2019 us=712613 push_entry = 'route 10.8.0.0 255.255.255.0'
Sun Apr 14 13:38:05 2019 us=712613 push_entry = 'topology net30'
Sun Apr 14 13:38:05 2019 us=712613 push_entry = 'ping 10'
Sun Apr 14 13:38:05 2019 us=712613 push_entry = 'ping-restart 120'
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_pool_defined = ENABLED
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_pool_start = 10.8.0.4
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_pool_end = 10.8.0.251
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_pool_netmask = 0.0.0.0
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_pool_persist_filename = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_pool_persist_refresh_freq = 600
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_ipv6_pool_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_ipv6_pool_base = ::
Sun Apr 14 13:38:05 2019 us=712613 ifconfig_ipv6_pool_netbits = 0
Sun Apr 14 13:38:05 2019 us=712613 n_bcast_buf = 256
Sun Apr 14 13:38:05 2019 us=712613 tcp_queue_limit = 64
Sun Apr 14 13:38:05 2019 us=712613 real_hash_size = 256
Sun Apr 14 13:38:05 2019 us=712613 virtual_hash_size = 256
Sun Apr 14 13:38:05 2019 us=712613 client_connect_script = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 learn_address_script = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 client_disconnect_script = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 client_config_dir = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=712613 ccd_exclusive = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 tmp_dir = 'C:\WINDOWS\TEMP\'
Sun Apr 14 13:38:05 2019 us=712613 push_ifconfig_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 push_ifconfig_local = 0.0.0.0
Sun Apr 14 13:38:05 2019 us=712613 push_ifconfig_remote_netmask = 0.0.0.0
Sun Apr 14 13:38:05 2019 us=712613 push_ifconfig_ipv6_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=712613 push_ifconfig_ipv6_local = ::/0
Sun Apr 14 13:38:05 2019 us=712613 push_ifconfig_ipv6_remote = ::
Sun Apr 14 13:38:05 2019 us=713612 enable_c2c = ENABLED
Sun Apr 14 13:38:05 2019 us=713612 duplicate_cn = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 cf_max = 0
Sun Apr 14 13:38:05 2019 us=713612 cf_per = 0
Sun Apr 14 13:38:05 2019 us=713612 max_clients = 10
Sun Apr 14 13:38:05 2019 us=713612 max_routes_per_client = 256
Sun Apr 14 13:38:05 2019 us=713612 auth_user_pass_verify_script = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=713612 auth_user_pass_verify_script_via_file = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 auth_token_generate = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 auth_token_lifetime = 0
Sun Apr 14 13:38:05 2019 us=713612 client = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 pull = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 auth_user_pass_file = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=713612 show_net_up = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 route_method = 0
Sun Apr 14 13:38:05 2019 us=713612 block_outside_dns = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 ip_win32_defined = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 ip_win32_type = 3
Sun Apr 14 13:38:05 2019 us=713612 dhcp_masq_offset = 0
Sun Apr 14 13:38:05 2019 us=713612 dhcp_lease_time = 31536000
Sun Apr 14 13:38:05 2019 us=713612 tap_sleep = 10
Sun Apr 14 13:38:05 2019 us=713612 dhcp_options = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 dhcp_renew = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 dhcp_pre_release = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 domain = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=713612 netbios_scope = '[UNDEF]'
Sun Apr 14 13:38:05 2019 us=713612 netbios_node_type = 0
Sun Apr 14 13:38:05 2019 us=713612 disable_nbt = DISABLED
Sun Apr 14 13:38:05 2019 us=713612 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 21 2019
Sun Apr 14 13:38:05 2019 us=713612 Windows version 6.2 (Windows 8 or greater) 64bit
Sun Apr 14 13:38:05 2019 us=713612 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Sun Apr 14 13:38:05 2019 us=727616 Diffie-Hellman initialized with 2048 bit key
Sun Apr 14 13:38:05 2019 us=728617 TLS-Auth MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Apr 14 13:38:05 2019 us=732615 interactive service msg_channel=0
Sun Apr 14 13:38:05 2019 us=735614 ROUTE_GATEWAY 192.168.235.1/255.255.255.0 I=20 HWADDR=00:26:5e:ef:c4:38
Sun Apr 14 13:38:05 2019 us=736614 open_tun
Sun Apr 14 13:38:05 2019 us=738613 TAP-WIN32 device [PierreVPN] opened: \\.\Global\{2CA6EDCB-DD12-4560-B6EB-EC9537D66D6E}.tap
Sun Apr 14 13:38:05 2019 us=738613 TAP-Windows Driver Version 9.21
Sun Apr 14 13:38:05 2019 us=738613 TAP-Windows MTU=1500
Sun Apr 14 13:38:05 2019 us=741614 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {2CA6EDCB-DD12-4560-B6EB-EC9537D66D6E} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sun Apr 14 13:38:05 2019 us=743616 Sleeping for 10 seconds...
Sun Apr 14 13:38:15 2019 us=745381 Successful ARP Flush on interface [6] {2CA6EDCB-DD12-4560-B6EB-EC9537D66D6E}
Sun Apr 14 13:38:15 2019 us=748339 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Apr 14 13:38:15 2019 us=748339 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 192.168.235.146
Sun Apr 14 13:38:15 2019 us=752358 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=40 and dwForwardType=4
Sun Apr 14 13:38:15 2019 us=752358 Route addition via IPAPI succeeded [adaptive]
Sun Apr 14 13:38:15 2019 us=752358 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sun Apr 14 13:38:15 2019 us=757353 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Sun Apr 14 13:38:15 2019 us=757353 Route addition via IPAPI succeeded [adaptive]
Sun Apr 14 13:38:15 2019 us=757353 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun Apr 14 13:38:15 2019 us=757353 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Sun Apr 14 13:38:15 2019 us=757353 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Apr 14 13:38:15 2019 us=757353 setsockopt(IPV6_V6ONLY=0)
Sun Apr 14 13:38:15 2019 us=757353 UDPv6 link local (bound): [AF_INET6][undef]:57575
Sun Apr 14 13:38:15 2019 us=757353 UDPv6 link remote: [AF_UNSPEC]
Sun Apr 14 13:38:15 2019 us=757353 MULTI: multi_init called, r=256 v=256
Sun Apr 14 13:38:15 2019 us=757353 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Apr 14 13:38:15 2019 us=757353 Initialization Sequence Completed
[/olog]
I don't know how to get the client log from an iPhone and could not find instructions to do so by Googling.
As mentioned above, I wonder if the route directive in server.ovpn is redundant with specifying a route in my router. If it is, I'd prefer specifying it in server.ovpn and removing the route in the router. But can I?
Thanks in advance for any assistance.
Pierre
