Hi.
My server is Windows 7 with OpenVPN 2.4.7-I607.
I have created a bridge in Windows with my Wireless connection and TAP adapter.
port 1194
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
topology subnet
ifconfig-pool-persist ipp.txt
server-bridge x.x.x.5 255.255.255.0 x.x.x.10 x.x.x.20
push "redirect-gateway def1"
push "dhcp-option DNS x.x.x.1"
keepalive 10 120
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
client
dev tap
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
cipher AES-256-CBC
verb 3
ipconfig on server
Description . . . . . . . . . . . . . : MAC Bridge Miniport
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled. . . . . . : Yes
IPv4 Address. . . . . . . . . . . . : x.x.x.5(Preferred)
Subnet Mask . . . . . . . . . . : 255.255.255.0
Default Gateway. . . . . . . . . : x.x.x.1
DHCP Server. . . . . . . . . . . : x.x.x.1
DNS Servers. . . . . . . . . . . : x.x.x.1
ipconfig on client
Description . . . . . . . . . . . . . : TAP-Windows Adapter V9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled. . . . . . : Yes
IPv4 Address. . . . . . . . . . . . : x.x.x.10(Preferred)
Subnet Mask . . . . . . . . . . : 255.255.255.0
Default Gateway. . . . . . . . . :
DHCP Server. . . . . . . . . . . : x.x.x.0
DNS Servers. . . . . . . . . . . : x.x.x.1
As you can see, the Default Gateway is empty, and does not send to client. Therefore, the
bridge does not work.
Log
files on client and server are not created. It only flooding in console with many lines (that's another question. what to do with this?).
Sun Aug 25 14:00:52 2019 us=435921 AEAD Decrypt error: bad packet ID (may be a r
eplay): [ #338 ] -- see the man page entry for --no-replay and --replay-window f
or more info or silence this warning with --mute-replay-warnings
Sun Aug 25 14:00:53 2019 us=800179 PID_ERR replay [0] [SSL-0] [01123344578>>>>>>
>>>>>EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE] 0:339 0:339 t=1566730853[0] r=[
-3,64,15,0,1] sl=[45,64,64,528]
Sun Aug 25 14:00:53 2019 us=804086 AEAD Decrypt error: bad packet ID (may be a r
eplay): [ #339 ] -- see the man page entry for --no-replay and --replay-window f
or more info or silence this warning with --mute-replay-warnings
Sun Aug 25 14:00:54 2019 us=54086 PID_ERR replay [0] [SSL-0] [012234455689>>>>>>
>>>>>EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE] 0:340 0:340 t=1566730854[0] r=[-
4,64,15,0,1] sl=[44,64,64,528]
server log
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_private_mode = 00000000
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_cert_private = DISABLED
Sun Aug 25 14:57:37 2019 pkcs11_pin_cache_period = -1
Sun Aug 25 14:57:37 2019 pkcs11_id = '[UNDEF]'
Sun Aug 25 14:57:37 2019 pkcs11_id_management = DISABLED
Sun Aug 25 14:57:37 2019 server_network = 0.0.0.0
Sun Aug 25 14:57:37 2019 server_netmask = 0.0.0.0
Sun Aug 25 14:57:37 2019 server_network_ipv6 = ::
Sun Aug 25 14:57:37 2019 server_netbits_ipv6 = 0
Sun Aug 25 14:57:37 2019 server_bridge_ip = x.x.x.5
Sun Aug 25 14:57:37 2019 server_bridge_netmask = 255.255.255.0
Sun Aug 25 14:57:37 2019 server_bridge_pool_start = x.x.x.10
Sun Aug 25 14:57:37 2019 server_bridge_pool_end = x.x.x.20
Sun Aug 25 14:57:37 2019 push_entry = 'redirect-gateway def1'
Sun Aug 25 14:57:37 2019 push_entry = 'dhcp-option DNS x.x.x.1'
Sun Aug 25 14:57:37 2019 push_entry = 'route-gateway x.x.x.5'
Sun Aug 25 14:57:37 2019 push_entry = 'ping 10'
Sun Aug 25 14:57:37 2019 push_entry = 'ping-restart 120'
Sun Aug 25 14:57:37 2019 ifconfig_pool_defined = ENABLED
Sun Aug 25 14:57:37 2019 ifconfig_pool_start = x.x.x.10
Sun Aug 25 14:57:37 2019 ifconfig_pool_end = x.x.x.20
Sun Aug 25 14:57:37 2019 ifconfig_pool_netmask = 255.255.255.0
Sun Aug 25 14:57:37 2019 ifconfig_pool_persist_filename = 'ipp.txt'
Sun Aug 25 14:57:37 2019 ifconfig_pool_persist_refresh_freq = 600
Sun Aug 25 14:57:37 2019 ifconfig_ipv6_pool_defined = DISABLED
Sun Aug 25 14:57:37 2019 ifconfig_ipv6_pool_base = ::
Sun Aug 25 14:57:37 2019 ifconfig_ipv6_pool_netbits = 0
Sun Aug 25 14:57:37 2019 n_bcast_buf = 256
Sun Aug 25 14:57:37 2019 tcp_queue_limit = 64
Sun Aug 25 14:57:37 2019 real_hash_size = 256
Sun Aug 25 14:57:37 2019 virtual_hash_size = 256
Sun Aug 25 14:57:37 2019 client_connect_script = '[UNDEF]'
Sun Aug 25 14:57:37 2019 learn_address_script = '[UNDEF]'
Sun Aug 25 14:57:37 2019 client_disconnect_script = '[UNDEF]'
Sun Aug 25 14:57:37 2019 client_config_dir = '[UNDEF]'
Sun Aug 25 14:57:37 2019 ccd_exclusive = DISABLED
Sun Aug 25 14:57:37 2019 tmp_dir = 'C:\Users\~\AppData\Local\Temp\'
Sun Aug 25 14:57:37 2019 push_ifconfig_defined = DISABLED
Sun Aug 25 14:57:37 2019 push_ifconfig_local = 0.0.0.0
Sun Aug 25 14:57:37 2019 push_ifconfig_remote_netmask = 0.0.0.0
Sun Aug 25 14:57:37 2019 push_ifconfig_ipv6_defined = DISABLED
Sun Aug 25 14:57:37 2019 push_ifconfig_ipv6_local = ::/0
Sun Aug 25 14:57:37 2019 push_ifconfig_ipv6_remote = ::
Sun Aug 25 14:57:37 2019 enable_c2c = DISABLED
Sun Aug 25 14:57:37 2019 duplicate_cn = DISABLED
Sun Aug 25 14:57:37 2019 cf_max = 0
Sun Aug 25 14:57:37 2019 cf_per = 0
Sun Aug 25 14:57:37 2019 max_clients = 1024
Sun Aug 25 14:57:37 2019 max_routes_per_client = 256
Sun Aug 25 14:57:37 2019 auth_user_pass_verify_script = '[UNDEF]'
Sun Aug 25 14:57:37 2019 auth_user_pass_verify_script_via_file = DISABLED
Sun Aug 25 14:57:37 2019 auth_token_generate = DISABLED
Sun Aug 25 14:57:37 2019 auth_token_lifetime = 0
Sun Aug 25 14:57:37 2019 client = DISABLED
Sun Aug 25 14:57:37 2019 pull = DISABLED
Sun Aug 25 14:57:37 2019 auth_user_pass_file = '[UNDEF]'
Sun Aug 25 14:57:37 2019 show_net_up = DISABLED
Sun Aug 25 14:57:37 2019 route_method = 0
Sun Aug 25 14:57:37 2019 block_outside_dns = DISABLED
Sun Aug 25 14:57:37 2019 ip_win32_defined = DISABLED
Sun Aug 25 14:57:37 2019 ip_win32_type = 3
Sun Aug 25 14:57:37 2019 dhcp_masq_offset = 0
Sun Aug 25 14:57:37 2019 dhcp_lease_time = 31536000
Sun Aug 25 14:57:37 2019 tap_sleep = 10
Sun Aug 25 14:57:37 2019 dhcp_options = DISABLED
Sun Aug 25 14:57:37 2019 dhcp_renew = DISABLED
Sun Aug 25 14:57:37 2019 dhcp_pre_release = DISABLED
Sun Aug 25 14:57:37 2019 domain = '[UNDEF]'
Sun Aug 25 14:57:37 2019 netbios_scope = '[UNDEF]'
Sun Aug 25 14:57:37 2019 netbios_node_type = 0
Sun Aug 25 14:57:37 2019 disable_nbt = DISABLED
Sun Aug 25 14:57:37 2019 OpenVPN 2.4.7 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019
Sun Aug 25 14:57:37 2019 Windows version 6.1 (Windows 7) 32bit
Sun Aug 25 14:57:37 2019 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Sun Aug 25 14:57:37 2019 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Aug 25 14:57:37 2019 Need hold release from management interface, waiting...
Sun Aug 25 14:57:37 2019 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Aug 25 14:57:37 2019 MANAGEMENT: CMD 'state on'
Sun Aug 25 14:57:37 2019 MANAGEMENT: CMD 'log all on'
Sun Aug 25 14:57:37 2019 MANAGEMENT: CMD 'echo all on'
Sun Aug 25 14:57:37 2019 MANAGEMENT: CMD 'bytecount 5'
Sun Aug 25 14:57:37 2019 MANAGEMENT: CMD 'hold off'
Sun Aug 25 14:57:37 2019 MANAGEMENT: CMD 'hold release'
Sun Aug 25 14:57:37 2019 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Sun Aug 25 14:57:37 2019 Diffie-Hellman initialized with 2048 bit key
Sun Aug 25 14:57:37 2019 TLS-Auth MTU parms [ L:1653 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Aug 25 14:57:37 2019 interactive service msg_channel=0
Sun Aug 25 14:57:37 2019 open_tun
Sun Aug 25 14:57:37 2019 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{053F100F-F315-49B2-ABF2-41197F4A26EB}.tap
Sun Aug 25 14:57:37 2019 TAP-Windows Driver Version 9.23
Sun Aug 25 14:57:37 2019 TAP-Windows MTU=1500
Sun Aug 25 14:57:37 2019 Sleeping for 10 seconds...
Sun Aug 25 14:57:47 2019 NOTE: FlushIpNetTable failed on interface [31] {053F100F-F315-49B2-ABF2-41197F4A26EB} (status=1168) : Item not found.
Sun Aug 25 14:57:47 2019 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
Sun Aug 25 14:57:47 2019 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Sun Aug 25 14:57:47 2019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Aug 25 14:57:47 2019 setsockopt(IPV6_V6ONLY=0)
Sun Aug 25 14:57:47 2019 UDPv6 link local (bound): [AF_INET6][undef]:1194
Sun Aug 25 14:57:47 2019 UDPv6 link remote: [AF_UNSPEC]
Sun Aug 25 14:57:47 2019 MULTI: multi_init called, r=256 v=256
Sun Aug 25 14:57:47 2019 IFCONFIG POOL: base=x.x.x.10 size=11, ipv6=0
Sun Aug 25 14:57:47 2019 ifconfig_pool_read(), in='client,x.x.x.10', TODO: IPv6
Sun Aug 25 14:57:47 2019 succeeded -> ifconfig_pool_set()
Sun Aug 25 14:57:47 2019 IFCONFIG POOL LIST
Sun Aug 25 14:57:47 2019 client,x.x.x.10
Sun Aug 25 14:57:47 2019 Initialization Sequence Completed
Sun Aug 25 14:57:47 2019 MANAGEMENT: >STATE:1566730667,CONNECTED,SUCCESS,,,,::ffff:0:0,1194
Sun Aug 25 14:57:56 2019 MULTI: multi_create_instance called
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 Re-using SSL/TLS context
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 Control Channel MTU parms [ L:1653 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 TLS: Initial packet from [AF_INET6]::ffff:x.x.x.x:2347, sid=eace7de2 7838985e
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 VERIFY OK: depth=1, C=, ST=, L=, O=, OU=, CN=, name=, emailAddress=
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 VERIFY OK: depth=0, C=, ST=, L=, O=, OU=, CN=, name=, emailAddress=
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_VER=2.4.7
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_PLAT=win
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_PROTO=2
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_NCP=2
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_LZ4=1
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_LZ4v2=1
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_LZO=1
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_COMP_STUB=1
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_COMP_STUBv2=1
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 peer info: IV_TCPNL=1
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Sun Aug 25 14:57:56 2019 x.x.x.x:2347 [client] Peer Connection Initiated with [AF_INET6]::ffff:x.x.x.x:2347
Sun Aug 25 14:57:56 2019 client/x.x.x.x:2347 MULTI_sva: pool returned IPv4=x.x.x.10, IPv6=(Not enabled)
Sun Aug 25 14:57:57 2019 client/x.x.x.x:2347 PUSH: Received control message: 'PUSH_REQUEST'
Sun Aug 25 14:57:57 2019 client/x.x.x.x:2347 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS x.x.x.1,route-gateway x.x.x.5,ping 10,ping-restart 120,ifconfig x.x.x.10 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Sun Aug 25 14:57:57 2019 client/x.x.x.x:2347 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Aug 25 14:57:57 2019 client/x.x.x.x:2347 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:411 ET:32 EL:3 ]
Sun Aug 25 14:57:57 2019 client/x.x.x.x:2347 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Aug 25 14:57:57 2019 client/x.x.x.x:2347 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Aug 25 14:57:58 2019 client/x.x.x.x:2347 MULTI: Learn: 00:x:x:x:x:x -> client/x.x.x.x:2347
Sun Aug 25 14:58:06 2019 client/x.x.x.x:2347 PID_ERR replay [0] [SSL-0] [0111111122222222333444444444444444555555555555555555555555555555] 0:138 0:138 t=1566730686[0] r=[-3,64,15,0,1] sl=[54,64,64,272]
Sun Aug 25 14:58:06 2019 client/x.x.x.x:2347 AEAD Decrypt error: bad packet ID (may be a replay): [ #138 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Sun Aug 25 14:58:14 2019 client/x.x.x.x:2347 PID_ERR replay [0] [SSL-0] [0112222236678889999999>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>] 0:152 0:152 t=1566730694[0] r=[-1,64,15,0,1] sl=[40,64,64,272]
Sun Aug 25 14:58:14 2019 client/x.x.x.x:2347 AEAD Decrypt error: bad packet ID (may be a replay): [ #152 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Sun Aug 25 14:58:22 2019 client/x.x.x.x:2347 PID_ERR replay [0] [SSL-0] [0000066677777899>>>>>>>>>EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE] 0:165 0:165 t=1566730702[0] r=[0,64,15,0,1] sl=[27,64,64,272]
Sun Aug 25 14:58:22 2019 client/x.x.x.x:2347 AEAD Decrypt error: bad packet ID (may be a replay): [ #165 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Sun Aug 25 14:58:30 2019 client/x.x.x.x:2347 PID_ERR replay [0] [SSL-0] [000001123333345566667788888>>>>>>>>>>>>>>>>EEEEEEEEEEEEEEEEEEEEE] 0:187 0:187 t=1566730710[0] r=[-3,64,15,0,1] sl=[5,64,64,272]
Sun Aug 25 14:58:30 2019 client/x.x.x.x:2347 AEAD Decrypt error: bad packet ID (may be a replay): [ #187 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Sun Aug 25 14:58:39 2019 client/x.x.x.x:2347 PID_ERR replay [0] [SSL-0] [023344444556666667899999>>>>>>>>>>>>>>>>>>>>>>EEEEEEEEEEEEEEEEEE] 0:206 0:206 t=1566730719[0] r=[-2,64,15,0,1] sl=[50,64,64,272]
Sun Aug 25 14:58:39 2019 client/x.x.x.x:2347 AEAD Decrypt error: bad packet ID (may be a replay): [ #206 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Sun Aug 25 14:58:48 2019 client/x.x.x.x:2347 PID_ERR replay [0] [SSL-0] [03455666669>>>>>>>>>>>>>>>>EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE] 0:216 0:216 t=1566730728[0] r=[0,64,15,0,1] sl=[40,64,64,272]
Sun Aug 25 14:58:48 2019 client/x.x.x.x:2347 AEAD Decrypt error: bad packet ID (may be a replay): [ #216 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
