Hello,
so i managed to set up a VPN Server (OpenSUSE Leap 15).
Now i am connecting a Client (Win 10) and i want to tunnel all Traffic trough the VPN.
The Client connects with the Server. But the Client has no access to the internet.
I need some help.. Could anyone take a look at my configuration and give me some hints about the problem/how to fix it.
thank you :geek:
1.
SERVER CONFIG:
#local host
local SERVERIP
#port number
port 1194
#tcp or udp server with IPv4 only
proto tcp4
#interface type, tun or tap
dev tun
#certificates
ca ca.crt
cert server.crt
#secret key
key server.key
#diffie hellman parameters
dh dh.pem
#subnet to use for openvpn connections
server 192.168.13.0 255.255.255.0
#route
#route 192.168.13.1 255.255.255.255
push "route 192.168.13.0 255.255.255.255"
push "dhcp-option DNS 192.168.13.1"
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
push "redirect-gateway def1"
#keepalive: send ping every 10 sec, tunnel down after 120 seconds no response
keepalive 10 120
reneg-sec 0
#crypogrpfic cipher (must be in client.config as well.)
auth SHA512
cipher AES-256-CBC
#lzo comression for the tunnel(must be in client.conf as well)
comp-lzo
#drop privileges to user/group nobody
user nobody
group nobody
#makes the link more resistant to connection failures
persist-key
persist-tun
#username and passwort authentication
username-as-common-name
#client-cert-not-required
#verify-client-cert none
#plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so login
#auth-user-pass-verify "/etc/openvpn/example.sh" via-file
script-security 1
plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn
auth-nocache
#openvpn status logfile
status openvpn-status.log 10
#openvpn server log
log openvpn-server.log
#log file verbosity
verb 5
#notify client when server retarts so it automaticcaly reconnects
#explicit-exit-notify 1 (only possible with udp)
#client cert not required
verify-client-cert none
#client certificate verification method
remote-cert-tls client
#minimus tls version
tls-version-min 1.2
tls-version-max 1.2
2.
CLIENT CONFIG:
# OpenVPN Konfiguration
# entspricht den Direktiven: tls-client und pull
client
# Protokoll UDP
dev tun
# OpenVPN Gateway
remote PUBLIC_SERVER_ADDRESS 1194 tcp4
# don't bind to specific port
nobind
auth SHA512
cipher AES-256-CBC
#connection drops after n seconds (default 3600)
reneg-sec 0
#lzo compression for the tunnel
comp-lzo
# Don't bind a local port
nobind
# Never give up trying to connect to theserver
resolv-retry infinite
# Preserve state across restarts.
persist-key
persist-tun
# Set output verbosity to n. 3 is recommended
verb 4
# Zum Debugging auskommentieren
mute 50
# Authentification with User and Passwort
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
CA CERTIFIVATE
-----END CERTIFICATE-----
</ca>
#prevents from caching passwort
auth-nocache
#server certificate verification method
remote-cert-tls server
tls-version-min 1.2
#dhcp-option DNS 208.67.222.222
#dhcp-option WINS 208.67.220.220
#dhcp-option DNS 8.8.8.8
#dhcp-option DNS 8.8.8.4
script-security 2
3.
SERVER LOG (--verb 4):
WARNING: POTENTIALLY DANGEROUS OPTION --verify-client-cert none|optional (or --client-cert-not-required) may accept clients which do not present a certificate
Current Parameter Settings:
config = 'server.conf'
mode = 1
persist_config = DISABLED
persist_mode = 1
show_ciphers = DISABLED
show_digests = DISABLED
show_engines = DISABLED
genkey = DISABLED
key_pass_file = '[UNDEF]'
show_tls_ciphers = DISABLED
connect_retry_max = 0
Connection profiles [0]:
proto = tcp4-server
local = 'SERVERIP'
local_port = '1194'
remote = '[UNDEF]'
remote_port = '1194'
remote_float = DISABLED
bind_defined = DISABLED
bind_local = ENABLED
bind_ipv6_only = DISABLED
connect_retry_seconds = 5
connect_timeout = 120
socks_proxy_server = '[UNDEF]'
socks_proxy_port = '[UNDEF]'
tun_mtu = 1500
tun_mtu_defined = ENABLED
link_mtu = 1500
link_mtu_defined = DISABLED
tun_mtu_extra = 0
tun_mtu_extra_defined = DISABLED
mtu_discover_type = -1
fragment = 0
mssfix = 1450
explicit_exit_notification = 0
Connection profiles END
remote_random = DISABLED
ipchange = '[UNDEF]'
dev = 'tun'
dev_type = '[UNDEF]'
dev_node = '[UNDEF]'
lladdr = '[UNDEF]'
topology = 1
ifconfig_local = '192.168.13.1'
ifconfig_remote_netmask = '192.168.13.2'
ifconfig_noexec = DISABLED
ifconfig_nowarn = DISABLED
ifconfig_ipv6_local = '[UNDEF]'
ifconfig_ipv6_netbits = 0
ifconfig_ipv6_remote = '[UNDEF]'
shaper = 0
mtu_test = 0
mlock = DISABLED
keepalive_ping = 10
keepalive_timeout = 120
inactivity_timeout = 0
ping_send_timeout = 10
ping_rec_timeout = 240
ping_rec_timeout_action = 2
ping_timer_remote = DISABLED
remap_sigusr1 = 0
persist_tun = ENABLED
persist_local_ip = DISABLED
persist_remote_ip = DISABLED
persist_key = ENABLED
passtos = DISABLED
resolve_retry_seconds = 1000000000
resolve_in_advance = DISABLED
username = 'nobody'
groupname = 'nobody'
chroot_dir = '[UNDEF]'
cd_dir = '/etc/openvpn/'
writepid = '/run/openvpn/server.pid'
up_script = '[UNDEF]'
down_script = '[UNDEF]'
down_pre = DISABLED
up_restart = DISABLED
up_delay = DISABLED
daemon = ENABLED
inetd = 0
log = ENABLED
suppress_timestamps = ENABLED
machine_readable_output = DISABLED
nice = 0
verbosity = 5
mute = 0
gremlin = 0
status_file = 'openvpn-status.log'
status_file_version = 1
status_file_update_freq = 10
occ = ENABLED
rcvbuf = 0
sndbuf = 0
mark = 0
sockflags = 0
fast_io = DISABLED
comp.alg = 2
comp.flags = 1
route_script = '[UNDEF]'
route_default_gateway = '[UNDEF]'
route_default_metric = 0
route_noexec = DISABLED
route_delay = 0
route_delay_window = 30
route_delay_defined = DISABLED
route_nopull = DISABLED
route_gateway_via_dhcp = DISABLED
allow_pull_fqdn = DISABLED
route 192.168.13.0/255.255.255.0/default (not set)/default (not set)
management_addr = '[UNDEF]'
management_port = '[UNDEF]'
management_user_pass = '[UNDEF]'
management_log_history_cache = 250
management_echo_buffer_size = 100
management_write_peer_info_file = '[UNDEF]'
management_client_user = '[UNDEF]'
management_client_group = '[UNDEF]'
management_flags = 0
plugin[0] /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so '[/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so] [openvpn]'
shared_secret_file = '[UNDEF]'
key_direction = 0
ciphername = 'AES-256-CBC'
ncp_enabled = ENABLED
ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
authname = 'SHA512'
prng_hash = 'SHA1'
prng_nonce_secret_len = 16
keysize = 0
engine = DISABLED
replay = ENABLED
mute_replay_warnings = DISABLED
replay_window = 64
replay_time = 15
packet_id_file = '[UNDEF]'
use_iv = ENABLED
test_crypto = DISABLED
tls_server = ENABLED
tls_client = DISABLED
key_method = 2
ca_file = 'ca.crt'
ca_path = '[UNDEF]'
dh_file = 'dh.pem'
cert_file = 'server.crt'
extra_certs_file = '[UNDEF]'
priv_key_file = 'server.key'
pkcs12_file = '[UNDEF]'
cipher_list = '[UNDEF]'
tls_verify = '[UNDEF]'
tls_export_cert = '[UNDEF]'
verify_x509_type = 0
verify_x509_name = '[UNDEF]'
crl_file = '[UNDEF]'
ns_cert_type = 0
remote_cert_ku[i] = 65535
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_eku = 'TLS Web Client Authentication'
ssl_flags = 3269
tls_timeout = 2
renegotiate_bytes = -1
renegotiate_packets = 0
renegotiate_seconds = 0
handshake_window = 60
transition_window = 3600
single_session = DISABLED
push_peer_info = DISABLED
tls_exit = DISABLED
tls_auth_file = '[UNDEF]'
tls_crypt_file = '[UNDEF]'
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_pin_cache_period = -1
pkcs11_id = '[UNDEF]'
pkcs11_id_management = DISABLED
server_network = 192.168.13.0
server_netmask = 255.255.255.0
server_network_ipv6 = ::
server_netbits_ipv6 = 0
server_bridge_ip = 0.0.0.0
server_bridge_netmask = 0.0.0.0
server_bridge_pool_start = 0.0.0.0
server_bridge_pool_end = 0.0.0.0
push_entry = 'route 192.168.13.0 255.255.255.255'
push_entry = 'dhcp-option DNS 192.168.13.1'
push_entry = 'dhcp-option DNS 1.1.1.1'
push_entry = 'dhcp-option DNS 1.0.0.1'
push_entry = 'redirect-gateway def1'
push_entry = 'route 192.168.13.1'
push_entry = 'topology net30'
push_entry = 'ping 10'
push_entry = 'ping-restart 120'
ifconfig_pool_defined = ENABLED
ifconfig_pool_start = 192.168.13.4
ifconfig_pool_end = 192.168.13.251
ifconfig_pool_netmask = 0.0.0.0
ifconfig_pool_persist_filename = '[UNDEF]'
ifconfig_pool_persist_refresh_freq = 600
ifconfig_ipv6_pool_defined = DISABLED
ifconfig_ipv6_pool_base = ::
ifconfig_ipv6_pool_netbits = 0
n_bcast_buf = 256
tcp_queue_limit = 64
real_hash_size = 256
virtual_hash_size = 256
client_connect_script = '[UNDEF]'
learn_address_script = '[UNDEF]'
client_disconnect_script = '[UNDEF]'
client_config_dir = '[UNDEF]'
ccd_exclusive = DISABLED
client_config_dir = '[UNDEF]'
ccd_exclusive = DISABLED
tmp_dir = '/tmp'
push_ifconfig_defined = DISABLED
push_ifconfig_local = 0.0.0.0
push_ifconfig_remote_netmask = 0.0.0.0
push_ifconfig_ipv6_defined = DISABLED
push_ifconfig_ipv6_local = ::/0
push_ifconfig_ipv6_remote = ::
enable_c2c = DISABLED
duplicate_cn = DISABLED
cf_max = 0
cf_per = 0
max_clients = 1024
max_routes_per_client = 256
auth_user_pass_verify_script = '[UNDEF]'
auth_user_pass_verify_script_via_file = DISABLED
auth_token_generate = DISABLED
auth_token_lifetime = 0
port_share_host = '[UNDEF]'
port_share_port = '[UNDEF]'
client = DISABLED
pull = DISABLED
auth_user_pass_file = '[UNDEF]'
OpenVPN 2.4.3 x86_64-suse-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 20 2017
library versions: OpenSSL 1.1.0i-fips 14 Aug 2018, LZO 2.10
AUTH-PAM: BACKGROUND: INIT service='openvpn'
PLUGIN_INIT: POST /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so '[/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so] [openvpn]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Diffie-Hellman initialized with 2048 bit key
TLS-Auth MTU parms [ L:1624 D:1210 EF:40 EB:0 ET:0 EL:3 ]
ROUTE_GATEWAY 193.197.136.14/255.255.255.240 IFACE=eth0 HWADDR=00:50:56:a8:3b:0e
TUN/TAP device tun0 opened
TUN/TAP TX queue length set to 100
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
/bin/ip link set dev tun0 up mtu 1500
/bin/ip addr add dev tun0 local 192.168.13.1 peer 192.168.13.2
/bin/ip route add 192.168.13.0/24 via 192.168.13.2
Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Socket Buffers: R=[87380->87380] S=[16384->16384]
Listening for incoming TCP connection on [AF_INET]SERVERIP:1194
TCPv4_SERVER link local (bound): [AF_INET]SERVERIP:1194
TCPv4_SERVER link remote: [AF_UNSPEC]
GID set to nobody
UID set to nobody
MULTI: multi_init called, r=256 v=256
IFCONFIG POOL: base=192.168.13.4 size=62, ipv6=0
MULTI: TCP INIT maxclients=1024 maxevents=1028
Initialization Sequence Completed
MULTI: multi_create_instance called
Re-using SSL/TLS context
LZO compression initializing
Control Channel MTU parms [ L:1624 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
TCP connection established with [AF_INET]CLIENT_OLD_IP:65120
TCPv4_SERVER link local: (not bound)
TCPv4_SERVER link remote: [AF_INET]CLIENT_OLD_IP:65120
RCLIENT_OLD_IP:65120 TLS: Initial packet from [AF_INET]CLIENT_OLD_IP:65120, sid=b9dd5271 350c9dde
WRRWWRRWRCLIENT_OLD_IP:65120 peer info: IV_VER=2.4.7
CLIENT_OLD_IP:65120 peer info: IV_PLAT=win
CLIENT_OLD_IP:65120 peer info: IV_PROTO=2
CLIENT_OLD_IP:65120 peer info: IV_NCP=2
CLIENT_OLD_IP:65120 peer info: IV_LZ4=1
CLIENT_OLD_IP:65120 peer info: IV_LZ4v2=1
CLIENT_OLD_IP:65120 peer info: IV_LZO=1
CLIENT_OLD_IP:65120 peer info: IV_COMP_STUB=1
CLIENT_OLD_IP:65120 peer info: IV_COMP_STUBv2=1
CLIENT_OLD_IP:65120 peer info: IV_TCPNL=1
CLIENT_OLD_IP:65120 peer info: IV_GUI_VER=OpenVPN_GUI_11
AUTH-PAM: BACKGROUND: received command code: 2
AUTH-PAM: BACKGROUND: USER: testuser
OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY
CLIENT_OLD_IP:65120 PLUGIN_CALL: POST /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=2
CLIENT_OLD_IP:65120 TLS: Username/Password authentication deferred for username 'testuser' [CN SET]
WAUTH-PAM: BACKGROUND: my_conv[0] query='Password: ' style=1
RCLIENT_OLD_IP3:65120 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
CLIENT_OLD_IP:65120 [testuser] Peer Connection Initiated with [AF_INET]CLIENT_OLD_IP:65120
RCLIENT_OLD_IP:65120 PUSH: Received control message: 'PUSH_REQUEST'
testuser/CLIENT_OLD_IP:65120 MULTI_sva: pool returned IPv4=192.168.13.6, IPv6=(Not enabled)
testuser/CLIENT_OLD_IP:65120 MULTI: Learn: 192.168.13.6 -> testuser/CLIENT_OLD_IP:65120
testuser/CLIENT_OLD_IP:65120 MULTI: primary virtual IP for testuser/CLIENT_OLD_IP:65120: 192.168.13.6
WRtestuser/CLIENT_OLD_IP:65120 PUSH: Received control message: 'PUSH_REQUEST'
testuser/CLIENT_OLD_IP:65120 SENT CONTROL [testuser]: 'PUSH_REPLY,route 192.168.13.0 255.255.255.255,dhcp-option DNS 192.168.13.1,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,redirect-gateway def1,route 192.168.13.1,topology net30,ping 10,ping-restart 120,ifconfig 192.168.13.6 192.168.13.5,peer-id 0,cipher AES-256-GCM' (status=1)
testuser/CLIENT_OLD_IP:65120 Data Channel: using negotiated cipher 'AES-256-GCM'
testuser/CLIENT_OLD_IP:65120 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
testuser/CLIENT_OLD_IP:65120 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
testuser/CLIENT_OLD_IP:65120 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
WWRRRRRRRRRRRRRtestuser/CLIENT_OLD_IP:65120 MULTI: bad source address from client [::], packet dropped
RRRRRwrWRwrWRwRwRwrWRwRwRwRwRwRwRwRwrWRwrWRwRwRwRwRwRwrWRwRwRwRwRwRwrWrWRwRwRwRwRwRwRwRwrWRwrWRwrWRwRwRwRwRwRwRwRwRwRwWRwRwRwtestuser/CLIENT_OLD_IP:65120 Connection reset, restarting [-1]
testuser/CLIENT_OLD_IP:65120 SIGUSR1[soft,connection-reset] received, client-instance restarting
RwRwRwRwRwRwRwRwWRwRwRwtestuser/CLIENT_OLD_IP:65120 Connection reset, restarting [-1]
testuser/CLIENT_OLD_IP:65120 SIGUSR1[soft,connection-reset] received, client-instance restarting
TCP/UDP: Closing socket
4.
IFCONFIG SERVER
ovpn:/etc/openvpn # ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet SERVER_IP netmask 255.255.255.240 broadcast XXXXXXXX
inet6 fe80::250:56ff:fea8:3b0e prefixlen 64 scopeid 0x20<link>
ether 00:50:56:a8:3b:0e txqueuelen 1000 (Ethernet)
RX packets 642898 bytes 170886466 (162.9 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 924484 bytes 214703917 (204.7 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 6 bytes 234 (234.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 6 bytes 234 (234.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 192.168.13.1 netmask 255.255.255.255 destination 192.168.13.2
inet6 fe80::a5bb:b8cb:670d:d3ea prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
RX packets 1086 bytes 120307 (117.4 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 174 bytes 21012 (20.5 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
5. SERVER IP ROUTE
ovpn:/etc # ip route
default via 193.197.136.14 dev eth0
192.168.13.0/24 via 192.168.13.2 dev tun0
192.168.13.2 dev tun0 proto kernel scope link src 192.168.13.1
193.197.136.0/28 dev eth0 proto kernel scope link src SERVER_IP
6. tail sysctl.conf
ovpn:/etc # tail sysctl.conf
# See sysctl.conf(5), sysctl.d(5) and sysctl(8) for more information
#
####
net.ipv4.ip_forward = 1
net.ipv4.conf.eth0.forward = 1
net.ipv6.conf.all.forwarding = 0
# net.ipv6.conf.all.disable_ipv6 = 1
7. SERVER ROUTE
route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 193.197.136.14 0.0.0.0 UG 0 0 0 eth0
192.168.13.0 192.168.13.2 255.255.255.0 UG 0 0 0 tun0
192.168.13.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
193.197.136.0 0.0.0.0 255.255.255.240 U 0 0 0 eth0
8. LOG CLIENT
Tue Sep 03 11:56:52 2019 us=199518 Current Parameter Settings:
Tue Sep 03 11:56:52 2019 us=200493 config = 'NAME'
Tue Sep 03 11:56:52 2019 us=200493 mode = 0
Tue Sep 03 11:56:52 2019 us=200493 show_ciphers = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 show_digests = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 show_engines = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 genkey = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 key_pass_file = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=200493 show_tls_ciphers = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 connect_retry_max = 0
Tue Sep 03 11:56:52 2019 us=200493 Connection profiles [0]:
Tue Sep 03 11:56:52 2019 us=200493 proto = tcp4-client
Tue Sep 03 11:56:52 2019 us=200493 local = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=200493 local_port = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=200493 remote = 'SERVER ADRESS'
Tue Sep 03 11:56:52 2019 us=200493 remote_port = '1194'
Tue Sep 03 11:56:52 2019 us=200493 remote_float = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 bind_defined = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 bind_local = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 bind_ipv6_only = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 connect_retry_seconds = 5
Tue Sep 03 11:56:52 2019 us=200493 connect_timeout = 120
Tue Sep 03 11:56:52 2019 us=200493 socks_proxy_server = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=200493 socks_proxy_port = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=200493 tun_mtu = 1500
Tue Sep 03 11:56:52 2019 us=200493 tun_mtu_defined = ENABLED
Tue Sep 03 11:56:52 2019 us=200493 link_mtu = 1500
Tue Sep 03 11:56:52 2019 us=200493 link_mtu_defined = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 tun_mtu_extra = 0
Tue Sep 03 11:56:52 2019 us=200493 tun_mtu_extra_defined = DISABLED
Tue Sep 03 11:56:52 2019 us=200493 mtu_discover_type = -1
Tue Sep 03 11:56:52 2019 us=200493 fragment = 0
Tue Sep 03 11:56:52 2019 us=200493 mssfix = 1450
Tue Sep 03 11:56:52 2019 us=200493 explicit_exit_notification = 0
Tue Sep 03 11:56:52 2019 us=200493 Connection profiles END
Tue Sep 03 11:56:52 2019 us=201469 remote_random = DISABLED
Tue Sep 03 11:56:52 2019 us=201469 ipchange = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 dev = 'tun'
Tue Sep 03 11:56:52 2019 us=201469 dev_type = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 dev_node = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 lladdr = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 topology = 1
Tue Sep 03 11:56:52 2019 us=201469 ifconfig_local = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 ifconfig_remote_netmask = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 ifconfig_noexec = DISABLED
Tue Sep 03 11:56:52 2019 us=201469 ifconfig_nowarn = DISABLED
Tue Sep 03 11:56:52 2019 us=201469 ifconfig_ipv6_local = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 ifconfig_ipv6_netbits = 0
Tue Sep 03 11:56:52 2019 us=201469 ifconfig_ipv6_remote = '[UNDEF]'
Tue Sep 03 11:56:52 2019 us=201469 shaper = 0
Tue Sep 03 11:56:52 2019 us=201469 NOTE: --mute triggered...
Tue Sep 03 11:56:52 2019 us=201469 245 variation(s) on previous 50 message(s) suppressed by --mute
Tue Sep 03 11:56:52 2019 us=201469 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019
Tue Sep 03 11:56:52 2019 us=201469 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Sep 03 11:56:52 2019 us=201469 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Enter Management Password:
Tue Sep 03 11:56:52 2019 us=202447 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Sep 03 11:56:52 2019 us=202447 Need hold release from management interface, waiting...
Tue Sep 03 11:56:52 2019 us=662807 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Sep 03 11:56:52 2019 us=764399 MANAGEMENT: CMD 'state on'
Tue Sep 03 11:56:52 2019 us=764399 MANAGEMENT: CMD 'log all on'
Tue Sep 03 11:56:52 2019 us=875637 MANAGEMENT: CMD 'echo all on'
Tue Sep 03 11:56:52 2019 us=877586 MANAGEMENT: CMD 'bytecount 5'
Tue Sep 03 11:56:52 2019 us=879545 MANAGEMENT: CMD 'hold off'
Tue Sep 03 11:56:52 2019 us=881494 MANAGEMENT: CMD 'hold release'
Tue Sep 03 11:56:54 2019 us=174186 MANAGEMENT: CMD 'username "Auth" "testuser"'
Tue Sep 03 11:56:54 2019 us=190811 MANAGEMENT: CMD 'password [...]'
Tue Sep 03 11:56:54 2019 us=194715 LZO compression initializing
Tue Sep 03 11:56:54 2019 us=194715 Control Channel MTU parms [ L:1624 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Tue Sep 03 11:56:54 2019 us=194715 MANAGEMENT: >STATE:1567504614,RESOLVE,,,,,,
Tue Sep 03 11:56:54 2019 us=203500 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Tue Sep 03 11:56:54 2019 us=203500 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Tue Sep 03 11:56:54 2019 us=203500 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Tue Sep 03 11:56:54 2019 us=203500 TCP/UDP: Preserving recently used remote address: [AF_INET]SERVER_IP:1194
Tue Sep 03 11:56:54 2019 us=203500 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Sep 03 11:56:54 2019 us=203500 Attempting to establish TCP connection with [AF_INET]SERVER_IP:1194 [nonblock]
Tue Sep 03 11:56:54 2019 us=203500 MANAGEMENT: >STATE:1567504614,TCP_CONNECT,,,,,,
Tue Sep 03 11:56:55 2019 us=203594 TCP connection established with [AF_INET]SERVER_IP:1194
Tue Sep 03 11:56:55 2019 us=203594 TCPv4_CLIENT link local: (not bound)
Tue Sep 03 11:56:55 2019 us=203594 TCPv4_CLIENT link remote: [AF_INET]SERVER_IP:1194
Tue Sep 03 11:56:55 2019 us=203594 MANAGEMENT: >STATE:1567504615,WAIT,,,,,,
Tue Sep 03 11:56:55 2019 us=204574 MANAGEMENT: >STATE:1567504615,AUTH,,,,,,
Tue Sep 03 11:56:55 2019 us=205547 TLS: Initial packet from [AF_INET]SERVER_IP:1194, sid=603bfd4f 6dfba9a8
Tue Sep 03 11:56:55 2019 us=255069 VERIFY OK: depth=1, CN=vpn-server
Tue Sep 03 11:56:55 2019 us=255069 VERIFY KU OK
Tue Sep 03 11:56:55 2019 us=255069 Validating certificate extended key usage
Tue Sep 03 11:56:55 2019 us=255069 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Sep 03 11:56:55 2019 us=255069 VERIFY EKU OK
Tue Sep 03 11:56:55 2019 us=255069 VERIFY OK: depth=0, CN=server
Tue Sep 03 11:56:55 2019 us=267758 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Sep 03 11:56:55 2019 us=267758 [server] Peer Connection Initiated with [AF_INET]SERVER_IP:1194
Tue Sep 03 11:56:56 2019 us=399798 MANAGEMENT: >STATE:1567504616,GET_CONFIG,,,,,,
Tue Sep 03 11:56:56 2019 us=399798 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Sep 03 11:56:56 2019 us=441651 PUSH: Received control message: 'PUSH_REPLY,route 192.168.13.0 255.255.255.255,dhcp-option DNS 192.168.13.1,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,redirect-gateway def1,route 192.168.13.1,topology net30,ping 10,ping-restart 120,ifconfig 192.168.13.6 192.168.13.5,peer-id 0,cipher AES-256-GCM'
Tue Sep 03 11:56:56 2019 us=442631 OPTIONS IMPORT: timers and/or timeouts modified
Tue Sep 03 11:56:56 2019 us=442631 OPTIONS IMPORT: --ifconfig/up options modified
Tue Sep 03 11:56:56 2019 us=442631 OPTIONS IMPORT: route options modified
Tue Sep 03 11:56:56 2019 us=442631 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Sep 03 11:56:56 2019 us=442631 OPTIONS IMPORT: peer-id set
Tue Sep 03 11:56:56 2019 us=442631 OPTIONS IMPORT: adjusting link_mtu to 1627
Tue Sep 03 11:56:56 2019 us=442631 OPTIONS IMPORT: data channel crypto options modified
Tue Sep 03 11:56:56 2019 us=442631 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Sep 03 11:56:56 2019 us=442631 Data Channel MTU parms [ L:1555 D:1450 EF:55 EB:406 ET:0 EL:3 ]
Tue Sep 03 11:56:56 2019 us=442631 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Sep 03 11:56:56 2019 us=442631 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Sep 03 11:56:56 2019 us=442631 interactive service msg_channel=924
Tue Sep 03 11:56:56 2019 us=447511 ROUTE_GATEWAY 193.197.133.254/255.255.255.0 I=33 HWADDR=a0:66:10:0e:09:89
Tue Sep 03 11:56:56 2019 us=466055 open_tun
Tue Sep 03 11:56:56 2019 us=468007 TAP-WIN32 device [Ethernet 4] opened: \\.\Global\{9BE9C70C-3909-4A79-B933-4DFA306CDE40}.tap
Tue Sep 03 11:56:56 2019 us=468982 TAP-Windows Driver Version 9.23
Tue Sep 03 11:56:56 2019 us=468982 TAP-Windows MTU=1500
Tue Sep 03 11:56:56 2019 us=471910 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.13.6/255.255.255.252 on interface {9BE9C70C-3909-4A79-B933-4DFA306CDE40} [DHCP-serv: 192.168.13.5, lease-time: 31536000]
Tue Sep 03 11:56:56 2019 us=471910 DHCP option string: 060cc0a8 0d010101 01010100 0001
Tue Sep 03 11:56:56 2019 us=471910 Successful ARP Flush on interface [27] {9BE9C70C-3909-4A79-B933-4DFA306CDE40}
Tue Sep 03 11:56:56 2019 us=480694 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Sep 03 11:56:56 2019 us=480694 MANAGEMENT: >STATE:1567504616,ASSIGN_IP,,192.168.13.6,,,,
Tue Sep 03 11:57:01 2019 us=668335 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Tue Sep 03 11:57:01 2019 us=668335 C:\WINDOWS\system32\route.exe ADD SERVER_IP MASK 255.255.255.255 193.197.133.254
Tue Sep 03 11:57:01 2019 us=676147 Route addition via service succeeded
Tue Sep 03 11:57:01 2019 us=676147 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.13.5
Tue Sep 03 11:57:01 2019 us=685903 Route addition via service succeeded
Tue Sep 03 11:57:01 2019 us=685903 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.13.5
Tue Sep 03 11:57:01 2019 us=691803 Route addition via service succeeded
Tue Sep 03 11:57:01 2019 us=691803 MANAGEMENT: >STATE:1567504621,ADD_ROUTES,,,,,,
Tue Sep 03 11:57:01 2019 us=691803 C:\WINDOWS\system32\route.exe ADD 192.168.13.0 MASK 255.255.255.255 192.168.13.5
Tue Sep 03 11:57:01 2019 us=697649 Route addition via service succeeded
Tue Sep 03 11:57:01 2019 us=697649 C:\WINDOWS\system32\route.exe ADD 192.168.13.1 MASK 255.255.255.255 192.168.13.5
Tue Sep 03 11:57:01 2019 us=703472 Route addition via service succeeded
Tue Sep 03 11:57:01 2019 us=703472 Initialization Sequence Completed
Tue Sep 03 11:57:01 2019 us=704448 MANAGEMENT: >STATE:1567504621,CONNECTED,SUCCESS,192.168.13.6,SERVER_IP,1194,CLIENT_IP,65522
9. netstat -rn (Client)
10. ipconfig (Client)
....
Ethernet-Adapter Ethernet 4:
Verbindungsspezifisches DNS-Suffix:
Verbindungslokale IPv6-Adresse . : fe80::d537:136a:8aa3:b03d%27
IPv4-Adresse . . . . . . . . . . : 192.168.13.6
Subnetzmaske . . . . . . . . . . : 255.255.255.252
Standardgateway . . . . . . . . . :
.....
