Hi,
We have several OpenVPN connections and we use SNAT to NAT from the IPs in the VPN to LAN IPs.
Looks like this: client-nat snat 192.168.10.103 255.255.255.255 10.1.30.210
Lately we notice that the VPN is up, but the SNAT is not working anymore.
Sometimes is works again after restarting the PC with the OpenVPN client, but not always.
The information below is after installing OpenVPN 2.4.7 on Windows 10 PC.
I hope someone has an idea why this happens.
Thanks.
There are no errors in the log.
#Log with verb 5 (6 was too long to post here)
Thu Sep 26 15:49:20 2019 us=650952 Current Parameter Settings:
Thu Sep 26 15:49:20 2019 us=650952 config = 'C:\Program Files\OpenVPN\config\10_1_30_208.ovpn'
Thu Sep 26 15:49:20 2019 us=650952 mode = 0
Thu Sep 26 15:49:20 2019 us=650952 show_ciphers = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 show_digests = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 show_engines = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 genkey = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 key_pass_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 show_tls_ciphers = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 connect_retry_max = 0
Thu Sep 26 15:49:20 2019 us=650952 Connection profiles [0]:
Thu Sep 26 15:49:20 2019 us=650952 proto = tcp-client
Thu Sep 26 15:49:20 2019 us=650952 local = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 local_port = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 remote = 'xxx.xxx.xxx.xxx'
Thu Sep 26 15:49:20 2019 us=650952 remote_port = '443'
Thu Sep 26 15:49:20 2019 us=650952 remote_float = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 bind_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 bind_local = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 bind_ipv6_only = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 connect_retry_seconds = 5
Thu Sep 26 15:49:20 2019 us=650952 connect_timeout = 120
Thu Sep 26 15:49:20 2019 us=650952 socks_proxy_server = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 socks_proxy_port = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 tun_mtu = 1500
Thu Sep 26 15:49:20 2019 us=650952 tun_mtu_defined = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 link_mtu = 1500
Thu Sep 26 15:49:20 2019 us=650952 link_mtu_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 tun_mtu_extra = 0
Thu Sep 26 15:49:20 2019 us=650952 tun_mtu_extra_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 mtu_discover_type = -1
Thu Sep 26 15:49:20 2019 us=650952 fragment = 0
Thu Sep 26 15:49:20 2019 us=650952 mssfix = 1450
Thu Sep 26 15:49:20 2019 us=650952 explicit_exit_notification = 0
Thu Sep 26 15:49:20 2019 us=650952 Connection profiles END
Thu Sep 26 15:49:20 2019 us=650952 remote_random = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 ipchange = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 dev = 'tun'
Thu Sep 26 15:49:20 2019 us=650952 dev_type = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 dev_node = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 lladdr = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 topology = 1
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_local = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_remote_netmask = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_noexec = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_nowarn = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_ipv6_local = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_ipv6_netbits = 0
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_ipv6_remote = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 shaper = 0
Thu Sep 26 15:49:20 2019 us=650952 mtu_test = 0
Thu Sep 26 15:49:20 2019 us=650952 mlock = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 keepalive_ping = 0
Thu Sep 26 15:49:20 2019 us=650952 keepalive_timeout = 0
Thu Sep 26 15:49:20 2019 us=650952 inactivity_timeout = 0
Thu Sep 26 15:49:20 2019 us=650952 ping_send_timeout = 0
Thu Sep 26 15:49:20 2019 us=650952 ping_rec_timeout = 0
Thu Sep 26 15:49:20 2019 us=650952 ping_rec_timeout_action = 0
Thu Sep 26 15:49:20 2019 us=650952 ping_timer_remote = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 remap_sigusr1 = 0
Thu Sep 26 15:49:20 2019 us=650952 persist_tun = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 persist_local_ip = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 persist_remote_ip = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 persist_key = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 passtos = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 resolve_retry_seconds = 1000000000
Thu Sep 26 15:49:20 2019 us=650952 resolve_in_advance = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 username = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 groupname = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 chroot_dir = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 cd_dir = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 writepid = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 up_script = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 down_script = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 down_pre = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 up_restart = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 up_delay = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 daemon = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 inetd = 0
Thu Sep 26 15:49:20 2019 us=650952 log = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 suppress_timestamps = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 machine_readable_output = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 nice = 0
Thu Sep 26 15:49:20 2019 us=650952 verbosity = 5
Thu Sep 26 15:49:20 2019 us=650952 mute = 0
Thu Sep 26 15:49:20 2019 us=650952 gremlin = 0
Thu Sep 26 15:49:20 2019 us=650952 status_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 status_file_version = 1
Thu Sep 26 15:49:20 2019 us=650952 status_file_update_freq = 60
Thu Sep 26 15:49:20 2019 us=650952 occ = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 rcvbuf = 0
Thu Sep 26 15:49:20 2019 us=650952 sndbuf = 0
Thu Sep 26 15:49:20 2019 us=650952 sockflags = 0
Thu Sep 26 15:49:20 2019 us=650952 fast_io = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 comp.alg = 2
Thu Sep 26 15:49:20 2019 us=650952 comp.flags = 1
Thu Sep 26 15:49:20 2019 us=650952 route_script = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 route_default_gateway = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 route_default_metric = 0
Thu Sep 26 15:49:20 2019 us=650952 route_noexec = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 route_delay = 5
Thu Sep 26 15:49:20 2019 us=650952 route_delay_window = 30
Thu Sep 26 15:49:20 2019 us=650952 route_delay_defined = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 route_nopull = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 route_gateway_via_dhcp = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 allow_pull_fqdn = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 *** CNAT list
Thu Sep 26 15:49:20 2019 us=650952 CNAT[0] t=0 192.168.10.103/255.255.255.255/10.1.30.210
Thu Sep 26 15:49:20 2019 us=650952 CNAT[1] t=0 192.168.10.1/255.255.255.255/10.1.30.209
Thu Sep 26 15:49:20 2019 us=650952 CNAT[2] t=0 192.168.10.101/255.255.255.255/10.1.30.211
Thu Sep 26 15:49:20 2019 us=650952 CNAT[3] t=0 192.168.10.102/255.255.255.255/10.1.30.212
Thu Sep 26 15:49:20 2019 us=650952 management_addr = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 management_port = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 management_user_pass = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 management_log_history_cache = 250
Thu Sep 26 15:49:20 2019 us=650952 management_echo_buffer_size = 100
Thu Sep 26 15:49:20 2019 us=650952 management_write_peer_info_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 management_client_user = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 management_client_group = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 management_flags = 0
Thu Sep 26 15:49:20 2019 us=650952 shared_secret_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 key_direction = 1
Thu Sep 26 15:49:20 2019 us=650952 ciphername = 'AES-256-CBC'
Thu Sep 26 15:49:20 2019 us=650952 ncp_enabled = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Thu Sep 26 15:49:20 2019 us=650952 authname = 'SHA1'
Thu Sep 26 15:49:20 2019 us=650952 prng_hash = 'SHA1'
Thu Sep 26 15:49:20 2019 us=650952 prng_nonce_secret_len = 16
Thu Sep 26 15:49:20 2019 us=650952 keysize = 0
Thu Sep 26 15:49:20 2019 us=650952 engine = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 replay = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 mute_replay_warnings = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 replay_window = 64
Thu Sep 26 15:49:20 2019 us=650952 replay_time = 15
Thu Sep 26 15:49:20 2019 us=650952 packet_id_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 use_iv = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 test_crypto = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 tls_server = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 tls_client = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 key_method = 2
Thu Sep 26 15:49:20 2019 us=650952 ca_file = 'ca.crt'
Thu Sep 26 15:49:20 2019 us=650952 ca_path = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 dh_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 cert_file = '10_1_30_208.crt'
Thu Sep 26 15:49:20 2019 us=650952 extra_certs_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 priv_key_file = '10_1_30_208.key'
Thu Sep 26 15:49:20 2019 us=650952 pkcs12_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 cryptoapi_cert = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 cipher_list = 'DEFAULT:@SECLEVEL=0'
Thu Sep 26 15:49:20 2019 us=650952 cipher_list_tls13 = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 tls_cert_profile = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 tls_verify = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 tls_export_cert = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 verify_x509_type = 0
Thu Sep 26 15:49:20 2019 us=650952 verify_x509_name = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 crl_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 ns_cert_type = 1
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku
= 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku[i] = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku[i] = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku[i] = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku[i] = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku[i] = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_ku[i] = 0
Thu Sep 26 15:49:20 2019 us=650952 remote_cert_eku = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 ssl_flags = 0
Thu Sep 26 15:49:20 2019 us=650952 tls_timeout = 2
Thu Sep 26 15:49:20 2019 us=650952 renegotiate_bytes = -1
Thu Sep 26 15:49:20 2019 us=650952 renegotiate_packets = 0
Thu Sep 26 15:49:20 2019 us=650952 renegotiate_seconds = 3600
Thu Sep 26 15:49:20 2019 us=650952 handshake_window = 60
Thu Sep 26 15:49:20 2019 us=650952 transition_window = 3600
Thu Sep 26 15:49:20 2019 us=650952 single_session = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 push_peer_info = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 tls_exit = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 tls_auth_file = 'ta.key'
Thu Sep 26 15:49:20 2019 us=650952 tls_crypt_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_protected_authentication = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_private_mode = 00000000
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_cert_private = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_pin_cache_period = -1
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_id = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 pkcs11_id_management = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 server_network = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 server_netmask = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 server_network_ipv6 = ::
Thu Sep 26 15:49:20 2019 us=650952 server_netbits_ipv6 = 0
Thu Sep 26 15:49:20 2019 us=650952 server_bridge_ip = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 server_bridge_netmask = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 server_bridge_pool_start = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 server_bridge_pool_end = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_pool_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_pool_start = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_pool_end = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_pool_netmask = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_pool_persist_refresh_freq = 600
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_ipv6_pool_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_ipv6_pool_base = ::
Thu Sep 26 15:49:20 2019 us=650952 ifconfig_ipv6_pool_netbits = 0
Thu Sep 26 15:49:20 2019 us=650952 n_bcast_buf = 256
Thu Sep 26 15:49:20 2019 us=650952 tcp_queue_limit = 64
Thu Sep 26 15:49:20 2019 us=650952 real_hash_size = 256
Thu Sep 26 15:49:20 2019 us=650952 virtual_hash_size = 256
Thu Sep 26 15:49:20 2019 us=650952 client_connect_script = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 learn_address_script = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 client_disconnect_script = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 client_config_dir = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 ccd_exclusive = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 tmp_dir = 'C:\windows\TEMP\'
Thu Sep 26 15:49:20 2019 us=650952 push_ifconfig_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 push_ifconfig_local = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 push_ifconfig_remote_netmask = 0.0.0.0
Thu Sep 26 15:49:20 2019 us=650952 push_ifconfig_ipv6_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 push_ifconfig_ipv6_local = ::/0
Thu Sep 26 15:49:20 2019 us=650952 push_ifconfig_ipv6_remote = ::
Thu Sep 26 15:49:20 2019 us=650952 enable_c2c = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 duplicate_cn = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 cf_max = 0
Thu Sep 26 15:49:20 2019 us=650952 cf_per = 0
Thu Sep 26 15:49:20 2019 us=650952 max_clients = 1024
Thu Sep 26 15:49:20 2019 us=650952 max_routes_per_client = 256
Thu Sep 26 15:49:20 2019 us=650952 auth_user_pass_verify_script = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 auth_user_pass_verify_script_via_file = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 auth_token_generate = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 auth_token_lifetime = 0
Thu Sep 26 15:49:20 2019 us=650952 client = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 pull = ENABLED
Thu Sep 26 15:49:20 2019 us=650952 auth_user_pass_file = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 show_net_up = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 route_method = 0
Thu Sep 26 15:49:20 2019 us=650952 block_outside_dns = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 ip_win32_defined = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 ip_win32_type = 3
Thu Sep 26 15:49:20 2019 us=650952 dhcp_masq_offset = 0
Thu Sep 26 15:49:20 2019 us=650952 dhcp_lease_time = 31536000
Thu Sep 26 15:49:20 2019 us=650952 tap_sleep = 0
Thu Sep 26 15:49:20 2019 us=650952 dhcp_options = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 dhcp_renew = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 dhcp_pre_release = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 domain = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 netbios_scope = '[UNDEF]'
Thu Sep 26 15:49:20 2019 us=650952 netbios_node_type = 0
Thu Sep 26 15:49:20 2019 us=650952 disable_nbt = DISABLED
Thu Sep 26 15:49:20 2019 us=650952 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019
Thu Sep 26 15:49:20 2019 us=650952 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Sep 26 15:49:20 2019 us=650952 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Thu Sep 26 15:49:20 2019 us=713449 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Thu Sep 26 15:49:20 2019 us=791565 No valid translation found for TLS cipher '@SECLEVEL=0'
Thu Sep 26 15:49:20 2019 us=900648 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 26 15:49:20 2019 us=900648 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 26 15:49:20 2019 us=900648 LZO compression initializing
Thu Sep 26 15:49:20 2019 us=900648 Control Channel MTU parms [ L:1624 D:1182 EF:68 EB:0 ET:0 EL:3 ]
Thu Sep 26 15:49:20 2019 us=900648 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Sep 26 15:49:20 2019 us=900648 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Thu Sep 26 15:49:20 2019 us=900648 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Thu Sep 26 15:49:20 2019 us=900648 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:443
Thu Sep 26 15:49:20 2019 us=900648 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Sep 26 15:49:20 2019 us=900648 Attempting to establish TCP connection with [AF_INET]xxx.xxx.xxx.xxx:443 [nonblock]
Thu Sep 26 15:49:21 2019 us=917084 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:443
Thu Sep 26 15:49:21 2019 us=917084 TCP_CLIENT link local: (not bound)
Thu Sep 26 15:49:21 2019 us=917084 TCP_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:443
Thu Sep 26 15:49:21 2019 us=948310 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:443, sid=9f1ab1d9 b07d2dcb
Thu Sep 26 15:49:22 2019 us=104862 VERIFY OK: depth=1, C=NL, ST=ZH, L=Zoetermeer, O=OpenVPN, OU=changeme, CN=TMSE_Server, name=Server, emailAddress=tsg.iv@tmse.nl
Thu Sep 26 15:49:22 2019 us=120471 VERIFY OK: nsCertType=SERVER
Thu Sep 26 15:49:22 2019 us=120471 VERIFY OK: depth=0, C=NL, ST=ZH, L=Zoetermeer, O=OpenVPN, OU=changeme, CN=TMSE_Server, name=Server, emailAddress=tsg.iv@tmse.nl
Thu Sep 26 15:49:22 2019 us=261076 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1560', remote='link-mtu 1544'
Thu Sep 26 15:49:22 2019 us=261076 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher DES-EDE3-CBC'
Thu Sep 26 15:49:22 2019 us=261076 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 192'
Thu Sep 26 15:49:22 2019 us=261076 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Thu Sep 26 15:49:22 2019 us=261076 [TMSE_Server] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:443
Thu Sep 26 15:49:23 2019 us=417375 SENT CONTROL [TMSE_Server]: 'PUSH_REQUEST' (status=1)
Thu Sep 26 15:49:23 2019 us=495482 PUSH: Received control message: 'PUSH_REPLY,route 10.1.0.0 255.255.255.0,route yyy.yyy.yyy.64 255.255.255.240,route 10.1.200.0 255.255.255.128,route 10.1.6.0 255.255.255.0,route-gateway 10.1.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.1.4.187 255.255.248.0,peer-id 0,cipher AES-256-GCM'
Thu Sep 26 15:49:23 2019 us=495482 OPTIONS IMPORT: timers and/or timeouts modified
Thu Sep 26 15:49:23 2019 us=495482 OPTIONS IMPORT: --ifconfig/up options modified
Thu Sep 26 15:49:23 2019 us=495482 OPTIONS IMPORT: route options modified
Thu Sep 26 15:49:23 2019 us=495482 OPTIONS IMPORT: route-related options modified
Thu Sep 26 15:49:23 2019 us=495482 OPTIONS IMPORT: peer-id set
Thu Sep 26 15:49:23 2019 us=495482 OPTIONS IMPORT: adjusting link_mtu to 1627
Thu Sep 26 15:49:23 2019 us=495482 OPTIONS IMPORT: data channel crypto options modified
Thu Sep 26 15:49:23 2019 us=495482 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Sep 26 15:49:23 2019 us=495482 Data Channel MTU parms [ L:1555 D:1450 EF:55 EB:406 ET:0 EL:3 ]
Thu Sep 26 15:49:23 2019 us=495482 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Sep 26 15:49:23 2019 us=495482 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Sep 26 15:49:23 2019 us=495482 interactive service msg_channel=0
Thu Sep 26 15:49:23 2019 us=495482 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=4 HWADDR=b0:0c:d1:54:51:c9
Thu Sep 26 15:49:23 2019 us=495482 open_tun
Thu Sep 26 15:49:23 2019 us=495482 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{0F11DB44-8569-4ADB-9FAD-F7C773548841}.tap
Thu Sep 26 15:49:23 2019 us=495482 TAP-Windows Driver Version 9.23
Thu Sep 26 15:49:23 2019 us=495482 TAP-Windows MTU=1500
Thu Sep 26 15:49:23 2019 us=495482 Set TAP-Windows TUN subnet mode network/local/netmask = 10.1.0.0/10.1.4.187/255.255.248.0 [SUCCEEDED]
Thu Sep 26 15:49:23 2019 us=495482 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.1.4.187/255.255.248.0 on interface {0F11DB44-8569-4ADB-9FAD-F7C773548841} [DHCP-serv: 10.1.7.254, lease-time: 31536000]
Thu Sep 26 15:49:23 2019 us=495482 Successful ARP Flush on interface [3] {0F11DB44-8569-4ADB-9FAD-F7C773548841}
Thu Sep 26 15:49:23 2019 us=495482 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Sep 26 15:49:28 2019 us=42863 TEST ROUTES: 4/4 succeeded len=4 ret=1 a=0 u/d=up
Thu Sep 26 15:49:28 2019 us=42863 C:\windows\system32\route.exe ADD 10.1.0.0 MASK 255.255.255.0 10.1.0.1
Thu Sep 26 15:49:28 2019 us=42863 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Thu Sep 26 15:49:28 2019 us=42863 Route addition via IPAPI succeeded [adaptive]
Thu Sep 26 15:49:28 2019 us=42863 C:\windows\system32\route.exe ADD yyy.yyy.yyy.64 MASK 255.255.255.240 10.1.0.1
Thu Sep 26 15:49:28 2019 us=42863 ROUTE: route addition failed using CreateIpForwardEntry: The object already exists. [status=5010 if_index=3]
Thu Sep 26 15:49:28 2019 us=42863 Route addition via IPAPI failed [adaptive]
Thu Sep 26 15:49:28 2019 us=42863 Route addition fallback to route.exe
Thu Sep 26 15:49:28 2019 us=42863 env_block: add PATH=C:\windows\System32;C:\windows;C:\windows\System32\Wbem
Thu Sep 26 15:49:28 2019 us=105071 C:\windows\system32\route.exe ADD 10.1.200.0 MASK 255.255.255.128 10.1.0.1
Thu Sep 26 15:49:28 2019 us=105071 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Thu Sep 26 15:49:28 2019 us=105071 Route addition via IPAPI succeeded [adaptive]
Thu Sep 26 15:49:28 2019 us=105071 C:\windows\system32\route.exe ADD 10.1.6.0 MASK 255.255.255.0 10.1.0.1
Thu Sep 26 15:49:28 2019 us=105071 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Thu Sep 26 15:49:28 2019 us=105071 Route addition via IPAPI succeeded [adaptive]
Thu Sep 26 15:49:28 2019 us=105071 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Sep 26 15:49:28 2019 us=105071 Initialization Sequence Completed
This is the config file
client
dev tun
tls-client
ca ca.crt
cert 10_1_30_208.crt
key 10_1_30_208.key
tls-cipher 'DEFAULT:@SECLEVEL=0' # to overcome ca.crt error
proto tcp
remote xxx.xxx.xxx.xxx
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server # deprecated, but necessary with server with 'old' clients
#remote-cert-tls client # replacement for ns-cert-type server
tls-auth ta.key 1
#cipher DES-EDE3-CBC # Triple-DES
cipher AES-256-CBC # AES256 256bit key
pull
comp-lzo
verb 6
#New style NAT
client-nat snat 192.168.10.103 255.255.255.255 10.1.30.210 ## SP
client-nat snat 192.168.10.1 255.255.255.255 10.1.30.209 ## NSA
client-nat snat 192.168.10.101 255.255.255.255 10.1.30.211 ## CT
client-nat snat 192.168.10.102 255.255.255.255 10.1.30.212 ## Anet
#client-nat snat 192.168.0.101 255.255.255.255 10.1.30.213 ##
#client-nat snat 192.168.0.101 255.255.255.255 10.1.30.214 ##
