My first post asking for help - I endeavored to follow the "how to" as best I could & removing any personal info.
I had no idea doing this would be so problematic - any help would be greatly appreciated.
I???m attempting to set up OpenVPN so I can access my local network from OpenVPN clients over LTE. I have successfully set up an openvpn server on Digital Ocean using the Angristan script here:
https://github.com/angristan/openvpn-install
I can connect to the VPN using my AC88U router as a client, and via iOS Openvpn client from my LTE device. Despite working on this for over a month I cannot configure the system so I can access devices behind my client router using a LTE device.
I do not want, or need, everything to go through the VPN. I'm simply trying to access items behind my router so I don't need port forwarding on the router.
Yes, I can set up VPN server on the router, but then everything I do is limited to the upload speed of my internet connection, which is slow.
I have read these - repeatedly: (Insanity: doing the same thing over and over again and expecting different results.)
https://www.secure-computing.net/wiki/index.php/OpenVPN/Routing
https://openvpn.net/community-resources/expanding-the-scope-of-the-vpn-to-include-additional-machines-on-either-the-client-or-server-subnet/
https://community.openvpn.net/openvpn/wiki/RoutedLans
Here is my setup:
Router: Asus AC88U, Merlin firmware 384.13.
Client running on router. (profile name AC88U)
Router address: 192.168.1.1
Devices behind router: 192.168.1.2 through 192.168.1.100
TCP & UDP port 1194 forwarded to 192.168.1.1
I don't have any other customization related to vpn. I don't know if I need any customization or not.
VPN Server
Digital Ocean, Ubuntu 18.04.3
/etc/sysctl.conf:
net.ipv4.ip_forward=1
Firewall:
To Action From
-- ------ ----
OpenSSH ALLOW Anywhere
1194 ALLOW Anywhere
OpenSSH (v6) ALLOW Anywhere (v6)
1194 (v6) ALLOW Anywhere (v6)
Iptables:
#!/bin/sh
#tun0 rules
iptables -t nat -I POSTROUTING 1 -s 10.8.0.0/24 -o eth0 -j MASQUERADE
LTE client: (profile name mobiledev)
Connects to VPN server
Unable to communicate with any devices behind AC88U router
uname -a
Linux ubuntu-s-1vcpu-1gb-nyc3-01 4.15.0-66-generic #75-Ubuntu SMP Tue Oct 1 05:24:09 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
port 1194
proto tcp
dev tun
user nobody
group nogroup
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
#push "redirect-gateway def1 bypass-dhcp"
dh none
ecdh-curve prime256v1
tls-crypt tls-crypt.key 0
crl-verify crl.pem
ca ca.crt
cert server_dekikcUFXIC0VZwW.crt
key server_dekikcUFXIC0VZwW.key
auth SHA256
cipher AES-128-GCM
ncp-ciphers AES-128-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
status /var/log/openvpn/status.log
log-append openvpn.log
verb 4
client-config-dir /etc/openvpn/ccd
push "route 192.168.1.0 255.255.255.0"
client-to-client
AC88U client config
client
proto tcp-client
remote x.x.x.x 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_dekikcUFXIC0VZwW name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
#setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 4
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQghJ5eoTql8BNPtnmp
FcFboJECdNhHQS4X00ZitBdtVTWhRANCAAQAnG5A1OpNpOnvWTOhm+sS6K65K1zq
dcpjbwEe4q77WffUxuYZdFQnSeHFeDnbbhrPfQVxNSLqiyv8qtNELOQt
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-crypt>
LTE client config file:
client
proto tcp-client
remote x.x.x.x 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_dekikcUFXIC0VZwW name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
#setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgwOjTK5RgGLobIAJa
op4qP7OGsaRNlyysJ2KPRRQkc8qhRANCAARlYUJ5lnPLFIvYsxpwwL11K0mSwfj3
oO6Jjh+/EMrCJ4RlPJ5EVHf/7cwIMjNNvdL5FScH4qkreLIRyboOdqmN
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-crypt>
server log verb 4
Tue Nov 5 19:22:28 2019 us=654453 Current Parameter Settings:
Tue Nov 5 19:22:28 2019 us=654522 config = '/etc/openvpn/server.conf'
Tue Nov 5 19:22:28 2019 us=654532 mode = 1
Tue Nov 5 19:22:28 2019 us=654541 persist_config = DISABLED
Tue Nov 5 19:22:28 2019 us=654549 persist_mode = 1
Tue Nov 5 19:22:28 2019 us=654558 show_ciphers = DISABLED
Tue Nov 5 19:22:28 2019 us=654566 show_digests = DISABLED
Tue Nov 5 19:22:28 2019 us=654573 show_engines = DISABLED
Tue Nov 5 19:22:28 2019 us=654581 genkey = DISABLED
Tue Nov 5 19:22:28 2019 us=654589 key_pass_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654597 show_tls_ciphers = DISABLED
Tue Nov 5 19:22:28 2019 us=654605 connect_retry_max = 0
Tue Nov 5 19:22:28 2019 us=654613 Connection profiles [0]:
Tue Nov 5 19:22:28 2019 us=654621 proto = tcp-server
Tue Nov 5 19:22:28 2019 us=654629 local = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654637 local_port = '1194'
Tue Nov 5 19:22:28 2019 us=654645 remote = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654653 remote_port = '1194'
Tue Nov 5 19:22:28 2019 us=654660 remote_float = DISABLED
Tue Nov 5 19:22:28 2019 us=654668 bind_defined = DISABLED
Tue Nov 5 19:22:28 2019 us=654676 bind_local = ENABLED
Tue Nov 5 19:22:28 2019 us=654684 bind_ipv6_only = DISABLED
Tue Nov 5 19:22:28 2019 us=654691 connect_retry_seconds = 5
Tue Nov 5 19:22:28 2019 us=654699 connect_timeout = 120
Tue Nov 5 19:22:28 2019 us=654708 socks_proxy_server = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654716 socks_proxy_port = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654724 tun_mtu = 1500
Tue Nov 5 19:22:28 2019 us=654732 tun_mtu_defined = ENABLED
Tue Nov 5 19:22:28 2019 us=654740 link_mtu = 1500
Tue Nov 5 19:22:28 2019 us=654748 link_mtu_defined = DISABLED
Tue Nov 5 19:22:28 2019 us=654756 tun_mtu_extra = 0
Tue Nov 5 19:22:28 2019 us=654763 tun_mtu_extra_defined = DISABLED
Tue Nov 5 19:22:28 2019 us=654771 mtu_discover_type = -1
Tue Nov 5 19:22:28 2019 us=654779 fragment = 0
Tue Nov 5 19:22:28 2019 us=654787 mssfix = 1450
Tue Nov 5 19:22:28 2019 us=654795 explicit_exit_notification = 0
Tue Nov 5 19:22:28 2019 us=654803 Connection profiles END
Tue Nov 5 19:22:28 2019 us=654811 remote_random = DISABLED
Tue Nov 5 19:22:28 2019 us=654819 ipchange = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654827 dev = 'tun'
Tue Nov 5 19:22:28 2019 us=654835 dev_type = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654842 dev_node = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654850 lladdr = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654858 topology = 3
Tue Nov 5 19:22:28 2019 us=654866 ifconfig_local = '10.8.0.1'
Tue Nov 5 19:22:28 2019 us=654875 ifconfig_remote_netmask = '255.255.255.0'
Tue Nov 5 19:22:28 2019 us=654883 ifconfig_noexec = DISABLED
Tue Nov 5 19:22:28 2019 us=654891 ifconfig_nowarn = DISABLED
Tue Nov 5 19:22:28 2019 us=654899 ifconfig_ipv6_local = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654907 ifconfig_ipv6_netbits = 0
Tue Nov 5 19:22:28 2019 us=654915 ifconfig_ipv6_remote = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=654923 shaper = 0
Tue Nov 5 19:22:28 2019 us=654931 mtu_test = 0
Tue Nov 5 19:22:28 2019 us=654939 mlock = DISABLED
Tue Nov 5 19:22:28 2019 us=654947 keepalive_ping = 10
Tue Nov 5 19:22:28 2019 us=654955 keepalive_timeout = 120
Tue Nov 5 19:22:28 2019 us=654963 inactivity_timeout = 0
Tue Nov 5 19:22:28 2019 us=654970 ping_send_timeout = 10
Tue Nov 5 19:22:28 2019 us=654978 ping_rec_timeout = 240
Tue Nov 5 19:22:28 2019 us=654986 ping_rec_timeout_action = 2
Tue Nov 5 19:22:28 2019 us=654994 ping_timer_remote = DISABLED
Tue Nov 5 19:22:28 2019 us=655002 remap_sigusr1 = 0
Tue Nov 5 19:22:28 2019 us=655010 persist_tun = ENABLED
Tue Nov 5 19:22:28 2019 us=655018 persist_local_ip = DISABLED
Tue Nov 5 19:22:28 2019 us=655026 persist_remote_ip = DISABLED
Tue Nov 5 19:22:28 2019 us=655035 persist_key = ENABLED
Tue Nov 5 19:22:28 2019 us=655042 passtos = DISABLED
Tue Nov 5 19:22:28 2019 us=655051 resolve_retry_seconds = 1000000000
Tue Nov 5 19:22:28 2019 us=655059 resolve_in_advance = DISABLED
Tue Nov 5 19:22:28 2019 us=655073 username = 'nobody'
Tue Nov 5 19:22:28 2019 us=655081 groupname = 'nogroup'
Tue Nov 5 19:22:28 2019 us=655089 chroot_dir = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655097 cd_dir = '/etc/openvpn'
Tue Nov 5 19:22:28 2019 us=655105 writepid = '/run/openvpn/server.pid'
Tue Nov 5 19:22:28 2019 us=655112 up_script = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655120 down_script = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655128 down_pre = DISABLED
Tue Nov 5 19:22:28 2019 us=655136 up_restart = DISABLED
Tue Nov 5 19:22:28 2019 us=655143 up_delay = DISABLED
Tue Nov 5 19:22:28 2019 us=655151 daemon = ENABLED
Tue Nov 5 19:22:28 2019 us=655159 inetd = 0
Tue Nov 5 19:22:28 2019 us=655167 log = ENABLED
Tue Nov 5 19:22:28 2019 us=655175 suppress_timestamps = DISABLED
Tue Nov 5 19:22:28 2019 us=655183 machine_readable_output = DISABLED
Tue Nov 5 19:22:28 2019 us=655191 nice = 0
Tue Nov 5 19:22:28 2019 us=655199 verbosity = 4
Tue Nov 5 19:22:28 2019 us=655207 mute = 0
Tue Nov 5 19:22:28 2019 us=655216 gremlin = 0
Tue Nov 5 19:22:28 2019 us=655224 status_file = '/var/log/openvpn/status.log'
Tue Nov 5 19:22:28 2019 us=655232 status_file_version = 1
Tue Nov 5 19:22:28 2019 us=655243 status_file_update_freq = 10
Tue Nov 5 19:22:28 2019 us=655250 occ = ENABLED
Tue Nov 5 19:22:28 2019 us=655258 rcvbuf = 0
Tue Nov 5 19:22:28 2019 us=655266 sndbuf = 0
Tue Nov 5 19:22:28 2019 us=655274 mark = 0
Tue Nov 5 19:22:28 2019 us=655282 sockflags = 0
Tue Nov 5 19:22:28 2019 us=655290 fast_io = DISABLED
Tue Nov 5 19:22:28 2019 us=655297 comp.alg = 0
Tue Nov 5 19:22:28 2019 us=655305 comp.flags = 0
Tue Nov 5 19:22:28 2019 us=655313 route_script = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655322 route_default_gateway = '10.8.0.2'
Tue Nov 5 19:22:28 2019 us=655330 route_default_metric = 0
Tue Nov 5 19:22:28 2019 us=655338 route_noexec = DISABLED
Tue Nov 5 19:22:28 2019 us=655345 route_delay = 0
Tue Nov 5 19:22:28 2019 us=655353 route_delay_window = 30
Tue Nov 5 19:22:28 2019 us=655362 route_delay_defined = DISABLED
Tue Nov 5 19:22:28 2019 us=655370 route_nopull = DISABLED
Tue Nov 5 19:22:28 2019 us=655378 route_gateway_via_dhcp = DISABLED
Tue Nov 5 19:22:28 2019 us=655386 allow_pull_fqdn = DISABLED
Tue Nov 5 19:22:28 2019 us=655394 management_addr = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655402 management_port = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655410 management_user_pass = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655418 management_log_history_cache = 250
Tue Nov 5 19:22:28 2019 us=655426 management_echo_buffer_size = 100
Tue Nov 5 19:22:28 2019 us=655434 management_write_peer_info_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655442 management_client_user = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655450 management_client_group = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655458 management_flags = 0
Tue Nov 5 19:22:28 2019 us=655466 shared_secret_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655474 key_direction = 0
Tue Nov 5 19:22:28 2019 us=655483 ciphername = 'AES-128-GCM'
Tue Nov 5 19:22:28 2019 us=655491 ncp_enabled = ENABLED
Tue Nov 5 19:22:28 2019 us=655499 ncp_ciphers = 'AES-128-GCM'
Tue Nov 5 19:22:28 2019 us=655507 authname = 'SHA256'
Tue Nov 5 19:22:28 2019 us=655515 prng_hash = 'SHA1'
Tue Nov 5 19:22:28 2019 us=655523 prng_nonce_secret_len = 16
Tue Nov 5 19:22:28 2019 us=655531 keysize = 0
Tue Nov 5 19:22:28 2019 us=655540 engine = DISABLED
Tue Nov 5 19:22:28 2019 us=655548 replay = ENABLED
Tue Nov 5 19:22:28 2019 us=655556 mute_replay_warnings = DISABLED
Tue Nov 5 19:22:28 2019 us=655564 replay_window = 64
Tue Nov 5 19:22:28 2019 us=655572 replay_time = 15
Tue Nov 5 19:22:28 2019 us=655580 packet_id_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655588 use_iv = ENABLED
Tue Nov 5 19:22:28 2019 us=655596 test_crypto = DISABLED
Tue Nov 5 19:22:28 2019 us=655604 tls_server = ENABLED
Tue Nov 5 19:22:28 2019 us=655612 tls_client = DISABLED
Tue Nov 5 19:22:28 2019 us=655624 key_method = 2
Tue Nov 5 19:22:28 2019 us=655632 ca_file = 'ca.crt'
Tue Nov 5 19:22:28 2019 us=655640 ca_path = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655648 dh_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655656 cert_file = 'server_dekikcUFXIC0VZwW.crt'
Tue Nov 5 19:22:28 2019 us=655664 extra_certs_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655672 priv_key_file = 'server_dekikcUFXIC0VZwW.key'
Tue Nov 5 19:22:28 2019 us=655680 pkcs12_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655688 cipher_list = 'TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256'
Tue Nov 5 19:22:28 2019 us=655697 tls_verify = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655705 tls_export_cert = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655714 verify_x509_type = 0
Tue Nov 5 19:22:28 2019 us=655722 verify_x509_name = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655729 crl_file = 'crl.pem'
Tue Nov 5 19:22:28 2019 us=655737 ns_cert_type = 0
Tue Nov 5 19:22:28 2019 us=655745 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655752 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655759 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655766 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655773 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655781 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655789 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655797 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655805 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655813 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655821 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655828 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655836 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655844 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655852 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655860 remote_cert_ku[i] = 0
Tue Nov 5 19:22:28 2019 us=655868 remote_cert_eku = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655877 ssl_flags = 192
Tue Nov 5 19:22:28 2019 us=655885 tls_timeout = 2
Tue Nov 5 19:22:28 2019 us=655893 renegotiate_bytes = -1
Tue Nov 5 19:22:28 2019 us=655901 renegotiate_packets = 0
Tue Nov 5 19:22:28 2019 us=655909 renegotiate_seconds = 3600
Tue Nov 5 19:22:28 2019 us=655917 handshake_window = 60
Tue Nov 5 19:22:28 2019 us=655925 transition_window = 3600
Tue Nov 5 19:22:28 2019 us=655933 single_session = DISABLED
Tue Nov 5 19:22:28 2019 us=655941 push_peer_info = DISABLED
Tue Nov 5 19:22:28 2019 us=655949 tls_exit = DISABLED
Tue Nov 5 19:22:28 2019 us=655957 tls_auth_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=655965 tls_crypt_file = 'tls-crypt.key'
Tue Nov 5 19:22:28 2019 us=655973 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=655981 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=655989 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=655997 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656005 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656013 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656021 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656029 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656038 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656046 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656054 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656062 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656070 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656078 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656086 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656094 pkcs11_protected_authentication = DISABLED
Tue Nov 5 19:22:28 2019 us=656102 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656111 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656122 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656131 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656139 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656147 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656155 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656162 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656170 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656178 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656187 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656242 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656252 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656260 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656268 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656276 pkcs11_private_mode = 00000000
Tue Nov 5 19:22:28 2019 us=656284 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656302 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656310 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656318 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656326 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656334 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656341 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656349 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656357 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656365 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656373 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656381 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656389 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656396 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656404 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656412 pkcs11_cert_private = DISABLED
Tue Nov 5 19:22:28 2019 us=656420 pkcs11_pin_cache_period = -1
Tue Nov 5 19:22:28 2019 us=656427 pkcs11_id = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656435 pkcs11_id_management = DISABLED
Tue Nov 5 19:22:28 2019 us=656445 server_network = 10.8.0.0
Tue Nov 5 19:22:28 2019 us=656454 server_netmask = 255.255.255.0
Tue Nov 5 19:22:28 2019 us=656463 server_network_ipv6 = ::
Tue Nov 5 19:22:28 2019 us=656471 server_netbits_ipv6 = 0
Tue Nov 5 19:22:28 2019 us=656480 server_bridge_ip = 0.0.0.0
Tue Nov 5 19:22:28 2019 us=656489 server_bridge_netmask = 0.0.0.0
Tue Nov 5 19:22:28 2019 us=656497 server_bridge_pool_start = 0.0.0.0
Tue Nov 5 19:22:28 2019 us=656506 server_bridge_pool_end = 0.0.0.0
Tue Nov 5 19:22:28 2019 us=656514 push_entry = 'dhcp-option DNS 8.8.8.8'
Tue Nov 5 19:22:28 2019 us=656523 push_entry = 'dhcp-option DNS 8.8.4.4'
Tue Nov 5 19:22:28 2019 us=656532 push_entry = 'route 192.168.1.0 255.255.255.0'
Tue Nov 5 19:22:28 2019 us=656540 push_entry = 'route-gateway 10.8.0.1'
Tue Nov 5 19:22:28 2019 us=656548 push_entry = 'topology subnet'
Tue Nov 5 19:22:28 2019 us=656556 push_entry = 'ping 10'
Tue Nov 5 19:22:28 2019 us=656564 push_entry = 'ping-restart 120'
Tue Nov 5 19:22:28 2019 us=656571 ifconfig_pool_defined = ENABLED
Tue Nov 5 19:22:28 2019 us=656580 ifconfig_pool_start = 10.8.0.2
Tue Nov 5 19:22:28 2019 us=656589 ifconfig_pool_end = 10.8.0.253
Tue Nov 5 19:22:28 2019 us=656598 ifconfig_pool_netmask = 255.255.255.0
Tue Nov 5 19:22:28 2019 us=656606 ifconfig_pool_persist_filename = 'ipp.txt'
Tue Nov 5 19:22:28 2019 us=656614 ifconfig_pool_persist_refresh_freq = 600
Tue Nov 5 19:22:28 2019 us=656621 ifconfig_ipv6_pool_defined = DISABLED
Tue Nov 5 19:22:28 2019 us=656630 ifconfig_ipv6_pool_base = ::
Tue Nov 5 19:22:28 2019 us=656638 ifconfig_ipv6_pool_netbits = 0
Tue Nov 5 19:22:28 2019 us=656646 n_bcast_buf = 256
Tue Nov 5 19:22:28 2019 us=656654 tcp_queue_limit = 64
Tue Nov 5 19:22:28 2019 us=656667 real_hash_size = 256
Tue Nov 5 19:22:28 2019 us=656675 virtual_hash_size = 256
Tue Nov 5 19:22:28 2019 us=656683 client_connect_script = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656692 learn_address_script = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656700 client_disconnect_script = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656708 client_config_dir = '/etc/openvpn/ccd'
Tue Nov 5 19:22:28 2019 us=656716 ccd_exclusive = DISABLED
Tue Nov 5 19:22:28 2019 us=656724 tmp_dir = '/tmp'
Tue Nov 5 19:22:28 2019 us=656732 push_ifconfig_defined = DISABLED
Tue Nov 5 19:22:28 2019 us=656741 push_ifconfig_local = 0.0.0.0
Tue Nov 5 19:22:28 2019 us=656750 push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 5 19:22:28 2019 us=656758 push_ifconfig_ipv6_defined = DISABLED
Tue Nov 5 19:22:28 2019 us=656766 push_ifconfig_ipv6_local = ::/0
Tue Nov 5 19:22:28 2019 us=656775 push_ifconfig_ipv6_remote = ::
Tue Nov 5 19:22:28 2019 us=656783 enable_c2c = ENABLED
Tue Nov 5 19:22:28 2019 us=656791 duplicate_cn = DISABLED
Tue Nov 5 19:22:28 2019 us=656799 cf_max = 0
Tue Nov 5 19:22:28 2019 us=656807 cf_per = 0
Tue Nov 5 19:22:28 2019 us=656815 max_clients = 1024
Tue Nov 5 19:22:28 2019 us=656823 max_routes_per_client = 256
Tue Nov 5 19:22:28 2019 us=656831 auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656839 auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 5 19:22:28 2019 us=656848 auth_token_generate = DISABLED
Tue Nov 5 19:22:28 2019 us=656856 auth_token_lifetime = 0
Tue Nov 5 19:22:28 2019 us=656864 port_share_host = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656872 port_share_port = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656880 client = DISABLED
Tue Nov 5 19:22:28 2019 us=656888 pull = DISABLED
Tue Nov 5 19:22:28 2019 us=656896 auth_user_pass_file = '[UNDEF]'
Tue Nov 5 19:22:28 2019 us=656906 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Tue Nov 5 19:22:28 2019 us=656921 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08
Tue Nov 5 19:22:28 2019 us=664209 ECDH curve prime256v1 added
Tue Nov 5 19:22:28 2019 us=664322 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Nov 5 19:22:28 2019 us=664341 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Nov 5 19:22:28 2019 us=664351 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Nov 5 19:22:28 2019 us=664362 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Nov 5 19:22:28 2019 us=664375 TLS-Auth MTU parms [ L:1623 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Tue Nov 5 19:22:28 2019 us=666495 TUN/TAP device tun0 opened
Tue Nov 5 19:22:28 2019 us=666685 TUN/TAP TX queue length set to 100
Tue Nov 5 19:22:28 2019 us=666708 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Nov 5 19:22:28 2019 us=666727 /sbin/ip link set dev tun0 up mtu 1500
Tue Nov 5 19:22:28 2019 us=679947 /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Tue Nov 5 19:22:28 2019 us=686211 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Tue Nov 5 19:22:28 2019 us=686744 Could not determine IPv4/IPv6 protocol. Using AF_INET
Tue Nov 5 19:22:28 2019 us=686782 Socket Buffers: R=[87380->87380] S=[16384->16384]
Tue Nov 5 19:22:28 2019 us=686799 Listening for incoming TCP connection on [AF_INET][undef]:1194
Tue Nov 5 19:22:28 2019 us=686814 TCPv4_SERVER link local (bound): [AF_INET][undef]:1194
Tue Nov 5 19:22:28 2019 us=686823 TCPv4_SERVER link remote: [AF_UNSPEC]
Tue Nov 5 19:22:28 2019 us=686838 GID set to nogroup
Tue Nov 5 19:22:28 2019 us=686852 UID set to nobody
Tue Nov 5 19:22:28 2019 us=686869 MULTI: multi_init called, r=256 v=256
Tue Nov 5 19:22:28 2019 us=686916 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Tue Nov 5 19:22:28 2019 us=686931 ifconfig_pool_read(), in='mobiledev,10.8.0.2', TODO: IPv6
Tue Nov 5 19:22:28 2019 us=686943 succeeded -> ifconfig_pool_set()
Tue Nov 5 19:22:28 2019 us=686961 ifconfig_pool_read(), in='AC88U,10.8.0.3', TODO: IPv6
Tue Nov 5 19:22:28 2019 us=686969 succeeded -> ifconfig_pool_set()
Tue Nov 5 19:22:28 2019 us=686979 IFCONFIG POOL LIST
Tue Nov 5 19:22:28 2019 us=686989 mobiledev,10.8.0.2
Tue Nov 5 19:22:28 2019 us=686998 AC88U,10.8.0.3
Tue Nov 5 19:22:28 2019 us=687033 MULTI: TCP INIT maxclients=1024 maxevents=1028
Tue Nov 5 19:22:28 2019 us=690538 Initialization Sequence Completed
[/oconf]
AC88U client log verb 4 from router:
[oconf=code]
Nov 5 14:53:31 ovpn-client1[5052]: Current Parameter Settings:
Nov 5 14:53:31 ovpn-client1[5052]: config = 'config.ovpn'
Nov 5 14:53:31 ovpn-client1[5052]: mode = 0
Nov 5 14:53:31 ovpn-client1[5052]: persist_config = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: persist_mode = 1
Nov 5 14:53:31 ovpn-client1[5052]: show_ciphers = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: show_digests = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: show_engines = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: genkey = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: key_pass_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: show_tls_ciphers = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: connect_retry_max = 15
Nov 5 14:53:31 ovpn-client1[5052]: Connection profiles [0]:
Nov 5 14:53:31 ovpn-client1[5052]: proto = tcp-client
Nov 5 14:53:31 ovpn-client1[5052]: local = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: local_port = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: remote = 'x.x.x.x'
Nov 5 14:53:31 ovpn-client1[5052]: remote_port = '1194'
Nov 5 14:53:31 ovpn-client1[5052]: remote_float = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: bind_defined = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: bind_local = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: bind_ipv6_only = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: connect_retry_seconds = 5
Nov 5 14:53:31 ovpn-client1[5052]: connect_timeout = 120
Nov 5 14:53:31 ovpn-client1[5052]: socks_proxy_server = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: socks_proxy_port = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: tun_mtu = 1500
Nov 5 14:53:31 ovpn-client1[5052]: tun_mtu_defined = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: link_mtu = 1500
Nov 5 14:53:31 ovpn-client1[5052]: link_mtu_defined = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: tun_mtu_extra = 0
Nov 5 14:53:31 ovpn-client1[5052]: tun_mtu_extra_defined = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: mtu_discover_type = -1
Nov 5 14:53:31 ovpn-client1[5052]: fragment = 0
Nov 5 14:53:31 ovpn-client1[5052]: mssfix = 1450
Nov 5 14:53:31 ovpn-client1[5052]: explicit_exit_notification = 0
Nov 5 14:53:31 ovpn-client1[5052]: Connection profiles END
Nov 5 14:53:31 ovpn-client1[5052]: remote_random = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: ipchange = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: dev = 'tun11'
Nov 5 14:53:31 ovpn-client1[5052]: dev_type = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: dev_node = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: lladdr = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: topology = 1
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_local = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_remote_netmask = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_noexec = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_nowarn = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_ipv6_local = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_ipv6_netbits = 0
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_ipv6_remote = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: shaper = 0
Nov 5 14:53:31 ovpn-client1[5052]: mtu_test = 0
Nov 5 14:53:31 ovpn-client1[5052]: mlock = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: keepalive_ping = 0
Nov 5 14:53:31 ovpn-client1[5052]: keepalive_timeout = 0
Nov 5 14:53:31 ovpn-client1[5052]: inactivity_timeout = 0
Nov 5 14:53:31 ovpn-client1[5052]: ping_send_timeout = 0
Nov 5 14:53:31 ovpn-client1[5052]: ping_rec_timeout = 0
Nov 5 14:53:31 ovpn-client1[5052]: ping_rec_timeout_action = 0
Nov 5 14:53:31 ovpn-client1[5052]: ping_timer_remote = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: remap_sigusr1 = 0
Nov 5 14:53:31 ovpn-client1[5052]: persist_tun = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: persist_local_ip = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: persist_remote_ip = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: persist_key = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: passtos = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: resolve_retry_seconds = 1000000000
Nov 5 14:53:31 ovpn-client1[5052]: resolve_in_advance = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: username = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: groupname = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: chroot_dir = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: cd_dir = '/etc/openvpn/client1'
Nov 5 14:53:31 ovpn-client1[5052]: writepid = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: up_script = 'updown.sh'
Nov 5 14:53:31 ovpn-client1[5052]: down_script = 'updown.sh'
Nov 5 14:53:31 ovpn-client1[5052]: down_pre = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: up_restart = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: up_delay = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: daemon = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: inetd = 0
Nov 5 14:53:31 ovpn-client1[5052]: log = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: suppress_timestamps = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: machine_readable_output = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: nice = 0
Nov 5 14:53:31 ovpn-client1[5052]: verbosity = 4
Nov 5 14:53:31 ovpn-client1[5052]: mute = 0
Nov 5 14:53:31 ovpn-client1[5052]: status_file = 'status'
Nov 5 14:53:31 ovpn-client1[5052]: status_file_version = 2
Nov 5 14:53:31 ovpn-client1[5052]: status_file_update_freq = 5
Nov 5 14:53:31 ovpn-client1[5052]: occ = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: rcvbuf = 0
Nov 5 14:53:31 ovpn-client1[5052]: sndbuf = 0
Nov 5 14:53:31 ovpn-client1[5052]: mark = 0
Nov 5 14:53:31 ovpn-client1[5052]: sockflags = 0
Nov 5 14:53:31 ovpn-client1[5052]: fast_io = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: comp.alg = 0
Nov 5 14:53:31 ovpn-client1[5052]: comp.flags = 0
Nov 5 14:53:31 ovpn-client1[5052]: route_script = 'vpnrouting.sh'
Nov 5 14:53:31 ovpn-client1[5052]: route_default_gateway = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: route_default_metric = 0
Nov 5 14:53:31 ovpn-client1[5052]: route_noexec = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: route_delay = 2
Nov 5 14:53:31 ovpn-client1[5052]: route_delay_window = 30
Nov 5 14:53:31 ovpn-client1[5052]: route_delay_defined = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: route_nopull = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: route_gateway_via_dhcp = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: allow_pull_fqdn = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: management_addr = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: management_port = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: management_user_pass = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: management_log_history_cache = 250
Nov 5 14:53:31 ovpn-client1[5052]: management_echo_buffer_size = 100
Nov 5 14:53:31 ovpn-client1[5052]: management_write_peer_info_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: management_client_user = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: management_client_group = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: management_flags = 0
Nov 5 14:53:31 ovpn-client1[5052]: shared_secret_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: key_direction = not set
Nov 5 14:53:31 ovpn-client1[5052]: ciphername = 'AES-128-GCM'
Nov 5 14:53:31 ovpn-client1[5052]: ncp_enabled = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: ncp_ciphers = 'AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC'
Nov 5 14:53:31 ovpn-client1[5052]: authname = 'SHA256'
Nov 5 14:53:31 ovpn-client1[5052]: prng_hash = 'SHA1'
Nov 5 14:53:31 ovpn-client1[5052]: prng_nonce_secret_len = 16
Nov 5 14:53:31 ovpn-client1[5052]: keysize = 0
Nov 5 14:53:31 ovpn-client1[5052]: engine = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: replay = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: mute_replay_warnings = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: replay_window = 64
Nov 5 14:53:31 ovpn-client1[5052]: replay_time = 15
Nov 5 14:53:31 ovpn-client1[5052]: packet_id_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: use_iv = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: test_crypto = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: tls_server = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: tls_client = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: key_method = 2
Nov 5 14:53:31 ovpn-client1[5052]: ca_file = 'ca.crt'
Nov 5 14:53:31 ovpn-client1[5052]: ca_path = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: dh_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: cert_file = 'client.crt'
Nov 5 14:53:31 ovpn-client1[5052]: extra_certs_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: priv_key_file = 'client.key'
Nov 5 14:53:31 ovpn-client1[5052]: pkcs12_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: cipher_list = 'TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256'
Nov 5 14:53:31 ovpn-client1[5052]: cipher_list_tls13 = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: tls_cert_profile = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: tls_verify = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: tls_export_cert = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: verify_x509_type = 2
Nov 5 14:53:31 ovpn-client1[5052]: verify_x509_name = 'server_dekikcUFXIC0VZwW'
Nov 5 14:53:31 ovpn-client1[5052]: crl_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: ns_cert_type = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 65535
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_ku[i] = 0
Nov 5 14:53:31 ovpn-client1[5052]: remote_cert_eku = 'TLS Web Server Authentication'
Nov 5 14:53:31 ovpn-client1[5052]: ssl_flags = 192
Nov 5 14:53:31 ovpn-client1[5052]: tls_timeout = 2
Nov 5 14:53:31 ovpn-client1[5052]: renegotiate_bytes = -1
Nov 5 14:53:31 ovpn-client1[5052]: renegotiate_packets = 0
Nov 5 14:53:31 ovpn-client1[5052]: renegotiate_seconds = 3600
Nov 5 14:53:31 ovpn-client1[5052]: handshake_window = 60
Nov 5 14:53:31 ovpn-client1[5052]: transition_window = 3600
Nov 5 14:53:31 ovpn-client1[5052]: single_session = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: push_peer_info = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: tls_exit = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: tls_auth_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: tls_crypt_file = 'static.key'
Nov 5 14:53:31 ovpn-client1[5052]: server_network = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: server_netmask = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: server_network_ipv6 = ::
Nov 5 14:53:31 ovpn-client1[5052]: server_netbits_ipv6 = 0
Nov 5 14:53:31 ovpn-client1[5052]: server_bridge_ip = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: server_bridge_netmask = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: server_bridge_pool_start = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: server_bridge_pool_end = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_pool_defined = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_pool_start = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_pool_end = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_pool_netmask = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_pool_persist_filename = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_pool_persist_refresh_freq = 600
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_ipv6_pool_defined = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_ipv6_pool_base = ::
Nov 5 14:53:31 ovpn-client1[5052]: ifconfig_ipv6_pool_netbits = 0
Nov 5 14:53:31 ovpn-client1[5052]: n_bcast_buf = 256
Nov 5 14:53:31 ovpn-client1[5052]: tcp_queue_limit = 64
Nov 5 14:53:31 ovpn-client1[5052]: real_hash_size = 256
Nov 5 14:53:31 ovpn-client1[5052]: virtual_hash_size = 256
Nov 5 14:53:31 ovpn-client1[5052]: client_connect_script = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: learn_address_script = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: client_disconnect_script = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: client_config_dir = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: ccd_exclusive = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: tmp_dir = '/tmp'
Nov 5 14:53:31 ovpn-client1[5052]: push_ifconfig_defined = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: push_ifconfig_local = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: push_ifconfig_remote_netmask = 0.0.0.0
Nov 5 14:53:31 ovpn-client1[5052]: push_ifconfig_ipv6_defined = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: push_ifconfig_ipv6_local = ::/0
Nov 5 14:53:31 ovpn-client1[5052]: push_ifconfig_ipv6_remote = ::
Nov 5 14:53:31 ovpn-client1[5052]: enable_c2c = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: duplicate_cn = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: cf_max = 0
Nov 5 14:53:31 ovpn-client1[5052]: cf_per = 0
Nov 5 14:53:31 ovpn-client1[5052]: max_clients = 1024
Nov 5 14:53:31 ovpn-client1[5052]: max_routes_per_client = 256
Nov 5 14:53:31 ovpn-client1[5052]: auth_user_pass_verify_script = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: auth_user_pass_verify_script_via_file = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: auth_token_generate = DISABLED
Nov 5 14:53:31 ovpn-client1[5052]: auth_token_lifetime = 0
Nov 5 14:53:31 ovpn-client1[5052]: port_share_host = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: port_share_port = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: client = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: pull = ENABLED
Nov 5 14:53:31 ovpn-client1[5052]: auth_user_pass_file = '[UNDEF]'
Nov 5 14:53:31 ovpn-client1[5052]: OpenVPN 2.4.7 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 31 2019
Nov 5 14:53:31 ovpn-client1[5052]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.08
Nov 5 14:53:31 ovpn-client1[5053]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov 5 14:53:31 ovpn-client1[5053]: Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Nov 5 14:53:31 ovpn-client1[5053]: Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Nov 5 14:53:31 ovpn-client1[5053]: Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Nov 5 14:53:31 ovpn-client1[5053]: Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Nov 5 14:53:31 ovpn-client1[5053]: Control Channel MTU parms [ L:1623 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Nov 5 14:53:31 ovpn-client1[5053]: Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Nov 5 14:53:31 ovpn-client1[5053]: Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-128-GCM,auth [null-digest],keysize 128,key-method 2,tls-client'
Nov 5 14:53:31 ovpn-client1[5053]: Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-128-GCM,auth [null-digest],keysize 128,key-method 2,tls-server'
Nov 5 14:53:31 ovpn-client1[5053]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Nov 5 14:53:31 ovpn-client1[5053]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Nov 5 14:53:31 ovpn-client1[5053]: Attempting to establish TCP connection with [AF_INET]x.x.x.x:1194 [nonblock]
Nov 5 14:53:32 ovpn-client1[5053]: TCP connection established with [AF_INET]x.x.x.x:1194
Nov 5 14:53:32 ovpn-client1[5053]: TCP_CLIENT link local: (not bound)
Nov 5 14:53:32 ovpn-client1[5053]: TCP_CLIENT link remote: [AF_INET]x.x.x.x:1194
Nov 5 14:53:32 ovpn-client1[5053]: TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=aa954878 0ff9604c
Nov 5 14:53:33 ovpn-client1[5053]: VERIFY OK: depth=1, CN=cn_7Mcq45Sr5825RDvz
Nov 5 14:53:33 ovpn-client1[5053]: VERIFY KU OK
Nov 5 14:53:33 ovpn-client1[5053]: Validating certificate extended key usage
Nov 5 14:53:33 ovpn-client1[5053]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Nov 5 14:53:33 ovpn-client1[5053]: VERIFY EKU OK
Nov 5 14:53:33 ovpn-client1[5053]: VERIFY X509NAME OK: CN=server_dekikcUFXIC0VZwW
Nov 5 14:53:33 ovpn-client1[5053]: VERIFY OK: depth=0, CN=server_dekikcUFXIC0VZwW
Nov 5 14:53:33 ovpn-client1[5053]: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 256 bit EC, curve: prime256v1
Nov 5 14:53:33 ovpn-client1[5053]: [server_dekikcUFXIC0VZwW] Peer Connection Initiated with [AF_INET]x.x.x.x:1194
Nov 5 14:53:34 ovpn-client1[5053]: SENT CONTROL [server_dekikcUFXIC0VZwW]: 'PUSH_REQUEST' (status=1)
Nov 5 14:53:34 ovpn-client1[5053]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0,peer-id 0,cipher AES-128-GCM'
Nov 5 14:53:34 ovpn-client1[5053]: OPTIONS IMPORT: timers and/or timeouts modified
Nov 5 14:53:34 ovpn-client1[5053]: OPTIONS IMPORT: --ifconfig/up options modified
Nov 5 14:53:34 ovpn-client1[5053]: OPTIONS IMPORT: route-related options modified
Nov 5 14:53:34 ovpn-client1[5053]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Nov 5 14:53:34 ovpn-client1[5053]: OPTIONS IMPORT: peer-id set
Nov 5 14:53:34 ovpn-client1[5053]: OPTIONS IMPORT: adjusting link_mtu to 1626
Nov 5 14:53:34 ovpn-client1[5053]: OPTIONS IMPORT: data channel crypto options modified
Nov 5 14:53:34 ovpn-client1[5053]: Data Channel MTU parms [ L:1554 D:1450 EF:54 EB:406 ET:0 EL:3 ]
Nov 5 14:53:34 ovpn-client1[5053]: Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
Nov 5 14:53:34 ovpn-client1[5053]: Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
Nov 5 14:53:34 ovpn-client1[5053]: TUN/TAP device tun11 opened
Nov 5 14:53:34 ovpn-client1[5053]: TUN/TAP TX queue length set to 1000
Nov 5 14:53:34 ovpn-client1[5053]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Nov 5 14:53:34 ovpn-client1[5053]: /usr/sbin/ip link set dev tun11 up mtu 1500
Nov 5 14:53:34 ovpn-client1[5053]: /usr/sbin/ip addr add dev tun11 10.8.0.3/24 broadcast 10.8.0.255
Nov 5 14:53:34 ovpn-client1[5053]: updown.sh tun11 1500 1554 10.8.0.3 255.255.255.0 init
Nov 5 14:53:37 openvpn-routing: Configuring policy rules for client 1
Nov 5 14:53:37 openvpn-routing: Creating VPN routing table (mode 2)
Nov 5 14:53:37 openvpn-routing: Completed routing policy configuration for client 1
Nov 5 14:53:37 ovpn-client1[5053]: Initialization Sequence Completed
Contents of AC88U ccd file:
iroute 192.168.1.0 255.255.255.0
No ccd file for the LTE device mobiledev
