UDP connection drops after 30 seconds

taylorabc101

*Server*

Operating System:

VPN> uname -a
Linux raspberrypi 4.19.66-v7+ #1253 SMP Thu Aug 15 11:49:46 BST 2019 armv7l GNU/Linux

Network setup:

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.0.199  netmask 255.255.255.0  broadcast 192.168.0.255
        inet6 fe80::ffe2:1360:e597:c5b6  prefixlen 64  scopeid 0x20<link>
        ether b8:27:eb:d8:58:7a  txqueuelen 1000  (Ethernet)
        RX packets 1993295  bytes 1900010166 (1.7 GiB)
        RX errors 0  dropped 47866  overruns 0  frame 0
        TX packets 2214539  bytes 1833435550 (1.7 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.0.0.1  netmask 255.255.255.0  broadcast 10.0.0.255
        inet6 fe80::d0f1:873:e424:a71e  prefixlen 64  scopeid 0x20<link>
        ether 00:0e:c6:bc:42:0a  txqueuelen 1000  (Ethernet)
        RX packets 1002678  bytes 274267690 (261.5 MiB)
        RX errors 10  dropped 46497  overruns 0  frame 10
        TX packets 1535  bytes 82198 (80.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 9  bytes 735 (735.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 9  bytes 735 (735.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.8.0.1  netmask 255.255.255.0  destination 10.8.0.1
        inet6 fe80::42e0:b03:d4a3:82a0  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Server config file:

dev tun
proto udp
port 23111
tun-mtu 1500
fragment 1300
mssfix
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e.crt
key /etc/openvpn/easy-rsa/pki/private/raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e.key
#client-config-dir /etc/openvpn/ccd
dh none
topology subnet
server 10.8.0.0 255.255.255.0
push "route 10.0.0.0 255.255.255.0"
# Set your primary domain name server address for clients
push "dhcp-option DNS 8.8.8.8"
# Prevent DNS leaks on Windows
push "block-outside-dns"
push "redirect-gateway def1"
client-to-client
keepalive 10 60
remote-cert-tls client
tls-version-min 1.2
tls-crypt /etc/openvpn/easy-rsa/pki/ta.key
cipher AES-256-CBC
auth SHA256
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 4

Server log (at --verb 4 and client IP address removed):

VPN> sudo tail -f /var/log/openvpn.log
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: Data Channel MTU parms [ L:1621 D:1300 EF:121 EB:406 ET:0 EL:3 ]
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: Could not determine IPv4/IPv6 protocol. Using AF_INET
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: UDPv4 link local (bound): [AF_INET][undef]:23111
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: UDPv4 link remote: [AF_UNSPEC]
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: GID set to nogroup
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: UID set to nobody
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: MULTI: multi_init called, r=256 v=256
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Nov 12 18:03:51 raspberrypi ovpn-server[14842]: Initialization Sequence Completed
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: MULTI: multi_create_instance called
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: CLIENT:18966 Re-using SSL/TLS context
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: CLIENT:18966 Control Channel MTU parms [ L:1625 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: CLIENT:18966 Data Channel MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: CLIENT:18966 Fragmentation MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: CLIENT:18966 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: CLIENT:18966 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Nov 12 18:04:03 raspberrypi ovpn-server[14842]: CLIENT:18966 TLS: Initial packet from [AF_INET]CLIENT:18966, sid=4e64ca5d aad42133
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 VERIFY OK: depth=1, CN=ChangeMe
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 Validating certificate key usage
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 ++ Certificate has key usage  0080, expects 0080
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 VERIFY KU OK
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 Validating certificate extended key usage
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 VERIFY EKU OK
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 VERIFY OK: depth=0, CN=test
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_VER=2.4.4
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_PLAT=win
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_PROTO=2
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_NCP=2
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_LZ4=1
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_LZ4v2=1
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_LZO=1
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_COMP_STUB=1
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_COMP_STUBv2=1
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_TCPNL=1
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 peer info: IV_GUI_VER=OpenVPN_GUI_11
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: CLIENT:18966 [test] Peer Connection Initiated with [AF_INET]CLIENT:18966
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: test/CLIENT:18966 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: test/CLIENT:18966 MULTI: Learn: 10.8.0.2 -> test/CLIENT:18966
Nov 12 18:04:04 raspberrypi ovpn-server[14842]: test/CLIENT:18966 MULTI: primary virtual IP for test/CLIENT:18966: 10.8.0.2
Nov 12 18:04:05 raspberrypi ovpn-server[14842]: test/CLIENT:18966 PUSH: Received control message: 'PUSH_REQUEST'
Nov 12 18:04:05 raspberrypi ovpn-server[14842]: test/CLIENT:18966 SENT CONTROL [test]: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,dhcp-option DNS 8.8.8.8,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Nov 12 18:04:05 raspberrypi ovpn-server[14842]: test/CLIENT:18966 Data Channel MTU parms [ L:1553 D:1300 EF:53 EB:406 ET:0 EL:3 ]
Nov 12 18:04:05 raspberrypi ovpn-server[14842]: test/CLIENT:18966 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 12 18:04:05 raspberrypi ovpn-server[14842]: test/CLIENT:18966 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 12 18:04:06 raspberrypi ovpn-server[14842]: test/CLIENT:18966 MULTI: bad source address from client [::], packet dropped

* Client *

Operating system:

>ver
Microsoft Windows [Version 10 .0.18362.175]

Network setup:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : DESKTOP-CM64HH1
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : 

Ethernet adapter Ethernet 4:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-3E-E3-BF-49
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::e9e2:150b:bb30:e026%8(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.8.0.2(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Tuesday, November 12, 2019 6:19:28 PM
   Lease Expires . . . . . . . . . . : Wednesday, November 11, 2020 6:19:28 PM
   Default Gateway . . . . . . . . . : 0.0.0.0
   DHCP Server . . . . . . . . . . . : 10.8.0.254
   DHCPv6 IAID . . . . . . . . . . . : 671153982
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-C6-DD-64-08-62-66-B8-05-C2
   DNS Servers . . . . . . . . . . . : 8.8.8.8
   NetBIOS over Tcpip. . . . . . . . : Enabled

Wireless LAN adapter Wi-Fi:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) Dual Band Wireless-AC 7260
   Physical Address. . . . . . . . . : 7C-5C-F8-3B-67-12
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2607:fb90:648f:e35d:b035:5882:69f0:d09e(Preferred)
   Temporary IPv6 Address. . . . . . : 2607:fb90:648f:e35d:3de8:92aa:8f36:b6b9(Preferred)
   Link-local IPv6 Address . . . . . : fe80::b035:5882:69f0:d09e%21(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.43.25(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Tuesday, November 12, 2019 4:58:33 PM
   Lease Expires . . . . . . . . . . : Tuesday, November 12, 2019 6:55:26 PM
   Default Gateway . . . . . . . . . : fe80::4491:60ff:feb9:fb55%21
                                       192.168.43.1
   DHCP Server . . . . . . . . . . . : 192.168.43.1
   DHCPv6 IAID . . . . . . . . . . . : 108813560
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-C6-DD-64-08-62-66-B8-05-C2
   DNS Servers . . . . . . . . . . . : 8.8.8.8
                                       2607:fb90:648f:e35d::aa
   NetBIOS over Tcpip. . . . . . . . : Enabled

Client config file:

client
dev tun
proto udp
tun-mtu 1500
fragment 1300
mssfix
remote ####
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 4

Client log (at --verb 4 and server name and IP address removed)

Tue Nov 12 17:55:42 2019 us=892328 Current Parameter Settings:
Tue Nov 12 17:55:42 2019 us=892328   config = 'test.ovpn'
Tue Nov 12 17:55:42 2019 us=892328   mode = 0
Tue Nov 12 17:55:42 2019 us=892328   show_ciphers = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   show_digests = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   show_engines = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   genkey = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   key_pass_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   show_tls_ciphers = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   connect_retry_max = 0
Tue Nov 12 17:55:42 2019 us=892328 Connection profiles [0]:
Tue Nov 12 17:55:42 2019 us=892328   proto = udp
Tue Nov 12 17:55:42 2019 us=892328   local = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   local_port = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   remote = '####'
Tue Nov 12 17:55:42 2019 us=892328   remote_port = '23111'
Tue Nov 12 17:55:42 2019 us=892328   remote_float = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   bind_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   bind_local = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   bind_ipv6_only = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   connect_retry_seconds = 5
Tue Nov 12 17:55:42 2019 us=892328   connect_timeout = 120
Tue Nov 12 17:55:42 2019 us=892328   socks_proxy_server = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   socks_proxy_port = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   tun_mtu = 1500
Tue Nov 12 17:55:42 2019 us=892328   tun_mtu_defined = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   link_mtu = 1500
Tue Nov 12 17:55:42 2019 us=892328   link_mtu_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   tun_mtu_extra = 0
Tue Nov 12 17:55:42 2019 us=892328   tun_mtu_extra_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   mtu_discover_type = -1
Tue Nov 12 17:55:42 2019 us=892328   fragment = 1300
Tue Nov 12 17:55:42 2019 us=892328   mssfix = 1300
Tue Nov 12 17:55:42 2019 us=892328   explicit_exit_notification = 0
Tue Nov 12 17:55:42 2019 us=892328 Connection profiles END
Tue Nov 12 17:55:42 2019 us=892328   remote_random = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   ipchange = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   dev = 'tun'
Tue Nov 12 17:55:42 2019 us=892328   dev_type = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   dev_node = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   lladdr = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   topology = 1
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_local = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_remote_netmask = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_noexec = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_nowarn = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_ipv6_local = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_ipv6_netbits = 0
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_ipv6_remote = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   shaper = 0
Tue Nov 12 17:55:42 2019 us=892328   mtu_test = 0
Tue Nov 12 17:55:42 2019 us=892328   mlock = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   keepalive_ping = 0
Tue Nov 12 17:55:42 2019 us=892328   keepalive_timeout = 0
Tue Nov 12 17:55:42 2019 us=892328   inactivity_timeout = 0
Tue Nov 12 17:55:42 2019 us=892328   ping_send_timeout = 0
Tue Nov 12 17:55:42 2019 us=892328   ping_rec_timeout = 0
Tue Nov 12 17:55:42 2019 us=892328   ping_rec_timeout_action = 0
Tue Nov 12 17:55:42 2019 us=892328   ping_timer_remote = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   remap_sigusr1 = 0
Tue Nov 12 17:55:42 2019 us=892328   persist_tun = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   persist_local_ip = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   persist_remote_ip = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   persist_key = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   passtos = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   resolve_retry_seconds = 1000000000
Tue Nov 12 17:55:42 2019 us=892328   resolve_in_advance = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   username = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   groupname = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   chroot_dir = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   cd_dir = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   writepid = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   up_script = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   down_script = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   down_pre = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   up_restart = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   up_delay = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   daemon = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   inetd = 0
Tue Nov 12 17:55:42 2019 us=892328   log = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   suppress_timestamps = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   machine_readable_output = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   nice = 0
Tue Nov 12 17:55:42 2019 us=892328   verbosity = 4
Tue Nov 12 17:55:42 2019 us=892328   mute = 0
Tue Nov 12 17:55:42 2019 us=892328   gremlin = 0
Tue Nov 12 17:55:42 2019 us=892328   status_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   status_file_version = 1
Tue Nov 12 17:55:42 2019 us=892328   status_file_update_freq = 60
Tue Nov 12 17:55:42 2019 us=892328   occ = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   rcvbuf = 0
Tue Nov 12 17:55:42 2019 us=892328   sndbuf = 0
Tue Nov 12 17:55:42 2019 us=892328   sockflags = 0
Tue Nov 12 17:55:42 2019 us=892328   fast_io = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   comp.alg = 0
Tue Nov 12 17:55:42 2019 us=892328   comp.flags = 0
Tue Nov 12 17:55:42 2019 us=892328   route_script = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   route_default_gateway = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   route_default_metric = 0
Tue Nov 12 17:55:42 2019 us=892328   route_noexec = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   route_delay = 5
Tue Nov 12 17:55:42 2019 us=892328   route_delay_window = 30
Tue Nov 12 17:55:42 2019 us=892328   route_delay_defined = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   route_nopull = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   route_gateway_via_dhcp = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   allow_pull_fqdn = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   management_addr = '127.0.0.1'
Tue Nov 12 17:55:42 2019 us=892328   management_port = '25340'
Tue Nov 12 17:55:42 2019 us=892328   management_user_pass = 'stdin'
Tue Nov 12 17:55:42 2019 us=892328   management_log_history_cache = 250
Tue Nov 12 17:55:42 2019 us=892328   management_echo_buffer_size = 100
Tue Nov 12 17:55:42 2019 us=892328   management_write_peer_info_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   management_client_user = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   management_client_group = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   management_flags = 6
Tue Nov 12 17:55:42 2019 us=892328   shared_secret_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   key_direction = 0
Tue Nov 12 17:55:42 2019 us=892328   ciphername = 'AES-256-CBC'
Tue Nov 12 17:55:42 2019 us=892328   ncp_enabled = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Nov 12 17:55:42 2019 us=892328   authname = 'SHA256'
Tue Nov 12 17:55:42 2019 us=892328   prng_hash = 'SHA1'
Tue Nov 12 17:55:42 2019 us=892328   prng_nonce_secret_len = 16
Tue Nov 12 17:55:42 2019 us=892328   keysize = 0
Tue Nov 12 17:55:42 2019 us=892328   engine = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   replay = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   mute_replay_warnings = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   replay_window = 64
Tue Nov 12 17:55:42 2019 us=892328   replay_time = 15
Tue Nov 12 17:55:42 2019 us=892328   packet_id_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   use_iv = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   test_crypto = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   tls_server = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   tls_client = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   key_method = 2
Tue Nov 12 17:55:42 2019 us=892328   ca_file = '[[INLINE]]'
Tue Nov 12 17:55:42 2019 us=892328   ca_path = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   dh_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   cert_file = '[[INLINE]]'
Tue Nov 12 17:55:42 2019 us=892328   extra_certs_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   priv_key_file = '[[INLINE]]'
Tue Nov 12 17:55:42 2019 us=892328   pkcs12_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   cryptoapi_cert = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   cipher_list = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   tls_verify = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   tls_export_cert = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   verify_x509_type = 0
Tue Nov 12 17:55:42 2019 us=892328   verify_x509_name = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   crl_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   ns_cert_type = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 65535
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_ku[i] = 0
Tue Nov 12 17:55:42 2019 us=892328   remote_cert_eku = 'TLS Web Server Authentication'
Tue Nov 12 17:55:42 2019 us=892328   ssl_flags = 192
Tue Nov 12 17:55:42 2019 us=892328   tls_timeout = 2
Tue Nov 12 17:55:42 2019 us=892328   renegotiate_bytes = -1
Tue Nov 12 17:55:42 2019 us=892328   renegotiate_packets = 0
Tue Nov 12 17:55:42 2019 us=892328   renegotiate_seconds = 3600
Tue Nov 12 17:55:42 2019 us=892328   handshake_window = 60
Tue Nov 12 17:55:42 2019 us=892328   transition_window = 3600
Tue Nov 12 17:55:42 2019 us=892328   single_session = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   push_peer_info = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   tls_exit = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   tls_auth_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   tls_crypt_file = '[[INLINE]]'
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_protected_authentication = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_private_mode = 00000000
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_cert_private = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_pin_cache_period = -1
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_id = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   pkcs11_id_management = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   server_network = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   server_netmask = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   server_network_ipv6 = ::
Tue Nov 12 17:55:42 2019 us=892328   server_netbits_ipv6 = 0
Tue Nov 12 17:55:42 2019 us=892328   server_bridge_ip = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   server_bridge_netmask = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   server_bridge_pool_start = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   server_bridge_pool_end = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_pool_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_pool_start = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_pool_end = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_pool_netmask = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_pool_persist_refresh_freq = 600
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_ipv6_pool_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_ipv6_pool_base = ::
Tue Nov 12 17:55:42 2019 us=892328   ifconfig_ipv6_pool_netbits = 0
Tue Nov 12 17:55:42 2019 us=892328   n_bcast_buf = 256
Tue Nov 12 17:55:42 2019 us=892328   tcp_queue_limit = 64
Tue Nov 12 17:55:42 2019 us=892328   real_hash_size = 256
Tue Nov 12 17:55:42 2019 us=892328   virtual_hash_size = 256
Tue Nov 12 17:55:42 2019 us=892328   client_connect_script = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   learn_address_script = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   client_disconnect_script = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   client_config_dir = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   ccd_exclusive = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   tmp_dir = 'C:\Users\ymcta\AppData\Local\Temp\'
Tue Nov 12 17:55:42 2019 us=892328   push_ifconfig_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   push_ifconfig_local = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 12 17:55:42 2019 us=892328   push_ifconfig_ipv6_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   push_ifconfig_ipv6_local = ::/0
Tue Nov 12 17:55:42 2019 us=892328   push_ifconfig_ipv6_remote = ::
Tue Nov 12 17:55:42 2019 us=892328   enable_c2c = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   duplicate_cn = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   cf_max = 0
Tue Nov 12 17:55:42 2019 us=892328   cf_per = 0
Tue Nov 12 17:55:42 2019 us=892328   max_clients = 1024
Tue Nov 12 17:55:42 2019 us=892328   max_routes_per_client = 256
Tue Nov 12 17:55:42 2019 us=892328   auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   auth_token_generate = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   auth_token_lifetime = 0
Tue Nov 12 17:55:42 2019 us=892328   client = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   pull = ENABLED
Tue Nov 12 17:55:42 2019 us=892328   auth_user_pass_file = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   show_net_up = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   route_method = 3
Tue Nov 12 17:55:42 2019 us=892328   block_outside_dns = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   ip_win32_defined = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   ip_win32_type = 3
Tue Nov 12 17:55:42 2019 us=892328   dhcp_masq_offset = 0
Tue Nov 12 17:55:42 2019 us=892328   dhcp_lease_time = 31536000
Tue Nov 12 17:55:42 2019 us=892328   tap_sleep = 0
Tue Nov 12 17:55:42 2019 us=892328   dhcp_options = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   dhcp_renew = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   dhcp_pre_release = DISABLED
Tue Nov 12 17:55:42 2019 us=892328   domain = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   netbios_scope = '[UNDEF]'
Tue Nov 12 17:55:42 2019 us=892328   netbios_node_type = 0
Tue Nov 12 17:55:42 2019 us=892328   disable_nbt = DISABLED
Tue Nov 12 17:55:42 2019 us=892328 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Tue Nov 12 17:55:42 2019 us=892328 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Nov 12 17:55:42 2019 us=892328 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Tue Nov 12 17:55:42 2019 us=892328 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Nov 12 17:55:42 2019 us=892328 Need hold release from management interface, waiting...
Tue Nov 12 17:55:43 2019 us=329844 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Nov 12 17:55:43 2019 us=439154 MANAGEMENT: CMD 'state on'
Tue Nov 12 17:55:43 2019 us=439154 MANAGEMENT: CMD 'log all on'
Tue Nov 12 17:55:43 2019 us=579783 MANAGEMENT: CMD 'echo all on'
Tue Nov 12 17:55:43 2019 us=579783 MANAGEMENT: CMD 'hold off'
Tue Nov 12 17:55:43 2019 us=579783 MANAGEMENT: CMD 'hold release'
Tue Nov 12 17:55:43 2019 us=673510 MANAGEMENT: CMD 'password [...]'
Tue Nov 12 17:55:43 2019 us=673510 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Nov 12 17:55:43 2019 us=673510 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Nov 12 17:55:43 2019 us=673510 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Nov 12 17:55:43 2019 us=673510 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Nov 12 17:55:43 2019 us=673510 Control Channel MTU parms [ L:1625 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Nov 12 17:55:43 2019 us=673510 Data Channel MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Tue Nov 12 17:55:43 2019 us=673510 Fragmentation MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Tue Nov 12 17:55:43 2019 us=673510 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Nov 12 17:55:43 2019 us=673510 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Nov 12 17:55:43 2019 us=673510 TCP/UDP: Preserving recently used remote address: [AF_INET]####:23111
Tue Nov 12 17:55:43 2019 us=673510 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 12 17:55:43 2019 us=673510 UDP link local: (not bound)
Tue Nov 12 17:55:43 2019 us=673510 UDP link remote: [AF_INET]####:23111
Tue Nov 12 17:55:43 2019 us=673510 MANAGEMENT: >STATE:1573599343,WAIT,,,,,,
Tue Nov 12 17:55:43 2019 us=782931 MANAGEMENT: >STATE:1573599343,AUTH,,,,,,
Tue Nov 12 17:55:43 2019 us=782931 TLS: Initial packet from [AF_INET]####:23111, sid=87196c6d 51add8de
Tue Nov 12 17:55:43 2019 us=923547 VERIFY OK: depth=1, CN=ChangeMe
Tue Nov 12 17:55:43 2019 us=923547 VERIFY KU OK
Tue Nov 12 17:55:43 2019 us=923547 Validating certificate extended key usage
Tue Nov 12 17:55:43 2019 us=923547 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Nov 12 17:55:43 2019 us=923547 VERIFY EKU OK
Tue Nov 12 17:55:43 2019 us=923547 VERIFY OK: depth=0, CN=raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e
Tue Nov 12 17:55:44 2019 us=110978 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 256 bit EC, curve: prime256v1
Tue Nov 12 17:55:44 2019 us=110978 [raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e] Peer Connection Initiated with [AF_INET]####:23111
Tue Nov 12 17:55:45 2019 us=204705 MANAGEMENT: >STATE:1573599345,GET_CONFIG,,,,,,
Tue Nov 12 17:55:45 2019 us=204705 SENT CONTROL [raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e]: 'PUSH_REQUEST' (status=1)
Tue Nov 12 17:55:45 2019 us=298447 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,dhcp-option DNS 8.8.8.8,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.2 255.255.255.0,peer-id 1,cipher AES-256-GCM'
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: timers and/or timeouts modified
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: --ifconfig/up options modified
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: route options modified
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: route-related options modified
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: peer-id set
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: adjusting link_mtu to 1628
Tue Nov 12 17:55:45 2019 us=298447 OPTIONS IMPORT: data channel crypto options modified
Tue Nov 12 17:55:45 2019 us=298447 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Nov 12 17:55:45 2019 us=298447 Data Channel MTU parms [ L:1556 D:1300 EF:56 EB:406 ET:0 EL:3 ]
Tue Nov 12 17:55:45 2019 us=298447 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Nov 12 17:55:45 2019 us=298447 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Nov 12 17:55:45 2019 us=298447 interactive service msg_channel=912
Tue Nov 12 17:55:45 2019 us=298447 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=21 HWADDR=7c:5c:f8:3b:67:12
Tue Nov 12 17:55:45 2019 us=314014 open_tun
Tue Nov 12 17:55:45 2019 us=314014 TAP-WIN32 device [Ethernet 4] opened: \\.\Global\{3EE3BF49-63BB-41ED-8AB1-D1F9A7EAD5F5}.tap
Tue Nov 12 17:55:45 2019 us=314014 TAP-Windows Driver Version 9.21 
Tue Nov 12 17:55:45 2019 us=314014 TAP-Windows MTU=1500
Tue Nov 12 17:55:45 2019 us=314014 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Tue Nov 12 17:55:45 2019 us=314014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {3EE3BF49-63BB-41ED-8AB1-D1F9A7EAD5F5} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Nov 12 17:55:45 2019 us=314014 DHCP option string: 06040808 0808
Tue Nov 12 17:55:45 2019 us=314014 Successful ARP Flush on interface [8] {3EE3BF49-63BB-41ED-8AB1-D1F9A7EAD5F5}
Tue Nov 12 17:55:45 2019 us=329636 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Nov 12 17:55:45 2019 us=329636 MANAGEMENT: >STATE:1573599345,ASSIGN_IP,,10.8.0.2,,,,
Tue Nov 12 17:55:45 2019 us=329636 Blocking outside DNS
Tue Nov 12 17:55:45 2019 us=329636 Using service to add block dns filters
Tue Nov 12 17:55:45 2019 us=345260 Blocking outside dns using service succeeded.
Tue Nov 12 17:55:50 2019 us=891722 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Tue Nov 12 17:55:50 2019 us=891722 C:\WINDOWS\system32\route.exe ADD #### MASK 255.255.255.255 192.168.43.1
Tue Nov 12 17:55:50 2019 us=891722 Route addition via service succeeded
Tue Nov 12 17:55:50 2019 us=891722 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Nov 12 17:55:50 2019 us=891722 Route addition via service succeeded
Tue Nov 12 17:55:50 2019 us=891722 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Nov 12 17:55:50 2019 us=891722 Route addition via service succeeded
Tue Nov 12 17:55:50 2019 us=891722 MANAGEMENT: >STATE:1573599350,ADD_ROUTES,,,,,,
Tue Nov 12 17:55:50 2019 us=891722 C:\WINDOWS\system32\route.exe ADD 10.0.0.0 MASK 255.255.255.0 10.8.0.1
Tue Nov 12 17:55:50 2019 us=891722 Route addition via service succeeded
Tue Nov 12 17:55:50 2019 us=891722 Initialization Sequence Completed
Tue Nov 12 17:55:50 2019 us=891722 MANAGEMENT: >STATE:1573599350,CONNECTED,SUCCESS,10.8.0.2,####,23111,,
Tue Nov 12 17:58:50 2019 us=624048 [raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e] Inactivity timeout (--ping-restart), restarting
Tue Nov 12 17:58:50 2019 us=624048 TCP/UDP: Closing socket
Tue Nov 12 17:58:50 2019 us=624048 Uninitializing WFP
Tue Nov 12 17:58:50 2019 us=624048 Using service to delete block dns filters
Tue Nov 12 17:58:50 2019 us=624048 Unblocking outside dns using service succeeded.
Tue Nov 12 17:58:50 2019 us=624048 SIGUSR1[soft,ping-restart] received, process restarting
Tue Nov 12 17:58:50 2019 us=624048 MANAGEMENT: >STATE:1573599530,RECONNECTING,ping-restart,,,,,
Tue Nov 12 17:58:50 2019 us=624048 Restart pause, 5 second(s)
Tue Nov 12 17:58:55 2019 us=701791 Re-using SSL/TLS context
Tue Nov 12 17:58:55 2019 us=701791 Control Channel MTU parms [ L:1625 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Nov 12 17:58:55 2019 us=701791 Data Channel MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Tue Nov 12 17:58:55 2019 us=701791 Fragmentation MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Tue Nov 12 17:58:55 2019 us=701791 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Nov 12 17:58:55 2019 us=701791 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Nov 12 17:58:55 2019 us=701791 TCP/UDP: Preserving recently used remote address: [AF_INET]####:23111
Tue Nov 12 17:58:55 2019 us=701791 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 12 17:58:55 2019 us=701791 UDP link local: (not bound)
Tue Nov 12 17:58:55 2019 us=701791 UDP link remote: [AF_INET]####:23111
Tue Nov 12 17:58:55 2019 us=701791 MANAGEMENT: >STATE:1573599535,WAIT,,,,,,
Tue Nov 12 17:58:55 2019 us=826785 MANAGEMENT: >STATE:1573599535,AUTH,,,,,,
Tue Nov 12 17:58:55 2019 us=826785 TLS: Initial packet from [AF_INET]####:23111, sid=f2adcb5d c41c648a
Tue Nov 12 17:58:55 2019 us=967403 VERIFY OK: depth=1, CN=ChangeMe
Tue Nov 12 17:58:55 2019 us=967403 VERIFY KU OK
Tue Nov 12 17:58:55 2019 us=967403 Validating certificate extended key usage
Tue Nov 12 17:58:55 2019 us=967403 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Nov 12 17:58:55 2019 us=967403 VERIFY EKU OK
Tue Nov 12 17:58:55 2019 us=967403 VERIFY OK: depth=0, CN=raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e
Tue Nov 12 17:58:56 2019 us=201757 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 256 bit EC, curve: prime256v1
Tue Nov 12 17:58:56 2019 us=201757 [raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e] Peer Connection Initiated with [AF_INET]####:23111
Tue Nov 12 17:58:57 2019 us=451664 MANAGEMENT: >STATE:1573599537,GET_CONFIG,,,,,,
Tue Nov 12 17:58:57 2019 us=451664 SENT CONTROL [raspberrypi_fce2775a-d65a-4484-bf61-a176e57aa30e]: 'PUSH_REQUEST' (status=1)
Tue Nov 12 17:58:57 2019 us=529782 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,dhcp-option DNS 8.8.8.8,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: timers and/or timeouts modified
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: --ifconfig/up options modified
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: route options modified
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: route-related options modified
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: peer-id set
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: adjusting link_mtu to 1628
Tue Nov 12 17:58:57 2019 us=529782 OPTIONS IMPORT: data channel crypto options modified
Tue Nov 12 17:58:57 2019 us=529782 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Nov 12 17:58:57 2019 us=529782 Data Channel MTU parms [ L:1556 D:1300 EF:56 EB:406 ET:0 EL:3 ]
Tue Nov 12 17:58:57 2019 us=529782 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Nov 12 17:58:57 2019 us=529782 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Nov 12 17:58:57 2019 us=529782 Preserving previous TUN/TAP instance: Ethernet 4
Tue Nov 12 17:58:57 2019 us=529782 Blocking outside DNS
Tue Nov 12 17:58:57 2019 us=529782 Using service to add block dns filters
Tue Nov 12 17:58:57 2019 us=529782 Blocking outside dns using service succeeded.
Tue Nov 12 17:58:57 2019 us=529782 Initialization Sequence Completed
Tue Nov 12 17:58:57 2019 us=529782 MANAGEMENT: >STATE:1573599537,CONNECTED,SUCCESS,10.8.0.2,####,23111,,
Tue Nov 12 17:59:29 2019 us=105559 TCP/UDP: Closing socket
Tue Nov 12 17:59:29 2019 us=105559 C:\WINDOWS\system32\route.exe DELETE 10.0.0.0 MASK 255.255.255.0 10.8.0.1
Tue Nov 12 17:59:29 2019 us=105559 Route deletion via service succeeded
Tue Nov 12 17:59:29 2019 us=105559 C:\WINDOWS\system32\route.exe DELETE #### MASK 255.255.255.255 192.168.43.1
Tue Nov 12 17:59:29 2019 us=105559 Route deletion via service succeeded
Tue Nov 12 17:59:29 2019 us=105559 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Nov 12 17:59:29 2019 us=121127 Route deletion via service succeeded
Tue Nov 12 17:59:29 2019 us=121127 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Tue Nov 12 17:59:29 2019 us=121127 Route deletion via service succeeded
Tue Nov 12 17:59:29 2019 us=121127 Closing TUN/TAP interface
Tue Nov 12 17:59:29 2019 us=121127 TAP: DHCP address released
Tue Nov 12 17:59:29 2019 us=121127 Uninitializing WFP
Tue Nov 12 17:59:29 2019 us=136749 Using service to delete block dns filters
Tue Nov 12 17:59:29 2019 us=136749 Unblocking outside dns using service succeeded.
Tue Nov 12 17:59:29 2019 us=136749 SIGTERM[hard,] received, process exiting
Tue Nov 12 17:59:29 2019 us=136749 MANAGEMENT: >STATE:1573599569,EXITING,SIGTERM,,,,,

* Problem *
While using TCP as the protocol this configuration works fine but when I switch it to UDP the client can connect and access everything for the first 30 seconds. Then the connection just goes cold. It doesnt disconnect I just cant ping anything like my gateway or other hosts. The logs seem to show nothing of this occurring though. I originally thought it was comcast limiting the MTU, which they are so I reduced the MTU size and I'm still getting the behavior.

TinCanTech

There is a new Windows version 2.4.8, please use that.

Also, check your server version ..

taylorabc101

upon updating both the server and the client I now immediately timeout on the client, which I guess is better than the false sense of hope. I'm assuming at this point it is at the isp level because nothing I do seems to change anything after playing with this for a long time. I'm port forwarding both tcp/udp, my iptables is accept everything, I've lowered mtu, and verified tcp works flawlessly for hours.

TinCanTech

Try adding --explicit-exit-notify 3 to the client.

taylorabc101

So adding the explicit-exit-notify did not yield any results. But I did accidentally test it the first time connected to my lan with the server and it worked. But after putting my laptop in another network it does not. If I initiate the connection to the vpn on the lan move networks the vpn will work upon connecting to the new network. What could be causing this behavior? It seems as if it is getting dropped somewhere. Or is it a routing issue, I will post a route table in alittle.

TinCanTech

taylorabc101 wrote But I did accidentally test it the first time connected to my lan with the server and it worked. But after putting my laptop in another network it does not. If I initiate the connection to the vpn on the lan move networks the vpn will work upon connecting to the new network.

Do the above highlight and then post both server and client logs showing the event, you do not need to paste your entire logs for this one.

taylorabc101

VPN> sudo tail -f /var/log/openvpn.log
Nov 13 20:05:30 raspberrypi ovpn-server[2700]: /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: Could not determine IPv4/IPv6 protocol. Using AF_INET
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: UDPv4 link local (bound): [AF_INET][undef]:23111
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: UDPv4 link remote: [AF_UNSPEC]
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: GID set to nogroup
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: UID set to nobody
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: MULTI: multi_init called, r=256 v=256
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Nov 13 20:05:31 raspberrypi ovpn-server[2700]: Initialization Sequence Completed
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 TLS: Initial packet from [AF_INET]192.168.0.1:55216, sid=8c2eaa62 5dd16c61
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 VERIFY OK: depth=1, CN=ChangeMe
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 Validating certificate key usage
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 ++ Certificate has key usage  0080, expects 0080
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 VERIFY KU OK
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 Validating certificate extended key usage
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 VERIFY EKU OK
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 VERIFY OK: depth=0, CN=udp_test
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_VER=2.4.8
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_PLAT=win
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_PROTO=2
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_NCP=2
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_LZ4=1
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_LZ4v2=1
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_LZO=1
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_COMP_STUB=1
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_COMP_STUBv2=1
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_TCPNL=1
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 peer info: IV_GUI_VER=OpenVPN_GUI_11
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: 192.168.0.1:55216 [udp_test] Peer Connection Initiated with [AF_INET]192.168.0.1:55216
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: udp_test/192.168.0.1:55216 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: udp_test/192.168.0.1:55216 MULTI: Learn: 10.8.0.2 -> udp_test/192.168.0.1:55216
Nov 13 20:05:50 raspberrypi ovpn-server[2700]: udp_test/192.168.0.1:55216 MULTI: primary virtual IP for udp_test/192.168.0.1:55216: 10.8.0.2
Nov 13 20:05:51 raspberrypi ovpn-server[2700]: udp_test/192.168.0.1:55216 PUSH: Received control message: 'PUSH_REQUEST'
Nov 13 20:05:51 raspberrypi ovpn-server[2700]: udp_test/192.168.0.1:55216 SENT CONTROL [udp_test]: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 1800,ping-restart 3600,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Nov 13 20:05:51 raspberrypi ovpn-server[2700]: udp_test/192.168.0.1:55216 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 13 20:05:51 raspberrypi ovpn-server[2700]: udp_test/192.168.0.1:55216 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 13 20:07:04 raspberrypi ovpn-server[2700]: udp_test/Client:22050 SIGTERM[soft,remote-exit] received, client-instance exiting

Wed Nov 13 20:05:48 2019 us=535077 Current Parameter Settings:
Wed Nov 13 20:05:48 2019 us=535077   config = 'udp_test.ovpn'
Wed Nov 13 20:05:48 2019 us=535077   mode = 0
Wed Nov 13 20:05:48 2019 us=535077   show_ciphers = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   show_digests = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   show_engines = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   genkey = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   key_pass_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   show_tls_ciphers = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   connect_retry_max = 0
Wed Nov 13 20:05:48 2019 us=535077 Connection profiles [0]:
Wed Nov 13 20:05:48 2019 us=535077   proto = udp
Wed Nov 13 20:05:48 2019 us=535077   local = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   local_port = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   remote = 'SERVER'
Wed Nov 13 20:05:48 2019 us=535077   remote_port = '23111'
Wed Nov 13 20:05:48 2019 us=535077   remote_float = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   bind_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   bind_local = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   bind_ipv6_only = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   connect_retry_seconds = 5
Wed Nov 13 20:05:48 2019 us=535077   connect_timeout = 120
Wed Nov 13 20:05:48 2019 us=535077   socks_proxy_server = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   socks_proxy_port = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   tun_mtu = 1500
Wed Nov 13 20:05:48 2019 us=535077   tun_mtu_defined = ENABLED
Wed Nov 13 20:05:48 2019 us=535077   link_mtu = 1500
Wed Nov 13 20:05:48 2019 us=535077   link_mtu_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   tun_mtu_extra = 0
Wed Nov 13 20:05:48 2019 us=535077   tun_mtu_extra_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   mtu_discover_type = -1
Wed Nov 13 20:05:48 2019 us=535077   fragment = 1300
Wed Nov 13 20:05:48 2019 us=535077   mssfix = 1300
Wed Nov 13 20:05:48 2019 us=535077   explicit_exit_notification = 3
Wed Nov 13 20:05:48 2019 us=535077 Connection profiles END
Wed Nov 13 20:05:48 2019 us=535077   remote_random = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   ipchange = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   dev = 'tun'
Wed Nov 13 20:05:48 2019 us=535077   dev_type = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   dev_node = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   lladdr = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   topology = 1
Wed Nov 13 20:05:48 2019 us=535077   ifconfig_local = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   ifconfig_remote_netmask = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   ifconfig_noexec = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   ifconfig_nowarn = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   ifconfig_ipv6_local = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   ifconfig_ipv6_netbits = 0
Wed Nov 13 20:05:48 2019 us=535077   ifconfig_ipv6_remote = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=535077   shaper = 0
Wed Nov 13 20:05:48 2019 us=535077   mtu_test = 0
Wed Nov 13 20:05:48 2019 us=535077   mlock = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   keepalive_ping = 0
Wed Nov 13 20:05:48 2019 us=535077   keepalive_timeout = 0
Wed Nov 13 20:05:48 2019 us=535077   inactivity_timeout = 0
Wed Nov 13 20:05:48 2019 us=535077   ping_send_timeout = 0
Wed Nov 13 20:05:48 2019 us=535077   ping_rec_timeout = 0
Wed Nov 13 20:05:48 2019 us=535077   ping_rec_timeout_action = 0
Wed Nov 13 20:05:48 2019 us=535077   ping_timer_remote = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   remap_sigusr1 = 0
Wed Nov 13 20:05:48 2019 us=535077   persist_tun = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   persist_local_ip = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   persist_remote_ip = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   persist_key = ENABLED
Wed Nov 13 20:05:48 2019 us=535077   passtos = DISABLED
Wed Nov 13 20:05:48 2019 us=535077   resolve_retry_seconds = 1000000000
Wed Nov 13 20:05:48 2019 us=536077   resolve_in_advance = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   username = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   groupname = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   chroot_dir = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   cd_dir = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   writepid = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   up_script = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   down_script = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   down_pre = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   up_restart = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   up_delay = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   daemon = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   inetd = 0
Wed Nov 13 20:05:48 2019 us=536077   log = ENABLED
Wed Nov 13 20:05:48 2019 us=536077   suppress_timestamps = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   machine_readable_output = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   nice = 0
Wed Nov 13 20:05:48 2019 us=536077   verbosity = 4
Wed Nov 13 20:05:48 2019 us=536077   mute = 0
Wed Nov 13 20:05:48 2019 us=536077   gremlin = 0
Wed Nov 13 20:05:48 2019 us=536077   status_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   status_file_version = 1
Wed Nov 13 20:05:48 2019 us=536077   status_file_update_freq = 60
Wed Nov 13 20:05:48 2019 us=536077   occ = ENABLED
Wed Nov 13 20:05:48 2019 us=536077   rcvbuf = 0
Wed Nov 13 20:05:48 2019 us=536077   sndbuf = 0
Wed Nov 13 20:05:48 2019 us=536077   sockflags = 0
Wed Nov 13 20:05:48 2019 us=536077   fast_io = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   comp.alg = 0
Wed Nov 13 20:05:48 2019 us=536077   comp.flags = 0
Wed Nov 13 20:05:48 2019 us=536077   route_script = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   route_default_gateway = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   route_default_metric = 0
Wed Nov 13 20:05:48 2019 us=536077   route_noexec = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   route_delay = 5
Wed Nov 13 20:05:48 2019 us=536077   route_delay_window = 30
Wed Nov 13 20:05:48 2019 us=536077   route_delay_defined = ENABLED
Wed Nov 13 20:05:48 2019 us=536077   route_nopull = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   route_gateway_via_dhcp = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   allow_pull_fqdn = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   management_addr = '127.0.0.1'
Wed Nov 13 20:05:48 2019 us=536077   management_port = '25341'
Wed Nov 13 20:05:48 2019 us=536077   management_user_pass = 'stdin'
Wed Nov 13 20:05:48 2019 us=536077   management_log_history_cache = 250
Wed Nov 13 20:05:48 2019 us=536077   management_echo_buffer_size = 100
Wed Nov 13 20:05:48 2019 us=536077   management_write_peer_info_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   management_client_user = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   management_client_group = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   management_flags = 6
Wed Nov 13 20:05:48 2019 us=536077   shared_secret_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   key_direction = not set
Wed Nov 13 20:05:48 2019 us=536077   ciphername = 'AES-256-CBC'
Wed Nov 13 20:05:48 2019 us=536077   ncp_enabled = ENABLED
Wed Nov 13 20:05:48 2019 us=536077   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed Nov 13 20:05:48 2019 us=536077   authname = 'SHA256'
Wed Nov 13 20:05:48 2019 us=536077   prng_hash = 'SHA1'
Wed Nov 13 20:05:48 2019 us=536077   prng_nonce_secret_len = 16
Wed Nov 13 20:05:48 2019 us=536077   keysize = 0
Wed Nov 13 20:05:48 2019 us=536077   engine = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   replay = ENABLED
Wed Nov 13 20:05:48 2019 us=536077   mute_replay_warnings = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   replay_window = 64
Wed Nov 13 20:05:48 2019 us=536077   replay_time = 15
Wed Nov 13 20:05:48 2019 us=536077   packet_id_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   use_iv = ENABLED
Wed Nov 13 20:05:48 2019 us=536077   test_crypto = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   tls_server = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   tls_client = ENABLED
Wed Nov 13 20:05:48 2019 us=536077   key_method = 2
Wed Nov 13 20:05:48 2019 us=536077   ca_file = '[[INLINE]]'
Wed Nov 13 20:05:48 2019 us=536077   ca_path = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   dh_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   cert_file = '[[INLINE]]'
Wed Nov 13 20:05:48 2019 us=536077   extra_certs_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   priv_key_file = '[[INLINE]]'
Wed Nov 13 20:05:48 2019 us=536077   pkcs12_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   cryptoapi_cert = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   cipher_list = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   cipher_list_tls13 = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   tls_cert_profile = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   tls_verify = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   tls_export_cert = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   verify_x509_type = 0
Wed Nov 13 20:05:48 2019 us=536077   verify_x509_name = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   crl_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   ns_cert_type = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 65535
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_ku[i] = 0
Wed Nov 13 20:05:48 2019 us=536077   remote_cert_eku = 'TLS Web Server Authentication'
Wed Nov 13 20:05:48 2019 us=536077   ssl_flags = 192
Wed Nov 13 20:05:48 2019 us=536077   tls_timeout = 2
Wed Nov 13 20:05:48 2019 us=536077   renegotiate_bytes = -1
Wed Nov 13 20:05:48 2019 us=536077   renegotiate_packets = 0
Wed Nov 13 20:05:48 2019 us=536077   renegotiate_seconds = 3600
Wed Nov 13 20:05:48 2019 us=536077   handshake_window = 60
Wed Nov 13 20:05:48 2019 us=536077   transition_window = 3600
Wed Nov 13 20:05:48 2019 us=536077   single_session = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   push_peer_info = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   tls_exit = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   tls_auth_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=536077   tls_crypt_file = '[[INLINE]]'
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_private_mode = 00000000
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=536077   pkcs11_cert_private = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   pkcs11_pin_cache_period = -1
Wed Nov 13 20:05:48 2019 us=537076   pkcs11_id = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   pkcs11_id_management = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   server_network = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   server_netmask = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   server_network_ipv6 = ::
Wed Nov 13 20:05:48 2019 us=537076   server_netbits_ipv6 = 0
Wed Nov 13 20:05:48 2019 us=537076   server_bridge_ip = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   server_bridge_netmask = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   server_bridge_pool_start = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   server_bridge_pool_end = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_pool_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_pool_start = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_pool_end = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_pool_netmask = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_pool_persist_refresh_freq = 600
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_ipv6_pool_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_ipv6_pool_base = ::
Wed Nov 13 20:05:48 2019 us=537076   ifconfig_ipv6_pool_netbits = 0
Wed Nov 13 20:05:48 2019 us=537076   n_bcast_buf = 256
Wed Nov 13 20:05:48 2019 us=537076   tcp_queue_limit = 64
Wed Nov 13 20:05:48 2019 us=537076   real_hash_size = 256
Wed Nov 13 20:05:48 2019 us=537076   virtual_hash_size = 256
Wed Nov 13 20:05:48 2019 us=537076   client_connect_script = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   learn_address_script = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   client_disconnect_script = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   client_config_dir = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   ccd_exclusive = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   tmp_dir = 'C:\Users\ymcta\AppData\Local\Temp\'
Wed Nov 13 20:05:48 2019 us=537076   push_ifconfig_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   push_ifconfig_local = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   push_ifconfig_remote_netmask = 0.0.0.0
Wed Nov 13 20:05:48 2019 us=537076   push_ifconfig_ipv6_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   push_ifconfig_ipv6_local = ::/0
Wed Nov 13 20:05:48 2019 us=537076   push_ifconfig_ipv6_remote = ::
Wed Nov 13 20:05:48 2019 us=537076   enable_c2c = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   duplicate_cn = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   cf_max = 0
Wed Nov 13 20:05:48 2019 us=537076   cf_per = 0
Wed Nov 13 20:05:48 2019 us=537076   max_clients = 1024
Wed Nov 13 20:05:48 2019 us=537076   max_routes_per_client = 256
Wed Nov 13 20:05:48 2019 us=537076   auth_user_pass_verify_script = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   auth_user_pass_verify_script_via_file = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   auth_token_generate = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   auth_token_lifetime = 0
Wed Nov 13 20:05:48 2019 us=537076   client = ENABLED
Wed Nov 13 20:05:48 2019 us=537076   pull = ENABLED
Wed Nov 13 20:05:48 2019 us=537076   auth_user_pass_file = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   show_net_up = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   route_method = 0
Wed Nov 13 20:05:48 2019 us=537076   block_outside_dns = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   ip_win32_defined = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   ip_win32_type = 3
Wed Nov 13 20:05:48 2019 us=537076   dhcp_masq_offset = 0
Wed Nov 13 20:05:48 2019 us=537076   dhcp_lease_time = 31536000
Wed Nov 13 20:05:48 2019 us=537076   tap_sleep = 0
Wed Nov 13 20:05:48 2019 us=537076   dhcp_options = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   dhcp_renew = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   dhcp_pre_release = DISABLED
Wed Nov 13 20:05:48 2019 us=537076   domain = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   netbios_scope = '[UNDEF]'
Wed Nov 13 20:05:48 2019 us=537076   netbios_node_type = 0
Wed Nov 13 20:05:48 2019 us=537076   disable_nbt = DISABLED
Wed Nov 13 20:05:48 2019 us=537076 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Wed Nov 13 20:05:48 2019 us=537076 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Nov 13 20:05:48 2019 us=537076 library versions: OpenSSL 1.1.0l  10 Sep 2019, LZO 2.10
Enter Management Password:
Wed Nov 13 20:05:48 2019 us=538076 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Wed Nov 13 20:05:48 2019 us=538076 Need hold release from management interface, waiting...
Wed Nov 13 20:05:48 2019 us=987405 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Wed Nov 13 20:05:49 2019 us=88527 MANAGEMENT: CMD 'state on'
Wed Nov 13 20:05:49 2019 us=88527 MANAGEMENT: CMD 'log all on'
Wed Nov 13 20:05:49 2019 us=240827 MANAGEMENT: CMD 'echo all on'
Wed Nov 13 20:05:49 2019 us=242810 MANAGEMENT: CMD 'bytecount 5'
Wed Nov 13 20:05:49 2019 us=244823 MANAGEMENT: CMD 'hold off'
Wed Nov 13 20:05:49 2019 us=245817 MANAGEMENT: CMD 'hold release'
Wed Nov 13 20:05:49 2019 us=251805 MANAGEMENT: CMD 'password [...]'
Wed Nov 13 20:05:49 2019 us=253802 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Nov 13 20:05:49 2019 us=253802 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 13 20:05:49 2019 us=253802 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Nov 13 20:05:49 2019 us=253802 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 13 20:05:49 2019 us=253802 Control Channel MTU parms [ L:1625 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Wed Nov 13 20:05:49 2019 us=253802 Data Channel MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Wed Nov 13 20:05:49 2019 us=253802 Fragmentation MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Wed Nov 13 20:05:49 2019 us=253802 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Wed Nov 13 20:05:49 2019 us=253802 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Wed Nov 13 20:05:49 2019 us=253802 TCP/UDP: Preserving recently used remote address: [AF_INET]SERVER:23111
Wed Nov 13 20:05:49 2019 us=253802 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Nov 13 20:05:49 2019 us=253802 UDP link local: (not bound)
Wed Nov 13 20:05:49 2019 us=253802 UDP link remote: [AF_INET]SERVER:23111
Wed Nov 13 20:05:49 2019 us=254802 MANAGEMENT: >STATE:1573693549,WAIT,,,,,,
Wed Nov 13 20:05:49 2019 us=277788 MANAGEMENT: >STATE:1573693549,AUTH,,,,,,
Wed Nov 13 20:05:49 2019 us=277788 TLS: Initial packet from [AF_INET]SERVER:23111, sid=f6244217 e05c546c
Wed Nov 13 20:05:49 2019 us=377291 VERIFY OK: depth=1, CN=ChangeMe
Wed Nov 13 20:05:49 2019 us=377854 VERIFY KU OK
Wed Nov 13 20:05:49 2019 us=377854 Validating certificate extended key usage
Wed Nov 13 20:05:49 2019 us=377854 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Nov 13 20:05:49 2019 us=377854 VERIFY EKU OK
Wed Nov 13 20:05:49 2019 us=377854 VERIFY OK: depth=0, CN=raspberrypi_27ed0fb1-9b59-4af0-b3e9-3d6bc74fee9d
Wed Nov 13 20:05:49 2019 us=480644 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384, 256 bit EC, curve: prime256v1
Wed Nov 13 20:05:49 2019 us=480644 [raspberrypi_27ed0fb1-9b59-4af0-b3e9-3d6bc74fee9d] Peer Connection Initiated with [AF_INET]SERVER:23111
Wed Nov 13 20:05:50 2019 us=517407 MANAGEMENT: >STATE:1573693550,GET_CONFIG,,,,,,
Wed Nov 13 20:05:50 2019 us=517407 SENT CONTROL [raspberrypi_27ed0fb1-9b59-4af0-b3e9-3d6bc74fee9d]: 'PUSH_REQUEST' (status=1)
Wed Nov 13 20:05:50 2019 us=533031 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 1800,ping-restart 3600,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: timers and/or timeouts modified
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: route options modified
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: route-related options modified
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: peer-id set
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: adjusting link_mtu to 1628
Wed Nov 13 20:05:50 2019 us=533031 OPTIONS IMPORT: data channel crypto options modified
Wed Nov 13 20:05:50 2019 us=533031 Data Channel: using negotiated cipher 'AES-256-GCM'
Wed Nov 13 20:05:50 2019 us=533031 Data Channel MTU parms [ L:1556 D:1300 EF:56 EB:406 ET:0 EL:3 ]
Wed Nov 13 20:05:50 2019 us=533031 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 13 20:05:50 2019 us=533031 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 13 20:05:50 2019 us=533031 interactive service msg_channel=0
Wed Nov 13 20:05:50 2019 us=533031 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=27 HWADDR=7c:5c:f8:3b:67:12
Wed Nov 13 20:05:50 2019 us=548614 open_tun
Wed Nov 13 20:05:50 2019 us=548614 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{BF82190D-9338-4D92-9A91-6A095088BDC7}.tap
Wed Nov 13 20:05:50 2019 us=548614 TAP-Windows Driver Version 9.24 
Wed Nov 13 20:05:50 2019 us=548614 TAP-Windows MTU=1500
Wed Nov 13 20:05:50 2019 us=548614 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Wed Nov 13 20:05:50 2019 us=548614 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {BF82190D-9338-4D92-9A91-6A095088BDC7} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Nov 13 20:05:50 2019 us=548614 DHCP option string: 06040808 0808
Wed Nov 13 20:05:50 2019 us=548614 Successful ARP Flush on interface [28] {BF82190D-9338-4D92-9A91-6A095088BDC7}
Wed Nov 13 20:05:50 2019 us=564220 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Nov 13 20:05:50 2019 us=564220 MANAGEMENT: >STATE:1573693550,ASSIGN_IP,,10.8.0.2,,,,
Wed Nov 13 20:05:50 2019 us=564220 Blocking outside DNS
Wed Nov 13 20:05:50 2019 us=564220 Block_DNS: WFP engine opened
Wed Nov 13 20:05:50 2019 us=579844 Block_DNS: Using existing sublayer
Wed Nov 13 20:05:50 2019 us=611092 Block_DNS: Added permit filters for exe_path
Wed Nov 13 20:05:50 2019 us=611092 Block_DNS: Added block filters for all interfaces
Wed Nov 13 20:05:50 2019 us=657963 Block_DNS: Added permit filters for TAP interface
Wed Nov 13 20:05:55 2019 us=148552 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Wed Nov 13 20:05:55 2019 us=149552 C:\WINDOWS\system32\route.exe ADD SERVER MASK 255.255.255.255 192.168.43.1
Wed Nov 13 20:05:55 2019 us=151550 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=50 and dwForwardType=4
Wed Nov 13 20:05:55 2019 us=151550 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 20:05:55 2019 us=151550 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 20:05:55 2019 us=154548 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 20:05:55 2019 us=154548 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 20:05:55 2019 us=154548 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 20:05:55 2019 us=156531 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 20:05:55 2019 us=156531 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 20:05:55 2019 us=156531 Initialization Sequence Completed
Wed Nov 13 20:05:55 2019 us=156531 MANAGEMENT: >STATE:1573693555,CONNECTED,SUCCESS,10.8.0.2,SERVER,23111,,
Wed Nov 13 20:06:20 2019 us=881250 PID_ERR replay-window backtrack occurred [1] [SSL-0] [0_00_______EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE] 0:85 0:84 t=1573693580[0] r=[0,64,15,1,1] sl=[43,64,64,528]
Wed Nov 13 20:06:23 2019 us=958910 PID_ERR replay-window backtrack occurred [2] [SSL-0] [0____000000000000000011111111122222233333_______EEEEEEEEEEEEEEEE] 0:122 0:120 t=1573693583[0] r=[-3,64,15,2,1] sl=[6,64,64,528]
Wed Nov 13 20:06:23 2019 us=958910 PID_ERR replay-window backtrack occurred [3] [SSL-0] [0_0__000000000000000011111111122222233333_______EEEEEEEEEEEEEEEE] 0:122 0:119 t=1573693583[0] r=[-3,64,15,3,1] sl=[6,64,64,528]
Wed Nov 13 20:06:23 2019 us=958910 PID_ERR replay-window backtrack occurred [4] [SSL-0] [0_00_000000000000000011111111122222233333_______EEEEEEEEEEEEEEEE] 0:122 0:118 t=1573693583[0] r=[-3,64,15,4,1] sl=[6,64,64,528]
Wed Nov 13 20:07:02 2019 us=746454 SIGTERM received, sending exit notification to peer
Wed Nov 13 20:07:05 2019 us=812041 TCP/UDP: Closing socket
Wed Nov 13 20:07:05 2019 us=812041 C:\WINDOWS\system32\route.exe DELETE SERVER MASK 255.255.255.255 192.168.43.1
Wed Nov 13 20:07:05 2019 us=815044 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 13 20:07:05 2019 us=815044 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 20:07:05 2019 us=817042 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 13 20:07:05 2019 us=817042 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 20:07:05 2019 us=820042 Route deletion via IPAPI succeeded [adaptive]
Wed Nov 13 20:07:05 2019 us=820042 Closing TUN/TAP interface
Wed Nov 13 20:07:05 2019 us=846025 TAP: DHCP address released
Wed Nov 13 20:07:05 2019 us=846025 Uninitializing WFP
Wed Nov 13 20:07:05 2019 us=847025 SIGTERM[soft,exit-with-notification] received, process exiting
Wed Nov 13 20:07:05 2019 us=847025 MANAGEMENT: >STATE:1573693625,EXITING,exit-with-notification,,,,,

Was messing around with the server.conf and accidentally rolled back the verb 4 -> verb 3. I can re run and repost server log if you wish. It looks like the PID_ERR's happened upon connecting to the different network and getting that interface up.

TinCanTech

Please repost the server and client log both at verb 4.

Please try to clarify what you mean when you say it works on one network but not another.

Take as long as you need to ensure your logs capture this odd behaviour.

From the logs above, I can see that the client gracefully shuts down but this is not expected behaviour,
so we are getting somewhere 8-)

taylorabc101

So I performed the tear down on the client. As to clarify with what i mean it works on one but not the other. I initiate the vpn connection on the LAN network with the vpn server. after I complete the connection I can ping my GW, other hosts in both of the networks that I should be able to only after I connect and google. Then with the vpn connection active I unplug the laptop from the LAN and move to a hot spot. After connection to the hotspot the vpn connection still works as in I am able to ping my GW and the other hosts + google. If I initiate the vpn connection on the hotspot I get a VPN connection but then cannot ping my GW or any other hosts + google. I will not gracefully shutdown before I pull the logs this time

TinCanTech

taylorabc101 wrote So I performed the tear down on the client. As to clarify with what i mean it works on one but not the other. I initiate the vpn connection on the LAN network with the vpn server. after I complete the connection I can ping my GW, other hosts in both of the networks that I should be able to only after I connect and google. Then with the vpn connection active I unplug the laptop from the LAN and move to a hot spot. After connection to the hotspot the vpn connection still works as in I am able to ping my GW and the other hosts + google.

ok.

taylorabc101 wrote If I initiate the vpn connection on the hotspot I get a VPN connection but then cannot ping my GW or any other hosts + google. I will not gracefully shutdown before I pull the logs this time

Then this is the bit we need to see full logs for ... :ugeek:

taylorabc101

This is initiating the connection from the hotspot. Upon connection I am unable to ping anything including the tun entrance 10.8.0.1

VPN> sudo tail -f /var/log/openvpn.log
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: Data Channel MTU parms [ L:1621 D:1200 EF:121 EB:406 ET:0 EL:3 ]
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: Could not determine IPv4/IPv6 protocol. Using AF_INET
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: UDPv4 link local (bound): [AF_INET][undef]:23111
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: UDPv4 link remote: [AF_UNSPEC]
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: GID set to nogroup
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: UID set to nobody
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: MULTI: multi_init called, r=256 v=256
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Nov 13 20:45:12 raspberrypi ovpn-server[3007]: Initialization Sequence Completed
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: MULTI: multi_create_instance called
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Re-using SSL/TLS context
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Control Channel MTU parms [ L:1625 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Data Channel MTU parms [ L:1625 D:1200 EF:125 EB:406 ET:0 EL:3 ]
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Fragmentation MTU parms [ L:1625 D:1200 EF:125 EB:406 ET:0 EL:3 ]
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 TLS: Initial packet from [AF_INET]CLIENT_IP:55497, sid=35ce31af 644f3e02
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 VERIFY OK: depth=1, CN=ChangeMe
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Validating certificate key usage
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 ++ Certificate has key usage  0080, expects 0080
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 VERIFY KU OK
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Validating certificate extended key usage
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 VERIFY EKU OK
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 VERIFY OK: depth=0, CN=udp_test
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_VER=2.4.8
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_PLAT=win
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_PROTO=2
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_NCP=2
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_LZ4=1
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_LZ4v2=1
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_LZO=1
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_COMP_STUB=1
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_COMP_STUBv2=1
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_TCPNL=1
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 peer info: IV_GUI_VER=OpenVPN_GUI_11
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: CLIENT_IP:55497 [udp_test] Peer Connection Initiated with [AF_INET]CLIENT_IP:55497
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 MULTI: Learn: 10.8.0.2 -> udp_test/CLIENT_IP:55497
Nov 13 20:45:20 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 MULTI: primary virtual IP for udp_test/CLIENT_IP:55497: 10.8.0.2
Nov 13 20:45:22 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 PUSH: Received control message: 'PUSH_REQUEST'
Nov 13 20:45:22 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 SENT CONTROL [udp_test]: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,dhcp-option DNS 8.8.8.8,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Nov 13 20:45:22 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 Data Channel MTU parms [ L:1553 D:1200 EF:53 EB:406 ET:0 EL:3 ]
Nov 13 20:45:22 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 13 20:45:22 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 13 20:45:22 raspberrypi ovpn-server[3007]: udp_test/CLIENT_IP:55497 MULTI: bad source address from client [::], packet dropped

Wed Nov 13 20:45:18 2019 us=565209 Current Parameter Settings:
Wed Nov 13 20:45:18 2019 us=566199   config = 'udp_test.ovpn'
Wed Nov 13 20:45:18 2019 us=566199   mode = 0
Wed Nov 13 20:45:18 2019 us=566199   show_ciphers = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   show_digests = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   show_engines = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   genkey = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   key_pass_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   show_tls_ciphers = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   connect_retry_max = 0
Wed Nov 13 20:45:18 2019 us=566199 Connection profiles [0]:
Wed Nov 13 20:45:18 2019 us=566199   proto = udp
Wed Nov 13 20:45:18 2019 us=566199   local = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   local_port = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   remote = 'SERVER_IP'
Wed Nov 13 20:45:18 2019 us=566199   remote_port = '23111'
Wed Nov 13 20:45:18 2019 us=566199   remote_float = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   bind_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   bind_local = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   bind_ipv6_only = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   connect_retry_seconds = 5
Wed Nov 13 20:45:18 2019 us=566199   connect_timeout = 120
Wed Nov 13 20:45:18 2019 us=566199   socks_proxy_server = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   socks_proxy_port = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   tun_mtu = 1500
Wed Nov 13 20:45:18 2019 us=566199   tun_mtu_defined = ENABLED
Wed Nov 13 20:45:18 2019 us=566199   link_mtu = 1500
Wed Nov 13 20:45:18 2019 us=566199   link_mtu_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   tun_mtu_extra = 0
Wed Nov 13 20:45:18 2019 us=566199   tun_mtu_extra_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   mtu_discover_type = -1
Wed Nov 13 20:45:18 2019 us=566199   fragment = 1300
Wed Nov 13 20:45:18 2019 us=566199   mssfix = 1300
Wed Nov 13 20:45:18 2019 us=566199   explicit_exit_notification = 3
Wed Nov 13 20:45:18 2019 us=566199 Connection profiles END
Wed Nov 13 20:45:18 2019 us=566199   remote_random = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   ipchange = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   dev = 'tun'
Wed Nov 13 20:45:18 2019 us=566199   dev_type = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   dev_node = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   lladdr = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   topology = 1
Wed Nov 13 20:45:18 2019 us=566199   ifconfig_local = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   ifconfig_remote_netmask = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   ifconfig_noexec = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   ifconfig_nowarn = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   ifconfig_ipv6_local = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   ifconfig_ipv6_netbits = 0
Wed Nov 13 20:45:18 2019 us=566199   ifconfig_ipv6_remote = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   shaper = 0
Wed Nov 13 20:45:18 2019 us=566199   mtu_test = 0
Wed Nov 13 20:45:18 2019 us=566199   mlock = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   keepalive_ping = 0
Wed Nov 13 20:45:18 2019 us=566199   keepalive_timeout = 0
Wed Nov 13 20:45:18 2019 us=566199   inactivity_timeout = 0
Wed Nov 13 20:45:18 2019 us=566199   ping_send_timeout = 0
Wed Nov 13 20:45:18 2019 us=566199   ping_rec_timeout = 0
Wed Nov 13 20:45:18 2019 us=566199   ping_rec_timeout_action = 0
Wed Nov 13 20:45:18 2019 us=566199   ping_timer_remote = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   remap_sigusr1 = 0
Wed Nov 13 20:45:18 2019 us=566199   persist_tun = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   persist_local_ip = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   persist_remote_ip = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   persist_key = ENABLED
Wed Nov 13 20:45:18 2019 us=566199   passtos = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   resolve_retry_seconds = 1000000000
Wed Nov 13 20:45:18 2019 us=566199   resolve_in_advance = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   username = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   groupname = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   chroot_dir = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   cd_dir = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   writepid = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   up_script = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   down_script = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   down_pre = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   up_restart = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   up_delay = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   daemon = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   inetd = 0
Wed Nov 13 20:45:18 2019 us=566199   log = ENABLED
Wed Nov 13 20:45:18 2019 us=566199   suppress_timestamps = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   machine_readable_output = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   nice = 0
Wed Nov 13 20:45:18 2019 us=566199   verbosity = 4
Wed Nov 13 20:45:18 2019 us=566199   mute = 0
Wed Nov 13 20:45:18 2019 us=566199   gremlin = 0
Wed Nov 13 20:45:18 2019 us=566199   status_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   status_file_version = 1
Wed Nov 13 20:45:18 2019 us=566199   status_file_update_freq = 60
Wed Nov 13 20:45:18 2019 us=566199   occ = ENABLED
Wed Nov 13 20:45:18 2019 us=566199   rcvbuf = 0
Wed Nov 13 20:45:18 2019 us=566199   sndbuf = 0
Wed Nov 13 20:45:18 2019 us=566199   sockflags = 0
Wed Nov 13 20:45:18 2019 us=566199   fast_io = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   comp.alg = 0
Wed Nov 13 20:45:18 2019 us=566199   comp.flags = 0
Wed Nov 13 20:45:18 2019 us=566199   route_script = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   route_default_gateway = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   route_default_metric = 0
Wed Nov 13 20:45:18 2019 us=566199   route_noexec = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   route_delay = 5
Wed Nov 13 20:45:18 2019 us=566199   route_delay_window = 30
Wed Nov 13 20:45:18 2019 us=566199   route_delay_defined = ENABLED
Wed Nov 13 20:45:18 2019 us=566199   route_nopull = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   route_gateway_via_dhcp = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   allow_pull_fqdn = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   management_addr = '127.0.0.1'
Wed Nov 13 20:45:18 2019 us=566199   management_port = '25341'
Wed Nov 13 20:45:18 2019 us=566199   management_user_pass = 'stdin'
Wed Nov 13 20:45:18 2019 us=566199   management_log_history_cache = 250
Wed Nov 13 20:45:18 2019 us=566199   management_echo_buffer_size = 100
Wed Nov 13 20:45:18 2019 us=566199   management_write_peer_info_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   management_client_user = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   management_client_group = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   management_flags = 6
Wed Nov 13 20:45:18 2019 us=566199   shared_secret_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=566199   key_direction = not set
Wed Nov 13 20:45:18 2019 us=566199   ciphername = 'AES-256-CBC'
Wed Nov 13 20:45:18 2019 us=566199   ncp_enabled = ENABLED
Wed Nov 13 20:45:18 2019 us=566199   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed Nov 13 20:45:18 2019 us=566199   authname = 'SHA256'
Wed Nov 13 20:45:18 2019 us=566199   prng_hash = 'SHA1'
Wed Nov 13 20:45:18 2019 us=566199   prng_nonce_secret_len = 16
Wed Nov 13 20:45:18 2019 us=566199   keysize = 0
Wed Nov 13 20:45:18 2019 us=566199   engine = DISABLED
Wed Nov 13 20:45:18 2019 us=566199   replay = ENABLED
Wed Nov 13 20:45:18 2019 us=566199   mute_replay_warnings = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   replay_window = 64
Wed Nov 13 20:45:18 2019 us=567198   replay_time = 15
Wed Nov 13 20:45:18 2019 us=567198   packet_id_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   use_iv = ENABLED
Wed Nov 13 20:45:18 2019 us=567198   test_crypto = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   tls_server = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   tls_client = ENABLED
Wed Nov 13 20:45:18 2019 us=567198   key_method = 2
Wed Nov 13 20:45:18 2019 us=567198   ca_file = '[[INLINE]]'
Wed Nov 13 20:45:18 2019 us=567198   ca_path = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   dh_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   cert_file = '[[INLINE]]'
Wed Nov 13 20:45:18 2019 us=567198   extra_certs_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   priv_key_file = '[[INLINE]]'
Wed Nov 13 20:45:18 2019 us=567198   pkcs12_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   cryptoapi_cert = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   cipher_list = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   cipher_list_tls13 = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   tls_cert_profile = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   tls_verify = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   tls_export_cert = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   verify_x509_type = 0
Wed Nov 13 20:45:18 2019 us=567198   verify_x509_name = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   crl_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   ns_cert_type = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 65535
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_ku[i] = 0
Wed Nov 13 20:45:18 2019 us=567198   remote_cert_eku = 'TLS Web Server Authentication'
Wed Nov 13 20:45:18 2019 us=567198   ssl_flags = 192
Wed Nov 13 20:45:18 2019 us=567198   tls_timeout = 2
Wed Nov 13 20:45:18 2019 us=567198   renegotiate_bytes = -1
Wed Nov 13 20:45:18 2019 us=567198   renegotiate_packets = 0
Wed Nov 13 20:45:18 2019 us=567198   renegotiate_seconds = 3600
Wed Nov 13 20:45:18 2019 us=567198   handshake_window = 60
Wed Nov 13 20:45:18 2019 us=567198   transition_window = 3600
Wed Nov 13 20:45:18 2019 us=567198   single_session = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   push_peer_info = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   tls_exit = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   tls_auth_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   tls_crypt_file = '[[INLINE]]'
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_protected_authentication = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_private_mode = 00000000
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_cert_private = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_pin_cache_period = -1
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_id = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   pkcs11_id_management = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   server_network = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   server_netmask = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   server_network_ipv6 = ::
Wed Nov 13 20:45:18 2019 us=567198   server_netbits_ipv6 = 0
Wed Nov 13 20:45:18 2019 us=567198   server_bridge_ip = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   server_bridge_netmask = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   server_bridge_pool_start = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   server_bridge_pool_end = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_pool_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_pool_start = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_pool_end = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_pool_netmask = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_pool_persist_refresh_freq = 600
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_ipv6_pool_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_ipv6_pool_base = ::
Wed Nov 13 20:45:18 2019 us=567198   ifconfig_ipv6_pool_netbits = 0
Wed Nov 13 20:45:18 2019 us=567198   n_bcast_buf = 256
Wed Nov 13 20:45:18 2019 us=567198   tcp_queue_limit = 64
Wed Nov 13 20:45:18 2019 us=567198   real_hash_size = 256
Wed Nov 13 20:45:18 2019 us=567198   virtual_hash_size = 256
Wed Nov 13 20:45:18 2019 us=567198   client_connect_script = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   learn_address_script = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   client_disconnect_script = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   client_config_dir = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   ccd_exclusive = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   tmp_dir = 'C:\Users\ymcta\AppData\Local\Temp\'
Wed Nov 13 20:45:18 2019 us=567198   push_ifconfig_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   push_ifconfig_local = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   push_ifconfig_remote_netmask = 0.0.0.0
Wed Nov 13 20:45:18 2019 us=567198   push_ifconfig_ipv6_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   push_ifconfig_ipv6_local = ::/0
Wed Nov 13 20:45:18 2019 us=567198   push_ifconfig_ipv6_remote = ::
Wed Nov 13 20:45:18 2019 us=567198   enable_c2c = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   duplicate_cn = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   cf_max = 0
Wed Nov 13 20:45:18 2019 us=567198   cf_per = 0
Wed Nov 13 20:45:18 2019 us=567198   max_clients = 1024
Wed Nov 13 20:45:18 2019 us=567198   max_routes_per_client = 256
Wed Nov 13 20:45:18 2019 us=567198   auth_user_pass_verify_script = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   auth_user_pass_verify_script_via_file = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   auth_token_generate = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   auth_token_lifetime = 0
Wed Nov 13 20:45:18 2019 us=567198   client = ENABLED
Wed Nov 13 20:45:18 2019 us=567198   pull = ENABLED
Wed Nov 13 20:45:18 2019 us=567198   auth_user_pass_file = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   show_net_up = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   route_method = 0
Wed Nov 13 20:45:18 2019 us=567198   block_outside_dns = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   ip_win32_defined = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   ip_win32_type = 3
Wed Nov 13 20:45:18 2019 us=567198   dhcp_masq_offset = 0
Wed Nov 13 20:45:18 2019 us=567198   dhcp_lease_time = 31536000
Wed Nov 13 20:45:18 2019 us=567198   tap_sleep = 0
Wed Nov 13 20:45:18 2019 us=567198   dhcp_options = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   dhcp_renew = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   dhcp_pre_release = DISABLED
Wed Nov 13 20:45:18 2019 us=567198   domain = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   netbios_scope = '[UNDEF]'
Wed Nov 13 20:45:18 2019 us=567198   netbios_node_type = 0
Wed Nov 13 20:45:18 2019 us=567198   disable_nbt = DISABLED
Wed Nov 13 20:45:18 2019 us=567198 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Wed Nov 13 20:45:18 2019 us=567198 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Nov 13 20:45:18 2019 us=567198 library versions: OpenSSL 1.1.0l  10 Sep 2019, LZO 2.10
Enter Management Password:
Wed Nov 13 20:45:18 2019 us=568197 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Wed Nov 13 20:45:18 2019 us=568197 Need hold release from management interface, waiting...
Wed Nov 13 20:45:19 2019 us=30973 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Wed Nov 13 20:45:19 2019 us=132049 MANAGEMENT: CMD 'state on'
Wed Nov 13 20:45:19 2019 us=132049 MANAGEMENT: CMD 'log all on'
Wed Nov 13 20:45:19 2019 us=283036 MANAGEMENT: CMD 'echo all on'
Wed Nov 13 20:45:19 2019 us=284857 MANAGEMENT: CMD 'bytecount 5'
Wed Nov 13 20:45:19 2019 us=286859 MANAGEMENT: CMD 'hold off'
Wed Nov 13 20:45:19 2019 us=287859 MANAGEMENT: CMD 'hold release'
Wed Nov 13 20:45:19 2019 us=293855 MANAGEMENT: CMD 'password [...]'
Wed Nov 13 20:45:19 2019 us=296855 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Nov 13 20:45:19 2019 us=296855 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 13 20:45:19 2019 us=296855 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Nov 13 20:45:19 2019 us=296855 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Nov 13 20:45:19 2019 us=296855 Control Channel MTU parms [ L:1625 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Wed Nov 13 20:45:19 2019 us=296855 Data Channel MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Wed Nov 13 20:45:19 2019 us=296855 Fragmentation MTU parms [ L:1625 D:1300 EF:125 EB:406 ET:0 EL:3 ]
Wed Nov 13 20:45:19 2019 us=296855 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Wed Nov 13 20:45:19 2019 us=296855 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,mtu-dynamic,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Wed Nov 13 20:45:19 2019 us=296855 TCP/UDP: Preserving recently used remote address: [AF_INET]SERVER_IP:23111
Wed Nov 13 20:45:19 2019 us=296855 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Nov 13 20:45:19 2019 us=296855 UDP link local: (not bound)
Wed Nov 13 20:45:19 2019 us=296855 UDP link remote: [AF_INET]SERVER_IP:23111
Wed Nov 13 20:45:19 2019 us=296855 MANAGEMENT: >STATE:1573695919,WAIT,,,,,,
Wed Nov 13 20:45:19 2019 us=518811 MANAGEMENT: >STATE:1573695919,AUTH,,,,,,
Wed Nov 13 20:45:19 2019 us=518811 TLS: Initial packet from [AF_INET]SERVER_IP:23111, sid=d2c86dc0 79bba0e1
Wed Nov 13 20:45:19 2019 us=650366 VERIFY OK: depth=1, CN=ChangeMe
Wed Nov 13 20:45:19 2019 us=650366 VERIFY KU OK
Wed Nov 13 20:45:19 2019 us=650366 Validating certificate extended key usage
Wed Nov 13 20:45:19 2019 us=650366 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Nov 13 20:45:19 2019 us=650366 VERIFY EKU OK
Wed Nov 13 20:45:19 2019 us=650366 VERIFY OK: depth=0, CN=raspberrypi_27ed0fb1-9b59-4af0-b3e9-3d6bc74fee9d
Wed Nov 13 20:45:19 2019 us=866946 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384, 256 bit EC, curve: prime256v1
Wed Nov 13 20:45:19 2019 us=866946 [raspberrypi_27ed0fb1-9b59-4af0-b3e9-3d6bc74fee9d] Peer Connection Initiated with [AF_INET]SERVER_IP:23111
Wed Nov 13 20:45:21 2019 us=48165 MANAGEMENT: >STATE:1573695921,GET_CONFIG,,,,,,
Wed Nov 13 20:45:21 2019 us=48165 SENT CONTROL [raspberrypi_27ed0fb1-9b59-4af0-b3e9-3d6bc74fee9d]: 'PUSH_REQUEST' (status=1)
Wed Nov 13 20:45:21 2019 us=131338 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,dhcp-option DNS 8.8.8.8,block-outside-dns,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: timers and/or timeouts modified
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: route options modified
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: route-related options modified
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: peer-id set
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: adjusting link_mtu to 1628
Wed Nov 13 20:45:21 2019 us=131338 OPTIONS IMPORT: data channel crypto options modified
Wed Nov 13 20:45:21 2019 us=131338 Data Channel: using negotiated cipher 'AES-256-GCM'
Wed Nov 13 20:45:21 2019 us=131338 Data Channel MTU parms [ L:1556 D:1300 EF:56 EB:406 ET:0 EL:3 ]
Wed Nov 13 20:45:21 2019 us=131338 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 13 20:45:21 2019 us=131338 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Nov 13 20:45:21 2019 us=131338 interactive service msg_channel=0
Wed Nov 13 20:45:21 2019 us=134374 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=27 HWADDR=7c:5c:f8:3b:67:12
Wed Nov 13 20:45:21 2019 us=146658 open_tun
Wed Nov 13 20:45:21 2019 us=148646 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{BF82190D-9338-4D92-9A91-6A095088BDC7}.tap
Wed Nov 13 20:45:21 2019 us=148646 TAP-Windows Driver Version 9.24
Wed Nov 13 20:45:21 2019 us=148646 TAP-Windows MTU=1500
Wed Nov 13 20:45:21 2019 us=150638 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Wed Nov 13 20:45:21 2019 us=150638 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {BF82190D-9338-4D92-9A91-6A095088BDC7} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed Nov 13 20:45:21 2019 us=150638 DHCP option string: 06040808 0808
Wed Nov 13 20:45:21 2019 us=150638 Successful ARP Flush on interface [28] {BF82190D-9338-4D92-9A91-6A095088BDC7}
Wed Nov 13 20:45:21 2019 us=159633 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Nov 13 20:45:21 2019 us=159633 MANAGEMENT: >STATE:1573695921,ASSIGN_IP,,10.8.0.2,,,,
Wed Nov 13 20:45:21 2019 us=159633 Blocking outside DNS
Wed Nov 13 20:45:21 2019 us=161631 Block_DNS: WFP engine opened
Wed Nov 13 20:45:21 2019 us=162631 Block_DNS: Using existing sublayer
Wed Nov 13 20:45:21 2019 us=171626 Block_DNS: Added permit filters for exe_path
Wed Nov 13 20:45:21 2019 us=180621 Block_DNS: Added block filters for all interfaces
Wed Nov 13 20:45:21 2019 us=184619 Block_DNS: Added permit filters for TAP interface
Wed Nov 13 20:45:26 2019 us=307074 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Nov 13 20:45:26 2019 us=307074 C:\WINDOWS\system32\route.exe ADD SERVER_IP MASK 255.255.255.255 192.168.43.1
Wed Nov 13 20:45:26 2019 us=322642 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=50 and dwForwardType=4
Wed Nov 13 20:45:26 2019 us=322642 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 20:45:26 2019 us=322642 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 20:45:26 2019 us=322642 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 20:45:26 2019 us=322642 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 20:45:26 2019 us=322642 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed Nov 13 20:45:26 2019 us=322642 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 20:45:26 2019 us=322642 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 20:45:26 2019 us=322642 MANAGEMENT: >STATE:1573695926,ADD_ROUTES,,,,,,
Wed Nov 13 20:45:26 2019 us=322642 C:\WINDOWS\system32\route.exe ADD 10.0.0.0 MASK 255.255.255.0 10.8.0.1
Wed Nov 13 20:45:26 2019 us=322642 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Wed Nov 13 20:45:26 2019 us=322642 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 20:45:26 2019 us=322642 Initialization Sequence Completed
Wed Nov 13 20:45:26 2019 us=322642 MANAGEMENT: >STATE:1573695926,CONNECTED,SUCCESS,10.8.0.2,SERVER_IP,23111,,

I really dont see anything in these logs indicating any kind of issue whats so ever

VPN> sudo iptables -nvL
Chain INPUT (policy ACCEPT 2815 packets, 425K bytes)
 pkts bytes target     prot opt in     out     source               destination
 9232 1544K ACCEPT     udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            udp dpt:23111
  517 80531 ACCEPT     udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            udp dpt:23111
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
    0     0 REJECT     all  --  !lo    *       127.0.0.0/8          0.0.0.0/0            reject-with icmp-port-unreachable
    3   180 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            state NEW icmptype 8
  290 33119 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
 4365  341K ACCEPT     tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            state NEW,ESTABLISHED tcp dpt:22
    0     0 ACCEPT     udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            state NEW,ESTABLISHED udp dpt:23111
   20  5172 ACCEPT     udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            state ESTABLISHED udp spt:53
    0     0 ACCEPT     tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            state ESTABLISHED tcp spt:80
    4   304 ACCEPT     udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            state NEW,ESTABLISHED udp spt:123
    0     0 ACCEPT     tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0            state ESTABLISHED tcp spt:443
    6   468 ACCEPT     all  --  tun0   *       0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
32102   41M ACCEPT     all  --  eth0   tun0    0.0.0.0/0            10.8.0.0/24          ctstate RELATED,ESTABLISHED
 8034  971K ACCEPT     all  --  tun0   eth0    10.8.0.0/24          0.0.0.0/0
   51 27714 ACCEPT     all  --  eth0   tun0    0.0.0.0/0            10.8.0.0/24          ctstate RELATED,ESTABLISHED
  223  134K ACCEPT     all  --  tun0   eth0    10.8.0.0/24          0.0.0.0/0
    0     0 ACCEPT     all  --  tun+   *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     all  --  tun+   eth0    0.0.0.0/0            0.0.0.0/0            state NEW,RELATED,ESTABLISHED
    0     0 ACCEPT     all  --  eth0   tun+    0.0.0.0/0            0.0.0.0/0            state NEW,RELATED,ESTABLISHED
  381 94068 ACCEPT     all  --  eth1   tun+    0.0.0.0/0            0.0.0.0/0            state NEW,RELATED,ESTABLISHED

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0
   47  4799 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0
 3620  601K ACCEPT     tcp  --  *      eth0    0.0.0.0/0            0.0.0.0/0            state ESTABLISHED tcp spt:22
57495   41M ACCEPT     udp  --  *      eth0    0.0.0.0/0            0.0.0.0/0            state ESTABLISHED udp spt:23111
   20  1373 ACCEPT     udp  --  *      eth0    0.0.0.0/0            0.0.0.0/0            state NEW,ESTABLISHED udp dpt:53
   29  1951 ACCEPT     tcp  --  *      eth0    0.0.0.0/0            0.0.0.0/0            state NEW,ESTABLISHED tcp dpt:80
  206 17883 ACCEPT     tcp  --  *      eth0    0.0.0.0/0            0.0.0.0/0            state NEW,ESTABLISHED tcp dpt:443
    0     0 ACCEPT     all  --  *      tun0    0.0.0.0/0            0.0.0.0/0
  654 91494 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0

VPN> sudo iptables -t nat -L -n -v
Chain PREROUTING (policy ACCEPT 1048 packets, 131K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain INPUT (policy ACCEPT 279 packets, 26092 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 60 packets, 4921 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 60 packets, 4921 bytes)
 pkts bytes target     prot opt in     out     source               destination
  417 84875 MASQUERADE  all  --  *      eth0    10.8.0.0/24          0.0.0.0/0
   58  5209 MASQUERADE  all  --  *      eth0    10.8.0.0/24          0.0.0.0/0
    0     0 MASQUERADE  all  --  *      eth0    10.8.0.0/24          0.0.0.0/0

Huh on my GW to the VPN server I found that i'm dropping the connection it looks like after it is established. This was in the Incoming log
CLIENT-IP UDP 23111 Dropped

Now time to dig into DD-WRT and figure out which rule is killing my connection after it is established and why. 23111 is port forwarded for UDP so it has to be some other rule.

taylorabc101

So I guess my question is why is the traffic after a connection being dropped by DD-WRT even though the port forward rule is present and the dropped packet has the correct port number. I assume this is a question better suited for the DD-WRT guys just wondering if you have heard of this before TinCanTech

TinCanTech

If you suspect your firewall then just flush out all iptables rules and start over ..

taylorabc101

So I no longer suspect the firewall, there was a setting on the DD-WRT router that was dropping some packets (SFE) but it did not fix the problem. After connecting to the vpn I am still unable to ping anything including the tun interface. On the router with tcpdump I never even see return traffic after the connection is made

TinCanTech

If you are connected to the VPN and there are no errors in your logs and you cannot ping the server VPN tun IP then that is 99.99% likely the firewall.

taylorabc101

Yeah im gonna get wireshark on the server and host to see exactly what is happening

taylorabc101

So the solution was disabling Shortcut Forwarding Engine (SFE) and rebooting the router. https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1182161#1182161

TinCanTech

Thanks for letting us know there is a solution 8-)