Client-Server Bridged network, Can't get it to work.

ve9gfi

Hi All,

I've been trying for a week to create a Client and Server, each with two NICs, to bridge the L2 ethernet that is on each 2nd NIC.

The OpenVPN service starts and runs on the Server. When a Client connects, the Server closes the connection and throws connectivity errors. (Maybe my routes are wrong?). The Client doesn't complete a connection. It's all on a flat network in private address space. The WAN is not part of this setup.

See the following diagram.

                                                                                                             #
# TestBed Sandbox                                                                                                 #
# Objective:  To create a L2 bridged VPN to allow two RPis to communicate within the same subnet to each other.   #
#                                                       Public IP                                                 #
#                                                            ^                                                    #
#                                                            |                                                    #
#       +------------------+                         +-------------+               +-----------------+            #
#       | OpenVPN 2.4.4    |                         | WAN1        |               | OpenVPN 2.4.4   |            #
#       |    CLIENT        |                         | ROUTER1     |               |    SERVER       |            #
#       | Ubuntu 18.04LTS  |                         | switchports |               | Ubuntu 18.04LTS |            #
#       |                  |                         +-------------+               |                 |            #
#       |                  | eth0                       ^       ^             eth1 |                 |            #
#       |                  |============================|       |==================|                 |            #
#       | ipv4.forward=1   | ip=.71                192.168.2.0/24           ip=.70 | ipv4.forward=1  |            #
#       |                  |                                                       |                 |            #
#       |                  |                                                       |                 |            #
#       | br0(eth1,tap0)   |                                                       | br0(eth2,tap0)  |            #
#       +------------------+                             ^                         +-----------------+            #
#         | eth1:192.168.11.11/24                        |                           | eth2:192.168.11.254/24     #
#         |                                         +-----------------+              |                            #
#         |                                         | wan2 (down)     |              |                            #
#      +-------------+                              | ROUTER2         |           +-------------+                 #
#      | DHCP Client |                              | LAN SwitchPorts |           | DHCP Client |                 #
#      |             |                              +-----------------+           |             |                 #
#      | RPi         |                                 ^  sis1 = .1 (up)          | RPi         |                 #
#      +-------------+                            (not wired or used yet)         +-------------+                 #
#                                                                                                                 #

I have followed the many examples on the internet. Of the many changes along the way, I have the following:

ufw is enabled

ipv4 forwarding = 1

ipv6 is disabled

When I start the OpenVPN service, I get this:

Sat Apr 18 12:51:56 2020 us=290007 Current Parameter Settings:
Sat Apr 18 12:51:56 2020 us=290127   config = '/etc/openvpn/CoveServer.conf'
Sat Apr 18 12:51:56 2020 us=290158   mode = 1
Sat Apr 18 12:51:56 2020 us=290185   persist_config = DISABLED
Sat Apr 18 12:51:56 2020 us=290219   persist_mode = 1
Sat Apr 18 12:51:56 2020 us=290255   show_ciphers = DISABLED
Sat Apr 18 12:51:56 2020 us=290295   show_digests = DISABLED
Sat Apr 18 12:51:56 2020 us=290334   show_engines = DISABLED
Sat Apr 18 12:51:56 2020 us=290370   genkey = DISABLED
Sat Apr 18 12:51:56 2020 us=290439   key_pass_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=290467   show_tls_ciphers = DISABLED
Sat Apr 18 12:51:56 2020 us=290500   connect_retry_max = 1
Sat Apr 18 12:51:56 2020 us=290534 Connection profiles [0]:
Sat Apr 18 12:51:56 2020 us=290569   proto = udp4
Sat Apr 18 12:51:56 2020 us=290602   local = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=290635   local_port = '1194'
Sat Apr 18 12:51:56 2020 us=290688   remote = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=290732   remote_port = '1194'
Sat Apr 18 12:51:56 2020 us=290767   remote_float = DISABLED
Sat Apr 18 12:51:56 2020 us=290800   bind_defined = DISABLED
Sat Apr 18 12:51:56 2020 us=290831   bind_local = ENABLED
Sat Apr 18 12:51:56 2020 us=290863   bind_ipv6_only = DISABLED
Sat Apr 18 12:51:56 2020 us=290898   connect_retry_seconds = 30
Sat Apr 18 12:51:56 2020 us=290935   connect_timeout = 120
Sat Apr 18 12:51:56 2020 us=290987   socks_proxy_server = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291015   socks_proxy_port = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291047   tun_mtu = 1500
Sat Apr 18 12:51:56 2020 us=291079   tun_mtu_defined = ENABLED
Sat Apr 18 12:51:56 2020 us=291110   link_mtu = 1500
Sat Apr 18 12:51:56 2020 us=291145   link_mtu_defined = DISABLED
Sat Apr 18 12:51:56 2020 us=291206   tun_mtu_extra = 32
Sat Apr 18 12:51:56 2020 us=291249   tun_mtu_extra_defined = ENABLED
Sat Apr 18 12:51:56 2020 us=291292   mtu_discover_type = -1
Sat Apr 18 12:51:56 2020 us=291320   fragment = 1300
Sat Apr 18 12:51:56 2020 us=291355   mssfix = 1300
Sat Apr 18 12:51:56 2020 us=291388   explicit_exit_notification = 1
Sat Apr 18 12:51:56 2020 us=291427 Connection profiles END
Sat Apr 18 12:51:56 2020 us=291461   remote_random = DISABLED
Sat Apr 18 12:51:56 2020 us=291488   ipchange = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291523   dev = 'tap0'
Sat Apr 18 12:51:56 2020 us=291556   dev_type = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291588   dev_node = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291620   lladdr = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291654   topology = 1
Sat Apr 18 12:51:56 2020 us=291692   ifconfig_local = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291725   ifconfig_remote_netmask = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291757   ifconfig_noexec = DISABLED
Sat Apr 18 12:51:56 2020 us=291798   ifconfig_nowarn = DISABLED
Sat Apr 18 12:51:56 2020 us=291831   ifconfig_ipv6_local = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291857   ifconfig_ipv6_netbits = 0
Sat Apr 18 12:51:56 2020 us=291896   ifconfig_ipv6_remote = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=291939   shaper = 0
Sat Apr 18 12:51:56 2020 us=291981   mtu_test = 1
Sat Apr 18 12:51:56 2020 us=292015   mlock = DISABLED
Sat Apr 18 12:51:56 2020 us=292049   keepalive_ping = 10
Sat Apr 18 12:51:56 2020 us=292081   keepalive_timeout = 120
Sat Apr 18 12:51:56 2020 us=292113   inactivity_timeout = 0
Sat Apr 18 12:51:56 2020 us=292148   ping_send_timeout = 10
Sat Apr 18 12:51:56 2020 us=292190   ping_rec_timeout = 240
Sat Apr 18 12:51:56 2020 us=292228   ping_rec_timeout_action = 2
Sat Apr 18 12:51:56 2020 us=292260   ping_timer_remote = DISABLED
Sat Apr 18 12:51:56 2020 us=292293   remap_sigusr1 = 0
Sat Apr 18 12:51:56 2020 us=292330   persist_tun = ENABLED
Sat Apr 18 12:51:56 2020 us=292357   persist_local_ip = DISABLED
Sat Apr 18 12:51:56 2020 us=292397   persist_remote_ip = DISABLED
Sat Apr 18 12:51:56 2020 us=292432   persist_key = ENABLED
Sat Apr 18 12:51:56 2020 us=292465   passtos = DISABLED
Sat Apr 18 12:51:56 2020 us=292497   resolve_retry_seconds = 1000000000
Sat Apr 18 12:51:56 2020 us=292537   resolve_in_advance = DISABLED
Sat Apr 18 12:51:56 2020 us=292591   username = 'root'
Sat Apr 18 12:51:56 2020 us=292625   groupname = 'root'
Sat Apr 18 12:51:56 2020 us=292660   chroot_dir = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=292701   cd_dir = '/etc/openvpn'
Sat Apr 18 12:51:56 2020 us=292742   writepid = '/run/openvpn/CoveServer.pid'
Sat Apr 18 12:51:56 2020 us=292770   up_script = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=292801   down_script = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=292832   down_pre = DISABLED
Sat Apr 18 12:51:56 2020 us=292864   up_restart = DISABLED
Sat Apr 18 12:51:56 2020 us=292901   up_delay = DISABLED
Sat Apr 18 12:51:56 2020 us=292942   daemon = ENABLED
Sat Apr 18 12:51:56 2020 us=292970   inetd = 0
Sat Apr 18 12:51:56 2020 us=293008   log = ENABLED
Sat Apr 18 12:51:56 2020 us=293040   suppress_timestamps = DISABLED
Sat Apr 18 12:51:56 2020 us=293072   machine_readable_output = DISABLED
Sat Apr 18 12:51:56 2020 us=293105   nice = 0
Sat Apr 18 12:51:56 2020 us=293138   verbosity = 6
Sat Apr 18 12:51:56 2020 us=293176   mute = 0
Sat Apr 18 12:51:56 2020 us=293209   gremlin = 0
Sat Apr 18 12:51:56 2020 us=293243   status_file = '/var/log/openvpn/openvpn-status.log'
Sat Apr 18 12:51:56 2020 us=293281   status_file_version = 1
Sat Apr 18 12:51:56 2020 us=293307   status_file_update_freq = 10
Sat Apr 18 12:51:56 2020 us=293344   occ = ENABLED
Sat Apr 18 12:51:56 2020 us=293378   rcvbuf = 0
Sat Apr 18 12:51:56 2020 us=293420   sndbuf = 0
Sat Apr 18 12:51:56 2020 us=293449   mark = 0
Sat Apr 18 12:51:56 2020 us=293483   sockflags = 0
Sat Apr 18 12:51:56 2020 us=293515   fast_io = DISABLED
Sat Apr 18 12:51:56 2020 us=293546   comp.alg = 11
Sat Apr 18 12:51:56 2020 us=293579   comp.flags = 0
Sat Apr 18 12:51:56 2020 us=293611   route_script = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=293646   route_default_gateway = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=293689   route_default_metric = 0
Sat Apr 18 12:51:56 2020 us=293733   route_noexec = DISABLED
Sat Apr 18 12:51:56 2020 us=293771   route_delay = 0
Sat Apr 18 12:51:56 2020 us=293803   route_delay_window = 30
Sat Apr 18 12:51:56 2020 us=293835   route_delay_defined = DISABLED
Sat Apr 18 12:51:56 2020 us=293867   route_nopull = DISABLED
Sat Apr 18 12:51:56 2020 us=293906   route_gateway_via_dhcp = DISABLED
Sat Apr 18 12:51:56 2020 us=293946   allow_pull_fqdn = DISABLED
Sat Apr 18 12:51:56 2020 us=293974   management_addr = '127.0.0.1'
Sat Apr 18 12:51:56 2020 us=294011   management_port = '7505'
Sat Apr 18 12:51:56 2020 us=294045   management_user_pass = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=294078   management_log_history_cache = 250
Sat Apr 18 12:51:56 2020 us=294110   management_echo_buffer_size = 100
Sat Apr 18 12:51:56 2020 us=294146   management_write_peer_info_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=294186   management_client_user = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=294212   management_client_group = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=294250   management_flags = 0
Sat Apr 18 12:51:56 2020 us=294287   shared_secret_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=294316   key_direction = 1
Sat Apr 18 12:51:56 2020 us=294351   ciphername = 'AES-256-CBC'
Sat Apr 18 12:51:56 2020 us=294386   ncp_enabled = ENABLED
Sat Apr 18 12:51:56 2020 us=294420   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sat Apr 18 12:51:56 2020 us=294456   authname = 'SHA256'
Sat Apr 18 12:51:56 2020 us=294488   prng_hash = 'SHA1'
Sat Apr 18 12:51:56 2020 us=294520   prng_nonce_secret_len = 16
Sat Apr 18 12:51:56 2020 us=294551   keysize = 0
Sat Apr 18 12:51:56 2020 us=294583   engine = DISABLED
Sat Apr 18 12:51:56 2020 us=294616   replay = ENABLED
Sat Apr 18 12:51:56 2020 us=294652   mute_replay_warnings = DISABLED
Sat Apr 18 12:51:56 2020 us=294692   replay_window = 64
Sat Apr 18 12:51:56 2020 us=294729   replay_time = 15
Sat Apr 18 12:51:56 2020 us=294756   packet_id_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=294788   use_iv = ENABLED
Sat Apr 18 12:51:56 2020 us=294820   test_crypto = DISABLED
Sat Apr 18 12:51:56 2020 us=294852   tls_server = ENABLED
Sat Apr 18 12:51:56 2020 us=294885   tls_client = DISABLED
Sat Apr 18 12:51:56 2020 us=294999   key_method = 2
Sat Apr 18 12:51:56 2020 us=295038   ca_file = '/etc/openvpn/keys/ca.crt'
Sat Apr 18 12:51:56 2020 us=295077   ca_path = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295104   dh_file = '/etc/openvpn/keys/dh.pem'
Sat Apr 18 12:51:56 2020 us=295142   cert_file = '/etc/openvpn/keys/ve9gfi-pizza.crt'
Sat Apr 18 12:51:56 2020 us=295223   extra_certs_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295273   priv_key_file = '/etc/openvpn/keys/ve9gfi-pizza.key'
Sat Apr 18 12:51:56 2020 us=295303   pkcs12_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295339   cipher_list = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295370   tls_verify = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295407   tls_export_cert = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295441   verify_x509_type = 0
Sat Apr 18 12:51:56 2020 us=295472   verify_x509_name = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295504   crl_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=295538   ns_cert_type = 0
Sat Apr 18 12:51:56 2020 us=295573   remote_cert_ku[i] = 0
...(repeated 14x)
Sat Apr 18 12:51:56 2020 us=296090   remote_cert_ku[i] = 0
Sat Apr 18 12:51:56 2020 us=296124   remote_cert_eku = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=296167   ssl_flags = 192
Sat Apr 18 12:51:56 2020 us=296198   tls_timeout = 2
Sat Apr 18 12:51:56 2020 us=296233   renegotiate_bytes = -1
Sat Apr 18 12:51:56 2020 us=296266   renegotiate_packets = 0
Sat Apr 18 12:51:56 2020 us=296298   renegotiate_seconds = 3600
Sat Apr 18 12:51:56 2020 us=296330   handshake_window = 60
Sat Apr 18 12:51:56 2020 us=296362   transition_window = 3600
Sat Apr 18 12:51:56 2020 us=296400   single_session = DISABLED
Sat Apr 18 12:51:56 2020 us=296441   push_peer_info = DISABLED
Sat Apr 18 12:51:56 2020 us=296471   tls_exit = DISABLED
Sat Apr 18 12:51:56 2020 us=296507   tls_auth_file = '/etc/openvpn/keys/ta.key'
Sat Apr 18 12:51:56 2020 us=296540   tls_crypt_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=296573   pkcs11_protected_authentication = DISABLED
...(repeated 14x)
Sat Apr 18 12:51:56 2020 us=297092   pkcs11_protected_authentication = DISABLED
Sat Apr 18 12:51:56 2020 us=297127   pkcs11_private_mode = 00000000
...(repeated 14x)
Sat Apr 18 12:51:56 2020 us=297582   pkcs11_private_mode = 00000000
Sat Apr 18 12:51:56 2020 us=297607   pkcs11_cert_private = DISABLED
...(repeated 15x)
Sat Apr 18 12:51:56 2020 us=298048   pkcs11_cert_private = DISABLED
Sat Apr 18 12:51:56 2020 us=298081   pkcs11_pin_cache_period = -1
Sat Apr 18 12:51:56 2020 us=298113   pkcs11_id = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=298157   pkcs11_id_management = DISABLED
Sat Apr 18 12:51:56 2020 us=298191   server_network = 0.0.0.0
Sat Apr 18 12:51:56 2020 us=298228   server_netmask = 0.0.0.0
Sat Apr 18 12:51:56 2020 us=298262   server_network_ipv6 = ::
Sat Apr 18 12:51:56 2020 us=298295   server_netbits_ipv6 = 0
Sat Apr 18 12:51:56 2020 us=298330   server_bridge_ip = 192.168.11.254
Sat Apr 18 12:51:56 2020 us=298376   server_bridge_netmask = 255.255.255.0
Sat Apr 18 12:51:56 2020 us=298418   server_bridge_pool_start = 192.168.11.11
Sat Apr 18 12:51:56 2020 us=298450   server_bridge_pool_end = 192.168.11.19
Sat Apr 18 12:51:56 2020 us=298486   push_entry = 'route 11.2.0.0 255.255.0.0'
Sat Apr 18 12:51:56 2020 us=298518   push_entry = 'dhcp-option DNS 11.2.132.1'
Sat Apr 18 12:51:56 2020 us=298550   push_entry = 'dhcp-option DNS 11.2.132.9'
Sat Apr 18 12:51:56 2020 us=298582   push_entry = 'route-gateway 192.168.11.254'
Sat Apr 18 12:51:56 2020 us=298616   push_entry = 'ping 10'
Sat Apr 18 12:51:56 2020 us=298651   push_entry = 'ping-restart 120'
Sat Apr 18 12:51:56 2020 us=298684   ifconfig_pool_defined = ENABLED
Sat Apr 18 12:51:56 2020 us=298718   ifconfig_pool_start = 192.168.11.11
Sat Apr 18 12:51:56 2020 us=298753   ifconfig_pool_end = 192.168.11.19
Sat Apr 18 12:51:56 2020 us=298787   ifconfig_pool_netmask = 255.255.255.0
Sat Apr 18 12:51:56 2020 us=298825   ifconfig_pool_persist_filename = '/var/log/openvpn/ipp.txt'
Sat Apr 18 12:51:56 2020 us=298852   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 18 12:51:56 2020 us=298891   ifconfig_ipv6_pool_defined = DISABLED
Sat Apr 18 12:51:56 2020 us=298936   ifconfig_ipv6_pool_base = ::
Sat Apr 18 12:51:56 2020 us=298975   ifconfig_ipv6_pool_netbits = 0
Sat Apr 18 12:51:56 2020 us=299002   n_bcast_buf = 256
Sat Apr 18 12:51:56 2020 us=299035   tcp_queue_limit = 64
Sat Apr 18 12:51:56 2020 us=299083   real_hash_size = 256
Sat Apr 18 12:51:56 2020 us=299116   virtual_hash_size = 256
Sat Apr 18 12:51:56 2020 us=299153   client_connect_script = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=299239   learn_address_script = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=299280   client_disconnect_script = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=299314   client_config_dir = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=299350   ccd_exclusive = DISABLED
Sat Apr 18 12:51:56 2020 us=299378   tmp_dir = '/tmp'
Sat Apr 18 12:51:56 2020 us=299416   push_ifconfig_defined = DISABLED
Sat Apr 18 12:51:56 2020 us=299450   push_ifconfig_local = 0.0.0.0
Sat Apr 18 12:51:56 2020 us=299480   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 18 12:51:56 2020 us=299506   push_ifconfig_ipv6_defined = DISABLED
Sat Apr 18 12:51:56 2020 us=299534   push_ifconfig_ipv6_local = ::/0
Sat Apr 18 12:51:56 2020 us=299561   push_ifconfig_ipv6_remote = ::
Sat Apr 18 12:51:56 2020 us=299587   enable_c2c = ENABLED
Sat Apr 18 12:51:56 2020 us=299613   duplicate_cn = DISABLED
Sat Apr 18 12:51:56 2020 us=299642   cf_max = 0
Sat Apr 18 12:51:56 2020 us=299676   cf_per = 0
Sat Apr 18 12:51:56 2020 us=299703   max_clients = 2
Sat Apr 18 12:51:56 2020 us=299729   max_routes_per_client = 256
Sat Apr 18 12:51:56 2020 us=299755   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=299781   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 18 12:51:56 2020 us=299807   auth_token_generate = DISABLED
Sat Apr 18 12:51:56 2020 us=299833   auth_token_lifetime = 0
Sat Apr 18 12:51:56 2020 us=299859   port_share_host = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=299886   port_share_port = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=299926   client = DISABLED
Sat Apr 18 12:51:56 2020 us=299955   pull = DISABLED
Sat Apr 18 12:51:56 2020 us=299981   auth_user_pass_file = '[UNDEF]'
Sat Apr 18 12:51:56 2020 us=300010 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Sat Apr 18 12:51:56 2020 us=300046 library versions: OpenSSL 1.1.1  11 Sep 2018, LZO 2.08
Sat Apr 18 12:51:56 2020 us=300412 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:7505
Sat Apr 18 12:51:56 2020 us=300640 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is diferent from what the LAN adapter was previously set to
Sat Apr 18 12:51:56 2020 us=301676 Diffie-Hellman initialized with 2048 bit key
Sat Apr 18 12:51:56 2020 us=303134 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Apr 18 12:51:56 2020 us=303253 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Apr 18 12:51:56 2020 us=303293 WARNING: using --fragment and --mtu-test together may produce an inaccurate MTU test result
Sat Apr 18 12:51:56 2020 us=303325 TLS-Auth MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sat Apr 18 12:51:56 2020 us=303617 TUN/TAP device tap0 opened
Sat Apr 18 12:51:56 2020 us=303701 TUN/TAP TX queue length set to 100
Sat Apr 18 12:51:56 2020 us=303814 Data Channel MTU parms [ L:1654 D:1300 EF:122 EB:411 ET:32 EL:3 ]
Sat Apr 18 12:51:56 2020 us=305639 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sat Apr 18 12:51:56 2020 us=305731 UDPv4 link local (bound): [AF_INET][undef]:1194
Sat Apr 18 12:51:56 2020 us=305783 UDPv4 link remote: [AF_UNSPEC]
Sat Apr 18 12:51:56 2020 us=305831 GID set to root
Sat Apr 18 12:51:56 2020 us=305883 UID set to root
Sat Apr 18 12:51:56 2020 us=305937 MULTI: multi_init called, r=256 v=256
Sat Apr 18 12:51:56 2020 us=306012 IFCONFIG POOL: base=192.168.11.11 size=9, ipv6=0
Sat Apr 18 12:51:56 2020 us=306075 IFCONFIG POOL LIST
Sat Apr 18 12:51:56 2020 us=306259 Initialization Sequence Completed

When I start up the client, the server logs indicate an error

Sat Apr 18 13:57:31 2020 us=34162 MULTI: multi_create_instance called
Sat Apr 18 13:57:31 2020 us=34311 192.168.2.71:51809 All connections have been connect-retry-max (1) times unsuccessful, exiting
Sat Apr 18 13:57:31 2020 us=34375 192.168.2.71:51809 Exiting due to fatal error
Sat Apr 18 13:57:31 2020 us=34466 192.168.2.71:51809 Closing TUN/TAP interface
tail: /var/log/openvpn/openvpn.log: file truncated
Sat Apr 18 13:57:36 2020 us=230563 Current Parameter Settings:
Sat Apr 18 13:57:36 2020 us=230723   config = '/etc/openvpn/Server.conf'
Sat Apr 18 13:57:36 2020 us=230765   mode = 1
Sat Apr 18 13:57:36 2020 us=230802   persist_config = DISABLED
Sat Apr 18 13:57:36 2020 us=230839   persist_mode = 1
Sat Apr 18 13:57:36 2020 us=230874   show_ciphers = DISABLED
Sat Apr 18 13:57:36 2020 us=230908   show_digests = DISABLED
Sat Apr 18 13:57:36 2020 us=230947   show_engines = DISABLED
Sat Apr 18 13:57:36 2020 us=231002   genkey = DISABLED
Sat Apr 18 13:57:36 2020 us=231042   key_pass_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=231091   show_tls_ciphers = DISABLED
Sat Apr 18 13:57:36 2020 us=231132   connect_retry_max = 1
Sat Apr 18 13:57:36 2020 us=231163 Connection profiles [0]:
Sat Apr 18 13:57:36 2020 us=231229   proto = udp4
Sat Apr 18 13:57:36 2020 us=231266   local = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=231303   local_port = '1194'
Sat Apr 18 13:57:36 2020 us=231345   remote = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=231385   remote_port = '1194'
Sat Apr 18 13:57:36 2020 us=231433   remote_float = DISABLED
Sat Apr 18 13:57:36 2020 us=231486   bind_defined = DISABLED
Sat Apr 18 13:57:36 2020 us=231521   bind_local = ENABLED
Sat Apr 18 13:57:36 2020 us=231559   bind_ipv6_only = DISABLED
Sat Apr 18 13:57:36 2020 us=231602   connect_retry_seconds = 30
Sat Apr 18 13:57:36 2020 us=231642   connect_timeout = 120
Sat Apr 18 13:57:36 2020 us=231693   socks_proxy_server = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=231792   socks_proxy_port = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=231832   tun_mtu = 1500
Sat Apr 18 13:57:36 2020 us=231871   tun_mtu_defined = ENABLED
Sat Apr 18 13:57:36 2020 us=231923   link_mtu = 1500
Sat Apr 18 13:57:36 2020 us=231971   link_mtu_defined = DISABLED
Sat Apr 18 13:57:36 2020 us=232011   tun_mtu_extra = 32
Sat Apr 18 13:57:36 2020 us=232051   tun_mtu_extra_defined = ENABLED
Sat Apr 18 13:57:36 2020 us=232092   mtu_discover_type = -1
Sat Apr 18 13:57:36 2020 us=232142   fragment = 1300
Sat Apr 18 13:57:36 2020 us=232182   mssfix = 1300
Sat Apr 18 13:57:36 2020 us=232249   explicit_exit_notification = 1
Sat Apr 18 13:57:36 2020 us=232292 Connection profiles END
Sat Apr 18 13:57:36 2020 us=232334   remote_random = DISABLED
Sat Apr 18 13:57:36 2020 us=232383   ipchange = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=232425   dev = 'tap0'
Sat Apr 18 13:57:36 2020 us=232490   dev_type = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=232532   dev_node = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=232571   lladdr = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=232621   topology = 1
Sat Apr 18 13:57:36 2020 us=232661   ifconfig_local = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=232736   ifconfig_remote_netmask = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=232789   ifconfig_noexec = DISABLED
Sat Apr 18 13:57:36 2020 us=232840   ifconfig_nowarn = DISABLED
Sat Apr 18 13:57:36 2020 us=232881   ifconfig_ipv6_local = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=232923   ifconfig_ipv6_netbits = 0
Sat Apr 18 13:57:36 2020 us=233027   ifconfig_ipv6_remote = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=233069   shaper = 0
Sat Apr 18 13:57:36 2020 us=233108   mtu_test = 1
Sat Apr 18 13:57:36 2020 us=233148   mlock = DISABLED
Sat Apr 18 13:57:36 2020 us=233212   keepalive_ping = 10
Sat Apr 18 13:57:36 2020 us=233263   keepalive_timeout = 120
Sat Apr 18 13:57:36 2020 us=233299   inactivity_timeout = 0
Sat Apr 18 13:57:36 2020 us=233338   ping_send_timeout = 10
Sat Apr 18 13:57:36 2020 us=233380   ping_rec_timeout = 240
Sat Apr 18 13:57:36 2020 us=233420   ping_rec_timeout_action = 2
Sat Apr 18 13:57:36 2020 us=233510   ping_timer_remote = DISABLED
Sat Apr 18 13:57:36 2020 us=233550   remap_sigusr1 = 0
Sat Apr 18 13:57:36 2020 us=233588   persist_tun = ENABLED
Sat Apr 18 13:57:36 2020 us=233629   persist_local_ip = DISABLED
Sat Apr 18 13:57:36 2020 us=233671   persist_remote_ip = DISABLED
Sat Apr 18 13:57:36 2020 us=233754   persist_key = ENABLED
Sat Apr 18 13:57:36 2020 us=233795   passtos = DISABLED
Sat Apr 18 13:57:36 2020 us=233835   resolve_retry_seconds = 1000000000
Sat Apr 18 13:57:36 2020 us=233876   resolve_in_advance = DISABLED
Sat Apr 18 13:57:36 2020 us=233961   username = 'root'
Sat Apr 18 13:57:36 2020 us=234002   groupname = 'root'
Sat Apr 18 13:57:36 2020 us=234041   chroot_dir = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=234083   cd_dir = '/etc/openvpn'
Sat Apr 18 13:57:36 2020 us=234124   writepid = '/run/openvpn/Server.pid'
Sat Apr 18 13:57:36 2020 us=234174   up_script = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=234235   down_script = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=234288   down_pre = DISABLED
Sat Apr 18 13:57:36 2020 us=234339   up_restart = DISABLED
Sat Apr 18 13:57:36 2020 us=234378   up_delay = DISABLED
Sat Apr 18 13:57:36 2020 us=234411   daemon = ENABLED
Sat Apr 18 13:57:36 2020 us=234491   inetd = 0
Sat Apr 18 13:57:36 2020 us=234542   log = ENABLED
Sat Apr 18 13:57:36 2020 us=234584   suppress_timestamps = DISABLED
Sat Apr 18 13:57:36 2020 us=234634   machine_readable_output = DISABLED
Sat Apr 18 13:57:36 2020 us=234672   nice = 0
Sat Apr 18 13:57:36 2020 us=234718   verbosity = 6
Sat Apr 18 13:57:36 2020 us=234759   mute = 0
Sat Apr 18 13:57:36 2020 us=234799   gremlin = 0
Sat Apr 18 13:57:36 2020 us=234850   status_file = '/var/log/openvpn/openvpn-status.log'
Sat Apr 18 13:57:36 2020 us=234902   status_file_version = 1
Sat Apr 18 13:57:36 2020 us=234942   status_file_update_freq = 10
Sat Apr 18 13:57:36 2020 us=235017   occ = ENABLED
Sat Apr 18 13:57:36 2020 us=235059   rcvbuf = 0
Sat Apr 18 13:57:36 2020 us=235102   sndbuf = 0
Sat Apr 18 13:57:36 2020 us=235153   mark = 0
Sat Apr 18 13:57:36 2020 us=235222   sockflags = 0
Sat Apr 18 13:57:36 2020 us=235264   fast_io = DISABLED
Sat Apr 18 13:57:36 2020 us=235305   comp.alg = 11
Sat Apr 18 13:57:36 2020 us=235345   comp.flags = 0
Sat Apr 18 13:57:36 2020 us=235387   route_script = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=235441   route_default_gateway = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=235490   route_default_metric = 0
Sat Apr 18 13:57:36 2020 us=235529   route_noexec = DISABLED
Sat Apr 18 13:57:36 2020 us=235573   route_delay = 0
Sat Apr 18 13:57:36 2020 us=235614   route_delay_window = 30
Sat Apr 18 13:57:36 2020 us=235664   route_delay_defined = DISABLED
Sat Apr 18 13:57:36 2020 us=235757   route_nopull = DISABLED
Sat Apr 18 13:57:36 2020 us=235794   route_gateway_via_dhcp = DISABLED
Sat Apr 18 13:57:36 2020 us=235832   allow_pull_fqdn = DISABLED
Sat Apr 18 13:57:36 2020 us=235874   management_addr = '127.0.0.1'
Sat Apr 18 13:57:36 2020 us=235915   management_port = '7505'
Sat Apr 18 13:57:36 2020 us=235977   management_user_pass = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=236015   management_log_history_cache = 250
Sat Apr 18 13:57:36 2020 us=236055   management_echo_buffer_size = 100
Sat Apr 18 13:57:36 2020 us=236098   management_write_peer_info_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=236138   management_client_user = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=236187   management_client_group = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=236279   management_flags = 0
Sat Apr 18 13:57:36 2020 us=236314   shared_secret_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=236355   key_direction = 1
Sat Apr 18 13:57:36 2020 us=236398   ciphername = 'AES-256-CBC'
Sat Apr 18 13:57:36 2020 us=236439   ncp_enabled = ENABLED
Sat Apr 18 13:57:36 2020 us=236503   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sat Apr 18 13:57:36 2020 us=236540   authname = 'SHA256'
Sat Apr 18 13:57:36 2020 us=236579   prng_hash = 'SHA1'
Sat Apr 18 13:57:36 2020 us=236620   prng_nonce_secret_len = 16
Sat Apr 18 13:57:36 2020 us=236661   keysize = 0
Sat Apr 18 13:57:36 2020 us=236751   engine = DISABLED
Sat Apr 18 13:57:36 2020 us=236802   replay = ENABLED
Sat Apr 18 13:57:36 2020 us=236839   mute_replay_warnings = DISABLED
Sat Apr 18 13:57:36 2020 us=236878   replay_window = 64
Sat Apr 18 13:57:36 2020 us=236920   replay_time = 15
Sat Apr 18 13:57:36 2020 us=236976   packet_id_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237028   use_iv = ENABLED
Sat Apr 18 13:57:36 2020 us=237066   test_crypto = DISABLED
Sat Apr 18 13:57:36 2020 us=237103   tls_server = ENABLED
Sat Apr 18 13:57:36 2020 us=237143   tls_client = DISABLED
Sat Apr 18 13:57:36 2020 us=237275   key_method = 2
Sat Apr 18 13:57:36 2020 us=237320   ca_file = '/etc/openvpn/keys/ca.crt'
Sat Apr 18 13:57:36 2020 us=237361   ca_path = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237402   dh_file = '/etc/openvpn/keys/dh.pem'
Sat Apr 18 13:57:36 2020 us=237468   cert_file = '/etc/openvpn/keys/ve9gfi-pizza.crt'
Sat Apr 18 13:57:36 2020 us=237520   extra_certs_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237557   priv_key_file = '/etc/openvpn/keys/ve9gfi-pizza.key'
Sat Apr 18 13:57:36 2020 us=237597   pkcs12_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237638   cipher_list = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237678   tls_verify = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237767   tls_export_cert = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237804   verify_x509_type = 0
Sat Apr 18 13:57:36 2020 us=237842   verify_x509_name = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237884   crl_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=237926   ns_cert_type = 0
Sat Apr 18 13:57:36 2020 us=237990   remote_cert_ku[i] = 0
...(repeated 14 x)
Sat Apr 18 13:57:36 2020 us=238674   remote_cert_ku[i] = 0
Sat Apr 18 13:57:36 2020 us=238756   remote_cert_eku = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=238803   ssl_flags = 192
Sat Apr 18 13:57:36 2020 us=238849   tls_timeout = 2
Sat Apr 18 13:57:36 2020 us=238892   renegotiate_bytes = -1
Sat Apr 18 13:57:36 2020 us=238923   renegotiate_packets = 0
Sat Apr 18 13:57:36 2020 us=238959   renegotiate_seconds = 3600
Sat Apr 18 13:57:36 2020 us=238998   handshake_window = 60
Sat Apr 18 13:57:36 2020 us=239040   transition_window = 3600
Sat Apr 18 13:57:36 2020 us=239086   single_session = DISABLED
Sat Apr 18 13:57:36 2020 us=239129   push_peer_info = DISABLED
Sat Apr 18 13:57:36 2020 us=239172   tls_exit = DISABLED
Sat Apr 18 13:57:36 2020 us=239254   tls_auth_file = '/etc/openvpn/keys/ta.key'
Sat Apr 18 13:57:36 2020 us=239295   tls_crypt_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=239337   pkcs11_protected_authentication = DISABLED
...(repeated 14 x)
Sat Apr 18 13:57:36 2020 us=240033   pkcs11_protected_authentication = DISABLED
Sat Apr 18 13:57:36 2020 us=240078   pkcs11_private_mode = 00000000
...(repeated 14 x)
Sat Apr 18 13:57:36 2020 us=240763   pkcs11_private_mode = 00000000
Sat Apr 18 13:57:36 2020 us=240798   pkcs11_cert_private = DISABLED
...(repeated 14 x)
Sat Apr 18 13:57:36 2020 us=241436   pkcs11_cert_private = DISABLED
Sat Apr 18 13:57:36 2020 us=241523   pkcs11_pin_cache_period = -1
Sat Apr 18 13:57:36 2020 us=241568   pkcs11_id = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=241607   pkcs11_id_management = DISABLED
Sat Apr 18 13:57:36 2020 us=241643   server_network = 0.0.0.0
Sat Apr 18 13:57:36 2020 us=241684   server_netmask = 0.0.0.0
Sat Apr 18 13:57:36 2020 us=241744   server_network_ipv6 = ::
Sat Apr 18 13:57:36 2020 us=241789   server_netbits_ipv6 = 0
Sat Apr 18 13:57:36 2020 us=241838   server_bridge_ip = 192.168.11.254
Sat Apr 18 13:57:36 2020 us=241897   server_bridge_netmask = 255.255.255.0
Sat Apr 18 13:57:36 2020 us=241947   server_bridge_pool_start = 192.168.11.11
Sat Apr 18 13:57:36 2020 us=241992   server_bridge_pool_end = 192.168.11.19
Sat Apr 18 13:57:36 2020 us=242025   push_entry = 'route 11.2.0.0 255.255.0.0'
Sat Apr 18 13:57:36 2020 us=242065   push_entry = 'dhcp-option DNS 11.2.132.1'
Sat Apr 18 13:57:36 2020 us=242108   push_entry = 'dhcp-option DNS 11.2.132.9'
Sat Apr 18 13:57:36 2020 us=242153   push_entry = 'route-gateway 192.168.11.254'
Sat Apr 18 13:57:36 2020 us=242210   push_entry = 'ping 10'
Sat Apr 18 13:57:36 2020 us=242255   push_entry = 'ping-restart 120'
Sat Apr 18 13:57:36 2020 us=242299   ifconfig_pool_defined = ENABLED
Sat Apr 18 13:57:36 2020 us=242346   ifconfig_pool_start = 192.168.11.11
Sat Apr 18 13:57:36 2020 us=242391   ifconfig_pool_end = 192.168.11.19
Sat Apr 18 13:57:36 2020 us=242429   ifconfig_pool_netmask = 255.255.255.0
Sat Apr 18 13:57:36 2020 us=242503   ifconfig_pool_persist_filename = '/var/log/openvpn/ipp.txt'
Sat Apr 18 13:57:36 2020 us=242548   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 18 13:57:36 2020 us=242592   ifconfig_ipv6_pool_defined = DISABLED
Sat Apr 18 13:57:36 2020 us=242639   ifconfig_ipv6_pool_base = ::
Sat Apr 18 13:57:36 2020 us=242682   ifconfig_ipv6_pool_netbits = 0
Sat Apr 18 13:57:36 2020 us=242739   n_bcast_buf = 256
Sat Apr 18 13:57:36 2020 us=242784   tcp_queue_limit = 64
Sat Apr 18 13:57:36 2020 us=242840   real_hash_size = 256
Sat Apr 18 13:57:36 2020 us=242876   virtual_hash_size = 256
Sat Apr 18 13:57:36 2020 us=242916   client_connect_script = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=242969   learn_address_script = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=243013   client_disconnect_script = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=243057   client_config_dir = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=243102   ccd_exclusive = DISABLED
Sat Apr 18 13:57:36 2020 us=243145   tmp_dir = '/tmp'
Sat Apr 18 13:57:36 2020 us=243302   push_ifconfig_defined = DISABLED
Sat Apr 18 13:57:36 2020 us=243355   push_ifconfig_local = 0.0.0.0
Sat Apr 18 13:57:36 2020 us=243402   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 18 13:57:36 2020 us=243458   push_ifconfig_ipv6_defined = DISABLED
Sat Apr 18 13:57:36 2020 us=243505   push_ifconfig_ipv6_local = ::/0
Sat Apr 18 13:57:36 2020 us=243552   push_ifconfig_ipv6_remote = ::
Sat Apr 18 13:57:36 2020 us=243594   enable_c2c = ENABLED
Sat Apr 18 13:57:36 2020 us=243628   duplicate_cn = DISABLED
Sat Apr 18 13:57:36 2020 us=243668   cf_max = 0
Sat Apr 18 13:57:36 2020 us=243722   cf_per = 0
Sat Apr 18 13:57:36 2020 us=243767   max_clients = 2
Sat Apr 18 13:57:36 2020 us=243811   max_routes_per_client = 256
Sat Apr 18 13:57:36 2020 us=243855   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=243900   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 18 13:57:36 2020 us=243980   auth_token_generate = DISABLED
Sat Apr 18 13:57:36 2020 us=244020   auth_token_lifetime = 0
Sat Apr 18 13:57:36 2020 us=244055   port_share_host = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=244095   port_share_port = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=244138   client = DISABLED
Sat Apr 18 13:57:36 2020 us=244182   pull = DISABLED
Sat Apr 18 13:57:36 2020 us=244240   auth_user_pass_file = '[UNDEF]'
Sat Apr 18 13:57:36 2020 us=244288 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Sat Apr 18 13:57:36 2020 us=244354 library versions: OpenSSL 1.1.1  11 Sep 2018, LZO 2.08
Sat Apr 18 13:57:36 2020 us=244867 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:7505
Sat Apr 18 13:57:36 2020 us=245208 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Sat Apr 18 13:57:36 2020 us=246278 Diffie-Hellman initialized with 2048 bit key
Sat Apr 18 13:57:36 2020 us=247482 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Apr 18 13:57:36 2020 us=247569 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Apr 18 13:57:36 2020 us=247622 WARNING: using --fragment and --mtu-test together may produce an inaccurate MTU test result
Sat Apr 18 13:57:36 2020 us=247675 TLS-Auth MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sat Apr 18 13:57:36 2020 us=248146 TUN/TAP device tap0 opened
Sat Apr 18 13:57:36 2020 us=248291 TUN/TAP TX queue length set to 100
Sat Apr 18 13:57:36 2020 us=248411 Data Channel MTU parms [ L:1654 D:1300 EF:122 EB:411 ET:32 EL:3 ]
Sat Apr 18 13:57:36 2020 us=249605 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sat Apr 18 13:57:36 2020 us=249687 UDPv4 link local (bound): [AF_INET][undef]:1194
Sat Apr 18 13:57:36 2020 us=249736 UDPv4 link remote: [AF_UNSPEC]
Sat Apr 18 13:57:36 2020 us=249790 GID set to root
Sat Apr 18 13:57:36 2020 us=249852 UID set to root
Sat Apr 18 13:57:36 2020 us=249916 MULTI: multi_init called, r=256 v=256
Sat Apr 18 13:57:36 2020 us=250001 IFCONFIG POOL: base=192.168.11.11 size=9, ipv6=0
Sat Apr 18 13:57:36 2020 us=250078 IFCONFIG POOL LIST
Sat Apr 18 13:57:36 2020 us=250285 Initialization Sequence Completed
Sat Apr 18 13:57:38 2020 us=188622 MULTI: multi_create_instance called
Sat Apr 18 13:57:38 2020 us=188745 192.168.2.71:51809 All connections have been connect-retry-max (1) times unsuccessful, exiting
Sat Apr 18 13:57:38 2020 us=188929 192.168.2.71:51809 Exiting due to fatal error
Sat Apr 18 13:57:38 2020 us=189116 192.168.2.71:51809 Closing TUN/TAP interface
tail: /var/log/openvpn/openvpn.log: file truncated
Sat Apr 18 13:57:43 2020 us=482366 Current Parameter Settings:
Sat Apr 18 13:57:43 2020 us=482481   config = '/etc/openvpn/Server.conf'

And the client has the following output.

Sat Apr 18 13:57:30 2020 us=995232 Current Parameter Settings:
Sat Apr 18 13:57:30 2020 us=995652   config = '/etc/openvpn/CoveClient_gr36120.conf'
Sat Apr 18 13:57:30 2020 us=995707   mode = 0
Sat Apr 18 13:57:30 2020 us=995752   persist_config = DISABLED
Sat Apr 18 13:57:30 2020 us=996002   persist_mode = 1
Sat Apr 18 13:57:30 2020 us=996251   show_ciphers = DISABLED
Sat Apr 18 13:57:30 2020 us=996299   show_digests = DISABLED
Sat Apr 18 13:57:30 2020 us=996563   show_engines = DISABLED
Sat Apr 18 13:57:30 2020 us=996630   genkey = DISABLED
Sat Apr 18 13:57:30 2020 us=996688   key_pass_file = '[UNDEF]'
Sat Apr 18 13:57:30 2020 us=996954   show_tls_ciphers = DISABLED
Sat Apr 18 13:57:30 2020 us=997001   connect_retry_max = 0
Sat Apr 18 13:57:30 2020 us=997337 Connection profiles [0]:
Sat Apr 18 13:57:30 2020 us=997391   proto = udp4
Sat Apr 18 13:57:30 2020 us=997670   local = '[UNDEF]'
Sat Apr 18 13:57:30 2020 us=997715   local_port = '[UNDEF]'
Sat Apr 18 13:57:30 2020 us=997929   remote = '192.168.2.70'
Sat Apr 18 13:57:30 2020 us=997972   remote_port = '1194'
Sat Apr 18 13:57:30 2020 us=998027   remote_float = DISABLED
Sat Apr 18 13:57:30 2020 us=998250   bind_defined = DISABLED
Sat Apr 18 13:57:30 2020 us=998316   bind_local = DISABLED
Sat Apr 18 13:57:30 2020 us=998360   bind_ipv6_only = DISABLED
Sat Apr 18 13:57:30 2020 us=998555   connect_retry_seconds = 5
Sat Apr 18 13:57:30 2020 us=998829   connect_timeout = 120
Sat Apr 18 13:57:30 2020 us=998875   socks_proxy_server = '[UNDEF]'
Sat Apr 18 13:57:30 2020 us=999084   socks_proxy_port = '[UNDEF]'
Sat Apr 18 13:57:30 2020 us=999129   tun_mtu = 1500
Sat Apr 18 13:57:30 2020 us=999361   tun_mtu_defined = ENABLED
Sat Apr 18 13:57:30 2020 us=999429   link_mtu = 1500
Sat Apr 18 13:57:30 2020 us=999474   link_mtu_defined = DISABLED
Sat Apr 18 13:57:30 2020 us=999670   tun_mtu_extra = 32
Sat Apr 18 13:57:30 2020 us=999728   tun_mtu_extra_defined = ENABLED
Sat Apr 18 13:57:30 2020 us=999886   mtu_discover_type = -1
Sat Apr 18 13:57:31 2020 us=76   fragment = 0
Sat Apr 18 13:57:31 2020 us=134   mssfix = 1450
Sat Apr 18 13:57:31 2020 us=378   explicit_exit_notification = 0
Sat Apr 18 13:57:31 2020 us=458 Connection profiles END
Sat Apr 18 13:57:31 2020 us=728   remote_random = DISABLED
Sat Apr 18 13:57:31 2020 us=773   ipchange = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=828   dev = 'tap0'
Sat Apr 18 13:57:31 2020 us=1014   dev_type = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=1238   dev_node = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=1535   lladdr = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=1580   topology = 1
Sat Apr 18 13:57:31 2020 us=1760   ifconfig_local = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=1967   ifconfig_remote_netmask = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=2027   ifconfig_noexec = DISABLED
Sat Apr 18 13:57:31 2020 us=2222   ifconfig_nowarn = DISABLED
Sat Apr 18 13:57:31 2020 us=2381   ifconfig_ipv6_local = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=2554   ifconfig_ipv6_netbits = 0
Sat Apr 18 13:57:31 2020 us=2745   ifconfig_ipv6_remote = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=3013   shaper = 0
Sat Apr 18 13:57:31 2020 us=3073   mtu_test = 0
Sat Apr 18 13:57:31 2020 us=3318   mlock = DISABLED
Sat Apr 18 13:57:31 2020 us=3384   keepalive_ping = 0
Sat Apr 18 13:57:31 2020 us=3656   keepalive_timeout = 0
Sat Apr 18 13:57:31 2020 us=3703   inactivity_timeout = 0
Sat Apr 18 13:57:31 2020 us=3892   ping_send_timeout = 0
Sat Apr 18 13:57:31 2020 us=4124   ping_rec_timeout = 0
Sat Apr 18 13:57:31 2020 us=4193   ping_rec_timeout_action = 0
Sat Apr 18 13:57:31 2020 us=4446   ping_timer_remote = DISABLED
Sat Apr 18 13:57:31 2020 us=4540   remap_sigusr1 = 0
Sat Apr 18 13:57:31 2020 us=4702   persist_tun = ENABLED
Sat Apr 18 13:57:31 2020 us=4876   persist_local_ip = DISABLED
Sat Apr 18 13:57:31 2020 us=5064   persist_remote_ip = DISABLED
Sat Apr 18 13:57:31 2020 us=5143   persist_key = ENABLED
Sat Apr 18 13:57:31 2020 us=5429   passtos = DISABLED
Sat Apr 18 13:57:31 2020 us=5696   resolve_retry_seconds = 1000000000
Sat Apr 18 13:57:31 2020 us=5741   resolve_in_advance = DISABLED
Sat Apr 18 13:57:31 2020 us=5943   username = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=6216   groupname = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=6403   chroot_dir = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=6577   cd_dir = '/etc/openvpn'
Sat Apr 18 13:57:31 2020 us=6774   writepid = '/run/openvpn/CoveClient_gr36120.pid'
Sat Apr 18 13:57:31 2020 us=6946   up_script = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=7140   down_script = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=7411   down_pre = DISABLED
Sat Apr 18 13:57:31 2020 us=7456   up_restart = DISABLED
Sat Apr 18 13:57:31 2020 us=7652   up_delay = DISABLED
Sat Apr 18 13:57:31 2020 us=7884   daemon = ENABLED
Sat Apr 18 13:57:31 2020 us=7978   inetd = 0
Sat Apr 18 13:57:31 2020 us=8203   log = ENABLED
Sat Apr 18 13:57:31 2020 us=8270   suppress_timestamps = DISABLED
Sat Apr 18 13:57:31 2020 us=8471   machine_readable_output = DISABLED
Sat Apr 18 13:57:31 2020 us=8514   nice = 0
Sat Apr 18 13:57:31 2020 us=8723   verbosity = 6
Sat Apr 18 13:57:31 2020 us=8783   mute = 0
Sat Apr 18 13:57:31 2020 us=8943   gremlin = 0
Sat Apr 18 13:57:31 2020 us=9268   status_file = '/var/log/openvpn/openvpn-status.log'
Sat Apr 18 13:57:31 2020 us=9336   status_file_version = 1
Sat Apr 18 13:57:31 2020 us=9599   status_file_update_freq = 10
Sat Apr 18 13:57:31 2020 us=9644   occ = ENABLED
Sat Apr 18 13:57:31 2020 us=9855   rcvbuf = 0
Sat Apr 18 13:57:31 2020 us=9918   sndbuf = 0
Sat Apr 18 13:57:31 2020 us=10080   mark = 0
Sat Apr 18 13:57:31 2020 us=10357   sockflags = 0
Sat Apr 18 13:57:31 2020 us=10405   fast_io = DISABLED
Sat Apr 18 13:57:31 2020 us=10602   comp.alg = 1
Sat Apr 18 13:57:31 2020 us=10864   comp.flags = 4
Sat Apr 18 13:57:31 2020 us=10908   route_script = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=11097   route_default_gateway = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=11366   route_default_metric = 0
Sat Apr 18 13:57:31 2020 us=11415   route_noexec = DISABLED
Sat Apr 18 13:57:31 2020 us=11661   route_delay = 0
Sat Apr 18 13:57:31 2020 us=11726   route_delay_window = 30
Sat Apr 18 13:57:31 2020 us=11990   route_delay_defined = DISABLED
Sat Apr 18 13:57:31 2020 us=12035   route_nopull = DISABLED
Sat Apr 18 13:57:31 2020 us=12233   route_gateway_via_dhcp = DISABLED
Sat Apr 18 13:57:31 2020 us=12476   allow_pull_fqdn = DISABLED
Sat Apr 18 13:57:31 2020 us=12552   management_addr = '127.0.0.1'
Sat Apr 18 13:57:31 2020 us=12777   management_port = '7505'
Sat Apr 18 13:57:31 2020 us=12846   management_user_pass = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=13039   management_log_history_cache = 250
Sat Apr 18 13:57:31 2020 us=13352   management_echo_buffer_size = 100
Sat Apr 18 13:57:31 2020 us=13414   management_write_peer_info_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=13617   management_client_user = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=13679   management_client_group = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=13844   management_flags = 0
Sat Apr 18 13:57:31 2020 us=14112   shared_secret_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=14174   key_direction = 2
Sat Apr 18 13:57:31 2020 us=14365   ciphername = 'AES-256-CBC'
Sat Apr 18 13:57:31 2020 us=14425   ncp_enabled = ENABLED
Sat Apr 18 13:57:31 2020 us=14470   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sat Apr 18 13:57:31 2020 us=14514   authname = 'SHA256'
Sat Apr 18 13:57:31 2020 us=14559   prng_hash = 'SHA1'
Sat Apr 18 13:57:31 2020 us=14604   prng_nonce_secret_len = 16
Sat Apr 18 13:57:31 2020 us=14649   keysize = 0
Sat Apr 18 13:57:31 2020 us=14694   engine = DISABLED
Sat Apr 18 13:57:31 2020 us=14739   replay = ENABLED
Sat Apr 18 13:57:31 2020 us=14785   mute_replay_warnings = DISABLED
Sat Apr 18 13:57:31 2020 us=14830   replay_window = 64
Sat Apr 18 13:57:31 2020 us=14874   replay_time = 15
Sat Apr 18 13:57:31 2020 us=14919   packet_id_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15007   use_iv = ENABLED
Sat Apr 18 13:57:31 2020 us=15053   test_crypto = DISABLED
Sat Apr 18 13:57:31 2020 us=15096   tls_server = DISABLED
Sat Apr 18 13:57:31 2020 us=15144   tls_client = ENABLED
Sat Apr 18 13:57:31 2020 us=15188   key_method = 2
Sat Apr 18 13:57:31 2020 us=15233   ca_file = '/etc/openvpn/keys/ca.crt'
Sat Apr 18 13:57:31 2020 us=15312   ca_path = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15357   dh_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15403   cert_file = '/etc/openvpn/keys/gr36120.crt'
Sat Apr 18 13:57:31 2020 us=15450   extra_certs_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15497   priv_key_file = '/etc/openvpn/keys/gr36120.key'
Sat Apr 18 13:57:31 2020 us=15542   pkcs12_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15586   cipher_list = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15630   tls_verify = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15675   tls_export_cert = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15719   verify_x509_type = 1
Sat Apr 18 13:57:31 2020 us=15764   verify_x509_name = 'C=CA, ST=NB, L=Quispamsis, O=GregNet, OU=GregNetVPN, CN=GregNetCA'
Sat Apr 18 13:57:31 2020 us=15810   crl_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=15855   ns_cert_type = 0
Sat Apr 18 13:57:31 2020 us=15902   remote_cert_ku[i] = 65535
Sat Apr 18 13:57:31 2020 us=15946   remote_cert_ku[i] = 0
...
Sat Apr 18 13:57:31 2020 us=16575   remote_cert_ku[i] = 0
Sat Apr 18 13:57:31 2020 us=16620   remote_cert_eku = 'TLS Web Server Authentication'
Sat Apr 18 13:57:31 2020 us=16667   ssl_flags = 0
Sat Apr 18 13:57:31 2020 us=16711   tls_timeout = 2
Sat Apr 18 13:57:31 2020 us=16757   renegotiate_bytes = -1
Sat Apr 18 13:57:31 2020 us=16801   renegotiate_packets = 0
Sat Apr 18 13:57:31 2020 us=16846   renegotiate_seconds = 3600
Sat Apr 18 13:57:31 2020 us=16890   handshake_window = 60
Sat Apr 18 13:57:31 2020 us=16934   transition_window = 3600
Sat Apr 18 13:57:31 2020 us=16979   single_session = DISABLED
Sat Apr 18 13:57:31 2020 us=17025   push_peer_info = DISABLED
Sat Apr 18 13:57:31 2020 us=17071   tls_exit = DISABLED
Sat Apr 18 13:57:31 2020 us=17140   tls_auth_file = '/etc/openvpn/keys/ta.key'
Sat Apr 18 13:57:31 2020 us=17184   tls_crypt_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=17230   pkcs11_protected_authentication = DISABLED
...
Sat Apr 18 13:57:31 2020 us=17894   pkcs11_protected_authentication = DISABLED
Sat Apr 18 13:57:31 2020 us=17942   pkcs11_private_mode = 00000000
...
Sat Apr 18 13:57:31 2020 us=19202   pkcs11_private_mode = 00000000
Sat Apr 18 13:57:31 2020 us=19245   pkcs11_cert_private = DISABLED
...(repeated 14x)
Sat Apr 18 13:57:31 2020 us=20113   pkcs11_cert_private = DISABLED
Sat Apr 18 13:57:31 2020 us=20160   pkcs11_pin_cache_period = -1
Sat Apr 18 13:57:31 2020 us=20206   pkcs11_id = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=20261   pkcs11_id_management = DISABLED
Sat Apr 18 13:57:31 2020 us=20343   server_network = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20401   server_netmask = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20469   server_network_ipv6 = ::
Sat Apr 18 13:57:31 2020 us=20514   server_netbits_ipv6 = 0
Sat Apr 18 13:57:31 2020 us=20570   server_bridge_ip = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20618   server_bridge_netmask = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20703   server_bridge_pool_start = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20753   server_bridge_pool_end = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20799   ifconfig_pool_defined = DISABLED
Sat Apr 18 13:57:31 2020 us=20882   ifconfig_pool_start = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20933   ifconfig_pool_end = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=20991   ifconfig_pool_netmask = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=21036   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=21106   ifconfig_pool_persist_refresh_freq = 600
Sat Apr 18 13:57:31 2020 us=21166   ifconfig_ipv6_pool_defined = DISABLED
Sat Apr 18 13:57:31 2020 us=21214   ifconfig_ipv6_pool_base = ::
Sat Apr 18 13:57:31 2020 us=21294   ifconfig_ipv6_pool_netbits = 0
Sat Apr 18 13:57:31 2020 us=21352   n_bcast_buf = 256
Sat Apr 18 13:57:31 2020 us=21395   tcp_queue_limit = 64
Sat Apr 18 13:57:31 2020 us=21440   real_hash_size = 256
Sat Apr 18 13:57:31 2020 us=21495   virtual_hash_size = 256
Sat Apr 18 13:57:31 2020 us=21539   client_connect_script = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=21583   learn_address_script = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=21665   client_disconnect_script = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=21711   client_config_dir = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=21768   ccd_exclusive = DISABLED
Sat Apr 18 13:57:31 2020 us=21845   tmp_dir = '/tmp'
Sat Apr 18 13:57:31 2020 us=21906   push_ifconfig_defined = DISABLED
Sat Apr 18 13:57:31 2020 us=21956   push_ifconfig_local = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=22004   push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 18 13:57:31 2020 us=22080   push_ifconfig_ipv6_defined = DISABLED
Sat Apr 18 13:57:31 2020 us=22129   push_ifconfig_ipv6_local = ::/0
Sat Apr 18 13:57:31 2020 us=22211   push_ifconfig_ipv6_remote = ::
Sat Apr 18 13:57:31 2020 us=22258   enable_c2c = DISABLED
Sat Apr 18 13:57:31 2020 us=22303   duplicate_cn = DISABLED
Sat Apr 18 13:57:31 2020 us=22358   cf_max = 0
Sat Apr 18 13:57:31 2020 us=22435   cf_per = 0
Sat Apr 18 13:57:31 2020 us=22480   max_clients = 1024
Sat Apr 18 13:57:31 2020 us=22523   max_routes_per_client = 256
Sat Apr 18 13:57:31 2020 us=22569   auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=22624   auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 18 13:57:31 2020 us=22669   auth_token_generate = DISABLED
Sat Apr 18 13:57:31 2020 us=22713   auth_token_lifetime = 0
Sat Apr 18 13:57:31 2020 us=22796   port_share_host = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=22843   port_share_port = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=22900   client = ENABLED
Sat Apr 18 13:57:31 2020 us=22944   pull = ENABLED
Sat Apr 18 13:57:31 2020 us=23024   auth_user_pass_file = '[UNDEF]'
Sat Apr 18 13:57:31 2020 us=23072 OpenVPN 2.4.4 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Sat Apr 18 13:57:31 2020 us=23148 library versions: OpenSSL 1.1.1  11 Sep 2018, LZO 2.08
Sat Apr 18 13:57:31 2020 us=23768 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:7505
Sat Apr 18 13:57:31 2020 us=28655 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Apr 18 13:57:31 2020 us=28735 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sat Apr 18 13:57:31 2020 us=29070 Control Channel MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sat Apr 18 13:57:31 2020 us=29294 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Sat Apr 18 13:57:31 2020 us=29435 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysiz e 256,tls-auth,key-method 2,tls-client'
Sat Apr 18 13:57:31 2020 us=29484 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA 256,keysize 256,tls-auth,key-method 2,tls-server'
Sat Apr 18 13:57:31 2020 us=29545 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.2.70:1194
Sat Apr 18 13:57:31 2020 us=29634 Socket Buffers: R=[163840->163840] S=[163840->163840]
Sat Apr 18 13:57:31 2020 us=29684 UDPv4 link local: (not bound)
Sat Apr 18 13:57:31 2020 us=29736 UDPv4 link remote: [AF_INET]192.168.2.70:1194
Sat Apr 18 13:57:31 2020 us=30188 UDPv4 WRITE [54] to [AF_INET]192.168.2.70:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Sat Apr 18 13:57:33 2020 us=415494 UDPv4 WRITE [54] to [AF_INET]192.168.2.70:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2 ] [ ] pid=0 DATA len=0
Sat Apr 18 13:57:38 2020 us=184606 UDPv4 WRITE [54] to [AF_INET]192.168.2.70:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #3 ] [ ] pid=0 DATA len=0
Sat Apr 18 13:57:46 2020 us=806839 UDPv4 WRITE [54] to [AF_INET]192.168.2.70:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #4 ] [ ] pid=0 DATA len=0
Sat Apr 18 13:58:02 2020 us=475775 UDPv4 WRITE [54] to [AF_INET]192.168.2.70:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #5 ] [ ] pid=0 DATA len=0
Sat Apr 18 13:58:31 2020 us=269764 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Apr 18 13:58:31 2020 us=269819 TLS Error: TLS handshake failed
Sat Apr 18 13:58:31 2020 us=270105 TCP/UDP: Closing socket
Sat Apr 18 13:58:31 2020 us=270212 SIGUSR1[soft,tls-error] received, process restarting
Sat Apr 18 13:58:31 2020 us=270300 Restart pause, 5 second(s)
Sat Apr 18 13:58:36 2020 us=275407 Re-using SSL/TLS context
Sat Apr 18 13:58:36 2020 us=275628 Control Channel MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sat Apr 18 13:58:36 2020 us=275707 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Sat Apr 18 13:58:36 2020 us=275860 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysi ze 256,tls-auth,key-method 2,tls-client'
Sat Apr 18 13:58:36 2020 us=275907 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SH A256,keysize 256,tls-auth,key-method 2,tls-server'
Sat Apr 18 13:58:36 2020 us=275962 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.2.70:1194
Sat Apr 18 13:58:36 2020 us=276071 Socket Buffers: R=[163840->163840] S=[163840->163840]
Sat Apr 18 13:58:36 2020 us=276120 UDPv4 link local: (not bound)
Sat Apr 18 13:58:36 2020 us=276165 UDPv4 link remote: [AF_INET]192.168.2.70:1194
Sat Apr 18 13:58:36 2020 us=276300 UDPv4 WRITE [54] to [AF_INET]192.168.2.70:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0

Here is the Server start script.

ve9gfi@ve9gfi-pizza:/etc/openvpn$ cat ./start
sudo /etc/openvpn/bridge/bridge-start.sh
sudo service openvpn start

ve9gfi@ve9gfi-pizza:/etc/openvpn$ cat ./bridge/bridge-conf.sh
# Server Configuration file
#
# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth2"
eth_ip="192.168.11.254"
eth_netmask="255.255.255.0"
eth_subnet="192.168.11.0/24"
eth_broadcast="192.168.11.255"
eth_gateway="192.168.11.1"
eth_mac="00:30:48:69:10:96"

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged together
tap="tap0"

ve9gfi@ve9gfi-pizza:/etc/openvpn$ cat ./bridge/bridge-start.sh
#!/bin/bash

. /etc/openvpn/bridge/bridge-conf.sh
#################################
# Set up Ethernet bridge on Linux
# Requires: bridge-utils
#################################

for t in $tap; do
    openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

for t in $tap; do
    ifconfig $t 0.0.0.0 promisc up
    echo "Adding ACCEPT rules for $t"
    iptables -A INPUT -i $t -j ACCEPT
    echo "Added ACCEPT rules for $t"
done

echo "Adding ACCEPT rules for $br"
iptables -A INPUT -i $br -j ACCEPT
iptables -A FORWARD -i $br -j ACCEPT
echo "Added ACCEPT rules for $br"


ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast
ip link set $br address $eth_mac

Here is the Server configuration script.

ve9gfi@ve9gfi-pizza:/etc/openvpn$ cat Server.conf
##############################################
# OpenVPN Server configuration file          #
port                    1194
proto                   udp4
ca                      /etc/openvpn/keys/ca.crt
cert                    /etc/openvpn/keys/ve9gfi-pizza.crt
key                     /etc/openvpn/keys/ve9gfi-pizza.key
dh                      /etc/openvpn/keys/dh.pem
tls-version-min         1.2
tls-auth                /etc/openvpn/keys/ta.key 0                      # set 0 for server and 1 for each client
cipher                  AES-256-CBC
auth                    SHA256
compress                lz4-v2
user                    root
group                   root
ifconfig-pool-persist   /var/log/openvpn/ipp.txt
dev                     tap0
server-bridge           192.168.11.254 255.255.255.0 192.168.11.11 192.168.11.19
keepalive               10 120

# greg added the next three for testing
connect-retry           30
connect-retry-max       1

client-to-client
persist-key
persist-tun

;duplicate-cn
max-clients             2

management              127.0.0.1 7505
status                  /var/log/openvpn/openvpn-status.log
log                     /var/log/openvpn/openvpn.log
verb                    6

explicit-exit-notify 1

mtu-test
fragment 1300
mssfix

Here is the Client start script and configuration.

ve9gfi@ve9gfi-dell01:/etc/openvpn$ cat Client.conf
##############################################
# OpenVPN Client configuration file          #
client
dev                     tap0
proto                   udp4
remote                  192.168.2.70 1194
resolv-retry            infinite
nobind
persist-key
persist-tun
ca                      /etc/openvpn/keys/ca.crt
cert                    /etc/openvpn/keys/greg.crt
key                     /etc/openvpn/keys/greg.key
tls-auth                /etc/openvpn/keys/ta.key 1                      # set 0 for server and 1 for each client
key-direction           1
remote-cert-tls         server
cipher                  AES-256-CBC
auth                    SHA256
compress
verify-x509-name        'C=CA, ST=NB, L=Quispamsis, O=GregNet, OU=GregNetVPN, CN=GregNetCA'
management              127.0.0.1 7505
status                  /var/log/openvpn/openvpn-status.log
log                     /var/log/openvpn/openvpn.log
verb                    6

What is preventing the client from establishing a tunnel? (I'm at my character limit).
-Greg

TinCanTech

ve9gfi wrote

# greg added the next three for testing
connect-retry           30
connect-retry-max       1

Test failed, these are client side directives, see the manual.

ve9gfi

Ok thanks TinCanTech!

I now have bi-directional traffic and new errors, but these seem easier to digest. It looks like I messed up the certs in one of many attempts to start from scratch this week.

in my Client Config, I commented out the "verify-x509-name" directive.

Client Logs are now:

Sat Apr 18 17:57:11 2020 us=937931 UDPv4 READ [63] from [AF_INET]192.168.2.70:1194: P_DATA_V1 kid=0 DATA len=62
Sat Apr 18 17:57:11 2020 us=938004 Bad compression stub (swap) decompression header byte: 0
Sat Apr 18 17:57:12 2020 us=961414 TUN READ [42]
Sat Apr 18 17:57:12 2020 us=961553 UDPv4 WRITE [67] to [AF_INET]192.168.2.70:1194: P_DATA_V2 kid=0 DATA len=66
Sat Apr 18 17:57:12 2020 us=984288 UDPv4 READ [63] from [AF_INET]192.168.2.70:1194: P_DATA_V1 kid=0 DATA len=62
Sat Apr 18 17:57:12 2020 us=984370 Bad compression stub (swap) decompression header byte: 0

Server Logs are now:

Sat Apr 18 17:58:29 2020 us=687824 192.168.2.71:59919 peer info: IV_COMP_STUBv2=1
Sat Apr 18 17:58:29 2020 us=687851 192.168.2.71:59919 peer info: IV_TCPNL=1
Sat Apr 18 17:58:29 2020 us=687963 192.168.2.71:59919 UDPv4 WRITE [314] to [AF_INET]192.168.2.71:59919: P_CONTROL_V1 kid=0 pid=[ #8 ] [ 5 ] pid=5 DATA len=248
Sat Apr 18 17:58:29 2020 us=688303 192.168.2.71:59919 UDPv4 READ [62] from [AF_INET]192.168.2.71:59919: P_ACK_V1 kid=0 pid=[ #10 ] [ 4 ]
Sat Apr 18 17:58:29 2020 us=688545 192.168.2.71:59919 UDPv4 READ [62] from [AF_INET]192.168.2.71:59919: P_ACK_V1 kid=0 pid=[ #11 ] [ 5 ]
Sat Apr 18 17:58:29 2020 us=688587 192.168.2.71:59919 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
Sat Apr 18 17:58:29 2020 us=688630 192.168.2.71:59919 [greg] Peer Connection Initiated with [AF_INET]192.168.2.71:59919
Sat Apr 18 17:58:29 2020 us=688829 MULTI: new connection by client 'greg' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Sat Apr 18 17:58:29 2020 us=688863 MULTI_sva: pool returned IPv4=192.168.11.11, IPv6=(Not enabled)
Sat Apr 18 17:58:30 2020 us=790905 greg/192.168.2.71:59919 UDPv4 READ [89] from [AF_INET]192.168.2.71:59919: P_CONTROL_V1 kid=0 pid=[ #12 ] [ ] pid=6 DATA len=35
Sat Apr 18 17:58:30 2020 us=790991 greg/192.168.2.71:59919 PUSH: Received control message: 'PUSH_REQUEST'
Sat Apr 18 17:58:30 2020 us=791066 greg/192.168.2.71:59919 SENT CONTROL [greg]: 'PUSH_REPLY,route xx.x.0.0 255.255.0.0,dhcp-option DNS xx.xx.132.1,dhcp-option DNS xx.xx.132.9,route-gateway 192.168.11.254,ping 10,ping-restart 120,ifconfig 192.168.11.11 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
Sat Apr 18 17:58:30 2020 us=791097 greg/192.168.2.71:59919 Data Channel: using negotiated cipher 'AES-256-GCM'
Sat Apr 18 17:58:30 2020 us=791138 greg/192.168.2.71:59919 Data Channel MTU parms [ L:1582 D:1450 EF:50 EB:411 ET:32 EL:3 ]
Sat Apr 18 17:58:30 2020 us=791315 greg/192.168.2.71:59919 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 18 17:58:30 2020 us=791351 greg/192.168.2.71:59919 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Apr 18 17:58:30 2020 us=791401 greg/192.168.2.71:59919 UDPv4 WRITE [62] to [AF_INET]192.168.2.71:59919: P_ACK_V1 kid=0 pid=[ #9 ] [ 6 ]
Sat Apr 18 17:58:30 2020 us=791484 greg/192.168.2.71:59919 UDPv4 WRITE [288] to [AF_INET]192.168.2.71:59919: P_CONTROL_V1 kid=0 pid=[ #10 ] [ ] pid=6 DATA len=234
Sat Apr 18 17:58:30 2020 us=794639 greg/192.168.2.71:59919 UDPv4 READ [62] from [AF_INET]192.168.2.71:59919: P_ACK_V1 kid=0 pid=[ #13 ] [ 6 ]
Sat Apr 18 17:58:31 2020 us=814786 greg/192.168.2.71:59919 UDPv4 READ [67] from [AF_INET]192.168.2.71:59919: P_DATA_V2 kid=0 DATA len=66
Sat Apr 18 17:58:31 2020 us=814846 greg/192.168.2.71:59919 MULTI: Learn: 00:a0:c9:95:72:cc -> gr36120/192.168.2.71:59919
Sat Apr 18 17:58:31 2020 us=814894 greg/192.168.2.71:59919 TUN WRITE [43]
Sat Apr 18 17:58:31 2020 us=814975 greg/192.168.2.71:59919 TUN READ [42]

I can't ping from 192.168.11.11 to 192.168.11.254. Should I?

Also, should my routes on each end reference the "br0" ip and interface?
Going to grab some food now.

Greg

TinCanTech

ve9gfi wrote I now have bi-directional traffic

Good, openvpn is working then.

ve9gfi wrote and new errors, but these seem easier to digest. It looks like I messed up the certs in one of many attempts to start from scratch this week.

From the log snippets you posted it looks like a time out on the client side.

ve9gfi wrote in my Client Config, I commented out the "verify-x509-name" directive.

You need to know what these things do and not randomly stab at them in the dark. See the manual.

ve9gfi wrote I can't ping from 192.168.11.11 to 192.168.11.254. Should I?

Also, should my routes on each end reference the "br0" ip and interface?

You need to setup your network and bridge correctly, neither of which we support here.

If all else fails then you can contact me privately: tincanteksup <at> gmail (Fees will apply)

ve9gfi

ok - Yes - I will go through the manual again. I should print it (and I would have had I been at my office)... I'll print it as I find it easier.

If it's just networking, I should be good. I do see one error "Bad compression stub (swap) decompression header byte: 42". I just googled and I see many replies, so I'll review my route scripts and take it from here, now that the tunnel seems setup.

I appreciate your help.
Greg