Hi folks…Looking for some assistance…I’m pretty good with basic networking, but with more advanced things I know just enough to be dangerous. I’ve been using OpenVPN for several years with no issues, using a WRT-1900ACSv2 router with DD-WRT installed. However, I recently moved and my new ISP requires me to use their router (Comtrend/NexusLink 3120). So, I’m trying to run my setup like this:
My local network ---> My router ---> ISP router ---> Internet
Thankfully, they gave me the admin username and password for their router, so I was able to setup port forwarding. I know it works because when connecting my laptop to my phone’s LTE service via hotspot, I can telnet/SSH into the router, as well as use a PPTP VPN. Also of note, I don’t have a static IP address and their router firmware is neutered and does not have dynamic DNS capability. So, I am still using the dynamic DNS on my router, along with Dyn Updater to continuously update the IP address. Again, I know this works because telnet/SSH/PPTP work, with all traffic routing through the PPTP VPN. I also have access to my network share. However, despite my success in getting telnet/SSH/PPTP VPN to work, I simply cannot get OpenVPN to work. I can successfully connect, but once connected I can’t access the internet or my network share. I’m guessing it has something to do with the router and server configurations. Below are some details, and any help would be immensely appreciated!
- My router is connected to their router with a static IP (192.168.231.248, subnet 255.255.255.0, gateway 192.168.231.1). Their router is running DHCP, but there are no DHCP clients.
- I’ve assigned my router 192.166.0.1, with a subnet mask of 255.255.255.0 and gateway 192.166.0.1. My router is also running DHCP. I’ve tried with the SPI firewall both enabled and disabled and neither setting works. At my previous address, with no ISP router, I had to have it disabled for OpenVPN to work.
- OpenVPN successfully connects and there appear to be no issues with keys/certs/ciphers/hash/encryption.
- Server config (via DD-WRT OpenVPN menu items):
OpenVPN: Enable
Start Type: WAN Up
Config as: Server
Server Mode: Router (TUN)
Network: 192.168.231.1 (*should this be my LAN router IP 192.166.0.1??? Tried it and it doesn’t work)
Netmask: 255.255.255.0
Port: 1194 (*this is port forwarded on their router and I’m confident it’s working since OpenVPN connects)
Tunnel Protocol: UDP
Encryption Cipher: AES 128 CBC
Hash Algorithm: SHA256
Advanced Options: Enable
TLS Cipher: None
LZO Compression: Adaptive
Redirect Default Gateway: Enable (*do I need to change this since I’m behind their router???)
Allow Client to Client: Enable
Allow Duplicate CN: Enable
Tunnel MTU Setting: 1500
- Server config (via additional config option in DD-WRT OpenVPN daemon):
server 10.8.0.0 255.255.255.0
push "route 192.166.0.0 255.255.255.0"
#push "redirect-gateway local def1"
push "dhcp-option DNS 8.8.8.8"
float
topology subnet
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
- Client config:
client
dev tun0
proto udp
remote ###.###.###.### 1194 (*actual remote address hashed out for security…)
resolv-retry infinite
nobind
persist-key
persist-tun
redirect-gateway def1
ca ca.crt
cert myrmidon.crt
key myrmidon.key
#remote-cert-tls server
cipher AES-128-CBC
auth SHA256
comp-lzo
verb 4
allow-recursive-routing
float
topology subnet
- Log file:
Wed May 06 16:47:03 2020 us=175125 Current Parameter Settings:
Wed May 06 16:47:03 2020 us=175125 config = 'Myrmidon.ovpn'
Wed May 06 16:47:03 2020 us=175125 mode = 0
Wed May 06 16:47:03 2020 us=175125 show_ciphers = DISABLED
Wed May 06 16:47:03 2020 us=175125 show_digests = DISABLED
Wed May 06 16:47:03 2020 us=175125 show_engines = DISABLED
Wed May 06 16:47:03 2020 us=175125 genkey = DISABLED
Wed May 06 16:47:03 2020 us=175125 key_pass_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 show_tls_ciphers = DISABLED
Wed May 06 16:47:03 2020 us=175125 connect_retry_max = 0
Wed May 06 16:47:03 2020 us=175125 Connection profiles [0]:
Wed May 06 16:47:03 2020 us=175125 proto = udp
Wed May 06 16:47:03 2020 us=175125 local = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 local_port = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 remote = 'XXXXXXXXXXXXXXXXXXXXXXXXX'
Wed May 06 16:47:03 2020 us=175125 remote_port = '1194'
Wed May 06 16:47:03 2020 us=175125 remote_float = ENABLED
Wed May 06 16:47:03 2020 us=175125 bind_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 bind_local = DISABLED
Wed May 06 16:47:03 2020 us=175125 bind_ipv6_only = DISABLED
Wed May 06 16:47:03 2020 us=175125 connect_retry_seconds = 5
Wed May 06 16:47:03 2020 us=175125 connect_timeout = 120
Wed May 06 16:47:03 2020 us=175125 socks_proxy_server = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 socks_proxy_port = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 tun_mtu = 1500
Wed May 06 16:47:03 2020 us=175125 tun_mtu_defined = ENABLED
Wed May 06 16:47:03 2020 us=175125 link_mtu = 1500
Wed May 06 16:47:03 2020 us=175125 link_mtu_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 tun_mtu_extra = 0
Wed May 06 16:47:03 2020 us=175125 tun_mtu_extra_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 mtu_discover_type = -1
Wed May 06 16:47:03 2020 us=175125 fragment = 0
Wed May 06 16:47:03 2020 us=175125 mssfix = 1450
Wed May 06 16:47:03 2020 us=175125 explicit_exit_notification = 0
Wed May 06 16:47:03 2020 us=175125 Connection profiles END
Wed May 06 16:47:03 2020 us=175125 remote_random = DISABLED
Wed May 06 16:47:03 2020 us=175125 ipchange = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 dev = 'tun0'
Wed May 06 16:47:03 2020 us=175125 dev_type = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 dev_node = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 lladdr = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 topology = 3
Wed May 06 16:47:03 2020 us=175125 ifconfig_local = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 ifconfig_remote_netmask = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 ifconfig_noexec = DISABLED
Wed May 06 16:47:03 2020 us=175125 ifconfig_nowarn = DISABLED
Wed May 06 16:47:03 2020 us=175125 ifconfig_ipv6_local = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 ifconfig_ipv6_netbits = 0
Wed May 06 16:47:03 2020 us=175125 ifconfig_ipv6_remote = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 shaper = 0
Wed May 06 16:47:03 2020 us=175125 mtu_test = 0
Wed May 06 16:47:03 2020 us=175125 mlock = DISABLED
Wed May 06 16:47:03 2020 us=175125 keepalive_ping = 0
Wed May 06 16:47:03 2020 us=175125 keepalive_timeout = 0
Wed May 06 16:47:03 2020 us=175125 inactivity_timeout = 0
Wed May 06 16:47:03 2020 us=175125 ping_send_timeout = 0
Wed May 06 16:47:03 2020 us=175125 ping_rec_timeout = 0
Wed May 06 16:47:03 2020 us=175125 ping_rec_timeout_action = 0
Wed May 06 16:47:03 2020 us=175125 ping_timer_remote = DISABLED
Wed May 06 16:47:03 2020 us=175125 remap_sigusr1 = 0
Wed May 06 16:47:03 2020 us=175125 persist_tun = ENABLED
Wed May 06 16:47:03 2020 us=175125 persist_local_ip = DISABLED
Wed May 06 16:47:03 2020 us=175125 persist_remote_ip = DISABLED
Wed May 06 16:47:03 2020 us=175125 persist_key = ENABLED
Wed May 06 16:47:03 2020 us=175125 passtos = DISABLED
Wed May 06 16:47:03 2020 us=175125 resolve_retry_seconds = 1000000000
Wed May 06 16:47:03 2020 us=175125 resolve_in_advance = DISABLED
Wed May 06 16:47:03 2020 us=175125 username = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 groupname = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 chroot_dir = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 cd_dir = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 writepid = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 up_script = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 down_script = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 down_pre = DISABLED
Wed May 06 16:47:03 2020 us=175125 up_restart = DISABLED
Wed May 06 16:47:03 2020 us=175125 up_delay = DISABLED
Wed May 06 16:47:03 2020 us=175125 daemon = DISABLED
Wed May 06 16:47:03 2020 us=175125 inetd = 0
Wed May 06 16:47:03 2020 us=175125 log = ENABLED
Wed May 06 16:47:03 2020 us=175125 suppress_timestamps = DISABLED
Wed May 06 16:47:03 2020 us=175125 machine_readable_output = DISABLED
Wed May 06 16:47:03 2020 us=175125 nice = 0
Wed May 06 16:47:03 2020 us=175125 verbosity = 4
Wed May 06 16:47:03 2020 us=175125 mute = 0
Wed May 06 16:47:03 2020 us=175125 gremlin = 0
Wed May 06 16:47:03 2020 us=175125 status_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 status_file_version = 1
Wed May 06 16:47:03 2020 us=175125 status_file_update_freq = 60
Wed May 06 16:47:03 2020 us=175125 occ = ENABLED
Wed May 06 16:47:03 2020 us=175125 rcvbuf = 0
Wed May 06 16:47:03 2020 us=175125 sndbuf = 0
Wed May 06 16:47:03 2020 us=175125 sockflags = 0
Wed May 06 16:47:03 2020 us=175125 fast_io = DISABLED
Wed May 06 16:47:03 2020 us=175125 comp.alg = 2
Wed May 06 16:47:03 2020 us=175125 comp.flags = 1
Wed May 06 16:47:03 2020 us=175125 route_script = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 route_default_gateway = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 route_default_metric = 0
Wed May 06 16:47:03 2020 us=175125 route_noexec = DISABLED
Wed May 06 16:47:03 2020 us=175125 route_delay = 5
Wed May 06 16:47:03 2020 us=175125 route_delay_window = 30
Wed May 06 16:47:03 2020 us=175125 route_delay_defined = ENABLED
Wed May 06 16:47:03 2020 us=175125 route_nopull = DISABLED
Wed May 06 16:47:03 2020 us=175125 route_gateway_via_dhcp = DISABLED
Wed May 06 16:47:03 2020 us=175125 allow_pull_fqdn = DISABLED
Wed May 06 16:47:03 2020 us=175125 Pull filters:
Wed May 06 16:47:03 2020 us=175125 ignore "route-method"
Wed May 06 16:47:03 2020 us=175125 [redirect_default_gateway local=0]
Wed May 06 16:47:03 2020 us=175125 management_addr = '127.0.0.1'
Wed May 06 16:47:03 2020 us=175125 management_port = '25340'
Wed May 06 16:47:03 2020 us=175125 management_user_pass = 'stdin'
Wed May 06 16:47:03 2020 us=175125 management_log_history_cache = 250
Wed May 06 16:47:03 2020 us=175125 management_echo_buffer_size = 100
Wed May 06 16:47:03 2020 us=175125 management_write_peer_info_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 management_client_user = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 management_client_group = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 management_flags = 6
Wed May 06 16:47:03 2020 us=175125 shared_secret_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 key_direction = not set
Wed May 06 16:47:03 2020 us=175125 ciphername = 'AES-128-CBC'
Wed May 06 16:47:03 2020 us=175125 ncp_enabled = ENABLED
Wed May 06 16:47:03 2020 us=175125 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed May 06 16:47:03 2020 us=175125 authname = 'SHA256'
Wed May 06 16:47:03 2020 us=175125 prng_hash = 'SHA1'
Wed May 06 16:47:03 2020 us=175125 prng_nonce_secret_len = 16
Wed May 06 16:47:03 2020 us=175125 keysize = 0
Wed May 06 16:47:03 2020 us=175125 engine = DISABLED
Wed May 06 16:47:03 2020 us=175125 replay = ENABLED
Wed May 06 16:47:03 2020 us=175125 mute_replay_warnings = DISABLED
Wed May 06 16:47:03 2020 us=175125 replay_window = 64
Wed May 06 16:47:03 2020 us=175125 replay_time = 15
Wed May 06 16:47:03 2020 us=175125 packet_id_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 use_iv = ENABLED
Wed May 06 16:47:03 2020 us=175125 test_crypto = DISABLED
Wed May 06 16:47:03 2020 us=175125 tls_server = DISABLED
Wed May 06 16:47:03 2020 us=175125 tls_client = ENABLED
Wed May 06 16:47:03 2020 us=175125 key_method = 2
Wed May 06 16:47:03 2020 us=175125 ca_file = 'ca.crt'
Wed May 06 16:47:03 2020 us=175125 ca_path = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 dh_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 cert_file = 'xxxxxxxxxt'
Wed May 06 16:47:03 2020 us=175125 extra_certs_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 priv_key_file = 'xxxxxxx'
Wed May 06 16:47:03 2020 us=175125 pkcs12_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 cryptoapi_cert = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 cipher_list = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 cipher_list_tls13 = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 tls_cert_profile = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 tls_verify = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 tls_export_cert = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 verify_x509_type = 0
Wed May 06 16:47:03 2020 us=175125 verify_x509_name = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 crl_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 ns_cert_type = 0
Wed May 06 16:47:03 2020 us=175125 remote_cert_ku[i] = 0
Wed May 06 16:47:03 2020 us=175125 remote_cert_eku = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 ssl_flags = 0
Wed May 06 16:47:03 2020 us=175125 tls_timeout = 2
Wed May 06 16:47:03 2020 us=175125 renegotiate_bytes = -1
Wed May 06 16:47:03 2020 us=175125 renegotiate_packets = 0
Wed May 06 16:47:03 2020 us=175125 renegotiate_seconds = 3600
Wed May 06 16:47:03 2020 us=175125 handshake_window = 60
Wed May 06 16:47:03 2020 us=175125 transition_window = 3600
Wed May 06 16:47:03 2020 us=175125 single_session = DISABLED
Wed May 06 16:47:03 2020 us=175125 push_peer_info = DISABLED
Wed May 06 16:47:03 2020 us=175125 tls_exit = DISABLED
Wed May 06 16:47:03 2020 us=175125 tls_auth_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 tls_crypt_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 pkcs11_protected_authentication = DISABLED
Wed May 06 16:47:03 2020 us=175125 pkcs11_private_mode = 00000000
Wed May 06 16:47:03 2020 us=175125 pkcs11_cert_private = DISABLED
Wed May 06 16:47:03 2020 us=175125 pkcs11_pin_cache_period = -1
Wed May 06 16:47:03 2020 us=175125 pkcs11_id = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 pkcs11_id_management = DISABLED
Wed May 06 16:47:03 2020 us=175125 server_network = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 server_netmask = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 server_network_ipv6 = ::
Wed May 06 16:47:03 2020 us=175125 server_netbits_ipv6 = 0
Wed May 06 16:47:03 2020 us=175125 server_bridge_ip = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 server_bridge_netmask = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 server_bridge_pool_start = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 server_bridge_pool_end = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 ifconfig_pool_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 ifconfig_pool_start = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 ifconfig_pool_end = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 ifconfig_pool_netmask = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 ifconfig_pool_persist_filename = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 ifconfig_pool_persist_refresh_freq = 600
Wed May 06 16:47:03 2020 us=175125 ifconfig_ipv6_pool_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 ifconfig_ipv6_pool_base = ::
Wed May 06 16:47:03 2020 us=175125 ifconfig_ipv6_pool_netbits = 0
Wed May 06 16:47:03 2020 us=175125 n_bcast_buf = 256
Wed May 06 16:47:03 2020 us=175125 tcp_queue_limit = 64
Wed May 06 16:47:03 2020 us=175125 real_hash_size = 256
Wed May 06 16:47:03 2020 us=175125 virtual_hash_size = 256
Wed May 06 16:47:03 2020 us=175125 client_connect_script = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 learn_address_script = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 client_disconnect_script = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 client_config_dir = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 ccd_exclusive = DISABLED
Wed May 06 16:47:03 2020 us=175125 tmp_dir = 'xxxxxxxx'
Wed May 06 16:47:03 2020 us=175125 push_ifconfig_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 push_ifconfig_local = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 push_ifconfig_remote_netmask = 0.0.0.0
Wed May 06 16:47:03 2020 us=175125 push_ifconfig_ipv6_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 push_ifconfig_ipv6_local = ::/0
Wed May 06 16:47:03 2020 us=175125 push_ifconfig_ipv6_remote = ::
Wed May 06 16:47:03 2020 us=175125 enable_c2c = DISABLED
Wed May 06 16:47:03 2020 us=175125 duplicate_cn = DISABLED
Wed May 06 16:47:03 2020 us=175125 cf_max = 0
Wed May 06 16:47:03 2020 us=175125 cf_per = 0
Wed May 06 16:47:03 2020 us=175125 max_clients = 1024
Wed May 06 16:47:03 2020 us=175125 max_routes_per_client = 256
Wed May 06 16:47:03 2020 us=175125 auth_user_pass_verify_script = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 auth_user_pass_verify_script_via_file = DISABLED
Wed May 06 16:47:03 2020 us=175125 auth_token_generate = DISABLED
Wed May 06 16:47:03 2020 us=175125 auth_token_lifetime = 0
Wed May 06 16:47:03 2020 us=175125 client = ENABLED
Wed May 06 16:47:03 2020 us=175125 pull = ENABLED
Wed May 06 16:47:03 2020 us=175125 auth_user_pass_file = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 show_net_up = DISABLED
Wed May 06 16:47:03 2020 us=175125 route_method = 3
Wed May 06 16:47:03 2020 us=175125 block_outside_dns = DISABLED
Wed May 06 16:47:03 2020 us=175125 ip_win32_defined = DISABLED
Wed May 06 16:47:03 2020 us=175125 ip_win32_type = 3
Wed May 06 16:47:03 2020 us=175125 dhcp_masq_offset = 0
Wed May 06 16:47:03 2020 us=175125 dhcp_lease_time = 31536000
Wed May 06 16:47:03 2020 us=175125 tap_sleep = 0
Wed May 06 16:47:03 2020 us=175125 dhcp_options = DISABLED
Wed May 06 16:47:03 2020 us=175125 dhcp_renew = DISABLED
Wed May 06 16:47:03 2020 us=175125 dhcp_pre_release = DISABLED
Wed May 06 16:47:03 2020 us=175125 domain = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 netbios_scope = '[UNDEF]'
Wed May 06 16:47:03 2020 us=175125 netbios_node_type = 0
Wed May 06 16:47:03 2020 us=175125 disable_nbt = DISABLED
Wed May 06 16:47:03 2020 us=175125 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Wed May 06 16:47:03 2020 us=175125 Windows version 6.2 (Windows 8 or greater) 64bit
Wed May 06 16:47:03 2020 us=175125 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Enter Management Password:
Wed May 06 16:47:03 2020 us=175125 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed May 06 16:47:03 2020 us=175125 Need hold release from management interface, waiting...
Wed May 06 16:47:03 2020 us=641210 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed May 06 16:47:03 2020 us=750589 MANAGEMENT: CMD 'state on'
Wed May 06 16:47:03 2020 us=750589 MANAGEMENT: CMD 'log all on'
Wed May 06 16:47:03 2020 us=953430 MANAGEMENT: CMD 'echo all on'
Wed May 06 16:47:03 2020 us=953430 MANAGEMENT: CMD 'bytecount 5'
Wed May 06 16:47:03 2020 us=953430 MANAGEMENT: CMD 'hold off'
Wed May 06 16:47:03 2020 us=953430 MANAGEMENT: CMD 'hold release'
Wed May 06 16:47:03 2020 us=953430 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed May 06 16:47:03 2020 us=953430 LZO compression initializing
Wed May 06 16:47:03 2020 us=953430 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Wed May 06 16:47:03 2020 us=953430 MANAGEMENT: >STATE:1588747623,RESOLVE,,,,,,
Wed May 06 16:47:04 2020 us=239784 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Wed May 06 16:47:04 2020 us=239784 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-client'
Wed May 06 16:47:04 2020 us=239784 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-server'
Wed May 06 16:47:04 2020 us=239784 TCP/UDP: Preserving recently used remote address: [AF_INET]43.240.90.5:1194
Wed May 06 16:47:04 2020 us=239784 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed May 06 16:47:04 2020 us=239784 UDP link local: (not bound)
Wed May 06 16:47:04 2020 us=239784 UDP link remote: [AF_INET]43.240.90.5:1194
Wed May 06 16:47:04 2020 us=239784 MANAGEMENT: >STATE:1588747624,WAIT,,,,,,
Wed May 06 16:47:04 2020 us=270768 MANAGEMENT: >STATE:1588747624,AUTH,,,,,,
Wed May 06 16:47:04 2020 us=270768 TLS: Initial packet from [AF_INET]43.240.90.5:1194, sid=c9c8dfc1 f11a25f7
Wed May 06 16:47:04 2020 us=848977 VERIFY OK:
Wed May 06 16:47:04 2020 us=848977 VERIFY OK:
Wed May 06 16:47:05 2020 us=145859 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Wed May 06 16:47:05 2020 us=145859 [server] Peer Connection Initiated with [AF_INET]43.240.90.5:1194
Wed May 06 16:47:06 2020 us=245897 MANAGEMENT: >STATE:1588747626,GET_CONFIG,,,,,,
Wed May 06 16:47:06 2020 us=245897 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed May 06 16:47:06 2020 us=308265 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 192.166.0.0 255.255.255.0,dhcp-option DNS 8.8.8.8,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0'
Wed May 06 16:47:06 2020 us=308265 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 06 16:47:06 2020 us=308265 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 06 16:47:06 2020 us=308265 OPTIONS IMPORT: route options modified
Wed May 06 16:47:06 2020 us=308265 OPTIONS IMPORT: route-related options modified
Wed May 06 16:47:06 2020 us=308265 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed May 06 16:47:06 2020 us=308265 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:406 ET:0 EL:3 ]
Wed May 06 16:47:06 2020 us=308265 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 06 16:47:06 2020 us=308265 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed May 06 16:47:06 2020 us=308265 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed May 06 16:47:06 2020 us=308265 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed May 06 16:47:06 2020 us=308265 interactive service msg_channel=628
Wed May 06 16:47:06 2020 us=308265 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=18 HWADDR=e4:b3:18:b4:f1:27
Wed May 06 16:47:06 2020 us=323741 open_tun
Wed May 06 16:47:06 2020 us=323741 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{3DAFAD65-744F-4A62-819B-5BF941B5C800}.tap
Wed May 06 16:47:06 2020 us=323741 TAP-Windows Driver Version 9.24
Wed May 06 16:47:06 2020 us=323741 TAP-Windows MTU=1500
Wed May 06 16:47:06 2020 us=323741 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.3/255.255.255.0 [SUCCEEDED]
Wed May 06 16:47:06 2020 us=323741 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.3/255.255.255.0 on interface {3DAFAD65-744F-4A62-819B-5BF941B5C800} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed May 06 16:47:06 2020 us=323741 DHCP option string: 06040808 0808
Wed May 06 16:47:06 2020 us=323741 Successful ARP Flush on interface [7] {3DAFAD65-744F-4A62-819B-5BF941B5C800}
Wed May 06 16:47:06 2020 us=339326 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed May 06 16:47:06 2020 us=339326 MANAGEMENT: >STATE:1588747626,ASSIGN_IP,,10.8.0.3,,,,
Wed May 06 16:47:11 2020 us=63351 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed May 06 16:47:11 2020 us=63351 C:\Windows\system32\route.exe ADD 43.240.90.5 MASK 255.255.255.255 192.168.43.1
Wed May 06 16:47:11 2020 us=63351 Route addition via service succeeded
Wed May 06 16:47:11 2020 us=63351 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed May 06 16:47:11 2020 us=63351 Route addition via service succeeded
Wed May 06 16:47:11 2020 us=63351 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed May 06 16:47:11 2020 us=78670 Route addition via service succeeded
Wed May 06 16:47:11 2020 us=78670 MANAGEMENT: >STATE:1588747631,ADD_ROUTES,,,,,,
Wed May 06 16:47:11 2020 us=78670 C:\Windows\system32\route.exe ADD 192.166.0.0 MASK 255.255.255.0 10.8.0.1
Wed May 06 16:47:11 2020 us=78670 Route addition via service succeeded
Wed May 06 16:47:11 2020 us=78670 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed May 06 16:47:11 2020 us=78670 Initialization Sequence Completed
Wed May 06 16:47:11 2020 us=78670 MANAGEMENT: >STATE:1588747631,CONNECTED,SUCCESS,10.8.0.3,43.240.90.5,1194,,
