Hi folks…I originally posted this in Server Administration, but I think it belongs here instead so I'm re-posting along with a few updates. Anyway, I'm looking for some assistance…I’m pretty good with basic networking, but with more advanced things I know just enough to be dangerous. I’ve been using OpenVPN for several years with no issues, using a WRT-1900ACSv2 router with DD-WRT installed. However, I recently moved and my new ISP requires me to use their router (Comtrend/NexusLink 3120). So, I’m trying to run my setup like this:
My local network ---> My router ---> ISP router ---> Internet
Thankfully, they gave me the admin username and password for their router, so I was able to setup port forwarding. I know it works because when connecting my laptop to my phone’s LTE service via hotspot, I can telnet/SSH into the router, as well as use a PPTP VPN. Also of note, I don’t have a static IP address and their router firmware is neutered and does not have dynamic DNS capability. So, I am still using the dynamic DNS on my router, along with Dyn Updater to continuously update the IP address. Again, I know this works because telnet/SSH/PPTP work, with all traffic routing through the PPTP VPN. I also have access to my network share. However, despite my success in getting telnet/SSH/PPTP VPN to work, I simply cannot get OpenVPN to work. I can successfully connect, but once connected I can’t access the internet or my network share. I’m guessing it has something to do with the router and server configurations. Below are some details, and any help would be immensely appreciated!
- My router is connected to their router with a static IP (192.168.231.248, subnet 255.255.255.0, gateway 192.168.231.1). Their router is running DHCP, but there are no DHCP clients.
- I’ve assigned my router 192.168.0.1, with a subnet mask of 255.255.255.0 and gateway 192.168.0.1. My router is also running DHCP. I’ve tried with the SPI firewall both enabled and disabled and neither setting works. At my previous address, with no ISP router, I had to have it disabled for OpenVPN to work.
- OpenVPN successfully connects and there appear to be no issues with keys/certs/ciphers/hash/encryption.
- Server config (via DD-WRT OpenVPN menu items):
OpenVPN: Enable
Start Type: WAN Up
Config as: Server
Server Mode: Router (TUN)
Network: 192.168.231.1 (*should this be my LAN router IP 192.168.0.1??? Tried it and it doesn’t work)
Netmask: 255.255.255.0
Port: 1194 (*this is port forwarded on their router and I’m confident it’s working since OpenVPN connects)
Tunnel Protocol: UDP
Encryption Cipher: AES 128 CBC
Hash Algorithm: SHA256
Advanced Options: Enable
TLS Cipher: None
LZO Compression: Adaptive
Redirect Default Gateway: Enable (*do I need to change this since I’m behind their router???)
Allow Client to Client: Enable
Allow Duplicate CN: Enable
Tunnel MTU Setting: 1500
- Server config (via additional config option in DD-WRT OpenVPN daemon):
server 10.8.0.0 255.255.255.0
push "route 192.168.0.0 255.255.255.0"
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.0"
float
topology subnet
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
IP Tables
iptables -I INPUT 1 -p udp –-dport 1194 -j ACCEPT
iptables -I INPUT 1 -p tcp –-dport 1194 -j ACCEPT
iptables -I FORWARD 1 –-source 192.168.0.1/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
- Client config:
client
dev tun0
proto udp
remote ###.###.###.### 1194 (*actual remote address hashed out for security…)
resolv-retry infinite
nobind
persist-key
persist-tun
redirect-gateway def1
ca ca.crt
cert XXXX.crt (*filename hashed out for security...)
key xxxx.key (*filename hashed out for security...)
#remote-cert-tls server
cipher AES-128-CBC
auth SHA256
comp-lzo
verb 4
allow-recursive-routing
float
topology subnet
- Log file:
Fri May 08 11:02:14 2020 us=885920 Current Parameter Settings:
Fri May 08 11:02:14 2020 us=886918 config = 'XX.ovpn' (*filename hashed out for security...)
Fri May 08 11:02:14 2020 us=887058 mode = 0
Fri May 08 11:02:14 2020 us=887058 show_ciphers = DISABLED
Fri May 08 11:02:14 2020 us=887058 show_digests = DISABLED
Fri May 08 11:02:14 2020 us=887058 show_engines = DISABLED
Fri May 08 11:02:14 2020 us=887058 genkey = DISABLED
Fri May 08 11:02:14 2020 us=887058 key_pass_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 show_tls_ciphers = DISABLED
Fri May 08 11:02:14 2020 us=887058 connect_retry_max = 0
Fri May 08 11:02:14 2020 us=887058 Connection profiles [0]:
Fri May 08 11:02:14 2020 us=887058 proto = udp
Fri May 08 11:02:14 2020 us=887058 local = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 local_port = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 remote = 'XXXXXXXXXXXXXXXXXXXXX' (*address hashed out for security...)
Fri May 08 11:02:14 2020 us=887058 remote_port = '1194'
Fri May 08 11:02:14 2020 us=887058 remote_float = ENABLED
Fri May 08 11:02:14 2020 us=887058 bind_defined = DISABLED
Fri May 08 11:02:14 2020 us=887058 bind_local = DISABLED
Fri May 08 11:02:14 2020 us=887058 bind_ipv6_only = DISABLED
Fri May 08 11:02:14 2020 us=887058 connect_retry_seconds = 5
Fri May 08 11:02:14 2020 us=887058 connect_timeout = 120
Fri May 08 11:02:14 2020 us=887058 socks_proxy_server = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 socks_proxy_port = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 tun_mtu = 1500
Fri May 08 11:02:14 2020 us=887058 tun_mtu_defined = ENABLED
Fri May 08 11:02:14 2020 us=887058 link_mtu = 1500
Fri May 08 11:02:14 2020 us=887058 link_mtu_defined = DISABLED
Fri May 08 11:02:14 2020 us=887058 tun_mtu_extra = 0
Fri May 08 11:02:14 2020 us=887058 tun_mtu_extra_defined = DISABLED
Fri May 08 11:02:14 2020 us=887058 mtu_discover_type = -1
Fri May 08 11:02:14 2020 us=887058 fragment = 0
Fri May 08 11:02:14 2020 us=887058 mssfix = 1450
Fri May 08 11:02:14 2020 us=887058 explicit_exit_notification = 0
Fri May 08 11:02:14 2020 us=887058 Connection profiles END
Fri May 08 11:02:14 2020 us=887058 remote_random = DISABLED
Fri May 08 11:02:14 2020 us=887058 ipchange = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 dev = 'tun0'
Fri May 08 11:02:14 2020 us=887058 dev_type = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 dev_node = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 lladdr = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 topology = 3
Fri May 08 11:02:14 2020 us=887058 ifconfig_local = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 ifconfig_remote_netmask = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 ifconfig_noexec = DISABLED
Fri May 08 11:02:14 2020 us=887058 ifconfig_nowarn = DISABLED
Fri May 08 11:02:14 2020 us=887058 ifconfig_ipv6_local = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 ifconfig_ipv6_netbits = 0
Fri May 08 11:02:14 2020 us=887058 ifconfig_ipv6_remote = '[UNDEF]'
Fri May 08 11:02:14 2020 us=887058 shaper = 0
Fri May 08 11:02:14 2020 us=887058 mtu_test = 0
Fri May 08 11:02:14 2020 us=887058 mlock = DISABLED
Fri May 08 11:02:14 2020 us=887058 keepalive_ping = 0
Fri May 08 11:02:14 2020 us=887058 keepalive_timeout = 0
Fri May 08 11:02:14 2020 us=887058 inactivity_timeout = 0
Fri May 08 11:02:14 2020 us=887058 ping_send_timeout = 0
Fri May 08 11:02:14 2020 us=887058 ping_rec_timeout = 0
Fri May 08 11:02:14 2020 us=887058 ping_rec_timeout_action = 0
Fri May 08 11:02:14 2020 us=887058 ping_timer_remote = DISABLED
Fri May 08 11:02:14 2020 us=887058 remap_sigusr1 = 0
Fri May 08 11:02:14 2020 us=887058 persist_tun = ENABLED
Fri May 08 11:02:14 2020 us=887058 persist_local_ip = DISABLED
Fri May 08 11:02:14 2020 us=887058 persist_remote_ip = DISABLED
Fri May 08 11:02:14 2020 us=887058 persist_key = ENABLED
Fri May 08 11:02:14 2020 us=887058 passtos = DISABLED
Fri May 08 11:02:14 2020 us=888042 resolve_retry_seconds = 1000000000
Fri May 08 11:02:14 2020 us=888042 resolve_in_advance = DISABLED
Fri May 08 11:02:14 2020 us=888042 username = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 groupname = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 chroot_dir = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 cd_dir = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 writepid = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 up_script = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 down_script = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 down_pre = DISABLED
Fri May 08 11:02:14 2020 us=888188 up_restart = DISABLED
Fri May 08 11:02:14 2020 us=888188 up_delay = DISABLED
Fri May 08 11:02:14 2020 us=888188 daemon = DISABLED
Fri May 08 11:02:14 2020 us=888188 inetd = 0
Fri May 08 11:02:14 2020 us=888188 log = ENABLED
Fri May 08 11:02:14 2020 us=888188 suppress_timestamps = DISABLED
Fri May 08 11:02:14 2020 us=888188 machine_readable_output = DISABLED
Fri May 08 11:02:14 2020 us=888188 nice = 0
Fri May 08 11:02:14 2020 us=888188 verbosity = 4
Fri May 08 11:02:14 2020 us=888188 mute = 0
Fri May 08 11:02:14 2020 us=888188 gremlin = 0
Fri May 08 11:02:14 2020 us=888188 status_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 status_file_version = 1
Fri May 08 11:02:14 2020 us=888188 status_file_update_freq = 60
Fri May 08 11:02:14 2020 us=888188 occ = ENABLED
Fri May 08 11:02:14 2020 us=888188 rcvbuf = 0
Fri May 08 11:02:14 2020 us=888188 sndbuf = 0
Fri May 08 11:02:14 2020 us=888188 sockflags = 0
Fri May 08 11:02:14 2020 us=888188 fast_io = DISABLED
Fri May 08 11:02:14 2020 us=888188 comp.alg = 2
Fri May 08 11:02:14 2020 us=888188 comp.flags = 1
Fri May 08 11:02:14 2020 us=888188 route_script = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 route_default_gateway = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 route_default_metric = 0
Fri May 08 11:02:14 2020 us=888188 route_noexec = DISABLED
Fri May 08 11:02:14 2020 us=888188 route_delay = 5
Fri May 08 11:02:14 2020 us=888188 route_delay_window = 30
Fri May 08 11:02:14 2020 us=888188 route_delay_defined = ENABLED
Fri May 08 11:02:14 2020 us=888188 route_nopull = DISABLED
Fri May 08 11:02:14 2020 us=888188 route_gateway_via_dhcp = DISABLED
Fri May 08 11:02:14 2020 us=888188 allow_pull_fqdn = DISABLED
Fri May 08 11:02:14 2020 us=888188 Pull filters:
Fri May 08 11:02:14 2020 us=888188 ignore "route-method"
Fri May 08 11:02:14 2020 us=888188 [redirect_default_gateway local=0]
Fri May 08 11:02:14 2020 us=888188 management_addr = '127.0.0.1'
Fri May 08 11:02:14 2020 us=888188 management_port = '25340'
Fri May 08 11:02:14 2020 us=888188 management_user_pass = 'stdin'
Fri May 08 11:02:14 2020 us=888188 management_log_history_cache = 250
Fri May 08 11:02:14 2020 us=888188 management_echo_buffer_size = 100
Fri May 08 11:02:14 2020 us=888188 management_write_peer_info_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 management_client_user = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 management_client_group = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 management_flags = 6
Fri May 08 11:02:14 2020 us=888188 shared_secret_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 key_direction = not set
Fri May 08 11:02:14 2020 us=888188 ciphername = 'AES-128-CBC'
Fri May 08 11:02:14 2020 us=888188 ncp_enabled = ENABLED
Fri May 08 11:02:14 2020 us=888188 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri May 08 11:02:14 2020 us=888188 authname = 'SHA256'
Fri May 08 11:02:14 2020 us=888188 prng_hash = 'SHA1'
Fri May 08 11:02:14 2020 us=888188 prng_nonce_secret_len = 16
Fri May 08 11:02:14 2020 us=888188 keysize = 0
Fri May 08 11:02:14 2020 us=888188 engine = DISABLED
Fri May 08 11:02:14 2020 us=888188 replay = ENABLED
Fri May 08 11:02:14 2020 us=888188 mute_replay_warnings = DISABLED
Fri May 08 11:02:14 2020 us=888188 replay_window = 64
Fri May 08 11:02:14 2020 us=888188 replay_time = 15
Fri May 08 11:02:14 2020 us=888188 packet_id_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 use_iv = ENABLED
Fri May 08 11:02:14 2020 us=888188 test_crypto = DISABLED
Fri May 08 11:02:14 2020 us=888188 tls_server = DISABLED
Fri May 08 11:02:14 2020 us=888188 tls_client = ENABLED
Fri May 08 11:02:14 2020 us=888188 key_method = 2
Fri May 08 11:02:14 2020 us=888188 ca_file = 'ca.crt'
Fri May 08 11:02:14 2020 us=888188 ca_path = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 dh_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 cert_file = 'myrmidon.crt'
Fri May 08 11:02:14 2020 us=888188 extra_certs_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 priv_key_file = 'myrmidon.key'
Fri May 08 11:02:14 2020 us=888188 pkcs12_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 cryptoapi_cert = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 cipher_list = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 cipher_list_tls13 = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 tls_cert_profile = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 tls_verify = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 tls_export_cert = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 verify_x509_type = 0
Fri May 08 11:02:14 2020 us=888188 verify_x509_name = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 crl_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 ns_cert_type = 0
Fri May 08 11:02:14 2020 us=888188 remote_cert_ku[i] = 0
Fri May 08 11:02:14 2020 us=888188 remote_cert_eku = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 ssl_flags = 0
Fri May 08 11:02:14 2020 us=888188 tls_timeout = 2
Fri May 08 11:02:14 2020 us=888188 renegotiate_bytes = -1
Fri May 08 11:02:14 2020 us=888188 renegotiate_packets = 0
Fri May 08 11:02:14 2020 us=888188 renegotiate_seconds = 3600
Fri May 08 11:02:14 2020 us=888188 handshake_window = 60
Fri May 08 11:02:14 2020 us=888188 transition_window = 3600
Fri May 08 11:02:14 2020 us=888188 single_session = DISABLED
Fri May 08 11:02:14 2020 us=888188 push_peer_info = DISABLED
Fri May 08 11:02:14 2020 us=888188 tls_exit = DISABLED
Fri May 08 11:02:14 2020 us=888188 tls_auth_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 tls_crypt_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 pkcs11_protected_authentication = DISABLED
Fri May 08 11:02:14 2020 us=888188 pkcs11_private_mode = 00000000
Fri May 08 11:02:14 2020 us=888188 pkcs11_cert_private = DISABLED
Fri May 08 11:02:14 2020 us=888188 pkcs11_pin_cache_period = -1
Fri May 08 11:02:14 2020 us=888188 pkcs11_id = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 pkcs11_id_management = DISABLED
Fri May 08 11:02:14 2020 us=888188 server_network = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 server_netmask = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 server_network_ipv6 = ::
Fri May 08 11:02:14 2020 us=888188 server_netbits_ipv6 = 0
Fri May 08 11:02:14 2020 us=888188 server_bridge_ip = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 server_bridge_netmask = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 server_bridge_pool_start = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 server_bridge_pool_end = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 ifconfig_pool_defined = DISABLED
Fri May 08 11:02:14 2020 us=888188 ifconfig_pool_start = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 ifconfig_pool_end = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 ifconfig_pool_netmask = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 ifconfig_pool_persist_filename = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 ifconfig_pool_persist_refresh_freq = 600
Fri May 08 11:02:14 2020 us=888188 ifconfig_ipv6_pool_defined = DISABLED
Fri May 08 11:02:14 2020 us=888188 ifconfig_ipv6_pool_base = ::
Fri May 08 11:02:14 2020 us=888188 ifconfig_ipv6_pool_netbits = 0
Fri May 08 11:02:14 2020 us=888188 n_bcast_buf = 256
Fri May 08 11:02:14 2020 us=888188 tcp_queue_limit = 64
Fri May 08 11:02:14 2020 us=888188 real_hash_size = 256
Fri May 08 11:02:14 2020 us=888188 virtual_hash_size = 256
Fri May 08 11:02:14 2020 us=888188 client_connect_script = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 learn_address_script = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 client_disconnect_script = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 client_config_dir = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 ccd_exclusive = DISABLED
Fri May 08 11:02:14 2020 us=888188 tmp_dir = 'xxxxxxxxxxxxxxxxxxx' (*hashed out for security...)
Fri May 08 11:02:14 2020 us=888188 push_ifconfig_defined = DISABLED
Fri May 08 11:02:14 2020 us=888188 push_ifconfig_local = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 push_ifconfig_remote_netmask = 0.0.0.0
Fri May 08 11:02:14 2020 us=888188 push_ifconfig_ipv6_defined = DISABLED
Fri May 08 11:02:14 2020 us=888188 push_ifconfig_ipv6_local = ::/0
Fri May 08 11:02:14 2020 us=888188 push_ifconfig_ipv6_remote = ::
Fri May 08 11:02:14 2020 us=888188 enable_c2c = DISABLED
Fri May 08 11:02:14 2020 us=888188 duplicate_cn = DISABLED
Fri May 08 11:02:14 2020 us=888188 cf_max = 0
Fri May 08 11:02:14 2020 us=888188 cf_per = 0
Fri May 08 11:02:14 2020 us=888188 max_clients = 1024
Fri May 08 11:02:14 2020 us=888188 max_routes_per_client = 256
Fri May 08 11:02:14 2020 us=888188 auth_user_pass_verify_script = '[UNDEF]'
Fri May 08 11:02:14 2020 us=888188 auth_user_pass_verify_script_via_file = DISABLED
Fri May 08 11:02:14 2020 us=888188 auth_token_generate = DISABLED
Fri May 08 11:02:14 2020 us=893161 auth_token_lifetime = 0
Fri May 08 11:02:14 2020 us=893226 client = ENABLED
Fri May 08 11:02:14 2020 us=893226 pull = ENABLED
Fri May 08 11:02:14 2020 us=893226 auth_user_pass_file = '[UNDEF]'
Fri May 08 11:02:14 2020 us=893226 show_net_up = DISABLED
Fri May 08 11:02:14 2020 us=893226 route_method = 3
Fri May 08 11:02:14 2020 us=893226 block_outside_dns = DISABLED
Fri May 08 11:02:14 2020 us=893226 ip_win32_defined = DISABLED
Fri May 08 11:02:14 2020 us=893226 ip_win32_type = 3
Fri May 08 11:02:14 2020 us=893226 dhcp_masq_offset = 0
Fri May 08 11:02:14 2020 us=893226 dhcp_lease_time = 31536000
Fri May 08 11:02:14 2020 us=893226 tap_sleep = 0
Fri May 08 11:02:14 2020 us=893226 dhcp_options = DISABLED
Fri May 08 11:02:14 2020 us=893226 dhcp_renew = DISABLED
Fri May 08 11:02:14 2020 us=893226 dhcp_pre_release = DISABLED
Fri May 08 11:02:14 2020 us=893226 domain = '[UNDEF]'
Fri May 08 11:02:14 2020 us=893226 netbios_scope = '[UNDEF]'
Fri May 08 11:02:14 2020 us=893226 netbios_node_type = 0
Fri May 08 11:02:14 2020 us=893226 disable_nbt = DISABLED
Fri May 08 11:02:14 2020 us=893226 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Fri May 08 11:02:14 2020 us=893226 Windows version 6.2 (Windows 8 or greater) 64bit
Fri May 08 11:02:14 2020 us=893226 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Enter Management Password:
Fri May 08 11:02:14 2020 us=895222 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri May 08 11:02:14 2020 us=895222 Need hold release from management interface, waiting...
Fri May 08 11:02:15 2020 us=191401 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri May 08 11:02:15 2020 us=294451 MANAGEMENT: CMD 'state on'
Fri May 08 11:02:15 2020 us=294451 MANAGEMENT: CMD 'log all on'
Fri May 08 11:02:15 2020 us=949131 MANAGEMENT: CMD 'echo all on'
Fri May 08 11:02:15 2020 us=953296 MANAGEMENT: CMD 'bytecount 5'
Fri May 08 11:02:15 2020 us=956139 MANAGEMENT: CMD 'hold off'
Fri May 08 11:02:15 2020 us=960188 MANAGEMENT: CMD 'hold release'
Fri May 08 11:02:15 2020 us=960355 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri May 08 11:02:15 2020 us=969622 LZO compression initializing
Fri May 08 11:02:15 2020 us=969622 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Fri May 08 11:02:15 2020 us=969622 MANAGEMENT: >STATE:1588899735,RESOLVE,,,,,,
Fri May 08 11:02:16 2020 us=444508 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Fri May 08 11:02:16 2020 us=448060 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-client'
Fri May 08 11:02:16 2020 us=448060 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-server'
Fri May 08 11:02:16 2020 us=448060 TCP/UDP: Preserving recently used remote address: [AF_INET]202.151.66.83:1194
Fri May 08 11:02:16 2020 us=448060 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri May 08 11:02:16 2020 us=448060 UDP link local: (not bound)
Fri May 08 11:02:16 2020 us=449050 UDP link remote: [AF_INET]202.151.66.83:1194
Fri May 08 11:02:16 2020 us=449050 MANAGEMENT: >STATE:1588899736,WAIT,,,,,,
Fri May 08 11:02:16 2020 us=491117 MANAGEMENT: >STATE:1588899736,AUTH,,,,,,
Fri May 08 11:02:16 2020 us=491117 TLS: Initial packet from [AF_INET]202.151.66.83:1194, sid=71ba8860 649a209f
Fri May 08 11:02:17 2020 us=102823 VERIFY OK xxxxxxxxxxxxxxxx (*hashed out for security...)
Fri May 08 11:02:17 2020 us=102823 VERIFY OK xxxxxxxxxxxxxxxx (*hashed out for security...)
Fri May 08 11:02:17 2020 us=466864 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Fri May 08 11:02:17 2020 us=466864 [server] Peer Connection Initiated with [AF_INET]202.151.66.83:1194
Fri May 08 11:02:18 2020 us=640680 MANAGEMENT: >STATE:1588899738,GET_CONFIG,,,,,,
Fri May 08 11:02:18 2020 us=640680 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri May 08 11:02:18 2020 us=679679 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 192.168.0.0 255.255.255.0,redirect-gateway def1,dhcp-option DNS 10.8.0.0,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Fri May 08 11:02:18 2020 us=682149 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 08 11:02:18 2020 us=682149 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 08 11:02:18 2020 us=682149 OPTIONS IMPORT: route options modified
Fri May 08 11:02:18 2020 us=682149 OPTIONS IMPORT: route-related options modified
Fri May 08 11:02:18 2020 us=682149 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri May 08 11:02:18 2020 us=682149 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:406 ET:0 EL:3 ]
Fri May 08 11:02:18 2020 us=682149 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri May 08 11:02:18 2020 us=682149 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri May 08 11:02:18 2020 us=682149 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri May 08 11:02:18 2020 us=682149 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri May 08 11:02:18 2020 us=682149 interactive service msg_channel=708
Fri May 08 11:02:18 2020 us=693732 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=18 HWADDR=e4:b3:18:b4:f1:27
Fri May 08 11:02:18 2020 us=736330 open_tun
Fri May 08 11:02:18 2020 us=740318 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{3DAFAD65-744F-4A62-819B-5BF941B5C800}.tap
Fri May 08 11:02:18 2020 us=740318 TAP-Windows Driver Version 9.24
Fri May 08 11:02:18 2020 us=740318 TAP-Windows MTU=1500
Fri May 08 11:02:18 2020 us=753337 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Fri May 08 11:02:18 2020 us=753337 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {3DAFAD65-744F-4A62-819B-5BF941B5C800} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Fri May 08 11:02:18 2020 us=753337 DHCP option string: 06040a08 0000
Fri May 08 11:02:18 2020 us=756887 Successful ARP Flush on interface [7] {3DAFAD65-744F-4A62-819B-5BF941B5C800}
Fri May 08 11:02:18 2020 us=798421 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri May 08 11:02:18 2020 us=798421 MANAGEMENT: >STATE:1588899738,ASSIGN_IP,,10.8.0.2,,,,
Fri May 08 11:02:23 2020 us=183723 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri May 08 11:02:23 2020 us=183723 C:\Windows\system32\route.exe ADD 202.151.66.83 MASK 255.255.255.255 192.168.43.1
Fri May 08 11:02:23 2020 us=191204 Route addition via service succeeded
Fri May 08 11:02:23 2020 us=191204 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Fri May 08 11:02:23 2020 us=200510 Route addition via service succeeded
Fri May 08 11:02:23 2020 us=200510 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Fri May 08 11:02:23 2020 us=210721 Route addition via service succeeded
Fri May 08 11:02:23 2020 us=210721 MANAGEMENT: >STATE:1588899743,ADD_ROUTES,,,,,,
Fri May 08 11:02:23 2020 us=210721 C:\Windows\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.8.0.1
Fri May 08 11:02:23 2020 us=221769 Route addition via service succeeded
Fri May 08 11:02:23 2020 us=221769 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 08 11:02:23 2020 us=221769 Initialization Sequence Completed
Fri May 08 11:02:23 2020 us=221769 MANAGEMENT: >STATE:1588899743,CONNECTED,SUCCESS,10.8.0.2,202.151.66.83,1194,,
