Hi all,
I am usually not requesting help on forums but this time, I am not able to find a solution by searching and trying myself...
It will probably be simple for someone here but it is not for me 😃
Everything was going OK until I had to update my "old" OpenVPN client (OpenVPN.exe 2.3.6) to the new "OpenVPN Connect" (OpenVPNConnect.exe 3.0.0). After the update, all my VPNs were going OK except one... Perhaps the issue is not related to my client side operation but the network admin ensures me that nothing has been changed server side.
After the VPN being established, I see the following routing table:
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.100 192.168.0.110 50
10.1.0.0 255.255.0.0 10.6.66.70 10.6.66.69 257
10.6.66.1 255.255.255.255 10.6.66.70 10.6.66.69 257
10.6.66.68 255.255.255.252 On-link 10.6.66.69 257
10.6.66.69 255.255.255.255 On-link 10.6.66.69 257
10.6.66.71 255.255.255.255 On-link 10.6.66.69 257
10.10.0.0 255.255.255.0 10.6.66.70 10.6.66.69 257
10.100.0.0 255.255.0.0 10.6.66.70 10.6.66.69 257
10.200.1.0 255.255.255.0 10.6.66.70 10.6.66.69 257
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
172.29.128.0 255.255.240.0 On-link 172.29.128.1 271
172.29.128.1 255.255.255.255 On-link 172.29.128.1 271
172.29.143.255 255.255.255.255 On-link 172.29.128.1 271
192.168.0.0 255.255.255.0 On-link 192.168.0.110 306
192.168.0.110 255.255.255.255 On-link 192.168.0.110 306
192.168.0.255 255.255.255.255 On-link 192.168.0.110 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 10.6.66.69 257
224.0.0.0 240.0.0.0 On-link 192.168.0.110 306
224.0.0.0 240.0.0.0 On-link 172.29.128.1 271
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 10.6.66.69 257
255.255.255.255 255.255.255.255 On-link 192.168.0.110 306
255.255.255.255 255.255.255.255 On-link 172.29.128.1 271
192.168.0.110 is my local IP address
192.168.0.100 is my local default gateway (my router at home)
10.6.66.69 is the IP address assigned to me when the VPN is open
When I trace route to 10.6.66.1, I receive:
tracert -d 10.6.66.1
Tracing route to 10.6.66.1 over a maximum of 30 hops
1 65 ms 1 ms 1 ms 192.168.0.100
2 * * * Request timed out.
ICMP is open and my colleague not having the issue are able to ping the open VPN server.
What I don't get is why is the trace route show me that it uses my local default gateway instead of my VPN interface?
Do you see something wrong in my routing table?
Here is the Open VPN client log too:
⏎10/29/2020, 1:08:46 PM OpenVPN core 3.git::3e56f9a6 win x86_64 64-bit built on Aug 21 2020 17:59:05
⏎10/29/2020, 1:08:46 PM Frame=512/2048/512 mssfix-ctrl=1250
⏎10/29/2020, 1:08:46 PM UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
14 [verb] [3]
⏎10/29/2020, 1:08:46 PM Contacting x.x.x.x:1194 via UDP
⏎10/29/2020, 1:08:46 PM WinCommandAgent: transmitting bypass route to x.x.x.x
{
"host" : "x.x.x.x",
"ipv6" : false
}
⏎10/29/2020, 1:08:46 PM EVENT: RESOLVE ⏎10/29/2020, 1:08:46 PM EVENT: WAIT
⏎10/29/2020, 1:08:46 PM Connecting to [x.x.x.x]:1194 (x.x.x.x) via UDPv4
⏎10/29/2020, 1:08:46 PM EVENT: CONNECTING ⏎10/29/2020, 1:08:46 PM Tunnel Options:V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client
⏎10/29/2020, 1:08:46 PM Creds: UsernameEmpty/PasswordEmpty
⏎10/29/2020, 1:08:46 PM Peer Info:
IV_VER=3.git::3e56f9a6
IV_PLAT=win
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_LZO_STUB=1
IV_COMP_STUB=1
IV_COMP_STUBv2=1
IV_AUTO_SESS=1
IV_GUI_VER=OCWindows_3.2.1-1180
IV_SSO=openurl
IV_BS64DL=1
⏎10/29/2020, 1:08:47 PM SSL Handshake: CN=server, TLSv1, cipher SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
⏎10/29/2020, 1:08:47 PM Session is ACTIVE
⏎10/29/2020, 1:08:47 PM Sending PUSH_REQUEST to server...
⏎10/29/2020, 1:08:47 PM EVENT: GET_CONFIG
⏎10/29/2020, 1:08:47 PM OPTIONS:
0 [route] [10.1.0.0] [255.255.0.0]
1 [route] [10.100.0.0] [255.255.0.0]
2 [route] [10.10.0.0] [255.255.255.0]
3 [route] [10.200.1.0] [255.255.255.0]
4 [route] [10.6.66.1]
5 [topology] [net30]
6 [ping] [10]
7 [ping-restart] [120]
8 [ifconfig] [10.6.66.69] [10.6.66.70]
⏎10/29/2020, 1:08:47 PM PROTOCOL OPTIONS:
cipher: BF-CBC
digest: SHA1
compress: LZO_STUB
peer ID: -1
⏎10/29/2020, 1:08:47 PM EVENT: ASSIGN_IP
⏎10/29/2020, 1:08:47 PM CAPTURED OPTIONS:
Session Name: x.x.x.x
Layer: OSI_LAYER_3
Remote Address: x.x.x.x
Tunnel Addresses:
10.6.66.69/30 -> 10.6.66.70 [net30]
Reroute Gateway: IPv4=0 IPv6=0 flags=[ IPv4 ]
Block IPv6: no
Add Routes:
10.1.0.0/16
10.100.0.0/16
10.10.0.0/24
10.200.1.0/24
10.6.66.1/32
Exclude Routes:
DNS Servers:
Search Domains:
⏎10/29/2020, 1:08:47 PM SetupClient: transmitting tun setup list to \\.\pipe\agent_ovpnconnect
{
"confirm_event" : "fc0b000000000000",
"destroy_event" : "b00b000000000000",
"tun" :
{
"adapter_domain_suffix" : "",
"add_routes" :
[
{
"address" : "10.1.0.0",
"gateway" : "",
"ipv6" : false,
"metric" : -1,
"net30" : false,
"prefix_length" : 16
},
{
"address" : "10.100.0.0",
"gateway" : "",
"ipv6" : false,
"metric" : -1,
"net30" : false,
"prefix_length" : 16
},
{
"address" : "10.10.0.0",
"gateway" : "",
"ipv6" : false,
"metric" : -1,
"net30" : false,
"prefix_length" : 24
},
{
"address" : "10.200.1.0",
"gateway" : "",
"ipv6" : false,
"metric" : -1,
"net30" : false,
"prefix_length" : 24
},
{
"address" : "10.6.66.1",
"gateway" : "",
"ipv6" : false,
"metric" : -1,
"net30" : false,
"prefix_length" : 32
}
],
"block_ipv6" : false,
"layer" : 3,
"mtu" : 0,
"remote_address" :
{
"address" : "x.x.x.x",
"ipv6" : false
},
"reroute_gw" :
{
"flags" : 256,
"ipv4" : false,
"ipv6" : false
},
"route_metric_default" : -1,
"session_name" : "x.x.x.x",
"tunnel_address_index_ipv4" : 0,
"tunnel_address_index_ipv6" : -1,
"tunnel_addresses" :
[
{
"address" : "10.6.66.69",
"gateway" : "10.6.66.70",
"ipv6" : false,
"metric" : -1,
"net30" : true,
"prefix_length" : 30
}
]
},
"wintun" : false
}
POST np://[\\.\pipe\agent_ovpnconnect]/tun-setup : 200 OK
TAP ADAPTERS:
guid='{7502DBA3-5108-4CE6-A07B-3BBEDE997C58}' index=15 name='Local Area Connection'
Open TAP device "Local Area Connection" PATH="\\.\Global\{7502DBA3-5108-4CE6-A07B-3BBEDE997C58}.tap" SUCCEEDED
TAP-Windows Driver Version 9.24
ActionDeleteAllRoutesOnInterface iface_index=15
netsh interface ip set interface 15 metric=1
Ok.
netsh interface ip set address 15 static 10.6.66.69 255.255.255.252 gateway=10.6.66.70 store=active
netsh interface ip add route 10.1.0.0/16 15 10.6.66.70 store=active
Ok.
netsh interface ip add route 10.100.0.0/16 15 10.6.66.70 store=active
Ok.
netsh interface ip add route 10.10.0.0/24 15 10.6.66.70 store=active
Ok.
netsh interface ip add route 10.200.1.0/24 15 10.6.66.70 store=active
Ok.
netsh interface ip add route 10.6.66.1/32 15 10.6.66.70 store=active
Ok.
ipconfig /flushdns
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
TAP handle: dc0a000000000000
⏎10/29/2020, 1:08:47 PM Connected via TUN_WIN
⏎10/29/2020, 1:08:47 PM Per-Key Data Limit: 48000000/48000000
⏎10/29/2020, 1:08:47 PM LZO-ASYM init swap=0 asym=1
⏎10/29/2020, 1:08:47 PM Comp-stub init swap=0
⏎10/29/2020, 1:08:47 PM EVENT: CONNECTED x.x.x.x:1194 (x.x.x.x) via /UDPv4 on TUN_WIN/10.6.66.69/ gw=[10.6.66.70/]⏎
Thanks in advance for any help!
Regards,
Olivier
