OpenVPN Client works on Windows, but not Linux

bgommel4

Hi,
I have a OpenVPN server set up on my Asus RT-AC66U B1 router. I do this so I can access files on my LAN from anywhere. I export the config file for a client computer. I am able to install OpenVPN onto Windows 10, import the file, connect and access all the files on my LAN I need. When I try to import a new VPN connection on Linux, it always fails to connect. I am using Linux Mint 20 and gnome networking manager. I simply open the network manager, click Import from file, enter my username and password and hit connect. When I try to run it from a command line, sudo openvpn --config cient.ovpn,I get stuck in a continious loop of this:

Initialization Sequence Completed
Inactivity timeout (--ping-restart), restarting
[soft,ping-restart] received, process restarting

This is the content of my config file:

remote xxx.xxx.xxx.xxx 1194
float
nobind
proto udp
dev tap

# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap

sndbuf 0
rcvbuf 0
keepalive 10 30

# for OpenVPN 2.4 or older
comp-lzo yes
# for OpenVPN 2.4 or newer
;compress lzo

auth-user-pass
client
auth SHA256
cipher AES-256-CBC
remote-cert-tls server

It then lists a ca, a cert and a key. I have tried disabling my ufw firewall and uninstalling and re-installing OpenVPN. It works just fine on Windows.
Any ideas?
Thanks

TinCanTech

See your complete log file at --verb 4

bgommel4

Update:
I am able to ping devices on my LAN but I get a "Packet Filtered". I can not connected shared drives
My log file is just a continious loop of:
Starting OpenVPN service
Finished OpenVPN service

300000

you want to help but try to hide everything and hope people in here help you that is very good because nobody keen on helping you at all . when people asking give log out let check what is giong on but what? nothing and hope for something.

bgommel4

I am sorry, I thought I have provided what is necessary. What information do you need? I am new to OpenVPN, I apologize if I misunderstand anything. The only thing I have hidden is my remote IP and the certificates for obvious reasons. I am simply providing the information I thought is relevant such as config files, outputs and how/what I am trying to do.
I I used this command to view the log file:
grep VPN /var/log/syslog
This is the output:
systemd[1]: Starting OpenVPN service...
systemd[1]: Finished openVPN service.
systemd[1]: Starting OpenVPN service...
systemd[1]: Finished openVPN service.

As I stated, that is my log file.
There is nothing under /etc/openvpn/client.
I came on here for community support and I am willing to give information as necessary. As I have done. I mean no disrespect.
Please let me know what you want me to show and how I can show it.
Thank you

Pippin

Read here:
https://forums.openvpn.net/viewtopic.php?t=22603

bgommel4

Thank you for posting that and being helpful.
Here is the output of adding verb 4 to my client config file.

Mon Nov  2 12:27:36 2020 us=505485 Current Parameter Settings:
Mon Nov  2 12:27:36 2020 us=505541   config = 'client.ovpn'
Mon Nov  2 12:27:36 2020 us=505572   mode = 0
Mon Nov  2 12:27:36 2020 us=505592   persist_config = DISABLED
Mon Nov  2 12:27:36 2020 us=505604   persist_mode = 1
Mon Nov  2 12:27:36 2020 us=505624   show_ciphers = DISABLED
Mon Nov  2 12:27:36 2020 us=505646   show_digests = DISABLED
Mon Nov  2 12:27:36 2020 us=505667   show_engines = DISABLED
Mon Nov  2 12:27:36 2020 us=505689   genkey = DISABLED
Mon Nov  2 12:27:36 2020 us=505710   key_pass_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=505740   show_tls_ciphers = DISABLED
Mon Nov  2 12:27:36 2020 us=505762   connect_retry_max = 0
Mon Nov  2 12:27:36 2020 us=505784 Connection profiles [0]:
Mon Nov  2 12:27:36 2020 us=505814   proto = udp
Mon Nov  2 12:27:36 2020 us=505843   local = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=505871   local_port = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=505899   remote = 'xxx.xxx.xxx.xxx'
Mon Nov  2 12:27:36 2020 us=505927   remote_port = '1194'
Mon Nov  2 12:27:36 2020 us=505956   remote_float = ENABLED
Mon Nov  2 12:27:36 2020 us=505983   bind_defined = DISABLED
Mon Nov  2 12:27:36 2020 us=506012   bind_local = DISABLED
Mon Nov  2 12:27:36 2020 us=506039   bind_ipv6_only = DISABLED
Mon Nov  2 12:27:36 2020 us=506067   connect_retry_seconds = 5
Mon Nov  2 12:27:36 2020 us=506095   connect_timeout = 120
Mon Nov  2 12:27:36 2020 us=506123   socks_proxy_server = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506151   socks_proxy_port = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506179   tun_mtu = 1500
Mon Nov  2 12:27:36 2020 us=506207   tun_mtu_defined = ENABLED
Mon Nov  2 12:27:36 2020 us=506235   link_mtu = 1500
Mon Nov  2 12:27:36 2020 us=506303   link_mtu_defined = DISABLED
Mon Nov  2 12:27:36 2020 us=506334   tun_mtu_extra = 32
Mon Nov  2 12:27:36 2020 us=506362   tun_mtu_extra_defined = ENABLED
Mon Nov  2 12:27:36 2020 us=506390   mtu_discover_type = -1
Mon Nov  2 12:27:36 2020 us=506419   fragment = 0
Mon Nov  2 12:27:36 2020 us=506447   mssfix = 1450
Mon Nov  2 12:27:36 2020 us=506475   explicit_exit_notification = 0
Mon Nov  2 12:27:36 2020 us=506503 Connection profiles END
Mon Nov  2 12:27:36 2020 us=506561   remote_random = DISABLED
Mon Nov  2 12:27:36 2020 us=506604   ipchange = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506626   dev = 'tap'
Mon Nov  2 12:27:36 2020 us=506647   dev_type = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506668   dev_node = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506699   lladdr = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506728   topology = 1
Mon Nov  2 12:27:36 2020 us=506756   ifconfig_local = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506784   ifconfig_remote_netmask = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506812   ifconfig_noexec = DISABLED
Mon Nov  2 12:27:36 2020 us=506840   ifconfig_nowarn = DISABLED
Mon Nov  2 12:27:36 2020 us=506867   ifconfig_ipv6_local = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506895   ifconfig_ipv6_netbits = 0
Mon Nov  2 12:27:36 2020 us=506923   ifconfig_ipv6_remote = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=506951   shaper = 0
Mon Nov  2 12:27:36 2020 us=506979   mtu_test = 0
Mon Nov  2 12:27:36 2020 us=507007   mlock = DISABLED
Mon Nov  2 12:27:36 2020 us=507035   keepalive_ping = 10
Mon Nov  2 12:27:36 2020 us=507062   keepalive_timeout = 30
Mon Nov  2 12:27:36 2020 us=507090   inactivity_timeout = 0
Mon Nov  2 12:27:36 2020 us=507118   ping_send_timeout = 10
Mon Nov  2 12:27:36 2020 us=507145   ping_rec_timeout = 30
Mon Nov  2 12:27:36 2020 us=507173   ping_rec_timeout_action = 2
Mon Nov  2 12:27:36 2020 us=507201   ping_timer_remote = DISABLED
Mon Nov  2 12:27:36 2020 us=507229   remap_sigusr1 = 0
Mon Nov  2 12:27:36 2020 us=507256   persist_tun = DISABLED
Mon Nov  2 12:27:36 2020 us=507284   persist_local_ip = DISABLED
Mon Nov  2 12:27:36 2020 us=507312   persist_remote_ip = DISABLED
Mon Nov  2 12:27:36 2020 us=507340   persist_key = DISABLED
Mon Nov  2 12:27:36 2020 us=507368   passtos = DISABLED
Mon Nov  2 12:27:36 2020 us=507396   resolve_retry_seconds = 1000000000
Mon Nov  2 12:27:36 2020 us=507424   resolve_in_advance = DISABLED
Mon Nov  2 12:27:36 2020 us=507452   username = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507480   groupname = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507522   chroot_dir = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507546   cd_dir = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507568   writepid = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507589   up_script = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507620   down_script = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507642   down_pre = DISABLED
Mon Nov  2 12:27:36 2020 us=507663   up_restart = DISABLED
Mon Nov  2 12:27:36 2020 us=507684   up_delay = DISABLED
Mon Nov  2 12:27:36 2020 us=507727   daemon = DISABLED
Mon Nov  2 12:27:36 2020 us=507749   inetd = 0
Mon Nov  2 12:27:36 2020 us=507771   log = DISABLED
Mon Nov  2 12:27:36 2020 us=507792   suppress_timestamps = DISABLED
Mon Nov  2 12:27:36 2020 us=507823   machine_readable_output = DISABLED
Mon Nov  2 12:27:36 2020 us=507845   nice = 0
Mon Nov  2 12:27:36 2020 us=507866   verbosity = 4
Mon Nov  2 12:27:36 2020 us=507895   mute = 0
Mon Nov  2 12:27:36 2020 us=507917   gremlin = 0
Mon Nov  2 12:27:36 2020 us=507938   status_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=507959   status_file_version = 1
Mon Nov  2 12:27:36 2020 us=507981   status_file_update_freq = 60
Mon Nov  2 12:27:36 2020 us=508002   occ = ENABLED
Mon Nov  2 12:27:36 2020 us=508024   rcvbuf = 0
Mon Nov  2 12:27:36 2020 us=508045   sndbuf = 0
Mon Nov  2 12:27:36 2020 us=508066   mark = 0
Mon Nov  2 12:27:36 2020 us=508088   sockflags = 0
Mon Nov  2 12:27:36 2020 us=508109   fast_io = DISABLED
Mon Nov  2 12:27:36 2020 us=508130   comp.alg = 2
Mon Nov  2 12:27:36 2020 us=508151   comp.flags = 0
Mon Nov  2 12:27:36 2020 us=508172   route_script = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508254   route_default_gateway = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508277   route_default_metric = 0
Mon Nov  2 12:27:36 2020 us=508298   route_noexec = DISABLED
Mon Nov  2 12:27:36 2020 us=508320   route_delay = 0
Mon Nov  2 12:27:36 2020 us=508341   route_delay_window = 30
Mon Nov  2 12:27:36 2020 us=508362   route_delay_defined = DISABLED
Mon Nov  2 12:27:36 2020 us=508384   route_nopull = DISABLED
Mon Nov  2 12:27:36 2020 us=508405   route_gateway_via_dhcp = DISABLED
Mon Nov  2 12:27:36 2020 us=508427   allow_pull_fqdn = DISABLED
Mon Nov  2 12:27:36 2020 us=508449   management_addr = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508470   management_port = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508522   management_user_pass = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508555   management_log_history_cache = 250
Mon Nov  2 12:27:36 2020 us=508577   management_echo_buffer_size = 100
Mon Nov  2 12:27:36 2020 us=508598   management_write_peer_info_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508620   management_client_user = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508642   management_client_group = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508663   management_flags = 0
Mon Nov  2 12:27:36 2020 us=508685   shared_secret_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=508706   key_direction = not set
Mon Nov  2 12:27:36 2020 us=508728   ciphername = 'AES-256-CBC'
Mon Nov  2 12:27:36 2020 us=508750   ncp_enabled = ENABLED
Mon Nov  2 12:27:36 2020 us=508771   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Mon Nov  2 12:27:36 2020 us=508793   authname = 'SHA256'
Mon Nov  2 12:27:36 2020 us=508814   prng_hash = 'SHA1'
Mon Nov  2 12:27:36 2020 us=508836   prng_nonce_secret_len = 16
Mon Nov  2 12:27:36 2020 us=508857   keysize = 0
Mon Nov  2 12:27:36 2020 us=508878   engine = DISABLED
Mon Nov  2 12:27:36 2020 us=508900   replay = ENABLED
Mon Nov  2 12:27:36 2020 us=508921   mute_replay_warnings = DISABLED
Mon Nov  2 12:27:36 2020 us=508943   replay_window = 64
Mon Nov  2 12:27:36 2020 us=508964   replay_time = 15
Mon Nov  2 12:27:36 2020 us=508985   packet_id_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509007   use_iv = ENABLED
Mon Nov  2 12:27:36 2020 us=509028   test_crypto = DISABLED
Mon Nov  2 12:27:36 2020 us=509049   tls_server = DISABLED
Mon Nov  2 12:27:36 2020 us=509071   tls_client = ENABLED
Mon Nov  2 12:27:36 2020 us=509093   key_method = 2
Mon Nov  2 12:27:36 2020 us=509114   ca_file = '[[INLINE]]'
Mon Nov  2 12:27:36 2020 us=509136   ca_path = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509157   dh_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509178   cert_file = '[[INLINE]]'
Mon Nov  2 12:27:36 2020 us=509200   extra_certs_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509222   priv_key_file = '[[INLINE]]'
Mon Nov  2 12:27:36 2020 us=509243   pkcs12_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509265   cipher_list = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509286   cipher_list_tls13 = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509307   tls_cert_profile = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509329   tls_verify = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509350   tls_export_cert = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509372   verify_x509_type = 0
Mon Nov  2 12:27:36 2020 us=509393   verify_x509_name = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509415   crl_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=509436   ns_cert_type = 0
Mon Nov  2 12:27:36 2020 us=509457   remote_cert_ku[i] = 65535
Mon Nov  2 12:27:36 2020 us=509509   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509531   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509553   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509585   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509608   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509630   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509651   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509673   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509695   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509716   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509738   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509760   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509781   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509803   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509825   remote_cert_ku[i] = 0
Mon Nov  2 12:27:36 2020 us=509847   remote_cert_eku = 'TLS Web Server Authentication'
Mon Nov  2 12:27:36 2020 us=509869   ssl_flags = 0
Mon Nov  2 12:27:36 2020 us=509891   tls_timeout = 2
Mon Nov  2 12:27:36 2020 us=509913   renegotiate_bytes = -1
Mon Nov  2 12:27:36 2020 us=509935   renegotiate_packets = 0
Mon Nov  2 12:27:36 2020 us=509957   renegotiate_seconds = 3600
Mon Nov  2 12:27:36 2020 us=509979   handshake_window = 60
Mon Nov  2 12:27:36 2020 us=510000   transition_window = 3600
Mon Nov  2 12:27:36 2020 us=510022   single_session = DISABLED
Mon Nov  2 12:27:36 2020 us=510044   push_peer_info = DISABLED
Mon Nov  2 12:27:36 2020 us=510066   tls_exit = DISABLED
Mon Nov  2 12:27:36 2020 us=510087   tls_auth_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=510109   tls_crypt_file = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=510140   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510162   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510183   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510205   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510268   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510291   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510313   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510334   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510356   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510378   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510399   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510420   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510470   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510494   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510516   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510538   pkcs11_protected_authentication = DISABLED
Mon Nov  2 12:27:36 2020 us=510561   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510583   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510605   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510627   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510658   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510679   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510701   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510722   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510743   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510765   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510786   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510808   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510829   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510850   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510872   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510893   pkcs11_private_mode = 00000000
Mon Nov  2 12:27:36 2020 us=510914   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=510936   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=510957   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=510978   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=510999   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511020   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511041   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511063   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511084   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511105   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511126   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511147   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511168   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511190   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511211   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511232   pkcs11_cert_private = DISABLED
Mon Nov  2 12:27:36 2020 us=511284   pkcs11_pin_cache_period = -1
Mon Nov  2 12:27:36 2020 us=511307   pkcs11_id = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=511328   pkcs11_id_management = DISABLED
Mon Nov  2 12:27:36 2020 us=511356   server_network = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511379   server_netmask = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511403   server_network_ipv6 = ::
Mon Nov  2 12:27:36 2020 us=511441   server_netbits_ipv6 = 0
Mon Nov  2 12:27:36 2020 us=511465   server_bridge_ip = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511487   server_bridge_netmask = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511511   server_bridge_pool_start = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511746   server_bridge_pool_end = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511769   ifconfig_pool_defined = DISABLED
Mon Nov  2 12:27:36 2020 us=511801   ifconfig_pool_start = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511823   ifconfig_pool_end = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511845   ifconfig_pool_netmask = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=511866   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=511887   ifconfig_pool_persist_refresh_freq = 600
Mon Nov  2 12:27:36 2020 us=511908   ifconfig_ipv6_pool_defined = DISABLED
Mon Nov  2 12:27:36 2020 us=511930   ifconfig_ipv6_pool_base = ::
Mon Nov  2 12:27:36 2020 us=511951   ifconfig_ipv6_pool_netbits = 0
Mon Nov  2 12:27:36 2020 us=511971   n_bcast_buf = 256
Mon Nov  2 12:27:36 2020 us=511992   tcp_queue_limit = 64
Mon Nov  2 12:27:36 2020 us=512013   real_hash_size = 256
Mon Nov  2 12:27:36 2020 us=512033   virtual_hash_size = 256
Mon Nov  2 12:27:36 2020 us=512054   client_connect_script = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=512074   learn_address_script = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=512095   client_disconnect_script = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=512115   client_config_dir = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=512136   ccd_exclusive = DISABLED
Mon Nov  2 12:27:36 2020 us=512157   tmp_dir = '/tmp'
Mon Nov  2 12:27:36 2020 us=512177   push_ifconfig_defined = DISABLED
Mon Nov  2 12:27:36 2020 us=512199   push_ifconfig_local = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=512221   push_ifconfig_remote_netmask = 0.0.0.0
Mon Nov  2 12:27:36 2020 us=512242   push_ifconfig_ipv6_defined = DISABLED
Mon Nov  2 12:27:36 2020 us=512264   push_ifconfig_ipv6_local = ::/0
Mon Nov  2 12:27:36 2020 us=512286   push_ifconfig_ipv6_remote = ::
Mon Nov  2 12:27:36 2020 us=512306   enable_c2c = DISABLED
Mon Nov  2 12:27:36 2020 us=512327   duplicate_cn = DISABLED
Mon Nov  2 12:27:36 2020 us=512348   cf_max = 0
Mon Nov  2 12:27:36 2020 us=512368   cf_per = 0
Mon Nov  2 12:27:36 2020 us=512408   max_clients = 1024
Mon Nov  2 12:27:36 2020 us=512431   max_routes_per_client = 256
Mon Nov  2 12:27:36 2020 us=512452   auth_user_pass_verify_script = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=512473   auth_user_pass_verify_script_via_file = DISABLED
Mon Nov  2 12:27:36 2020 us=512494   auth_token_generate = DISABLED
Mon Nov  2 12:27:36 2020 us=512514   auth_token_lifetime = 0
Mon Nov  2 12:27:36 2020 us=512535   port_share_host = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=512555   port_share_port = '[UNDEF]'
Mon Nov  2 12:27:36 2020 us=512576   client = ENABLED
Mon Nov  2 12:27:36 2020 us=512596   pull = ENABLED
Mon Nov  2 12:27:36 2020 us=512617   auth_user_pass_file = 'stdin'
Mon Nov  2 12:27:36 2020 us=512638 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep  5 2019
Mon Nov  2 12:27:36 2020 us=512668 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Enter Auth Username: username
Enter Auth Password: password
Mon Nov  2 12:43:51 2020 us=105607 LZO compression initializing
Mon Nov  2 12:43:51 2020 us=105747 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Nov  2 12:43:51 2020 us=105802 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Mon Nov  2 12:43:51 2020 us=105860 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Nov  2 12:43:51 2020 us=105884 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Nov  2 12:43:51 2020 us=105922 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Nov  2 12:43:51 2020 us=105975 Socket Buffers: R=[212992->212992] S=[212992->212992]
Mon Nov  2 12:43:51 2020 us=106000 UDP link local: (not bound)
Mon Nov  2 12:43:51 2020 us=106023 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Nov  2 12:43:51 2020 us=139068 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:1194, sid=7d316eb0 7b69e589
Mon Nov  2 12:43:51 2020 us=139215 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Nov  2 12:43:51 2020 us=225421 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U_B1, emailAddress=me@myhost.mydomain
Mon Nov  2 12:43:51 2020 us=225569 VERIFY KU OK
Mon Nov  2 12:43:51 2020 us=225579 Validating certificate extended key usage
Mon Nov  2 12:43:51 2020 us=225585 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Nov  2 12:43:51 2020 us=225590 VERIFY EKU OK
Mon Nov  2 12:43:51 2020 us=225595 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U_B1, emailAddress=me@myhost.mydomain
Mon Nov  2 12:43:51 2020 us=363097 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Nov  2 12:43:51 2020 us=363209 [RT-AC66U_B1] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Nov  2 12:43:52 2020 us=513421 SENT CONTROL [RT-AC66U_B1]: 'PUSH_REQUEST' (status=1)
Mon Nov  2 12:43:52 2020 us=558057 PUSH: Received control message: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 30,peer-id 0,cipher AES-256-GCM'
Mon Nov  2 12:43:52 2020 us=558219 OPTIONS IMPORT: timers and/or timeouts modified
Mon Nov  2 12:43:52 2020 us=558265 OPTIONS IMPORT: route-related options modified
Mon Nov  2 12:43:52 2020 us=558395 OPTIONS IMPORT: peer-id set
Mon Nov  2 12:43:52 2020 us=558425 OPTIONS IMPORT: adjusting link_mtu to 1657
Mon Nov  2 12:43:52 2020 us=558463 OPTIONS IMPORT: data channel crypto options modified
Mon Nov  2 12:43:52 2020 us=558495 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon Nov  2 12:43:52 2020 us=558558 Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ]
Mon Nov  2 12:43:52 2020 us=558894 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Nov  2 12:43:52 2020 us=558949 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Nov  2 12:43:52 2020 us=567042 TUN/TAP device tap0 opened
Mon Nov  2 12:43:52 2020 us=567189 TUN/TAP TX queue length set to 100
Mon Nov  2 12:43:52 2020 us=567293 Initialization Sequence Completed
Mon Nov  2 12:44:24 2020 us=522346 [RT-AC66U_B1] Inactivity timeout (--ping-restart), restarting
Mon Nov  2 12:44:24 2020 us=522788 TCP/UDP: Closing socket
Mon Nov  2 12:44:24 2020 us=522875 Closing TUN/TAP interface
Mon Nov  2 12:44:24 2020 us=542849 SIGUSR1[soft,ping-restart] received, process restarting
Mon Nov  2 12:44:24 2020 us=542924 Restart pause, 5 second(s)
Mon Nov  2 12:44:29 2020 us=546005 LZO compression initializing
Mon Nov  2 12:44:29 2020 us=546322 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Nov  2 12:44:29 2020 us=546413 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Mon Nov  2 12:44:29 2020 us=546568 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Nov  2 12:44:29 2020 us=546643 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Nov  2 12:44:29 2020 us=546710 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Nov  2 12:44:29 2020 us=546797 Socket Buffers: R=[212992->212992] S=[212992->212992]
Mon Nov  2 12:44:29 2020 us=546851 UDP link local: (not bound)
Mon Nov  2 12:44:29 2020 us=546905 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Nov  2 12:44:29 2020 us=579978 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:1194, sid=12e4678a 5857a46d
Mon Nov  2 12:44:29 2020 us=665400 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U_B1, emailAddress=me@myhost.mydomain
Mon Nov  2 12:44:29 2020 us=666212 VERIFY KU OK
Mon Nov  2 12:44:29 2020 us=666252 Validating certificate extended key usage
Mon Nov  2 12:44:29 2020 us=666282 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Nov  2 12:44:29 2020 us=666313 VERIFY EKU OK
Mon Nov  2 12:44:29 2020 us=666339 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U_B1, emailAddress=me@myhost.mydomain
Mon Nov  2 12:44:29 2020 us=764938 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Nov  2 12:44:29 2020 us=765081 [RT-AC66U_B1] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194
Mon Nov  2 12:44:30 2020 us=889949 SENT CONTROL [RT-AC66U_B1]: 'PUSH_REQUEST' (status=1)
Mon Nov  2 12:44:30 2020 us=926427 PUSH: Received control message: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 30,peer-id 1,cipher AES-256-GCM'
Mon Nov  2 12:44:30 2020 us=926563 OPTIONS IMPORT: timers and/or timeouts modified
Mon Nov  2 12:44:30 2020 us=926593 OPTIONS IMPORT: route-related options modified
Mon Nov  2 12:44:30 2020 us=926614 OPTIONS IMPORT: peer-id set
Mon Nov  2 12:44:30 2020 us=926640 OPTIONS IMPORT: adjusting link_mtu to 1657
Mon Nov  2 12:44:30 2020 us=926664 OPTIONS IMPORT: data channel crypto options modified
Mon Nov  2 12:44:30 2020 us=926679 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon Nov  2 12:44:30 2020 us=926704 Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ]
Mon Nov  2 12:44:30 2020 us=926834 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Nov  2 12:44:30 2020 us=926855 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Nov  2 12:44:30 2020 us=927561 TUN/TAP device tap0 opened
Mon Nov  2 12:44:30 2020 us=927700 TUN/TAP TX queue length set to 100
Mon Nov  2 12:44:30 2020 us=927806 Initialization Sequence Completed
Mon Nov  2 12:45:02 2020 us=875669 [RT-AC66U_B1] Inactivity timeout (--ping-restart), restarting
Mon Nov  2 12:45:02 2020 us=876077 TCP/UDP: Closing socket
Mon Nov  2 12:45:02 2020 us=876164 Closing TUN/TAP interface
Mon Nov  2 12:45:02 2020 us=895359 SIGUSR1[soft,ping-restart] received, process restarting
Mon Nov  2 12:45:02 2020 us=895432 Restart pause, 5 second(s)
Mon Nov  2 12:45:07 2020 us=911470 LZO compression initializing

It loops starting at the line:
LZO compression initializing

I am not sure if there is a way for me to access the server config file to add verb 4 due to it being on a wireless router rather than a computer.
I hope this is what you need. Let me know what else I can do.
Thank you

TinCanTech

Your client is successfully connecting but it is not receiving --ping's from your server.

You need to be able to configure your server ..

bgommel4

I did find a way to add custom config to the server on the router.
What configuration do I need to add?
Thanks!

TinCanTech

Normally, the server uses --keepalive 10 60

keepalive 10 60

bgommel4

I added "keepalive 10 60" to the server config and restarted both the server and client.
I am getting the same problem except the loops are 60 seconds apart compared to 30 seconds.
See below:

Mon Nov  2 14:38:36 2020 Initialization Sequence Completed
Mon Nov  2 14:39:37 2020 [RT-AC66U_B1] Inactivity timeout (--ping-restart), restarting

300000

you need to push ping to client so every 190 it will keep connection to server so it not stop , just add this line into your server config

push "ping 190"

TinCanTech

300000 wrote just add this line into your server config

push "ping 190"

Please don't do that.

bgommel4 wrote I added "keepalive 10 60" to the server config and restarted both the server and client.
I am getting the same problem except the loops are 60 seconds apart compared to 30 seconds.

Exactly. --keepalive is only working on the client.

We need to see your server log at --verb 4

bgommel4

Adding 'push "ping 190"' did not solve it.
Below is the server log at --verb 4.

Nov  2 22:11:26 rc_service: httpd 21207:notify_rc restart_openvpnd;restart_chpass;restart_samba
Nov  2 22:11:27 vpnserver1[8609]: event_wait : Interrupted system call (code=4)
Nov  2 22:11:27 vpnserver1[8609]: Closing TUN/TAP interface
Nov  2 22:11:27 vpnserver1[8609]: /etc/openvpn/ovpn-down tap21 1500 1654   init
Nov  2 22:11:27 vpnserver1[8609]: PLUGIN_CLOSE: /usr/lib/openvpn-plugin-auth-pam.so
Nov  2 22:11:27 vpnserver1[8609]: SIGTERM[hard,] received, process exiting
Nov  2 22:11:29 vpnserver1[9441]: Current Parameter Settings:
Nov  2 22:11:29 vpnserver1[9441]:   config = 'config.ovpn'
Nov  2 22:11:29 vpnserver1[9441]:   mode = 1
Nov  2 22:11:29 vpnserver1[9441]:   persist_config = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   persist_mode = 1
Nov  2 22:11:29 vpnserver1[9441]:   show_ciphers = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   show_digests = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   show_engines = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   genkey = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   key_pass_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   show_tls_ciphers = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   connect_retry_max = 0
Nov  2 22:11:29 vpnserver1[9441]: Connection profiles [0]:
Nov  2 22:11:29 vpnserver1[9441]:   proto = udp4
Nov  2 22:11:29 vpnserver1[9441]:   local = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   local_port = '1194'
Nov  2 22:11:29 vpnserver1[9441]:   remote = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   remote_port = '1194'
Nov  2 22:11:29 vpnserver1[9441]:   remote_float = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   bind_defined = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   bind_local = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   bind_ipv6_only = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   connect_retry_seconds = 5
Nov  2 22:11:29 vpnserver1[9441]:   connect_timeout = 120
Nov  2 22:11:29 vpnserver1[9441]:   socks_proxy_server = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   socks_proxy_port = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   tun_mtu = 1500
Nov  2 22:11:29 vpnserver1[9441]:   tun_mtu_defined = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   link_mtu = 1500
Nov  2 22:11:29 vpnserver1[9441]:   link_mtu_defined = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   tun_mtu_extra = 32
Nov  2 22:11:29 vpnserver1[9441]:   tun_mtu_extra_defined = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   mtu_discover_type = -1
Nov  2 22:11:29 vpnserver1[9441]:   fragment = 0
Nov  2 22:11:29 vpnserver1[9441]:   mssfix = 1450
Nov  2 22:11:29 vpnserver1[9441]:   explicit_exit_notification = 0
Nov  2 22:11:29 vpnserver1[9441]: Connection profiles END
Nov  2 22:11:29 vpnserver1[9441]:   remote_random = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   ipchange = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   dev = 'tap21'
Nov  2 22:11:29 vpnserver1[9441]:   dev_type = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   dev_node = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   lladdr = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   topology = 1
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_local = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_remote_netmask = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_noexec = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_nowarn = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_ipv6_local = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_ipv6_netbits = 0
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_ipv6_remote = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   shaper = 0
Nov  2 22:11:29 vpnserver1[9441]:   mtu_test = 0
Nov  2 22:11:29 vpnserver1[9441]:   mlock = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   keepalive_ping = 10
Nov  2 22:11:29 vpnserver1[9441]:   keepalive_timeout = 60
Nov  2 22:11:29 vpnserver1[9441]:   inactivity_timeout = 0
Nov  2 22:11:29 vpnserver1[9441]:   ping_send_timeout = 10
Nov  2 22:11:29 vpnserver1[9441]:   ping_rec_timeout = 120
Nov  2 22:11:29 vpnserver1[9441]:   ping_rec_timeout_action = 2
Nov  2 22:11:29 vpnserver1[9441]:   ping_timer_remote = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   remap_sigusr1 = 0
Nov  2 22:11:29 vpnserver1[9441]:   persist_tun = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   persist_local_ip = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   persist_remote_ip = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   persist_key = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   passtos = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   resolve_retry_seconds = 1000000000
Nov  2 22:11:29 vpnserver1[9441]:   resolve_in_advance = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   username = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   groupname = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   chroot_dir = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   cd_dir = '/etc/openvpn/server1'
Nov  2 22:11:29 vpnserver1[9441]:   writepid = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   up_script = '/etc/openvpn/ovpn-up'
Nov  2 22:11:29 vpnserver1[9441]:   down_script = '/etc/openvpn/ovpn-down'
Nov  2 22:11:29 vpnserver1[9441]:   down_pre = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   up_restart = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   up_delay = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   daemon = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   inetd = 0
Nov  2 22:11:29 vpnserver1[9441]:   log = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   suppress_timestamps = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   machine_readable_output = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   nice = 0
Nov  2 22:11:29 vpnserver1[9441]:   verbosity = 4
Nov  2 22:11:29 vpnserver1[9441]:   mute = 0
Nov  2 22:11:29 vpnserver1[9441]:   status_file = 'status'
Nov  2 22:11:29 vpnserver1[9441]:   status_file_version = 2
Nov  2 22:11:29 vpnserver1[9441]:   status_file_update_freq = 10
Nov  2 22:11:29 vpnserver1[9441]:   occ = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   rcvbuf = 0
Nov  2 22:11:29 vpnserver1[9441]:   sndbuf = 0
Nov  2 22:11:29 vpnserver1[9441]:   mark = 0
Nov  2 22:11:29 vpnserver1[9441]:   sockflags = 1
Nov  2 22:11:29 vpnserver1[9441]:   fast_io = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   comp.alg = 2
Nov  2 22:11:29 vpnserver1[9441]:   comp.flags = 0
Nov  2 22:11:29 vpnserver1[9441]:   route_script = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   route_default_gateway = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   route_default_metric = 0
Nov  2 22:11:29 vpnserver1[9441]:   route_noexec = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   route_delay = 0
Nov  2 22:11:29 vpnserver1[9441]:   route_delay_window = 30
Nov  2 22:11:29 vpnserver1[9441]:   route_delay_defined = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   route_nopull = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   route_gateway_via_dhcp = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   allow_pull_fqdn = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   management_addr = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   management_port = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   management_user_pass = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   management_log_history_cache = 250
Nov  2 22:11:29 vpnserver1[9441]:   management_echo_buffer_size = 100
Nov  2 22:11:29 vpnserver1[9441]:   management_write_peer_info_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   management_client_user = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   management_client_group = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   management_flags = 0
Nov  2 22:11:29 vpnserver1[9441]:   plugin[0] /usr/lib/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn-plugin-auth-pam.so] [openvpn]'
Nov  2 22:11:29 vpnserver1[9441]:   shared_secret_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   key_direction = not set
Nov  2 22:11:29 vpnserver1[9441]:   ciphername = 'AES-256-CBC'
Nov  2 22:11:29 vpnserver1[9441]:   ncp_enabled = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Nov  2 22:11:29 vpnserver1[9441]:   authname = 'SHA256'
Nov  2 22:11:29 vpnserver1[9441]:   prng_hash = 'SHA1'
Nov  2 22:11:29 vpnserver1[9441]:   prng_nonce_secret_len = 16
Nov  2 22:11:29 vpnserver1[9441]:   keysize = 0
Nov  2 22:11:29 vpnserver1[9441]:   engine = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   replay = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   mute_replay_warnings = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   replay_window = 64
Nov  2 22:11:29 vpnserver1[9441]:   replay_time = 15
Nov  2 22:11:29 vpnserver1[9441]:   packet_id_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   use_iv = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   test_crypto = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   tls_server = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   tls_client = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   key_method = 2
Nov  2 22:11:29 vpnserver1[9441]:   ca_file = 'ca.crt'
Nov  2 22:11:29 vpnserver1[9441]:   ca_path = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   dh_file = 'dh.pem'
Nov  2 22:11:29 vpnserver1[9441]:   cert_file = 'server.crt'
Nov  2 22:11:29 vpnserver1[9441]:   extra_certs_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   priv_key_file = 'server.key'
Nov  2 22:11:29 vpnserver1[9441]:   pkcs12_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   cipher_list = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   cipher_list_tls13 = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   tls_cert_profile = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   tls_verify = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   tls_export_cert = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   verify_x509_type = 0
Nov  2 22:11:29 vpnserver1[9441]:   verify_x509_name = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   crl_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   ns_cert_type = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_ku[i] = 0
Nov  2 22:11:29 vpnserver1[9441]:   remote_cert_eku = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   ssl_flags = 0
Nov  2 22:11:29 vpnserver1[9441]:   tls_timeout = 2
Nov  2 22:11:29 vpnserver1[9441]:   renegotiate_bytes = -1
Nov  2 22:11:29 vpnserver1[9441]:   renegotiate_packets = 0
Nov  2 22:11:29 vpnserver1[9441]:   renegotiate_seconds = 3600
Nov  2 22:11:29 vpnserver1[9441]:   handshake_window = 60
Nov  2 22:11:29 vpnserver1[9441]:   transition_window = 3600
Nov  2 22:11:29 vpnserver1[9441]:   single_session = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   push_peer_info = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   tls_exit = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   tls_auth_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   tls_crypt_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   server_network = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   server_netmask = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   server_network_ipv6 = ::
Nov  2 22:11:29 vpnserver1[9441]:   server_netbits_ipv6 = 0
Nov  2 22:11:29 vpnserver1[9441]:   server_bridge_ip = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   server_bridge_netmask = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   server_bridge_pool_start = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   server_bridge_pool_end = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   push_entry = 'route-gateway dhcp'
Nov  2 22:11:29 vpnserver1[9441]:   push_entry = 'ping 10'
Nov  2 22:11:29 vpnserver1[9441]:   push_entry = 'ping-restart 60'
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_pool_defined = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_pool_start = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_pool_end = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_pool_netmask = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_pool_persist_filename = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_pool_persist_refresh_freq = 600
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_ipv6_pool_defined = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_ipv6_pool_base = ::
Nov  2 22:11:29 vpnserver1[9441]:   ifconfig_ipv6_pool_netbits = 0
Nov  2 22:11:29 vpnserver1[9441]:   n_bcast_buf = 256
Nov  2 22:11:29 vpnserver1[9441]:   tcp_queue_limit = 64
Nov  2 22:11:29 vpnserver1[9441]:   real_hash_size = 256
Nov  2 22:11:29 vpnserver1[9441]:   virtual_hash_size = 256
Nov  2 22:11:29 vpnserver1[9441]:   client_connect_script = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   learn_address_script = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   client_disconnect_script = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   client_config_dir = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   ccd_exclusive = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   tmp_dir = '/tmp'
Nov  2 22:11:29 vpnserver1[9441]:   push_ifconfig_defined = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   push_ifconfig_local = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   push_ifconfig_remote_netmask = 0.0.0.0
Nov  2 22:11:29 vpnserver1[9441]:   push_ifconfig_ipv6_defined = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   push_ifconfig_ipv6_local = ::/0
Nov  2 22:11:29 vpnserver1[9441]:   push_ifconfig_ipv6_remote = ::
Nov  2 22:11:29 vpnserver1[9441]:   enable_c2c = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   duplicate_cn = ENABLED
Nov  2 22:11:29 vpnserver1[9441]:   cf_max = 0
Nov  2 22:11:29 vpnserver1[9441]:   cf_per = 0
Nov  2 22:11:29 vpnserver1[9441]:   max_clients = 1024
Nov  2 22:11:29 vpnserver1[9441]:   max_routes_per_client = 256
Nov  2 22:11:29 vpnserver1[9441]:   auth_user_pass_verify_script = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   auth_user_pass_verify_script_via_file = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   auth_token_generate = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   auth_token_lifetime = 0
Nov  2 22:11:29 vpnserver1[9441]:   port_share_host = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   port_share_port = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]:   client = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   pull = DISABLED
Nov  2 22:11:29 vpnserver1[9441]:   auth_user_pass_file = '[UNDEF]'
Nov  2 22:11:29 vpnserver1[9441]: OpenVPN 2.4.7 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug 10 2020
Nov  2 22:11:29 vpnserver1[9441]: library versions: OpenSSL 1.0.2u  20 Dec 2019, LZO 2.03
Nov  2 22:11:29 vpnserver1[9442]: NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Nov  2 22:11:29 vpnserver1[9442]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov  2 22:11:29 vpnserver1[9442]: PLUGIN_INIT: POST /usr/lib/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn-plugin-auth-pam.so] [openvpn]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY 
Nov  2 22:11:29 vpnserver1[9442]: Diffie-Hellman initialized with 2048 bit key
Nov  2 22:11:29 vpnserver1[9442]: TLS-Auth MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Nov  2 22:11:29 vpnserver1[9442]: TUN/TAP device tap21 opened
Nov  2 22:11:29 vpnserver1[9442]: TUN/TAP TX queue length set to 100
Nov  2 22:11:29 vpnserver1[9442]: /etc/openvpn/ovpn-up tap21 1500 1654   init
Nov  2 22:11:29 vpnserver1[9442]: Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Nov  2 22:11:29 vpnserver1[9442]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Nov  2 22:11:29 vpnserver1[9442]: UDPv4 link local (bound): [AF_INET][undef]:1194
Nov  2 22:11:29 vpnserver1[9442]: UDPv4 link remote: [AF_UNSPEC]
Nov  2 22:11:29 vpnserver1[9442]: MULTI: multi_init called, r=256 v=256
Nov  2 22:11:29 vpnserver1[9442]: Initialization Sequence Completed
Nov  2 22:11:29 Samba Server: smb daemon is stoped
Nov  2 22:11:29 kernel: gro disabled
Nov  2 22:11:47 rc_service: httpd 21207:notify_rc stop_openvpnd;restart_samba
Nov  2 22:11:48 vpnserver1[9442]: event_wait : Interrupted system call (code=4)
Nov  2 22:11:48 vpnserver1[9442]: TCP/UDP: Closing socket
Nov  2 22:11:48 vpnserver1[9442]: Closing TUN/TAP interface
Nov  2 22:11:48 vpnserver1[9442]: /etc/openvpn/ovpn-down tap21 1500 1654   init
Nov  2 22:11:49 vpnserver1[9442]: PLUGIN_CLOSE: /usr/lib/openvpn-plugin-auth-pam.so
Nov  2 22:11:49 vpnserver1[9442]: SIGTERM[hard,] received, process exiting
Nov  2 22:11:50 Samba Server: smb daemon is stoped
Nov  2 22:11:50 kernel: gro disabled
Nov  2 22:12:14 rc_service: httpd 21207:notify_rc restart_openvpnd;restart_chpass;restart_samba
Nov  2 22:12:17 vpnserver1[9866]: Current Parameter Settings:
Nov  2 22:12:17 vpnserver1[9866]:   config = 'config.ovpn'
Nov  2 22:12:17 vpnserver1[9866]:   mode = 1
Nov  2 22:12:17 vpnserver1[9866]:   persist_config = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   persist_mode = 1
Nov  2 22:12:17 vpnserver1[9866]:   show_ciphers = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   show_digests = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   show_engines = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   genkey = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   key_pass_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   show_tls_ciphers = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   connect_retry_max = 0
Nov  2 22:12:17 vpnserver1[9866]: Connection profiles [0]:
Nov  2 22:12:17 vpnserver1[9866]:   proto = udp4
Nov  2 22:12:17 vpnserver1[9866]:   local = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   local_port = '1194'
Nov  2 22:12:17 vpnserver1[9866]:   remote = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   remote_port = '1194'
Nov  2 22:12:17 vpnserver1[9866]:   remote_float = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   bind_defined = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   bind_local = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   bind_ipv6_only = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   connect_retry_seconds = 5
Nov  2 22:12:17 vpnserver1[9866]:   connect_timeout = 120
Nov  2 22:12:17 vpnserver1[9866]:   socks_proxy_server = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   socks_proxy_port = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   tun_mtu = 1500
Nov  2 22:12:17 vpnserver1[9866]:   tun_mtu_defined = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   link_mtu = 1500
Nov  2 22:12:17 vpnserver1[9866]:   link_mtu_defined = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   tun_mtu_extra = 32
Nov  2 22:12:17 vpnserver1[9866]:   tun_mtu_extra_defined = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   mtu_discover_type = -1
Nov  2 22:12:17 vpnserver1[9866]:   fragment = 0
Nov  2 22:12:17 vpnserver1[9866]:   mssfix = 1450
Nov  2 22:12:17 vpnserver1[9866]:   explicit_exit_notification = 0
Nov  2 22:12:17 vpnserver1[9866]: Connection profiles END
Nov  2 22:12:17 vpnserver1[9866]:   remote_random = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   ipchange = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   dev = 'tap21'
Nov  2 22:12:17 vpnserver1[9866]:   dev_type = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   dev_node = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   lladdr = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   topology = 1
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_local = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_remote_netmask = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_noexec = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_nowarn = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_ipv6_local = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_ipv6_netbits = 0
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_ipv6_remote = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   shaper = 0
Nov  2 22:12:17 vpnserver1[9866]:   mtu_test = 0
Nov  2 22:12:17 vpnserver1[9866]:   mlock = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   keepalive_ping = 10
Nov  2 22:12:17 vpnserver1[9866]:   keepalive_timeout = 60
Nov  2 22:12:17 vpnserver1[9866]:   inactivity_timeout = 0
Nov  2 22:12:17 vpnserver1[9866]:   ping_send_timeout = 10
Nov  2 22:12:17 vpnserver1[9866]:   ping_rec_timeout = 120
Nov  2 22:12:17 vpnserver1[9866]:   ping_rec_timeout_action = 2
Nov  2 22:12:17 vpnserver1[9866]:   ping_timer_remote = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   remap_sigusr1 = 0
Nov  2 22:12:17 vpnserver1[9866]:   persist_tun = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   persist_local_ip = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   persist_remote_ip = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   persist_key = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   passtos = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   resolve_retry_seconds = 1000000000
Nov  2 22:12:17 vpnserver1[9866]:   resolve_in_advance = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   username = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   groupname = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   chroot_dir = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   cd_dir = '/etc/openvpn/server1'
Nov  2 22:12:17 vpnserver1[9866]:   writepid = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   up_script = '/etc/openvpn/ovpn-up'
Nov  2 22:12:17 vpnserver1[9866]:   down_script = '/etc/openvpn/ovpn-down'
Nov  2 22:12:17 vpnserver1[9866]:   down_pre = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   up_restart = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   up_delay = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   daemon = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   inetd = 0
Nov  2 22:12:17 vpnserver1[9866]:   log = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   suppress_timestamps = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   machine_readable_output = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   nice = 0
Nov  2 22:12:17 vpnserver1[9866]:   verbosity = 4
Nov  2 22:12:17 vpnserver1[9866]:   mute = 0
Nov  2 22:12:17 vpnserver1[9866]:   status_file = 'status'
Nov  2 22:12:17 vpnserver1[9866]:   status_file_version = 2
Nov  2 22:12:17 vpnserver1[9866]:   status_file_update_freq = 10
Nov  2 22:12:17 vpnserver1[9866]:   occ = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   rcvbuf = 0
Nov  2 22:12:17 vpnserver1[9866]:   sndbuf = 0
Nov  2 22:12:17 vpnserver1[9866]:   mark = 0
Nov  2 22:12:17 vpnserver1[9866]:   sockflags = 1
Nov  2 22:12:17 vpnserver1[9866]:   fast_io = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   comp.alg = 2
Nov  2 22:12:17 vpnserver1[9866]:   comp.flags = 0
Nov  2 22:12:17 vpnserver1[9866]:   route_script = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   route_default_gateway = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   route_default_metric = 0
Nov  2 22:12:17 vpnserver1[9866]:   route_noexec = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   route_delay = 0
Nov  2 22:12:17 vpnserver1[9866]:   route_delay_window = 30
Nov  2 22:12:17 vpnserver1[9866]:   route_delay_defined = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   route_nopull = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   route_gateway_via_dhcp = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   allow_pull_fqdn = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   management_addr = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   management_port = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   management_user_pass = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   management_log_history_cache = 250
Nov  2 22:12:17 vpnserver1[9866]:   management_echo_buffer_size = 100
Nov  2 22:12:17 vpnserver1[9866]:   management_write_peer_info_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   management_client_user = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   management_client_group = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   management_flags = 0
Nov  2 22:12:17 vpnserver1[9866]:   plugin[0] /usr/lib/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn-plugin-auth-pam.so] [openvpn]'
Nov  2 22:12:17 vpnserver1[9866]:   shared_secret_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   key_direction = not set
Nov  2 22:12:17 vpnserver1[9866]:   ciphername = 'AES-256-CBC'
Nov  2 22:12:17 vpnserver1[9866]:   ncp_enabled = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Nov  2 22:12:17 vpnserver1[9866]:   authname = 'SHA256'
Nov  2 22:12:17 vpnserver1[9866]:   prng_hash = 'SHA1'
Nov  2 22:12:17 vpnserver1[9866]:   prng_nonce_secret_len = 16
Nov  2 22:12:17 vpnserver1[9866]:   keysize = 0
Nov  2 22:12:17 vpnserver1[9866]:   engine = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   replay = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   mute_replay_warnings = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   replay_window = 64
Nov  2 22:12:17 vpnserver1[9866]:   replay_time = 15
Nov  2 22:12:17 vpnserver1[9866]:   packet_id_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   use_iv = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   test_crypto = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   tls_server = ENABLED
Nov  2 22:12:17 vpnserver1[9866]:   tls_client = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   key_method = 2
Nov  2 22:12:17 vpnserver1[9866]:   ca_file = 'ca.crt'
Nov  2 22:12:17 vpnserver1[9866]:   ca_path = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   dh_file = 'dh.pem'
Nov  2 22:12:17 vpnserver1[9866]:   cert_file = 'server.crt'
Nov  2 22:12:17 vpnserver1[9866]:   extra_certs_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   priv_key_file = 'server.key'
Nov  2 22:12:17 vpnserver1[9866]:   pkcs12_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   cipher_list = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   cipher_list_tls13 = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   tls_cert_profile = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   tls_verify = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   tls_export_cert = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   verify_x509_type = 0
Nov  2 22:12:17 vpnserver1[9866]:   verify_x509_name = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   crl_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   ns_cert_type = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_ku[i] = 0
Nov  2 22:12:17 vpnserver1[9866]:   remote_cert_eku = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   ssl_flags = 0
Nov  2 22:12:17 vpnserver1[9866]:   tls_timeout = 2
Nov  2 22:12:17 vpnserver1[9866]:   renegotiate_bytes = -1
Nov  2 22:12:17 vpnserver1[9866]:   renegotiate_packets = 0
Nov  2 22:12:17 vpnserver1[9866]:   renegotiate_seconds = 3600
Nov  2 22:12:17 vpnserver1[9866]:   handshake_window = 60
Nov  2 22:12:17 vpnserver1[9866]:   transition_window = 3600
Nov  2 22:12:17 vpnserver1[9866]:   single_session = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   push_peer_info = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   tls_exit = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   tls_auth_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   tls_crypt_file = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   server_network = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   server_netmask = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   server_network_ipv6 = ::
Nov  2 22:12:17 vpnserver1[9866]:   server_netbits_ipv6 = 0
Nov  2 22:12:17 vpnserver1[9866]:   server_bridge_ip = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   server_bridge_netmask = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   server_bridge_pool_start = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   server_bridge_pool_end = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   push_entry = 'route-gateway dhcp'
Nov  2 22:12:17 vpnserver1[9866]:   push_entry = 'ping 10'
Nov  2 22:12:17 vpnserver1[9866]:   push_entry = 'ping-restart 60'
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_pool_defined = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_pool_start = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_pool_end = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_pool_netmask = 0.0.0.0
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_pool_persist_filename = '[UNDEF]'
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_pool_persist_refresh_freq = 600
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_ipv6_pool_defined = DISABLED
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_ipv6_pool_base = ::
Nov  2 22:12:17 vpnserver1[9866]:   ifconfig_ipv6_pool_netbits = 0
Nov  2 22:12:17 vpnserver1[9866]:   n_bcast_buf = 256
Nov  2 22:12:17 vpnserver1[9866]:   tcp_queue_limit = 64
Nov  2 22:12:17 vpnserver1[9866]:   real_hash_size = 256
Nov  2 22:12:17 vpnserver1[9867]: NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Nov  2 22:12:17 vpnserver1[9867]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov  2 22:12:17 vpnserver1[9867]: PLUGIN_INIT: POST /usr/lib/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn-plugin-auth-pam.so] [openvpn]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY 
Nov  2 22:12:17 vpnserver1[9867]: Diffie-Hellman initialized with 2048 bit key
Nov  2 22:12:17 vpnserver1[9867]: TLS-Auth MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Nov  2 22:12:17 vpnserver1[9867]: TUN/TAP device tap21 opened
Nov  2 22:12:17 vpnserver1[9867]: TUN/TAP TX queue length set to 100
Nov  2 22:12:17 vpnserver1[9867]: /etc/openvpn/ovpn-up tap21 1500 1654   init
Nov  2 22:12:17 vpnserver1[9867]: Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Nov  2 22:12:17 vpnserver1[9867]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Nov  2 22:12:17 vpnserver1[9867]: UDPv4 link local (bound): [AF_INET][undef]:1194
Nov  2 22:12:17 vpnserver1[9867]: UDPv4 link remote: [AF_UNSPEC]
Nov  2 22:12:17 vpnserver1[9867]: MULTI: multi_init called, r=256 v=256
Nov  2 22:12:17 vpnserver1[9867]: Initialization Sequence Completed
Nov  2 22:12:18 Samba Server: smb daemon is stoped
Nov  2 22:12:18 kernel: gro disabled
Nov  2 22:12:38 vpnserver1[9867]: MULTI: multi_create_instance called
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 Re-using SSL/TLS context
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 LZO compression initializing
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:46589 (via [AF_INET]xxx.xxx.xxx.xxx%eth0), sid=a192b11a 902f98f8
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U_B1, emailAddress=me@myhost.mydomain
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=client, emailAddress=me@myhost.mydomain
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_VER=2.4.7
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_PLAT=linux
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_PROTO=2
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_NCP=2
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_LZ4=1
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_LZ4v2=1
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_LZO=1
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_COMP_STUB=1
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_COMP_STUBv2=1
Nov  2 22:12:38 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 peer info: IV_TCPNL=1
Nov  2 22:12:39 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 PLUGIN_CALL: POST /usr/lib/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Nov  2 22:12:39 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 TLS: Username/Password authentication succeeded for username ' ' 
Nov  2 22:12:39 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Nov  2 22:12:39 vpnserver1[9867]: xxx.xxx.xxx.xxx:46589 [client] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:46589 (via [AF_INET]xxx.xxx.xxx.xxx%eth0)
Nov  2 22:12:39 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:46589 MULTI: no dynamic or static remote --ifconfig address is available for client/xxx.xxx.xxx.xxx:46589
Nov  2 22:12:40 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:46589 PUSH: Received control message: 'PUSH_REQUEST'
Nov  2 22:12:40 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:46589 SENT CONTROL [client]: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 60,peer-id 0,cipher AES-256-GCM' (status=1)
Nov  2 22:12:40 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:46589 Data Channel: using negotiated cipher 'AES-256-GCM'
Nov  2 22:12:40 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:46589 Data Channel MTU parms [ L:1582 D:1450 EF:50 EB:411 ET:32 EL:3 ]
Nov  2 22:12:40 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:46589 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov  2 22:12:40 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:46589 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov  2 22:12:52 ntp: start NTP update
Nov  2 22:13:45 vpnserver1[9867]: MULTI: multi_create_instance called
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 Re-using SSL/TLS context
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 LZO compression initializing
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:20517 (via [AF_INET]xxx.xxx.xxx.xxx%eth0), sid=86a3b6fb 15fbd114
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U_B1, emailAddress=me@myhost.mydomain
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=client, emailAddress=me@myhost.mydomain
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_VER=2.4.7
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_PLAT=linux
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_PROTO=2
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_NCP=2
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_LZ4=1
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_LZ4v2=1
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_LZO=1
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_COMP_STUB=1
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_COMP_STUBv2=1
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 peer info: IV_TCPNL=1
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 PLUGIN_CALL: POST /usr/lib/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 TLS: Username/Password authentication succeeded for username ' ' 
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Nov  2 22:13:45 vpnserver1[9867]: xxx.xxx.xxx.xxx:20517 [client] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:20517 (via [AF_INET]xxx.xxx.xxx.xxx%eth0)
Nov  2 22:13:45 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 MULTI: no dynamic or static remote --ifconfig address is available for client/xxx.xxx.xxx.xxx:20517
Nov  2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 PUSH: Received control message: 'PUSH_REQUEST'
Nov  2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 SENT CONTROL [client]: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 60,peer-id 1,cipher AES-256-GCM' (status=1)
Nov  2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 Data Channel: using negotiated cipher 'AES-256-GCM'
Nov  2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 Data Channel MTU parms [ L:1582 D:1450 EF:50 EB:411 ET:32 EL:3 ]
Nov  2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov  2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

This is directly from my router logs, I apologize if there is anything other than OpenVPN logs included.

TinCanTech

bgommel4 wrote Nov 2 22:13:45 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 MULTI: no dynamic or static remote --ifconfig address is available for client/xxx.xxx.xxx.xxx:20517
Nov 2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 PUSH: Received control message: 'PUSH_REQUEST'
Nov 2 22:13:47 vpnserver1[9867]: client/xxx.xxx.xxx.xxx:20517 SENT CONTROL [client]: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 60,peer-id 1,cipher AES-256-GCM' (status=1)

Your client does not get a VPN IP address...

bgommel4

Hmm that is strange. Does that have something to do with my DHCP server? I am currently testing with my laptop and it automatically gets a DHCP address when I connect it to my network.
The VPN server is configured to use the DHCP server on my LAN to give out IPs to VPN clients. A Windows client gets a local IP automatcally.
I was able to get it working by forcing a new DHCP renew after connecting to the VPN with "sudo dhclient -r & sudo dhclient".
Is this a flaw in my VPN config or in my Linux setup? I tried connecting from two different Linux machines and both did the same thing.
The good thing is that it is working and seems to be stable. It has been connected for 10 minutes now without an issue.
Do you know of a way to fix this?
Thank you!

TinCanTech

bgommel4 wrote Do you know of a way to fix this?

bgommel4 wrote I have a OpenVPN server set up on my Asus RT-AC66U B1 router

Read the Asus router manual .. ?

Basically, your network is not configured correctly.

If you want my help then you can contact me privately:
tincanteksup <at> gmail dot com .. fees will apply.

Pippin wrote Read here:
https://forums.openvpn.net/viewtopic.php?t=22603

or that :roll:

300000

You need update ip .just add this into client config

script-security 3
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

TinCanTech

300000 wrote You need update ip .just add this into client config

script-security 3
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

You clearly do not understand the problem. Please stop giving out fake information.

300000

TinCanTech wrote
300000 wrote You need update ip .just add this into client config

script-security 3
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
You clearly do not understand the problem. Please stop giving out fake information.

can you tell me what fake info i am giving out ? if you cant point out please stop saying that , he said windows pc can get connect , so nothing wrong with server and Linux dont have dhcp service client so it need up date resolv-conf to get ip , what wrong with my advice you said fake? or you need someone contact you and paid to get help so when i give out correct way you said it is fake?