Hi there,
I set up a Tun vpn via OpenVpn on a raspberry pi 4. It worked perfectly, but I want to set up a Tap vpn to be abble to have every connected devices on the same ip range.
When I try to connect through Tap0 Vpn I got the "Waiting for TUN/TAP interface to come up..." issue and it doesn't work. I probably missed something but after a week trying I'm close to giving up.
Can anybody help me please ?
I'm trying to connect with openVpn Gui 2.5.0. on W10.
Here the sanitize log file :
2020-12-20 18:55:15 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2020-12-20 18:55:15 OpenVPN 2.5.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 28 2020
2020-12-20 18:55:15 Windows version 10.0 (Windows 10 or greater) 64bit
2020-12-20 18:55:15 library versions: OpenSSL 1.1.1h 22 Sep 2020, LZO 2.10
Enter Management Password:
2020-12-20 18:55:15 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
2020-12-20 18:55:15 Need hold release from management interface, waiting...
2020-12-20 18:55:16 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
2020-12-20 18:55:16 MANAGEMENT: CMD 'state on'
2020-12-20 18:55:16 MANAGEMENT: CMD 'log all on'
2020-12-20 18:55:16 MANAGEMENT: CMD 'echo all on'
2020-12-20 18:55:16 MANAGEMENT: CMD 'bytecount 5'
2020-12-20 18:55:16 MANAGEMENT: CMD 'hold off'
2020-12-20 18:55:16 MANAGEMENT: CMD 'hold release'
2020-12-20 18:55:16 MANAGEMENT: CMD 'password [...]'
2020-12-20 18:55:16 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2020-12-20 18:55:16 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2020-12-20 18:55:16 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2020-12-20 18:55:16 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2020-12-20 18:55:16 MANAGEMENT: >STATE:1608508516,RESOLVE,,,,,,
2020-12-20 18:55:16 TCP/UDP: Preserving recently used remote address: [AF_INET]999.999.999.999:1194
2020-12-20 18:55:16 Socket Buffers: R=[65536->65536] S=[65536->65536]
2020-12-20 18:55:16 UDP link local: (not bound)
2020-12-20 18:55:16 UDP link remote: [AF_INET]999.999.999.999:1194
2020-12-20 18:55:16 MANAGEMENT: >STATE:1608508516,WAIT,,,,,,
2020-12-20 18:55:16 MANAGEMENT: >STATE:1608508516,AUTH,,,,,,
2020-12-20 18:55:16 TLS: Initial packet from [AF_INET]999.999.999.999:1194, sid=e6d17e4b bddf0147
2020-12-20 18:55:16 VERIFY KU OK
2020-12-20 18:55:16 Validating certificate extended key usage
2020-12-20 18:55:16 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2020-12-20 18:55:16 VERIFY EKU OK
2020-12-20 18:55:16 VERIFY X509NAME OK: CN=XXXXXXXXXXXXXXXXXXX
2020-12-20 18:55:16 VERIFY OK: depth=0, CN=XXXXXXXXXXXXXXXXXXX
2020-12-20 18:55:16 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 256 bit EC, curve: prime256v1
2020-12-20 18:55:16 [XXXXXXXXXXXXXXXXXXX] Peer Connection Initiated with [AF_INET]999.999.999.999:1194
2020-12-20 18:55:18 MANAGEMENT: >STATE:1608508518,GET_CONFIG,,,,,,
2020-12-20 18:55:18 SENT CONTROL [XXXXXXXXXXXXXXXXXXX]: 'PUSH_REQUEST' (status=1)
2020-12-20 18:55:18 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,block-outside-dns,redirect-gateway def1,route-gateway 192.168.2.41,ping 15,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
2020-12-20 18:55:18 OPTIONS IMPORT: timers and/or timeouts modified
2020-12-20 18:55:18 OPTIONS IMPORT: --ifconfig/up options modified
2020-12-20 18:55:18 OPTIONS IMPORT: route options modified
2020-12-20 18:55:18 OPTIONS IMPORT: route-related options modified
2020-12-20 18:55:18 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2020-12-20 18:55:18 OPTIONS IMPORT: peer-id set
2020-12-20 18:55:18 OPTIONS IMPORT: adjusting link_mtu to 1656
2020-12-20 18:55:18 OPTIONS IMPORT: data channel crypto options modified
2020-12-20 18:55:18 Data Channel: using negotiated cipher 'AES-256-GCM'
2020-12-20 18:55:18 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-12-20 18:55:18 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-12-20 18:55:18 interactive service msg_channel=752
2020-12-20 18:55:18 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=9 HWADDR=0c:7a:15:b3:b5:f0
2020-12-20 18:55:18 open_tun
2020-12-20 18:55:18 tap-windows6 device [OpenVPN TAP-Windows6] opened
2020-12-20 18:55:18 TAP-Windows Driver Version 9.24
2020-12-20 18:55:18 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {F651DDDE-CD6C-48C0-9EC9-5C227E524FD6} [DHCP-serv: 10.8.0.0, lease-time: 31536000]
2020-12-20 18:55:18 Successful ARP Flush on interface [19] {F651DDDE-CD6C-48C0-9EC9-5C227E524FD6}
2020-12-20 18:55:18 MANAGEMENT: >STATE:1608508518,ASSIGN_IP,,10.8.0.2,,,,
2020-12-20 18:55:18 IPv4 MTU set to 1500 on interface 19 using service
2020-12-20 18:55:18 Blocking outside dns using service succeeded.
2020-12-20 18:55:23 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:23 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:28 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:28 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:29 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:29 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:30 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:30 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:31 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:31 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:32 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:32 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:33 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:33 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:34 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:34 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:36 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:36 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:37 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:37 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:39 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:39 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:40 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:40 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:41 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:41 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:42 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:42 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:44 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:44 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:45 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:45 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:46 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:46 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:47 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:47 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:49 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:49 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:50 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:50 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:51 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:51 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:52 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:52 Route: Waiting for TUN/TAP interface to come up...
2020-12-20 18:55:53 TEST ROUTES: 0/1 succeeded len=0 ret=0 a=0 u/d=up
2020-12-20 18:55:53 C:\Windows\system32\route.exe ADD 999.999.999.999 MASK 255.255.255.255 192.168.43.1
2020-12-20 18:55:53 Route addition via service succeeded
2020-12-20 18:55:53 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.2.41
2020-12-20 18:55:53 Warning: route gateway is not reachable on any active network adapters: 192.168.2.41
2020-12-20 18:55:53 Route addition via service failed
2020-12-20 18:55:53 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.2.41
2020-12-20 18:55:53 Warning: route gateway is not reachable on any active network adapters: 192.168.2.41
2020-12-20 18:55:53 Route addition via service failed
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 192.168.43.1 p=0 i=9 t=4 pr=3 a=43 h=0 m=50/0/0/0/0
10.8.0.0 255.255.255.0 10.8.0.2 p=0 i=19 t=3 pr=2 a=36 h=0 m=259/0/0/0/0
10.8.0.2 255.255.255.255 10.8.0.2 p=0 i=19 t=3 pr=2 a=36 h=0 m=259/0/0/0/0
10.8.0.255 255.255.255.255 10.8.0.2 p=0 i=19 t=3 pr=2 a=36 h=0 m=259/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=7680 h=0 m=331/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=7680 h=0 m=331/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=7680 h=0 m=331/0/0/0/0
999.999.999.999 255.255.255.255 192.168.43.1 p=0 i=9 t=4 pr=3 a=0 h=0 m=306/0/0/0/0
192.168.43.0 255.255.255.0 192.168.43.203 p=0 i=9 t=3 pr=2 a=43 h=0 m=306/0/0/0/0
192.168.43.203 255.255.255.255 192.168.43.203 p=0 i=9 t=3 pr=2 a=43 h=0 m=306/0/0/0/0
192.168.43.255 255.255.255.255 192.168.43.203 p=0 i=9 t=3 pr=2 a=43 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=7680 h=0 m=331/0/0/0/0
224.0.0.0 240.0.0.0 192.168.43.203 p=0 i=9 t=3 pr=2 a=7673 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 10.8.0.2 p=0 i=19 t=3 pr=2 a=6214 h=0 m=259/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=7680 h=0 m=331/0/0/0/0
255.255.255.255 255.255.255.255 192.168.43.203 p=0 i=9 t=3 pr=2 a=7673 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 10.8.0.2 p=0 i=19 t=3 pr=2 a=6214 h=0 m=259/0/0/0/0
SYSTEM ADAPTER LIST
Intel(R) Ethernet Connection (7) I219-V
Index = 17
GUID = {EA73FA36-5F05-40D4-A05B-79EF2966EAEC}
IP = 0.0.0.0/0.0.0.0
MAC = 2c:f0:5d:35:ab:2f
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV =
DHCP LEASE OBTAINED = 2020-12-20 18:55:53
DHCP LEASE EXPIRES = 2020-12-20 18:55:53
DNS SERV =
Wintun Userspace Tunnel
Index = 14
GUID = {BB5BC535-667D-4615-A979-C4D4C8672209}
IP = 0.0.0.0/0.0.0.0
MAC =
GATEWAY = 0.0.0.0/255.255.255.255
DNS SERV =
TAP-Windows Adapter V9
Index = 19
GUID = {F651DDDE-CD6C-48C0-9EC9-5C227E524FD6}
IP = 10.8.0.2/255.255.255.0
MAC = 00:ff:f6:51:dd:de
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV = 10.8.0.0/255.255.255.255
DHCP LEASE OBTAINED = 2020-12-20 18:55:17
DHCP LEASE EXPIRES = 2021-12-20 18:55:17
DNS SERV = 1.1.1.1/255.255.255.255 1.0.0.1/255.255.255.255
Intel(R) Dual Band Wireless-AC 7265
Index = 9
GUID = {3E686482-87CF-4097-AA36-C3FA624ECB49}
IP = 192.168.43.203/255.255.255.0
MAC = 0c:7a:15:b3:b5:f0
GATEWAY = 192.168.43.1/255.255.255.255
DHCP SERV = 192.168.43.1/255.255.255.255
DHCP LEASE OBTAINED = 2020-12-20 18:55:10
DHCP LEASE EXPIRES = 2020-12-20 19:55:10
DNS SERV = 192.168.43.1/255.255.255.255
Microsoft Wi-Fi Direct Virtual Adapter
Index = 20
GUID = {F86A3298-BB2E-43A7-9F78-D5684DF354BC}
IP = 0.0.0.0/0.0.0.0
MAC = 0c:7a:15:b3:b5:f1
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV =
DHCP LEASE OBTAINED = 2020-12-20 18:55:53
DHCP LEASE EXPIRES = 2020-12-20 18:55:53
DNS SERV =
Microsoft Wi-Fi Direct Virtual Adapter #2
Index = 8
GUID = {3377C653-F9F4-48F4-B5BB-B512E0F47A40}
IP = 0.0.0.0/0.0.0.0
MAC = 0e:7a:15:b3:b5:f0
GATEWAY = 0.0.0.0/255.255.255.255
DNS SERV =
2020-12-20 18:55:53 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
2020-12-20 18:55:53 MANAGEMENT: >STATE:1608508553,CONNECTED,ERROR,10.8.0.2,999.999.999.999,1194,,
Here the server.conf :
#dev tun
dev tap0
proto udp
port 1194
ca /etc/openvpn/easy-rsa/pki/XXXX.crt
cert /etc/openvpn/easy-rsa/pki/issued/XXX.crt
key /etc/openvpn/easy-rsa/pki/private/XXX.key
dh none
ecdh-curve prime256v1
topology subnet
#server 10.8.0.0 255.255.255.0
# Set your primary domain name server address for clients
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
# Prevent DNS leaks on Windows
push "block-outside-dns"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
client-config-dir /etc/openvpn/ccd
keepalive 15 120
remote-cert-tls client
tls-version-min 1.2
tls-crypt /etc/openvpn/easy-rsa/pki/ta.key
cipher AES-256-CBC
auth SHA256
user openvpn
group openvpn
persist-key
#persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 3
#DuplicateCNs allow access control on a less-granular, per user basis.
#Remove # if you will manage access by user instead of device.
#duplicate-cn
# Generated for use by PiVPN.io
server-bridge 192.168.2.41 255.255.255.0 192.168.2.180 192.168.2.200
Here the ccd file :
ifconfig-push 10.8.0.2 255.255.255.0
