After having installed and configured OpenVPN on a Windows 2016 Std. Server the following message occurs:
"Warning: route gateway is not reachable on any active network adapters: 10.10.9.2"
The Server has 1 ethernetadapter (local IP: 192.168.2.2). After initiating a connection. I receive the OpenVPN-status "Connected with server" "Obtained IP: 10.10.9.1".
A VPN-client can be connected and the client is obtaining an IP-adress (10.10.9.6), but cannot reaach the Server by 192.168.2.2 or 10.10.9.1.
status dump (connection and re-connection)
Wed Jan 27 21:40:57 2021 --pull-filter ignored for --mode server
Wed Jan 27 21:40:57 2021 OpenVPN 2.4.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 9 2020
Wed Jan 27 21:40:57 2021 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Jan 27 21:40:57 2021 library versions: OpenSSL 1.1.1i 8 Dec 2020, LZO 2.10
Wed Jan 27 21:40:57 2021 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Jan 27 21:40:57 2021 Need hold release from management interface, waiting...
Wed Jan 27 21:40:58 2021 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Jan 27 21:40:58 2021 MANAGEMENT: CMD 'state on'
Wed Jan 27 21:40:58 2021 MANAGEMENT: CMD 'log all on'
Wed Jan 27 21:40:58 2021 MANAGEMENT: CMD 'echo all on'
Wed Jan 27 21:40:58 2021 MANAGEMENT: CMD 'bytecount 5'
Wed Jan 27 21:40:58 2021 MANAGEMENT: CMD 'hold off'
Wed Jan 27 21:40:58 2021 MANAGEMENT: CMD 'hold release'
Wed Jan 27 21:40:58 2021 Diffie-Hellman initialized with 2048 bit key
Wed Jan 27 21:40:58 2021 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 27 21:40:58 2021 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 27 21:40:58 2021 interactive service msg_channel=676
Wed Jan 27 21:40:58 2021 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=6 HWADDR=b4:2e:99:4d:f7:17
Wed Jan 27 21:40:58 2021 open_tun
Wed Jan 27 21:40:58 2021 TAP-WIN32 device [PVDVPNServ1] opened: \\.\Global\{0F6CDE0D-8460-45E7-B4A6-6107C2A07714}.tap
Wed Jan 27 21:40:58 2021 TAP-Windows Driver Version 9.24
Wed Jan 27 21:40:58 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.9.1/255.255.255.252 on interface {0F6CDE0D-8460-45E7-B4A6-6107C2A07714} [DHCP-serv: 10.10.9.2, lease-time: 31536000]
Wed Jan 27 21:40:58 2021 Sleeping for 5 seconds...
Wed Jan 27 21:41:03 2021 Successful ARP Flush on interface [13] {0F6CDE0D-8460-45E7-B4A6-6107C2A07714}
Wed Jan 27 21:41:03 2021 MANAGEMENT: >STATE:1611780063,ASSIGN_IP,,10.10.9.1,,,,
Wed Jan 27 21:41:03 2021 MANAGEMENT: >STATE:1611780063,ADD_ROUTES,,,,,,
Wed Jan 27 21:41:03 2021 C:\Windows\system32\route.exe ADD 10.10.9.0 MASK 255.255.255.0 10.10.9.2
Wed Jan 27 21:41:03 2021 Route addition via service succeeded
Wed Jan 27 21:41:03 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Jan 27 21:41:03 2021 Listening for incoming TCP connection on [AF_INET][undef]:11223
Wed Jan 27 21:41:03 2021 TCPv4_SERVER link local (bound): [AF_INET][undef]:11223
Wed Jan 27 21:41:03 2021 TCPv4_SERVER link remote: [AF_UNSPEC]
Wed Jan 27 21:41:03 2021 MULTI: multi_init called, r=256 v=256
Wed Jan 27 21:41:03 2021 IFCONFIG POOL: base=10.10.9.4 size=62, ipv6=0
Wed Jan 27 21:41:03 2021 MULTI: TCP INIT maxclients=60 maxevents=64
Wed Jan 27 21:41:03 2021 Initialization Sequence Completed
Wed Jan 27 21:41:03 2021 MANAGEMENT: >STATE:1611780063,CONNECTED,SUCCESS,10.10.9.1,,,,
Wed Jan 27 21:41:23 2021 TCP connection established with [AF_INET]84.190.252.90:62443
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 TLS: Initial packet from [AF_INET]84.190.252.90:62443, sid=6d206a45 426ef87b
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 VERIFY OK: depth=1, C=DE, ST=DE, L=KL, O=PVDKL, OU=PVDKL, CN=PVD, name=PVDVPN, emailAddress=info@sdc-consult.net
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 VERIFY OK: depth=0, C=DE, ST=DE, L=KL, O=PVDKL, OU=PVDKL, CN=PVDVPNTest1, name=PVDVPN, emailAddress=info@sdc-consult.net
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_VER=2.4.8
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_PLAT=win
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_PROTO=2
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_NCP=2
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_LZ4=1
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_LZ4v2=1
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_LZO=1
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_COMP_STUB=1
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_COMP_STUBv2=1
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_TCPNL=1
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 peer info: IV_GUI_VER=OpenVPN_GUI_11
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Wed Jan 27 21:41:24 2021 84.190.252.90:62443 [PVDVPNTest1] Peer Connection Initiated with [AF_INET]84.190.252.90:62443
Wed Jan 27 21:41:24 2021 PVDVPNTest1/84.190.252.90:62443 MULTI_sva: pool returned IPv4=10.10.9.6, IPv6=(Not enabled)
Wed Jan 27 21:41:24 2021 PVDVPNTest1/84.190.252.90:62443 MULTI: Learn: 10.10.9.6 -> PVDVPNTest1/84.190.252.90:62443
Wed Jan 27 21:41:24 2021 PVDVPNTest1/84.190.252.90:62443 MULTI: primary virtual IP for PVDVPNTest1/84.190.252.90:62443: 10.10.9.6
Wed Jan 27 21:41:25 2021 PVDVPNTest1/84.190.252.90:62443 PUSH: Received control message: 'PUSH_REQUEST'
Wed Jan 27 21:41:25 2021 PVDVPNTest1/84.190.252.90:62443 SENT CONTROL [PVDVPNTest1]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 10.10.9.1,topology net30,ping 10,ping-restart 120,ifconfig 10.10.9.6 10.10.9.5,peer-id 0,cipher AES-256-GCM' (status=1)
Wed Jan 27 21:41:25 2021 PVDVPNTest1/84.190.252.90:62443 Data Channel: using negotiated cipher 'AES-256-GCM'
Wed Jan 27 21:41:25 2021 PVDVPNTest1/84.190.252.90:62443 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Jan 27 21:41:25 2021 PVDVPNTest1/84.190.252.90:62443 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Wed Jan 27 21:44:14 2021 PVDVPNTest1/84.190.252.90:62443 Connection reset, restarting [-1]
Wed Jan 27 21:44:14 2021 PVDVPNTest1/84.190.252.90:62443 SIGUSR1[soft,connection-reset] received, client-instance restarting
Thu Jan 28 10:35:33 2021 MANAGEMENT: CMD 'signal SIGHUP'
Thu Jan 28 10:35:33 2021 C:\Windows\system32\route.exe DELETE 10.10.9.0 MASK 255.255.255.0 10.10.9.2
Thu Jan 28 10:35:33 2021 Route deletion via service succeeded
Thu Jan 28 10:35:33 2021 Closing TUN/TAP interface
Thu Jan 28 10:35:34 2021 TAP: DHCP address released
Thu Jan 28 10:35:34 2021 SIGHUP[hard,] received, process restarting
Thu Jan 28 10:35:34 2021 MANAGEMENT: >STATE:1611826534,RECONNECTING,SIGHUP,,,,,
Thu Jan 28 10:35:34 2021 --pull-filter ignored for --mode server
Thu Jan 28 10:35:34 2021 OpenVPN 2.4.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 9 2020
Thu Jan 28 10:35:34 2021 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Jan 28 10:35:34 2021 library versions: OpenSSL 1.1.1i 8 Dec 2020, LZO 2.10
Thu Jan 28 10:35:34 2021 Restart pause, 1 second(s)
Thu Jan 28 10:35:35 2021 Diffie-Hellman initialized with 2048 bit key
Thu Jan 28 10:35:35 2021 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 28 10:35:35 2021 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 28 10:35:35 2021 interactive service msg_channel=676
Thu Jan 28 10:35:35 2021 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 I=6 HWADDR=b4:2e:99:4d:f7:17
Thu Jan 28 10:35:35 2021 open_tun
Thu Jan 28 10:35:35 2021 TAP-WIN32 device [PVDVPNServ1] opened: \\.\Global\{0F6CDE0D-8460-45E7-B4A6-6107C2A07714}.tap
Thu Jan 28 10:35:35 2021 TAP-Windows Driver Version 9.24
Thu Jan 28 10:35:35 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.9.1/255.255.255.252 on interface {0F6CDE0D-8460-45E7-B4A6-6107C2A07714} [DHCP-serv: 10.10.9.2, lease-time: 31536000]
Thu Jan 28 10:35:35 2021 Sleeping for 5 seconds...
Thu Jan 28 10:35:40 2021 Successful ARP Flush on interface [13] {0F6CDE0D-8460-45E7-B4A6-6107C2A07714}
Thu Jan 28 10:35:40 2021 MANAGEMENT: >STATE:1611826540,ASSIGN_IP,,10.10.9.1,,,,
Thu Jan 28 10:35:40 2021 MANAGEMENT: >STATE:1611826540,ADD_ROUTES,,,,,,
Thu Jan 28 10:35:40 2021 C:\Windows\system32\route.exe ADD 10.10.9.0 MASK 255.255.255.0 10.10.9.2
Thu Jan 28 10:35:40 2021 Warning: route gateway is not reachable on any active network adapters: 10.10.9.2
Thu Jan 28 10:35:40 2021 Route addition via service failed
Thu Jan 28 10:35:40 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Jan 28 10:35:40 2021 Listening for incoming TCP connection on [AF_INET][undef]:11223
Thu Jan 28 10:35:40 2021 TCPv4_SERVER link local (bound): [AF_INET][undef]:11223
Thu Jan 28 10:35:40 2021 TCPv4_SERVER link remote: [AF_UNSPEC]
Thu Jan 28 10:35:40 2021 MULTI: multi_init called, r=256 v=256
Thu Jan 28 10:35:40 2021 IFCONFIG POOL: base=10.10.9.4 size=62, ipv6=0
Thu Jan 28 10:35:40 2021 MULTI: TCP INIT maxclients=60 maxevents=64
Thu Jan 28 10:35:40 2021 Initialization Sequence Completed
Thu Jan 28 10:35:40 2021 MANAGEMENT: >STATE:1611826540,CONNECTED,SUCCESS,10.10.9.1,,,,
dev-node "PVDVPNServ1"
mode server
port 11223
proto tcp4-server
dev tun
#tap-sleep 5
tls-server
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ta.key" 0
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\PVDVPNServ1.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\PVDVPNServ1.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh2048.pem"
server 10.10.9.0 255.255.255.0
keepalive 10 120
cipher AES-128-CBC
#comp-lzo
#client-config-dir "C:\\Program Files\\OpenVPN\\config"
verb 3
route-delay 5
route-method exe
push "route 192.168.2.0 255.255.255.0"
# S.D.C. Consult S.a.r.l.-S.
#
info@sdc-consult.net
remote xxx.xxx.xxx.xxx
client
port 11223
proto tcp4-client
dev tun
tls-client
tls-auth "C:\\Program Files\\OpenVPN\\config\\PVD\\ta.key" 1
remote-cert-tls server
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca "C:\\Program Files\\OpenVPN\\config\\PVD\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\PVD\\PVDVPNTest1.crt"
key "C:\\Program Files\\OpenVPN\\config\\PVD\\PVDVPNTest1.key"
cipher AES-128-CBC
#comp-lzo
persist-key
persist-tun
verb 3
mute 20
Furthermore the client is receiving a route:
Aktive Routes:
Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik
0.0.0.0 0.0.0.0 192.168.0.6 192.168.0.112 281
10.10.9.1 255.255.255.255 10.10.9.5 10.10.9.6 281
10.10.9.4 255.255.255.252 Auf Verbindung 10.10.9.6 281
10.10.9.6 255.255.255.255 Auf Verbindung 10.10.9.6 281
10.10.9.7 255.255.255.255 Auf Verbindung 10.10.9.6 281
127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 331
127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 331
127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 331
169.254.0.0 255.255.0.0 Auf Verbindung 169.254.96.131 291
169.254.0.0 255.255.0.0 Auf Verbindung 169.254.35.85 291
169.254.35.85 255.255.255.255 Auf Verbindung 169.254.35.85 291
169.254.96.131 255.255.255.255 Auf Verbindung 169.254.96.131 291
169.254.255.255 255.255.255.255 Auf Verbindung 169.254.96.131 291
169.254.255.255 255.255.255.255 Auf Verbindung 169.254.35.85 291
192.168.0.0 255.255.255.0 Auf Verbindung 192.168.0.112 281
192.168.0.112 255.255.255.255 Auf Verbindung 192.168.0.112 281
192.168.0.255 255.255.255.255 Auf Verbindung 192.168.0.112 281
192.168.2.0 255.255.255.0 10.10.9.5 10.10.9.6 281
Any ideas ? Thanks in advance :-)