win client Route add does not works even with Admin rights

sagre74

Hello everybody,
I installed the vpn server on a linux machine and the client version on windows 10.
I tried to connect from outside my lan but I always receive error connection when creating the route.I already set the vpn-gui to run as admin and disabled the UAC but without no lucky.
In addition, I added the routes manually and the connection works. If I do not change my connection and I use the same connection as the server one the connection can be established.
If there someone who can put me in the right direction ? I already red many threads but my issue seems don't find the right answer....
...
[oconf=]
client
dev tap
proto udp
;route-method exe
;route-delay 2
;script-security 3

remote xxxxxx 1194

resolv-retry infinite
nobind
remote-cert-tls server
tls-version-min 1.2
verify-x509-name fdfdfdfdf name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 4
[/oconf]

and here the issue I guess...

[olog]
2021-05-22 16:08:25 us=41622 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
2021-05-22 16:08:25 us=41622 Route: Waiting for TUN/TAP interface to come up...
2021-05-22 16:08:30 us=643388 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
2021-05-22 16:08:30 us=643388 Route: Waiting for TUN/TAP interface to come up...
2021-05-22 16:08:31 us=168185 TEST ROUTES: 0/2 succeeded len=1 ret=0 a=0 u/d=up
.....(so many times...)
2021-05-22 16:08:55 us=268958 C:\WINDOWS\system32\route.exe ADD 130.25.242.193 MASK 255.255.255.255 192.168.43.1
2021-05-22 16:08:55 us=268958 Route addition via service succeeded
2021-05-22 16:08:55 us=268958 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 192.168.1.13
2021-05-22 16:08:55 us=268958 Warning: route gateway is not reachable on any active network adapters: 192.168.1.13
2021-05-22 16:08:55 us=268958 Route addition via service failed
2021-05-22 16:08:55 us=268958 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 192.168.1.13
2021-05-22 16:08:55 us=268958 Warning: route gateway is not reachable on any active network adapters: 192.168.1.13
2021-05-22 16:08:55 us=268958 Route addition via service failed
2021-05-22 16:08:55 us=268958 MANAGEMENT: >STATE:1621692535,ADD_ROUTES,,,,,,
2021-05-22 16:08:55 us=268958 C:\WINDOWS\system32\route.exe ADD 192.168.1.0 MASK 255.255.255.0 192.168.1.13
2021-05-22 16:08:55 us=284469 Warning: route gateway is not reachable on any active network adapters: 192.168.1.13
2021-05-22 16:08:55 us=284469 Route addition via service failed
[/olog]
Thank you !!

sagre74

One thing more...
I discovered that if I am in my lan with che VPN client the route command executes successfully, I can see the routes with the ROUTE PRINT command.
If I start a tethering connection with my phone, I receive the error described in the post and routes are not created.
How this is possible? perhaps it is not a permission issue?

Thanks for helping!

sagre74

After a week of tests I start thinking that the issue is not the route add command... but it could be related to the Windows TAP interface that for some reason it does not come up when the GUI start the connection, as reported in the log....
there are many threads about this but I did not find someone who can help me to fix my issue.
In the network panel I can identify the OPENVPN TAP-Windows6 adapter disconnected and when the connection start it show a connected status but them the issue remains.
nor reinstall of the interface or a reboot fix the issue.
did anyone experience the same issue?
How can I fix the "Waiting for TUN/TAP interface to come up..." message?
Thank you

TinCanTech

Your local network is borked -- Openvpn cannot work with it.

sagre74

TinCanTech wrote Your local network is borked -- Openvpn cannot work with it.

Thank you for the reply.
What do you mean? the laptop is using a tethering connection with the smartphone and the 1194 port is open in the home router , there are no firewalls (I disabled the windows firewall ) and looking at the client log the connection is established with my raspberry...
I can also see the openVPN tray icon that becomes yellow , not sure what this means....

TinCanTech

Try using --dev tun not --dev tap, otherwise you are not going to get it to work.

sagre74

Hi,
if I change my vpn (server side and client side) I can make it work but then I can only reach the vpn server without accessing to the entire lan....just the vpn server. That's the reason I tried with the bridge interface as I was looking for an easy solution and the bridge seemed to be the good solution . 🙁
If I use the tun option how can I configure my vpn server to access to the other LAN pcs?
Thank you !!