Hello to all
Im trying to setup a OpenVPN server on a windows 10 pro machine. Im having connection issues where all the clients are able to connect, get an IP address, show the public IP address of the server
but are unable to browse the internet.
"IPEnabledRouter" parameter is enabled
Windows firewall is completely disabled
"Routing and Remote Access" is enabled
OpenVPN GUI is running with admin elevation
OpenVPN server (192.168.143.1) is pingable from iOS device. No other pings are successful
I can provide iOS sreenshots in the meantime but issue occurrs on all devices trying to connect
Here are my current configs
port 443
proto udp4
dev tun
#duplicate-cn
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 0
cipher AES-256-CBC
auth SHA1
#cipher AES-256-GCM
remote-cert-tls client
server 192.168.143.0 255.255.255.0 nopool
#ifconfig-pool-persist ipp.txt
ifconfig-pool 192.168.143.10 192.168.143.20
topology subnet
push "redirect-gateway def1 bypass-dhcp"
#push "redirect-gateway autolocal def1"
#push "redirect-gateway def1"
push "route 10.0.4.0 255.255.255.0"
#push "dhcp-option DNS 192.168.143.1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 1.1.1.1"
push "block-outside-dns"
keepalive 30 180
#comp-lzo
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 4
explicit-exit-notify 1
#fragment 1200 ##### very important you can turn it up a bit. but,the lower the safer
#mssfix 1200 ##### very important
#sndbuf 2000000 ##### important
#rcvbuf 2000000 ##### important
#push "sndbuf 2000000"
#push "rcvbuf 2000000"
#mssfix 1411
client
dev tun
proto udp4
remote xxxx.xxxx.com 443
resolv-retry infinite
--resolv-retry 120
nobind
#comp-lzo
persist-key
persist-tun
remote-cert-tls server
key-direction 1
cipher AES-256-CBC
#cipher AES-256-GCM
verb 3
auth SHA1
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
log when server is starting
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_private_mode = 00000000
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_cert_private = DISABLED
Tue Dec 21 11:15:56 2021 pkcs11_pin_cache_period = -1
Tue Dec 21 11:15:56 2021 pkcs11_id = '[UNDEF]'
Tue Dec 21 11:15:56 2021 pkcs11_id_management = DISABLED
Tue Dec 21 11:15:56 2021 server_network = 192.168.143.0
Tue Dec 21 11:15:56 2021 server_netmask = 255.255.255.0
Tue Dec 21 11:15:56 2021 server_network_ipv6 = ::
Tue Dec 21 11:15:56 2021 server_netbits_ipv6 = 0
Tue Dec 21 11:15:56 2021 server_bridge_ip = 0.0.0.0
Tue Dec 21 11:15:56 2021 server_bridge_netmask = 0.0.0.0
Tue Dec 21 11:15:56 2021 server_bridge_pool_start = 0.0.0.0
Tue Dec 21 11:15:56 2021 server_bridge_pool_end = 0.0.0.0
Tue Dec 21 11:15:56 2021 push_entry = 'redirect-gateway def1 bypass-dhcp'
Tue Dec 21 11:15:56 2021 push_entry = 'dhcp-option DNS 8.8.8.8'
Tue Dec 21 11:15:56 2021 push_entry = 'dhcp-option DNS 1.1.1.1'
Tue Dec 21 11:15:56 2021 push_entry = 'block-outside-dns'
Tue Dec 21 11:15:56 2021 push_entry = 'route-gateway 192.168.143.1'
Tue Dec 21 11:15:56 2021 push_entry = 'topology subnet'
Tue Dec 21 11:15:56 2021 push_entry = 'ping 30'
Tue Dec 21 11:15:56 2021 push_entry = 'ping-restart 180'
Tue Dec 21 11:15:56 2021 ifconfig_pool_defined = ENABLED
Tue Dec 21 11:15:56 2021 ifconfig_pool_start = 192.168.143.10
Tue Dec 21 11:15:56 2021 ifconfig_pool_end = 192.168.143.20
Tue Dec 21 11:15:56 2021 ifconfig_pool_netmask = 255.255.255.0
Tue Dec 21 11:15:56 2021 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Dec 21 11:15:56 2021 ifconfig_pool_persist_refresh_freq = 600
Tue Dec 21 11:15:56 2021 ifconfig_ipv6_pool_defined = DISABLED
Tue Dec 21 11:15:56 2021 ifconfig_ipv6_pool_base = ::
Tue Dec 21 11:15:56 2021 ifconfig_ipv6_pool_netbits = 0
Tue Dec 21 11:15:56 2021 n_bcast_buf = 256
Tue Dec 21 11:15:56 2021 tcp_queue_limit = 64
Tue Dec 21 11:15:56 2021 real_hash_size = 256
Tue Dec 21 11:15:56 2021 virtual_hash_size = 256
Tue Dec 21 11:15:56 2021 client_connect_script = '[UNDEF]'
Tue Dec 21 11:15:56 2021 learn_address_script = '[UNDEF]'
Tue Dec 21 11:15:56 2021 client_disconnect_script = '[UNDEF]'
Tue Dec 21 11:15:56 2021 client_config_dir = '[UNDEF]'
Tue Dec 21 11:15:56 2021 ccd_exclusive = DISABLED
Tue Dec 21 11:15:56 2021 tmp_dir = 'C:\Users\ANDRES~1\AppData\Local\Temp\'
Tue Dec 21 11:15:56 2021 push_ifconfig_defined = DISABLED
Tue Dec 21 11:15:56 2021 push_ifconfig_local = 0.0.0.0
Tue Dec 21 11:15:56 2021 push_ifconfig_remote_netmask = 0.0.0.0
Tue Dec 21 11:15:56 2021 push_ifconfig_ipv6_defined = DISABLED
Tue Dec 21 11:15:56 2021 push_ifconfig_ipv6_local = ::/0
Tue Dec 21 11:15:56 2021 push_ifconfig_ipv6_remote = ::
Tue Dec 21 11:15:56 2021 enable_c2c = DISABLED
Tue Dec 21 11:15:56 2021 duplicate_cn = DISABLED
Tue Dec 21 11:15:56 2021 cf_max = 0
Tue Dec 21 11:15:56 2021 cf_per = 0
Tue Dec 21 11:15:56 2021 max_clients = 1024
Tue Dec 21 11:15:56 2021 max_routes_per_client = 256
Tue Dec 21 11:15:56 2021 auth_user_pass_verify_script = '[UNDEF]'
Tue Dec 21 11:15:56 2021 auth_user_pass_verify_script_via_file = DISABLED
Tue Dec 21 11:15:56 2021 auth_token_generate = DISABLED
Tue Dec 21 11:15:56 2021 auth_token_lifetime = 0
Tue Dec 21 11:15:56 2021 client = DISABLED
Tue Dec 21 11:15:56 2021 pull = DISABLED
Tue Dec 21 11:15:56 2021 auth_user_pass_file = '[UNDEF]'
Tue Dec 21 11:15:56 2021 show_net_up = DISABLED
Tue Dec 21 11:15:56 2021 route_method = 3
Tue Dec 21 11:15:56 2021 block_outside_dns = DISABLED
Tue Dec 21 11:15:56 2021 ip_win32_defined = DISABLED
Tue Dec 21 11:15:56 2021 ip_win32_type = 3
Tue Dec 21 11:15:56 2021 dhcp_masq_offset = 0
Tue Dec 21 11:15:56 2021 dhcp_lease_time = 31536000
Tue Dec 21 11:15:56 2021 tap_sleep = 10
Tue Dec 21 11:15:56 2021 dhcp_options = DISABLED
Tue Dec 21 11:15:56 2021 dhcp_renew = DISABLED
Tue Dec 21 11:15:56 2021 dhcp_pre_release = DISABLED
Tue Dec 21 11:15:56 2021 domain = '[UNDEF]'
Tue Dec 21 11:15:56 2021 netbios_scope = '[UNDEF]'
Tue Dec 21 11:15:56 2021 netbios_node_type = 0
Tue Dec 21 11:15:56 2021 disable_nbt = DISABLED
Tue Dec 21 11:15:56 2021 OpenVPN 2.4.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 17 2021
Tue Dec 21 11:15:56 2021 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Dec 21 11:15:56 2021 library versions: OpenSSL 1.1.1k 25 Mar 2021, LZO 2.10
Tue Dec 21 11:15:56 2021 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Tue Dec 21 11:15:56 2021 Need hold release from management interface, waiting...
Tue Dec 21 11:15:56 2021 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Tue Dec 21 11:15:57 2021 MANAGEMENT: CMD 'state on'
Tue Dec 21 11:15:57 2021 MANAGEMENT: CMD 'log all on'
Tue Dec 21 11:15:57 2021 MANAGEMENT: CMD 'echo all on'
Tue Dec 21 11:15:57 2021 MANAGEMENT: CMD 'bytecount 5'
Tue Dec 21 11:15:57 2021 MANAGEMENT: CMD 'hold off'
Tue Dec 21 11:15:57 2021 MANAGEMENT: CMD 'hold release'
Tue Dec 21 11:15:57 2021 Diffie-Hellman initialized with 1024 bit key
Tue Dec 21 11:15:57 2021 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 21 11:15:57 2021 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 21 11:15:57 2021 TLS-Auth MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 21 11:15:57 2021 interactive service msg_channel=564
Tue Dec 21 11:15:57 2021 open_tun
Tue Dec 21 11:15:57 2021 TAP-WIN32 device [TAP] opened: \\.\Global\{CE2A25A3-39DE-4D1D-A023-40ADE5A7E297}.tap
Tue Dec 21 11:15:57 2021 TAP-Windows Driver Version 9.24
Tue Dec 21 11:15:57 2021 TAP-Windows MTU=1500
Tue Dec 21 11:15:57 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.143.0/192.168.143.1/255.255.255.0 [SUCCEEDED]
Tue Dec 21 11:15:57 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.143.1/255.255.255.0 on interface {CE2A25A3-39DE-4D1D-A023-40ADE5A7E297} [DHCP-serv: 192.168.143.254, lease-time: 31536000]
Tue Dec 21 11:15:57 2021 Sleeping for 10 seconds...
Tue Dec 21 11:16:07 2021 Successful ARP Flush on interface [16] {CE2A25A3-39DE-4D1D-A023-40ADE5A7E297}
Tue Dec 21 11:16:07 2021 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Dec 21 11:16:07 2021 MANAGEMENT: >STATE:1640103367,ASSIGN_IP,,192.168.143.1,,,,
Tue Dec 21 11:16:07 2021 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 21 11:16:07 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Dec 21 11:16:07 2021 UDPv4 link local (bound): [AF_INET][undef]:443
Tue Dec 21 11:16:07 2021 UDPv4 link remote: [AF_UNSPEC]
Tue Dec 21 11:16:07 2021 MULTI: multi_init called, r=256 v=256
Tue Dec 21 11:16:07 2021 IFCONFIG POOL: base=192.168.143.10 size=11, ipv6=0
Tue Dec 21 11:16:07 2021 Initialization Sequence Completed
Tue Dec 21 11:16:07 2021 MANAGEMENT: >STATE:1640103367,CONNECTED,SUCCESS,192.168.143.1,,,,
server log when client connects, tries to browse and disconnects
Tue Dec 21 11:16:16 2021 MULTI: multi_create_instance called
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Re-using SSL/TLS context
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 TLS: Initial packet from [AF_INET]191.95.22.167:50918, sid=1f2dcd9d 7bb1493d
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 VERIFY OK: depth=1, C=CO, ST=SAN, L=Floridablanca, O=OpenVPN, OU=bga01, CN=ca, name=ca, emailAddress=mail@host.domain
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 VERIFY KU OK
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Validating certificate extended key usage
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 VERIFY EKU OK
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 VERIFY OK: depth=0, C=CO, ST=SAN, L=Floridablanca, O=OpenVPN, OU=bga01, CN=client2, name=client2, emailAddress=mail@host.domain
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 peer info: IV_VER=3.git::58b92569
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 peer info: IV_PLAT=ios
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 peer info: IV_IPv6=0
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 peer info: IV_AUTO_SESS=1
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 peer info: IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 peer info: IV_SSO=openurl
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 1024 bit RSA
Tue Dec 21 11:16:16 2021 191.95.22.167:50918 [client2] Peer Connection Initiated with [AF_INET]191.95.22.167:50918
Tue Dec 21 11:16:16 2021 client2/191.95.22.167:50918 MULTI_sva: pool returned IPv4=192.168.143.10, IPv6=(Not enabled)
Tue Dec 21 11:16:16 2021 client2/191.95.22.167:50918 MULTI: Learn: 192.168.143.10 -> client2/191.95.22.167:50918
Tue Dec 21 11:16:16 2021 client2/191.95.22.167:50918 MULTI: primary virtual IP for client2/191.95.22.167:50918: 192.168.143.10
Tue Dec 21 11:16:16 2021 client2/191.95.22.167:50918 PUSH: Received control message: 'PUSH_REQUEST'
Tue Dec 21 11:16:16 2021 client2/191.95.22.167:50918 SENT CONTROL [client2]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 1.1.1.1,block-outside-dns,route-gateway 192.168.143.1,topology subnet,ping 30,ping-restart 180,ifconfig 192.168.143.10 255.255.255.0' (status=1)
Tue Dec 21 11:18:54 2021 client2/191.95.22.167:50918 SIGTERM[soft,remote-exit] received, client-instance exiting
