Server/subnet only reachable when using IOS/TCP and nothing else

tossom

Dear community,

I am having difficulties with my OpenVPN server setup (I am using the community version 2.5.5) and I am hoping that someone can help me to fix my issue. The server runs on a Windows 10 machine (Win 10 Pro version 10.0.19043.0) which is my home computer to which I would like to connect remotely. The computer is behind my Asus N66U network router (running MerlinWrt 380.70) where I have set rules for port forwarding and routing for the VPN.

This works fine if I use the OpenVPN IOS app from my phone using a TCP protocol. Using the same client configuration on my laptop (Win 10 Home version 10.0.19043.0; OpenVPN 2.5.5 community version), the client connects successfully, but I am unable to reach/ping the OpenVPN server machine or its subnet after the initial connection.
Same result if I switch to the UDP protocol. Strangely, the IOS app shows the same behavior (successful connection but server/subnet not reachable) when using UDP.
I don't get my head around the fact that IOS app + TCP protocol works fine and every other configuration fails. Any help would be very much appreciated. Log files for the different scenarios are shown below. I have already reinstalled the TAP adapter on the Windows client and had deactivated all firefalls for testing which didn't result in a different behaviour.

local 192.168.3.134
port 1194
proto tcp
dev tun

dh "C:\\Program Files\\OpenVPN\\server-keys\\dh4096.pem"
ca "C:\\Program Files\\OpenVPN\\server-keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\server-keys\\Server01.crt"
key "C:\\Program Files\\OpenVPN\\server-keys\\Server01.key"

server 10.19.15.0 255.255.255.0
push "route 192.168.3.0 255.255.255.0"
push "dhcp-option DNS 192.168.3.2"

cipher AES-256-GCM
keepalive 10 120
persist-key
persist-tun
duplicate-cn
topology subnet

status "C:\\Program Files\\OpenVPN\\log\\openvpn-status.log"
log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
log-append "C:\\Program Files\\OpenVPN\\log\\openvpn.log"
verb 3

client
dev tun
proto tcp
remote ############ 1194
cipher AES-256-GCM
remote-cert-tls server
redirect-gateway def1
keepalive 10 120
resolv-retry infinite
nobind
auth-nocache
<ca>
-----BEGIN CERTIFICATE-----
########
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
########
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
#########
-----END PRIVATE KEY-----
</key>

* Windows Client Log*

Thu Feb  3 19:58:01 2022 OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021
Thu Feb  3 19:58:01 2022 Windows version 10.0 (Windows 10 or greater) 64bit
Thu Feb  3 19:58:01 2022 library versions: OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10
Thu Feb  3 19:58:01 2022 TCP/UDP: Preserving recently used remote address: [AF_INET]############:1194
Thu Feb  3 19:58:01 2022 Attempting to establish TCP connection with [AF_INET]############:1194 [nonblock]
Thu Feb  3 19:58:01 2022 TCP connection established with [AF_INET]############:1194
Thu Feb  3 19:58:01 2022 TCP_CLIENT link local: (not bound)
Thu Feb  3 19:58:01 2022 TCP_CLIENT link remote: [AF_INET]############:1194
Thu Feb  3 19:58:02 2022 [server01] Peer Connection Initiated with [AF_INET]############:1194
Thu Feb  3 19:58:02 2022 open_tun
Thu Feb  3 19:58:02 2022 tap-windows6 device [Local Area Connection] opened
Thu Feb  3 19:58:02 2022 Set TAP-Windows TUN subnet mode network/local/netmask = 10.19.15.0/10.19.15.2/255.255.255.0 [SUCCEEDED]
Thu Feb  3 19:58:02 2022 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.19.15.2/255.255.255.0 on interface {789977A1-AE5F-4A17-A049-14585CCDDFE8} [DHCP-serv: 10.19.15.0, lease-time: 31536000]
Thu Feb  3 19:58:02 2022 Successful ARP Flush on interface [15] {789977A1-AE5F-4A17-A049-14585CCDDFE8}
Thu Feb  3 19:58:02 2022 IPv4 MTU set to 1500 on interface 15 using service
Thu Feb  3 19:58:07 2022 Initialization Sequence Completed

* Server Log (connected with Windows client)*

2022-02-03 19:58:02 TCP connection established with [AF_INET]############:27602
2022-02-03 19:58:02 ############:27602 TLS: Initial packet from [AF_INET]############:27602, sid=53072f5d 27a591c9
2022-02-03 19:58:03 ############:27602 VERIFY OK: depth=1, C=##, ST=##, L=##, O=##, OU=##, CN=##, name=##, emailAddress=##
2022-02-03 19:58:03 ############:27602 VERIFY OK: depth=0, C=##, ST=##, L=##, O=##, OU=##, CN=##, name=##, emailAddress=##
2022-02-03 19:58:03 ############:27602 peer info: IV_VER=2.5.5
2022-02-03 19:58:03 ############:27602 peer info: IV_PLAT=win
2022-02-03 19:58:03 ############:27602 peer info: IV_PROTO=6
2022-02-03 19:58:03 ############:27602 peer info: IV_NCP=2
2022-02-03 19:58:03 ############:27602 peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM
2022-02-03 19:58:03 ############:27602 peer info: IV_LZ4=1
2022-02-03 19:58:03 ############:27602 peer info: IV_LZ4v2=1
2022-02-03 19:58:03 ############:27602 peer info: IV_LZO=1
2022-02-03 19:58:03 ############:27602 peer info: IV_COMP_STUB=1
2022-02-03 19:58:03 ############:27602 peer info: IV_COMP_STUBv2=1
2022-02-03 19:58:03 ############:27602 peer info: IV_TCPNL=1
2022-02-03 19:58:03 ############:27602 peer info: IV_GUI_VER=OpenVPN_GUI_11
2022-02-03 19:58:03 ############:27602 peer info: IV_SSO=openurl,crtext
2022-02-03 19:58:03 ############:27602 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
2022-02-03 19:58:03 ############:27602 [client01] Peer Connection Initiated with [AF_INET]############:27602
2022-02-03 19:58:03 client01/############:27602 MULTI_sva: pool returned IPv4=10.19.15.2, IPv6=(Not enabled)
2022-02-03 19:58:03 client01/############:27602 MULTI: Learn: 10.19.15.2 -> client01/############:27602
2022-02-03 19:58:03 client01/############:27602 MULTI: primary virtual IP for client01/############:27602: 10.19.15.2
2022-02-03 19:58:03 client01/############:27602 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2022-02-03 19:58:03 client01/############:27602 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2022-02-03 19:58:03 client01/############:27602 SENT CONTROL [client01]: 'PUSH_REPLY,route 192.168.3.0 255.255.255.0,dhcp-option DNS 192.168.3.2,route-gateway 10.19.15.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.19.15.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2022-02-03 19:58:10 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:11 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:13 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:14 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:16 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:17 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:19 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:20 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:22 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:23 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:25 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:26 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=90
2022-02-03 19:58:28 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:29 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:31 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:32 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=90
2022-02-03 19:58:34 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=90
2022-02-03 19:58:35 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:37 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:38 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:40 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:41 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:43 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:44 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:46 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:47 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=69
2022-02-03 19:58:49 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:50 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:52 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:58:53 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:54 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:55 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=62
2022-02-03 19:58:56 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:58 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:58:59 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:01 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:02 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:59:04 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:05 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:07 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:08 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:13 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:59:14 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:16 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:59:17 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=106
2022-02-03 19:59:19 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:59:20 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:59:22 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:59:23 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:25 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=60
2022-02-03 19:59:26 client01/############:27602 MULTI: Outgoing TUN queue full, dropped packet len=44
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 write TCPv4_SERVER: Unknown error (code=10054)
2022-02-03 19:59:27 client01/############:27602 Connection reset, restarting [-1]
2022-02-03 19:59:27 client01/############:27602 SIGUSR1[soft,connection-reset] received, client-instance restarting

* IOS Client Log*

2022-02-03 20:16:03 ----- OpenVPN Start -----
OpenVPN core 3.git::58b92569 ios arm64 64-bit
2022-02-03 20:16:03 OpenVPN core 3.git::58b92569 ios arm64 64-bit
2022-02-03 20:16:03 Frame=512/2048/512 mssfix-ctrl=1250
2022-02-03 20:16:03 UNUSED OPTIONS
7 [auth-nocache] 
2022-02-03 20:16:03 EVENT: RESOLVE
2022-02-03 20:16:03 Contacting [############]:1194/TCP via TCPv4
2022-02-03 20:16:03 EVENT: WAIT
2022-02-03 20:16:03 Connecting to [############]:1194 (############) via TCPv4
2022-02-03 20:16:03 EVENT: CONNECTING
2022-02-03 20:16:03 Tunnel Options:V4,dev-type tun,link-mtu 1523,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client
2022-02-03 20:16:03 Creds: UsernameEmpty/PasswordEmpty
2022-02-03 20:16:03 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
2022-02-03 20:16:03 VERIFY OK: depth=1, /C=##/ST=##/L=##/O=##/OU=##/CN=##/name=##/emailAddress=##
2022-02-03 20:16:03 VERIFY OK: depth=0, /C=##/ST=##/L=##/O=##/OU=##/CN=##/name=##/emailAddress=##
2022-02-03 20:16:03 SSL Handshake: CN=server01, TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
2022-02-03 20:16:03 Session is ACTIVE
2022-02-03 20:16:03 EVENT: GET_CONFIG
2022-02-03 20:16:03 Sending PUSH_REQUEST to server...
2022-02-03 20:16:03 OPTIONS:
0 [route] [192.168.3.0] [255.255.255.0] 
1 [dhcp-option] [DNS] [192.168.3.2] 
2 [route-gateway] [10.19.15.1] 
3 [topology] [subnet] 
4 [ping] [10] 
5 [ping-restart] [120] 
6 [ifconfig] [10.19.15.2] [255.255.255.0] 
7 [peer-id] [0] 
8 [cipher] [AES-256-GCM] 
2022-02-03 20:16:03 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0
2022-02-03 20:16:03 EVENT: ASSIGN_IP
2022-02-03 20:16:03 NIP: preparing TUN network settings
2022-02-03 20:16:03 NIP: init TUN network settings with endpoint: ############
2022-02-03 20:16:03 NIP: adding IPv4 address to network settings 10.19.15.2/255.255.255.0
2022-02-03 20:16:03 NIP: adding (included) IPv4 route 10.19.15.0/24
2022-02-03 20:16:03 NIP: adding (included) IPv4 route 192.168.3.0/24
2022-02-03 20:16:03 NIP: adding DNS 192.168.3.2
2022-02-03 20:16:03 NIP: adding match domain ALL
2022-02-03 20:16:03 NIP: adding DNS specific routes:
2022-02-03 20:16:03 NIP: adding (included) IPv4 route 192.168.3.2/32
2022-02-03 20:16:03 Connected via NetworkExtensionTUN
2022-02-03 20:16:03 EVENT: CONNECTED ############:1194 (############) via /TCPv4 on NetworkExtensionTUN/10.19.15.2/ gw=[/]

* Server Log (connected with IOS client)*

2022-02-03 20:16:04 TCP connection established with [AF_INET]############:53854
2022-02-03 20:16:04 ############:53854 TLS: Initial packet from [AF_INET]############:53854, sid=7943fbe9 9cfdbb36
2022-02-03 20:16:04 ############:53854 VERIFY OK: depth=1, C=##, ST=##, L=##, O=##, OU=##, CN=##, name=##, emailAddress=##
2022-02-03 20:16:04 ############:53854 VERIFY OK: depth=0, C=##, ST=##, L=##, O=##, OU=##, CN=##, name=##, emailAddress=##
2022-02-03 20:16:04 ############:53854 peer info: IV_VER=3.git::58b92569
2022-02-03 20:16:04 ############:53854 peer info: IV_PLAT=ios
2022-02-03 20:16:04 ############:53854 peer info: IV_NCP=2
2022-02-03 20:16:04 ############:53854 peer info: IV_TCPNL=1
2022-02-03 20:16:04 ############:53854 peer info: IV_PROTO=2
2022-02-03 20:16:04 ############:53854 peer info: IV_AUTO_SESS=1
2022-02-03 20:16:04 ############:53854 peer info: IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
2022-02-03 20:16:04 ############:53854 peer info: IV_SSO=openurl
2022-02-03 20:16:04 ############:53854 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1551', remote='link-mtu 1523'
2022-02-03 20:16:04 ############:53854 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
2022-02-03 20:16:04 ############:53854 [client01] Peer Connection Initiated with [AF_INET]############:53854
2022-02-03 20:16:04 client01/############:53854 MULTI_sva: pool returned IPv4=10.19.15.2, IPv6=(Not enabled)
2022-02-03 20:16:04 client01/############:53854 MULTI: Learn: 10.19.15.2 -> client01/############:53854
2022-02-03 20:16:04 client01/############:53854 MULTI: primary virtual IP for client01/############:53854: 10.19.15.2
2022-02-03 20:16:04 client01/############:53854 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2022-02-03 20:16:04 client01/############:53854 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2022-02-03 20:16:04 client01/############:53854 PUSH: Received control message: 'PUSH_REQUEST'
2022-02-03 20:16:04 client01/############:53854 SENT CONTROL [client01]: 'PUSH_REPLY,route 192.168.3.0 255.255.255.0,dhcp-option DNS 192.168.3.2,route-gateway 10.19.15.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.19.15.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2022-02-03 20:17:02 client01/############:53854 Connection reset, restarting [0]
2022-02-03 20:17:02 client01/############:53854 SIGUSR1[soft,connection-reset] received, client-instance restarting

TinCanTech

Set --verb 4 in your Windows client and check that the routes are added correctly.

tossom

Hello TinCanTech,

thank you for your quick feedback. I added verb 4 to the Windows client as you have proposed, the result is below. Is there anything suspect in there? The message almost to the end

Thu Feb 3 22:30:56 2022 C:\Windows\system32\route.exe ADD 192.168.3.0 MASK 255.255.255.0 10.19.15.1
Thu Feb 3 22:30:56 2022 Route addition via service succeeded

sounds rather positive.

* Windows Client Log (verb 4 logging)*

Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_private_mode = 00000000
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_cert_private = DISABLED
Thu Feb  3 22:30:50 2022   pkcs11_pin_cache_period = -1
Thu Feb  3 22:30:50 2022   pkcs11_id = '[UNDEF]'
Thu Feb  3 22:30:50 2022   pkcs11_id_management = DISABLED
Thu Feb  3 22:30:50 2022   server_network = 0.0.0.0
Thu Feb  3 22:30:50 2022   server_netmask = 0.0.0.0
Thu Feb  3 22:30:50 2022   server_network_ipv6 = ::
Thu Feb  3 22:30:50 2022   server_netbits_ipv6 = 0
Thu Feb  3 22:30:50 2022   server_bridge_ip = 0.0.0.0
Thu Feb  3 22:30:50 2022   server_bridge_netmask = 0.0.0.0
Thu Feb  3 22:30:50 2022   server_bridge_pool_start = 0.0.0.0
Thu Feb  3 22:30:50 2022   server_bridge_pool_end = 0.0.0.0
Thu Feb  3 22:30:50 2022   ifconfig_pool_defined = DISABLED
Thu Feb  3 22:30:50 2022   ifconfig_pool_start = 0.0.0.0
Thu Feb  3 22:30:50 2022   ifconfig_pool_end = 0.0.0.0
Thu Feb  3 22:30:50 2022   ifconfig_pool_netmask = 0.0.0.0
Thu Feb  3 22:30:50 2022   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Feb  3 22:30:50 2022   ifconfig_pool_persist_refresh_freq = 600
Thu Feb  3 22:30:50 2022   ifconfig_ipv6_pool_defined = DISABLED
Thu Feb  3 22:30:50 2022   ifconfig_ipv6_pool_base = ::
Thu Feb  3 22:30:50 2022   ifconfig_ipv6_pool_netbits = 0
Thu Feb  3 22:30:50 2022   n_bcast_buf = 256
Thu Feb  3 22:30:50 2022   tcp_queue_limit = 64
Thu Feb  3 22:30:50 2022   real_hash_size = 256
Thu Feb  3 22:30:50 2022   virtual_hash_size = 256
Thu Feb  3 22:30:50 2022   client_connect_script = '[UNDEF]'
Thu Feb  3 22:30:50 2022   learn_address_script = '[UNDEF]'
Thu Feb  3 22:30:50 2022   client_disconnect_script = '[UNDEF]'
Thu Feb  3 22:30:50 2022   client_config_dir = '[UNDEF]'
Thu Feb  3 22:30:50 2022   ccd_exclusive = DISABLED
Thu Feb  3 22:30:50 2022   tmp_dir = 'C:\Users\justu\AppData\Local\Temp\'
Thu Feb  3 22:30:50 2022   push_ifconfig_defined = DISABLED
Thu Feb  3 22:30:50 2022   push_ifconfig_local = 0.0.0.0
Thu Feb  3 22:30:50 2022   push_ifconfig_remote_netmask = 0.0.0.0
Thu Feb  3 22:30:50 2022   push_ifconfig_ipv6_defined = DISABLED
Thu Feb  3 22:30:50 2022   push_ifconfig_ipv6_local = ::/0
Thu Feb  3 22:30:50 2022   push_ifconfig_ipv6_remote = ::
Thu Feb  3 22:30:50 2022   enable_c2c = DISABLED
Thu Feb  3 22:30:50 2022   duplicate_cn = DISABLED
Thu Feb  3 22:30:50 2022   cf_max = 0
Thu Feb  3 22:30:50 2022   cf_per = 0
Thu Feb  3 22:30:50 2022   max_clients = 1024
Thu Feb  3 22:30:50 2022   max_routes_per_client = 256
Thu Feb  3 22:30:50 2022   auth_user_pass_verify_script = '[UNDEF]'
Thu Feb  3 22:30:50 2022   auth_user_pass_verify_script_via_file = DISABLED
Thu Feb  3 22:30:50 2022   auth_token_generate = DISABLED
Thu Feb  3 22:30:50 2022   auth_token_lifetime = 0
Thu Feb  3 22:30:50 2022   auth_token_secret_file = '[UNDEF]'
Thu Feb  3 22:30:50 2022   vlan_tagging = DISABLED
Thu Feb  3 22:30:50 2022   vlan_accept = all
Thu Feb  3 22:30:50 2022   vlan_pvid = 1
Thu Feb  3 22:30:50 2022   client = ENABLED
Thu Feb  3 22:30:50 2022   pull = ENABLED
Thu Feb  3 22:30:50 2022   auth_user_pass_file = '[UNDEF]'
Thu Feb  3 22:30:50 2022   show_net_up = DISABLED
Thu Feb  3 22:30:50 2022   route_method = 3
Thu Feb  3 22:30:50 2022   block_outside_dns = DISABLED
Thu Feb  3 22:30:50 2022   ip_win32_defined = DISABLED
Thu Feb  3 22:30:50 2022   ip_win32_type = 3
Thu Feb  3 22:30:50 2022   dhcp_masq_offset = 0
Thu Feb  3 22:30:50 2022   dhcp_lease_time = 31536000
Thu Feb  3 22:30:50 2022   tap_sleep = 0
Thu Feb  3 22:30:50 2022   dhcp_options = DISABLED
Thu Feb  3 22:30:50 2022   dhcp_renew = DISABLED
Thu Feb  3 22:30:50 2022   dhcp_pre_release = DISABLED
Thu Feb  3 22:30:50 2022   domain = '[UNDEF]'
Thu Feb  3 22:30:50 2022   netbios_scope = '[UNDEF]'
Thu Feb  3 22:30:50 2022   netbios_node_type = 0
Thu Feb  3 22:30:50 2022   disable_nbt = DISABLED
Thu Feb  3 22:30:50 2022 OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021
Thu Feb  3 22:30:50 2022 Windows version 10.0 (Windows 10 or greater) 64bit
Thu Feb  3 22:30:50 2022 library versions: OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10
Thu Feb  3 22:30:50 2022 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25343
Thu Feb  3 22:30:50 2022 Need hold release from management interface, waiting...
Thu Feb  3 22:30:51 2022 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25343
Thu Feb  3 22:30:51 2022 MANAGEMENT: CMD 'state on'
Thu Feb  3 22:30:51 2022 MANAGEMENT: CMD 'log all on'
Thu Feb  3 22:30:51 2022 MANAGEMENT: CMD 'echo all on'
Thu Feb  3 22:30:51 2022 MANAGEMENT: CMD 'bytecount 5'
Thu Feb  3 22:30:51 2022 MANAGEMENT: CMD 'hold off'
Thu Feb  3 22:30:51 2022 MANAGEMENT: CMD 'hold release'
Thu Feb  3 22:30:51 2022 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Thu Feb  3 22:30:51 2022 MANAGEMENT: >STATE:1643923851,RESOLVE,,,,,,
Thu Feb  3 22:30:51 2022 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Thu Feb  3 22:30:51 2022 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Thu Feb  3 22:30:51 2022 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Thu Feb  3 22:30:51 2022 TCP/UDP: Preserving recently used remote address: [AF_INET]############:1194
Thu Feb  3 22:30:51 2022 Socket Buffers: R=[65536->65536] S=[64512->64512]
Thu Feb  3 22:30:51 2022 Attempting to establish TCP connection with [AF_INET]############:1194 [nonblock]
Thu Feb  3 22:30:51 2022 MANAGEMENT: >STATE:1643923851,TCP_CONNECT,,,,,,
Thu Feb  3 22:30:51 2022 TCP connection established with [AF_INET]############:1194
Thu Feb  3 22:30:51 2022 TCP_CLIENT link local: (not bound)
Thu Feb  3 22:30:51 2022 TCP_CLIENT link remote: [AF_INET]############:1194
Thu Feb  3 22:30:51 2022 MANAGEMENT: >STATE:1643923851,WAIT,,,,,,
Thu Feb  3 22:30:51 2022 MANAGEMENT: >STATE:1643923851,AUTH,,,,,,
Thu Feb  3 22:30:51 2022 TLS: Initial packet from [AF_INET]############:1194, sid=108e0b18 f9d02103
Thu Feb  3 22:30:51 2022 VERIFY OK: depth=1, C=##, ST=##, L=##, O=##, OU=##, CN=##, name=##, emailAddress=##
Thu Feb  3 22:30:51 2022 VERIFY KU OK
Thu Feb  3 22:30:51 2022 Validating certificate extended key usage
Thu Feb  3 22:30:51 2022 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Feb  3 22:30:51 2022 VERIFY EKU OK
Thu Feb  3 22:30:51 2022 VERIFY OK: depth=0, C=##, ST=##, L=##, O=##, OU=##, CN=##, name=##, emailAddress=##
Thu Feb  3 22:30:51 2022 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
Thu Feb  3 22:30:51 2022 [server01] Peer Connection Initiated with [AF_INET]############:1194
Thu Feb  3 22:30:51 2022 PUSH: Received control message: 'PUSH_REPLY,route 192.168.3.0 255.255.255.0,dhcp-option DNS 192.168.3.2,route-gateway 10.19.15.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.19.15.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: timers and/or timeouts modified
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: --ifconfig/up options modified
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: route options modified
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: route-related options modified
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: peer-id set
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: adjusting link_mtu to 1626
Thu Feb  3 22:30:51 2022 OPTIONS IMPORT: data channel crypto options modified
Thu Feb  3 22:30:51 2022 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb  3 22:30:51 2022 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb  3 22:30:51 2022 interactive service msg_channel=796
Thu Feb  3 22:30:51 2022 open_tun
Thu Feb  3 22:30:51 2022 tap-windows6 device [Local Area Connection] opened
Thu Feb  3 22:30:51 2022 TAP-Windows Driver Version 9.24 
Thu Feb  3 22:30:51 2022 TAP-Windows MTU=1500
Thu Feb  3 22:30:51 2022 Set TAP-Windows TUN subnet mode network/local/netmask = 10.19.15.0/10.19.15.2/255.255.255.0 [SUCCEEDED]
Thu Feb  3 22:30:51 2022 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.19.15.2/255.255.255.0 on interface {789977A1-AE5F-4A17-A049-14585CCDDFE8} [DHCP-serv: 10.19.15.0, lease-time: 31536000]
Thu Feb  3 22:30:51 2022 DHCP option string: 0604c0a8 0302
Thu Feb  3 22:30:51 2022 Successful ARP Flush on interface [15] {789977A1-AE5F-4A17-A049-14585CCDDFE8}
Thu Feb  3 22:30:51 2022 do_ifconfig, ipv4=1, ipv6=0
Thu Feb  3 22:30:51 2022 MANAGEMENT: >STATE:1643923851,ASSIGN_IP,,10.19.15.2,,,,
Thu Feb  3 22:30:51 2022 IPv4 MTU set to 1500 on interface 15 using service
Thu Feb  3 22:30:56 2022 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Thu Feb  3 22:30:56 2022 MANAGEMENT: >STATE:1643923856,ADD_ROUTES,,,,,,
Thu Feb  3 22:30:56 2022 C:\Windows\system32\route.exe ADD 192.168.3.0 MASK 255.255.255.0 10.19.15.1
Thu Feb  3 22:30:56 2022 Route addition via service succeeded
Thu Feb  3 22:30:56 2022 Initialization Sequence Completed
Thu Feb  3 22:30:56 2022 MANAGEMENT: >STATE:1643923856,CONNECTED,SUCCESS,10.19.15.2,############,1194,192.168.3.135,1048

TinCanTech

Your logs log good.

The main problem is this:

tossom wrote The server runs on a Windows 10 machine

See bebops work here.

Do you know how much easier it is to install a Linux VM and use that as your server .. ?

tossom

Thank you for checking. I guess you are right that this is probably Windows related. Meanwhile I have found another solution, which is not based on OpenVPN but seems to work so far and is ideal for the simple man (like myself), who simply wants to reach his Win-based home network from elsewhere.