Hi everyone.
Now I'm facing the issue that is some entries on static routing table are not recognized on community version openvpn - 2.4.6(I602) and 2.5.5.
We use SoftEther VPN 4.38 Build 9760 RTM as VPN Server.
When maximum entries (64 entries) are registered in static routing table, client can recognize only 42 entries.
But on OpenVPN Connect, the issue didn't happen - all 64 entries on static routing table was recognized.
Does anyone know how to solve this issue?
I assume that interpretation of entries that were not recognized seems like failed because of interpretation length limit since there are print "Options error: route parameter gateway 'vpn_ga' must be a valid address" and "WARNING: Received unknown control message: eway,route XX.XXX.XXX.XXX vpn_gateway,".
Best Regards,
※①Client configuration file and ②Client log file at are as following.
①Client configuration file
###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.
###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
# specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
dev tun
###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.
proto udp
###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
remote XX.XXX.XXX.XXX 1194
pull-filter ignore redirect-gateway
###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.
###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
# cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
# RC2-40-CBC RC2-64-CBC RC2-CBC
# auth: SHA SHA1 MD5 MD4 RMD160
cipher AES-128-CBC
auth SHA1
###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.
resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass
###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.
<ca>
-----CERTIFICATE-----
</ca>
②Client log file
2022-02-10 14:13:36 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
2022-02-10 14:13:36 OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021
2022-02-10 14:13:36 Windows version 10.0 (Windows 10 or greater) 64bit
2022-02-10 14:13:36 library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10
2022-02-10 14:13:36 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25351
2022-02-10 14:13:36 Need hold release from management interface, waiting...
2022-02-10 14:13:37 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25351
2022-02-10 14:13:37 MANAGEMENT: CMD 'state on'
2022-02-10 14:13:37 MANAGEMENT: CMD 'log all on'
2022-02-10 14:13:37 MANAGEMENT: CMD 'echo all on'
2022-02-10 14:13:37 MANAGEMENT: CMD 'bytecount 5'
2022-02-10 14:13:37 MANAGEMENT: CMD 'hold off'
2022-02-10 14:13:37 MANAGEMENT: CMD 'hold release'
2022-02-10 14:13:39 MANAGEMENT: CMD 'username "Auth" "..."'
2022-02-10 14:13:39 MANAGEMENT: CMD 'password [...]'
2022-02-10 14:13:39 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
2022-02-10 14:13:39 TCP/UDP: Preserving recently used remote address: [AF_INET]XX.XXX.XXX.XXX:1194
2022-02-10 14:13:39 Socket Buffers: R=[65536->65536] S=[65536->65536]
2022-02-10 14:13:39 UDP link local: (not bound)
2022-02-10 14:13:39 UDP link remote: [AF_INET]XX.XXX.XXX.XXX:1194
2022-02-10 14:13:39 MANAGEMENT: >STATE:1644470019,WAIT,,,,,,
2022-02-10 14:14:39 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2022-02-10 14:14:39 TLS Error: TLS handshake failed
2022-02-10 14:14:39 SIGUSR1[soft,tls-error] received, process restarting
2022-02-10 14:14:39 MANAGEMENT: >STATE:1644470079,RECONNECTING,tls-error,,,,,
2022-02-10 14:14:39 Restart pause, 5 second(s)
2022-02-10 14:14:44 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
2022-02-10 14:14:44 TCP/UDP: Preserving recently used remote address: [AF_INET]XX.XXX.XXX.XXX:1194
2022-02-10 14:14:44 Socket Buffers: R=[65536->65536] S=[65536->65536]
2022-02-10 14:14:44 UDP link local: (not bound)
2022-02-10 14:14:44 UDP link remote: [AF_INET]XX.XXX.XXX.XXX:1194
2022-02-10 14:14:44 MANAGEMENT: >STATE:1644470084,WAIT,,,,,,
2022-02-10 14:14:44 MANAGEMENT: >STATE:1644470084,AUTH,,,,,,
2022-02-10 14:14:44 TLS: Initial packet from [AF_INET]XX.XXX.XXX.XXX:1194, sid=4bbdb516 6e5ed0e0
2022-02-10 14:14:44 VERIFY OK: depth=0, CN=vpn729261073.softether.net, O=XXX, OU=XXX, C=XXX, ST=XXX, L=XXX
2022-02-10 14:14:44 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
2022-02-10 14:14:44 [vpn729261073.softether.net] Peer Connection Initiated with [AF_INET]XX.XXX.XXX.XXX:1194
2022-02-10 14:14:45 MANAGEMENT: >STATE:1644470085,GET_CONFIG,,,,,,
2022-02-10 14:14:45 SENT CONTROL [vpn729261073.softether.net]: 'PUSH_REQUEST' (status=1)
2022-02-10 14:14:46 PUSH: Received control message: 'PUSH_REPLY,ping 3,ping-restart 10,ifconfig XX.XXX.XXX.XXX XX.XXX.XXX.XXX,dhcp-option DNS XX.XXX.XXX.XXX,route-gateway XX.XXX.XXX.XXX,redirect-gateway def1,route XX.XXX.XXX.XXX vpn_gateway,route XX.XXX.XXX.XXX vpn_gateway,route XX.XXX.XXX.XXX vpn_gateway,route XX.XXX.XXX.XXX vpn_gateway,route XX.XXX.XXX.XXX vpn_gateway,route XX.XXX.XXX.XXX vpn_gateway,...,route XX.XXX.XXX.XXX vpn_ga'
2022-02-10 14:14:46 Pushed option removed by filter: 'redirect-gateway def1'
2022-02-10 14:14:46 Options error: route parameter gateway 'vpn_ga' must be a valid address
2022-02-10 14:14:46 OPTIONS IMPORT: timers and/or timeouts modified
2022-02-10 14:14:46 OPTIONS IMPORT: --ifconfig/up options modified
2022-02-10 14:14:46 OPTIONS IMPORT: route options modified
2022-02-10 14:14:46 OPTIONS IMPORT: route-related options modified
2022-02-10 14:14:46 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2022-02-10 14:14:46 Using peer cipher 'AES-128-CBC'
2022-02-10 14:14:46 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
2022-02-10 14:14:46 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2022-02-10 14:14:46 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
2022-02-10 14:14:46 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2022-02-10 14:14:46 interactive service msg_channel=612
2022-02-10 14:14:46 open_tun
2022-02-10 14:14:46 tap-windows6 device [OpenVPN TAP-Windows6] opened
2022-02-10 14:14:46 TAP-Windows Driver Version 9.24
2022-02-10 14:14:46 Notified TAP-Windows driver to set a DHCP IP/netmask of XX.XXX.XXX.XXX on interface {5670B4AE-FDFD-4C60-8CA5-DA229DDB6574} [DHCP-serv: XX.XXX.XXX.XXX, lease-time: 31536000]
2022-02-10 14:14:46 Successful ARP Flush on interface [27] {5670B4AE-FDFD-4C60-8CA5-DA229DDB6574}
2022-02-10 14:14:46 MANAGEMENT: >STATE:1644470086,ASSIGN_IP,,XX.XXX.XXX.XXX,,,,
2022-02-10 14:14:46 IPv4 MTU set to 1500 on interface 27 using service
2022-02-10 14:14:46 WARNING: Received unknown control message: eway,route XX.XXX.XXX.XXX vpn_gateway,...route XX.XXX.XXX.XXX vpn_gateway
2022-02-10 14:14:51 TEST ROUTES: 42/42 succeeded len=42 ret=1 a=0 u/d=up
2022-02-10 14:14:51 MANAGEMENT: >STATE:1644470091,ADD_ROUTES,,,,,,
2022-02-10 14:14:51 C:\WINDOWS\system32\route.exe ADD XX.XXX.XXX.XXX
2022-02-10 14:14:51 Route addition via service succeeded
・・・
2022-02-10 14:14:51 Route addition via service succeeded
2022-02-10 14:14:51 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2022-02-10 14:14:51 Initialization Sequence Completed
2022-02-10 14:14:51 MANAGEMENT: >STATE:1644470091,CONNECTED,SUCCESS,XX.XXX.XXX.XXX,1194,,
