Tap installs, but doesn't show up in ipconfig.

mudfight

Hi guys.

My servertap is refusing to assume any ip configuration.

I've create a working test environment. so i assume i the hang of th"e configuration.
(keys from test environment are generated on production server)

The tap is visible in the "Network connections" ip protocol is enabled.
But "ipconfig" does not show the adapter tap al, nothing nada.

Relevant info:
xp sp3 fully updated
mc affee (I did trie with the firewall turned off)
Removed/reinstalled openvpn (Stable 2.1.4)
Tried to manualy assign an ip

It apears the tap installation is ging wrong, but what ..

here is the part where its going wrong in the vpnserverlogs.

Tue Jan 11 22:16:29 2011 us=265000 GDGR: best=0 lm=10
Tue Jan 11 22:16:29 2011 us=265000 ROUTE default_gateway=192.168.0.1
Tue Jan 11 22:16:29 2011 us=265000 TAP-WIN32 device [tap2] opened: \\.\Global\{2
5E15326-B209-42A8-8A03-1E1A1A827411}.tap
Tue Jan 11 22:16:29 2011 us=281000 NOTE: could not get adapter index for {25E153
26-B209-42A8-8A03-1E1A1A827411}
Tue Jan 11 22:16:29 2011 us=281000 TAP-Win32 Driver Version 9.7
Tue Jan 11 22:16:29 2011 us=281000 TAP-Win32 MTU=1500
Tue Jan 11 22:16:29 2011 us=281000 Notified TAP-Win32 driver to set a DHCP IP/ne
tmask of 10.8.0.1/255.255.255.252 on interface {25E15326-B209-42A8-8A03-1E1A1A82
7411} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Tue Jan 11 22:16:29 2011 us=281000 Sleeping for 10 seconds...
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[0] 0.0.0.0/0.0.0.0 i=3 m=10
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[1] 127.0.0.0/255.0.0.0 i=1 m=1
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[2] 192.168.0.0/255.255.255.0 i=3
m=10
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[3] 192.168.0.60/255.255.255.255 i
=1 m=10
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[4] 192.168.0.255/255.255.255.255
i=3 m=10
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[5] 224.0.0.0/240.0.0.0 i=3 m=10
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[6] 255.255.255.255/255.255.255.25
5 i=2 m=1
Tue Jan 11 22:16:39 2011 us=281000 GDGR: route[7] 255.255.255.255/255.255.255.25
5 i=3 m=1
Tue Jan 11 22:16:39 2011 us=281000 GDGR: best=0 lm=10
Tue Jan 11 22:16:39 2011 us=281000 DEBUG: IP Locate: ip=192.168.0.1 nm=255.255.2
55.0 index=3 count=-1
Tue Jan 11 22:16:39 2011 us=281000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MA
SK 255.255.255.0 10.8.0.2
Tue Jan 11 22:16:39 2011 us=296000 DEBUG: IP Locate: ip=10.8.0.2 nm=0.0.0.0 inde
x=-1 count=0
Tue Jan 11 22:16:39 2011 us=296000 Warning: route gateway is not reachable on an
y active network adapters: 10.8.0.2
Tue Jan 11 22:16:39 2011 us=296000 DEBUG: route find if: on_tun=0 count=0 index=
-1
Tue Jan 11 22:16:39 2011 us=296000 Route addition via IPAPI failed [adaptive]
Tue Jan 11 22:16:39 2011 us=296000 Route addition fallback to route.exe
Tue Jan 11 22:16:39 2011 us=296000 Attempting to lock Win32 semaphore 'openvpn_n
etcmd' prior to net shell command (timeout = 600 sec)
Tue Jan 11 22:16:39 2011 us=296000 Locked Win32 semaphore 'openvpn_netcmd'
The route addition failed: Either the interface index is wrong or the gateway do
es not lie on the same network as the interface. Check the IP Address Table for
the machine.

gladiatr72

Hello,

Yeah. Something is wonky with your installation. Try this from a command line and post your output:

cd \program files\openvpn\bin
tapinstall.exe findall tap0901

Regards,
Stephen

mudfight

Hey Gladiator,

Here it is,

Regards,
Mudfight

C:\Documents and Settings\Administrator>cd "c:\Program Files\OpenVPN\bin"

C:\Program Files\OpenVPN\bin>tapinstall.exe findall tap0901
ROOT\NET\0000                                               : TAP-Win32 Adapter V9
1 matching device(s) found.

been messing with the command, could it have been messing with microsofts vpc ?

tapinstall.exe find *
...
ROOT\CNTX_VPCNETS2_MP\0000                                  : Intel(R) 82566DM-2 Gigabit Network Connection -Virtual Machine Network Services Driver
ROOT\CNTX_VPCNETS2_MP\0001                                  : Sitecom 300N Wireless Dualband USB adapter WL-329 - Virtual Machine Network Services Driver
ROOT\CNTX_VPCNETS2_MP\0002                                  : Wireless Network 300N USB dongle WL-302 - Virtual MachineNetwork Services Driver
ROOT\CNTX_VPCNETS2_MP\0003                                  : Linksys LNE100TX Fast Ethernet Adapter(LNE100TX v4) - Virtual Machine Network Services Driver
[b]ROOT\CNTX_VPCNETS2_MP\0004                                  : TAP-Win32 Adapter V9 - Virtual Machine Network Services Driver[/b]
...

krzee

wow what verb were you using in that logfile!?
verb 5 is the max you should need for troubleshooting

try adding this to your config

route-method exe

if that does not work, try this instead

ip-win32 netsh

mudfight

krzee wrotewow what verb were you using in that logfile!?
verb 5 is the max you should need for troubleshooting

try adding this to your config

route-method exe

if that does not work, try this instead

ip-win32 netsh

Ehm 9 😃 back to 5 now :lol:

Ok, so for the sake of it all uninstalled/reininstalled openvpn again. didnt work

results so far.

route-method exe

Wed Jan 12 11:44:17 2011 us=609000 NOTE: could not get adapter index for {4C4CE6FC-4F42-4793-BD61-7336190C59A6}
Wed Jan 12 11:44:17 2011 us=609000 TAP-Win32 Driver Version 9.7
Wed Jan 12 11:44:17 2011 us=609000 TAP-Win32 MTU=1500
Wed Jan 12 11:44:17 2011 us=609000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on int
erface {4C4CE6FC-4F42-4793-BD61-7336190C59A6} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Wed Jan 12 11:44:17 2011 us=609000 Sleeping for 10 seconds...
Wed Jan 12 11:44:27 2011 us=609000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
[b]The route addition failed: Either the interface index is wrong or the gateway does not lie on the same network as the in
terface. Check the IP Address Table for the machine.[/b]

Wed Jan 12 11:44:27 2011 us=656000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jan 12 11:44:27 2011 us=656000 UDPv4 link local (bound): [undef]:22334
Wed Jan 12 11:44:27 2011 us=656000 UDPv4 link remote: [undef]
Wed Jan 12 11:44:27 2011 us=656000 MULTI: multi_init called, r=256 v=256
Wed Jan 12 11:44:27 2011 us=656000 IFCONFIG POOL: base=10.8.0.4 size=62
Wed Jan 12 11:44:27 2011 us=656000 IFCONFIG POOL LIST
Wed Jan 12 11:44:27 2011 us=656000 server02,10.8.0.4
Wed Jan 12 11:44:27 2011 us=656000 Initialization Sequence Completed

So the tunnel open fine (as it dis before) but no ip configuration possible on it see below

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : server01
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter 100Mb:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Linksys LNE100TX Fast Ethernet Adapter(LNE100TX v4)
        Physical Address. . . . . . . . . : 00-18-F8-0B-39-B9

Ethernet adapter Gbit:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Intel(R) 82566DM-2 Gigabit Network Connection
        Physical Address. . . . . . . . . : 00-1C-C4-99-B4-37
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.0.60
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.0.1
        DNS Servers . . . . . . . . . . . : 192.168.0.1

No tap again

As for the next command, it started out hopefull

Wed Jan 12 11:51:05 2011 us=93000 ROUTE default_gateway=192.168.0.1
Wed Jan 12 11:51:06 2011 us=109000 NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address tap2 static 10.8.0.1 25
5.255.255.252
Ok.

Wed Jan 12 11:51:13 2011 us=359000 NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns tap2 all
Ok.

Wed Jan 12 11:51:19 2011 us=921000 NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins tap2 all
Ok.

Wed Jan 12 11:51:25 2011 us=62000 TAP-WIN32 device [tap2] opened: \\.\Global\{4C4CE6FC-4F42-4793-BD61-7336190C59A6}.tap
Wed Jan 12 11:51:25 2011 us=62000 NOTE: could not get adapter index for {4C4CE6FC-4F42-4793-BD61-7336190C59A6}
Wed Jan 12 11:51:25 2011 us=62000 TAP-Win32 Driver Version 9.7
Wed Jan 12 11:51:25 2011 us=62000 TAP-Win32 MTU=1500
Wed Jan 12 11:51:25 2011 us=62000 Sleeping for 10 seconds...
Wed Jan 12 11:51:35 2011 us=62000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Wed Jan 12 11:51:35 2011 us=62000 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2
Wed Jan 12 11:51:35 2011 us=62000 Route addition via IPAPI failed [adaptive]
Wed Jan 12 11:51:35 2011 us=62000 Route addition fallback to route.exe
The route addition failed: Either the interface index is wrong or the gateway does not lie on the same network as the in
terface. Check the IP Address Table for the machine.

Netsh isn't barfing on it but nada in the ipconfig or in the route print

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : server01
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter 100Mb:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Linksys LNE100TX Fast Ethernet Adapter(LNE100TX v4)
        Physical Address. . . . . . . . . : 00-18-F8-0B-39-B9

Ethernet adapter Gbit:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Intel(R) 82566DM-2 Gigabit Network Connection
        Physical Address. . . . . . . . . : 00-1C-C4-99-B4-37
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.0.60
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.0.1
        DNS Servers . . . . . . . . . . . : 192.168.0.1

C:\Documents and Settings\Administrator>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 18 f8 0b 39 b9 ...... Linksys LNE100TX Fast Ethernet Adapter(LNE100TX v4) - McAfee Core NDIS Intermediate Filt
er Miniport
0x3 ...00 1c c4 99 b4 37 ...... Intel(R) 82566DM-2 Gigabit Network Connection - McAfee Core NDIS Intermediate Filter Min
iport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1    192.168.0.60       10
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      192.168.0.0    255.255.255.0     192.168.0.60    192.168.0.60       10
     192.168.0.60  255.255.255.255        127.0.0.1       127.0.0.1       10
    192.168.0.255  255.255.255.255     192.168.0.60    192.168.0.60       10
        224.0.0.0        240.0.0.0     192.168.0.60    192.168.0.60       10
  255.255.255.255  255.255.255.255     192.168.0.60               2       1
  255.255.255.255  255.255.255.255     192.168.0.60    192.168.0.60       1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None

mudfight

Ok i've also tried the beta. same result no ipconfig.

krzee

post your client and server config without comments
im betting you have an ifconfig that doesnt belong

mudfight

krzee wrotepost your client and server config without comments
im betting you have an ifconfig that doesnt belong

I'm going to take that bet 🙂

I want to emphasize the fact there the network adapter does not show up in ipconfig after tapinstallation en before starting the server config. While i'm pretty sure it should show up before starting the config.

Anyway i could be wrong so, below my configs

->Server<-

port 34567
proto udp
dev tun
dev-node tap2
ca 'C:\\Program Files\\OpenVPn\\keys\\ca.crt'
cert 'C:\\Program Files\\OpenVPn\\keys\\server.crt'
key 'C:\\Program Files\\OpenVPn\\keys\\server.key'  
dh 'C:\\Program Files\\OpenVPn\\keys\\dh1024.pem'
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4


->Client<-

client
dev tun
proto udp
remote 192.168.0.60 34567
resolv-retry infinite
nobind
persist-key
persist-tun
ca 'C:\\Program Files\\OpenVPN\\keys\\ca.crt'
cert 'C:\\Program Files\\OpenVPN\\keys\\server02.crt'
key 'C:\\Program Files\\OpenVPN\\keys\\server02.key'
ns-cert-type server
comp-lzo
verb 3


->ipconfig server<-

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : server01
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter 100Mb:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Linksys LNE100TX Fast Ethernet Adapter(LNE100TX v4)
        Physical Address. . . . . . . . . : 00-18-F8-0B-39-B9

Ethernet adapter Gbit:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Intel(R) 82566DM-2 Gigabit Network Connection
        Physical Address. . . . . . . . . : 00-1C-C4-99-B4-37
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.0.60
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.0.1
        DNS Servers . . . . . . . . . . . : 192.168.0.1


->ipconfig client<-

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : server02
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 2:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connect
ion
        Physical Address. . . . . . . . . : 00-08-74-F5-56-6A
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.0.236
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.0.1
        DHCP Server . . . . . . . . . . . : 192.168.0.1
        DNS Servers . . . . . . . . . . . : 192.168.0.1
        Lease Obtained. . . . . . . . . . : Friday, January 14, 2011 12:54:57 AM

        Lease Expires . . . . . . . . . . : Friday, January 21, 2011 12:54:57 AM


Ethernet adapter Local Area Connection:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Linksys LNE100TX Fast Ethernet Adapt
er(LNE100TX v4)
        Physical Address. . . . . . . . . : 00-18-F8-0B-39-C5

Ethernet adapter tap:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : TAP-Win32 Adapter V9
        Physical Address. . . . . . . . . : 00-FF-DF-B9-4A-52

krzee

At command prompt, type set devmgr_show_nonpresent_devices=1, and then press ENTER. Type Start DEVMGMT.MSC, and then press ENTER. Click View, and then click Show Hidden Devices. Expand the Network Adapters tree
tell me what you see or post a screenshot if you prefer

mudfight

Allrighty 1 normal view, and one with all the hidden ones

efa

two of our clients doesn't connect and present the same behavior of mudfight.
Our thread is: https://forums.openvpn.net/topic7537.html
Sorry I haven't posted here, but the search in the forum with "could not get adapter index" results always "No suitable matches were found".
(I found this thread with a google.com search on the same string)

One of them, I'm sure, has McAfee Antivirus+Firewall installed, so we can suspect something related to and old McAfee that hook the interface and damage the WinSock from a past post:
http://openvpn.net/archive/openvpn-users/2005-11/msg00012.html
?
Do you want to test WinSockFix ?

mudfight

Whatever it takes. just going to make a restore first 😛

mudfight

Hell ya !!!!!!

That worked. it really does reset all ipsettings too. So it made me worry there for a minute cause i wasn't able to connect :roll: duh ...

So in short i have a tunnel running as i'm typing. No extended testing done, but ping and netbios are already working so i'm pretty confident i will work.

btw i use winsockxpfix dowloaded via majorgeeks, since i could find the original homepage (no crappy downloadsoftware)

Its a bit older as it seems but it did it !
Thanks for the sugestions an letting me be your guinnipig 😛

mudfight

Ok one downside left. When your going to add a tap. geuss what.

It screws things up again. In ip config you will see the same number of devices as before adding a tap. but the previous tap has assumed the name of (in my case) the first installed nic.

Running winsockxpfix did work as it seems but if your need to add taps in production i'd tend to investigate further. Maybe discard mcaffee on xp. btw W7+mcaffee (same version) didnt have any problem with the taps.

so this is it for me Goodluck ya'll

efa

What SP version of XP do you have?
To see it, open a cmd and type:
winver
it show Windows 5.1 Service Pack something

What kind of McAfee do you use?

mudfight

efa wroteWhat SP version of XP do you have?
To see it, open a cmd and type:
winver
it show Windows 5.1 Service Pack something

What kind of McAfee do you use?

5.1 SP3, (And updating with the latest updates)
I,ve been searching for an about box, but i couldnt find the stupid version in the gui :?:
Bu the engine revision is version=5400.1158

C:\Program Files\McAfee\VirusScan\Engine\5400.1158

efa

mudfight wrotebtw i use winsockxpfix dowloaded via majorgeeks, since i could find the original homepage (no crappy downloadsoftware)
Its a bit older as it seems but it did it !

please can you post the exact link of the fix you used?

mudfight

efa wrote
mudfight wrotebtw i use winsockxpfix dowloaded via majorgeeks, since i could find the original homepage (no crappy downloadsoftware)
Its a bit older as it seems but it did it !
please can you post the exact link of the fix you used?

http://majorgeeks.com/WinSock_XP_Fix_d4372.html

It really wasnt that hard

efa

mudfight wrotehttp://majorgeeks.com/WinSock_XP_Fix_d4372.html
It really wasnt that hard

thanks. There are a lot of different version around, and I cannot find the home for this freeware other than download site like majorgeeks, did you?

mudfight

efa wrote
mudfight wrotehttp://majorgeeks.com/WinSock_XP_Fix_d4372.html
It really wasnt that hard
thanks. There are a lot of different version around, and I cannot find the home for this freeware other than download site like majorgeeks, did you?

Ehm no, i know majorgeeks and i had a hit on it, so why not. Others had crappy dowload software and such. Just tried some stuff.