how can i force openvpn to reconnect (with pre batch script) if openvpn got disconnected. than it preserve previous tap stat.... as in windows 7 if my isp got disconnected openvpn reconnect using preserving previous tap setting but internet not work until i disable and reenable tap adapter and click on reconnect button. so i want to do like this when my isp reconnect it reconnect than preserving previous TAP-32 stat.... i'm using myhost_pre.bat file in config folder.... with contain: [quote]netsh interface set interface "TAP-32" DISABLE netsh interface set interface "TAP-32" ENABLE[/quote]

this is my config file: [quote]client dev tun proto tcp #Change my.publicdomain.com to your public domain or IP address remote xx.xx.xx.xx 443 remote-random resolv-retry infinite nobind persist-key persist-tun tls-auth ta.key 1 ca ca.crt cert client.crt key client.key ns-cert-type server #DNS Options here, CHANGE THESE !! #push "dhcp-option DNS 10.8.0.1" comp-lzo verb 3 ping-restart 10 [/quote]

not sure I understand the question - can you post a client log message of a failing reconnect? and of a working connect?

working: [quote]Thu May 19 14:48:17 2011 OpenVPN 2.2.0 Win32-MSVC++ [SSL] [LZO2] built on Apr 26 2011 Thu May 19 14:48:17 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Thu May 19 14:48:17 2011 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file Thu May 19 14:48:17 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 19 14:48:17 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 19 14:48:17 2011 LZO compression initialized Thu May 19 14:48:17 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ] Thu May 19 14:48:17 2011 Socket Buffers: R=[8192->8192] S=[8192->8192] Thu May 19 14:48:17 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu May 19 14:48:17 2011 Local Options hash (VER=V4): '504e774e' Thu May 19 14:48:17 2011 Expected Remote Options hash (VER=V4): '14168603' Thu May 19 14:48:17 2011 UDPv4 link local: [undef] Thu May 19 14:48:17 2011 UDPv4 link remote: 76.10.222.65:53 Thu May 19 14:48:27 2011 [UNDEF] Inactivity timeout (--ping-restart), restarting Thu May 19 14:48:27 2011 TCP/UDP: Closing socket Thu May 19 14:48:27 2011 SIGUSR1[soft,ping-restart] received, process restarting Thu May 19 14:48:27 2011 Restart pause, 2 second(s) Thu May 19 14:48:29 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Thu May 19 14:48:29 2011 Re-using SSL/TLS context Thu May 19 14:48:29 2011 LZO compression initialized Thu May 19 14:48:29 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ] Thu May 19 14:48:29 2011 Socket Buffers: R=[8192->8192] S=[8192->8192] Thu May 19 14:48:29 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu May 19 14:48:29 2011 Local Options hash (VER=V4): '504e774e' Thu May 19 14:48:29 2011 Expected Remote Options hash (VER=V4): '14168603' Thu May 19 14:48:29 2011 UDPv4 link local: [undef] Thu May 19 14:48:29 2011 UDPv4 link remote: 76.10.222.65:53 Thu May 19 14:48:39 2011 [UNDEF] Inactivity timeout (--ping-restart), restarting Thu May 19 14:48:39 2011 TCP/UDP: Closing socket Thu May 19 14:48:39 2011 SIGUSR1[soft,ping-restart] received, process restarting Thu May 19 14:48:39 2011 Restart pause, 2 second(s) Thu May 19 14:48:41 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Thu May 19 14:48:41 2011 Re-using SSL/TLS context Thu May 19 14:48:41 2011 LZO compression initialized Thu May 19 14:48:41 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ] Thu May 19 14:48:41 2011 Socket Buffers: R=[8192->8192] S=[8192->8192] Thu May 19 14:48:41 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu May 19 14:48:41 2011 Local Options hash (VER=V4): '504e774e' Thu May 19 14:48:41 2011 Expected Remote Options hash (VER=V4): '14168603' Thu May 19 14:48:41 2011 UDPv4 link local: [undef] Thu May 19 14:48:41 2011 UDPv4 link remote: 76.10.222.65:53 Thu May 19 14:48:41 2011 TLS: Initial packet from 76.10.222.65:53, sid=49c337f7 87f357f1 Thu May 19 14:48:43 2011 VERIFY OK: depth=1, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=Hostizzle_CA/emailAddress=hostizzle@gmail.com Thu May 19 14:48:43 2011 VERIFY OK: nsCertType=SERVER Thu May 19 14:48:43 2011 VERIFY OK: depth=0, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=server/emailAddress=hostizzle@gmail.com Thu May 19 14:49:03 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu May 19 14:49:03 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 19 14:49:03 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu May 19 14:49:03 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 19 14:49:04 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Thu May 19 14:49:04 2011 [server] Peer Connection Initiated with 76.10.222.65:53 Thu May 19 14:49:06 2011 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Thu May 19 14:49:07 2011 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.8.8,ping 10,ping-restart 60,route 10.30.0.1,topology net30,ifconfig 10.30.3.54 10.30.3.53' Thu May 19 14:49:07 2011 OPTIONS IMPORT: timers and/or timeouts modified Thu May 19 14:49:07 2011 OPTIONS IMPORT: --ifconfig/up options modified Thu May 19 14:49:07 2011 OPTIONS IMPORT: route options modified Thu May 19 14:49:07 2011 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Thu May 19 14:49:07 2011 ROUTE default_gateway=49.136.154.22 Thu May 19 14:49:07 2011 TAP-WIN32 device [TAP-32] opened: \\.\Global\{FDB21102-33AB-42D6-8DD5-240594864F24}.tap Thu May 19 14:49:07 2011 TAP-Win32 Driver Version 9.8 Thu May 19 14:49:07 2011 TAP-Win32 MTU=1500 Thu May 19 14:49:07 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.30.3.54/255.255.255.252 on interface {FDB21102-33AB-42D6-8DD5-240594864F24} [DHCP-serv: 10.30.3.53, lease-time: 31536000] Thu May 19 14:49:07 2011 Successful ARP Flush on interface [23] {FDB21102-33AB-42D6-8DD5-240594864F24} Thu May 19 14:49:12 2011 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Thu May 19 14:49:12 2011 C:\WINDOWS\system32\route.exe ADD 76.10.222.65 MASK 255.255.255.255 49.136.154.22 Thu May 19 14:49:12 2011 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Thu May 19 14:49:12 2011 Route addition via IPAPI succeeded [adaptive] Thu May 19 14:49:12 2011 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 49.136.154.22 Thu May 19 14:49:12 2011 Route deletion via IPAPI succeeded [adaptive] Thu May 19 14:49:12 2011 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.30.3.53 Thu May 19 14:49:12 2011 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Thu May 19 14:49:12 2011 Route addition via IPAPI succeeded [adaptive] Thu May 19 14:49:12 2011 C:\WINDOWS\system32\route.exe ADD 10.30.0.1 MASK 255.255.255.255 10.30.3.53 Thu May 19 14:49:12 2011 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4 Thu May 19 14:49:12 2011 Route addition via IPAPI succeeded [adaptive] Thu May 19 14:49:12 2011 Initialization Sequence Completed Thu May 19 14:49:15 2011 Replay-window backtrack occurred [1] Thu May 19 14:49:20 2011 Replay-window backtrack occurred [2] Thu May 19 14:49:23 2011 Replay-window backtrack occurred [7] Thu May 19 14:49:36 2011 Replay-window backtrack occurred [10] Thu May 19 14:50:03 2011 Replay-window backtrack occurred [12] Thu May 19 14:50:05 2011 Replay-window backtrack occurred [14] Thu May 19 14:50:05 2011 Replay-window backtrack occurred [15] Thu May 19 14:50:05 2011 Replay-window backtrack occurred [16] Thu May 19 14:50:27 2011 Replay-window backtrack occurred [20] Thu May 19 14:50:56 2011 Replay-window backtrack occurred [31] Thu May 19 15:08:19 2011 Replay-window backtrack occurred [34] [/quote] Not working: [quote]Thu May 19 15:32:50 2011 [server] Inactivity timeout (--ping-restart), restarting Thu May 19 15:32:50 2011 TCP/UDP: Closing socket Thu May 19 15:32:50 2011 SIGUSR1[soft,ping-restart] received, process restarting Thu May 19 15:32:50 2011 Restart pause, 2 second(s) Thu May 19 15:32:52 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Thu May 19 15:32:52 2011 Re-using SSL/TLS context Thu May 19 15:32:52 2011 LZO compression initialized Thu May 19 15:32:52 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ] Thu May 19 15:32:52 2011 Socket Buffers: R=[8192->8192] S=[8192->8192] Thu May 19 15:32:52 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu May 19 15:32:52 2011 Local Options hash (VER=V4): '504e774e' Thu May 19 15:32:52 2011 Expected Remote Options hash (VER=V4): '14168603' Thu May 19 15:32:52 2011 UDPv4 link local: [undef] Thu May 19 15:32:52 2011 UDPv4 link remote: 76.10.222.65:53 Thu May 19 15:32:52 2011 TLS: Initial packet from 76.10.222.65:53, sid=90fe6fff 5469d396 Thu May 19 15:32:54 2011 VERIFY OK: depth=1, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=Hostizzle_CA/emailAddress=hostizzle@gmail.com Thu May 19 15:32:54 2011 VERIFY OK: nsCertType=SERVER Thu May 19 15:32:54 2011 VERIFY OK: depth=0, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=server/emailAddress=hostizzle@gmail.com Thu May 19 15:32:57 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu May 19 15:32:57 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 19 15:32:57 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu May 19 15:32:57 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 19 15:32:57 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Thu May 19 15:32:57 2011 [server] Peer Connection Initiated with 76.10.222.65:53 Thu May 19 15:32:59 2011 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Thu May 19 15:32:59 2011 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.8.8,ping 10,ping-restart 60,route 10.30.0.1,topology net30,ifconfig 10.30.3.54 10.30.3.53' Thu May 19 15:32:59 2011 OPTIONS IMPORT: timers and/or timeouts modified Thu May 19 15:32:59 2011 OPTIONS IMPORT: --ifconfig/up options modified Thu May 19 15:32:59 2011 OPTIONS IMPORT: route options modified Thu May 19 15:32:59 2011 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified [color=#FF0000]Thu May 19 15:32:59 2011 Preserving previous TUN/TAP instance: TAP-32 Thu May 19 15:32:59 2011 Initialization Sequence Completed[/color] [/quote]

errr, you're using [code]persist-tun[/code] yet you do not want the TAP device to be persisted? comment out 'persist-tun' also note that you can (re)run an 'up' script using [code]up up-restart[/code]

can you please explain me what i need to do in that config file. Actually im new in openvpn. Thank you for your reply.

my isp disconnect frequentlly so after windows reconnect to the isp openvpn not work. Do i need temove line presist tun?

in your client config, comment out the line [code]persist-tun[/code] reconnect the VPN client then wait for your ISP to dis- and reconnect you.

uncomment means? Its already uncommented right?

here is my ovpn file: [code]client dev tun proto tcp #Change my.publicdomain.com to your public domain or IP address remote 76.10.222.65 443 remote-random resolv-retry infinite nobind persist-key persist-tun tls-auth ta.key 1 ca ca.crt cert client.crt key client.key ns-cert-type server #DNS Options here, CHANGE THESE !! #push "dhcp-option DNS 10.8.0.1" comp-lzo verb 3 ping-restart 10 [/code] what i need to do now?

OpenVPN Reconnect Problem

Jeet Chowdhury

yes i have disabled UAC....

Jeet Chowdhury

.not working until i disable and enable adapter... ;(

janjust

try adding

script-security 2
up "<path_to_up_script>"
up-restart

to the client config and restart the client....

Jeet Chowdhury

path_to_up_script means path of batch file and name???

janjust

yes, if you're using the openvpn GUI then you can assume a "Starting position" from

c:\program files\openvpn\config

thus, if your script is in 'c:\program files\openvpn\scripts' then you can use

up ..\\scripts\\hostizzle_pre.bat

make sure to change all backslashes to double backslashes, as done above.

Jeet Chowdhury

I have done this check:

script-security 2
up "C:\\Program Files (x86)\\OpenVPN\\config\\Hostizzle\\Hostizzle_pre.bat"
up-restart

Jeet Chowdhury

got this error:

Fri May 20 15:04:34 2011 OpenVPN 2.2.0 Win32-MSVC++ [SSL] [LZO2] built on Apr 26 2011
Fri May 20 15:04:34 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May 20 15:04:34 2011 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri May 20 15:04:34 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:04:34 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:04:34 2011 LZO compression initialized
Fri May 20 15:04:34 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 20 15:04:34 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 20 15:04:34 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 20 15:04:34 2011 Local Options hash (VER=V4): '504e774e'
Fri May 20 15:04:34 2011 Expected Remote Options hash (VER=V4): '14168603'
Fri May 20 15:04:34 2011 UDPv4 link local: [undef]
Fri May 20 15:04:34 2011 UDPv4 link remote: 76.10.222.65:53
Fri May 20 15:04:35 2011 TLS: Initial packet from 76.10.222.65:53, sid=dffd9822 0b76e988
Fri May 20 15:04:36 2011 VERIFY OK: depth=1, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=Hostizzle_CA/emailAddress=hostizzle@gmail.com
Fri May 20 15:04:36 2011 VERIFY OK: nsCertType=SERVER
Fri May 20 15:04:36 2011 VERIFY OK: depth=0, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=server/emailAddress=hostizzle@gmail.com
Fri May 20 15:04:44 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 20 15:04:44 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:04:44 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 20 15:04:44 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:04:44 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 20 15:04:44 2011 [server] Peer Connection Initiated with 76.10.222.65:53
Fri May 20 15:04:46 2011 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri May 20 15:04:46 2011 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.8.8,ping 10,ping-restart 60,route 10.30.0.1,topology net30,ifconfig 10.30.3.54 10.30.3.53'
Fri May 20 15:04:46 2011 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 20 15:04:46 2011 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 20 15:04:46 2011 OPTIONS IMPORT: route options modified
Fri May 20 15:04:46 2011 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri May 20 15:04:46 2011 ROUTE default_gateway=10.3.88.32
Fri May 20 15:04:46 2011 TAP-WIN32 device [TAP-32] opened: \\.\Global\{FDB21102-33AB-42D6-8DD5-240594864F24}.tap
Fri May 20 15:04:46 2011 TAP-Win32 Driver Version 9.8 
Fri May 20 15:04:46 2011 TAP-Win32 MTU=1500
Fri May 20 15:04:46 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.30.3.54/255.255.255.252 on interface {FDB21102-33AB-42D6-8DD5-240594864F24} [DHCP-serv: 10.30.3.53, lease-time: 31536000]
Fri May 20 15:04:46 2011 Successful ARP Flush on interface [23] {FDB21102-33AB-42D6-8DD5-240594864F24}
Fri May 20 15:04:46 2011 C:\Program Files (x86)\OpenVPN\config\Hostizzle\Hostizzle_pre.bat TAP-32 1500 1542 10.30.3.54 10.30.3.53 init
C:\Program Files (x86)\OpenVPN\config\Hostizzle>netsh interface set interface "TAP-32" DISABLE 
'netsh' is not recognized as an internal or external command,
operable program or batch file.
C:\Program Files (x86)\OpenVPN\config\Hostizzle>netsh interface set interface "TAP-32" ENABLE 
'netsh' is not recognized as an internal or external command,
operable program or batch file.
Fri May 20 15:04:47 2011 WARNING: Failed running command (--up/--down): returned error code 1
Fri May 20 15:04:47 2011 Exiting

Jeet Chowdhury

Another Error Log After I Tell It Netsh Path:

Fri May 20 15:07:34 2011 OpenVPN 2.2.0 Win32-MSVC++ [SSL] [LZO2] built on Apr 26 2011
Fri May 20 15:07:34 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May 20 15:07:34 2011 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri May 20 15:07:34 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:07:34 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:07:34 2011 LZO compression initialized
Fri May 20 15:07:34 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 20 15:07:34 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 20 15:07:34 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 20 15:07:34 2011 Local Options hash (VER=V4): '504e774e'
Fri May 20 15:07:34 2011 Expected Remote Options hash (VER=V4): '14168603'
Fri May 20 15:07:34 2011 UDPv4 link local: [undef]
Fri May 20 15:07:34 2011 UDPv4 link remote: 76.10.222.65:53
Fri May 20 15:07:35 2011 TLS: Initial packet from 76.10.222.65:53, sid=f12b20eb 21470120
Fri May 20 15:07:36 2011 Replay-window backtrack occurred [2]
Fri May 20 15:07:37 2011 VERIFY OK: depth=1, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=Hostizzle_CA/emailAddress=hostizzle@gmail.com
Fri May 20 15:07:37 2011 VERIFY OK: nsCertType=SERVER
Fri May 20 15:07:37 2011 VERIFY OK: depth=0, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=server/emailAddress=hostizzle@gmail.com
Fri May 20 15:07:40 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 20 15:07:40 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:07:40 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 20 15:07:40 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:07:40 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 20 15:07:40 2011 [server] Peer Connection Initiated with 76.10.222.65:53
Fri May 20 15:07:42 2011 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri May 20 15:07:42 2011 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.8.8,ping 10,ping-restart 60,route 10.30.0.1,topology net30,ifconfig 10.30.3.54 10.30.3.53'
Fri May 20 15:07:42 2011 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 20 15:07:42 2011 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 20 15:07:42 2011 OPTIONS IMPORT: route options modified
Fri May 20 15:07:42 2011 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri May 20 15:07:42 2011 ROUTE default_gateway=10.3.88.32
Fri May 20 15:07:42 2011 TAP-WIN32 device [TAP-32] opened: \\.\Global\{FDB21102-33AB-42D6-8DD5-240594864F24}.tap
Fri May 20 15:07:42 2011 TAP-Win32 Driver Version 9.8 
Fri May 20 15:07:42 2011 TAP-Win32 MTU=1500
Fri May 20 15:07:42 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.30.3.54/255.255.255.252 on interface {FDB21102-33AB-42D6-8DD5-240594864F24} [DHCP-serv: 10.30.3.53, lease-time: 31536000]
Fri May 20 15:07:42 2011 Successful ARP Flush on interface [23] {FDB21102-33AB-42D6-8DD5-240594864F24}
Fri May 20 15:07:42 2011 C:\Program Files (x86)\OpenVPN\config\Hostizzle\Hostizzle_pre.bat TAP-32 1500 1542 10.30.3.54 10.30.3.53 init
C:\Program Files (x86)\OpenVPN\config\Hostizzle>"C:\Windows\System32\netsh.exe" interface set interface "TAP-32" DISABLE 
C:\Program Files (x86)\OpenVPN\config\Hostizzle>"C:\Windows\System32\netsh.exe" interface set interface "TAP-32" ENABLE 
Fri May 20 15:07:47 2011 TUN/TAP interface has been stopped, exiting
Fri May 20 15:07:47 2011 TCP/UDP: Closing socket
Fri May 20 15:07:47 2011 Closing TUN/TAP interface
Fri May 20 15:07:47 2011 SIGTERM[soft,tun-stop] received, process exiting

Jeet Chowdhury

I think its disabling tap adapter after doing connection to vpn server but that must done before doing connection.....

janjust

I was afraid of that, but it was worth a try 😉
can you change

up "....."

down "....."

? I am not sure, however, if the 'down' script is called during a reconnect ...

Jeet Chowdhury

Reconnecting Failed:

Fri May 20 15:19:38 2011 OpenVPN 2.2.0 Win32-MSVC++ [SSL] [LZO2] built on Apr 26 2011
Fri May 20 15:19:38 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May 20 15:19:38 2011 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri May 20 15:19:38 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:19:38 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:19:38 2011 LZO compression initialized
Fri May 20 15:19:38 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 20 15:19:38 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 20 15:19:38 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 20 15:19:38 2011 Local Options hash (VER=V4): '504e774e'
Fri May 20 15:19:38 2011 Expected Remote Options hash (VER=V4): '14168603'
Fri May 20 15:19:38 2011 UDPv4 link local: [undef]
Fri May 20 15:19:38 2011 UDPv4 link remote: 76.10.222.65:53
Fri May 20 15:19:38 2011 TLS: Initial packet from 76.10.222.65:53, sid=4d3b9466 8b4cd583
Fri May 20 15:19:40 2011 VERIFY OK: depth=1, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=Hostizzle_CA/emailAddress=hostizzle@gmail.com
Fri May 20 15:19:40 2011 VERIFY OK: nsCertType=SERVER
Fri May 20 15:19:40 2011 VERIFY OK: depth=0, /C=US/ST=OH/L=Columbus/O=Hostizzle/CN=server/emailAddress=hostizzle@gmail.com
Fri May 20 15:19:47 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 20 15:19:47 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:19:47 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 20 15:19:47 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 20 15:19:47 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 20 15:19:47 2011 [server] Peer Connection Initiated with 76.10.222.65:53
Fri May 20 15:19:49 2011 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri May 20 15:19:50 2011 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.8.8,ping 10,ping-restart 60,route 10.30.0.1,topology net30,ifconfig 10.30.3.54 10.30.3.53'
Fri May 20 15:19:50 2011 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 20 15:19:50 2011 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 20 15:19:50 2011 OPTIONS IMPORT: route options modified
Fri May 20 15:19:50 2011 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri May 20 15:19:50 2011 ROUTE default_gateway=10.3.88.32
Fri May 20 15:19:50 2011 TAP-WIN32 device [TAP-32] opened: \\.\Global\{FDB21102-33AB-42D6-8DD5-240594864F24}.tap
Fri May 20 15:19:50 2011 TAP-Win32 Driver Version 9.8 
Fri May 20 15:19:50 2011 TAP-Win32 MTU=1500
Fri May 20 15:19:50 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.30.3.54/255.255.255.252 on interface {FDB21102-33AB-42D6-8DD5-240594864F24} [DHCP-serv: 10.30.3.53, lease-time: 31536000]
Fri May 20 15:19:50 2011 Successful ARP Flush on interface [23] {FDB21102-33AB-42D6-8DD5-240594864F24}
Fri May 20 15:19:55 2011 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri May 20 15:19:55 2011 C:\WINDOWS\system32\route.exe ADD 76.10.222.65 MASK 255.255.255.255 10.3.88.32
Fri May 20 15:19:55 2011 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 20 15:19:55 2011 Route addition via IPAPI succeeded [adaptive]
Fri May 20 15:19:55 2011 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 10.3.88.32
Fri May 20 15:19:55 2011 Route deletion via IPAPI succeeded [adaptive]
Fri May 20 15:19:55 2011 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.30.3.53
Fri May 20 15:19:55 2011 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 20 15:19:55 2011 Route addition via IPAPI succeeded [adaptive]
Fri May 20 15:19:55 2011 C:\WINDOWS\system32\route.exe ADD 10.30.0.1 MASK 255.255.255.255 10.30.3.53
Fri May 20 15:19:55 2011 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 20 15:19:55 2011 Route addition via IPAPI succeeded [adaptive]
Fri May 20 15:19:55 2011 Initialization Sequence Completed
Fri May 20 15:22:04 2011 [server] Inactivity timeout (--ping-restart), restarting
Fri May 20 15:22:04 2011 TCP/UDP: Closing socket
Fri May 20 15:22:04 2011 C:\Program Files (x86)\OpenVPN\Scripts\Hostizzle_pre.bat TAP-32 1500 1542 10.30.3.54 10.30.3.53 restart
C:\Program Files (x86)\OpenVPN\config\Hostizzle>"C:\Windows\System32\netsh.exe" interface set interface "TAP-32" DISABLE 
C:\Program Files (x86)\OpenVPN\config\Hostizzle>"C:\Windows\System32\netsh.exe" interface set interface "TAP-32" ENABLE 
Fri May 20 15:22:06 2011 SIGUSR1[soft,ping-restart] received, process restarting
Fri May 20 15:22:06 2011 Restart pause, 2 second(s)
Fri May 20 15:22:08 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May 20 15:22:08 2011 Re-using SSL/TLS context
Fri May 20 15:22:08 2011 LZO compression initialized
Fri May 20 15:22:08 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 20 15:22:08 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 20 15:22:08 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 20 15:22:08 2011 Local Options hash (VER=V4): '504e774e'
Fri May 20 15:22:08 2011 Expected Remote Options hash (VER=V4): '14168603'
Fri May 20 15:22:08 2011 UDPv4 link local: [undef]
Fri May 20 15:22:08 2011 UDPv4 link remote: 76.10.222.65:53
Fri May 20 15:22:08 2011 read from TUN/TAP : The I/O operation has been aborted because of either a thread exit or an application request.   (code=995)
Fri May 20 15:22:08 2011 TUN/TAP interface has been stopped, exiting
Fri May 20 15:22:08 2011 TCP/UDP: Closing socket
Fri May 20 15:22:08 2011 C:\WINDOWS\system32\route.exe DELETE 10.30.0.1 MASK 255.255.255.255 10.30.3.53
Fri May 20 15:22:08 2011 Warning: route gateway is not reachable on any active network adapters: 10.30.3.53
Fri May 20 15:22:08 2011 Route deletion via IPAPI failed [adaptive]
Fri May 20 15:22:08 2011 Route deletion fallback to route.exe
The route deletion failed: Element not found.
Fri May 20 15:22:08 2011 C:\WINDOWS\system32\route.exe DELETE 76.10.222.65 MASK 255.255.255.255 10.3.88.32
Fri May 20 15:22:08 2011 Warning: route gateway is not reachable on any active network adapters: 10.3.88.32
Fri May 20 15:22:08 2011 Route deletion via IPAPI failed [adaptive]
Fri May 20 15:22:08 2011 Route deletion fallback to route.exe
The route deletion failed: Element not found.
Fri May 20 15:22:08 2011 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 0.0.0.0 10.30.3.53
Fri May 20 15:22:08 2011 Warning: route gateway is not reachable on any active network adapters: 10.30.3.53
Fri May 20 15:22:08 2011 Route deletion via IPAPI failed [adaptive]
Fri May 20 15:22:08 2011 Route deletion fallback to route.exe
The route deletion failed: Element not found.
Fri May 20 15:22:08 2011 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 10.3.88.32
Fri May 20 15:22:08 2011 Warning: route gateway is not reachable on any active network adapters: 10.3.88.32
Fri May 20 15:22:08 2011 Route addition via IPAPI failed [adaptive]
Fri May 20 15:22:08 2011 Route addition fallback to route.exe
 OK!
Fri May 20 15:22:08 2011 Closing TUN/TAP interface
Fri May 20 15:22:08 2011 C:\Program Files (x86)\OpenVPN\Scripts\Hostizzle_pre.bat TAP-32 1500 1542 10.30.3.54 10.30.3.53 init
C:\Program Files (x86)\OpenVPN\config\Hostizzle>"C:\Windows\System32\netsh.exe" interface set interface "TAP-32" DISABLE 
C:\Program Files (x86)\OpenVPN\config\Hostizzle>"C:\Windows\System32\netsh.exe" interface set interface "TAP-32" ENABLE 
Fri May 20 15:22:09 2011 SIGTERM[soft,tun-stop] received, process exiting

janjust

hmmm it looks like this is not going to be possible :

- you need to run the tap32 start+stop during an OpenVPN GUI _pre script
- when the connection is dropped openvpn itself restarts and the GUI script is not used

there is also a _down script in the openvpn GUI - perhaps you can abuse that ? (I must add that I have not played with this myself).

Jeet Chowdhury

:S so what i need to do actually.... 🙁

janjust

here's a last thing you could try

1) comment out the "up" or "down" script in the .ovpn file or remove the lines altogether
2) rename "Hostizzle_pre.bat" to "Hostizzle_down.bat" in the c:\program files (x86)\openvpn\config directory
3) restart the openvpn connection and wait for the disconnect

Jeet Chowdhury

down batch file calling at the time of disconnect not reconnect... 🙁

janjust

then with your setup you are stuck - it is not normal that the tap-win32 needs to be reset after every connection; I don't know any other tricks to try.

Jeet Chowdhury

is this problem with windows 7?

janjust

Most likely, yes; I've never heard of anyone having to reset the tap-win32 adapter after the VPN disconnects before. There are some low-level issues with tap-win32 (or tap-win64) on windows 7 . This might be one of them.

sssss

Hi janjust,

I am also having the same set-up as Jeet Chowdhury.

-> Windows7 -> Openvpn2.2 -RC2 -> Hostizzle (vpn service provider)

I am also in need to reconnection after ping-restart.

What I have found was its something with the route table the problem occurs.

I am having dynamic IP, so after each disconnect, we get a new ip and thus the route is getting not proper(via -ping-restart, after connection drop/rconnect

occurs). I think this is the problem. But once we disable and and enable the Tap device, the problem will be solved since route table are cleared (via

_pre.bat or _down.bat), I think so...

Note: the dns & ping-restart is being pulled from the hostizzle server

My nslookup at several intances of connection is as below :

After connecting to ISP - nslookup (not connected to Hostizzle via openvpn)

C:\Users\admin>nslookup
Default Server:  dns-ntcl-p.tatacommunications.com
Address:  121.242.190.210

=================================
This was the settings pushed by Hostizzle

Mon May 23 14:07:28 2011 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon May 23 14:07:29 2011 PUSH: Received control message: 

'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.8.8,ping 10,ping-restart 

60,route 10.30.0.1,topology net30,ifconfig 10.30.7.166 10.30.7.165'

===================================
After connecting to Hostizzle server - nslookup

C:\Users\admin>nslookup
Default Server:  google-public-dns-a.google.com
Address:  8.8.8.8

==================================

When the internet connection was disconnected/dropped - nslookup (before Hostizzle ping-restart occurs)

C:\Users\admin>nslookup
DNS request timed out.
    timeout was 2 seconds.
Default Server:  UnKnown
Address:  8.8.8.8

====================================

After the internet link was again reconnectd and the Hostizzle connection was been made via soft-reset - nslookup

C:\Users\admin>nslookup
Default Server:  dns-ntcl-p.tatacommunications.com
Address:  121.242.190.210

===============================

So after the line has been dropped and connected, the route is not being properly updating for dns via openvpn(sigusr1)

Do we have any way to make the route again populated with 8.8.8.8 ?

Or can you please give a cmd command to issue signal for "re-connect(SIGUSR1)" the already started OpenGUI ?

so that I could utilize the _down.bat via this option

"remap-usr1 SIGTERM", in my .conf file.

So that the whole _down.bat will be like

netsh interface set interface "TAP-32" DISABLE
netsh interface set interface "TAP-32" ENABLE
<reconnect command to OpenvpnGUI>

Or anyother better solution you have..

By the way,
It will reconnect to the Hostizzle server, after the line is being dropped, but the domainnames wont get resolved..Thats the main problem..

Thanks

janjust

I get the impression Hostizzle is doing something wrong...
I cannot reproduce this behaviour using a test setup with my win7 64bit laptop:
- assign a random IP to the client
- push "redirect-gateway" (it would be better if they added 'def1')
- push "dhcp-option DNS a.b.c.d"

every time the connection is restarted the right DNS server is picked up and the right routes are set.
Try adding

register-dns

to the client config file to see if that helps in setting the correct DNS servers.

« Previous Page Next Page »