ROUTE: route addition failed using CreateIpForwardEntry:

eric66300

client log

Fri May 20 22:22:11 2011 ******* WARNING *******: null cipher specified, no encryption will be used
Fri May 20 22:22:11 2011 LZO compression initialized
Fri May 20 22:22:11 2011 Attempting to establish TCP connection with xx.xx.xx.xx:80
Fri May 20 22:22:11 2011 TCP connection established with xx.xx.xx.xx:80
Fri May 20 22:22:11 2011 TCPv4_CLIENT link local: [undef]
Fri May 20 22:22:11 2011 TCPv4_CLIENT link remote: xx.xx.xx.xx:80
Fri May 20 22:22:18 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 20 22:22:25 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1528', remote='link-mtu 1560'
Fri May 20 22:22:25 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Fri May 20 22:22:25 2011 [server] Peer Connection Initiated with xx.xx.xx.xx:80
Fri May 20 22:22:28 2011 TAP-WIN32 device [Local Area Connection 6] opened: \\.\Global\{A76F85F5-D78E-4DD1-871B-6F0F0F0508C2}.tap
Fri May 20 22:22:28 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.10.1.6/255.255.255.252 on interface {A76F85F5-D78E-4DD1-871B-6F0F0F0508C2} [DHCP-serv: 10.10.1.5, lease-time: 31536000]
Fri May 20 22:22:28 2011 Successful ARP Flush on interface [28] {A76F85F5-D78E-4DD1-871B-6F0F0F0508C2}
Fri May 20 22:22:34 2011 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=28]
Fri May 20 22:22:34 2011 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=28]
Fri May 20 22:22:34 2011 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=28]
Fri May 20 22:22:35 2011 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [status=160 if_index=28]
Fri May 20 22:22:35 2011 Initialization Sequence Completed

server config

local x.x.x.x
port 80
proto tcp
dev tun

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

ca /etc/openvpn/2.0/keys/ca.crt
cert /etc/openvpn/2.0/keys/server.crt
key /etc/openvpn/2.0/keys/server.key
dh /etc/openvpn/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 4.2.2.1"
keepalive 5 30
cipher none
comp-lzo
persist-key
persist-tun
status server.log
resolve-retry 5
verb 1
mute 5
script-security 2
float

client config

client
dev tun
proto tcp
remote xx.xx.xx.xx 80
ns-cert-type server
resolv-retry infinite
nobind
persist-key
persist-tun
ca server/server-3/ca.crt
comp-lzo
verb 1
mute 5
auth-user-pass server/password.txt
cipher none
float
script-security 2

thank you

i tried to add this on server

route 10.157.0.0 255.255.255.0
push "route 10.157.0.0 255.255.255.0"

but nothing happen

help please
thank you

eric66300

route-method exe
route-delay 3

error are gone now thanks to that code

janjust

there's a mismatch between client and server; remove the line 'tun-mtu-extra' and make sure 'tun-mtu' and 'mssfix' are the same on both client and server:

tun-mtu 1500
mssfix 1450

as for the route addition failing: this is known to happen on Win7 sometimes; try adding

route-methode exe
route-delay 5 30

eric66300

Fri May 20 23:30:36 2011 Route addition via IPAPI failed [adaptive]
Fri May 20 23:30:36 2011 Route addition fallback to route.exe
Fri May 20 23:30:36 2011 Initialization Sequence Completed

after i put

route-method exe
route-delay 5

another error has arrive :'(

maikcat

hi there,

>another error has arrive :'(

which is..?

Michael.

eric66300

can't remember the exact error but now im using window xp and no more error but the performance are too low

browsing are bad and even downloading file 278mb range 2.3kbps - 5.0kbps

how can i optimize tcp?

that error happened when i used window 7 but in xp it work fine except on performance issues.

eric66300

Sat May 21 19:46:17 2011 FRAG TTL expired i=3
Sat May 21 19:46:22 2011 FRAG TTL expired i=4
Sat May 21 19:46:22 2011 FRAG TTL expired i=8
Sat May 21 19:46:27 2011 FRAG TTL expired i=14
Sat May 21 19:46:27 2011 FRAG TTL expired i=16
Sat May 21 19:46:37 2011 NOTE: --mute triggered...

when i use udp

client config

client
dev tun
remote xx.xxx.xx.xxx
tls-client
ca server/server-3/ca.crt
ns-cert-type server
proto udp
port 9200

fragment 1300
resolv-retry infinite

nobind
verb 1
mute 5
comp-lzo
cipher none
auth-user-pass server/password.txt

route-method exe
route-delay 5
reneg-sec 0

script-security 2
float

server side config

mode server
local x.x.x.x
port 9200
proto udp
dev tun
tls-server
tun-mtu 1500
tun-mtu-extra 32
mssfix max
fragment 1300
ca /etc/openvpn/2.0/keys/ca.crt
cert /etc/openvpn/2.0/keys/server.crt
key /etc/openvpn/2.0/keys/server.key
dh /etc/openvpn/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
ifconfig 10.8.0.0 255.255.255.0
push "redirect-gate way def1"
push "dhcp-option DNS 208.67.222.222"
push "dchp-option DNS 4.2.2.1"
keepalive 5 30
cipher none
comp-lzo
persist-key
persist-tun
status server.log
resolve-retry 5
verb 1
mute 5
script-security 2
float

maikcat

hi there,

please take a look here..

https://forums.openvpn.net/topic7756.html

Michael.