Server Reboot Problem

rendered

Hi,

I'm running MS Windows Server 2003 64-bit with the latest version of OpenVPN. OpenVPN is running prefectly except when I reboot the server - the OpenVPN service starts correctly and the clients can connect to the OpenVPN server but they cannot ping through the VPN. The only thing I found that fixed the problem was to stop the OpenVPN service and then delete the ipp.txt file and then start the OpenVPN service again.

Can someone help me please?

Server config:

## server.ovpn ##
local 192.168.0.10

port 1199

;proto tcp
proto udp

;dev tap
dev tun

;dev-node OpenVPN

ca ca.crt
cert server.crt
key server.key

dh dh1024.pem

server 10.8.0.0 255.255.255.0

;ifconfig-pool-persist ipp.txt

;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

push "route 192.168.0.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248

;learn-address ./script

;push "redirect-gateway"

push "dhcp-option DNS 10.8.0.1"
push "dhcp-option WINS 10.8.0.1"
push "dhcp-option DOMAIN domain.local"

;client-to-client

;duplicate-cn

keepalive 10 120

;tls-auth ta.key 0 # This file is secret

;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES

comp-lzo

max-clients 20

;user nobody
;group nobody

persist-key
persist-tun

status openvpn-status.log

;log openvpn.log
;log-append openvpn.log

verb 3

;mute 20

ifconfig-pool-persist ipp.txt

maikcat

hi there,

you can disable ifconfig-pool-persist and use ccd
files if you want to give specific settings to your clients.

Michael.

rendered

If I disable ifconfig-pool-persist it still creates the ipp.txt file and I still get the same problem? Is it still suppose to generate that file?

maikcat

hi there,

stop openvpn service
delete ipp.txt
comment out ALL lines involving ifconfig pool persist directive

start openvpn service

Michael.

rendered

Thanks - I overlooked that I had listed ifconfig pool persist twice. Will test later tonight and let you know.

rendered

maikcat wrotehi there,

stop openvpn service
delete ipp.txt
comment out ALL lines involving ifconfig pool persist directive

start openvpn service

Michael.

Hi Michael,

I've done what you mentioned. The ipp.txt doesn't get created but now I have another problem. After removing the ifconfig pool persist directive, the VPN clients can't connect to the OpenVPN server anymore. It loops on this error when connecting:

read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)

If I re-enable the ifconfig pool persist directive, then they can connect?

maikcat

usually when this appears,

i double check my configs (right ips etc)
also my NAT config,firewall config etc...

can you post server logs with verb 4 and higher on server?

can you also post a client config also?

Michael.

rendered

Hi Michael,

Please see below:

CLIENT CONFIG

## vpn.ovpn ##

# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client

# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one.  On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node OpenVPN

# Are we connecting to a TCP or
# UDP server?  Use the same setting as
# on the server.
;proto tcp
proto udp

# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote vpn.dyndns.org 1199

# Choose a random host from the remote
# list for load-balancing.  Otherwise
# try hosts in the order specified.
;remote-random

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to
# a specific local port number.
nobind

# Downgrade privileges after initialization (non-Windows only)
;user nobody
;group nobody

# Try to preserve some state across restarts.
persist-key
persist-tun

# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here.  See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

# Wireless networks often produce a lot
# of duplicate packets.  Set this flag
# to silence duplicate packet warnings.
;mute-replay-warnings

# SSL/TLS parms.
# See the server config file for more
# description.  It's best to use
# a separate .crt/.key file pair
# for each client.  A single ca
# file can be used for all clients.
ca ca.crt
cert vpn.crt
key vpn.key

# Verify server certificate by checking
# that the certicate has the nsCertType
# field set to "server".  This is an
# important precaution to protect against
# a potential attack discussed here:
#  http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the nsCertType
# field set to "server".  The build-key-server
# script in the easy-rsa folder will do this.
;ns-cert-type server

# If a tls-auth key is used on the server
# then every client must also have the key.
;tls-auth ta.key 1

# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
;cipher x

# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
comp-lzo

# Set log file verbosity.
verb 3

# Silence repeating messages
;mute 20

*After disabling the persist directive so that I can paste the logs here - it now seems as though the clients are connecting correctly now. I will monitor it and let you know. Thanks.

rendered

Hi Michael,

After disabling the ifconfig pool persistent my vpn clients can connect to the vpn server but after a reboot they are unable to ping the server. Only if I re-enable the ifconfig pool persistent are they able to ping again. Then I also have the problem with this directive left on whereby a reboot also causes the clients to ping timeout like before.

Herewith is the server log verb 6 when the ifconfig pool persistent is off:

Wed Jul 13 09:18:13 2011 us=953000 41.132.43.188:13218 VERIFY OK: depth=1, /C=ZA/ST=WC/L=CapeTown/O=JAP/CN=japVPN/emailAddress=user@openvpn.com
Wed Jul 13 09:18:13 2011 us=953000 41.132.43.188:13218 VERIFY OK: depth=0, /C=ZA/ST=WC/O=JAP/CN=jap1/emailAddress=user@openvpn.com
Wed Jul 13 09:18:13 2011 us=953000 41.132.43.188:13218 UDPv4 WRITE [22] to 41.132.43.188:13218: P_ACK_V1 kid=0 [ 21 ]
Wed Jul 13 09:18:13 2011 us=953000 41.132.43.188:13218 UDPv4 READ [114] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=22 DATA len=100
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 WRITE [22] to 41.132.43.188:13218: P_ACK_V1 kid=0 [ 22 ]
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 READ [114] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=23 DATA len=100
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 WRITE [22] to 41.132.43.188:13218: P_ACK_V1 kid=0 [ 23 ]
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 READ [87] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=24 DATA len=73
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 WRITE [126] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ 24 ] pid=25 DATA len=100
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=26 DATA len=100
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=27 DATA len=100
Wed Jul 13 09:18:13 2011 us=968000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=28 DATA len=100
Wed Jul 13 09:18:14 2011 us=31000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 25 ]
Wed Jul 13 09:18:14 2011 us=31000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=100
Wed Jul 13 09:18:14 2011 us=31000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 26 ]
Wed Jul 13 09:18:14 2011 us=31000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=30 DATA len=100
Wed Jul 13 09:18:14 2011 us=46000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 27 ]
Wed Jul 13 09:18:14 2011 us=46000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=100
Wed Jul 13 09:18:14 2011 us=46000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 28 ]
Wed Jul 13 09:18:14 2011 us=46000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=100
Wed Jul 13 09:18:14 2011 us=93000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 29 ]
Wed Jul 13 09:18:14 2011 us=93000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=33 DATA len=100
Wed Jul 13 09:18:14 2011 us=93000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 30 ]
Wed Jul 13 09:18:14 2011 us=93000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=34 DATA len=100
Wed Jul 13 09:18:14 2011 us=93000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 31 ]
Wed Jul 13 09:18:14 2011 us=93000 41.132.43.188:13218 UDPv4 WRITE [112] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=35 DATA len=98
Wed Jul 13 09:18:14 2011 us=93000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 32 ]
Wed Jul 13 09:18:14 2011 us=156000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 33 ]
Wed Jul 13 09:18:14 2011 us=156000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 35 ]
Wed Jul 13 09:18:16 2011 us=406000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=34 DATA len=100
Wed Jul 13 09:18:16 2011 us=484000 41.132.43.188:13218 UDPv4 READ [126] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ 34 ] pid=25 DATA len=100
Wed Jul 13 09:18:16 2011 us=484000 41.132.43.188:13218 UDPv4 WRITE [22] to 41.132.43.188:13218: P_ACK_V1 kid=0 [ 25 ]
Wed Jul 13 09:18:16 2011 us=484000 41.132.43.188:13218 UDPv4 READ [114] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=26 DATA len=100
Wed Jul 13 09:18:16 2011 us=484000 41.132.43.188:13218 UDPv4 WRITE [22] to 41.132.43.188:13218: P_ACK_V1 kid=0 [ 26 ]
Wed Jul 13 09:18:16 2011 us=484000 41.132.43.188:13218 UDPv4 READ [114] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=27 DATA len=100
Wed Jul 13 09:18:16 2011 us=484000 41.132.43.188:13218 UDPv4 WRITE [22] to 41.132.43.188:13218: P_ACK_V1 kid=0 [ 27 ]
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 UDPv4 READ [28] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=28 DATA len=14
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 UDPv4 WRITE [126] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ 28 ] pid=36 DATA len=100
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=37 DATA len=100
Wed Jul 13 09:18:16 2011 us=500000 41.132.43.188:13218 UDPv4 WRITE [80] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=38 DATA len=66
Wed Jul 13 09:18:16 2011 us=562000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 36 ]
Wed Jul 13 09:18:16 2011 us=578000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 37 ]
Wed Jul 13 09:18:16 2011 us=578000 41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 38 ]
Wed Jul 13 09:18:16 2011 us=578000 41.132.43.188:13218 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jul 13 09:18:16 2011 us=578000 41.132.43.188:13218 [jap1] Peer Connection Initiated with 41.132.43.188:13218
Wed Jul 13 09:18:16 2011 us=578000 MULTI: new connection by client 'jap1' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Wed Jul 13 09:18:16 2011 us=578000 MULTI: Learn: 10.8.0.6 -> jap1/41.132.43.188:13218
Wed Jul 13 09:18:16 2011 us=578000 MULTI: primary virtual IP for jap1/41.132.43.188:13218: 10.8.0.6
Wed Jul 13 09:18:20 2011 us=734000 jap1/41.132.43.188:13218 UDPv4 READ [104] from 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=90
Wed Jul 13 09:18:20 2011 us=734000 jap1/41.132.43.188:13218 PUSH: Received control message: 'PUSH_REQUEST'
Wed Jul 13 09:18:20 2011 us=734000 jap1/41.132.43.188:13218 SENT CONTROL [jap1]: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,dhcp-option DNS 10.8.0.1,dhcp-option WINS 10.8.0.1,dhcp-option DOMAIN jap.local,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Wed Jul 13 09:18:20 2011 us=734000 jap1/41.132.43.188:13218 UDPv4 WRITE [22] to 41.132.43.188:13218: P_ACK_V1 kid=0 [ 29 ]
Wed Jul 13 09:18:20 2011 us=734000 jap1/41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=39 DATA len=100
Wed Jul 13 09:18:20 2011 us=734000 jap1/41.132.43.188:13218 UDPv4 WRITE [114] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=40 DATA len=100
Wed Jul 13 09:18:20 2011 us=734000 jap1/41.132.43.188:13218 UDPv4 WRITE [96] to 41.132.43.188:13218: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=82
Wed Jul 13 09:18:20 2011 us=765000 jap1/41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 39 ]
Wed Jul 13 09:18:20 2011 us=765000 jap1/41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 40 ]
Wed Jul 13 09:18:20 2011 us=781000 jap1/41.132.43.188:13218 UDPv4 READ [22] from 41.132.43.188:13218: P_ACK_V1 kid=0 [ 41 ]
Wed Jul 13 09:18:22 2011 us=875000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:18:26 2011 us=906000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:26 2011 us=906000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:28 2011 us=609000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:28 2011 us=609000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:18:29 2011 us=609000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:29 2011 us=609000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:18:30 2011 us=750000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:18:31 2011 us=437000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:31 2011 us=437000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:31 2011 us=656000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:31 2011 us=656000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:18:32 2011 us=890000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:18:32 2011 us=937000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:32 2011 us=937000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:33 2011 us=656000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:33 2011 us=656000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:18:34 2011 us=437000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:34 2011 us=437000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:34 2011 us=656000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:34 2011 us=656000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:18:36 2011 us=656000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:36 2011 us=656000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:18:39 2011 us=796000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:18:39 2011 us=796000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:18:39 2011 us=796000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:39 2011 us=796000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:39 2011 us=828000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:39 2011 us=828000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:40 2011 us=156000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:18:40 2011 us=156000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:18:40 2011 us=156000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:18:40 2011 us=468000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:40 2011 us=468000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:41 2011 us=656000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:18:41 2011 us=656000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:18:41 2011 us=968000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:41 2011 us=968000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:41 2011 us=968000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:41 2011 us=968000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:18:42 2011 us=31000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:18:47 2011 us=375000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:47 2011 us=375000 jap1/41.132.43.188:13218 TUN WRITE [60]
Wed Jul 13 09:18:48 2011 us=375000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:48 2011 us=375000 jap1/41.132.43.188:13218 TUN WRITE [60]
Wed Jul 13 09:18:49 2011 us=468000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:49 2011 us=468000 jap1/41.132.43.188:13218 TUN WRITE [60]
Wed Jul 13 09:18:50 2011 us=484000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:18:51 2011 us=453000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:51 2011 us=453000 jap1/41.132.43.188:13218 TUN WRITE [60]
Wed Jul 13 09:18:52 2011 us=343000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:18:55 2011 us=468000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:18:55 2011 us=468000 jap1/41.132.43.188:13218 TUN WRITE [60]
Wed Jul 13 09:18:59 2011 us=484000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:18:59 2011 us=484000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:19:00 2011 us=546000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:01 2011 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:19:01 2011 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:19:02 2011 us=359000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:02 2011 us=453000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:19:02 2011 us=453000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:19:02 2011 us=500000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:19:02 2011 us=500000 jap1/41.132.43.188:13218 TUN WRITE [96]
Wed Jul 13 09:19:03 2011 us=984000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:19:03 2011 us=984000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:19:05 2011 us=453000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:19:05 2011 us=453000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:19:10 2011 us=875000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:12 2011 us=750000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:16 2011 us=359000 jap1/41.132.43.188:13218 UDPv4 READ [53] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:20 2011 us=796000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:22 2011 us=156000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:25 2011 us=921000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:19:25 2011 us=921000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:19:26 2011 us=906000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:19:26 2011 us=906000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:19:28 2011 us=906000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:19:28 2011 us=906000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:19:30 2011 us=46000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:30 2011 us=921000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:19:30 2011 us=921000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:19:32 2011 us=406000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:19:32 2011 us=406000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:19:33 2011 us=125000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:33 2011 us=906000 jap1/41.132.43.188:13218 UDPv4 READ [117] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=116
Wed Jul 13 09:19:33 2011 us=906000 jap1/41.132.43.188:13218 TUN WRITE [78]
Wed Jul 13 09:19:40 2011 us=234000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:19:40 2011 us=234000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:40 2011 us=234000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:19:42 2011 us=703000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:19:42 2011 us=703000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:19:43 2011 us=218000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:19:43 2011 us=218000 jap1/41.132.43.188:13218 TUN WRITE [61]
Wed Jul 13 09:19:43 2011 us=953000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:50 2011 us=234000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:53 2011 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:53 2011 us=328000 jap1/41.132.43.188:13218 UDPv4 READ [53] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:19:54 2011 us=218000 jap1/41.132.43.188:13218 UDPv4 READ [109] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=108
Wed Jul 13 09:19:54 2011 us=218000 jap1/41.132.43.188:13218 TUN WRITE [67]
Wed Jul 13 09:19:55 2011 us=218000 jap1/41.132.43.188:13218 UDPv4 READ [109] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=108
Wed Jul 13 09:19:55 2011 us=218000 jap1/41.132.43.188:13218 TUN WRITE [67]
Wed Jul 13 09:19:56 2011 us=500000 jap1/41.132.43.188:13218 UDPv4 READ [109] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=108
Wed Jul 13 09:19:56 2011 us=500000 jap1/41.132.43.188:13218 TUN WRITE [67]
Wed Jul 13 09:19:58 2011 us=500000 jap1/41.132.43.188:13218 UDPv4 READ [109] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=108
Wed Jul 13 09:19:58 2011 us=500000 jap1/41.132.43.188:13218 TUN WRITE [67]
Wed Jul 13 09:20:00 2011 us=593000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:20:02 2011 us=500000 jap1/41.132.43.188:13218 UDPv4 READ [109] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=108
Wed Jul 13 09:20:02 2011 us=500000 jap1/41.132.43.188:13218 TUN WRITE [67]
Wed Jul 13 09:20:04 2011 us=31000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:20:08 2011 us=781000 jap1/41.132.43.188:13218 UDPv4 READ [101] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=100
Wed Jul 13 09:20:08 2011 us=781000 jap1/41.132.43.188:13218 TUN WRITE [60]
Wed Jul 13 09:20:09 2011 us=515000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:20:09 2011 us=515000 jap1/41.132.43.188:13218 TUN WRITE [92]
Wed Jul 13 09:20:10 2011 us=640000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:20:13 2011 us=828000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:20:13 2011 us=828000 jap1/41.132.43.188:13218 TUN WRITE [92]
Wed Jul 13 09:20:14 2011 us=250000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:20:18 2011 us=328000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:20:18 2011 us=328000 jap1/41.132.43.188:13218 TUN WRITE [92]
Wed Jul 13 09:20:20 2011 us=578000 jap1/41.132.43.188:13218 UDPv4 WRITE [53] to 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:20:22 2011 us=812000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:20:22 2011 us=812000 jap1/41.132.43.188:13218 TUN WRITE [92]
Wed Jul 13 09:20:24 2011 us=187000 jap10/196.210.194.74:54414 UDPv4 WRITE [53] to 196.210.194.74:54414: P_DATA_V1 kid=0 DATA len=52
Wed Jul 13 09:20:27 2011 us=312000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:20:27 2011 us=312000 jap1/41.132.43.188:13218 TUN WRITE [92]
Wed Jul 13 09:20:28 2011 us=312000 jap1/41.132.43.188:13218 UDPv4 READ [133] from 41.132.43.188:13218: P_DATA_V1 kid=0 DATA len=132
Wed Jul 13 09:20:28 2011 us=312000 jap1/41.132.43.188:13218 TUN WRITE [96]

I am going to try with route delay to see if that works.

rendered

I tried with route-delay and I still have the problem on reboot. It seems as though the routes aren't being added after I reboot the server - and they only get added when I have the ifconfig pool persistent enabled?

maikcat

hi there,

can you post the output of netstat -nr on server when you have problem?

Michael.

Mimiko

Do you have different clients connecting with the same certificate? Its not for this problem, but the clients will drop each other.

Please on server from command line do commands and show the output with OpenVPN started and at least one client connected:

ipconfig /all
route print