route ADD on Windows...

zealer

Hello everyone,

I have a working OpenVPN configured. The problem is on windows7 hosts... the routing table refuses to accept the route to the remote network! This is a Windows problem, but it is related to OpenVPN operation... and I hope some people here have found a way to overcome this issue!

The problem is as follows:
10.8.0.0 are the tunnel IPs
172.18.1.0 is the remote private network. I need the VPN to access it

Now occasionally I start encountering anothe issue, which can only be fixed by rebooting...... Routes are added, but actually NOT addedm to the windows routing table. Here is the routing table after OpenVPN connects:

C:\Windows\system32>route print
===========================================================================
Interface List
 21...00 ff c7 28 64 90 ......TAP-Win32 Adapter V9
 11...64 31 50 08 77 eb ......Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
 14...00 05 9a 3c 7a 00 ......Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64
 10...e0 2a 82 e2 30 dd ......802.11n Wireless LAN Card
  1...........................Software Loopback Interface 1
 23...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
 20...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 24...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 34...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
 37...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
 40...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.100     25
        10.8.0.24  255.255.255.252         On-link         10.8.0.26    286
        10.8.0.26  255.255.255.255         On-link         10.8.0.26    286
        10.8.0.27  255.255.255.255         On-link         10.8.0.26    286
   15.203.169.227  255.255.255.255      192.168.2.1    192.168.2.100     26
         16.0.0.0        255.0.0.0         On-link    134.44.129.224      2
   16.255.255.255  255.255.255.255         On-link    134.44.129.224    257
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     134.44.129.0    255.255.255.0         On-link    134.44.129.224    257
   134.44.129.224  255.255.255.255         On-link    134.44.129.224    257
   134.44.129.255  255.255.255.255         On-link    134.44.129.224    257
      192.168.2.0    255.255.255.0         On-link     192.168.2.100    281
      192.168.2.1  255.255.255.255      192.168.2.1    192.168.2.100     26
    192.168.2.100  255.255.255.255         On-link     192.168.2.100    281
    192.168.2.255  255.255.255.255         On-link     192.168.2.100    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.2.100    281
        224.0.0.0        240.0.0.0         On-link    134.44.129.224    257
        224.0.0.0        240.0.0.0         On-link         10.8.0.26    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.2.100    281
  255.255.255.255  255.255.255.255         On-link    134.44.129.224    257
  255.255.255.255  255.255.255.255         On-link         10.8.0.26    286
===========================================================================
Persistent Routes:
  None

OpenVPN log says:

Tue Dec 06 19:56:15 2011 us=171000 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Tue Dec 06 19:56:15 2011 us=171000 C:\WINDOWS\system32\route.exe ADD 172.18.1.0 MASK 255.255.255.0 10.8.0.25
 OK!
Tue Dec 06 19:56:15 2011 us=218000 C:\WINDOWS\system32\route.exe ADD 172.24.1.0 MASK 255.255.255.0 10.8.0.25
 OK!
Tue Dec 06 19:56:15 2011 us=233000 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.25
 OK!
Tue Dec 06 19:56:15 2011 us=264000 Initialization Sequence Completed
.................
.................
Tue Dec 06 19:56:43 2011 us=376000 TCP/UDP: Closing socket
Tue Dec 06 19:56:43 2011 us=376000 C:\WINDOWS\system32\route.exe DELETE 10.8.0.1 MASK 255.255.255.255 10.8.0.25
The route deletion failed: Element not found.
Tue Dec 06 19:56:43 2011 us=391000 C:\WINDOWS\system32\route.exe DELETE 172.24.1.0 MASK 255.255.255.0 10.8.0.25
The route deletion failed: Element not found.
Tue Dec 06 19:56:43 2011 us=423000 C:\WINDOWS\system32\route.exe DELETE 172.18.1.0 MASK 255.255.255.0 10.8.0.25
The route deletion failed: Element not found.
Tue Dec 06 19:56:43 2011 us=438000 Closing TUN/TAP interface
Tue Dec 06 19:56:43 2011 us=438000 SIGTERM[hard,] received, process exiting

Routes to 172.18.1.0 are just not added. route-method exe did not help
I tried adding the route manually, it says "OK!", but guess what... it does not add them. Netstat -r does not show them, and they are apparently just not inserted:

C:\Windows\system32>route ADD 172.24.1.0 MASK 255.255.255.0 10.8.0.25
OK!

C:\Windows\system32>route ADD 172.24.1.0 MASK 255.255.255.0 10.8.0.25
OK!

C:\Windows\system32>route DELETE 172.24.1.0 MASK 255.255.255.0 10.8.0.25
The route deletion failed: Element not found.

This is very frustrating. Any workaround for this you might know?

Thanks,
Simeon

janjust

1) make sure you are running with the right privileges (at least Network Administrator, possibly Administrator + elevated privileges)

2) what happens if you run it *without* 'route-method exe' or, instead, with

route-method ipapi

?

3) which version of OpenVPN are you using?

zealer

ipapi is the default. It does not work also :/

Privileges are OK. It has full administrator privileges, otherwise it would not say "OK!" at the route add command. It would say "The requested operation requires elevation". I even tried manually adding this route via the cmd, but it just said "OK!". It never actually added it, no matter how many times i try.

My openVPN is 2.2.1 on the server
and OpenVPN GUI is 1.0.3 on the clients

janjust

the GUI version is nearly always 1.03 - what is posted in the log output when OpenVPN starts on the client? it will list the actual OpenVPN version number.

If manually adding the routes does the same thing - i.e. prints OK! but does not actually add the route - then I suspect something is wrong with your Windows installation.

maikcat

is any antivirus/antimalware/firewall running?

just my 2 cents

Michael.