can't see local devices on LAN but can ping remote devices

ziggy61

Hi,

new to openVPN and struggling... I have set up VPN server on a Synology Disk Station remotely. The remote location is using the IP range 192.168.10.xxx. The local IP range is 192.168.1.xxx
I can connect fine to the remote server and can ping all remote devices attached to the remote LAN. However, as soon as I start an openVPN connection, I cannot connect or ping any of the local (client side) devices with the exception of the gateway/router (192.168.1.1).
The server side open VPN is a preconfigured VPN package and I cannot get the configuration of the server side. The configuration on the client side is:

dev tun
tls-client

remote zumikon-garage.dyndns.org 1194

# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

#redirect-gateway

pull
proto udp
script-security 2

ca ca.crt

comp-lzo

reneg-sec 0

auth-user-pass

All help most appreciated. Stefan

janjust

add

verb 4

to the client config file, reconnect and post the output here; most likely the server is pushing out something like "redirect-gateway def1" to the client, which can be found in the log file. If so , you can counteract this using

route-nopull

ziggy61

Hi

thank you for this.

I added both lines in the config file. Here is my status file. Essentially, if I add the 'route-nopull' command, I can then ping all local devices but none of the remote devices. If I take out this line, then I can ping all remote devices but only the local (client) gateway (192.168.1.1). Any further thoughts??

Sat Feb 04 11:12:14 2012 us=660000 Current Parameter Settings:
Sat Feb 04 11:12:14 2012 us=660000 config = 'openvpn.ovpn'
Sat Feb 04 11:12:14 2012 us=660000 mode = 0
Sat Feb 04 11:12:14 2012 us=660000 show_ciphers = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 show_digests = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 show_engines = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 genkey = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 key_pass_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 show_tls_ciphers = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 Connection profiles [default]:
Sat Feb 04 11:12:14 2012 us=660000 proto = udp
Sat Feb 04 11:12:14 2012 us=660000 local = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 local_port = 1194
Sat Feb 04 11:12:14 2012 us=660000 remote = 'zumikon-garage.dyndns.org'
Sat Feb 04 11:12:14 2012 us=660000 remote_port = 1194
Sat Feb 04 11:12:14 2012 us=660000 remote_float = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 bind_defined = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 bind_local = ENABLED
Sat Feb 04 11:12:14 2012 us=660000 connect_retry_seconds = 5
Sat Feb 04 11:12:14 2012 us=660000 connect_timeout = 10
Sat Feb 04 11:12:14 2012 us=660000 connect_retry_max = 0
Sat Feb 04 11:12:14 2012 us=660000 socks_proxy_server = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 socks_proxy_port = 0
Sat Feb 04 11:12:14 2012 us=660000 socks_proxy_retry = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 Connection profiles END
Sat Feb 04 11:12:14 2012 us=660000 remote_random = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 ipchange = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 dev = 'tun'
Sat Feb 04 11:12:14 2012 us=660000 dev_type = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 dev_node = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 lladdr = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 topology = 1
Sat Feb 04 11:12:14 2012 us=660000 tun_ipv6 = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 ifconfig_local = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 ifconfig_remote_netmask = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 ifconfig_noexec = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 ifconfig_nowarn = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 shaper = 0
Sat Feb 04 11:12:14 2012 us=660000 tun_mtu = 1500
Sat Feb 04 11:12:14 2012 us=660000 tun_mtu_defined = ENABLED
Sat Feb 04 11:12:14 2012 us=660000 link_mtu = 1500
Sat Feb 04 11:12:14 2012 us=660000 link_mtu_defined = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 tun_mtu_extra = 0
Sat Feb 04 11:12:14 2012 us=660000 tun_mtu_extra_defined = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 fragment = 0
Sat Feb 04 11:12:14 2012 us=660000 mtu_discover_type = -1
Sat Feb 04 11:12:14 2012 us=660000 mtu_test = 0
Sat Feb 04 11:12:14 2012 us=660000 mlock = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 keepalive_ping = 0
Sat Feb 04 11:12:14 2012 us=660000 keepalive_timeout = 0
Sat Feb 04 11:12:14 2012 us=660000 inactivity_timeout = 0
Sat Feb 04 11:12:14 2012 us=660000 ping_send_timeout = 0
Sat Feb 04 11:12:14 2012 us=660000 ping_rec_timeout = 0
Sat Feb 04 11:12:14 2012 us=660000 ping_rec_timeout_action = 0
Sat Feb 04 11:12:14 2012 us=660000 ping_timer_remote = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 remap_sigusr1 = 0
Sat Feb 04 11:12:14 2012 us=660000 explicit_exit_notification = 0
Sat Feb 04 11:12:14 2012 us=660000 persist_tun = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 persist_local_ip = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 persist_remote_ip = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 persist_key = DISABLED
Sat Feb 04 11:12:14 2012 us=660000 mssfix = 1450
Sat Feb 04 11:12:14 2012 us=660000 resolve_retry_seconds = 1000000000
Sat Feb 04 11:12:14 2012 us=660000 username = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 groupname = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 chroot_dir = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 cd_dir = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=660000 writepid = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=909000 up_script = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=909000 down_script = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=909000 down_pre = DISABLED
Sat Feb 04 11:12:14 2012 us=909000 up_restart = DISABLED
Sat Feb 04 11:12:14 2012 us=909000 up_delay = DISABLED
Sat Feb 04 11:12:14 2012 us=909000 daemon = DISABLED
Sat Feb 04 11:12:14 2012 us=909000 inetd = 0
Sat Feb 04 11:12:14 2012 us=909000 log = DISABLED
Sat Feb 04 11:12:14 2012 us=909000 suppress_timestamps = DISABLED
Sat Feb 04 11:12:14 2012 us=909000 nice = 0
Sat Feb 04 11:12:14 2012 us=909000 verbosity = 4
Sat Feb 04 11:12:14 2012 us=909000 mute = 0
Sat Feb 04 11:12:14 2012 us=909000 gremlin = 0
Sat Feb 04 11:12:14 2012 us=909000 status_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=909000 status_file_version = 1
Sat Feb 04 11:12:14 2012 us=909000 status_file_update_freq = 60
Sat Feb 04 11:12:14 2012 us=909000 occ = ENABLED
Sat Feb 04 11:12:14 2012 us=909000 rcvbuf = 0
Sat Feb 04 11:12:14 2012 us=925000 sndbuf = 0
Sat Feb 04 11:12:14 2012 us=925000 sockflags = 0
Sat Feb 04 11:12:14 2012 us=925000 fast_io = DISABLED
Sat Feb 04 11:12:14 2012 us=925000 lzo = 7
Sat Feb 04 11:12:14 2012 us=925000 route_script = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=925000 route_default_gateway = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=925000 route_default_metric = 0
Sat Feb 04 11:12:14 2012 us=925000 route_noexec = DISABLED
Sat Feb 04 11:12:14 2012 us=925000 route_delay = 5
Sat Feb 04 11:12:14 2012 us=925000 route_delay_window = 30
Sat Feb 04 11:12:14 2012 us=925000 route_delay_defined = ENABLED
Sat Feb 04 11:12:14 2012 us=925000 route_nopull = ENABLED
Sat Feb 04 11:12:14 2012 us=925000 route_gateway_via_dhcp = DISABLED
Sat Feb 04 11:12:14 2012 us=925000 max_routes = 100
Sat Feb 04 11:12:14 2012 us=925000 allow_pull_fqdn = DISABLED
Sat Feb 04 11:12:14 2012 us=925000 management_addr = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=956000 management_port = 0
Sat Feb 04 11:12:14 2012 us=956000 management_user_pass = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=956000 management_log_history_cache = 250
Sat Feb 04 11:12:14 2012 us=956000 management_echo_buffer_size = 100
Sat Feb 04 11:12:14 2012 us=956000 management_write_peer_info_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=956000 management_client_user = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=956000 management_client_group = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=956000 management_flags = 0
Sat Feb 04 11:12:14 2012 us=956000 shared_secret_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=956000 key_direction = 0
Sat Feb 04 11:12:14 2012 us=956000 ciphername_defined = ENABLED
Sat Feb 04 11:12:14 2012 us=956000 ciphername = 'BF-CBC'
Sat Feb 04 11:12:14 2012 us=956000 authname_defined = ENABLED
Sat Feb 04 11:12:14 2012 us=956000 authname = 'SHA1'
Sat Feb 04 11:12:14 2012 us=956000 prng_hash = 'SHA1'
Sat Feb 04 11:12:14 2012 us=956000 prng_nonce_secret_len = 16
Sat Feb 04 11:12:14 2012 us=972000 keysize = 0
Sat Feb 04 11:12:14 2012 us=972000 engine = DISABLED
Sat Feb 04 11:12:14 2012 us=972000 replay = ENABLED
Sat Feb 04 11:12:14 2012 us=972000 mute_replay_warnings = DISABLED
Sat Feb 04 11:12:14 2012 us=972000 replay_window = 64
Sat Feb 04 11:12:14 2012 us=972000 replay_time = 15
Sat Feb 04 11:12:14 2012 us=972000 packet_id_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=972000 use_iv = ENABLED
Sat Feb 04 11:12:14 2012 us=972000 test_crypto = DISABLED
Sat Feb 04 11:12:14 2012 us=972000 tls_server = DISABLED
Sat Feb 04 11:12:14 2012 us=972000 tls_client = ENABLED
Sat Feb 04 11:12:14 2012 us=972000 key_method = 2
Sat Feb 04 11:12:14 2012 us=972000 ca_file = 'ca.crt'
Sat Feb 04 11:12:14 2012 us=972000 ca_path = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=972000 dh_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=972000 cert_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=972000 priv_key_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 pkcs12_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 cryptoapi_cert = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 cipher_list = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 tls_verify = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 tls_export_cert = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 tls_remote = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 crl_file = '[UNDEF]'
Sat Feb 04 11:12:14 2012 us=987000 ns_cert_type = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:14 2012 us=987000 remote_cert_ku = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_ku = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_ku[i] = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_ku[i] = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_ku[i] = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_ku[i] = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_ku[i] = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_ku[i] = 0
Sat Feb 04 11:12:15 2012 us=3000 remote_cert_eku = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=3000 tls_timeout = 2
Sat Feb 04 11:12:15 2012 us=3000 renegotiate_bytes = 0
Sat Feb 04 11:12:15 2012 us=3000 renegotiate_packets = 0
Sat Feb 04 11:12:15 2012 us=3000 renegotiate_seconds = 0
Sat Feb 04 11:12:15 2012 us=3000 handshake_window = 60
Sat Feb 04 11:12:15 2012 us=3000 transition_window = 3600
Sat Feb 04 11:12:15 2012 us=3000 single_session = DISABLED
Sat Feb 04 11:12:15 2012 us=3000 push_peer_info = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 tls_exit = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 tls_auth_file = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=34000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_protected_authentication = DISABLED
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=50000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_private_mode = 00000000
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=112000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_cert_private = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_pin_cache_period = -1
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_id = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=128000 pkcs11_id_management = DISABLED
Sat Feb 04 11:12:15 2012 us=128000 server_network = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=128000 server_netmask = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=128000 server_bridge_ip = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=143000 server_bridge_netmask = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=143000 server_bridge_pool_start = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=143000 server_bridge_pool_end = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=143000 ifconfig_pool_defined = DISABLED
Sat Feb 04 11:12:15 2012 us=143000 ifconfig_pool_start = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=143000 ifconfig_pool_end = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=143000 ifconfig_pool_netmask = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=143000 ifconfig_pool_persist_filename = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=143000 ifconfig_pool_persist_refresh_freq = 600
Sat Feb 04 11:12:15 2012 us=143000 n_bcast_buf = 256
Sat Feb 04 11:12:15 2012 us=143000 tcp_queue_limit = 64
Sat Feb 04 11:12:15 2012 us=143000 real_hash_size = 256
Sat Feb 04 11:12:15 2012 us=143000 virtual_hash_size = 256
Sat Feb 04 11:12:15 2012 us=143000 client_connect_script = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=175000 learn_address_script = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=175000 client_disconnect_script = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=175000 client_config_dir = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=175000 ccd_exclusive = DISABLED
Sat Feb 04 11:12:15 2012 us=175000 tmp_dir = 'C:\Users\stefan\AppData\Local\Temp\'
Sat Feb 04 11:12:15 2012 us=175000 push_ifconfig_defined = DISABLED
Sat Feb 04 11:12:15 2012 us=175000 push_ifconfig_local = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=175000 push_ifconfig_remote_netmask = 0.0.0.0
Sat Feb 04 11:12:15 2012 us=175000 enable_c2c = DISABLED
Sat Feb 04 11:12:15 2012 us=175000 duplicate_cn = DISABLED
Sat Feb 04 11:12:15 2012 us=175000 cf_max = 0
Sat Feb 04 11:12:15 2012 us=175000 cf_per = 0
Sat Feb 04 11:12:15 2012 us=175000 max_clients = 1024
Sat Feb 04 11:12:15 2012 us=175000 max_routes_per_client = 256
Sat Feb 04 11:12:15 2012 us=175000 auth_user_pass_verify_script = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=190000 auth_user_pass_verify_script_via_file = DISABLED
Sat Feb 04 11:12:15 2012 us=190000 ssl_flags = 0
Sat Feb 04 11:12:15 2012 us=190000 client = DISABLED
Sat Feb 04 11:12:15 2012 us=190000 pull = ENABLED
Sat Feb 04 11:12:15 2012 us=190000 auth_user_pass_file = 'stdin'
Sat Feb 04 11:12:15 2012 us=190000 show_net_up = DISABLED
Sat Feb 04 11:12:15 2012 us=190000 route_method = 0
Sat Feb 04 11:12:15 2012 us=190000 ip_win32_defined = DISABLED
Sat Feb 04 11:12:15 2012 us=190000 ip_win32_type = 3
Sat Feb 04 11:12:15 2012 us=190000 dhcp_masq_offset = 0
Sat Feb 04 11:12:15 2012 us=190000 dhcp_lease_time = 31536000
Sat Feb 04 11:12:15 2012 us=190000 tap_sleep = 0
Sat Feb 04 11:12:15 2012 us=190000 dhcp_options = DISABLED
Sat Feb 04 11:12:15 2012 us=190000 dhcp_renew = DISABLED
Sat Feb 04 11:12:15 2012 us=190000 dhcp_pre_release = DISABLED
Sat Feb 04 11:12:15 2012 us=206000 dhcp_release = DISABLED
Sat Feb 04 11:12:15 2012 us=206000 domain = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=206000 netbios_scope = '[UNDEF]'
Sat Feb 04 11:12:15 2012 us=206000 netbios_node_type = 0
Sat Feb 04 11:12:15 2012 us=206000 disable_nbt = DISABLED
Sat Feb 04 11:12:15 2012 us=206000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sat Feb 04 11:12:21 2012 us=477000 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sat Feb 04 11:12:21 2012 us=477000 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Feb 04 11:12:21 2012 us=477000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Feb 04 11:12:21 2012 us=695000 LZO compression initialized
Sat Feb 04 11:12:21 2012 us=695000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Feb 04 11:12:21 2012 us=695000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Feb 04 11:12:21 2012 us=758000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Feb 04 11:12:21 2012 us=758000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Feb 04 11:12:21 2012 us=758000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Feb 04 11:12:21 2012 us=758000 Local Options hash (VER=V4): '41690919'
Sat Feb 04 11:12:21 2012 us=758000 Expected Remote Options hash (VER=V4): '530fdded'
Sat Feb 04 11:12:21 2012 us=758000 UDPv4 link local (bound): [undef]:1194
Sat Feb 04 11:12:21 2012 us=758000 UDPv4 link remote: 85.4.22.137:1194
Sat Feb 04 11:12:21 2012 us=789000 TLS: Initial packet from 85.4.22.137:1194, sid=cf8f43a5 72eed115
Sat Feb 04 11:12:21 2012 us=789000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Feb 04 11:12:22 2012 us=39000 VERIFY OK: depth=1, /C=TW/ST=Taiwan/L=Taipei/O=Synology_Inc./OU=Certificate_Authority/CN=Synology_Inc._CA/emailAddress=product@synology.com
Sat Feb 04 11:12:22 2012 us=39000 VERIFY OK: depth=0, /C=XY/ST=Snake_Desert/L=Snake_Town/O=Snake_Oil__Ltd/OU=Certificate_Authority/CN=Snake_Oil_CA/emailAddress=ca@snakeoil.dom
Sat Feb 04 11:12:22 2012 us=241000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 04 11:12:22 2012 us=241000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 04 11:12:22 2012 us=241000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 04 11:12:22 2012 us=241000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 04 11:12:22 2012 us=241000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Feb 04 11:12:22 2012 us=241000 [Snake_Oil_CA] Peer Connection Initiated with 85.4.22.137:1194
Sat Feb 04 11:12:24 2012 us=332000 SENT CONTROL [Snake_Oil_CA]: 'PUSH_REQUEST' (status=1)
Sat Feb 04 11:12:24 2012 us=379000 PUSH: Received control message: 'PUSH_REPLY,route 192.168.10.0 255.255.255.0,route 192.168.1.0 255.255.255.0,route 192.168.1.1,topology net30,ping 10,ping-restart 60,ifconfig 192.168.1.6 192.168.1.5'
Sat Feb 04 11:12:24 2012 us=379000 Options error: option 'route' cannot be used in this context
Sat Feb 04 11:12:24 2012 us=379000 Options error: option 'route' cannot be used in this context
Sat Feb 04 11:12:24 2012 us=379000 Options error: option 'route' cannot be used in this context
Sat Feb 04 11:12:24 2012 us=379000 OPTIONS IMPORT: timers and/or timeouts modified
Sat Feb 04 11:12:24 2012 us=379000 OPTIONS IMPORT: --ifconfig/up options modified
Sat Feb 04 11:12:24 2012 us=379000 WARNING: potential TUN/TAP adapter subnet conflict between local LAN [192.168.1.0/255.255.255.0] and remote VPN [192.168.1.6/255.255.255.255]
Sat Feb 04 11:12:24 2012 us=379000 TAP-WIN32 device [OpenVPN Connection] opened: \\.\Global\{95A875B5-4206-4057-8152-C3A1977BE2EC}.tap
Sat Feb 04 11:12:24 2012 us=379000 TAP-Win32 Driver Version 9.9
Sat Feb 04 11:12:24 2012 us=379000 TAP-Win32 MTU=1500
Sat Feb 04 11:12:24 2012 us=394000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.1.6/255.255.255.252 on interface {95A875B5-4206-4057-8152-C3A1977BE2EC} [DHCP-serv: 192.168.1.5, lease-time: 31536000]
Sat Feb 04 11:12:24 2012 us=394000 Successful ARP Flush on interface [21] {95A875B5-4206-4057-8152-C3A1977BE2EC}
Sat Feb 04 11:12:29 2012 us=480000 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up
Sat Feb 04 11:12:29 2012 us=480000 Initialization Sequence Completed

verb 4
dev tun
tls-client
route-nopull

remote zumikon-garage.dyndns.org 1194


# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

#redirect-gateway

pull

proto udp
script-security 2

ca ca.crt

comp-lzo

reneg-sec 0


auth-user-pass

janjust

the server is pushing the following:

PUSH: Received control message: 'PUSH_REPLY,route 192.168.10.0 255.255.255.0,route 192.168.1.0 255.255.255.0,route 192.168.1.1,topology net30,ping 10,ping-restart 60,ifconfig 192.168.1.6 192.168.1.5'

this means it wants to push the networks 192.168.10/24 and 192.168.1/24; there's no mention of it pushing the default gateway; isn't your local network also 192.168.1.0/24? you'll need to choose a different subnet on either your LAN or on the OpenVPN server side.

ziggy61

thank you for this. Will test this as soon as I am back in the office - probably end of this week.

Best wishes, Stefan

ziggy61

Hi,

just wanted to confirm that the change of the remote IP address range to 10.0.0.xxx did finally the trick. I had to renew the client security certificate file (ca file) before but now, everything is working just fine. I both can access the local LAN devices as well as the remote LAN devices. I still need to find a way to address the remote devices by name rather than IP address alone but this seems like a very solvable problem now...

Thank you for your great support - immensely appreciated.

Best, Stefan