conf

globaltech

hello,
thanks for your answer.
how i can make a static key for each client ?
what's the client and server config?
any artical or book can help me?
thanks.

maikcat

hi there,

read this (taken from http://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html)

Example 2: A tunnel with static-key security (i.e. using a pre-shared secret)
First build a static key on may.

openvpn --genkey --secret key

This command will build a random key file called key (in ascii format). Now copy key to june over a secure medium such as by using the scp(1) program.

On may:

openvpn --remote june.kg --dev tun1 --ifconfig 10.4.0.1 10.4.0.2 --verb 5 --secret key

On june:

openvpn --remote may.kg --dev tun1 --ifconfig 10.4.0.2 10.4.0.1 --verb 5 --secret key

Now verify the tunnel is working by pinging across the tunnel.

On may:

ping 10.4.0.2

On june:

ping 10.4.0.1

also read

http://openvpn.net/index.php/open-source/documentation/howto.html

Michael.

globaltech

hello,
as i test it before this way will make only one tunel i cant see route all trafic througe the tun card without getway.
so any suggest?
thanks.

maikcat

what exactly are you trying to achieve?

btw there are many examples in the documentation section..

Michael.

globaltech

hello,
regarding documentation the statickey use in gerneral for site to site,
in my case i have to use this way to make the connection througe this way but i have many clients to one server.
regding the confige above i have only one static ip for the client? so can i make it as dhcp?
regarding the config above i dont have a getway that assign to tun adapter so i have to assigen it.
thanks.

maikcat

you can setup openvpn server using certificates for authenticating your clients
also the server directive is what you are looking for...

please read the documentation.

Michael.

globaltech

hello,
thanks for your answer, but as u see above my problem is with tls ! mean if i use the certifcate i have to use tls and this is my problem so in my case i have to use static key to not use tls.
thanks.

maikcat

hi there,

but as u see above my problem is with tls !

just curious...where exactly do you mention this?

you can also use multiple instances of openvpn for your clients
(instance -- client) and with different keys..

Michael.

globaltech

hello,
client conf:
remote 208.67.18.35 443
dev tun
ifconfig 10.8.0.2 10.8.0.1
push "redirect-gateway def1"
secret static.key

server conf:
dev tun
port 443
ifconfig 10.8.0.1 10.8.0.2
push "redirect-gateway def1"
secret static.key

it's work fine, my problem is with default getway how i can make the client have a server default getway so can get the internet from server?
thanks.

janjust

push/pull does not work in this setup; use this for the client config:

remote 208.67.18.35 443
dev tun
ifconfig 10.8.0.2 10.8.0.1
redirect-gateway def1
secret static.key

globaltech

hello
still the same problem if i check my wan ip it's give me my internet ip not the public ip of server.
pleae not that i tired:
place it on client and server = not work
place it on client = not work
place it on server = not work
thanks.

globaltech

hello,
please not this openvpn client log:
Thu Mar 08 10:58:28 2012 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Thu Mar 08 10:58:28 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Mar 08 10:58:28 2012 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{55E04AA5-8BF7-413D-B6CA-E29EEBC2D2C5}.tap
Thu Mar 08 10:58:28 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {55E04AA5-8BF7-413D-B6CA-E29EEBC2D2C5} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Thu Mar 08 10:58:28 2012 NOTE: FlushIpNetTable failed on interface [15] {55E04AA5-8BF7-413D-B6CA-E29EEBC2D2C5} (status=5) : Access is denied.
Thu Mar 08 10:58:28 2012 UDPv4 link local (bound): [undef]:1194
Thu Mar 08 10:58:28 2012 UDPv4 link remote: ip:443
Thu Mar 08 10:58:39 2012 Peer Connection Initiated with ip:443
Thu Mar 08 10:58:40 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=19]
Thu Mar 08 10:58:40 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=15]
Thu Mar 08 10:58:40 2012 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=15]
Thu Mar 08 10:58:40 2012 Initialization Sequence Completed
thanks.

globaltech

hello,
sorry again. i run openvpn as administrator so the access denied problem is resloved but the default getway problem is still.
thanks.

janjust

you're running a really old (and no longer supported) version of OpenVPN; which version of Windows is this on? 2.0.9 does not run correctly on Vista/7 ; try upgrading to 2.2.2 and also, try increasing the verbosity

verb 4

and post the connection log again.

globaltech

hello,
i am using openvpn gui 1.03 from openvpn.se
this is the log:

Thu Mar 08 16:18:18 2012 us=808617 Current Parameter Settings:
Thu Mar 08 16:18:18 2012 us=809502 config = 'client.ovpn'
Thu Mar 08 16:18:18 2012 us=809514 mode = 0
Thu Mar 08 16:18:18 2012 us=809525 show_ciphers = DISABLED
Thu Mar 08 16:18:18 2012 us=809535 show_digests = DISABLED
Thu Mar 08 16:18:18 2012 us=809546 show_engines = DISABLED
Thu Mar 08 16:18:18 2012 us=809555 genkey = DISABLED
Thu Mar 08 16:18:18 2012 us=809566 key_pass_file = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=809576 show_tls_ciphers = DISABLED
Thu Mar 08 16:18:18 2012 us=809586 proto = 0
Thu Mar 08 16:18:18 2012 us=809595 local = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=809607 remote_list[0] = {'208.67.18.35', 443}
Thu Mar 08 16:18:18 2012 us=809617 remote_random = DISABLED
Thu Mar 08 16:18:18 2012 us=809627 local_port = 1194
Thu Mar 08 16:18:18 2012 us=809637 remote_port = 1194
Thu Mar 08 16:18:18 2012 us=809648 remote_float = DISABLED
Thu Mar 08 16:18:18 2012 us=809658 ipchange = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=809668 bind_local = ENABLED
Thu Mar 08 16:18:18 2012 us=809677 dev = 'tun'
Thu Mar 08 16:18:18 2012 us=809687 dev_type = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=809697 dev_node = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=809706 tun_ipv6 = DISABLED
Thu Mar 08 16:18:18 2012 us=809716 ifconfig_local = '10.8.0.2'
Thu Mar 08 16:18:18 2012 us=809727 ifconfig_remote_netmask = '10.8.0.1'
Thu Mar 08 16:18:18 2012 us=809738 ifconfig_noexec = DISABLED
Thu Mar 08 16:18:18 2012 us=809747 ifconfig_nowarn = DISABLED
Thu Mar 08 16:18:18 2012 us=809757 shaper = 0
Thu Mar 08 16:18:18 2012 us=809767 tun_mtu = 1500
Thu Mar 08 16:18:18 2012 us=809777 tun_mtu_defined = ENABLED
Thu Mar 08 16:18:18 2012 us=809794 link_mtu = 1500
Thu Mar 08 16:18:18 2012 us=809806 link_mtu_defined = DISABLED
Thu Mar 08 16:18:18 2012 us=809816 tun_mtu_extra = 0
Thu Mar 08 16:18:18 2012 us=809826 tun_mtu_extra_defined = DISABLED
Thu Mar 08 16:18:18 2012 us=809835 fragment = 0
Thu Mar 08 16:18:18 2012 us=809846 mtu_discover_type = -1
Thu Mar 08 16:18:18 2012 us=809855 mtu_test = 0
Thu Mar 08 16:18:18 2012 us=809864 mlock = DISABLED
Thu Mar 08 16:18:18 2012 us=809874 keepalive_ping = 0
Thu Mar 08 16:18:18 2012 us=809884 keepalive_timeout = 0
Thu Mar 08 16:18:18 2012 us=809894 inactivity_timeout = 0
Thu Mar 08 16:18:18 2012 us=809904 ping_send_timeout = 0
Thu Mar 08 16:18:18 2012 us=809913 ping_rec_timeout = 0
Thu Mar 08 16:18:18 2012 us=809925 ping_rec_timeout_action = 0
Thu Mar 08 16:18:18 2012 us=809935 ping_timer_remote = DISABLED
Thu Mar 08 16:18:18 2012 us=809945 remap_sigusr1 = 0
Thu Mar 08 16:18:18 2012 us=809955 explicit_exit_notification = 0
Thu Mar 08 16:18:18 2012 us=809965 persist_tun = DISABLED
Thu Mar 08 16:18:18 2012 us=809975 persist_local_ip = DISABLED
Thu Mar 08 16:18:18 2012 us=809985 persist_remote_ip = DISABLED
Thu Mar 08 16:18:18 2012 us=809994 persist_key = DISABLED
Thu Mar 08 16:18:18 2012 us=810004 mssfix = 1450
Thu Mar 08 16:18:18 2012 us=810015 resolve_retry_seconds = 1000000000
Thu Mar 08 16:18:18 2012 us=810024 connect_retry_seconds = 5
Thu Mar 08 16:18:18 2012 us=810034 username = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=810044 groupname = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=810053 chroot_dir = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=810062 cd_dir = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=810072 writepid = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=810081 up_script = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=810091 down_script = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=810100 down_pre = DISABLED
Thu Mar 08 16:18:18 2012 us=810110 up_restart = DISABLED
Thu Mar 08 16:18:18 2012 us=810119 up_delay = DISABLED
Thu Mar 08 16:18:18 2012 us=810129 daemon = DISABLED
Thu Mar 08 16:18:18 2012 us=810138 inetd = 0
Thu Mar 08 16:18:18 2012 us=810147 log = DISABLED
Thu Mar 08 16:18:18 2012 us=810157 suppress_timestamps = DISABLED
Thu Mar 08 16:18:18 2012 us=810166 nice = 0
Thu Mar 08 16:18:18 2012 us=810175 verbosity = 4
Thu Mar 08 16:18:18 2012 us=859754 mute = 0
Thu Mar 08 16:18:18 2012 us=859780 gremlin = 0
Thu Mar 08 16:18:18 2012 us=859792 status_file = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=859803 status_file_version = 1
Thu Mar 08 16:18:18 2012 us=859813 status_file_update_freq = 60
Thu Mar 08 16:18:18 2012 us=859823 occ = ENABLED
Thu Mar 08 16:18:18 2012 us=859832 rcvbuf = 0
Thu Mar 08 16:18:18 2012 us=859842 sndbuf = 0
Thu Mar 08 16:18:18 2012 us=859852 socks_proxy_server = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=859877 socks_proxy_port = 0
Thu Mar 08 16:18:18 2012 us=859887 socks_proxy_retry = DISABLED
Thu Mar 08 16:18:18 2012 us=859897 fast_io = DISABLED
Thu Mar 08 16:18:18 2012 us=859907 comp_lzo = DISABLED
Thu Mar 08 16:18:18 2012 us=859917 comp_lzo_adaptive = ENABLED
Thu Mar 08 16:18:18 2012 us=859927 route_script = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=859938 route_default_gateway = '[UNDEF]'
Thu Mar 08 16:18:18 2012 us=859948 route_noexec = DISABLED
Thu Mar 08 16:18:19 2012 us=77653 route_delay = 0
Thu Mar 08 16:18:19 2012 us=79423 route_delay_window = 30
Thu Mar 08 16:18:19 2012 us=85808 route_delay_defined = ENABLED
Thu Mar 08 16:18:19 2012 us=87531 [redirect_default_gateway local=0]
Thu Mar 08 16:18:19 2012 us=89349 management_addr = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=91547 management_port = 0
Thu Mar 08 16:18:19 2012 us=96593 management_user_pass = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=99042 management_log_history_cache = 250
Thu Mar 08 16:18:19 2012 us=100500 management_echo_buffer_size = 100
Thu Mar 08 16:18:19 2012 us=101887 management_query_passwords = DISABLED
Thu Mar 08 16:18:19 2012 us=104920 management_hold = DISABLED
Thu Mar 08 16:18:19 2012 us=109777 shared_secret_file = 'static.key'
Thu Mar 08 16:18:19 2012 us=112569 key_direction = 0
Thu Mar 08 16:18:19 2012 us=114171 ciphername_defined = ENABLED
Thu Mar 08 16:18:19 2012 us=115583 ciphername = 'BF-CBC'
Thu Mar 08 16:18:19 2012 us=117860 authname_defined = ENABLED
Thu Mar 08 16:18:19 2012 us=119561 authname = 'SHA1'
Thu Mar 08 16:18:19 2012 us=124974 keysize = 0
Thu Mar 08 16:18:19 2012 us=126920 engine = DISABLED
Thu Mar 08 16:18:19 2012 us=128472 replay = ENABLED
Thu Mar 08 16:18:19 2012 us=130525 mute_replay_warnings = DISABLED
Thu Mar 08 16:18:19 2012 us=132272 replay_window = 64
Thu Mar 08 16:18:19 2012 us=135098 replay_time = 15
Thu Mar 08 16:18:19 2012 us=136970 packet_id_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=138398 use_iv = ENABLED
Thu Mar 08 16:18:19 2012 us=140643 test_crypto = DISABLED
Thu Mar 08 16:18:19 2012 us=142374 tls_server = DISABLED
Thu Mar 08 16:18:19 2012 us=145217 tls_client = DISABLED
Thu Mar 08 16:18:19 2012 us=148622 key_method = 2
Thu Mar 08 16:18:19 2012 us=150125 ca_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=152525 dh_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=154323 cert_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=155868 priv_key_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=157285 pkcs12_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=158676 cryptoapi_cert = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=162557 cipher_list = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=165051 tls_verify = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=166729 tls_remote = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=168761 crl_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=170185 ns_cert_type = 0
Thu Mar 08 16:18:19 2012 us=172369 tls_timeout = 2
Thu Mar 08 16:18:19 2012 us=176334 renegotiate_bytes = 0
Thu Mar 08 16:18:19 2012 us=178325 renegotiate_packets = 0
Thu Mar 08 16:18:19 2012 us=179762 renegotiate_seconds = 3600
Thu Mar 08 16:18:19 2012 us=181167 handshake_window = 60
Thu Mar 08 16:18:19 2012 us=183392 transition_window = 3600
Thu Mar 08 16:18:19 2012 us=186208 single_session = DISABLED
Thu Mar 08 16:18:19 2012 us=189334 tls_exit = DISABLED
Thu Mar 08 16:18:19 2012 us=190806 tls_auth_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=192557 server_network = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=195423 server_netmask = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=197497 server_bridge_ip = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=199081 server_bridge_netmask = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=202133 server_bridge_pool_start = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=203646 server_bridge_pool_end = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=206343 ifconfig_pool_defined = DISABLED
Thu Mar 08 16:18:19 2012 us=208640 ifconfig_pool_start = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=210466 ifconfig_pool_end = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=211865 ifconfig_pool_netmask = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=214588 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=217589 ifconfig_pool_persist_refresh_freq = 600
Thu Mar 08 16:18:19 2012 us=219408 ifconfig_pool_linear = DISABLED
Thu Mar 08 16:18:19 2012 us=220999 n_bcast_buf = 256
Thu Mar 08 16:18:19 2012 us=222576 tcp_queue_limit = 64
Thu Mar 08 16:18:19 2012 us=225277 real_hash_size = 256
Thu Mar 08 16:18:19 2012 us=228708 virtual_hash_size = 256
Thu Mar 08 16:18:19 2012 us=230769 client_connect_script = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=232546 learn_address_script = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=234065 client_disconnect_script = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=235500 client_config_dir = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=237784 ccd_exclusive = DISABLED
Thu Mar 08 16:18:19 2012 us=239518 tmp_dir = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=243284 push_ifconfig_defined = DISABLED
Thu Mar 08 16:18:19 2012 us=245612 push_ifconfig_local = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=247295 push_ifconfig_remote_netmask = 0.0.0.0
Thu Mar 08 16:18:19 2012 us=249841 enable_c2c = DISABLED
Thu Mar 08 16:18:19 2012 us=251588 duplicate_cn = DISABLED
Thu Mar 08 16:18:19 2012 us=253071 cf_max = 0
Thu Mar 08 16:18:19 2012 us=255652 cf_per = 0
Thu Mar 08 16:18:19 2012 us=257120 max_clients = 1024
Thu Mar 08 16:18:19 2012 us=259360 max_routes_per_client = 256
Thu Mar 08 16:18:19 2012 us=261094 client_cert_not_required = DISABLED
Thu Mar 08 16:18:19 2012 us=262623 username_as_common_name = DISABLED
Thu Mar 08 16:18:19 2012 us=265735 auth_user_pass_verify_script = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=268695 auth_user_pass_verify_script_via_file = DISABLED
Thu Mar 08 16:18:19 2012 us=270699 client = DISABLED
Thu Mar 08 16:18:19 2012 us=273010 pull = DISABLED
Thu Mar 08 16:18:19 2012 us=274583 auth_user_pass_file = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=276031 show_net_up = DISABLED
Thu Mar 08 16:18:19 2012 us=277425 route_method = 0
Thu Mar 08 16:18:19 2012 us=279766 ip_win32_defined = DISABLED
Thu Mar 08 16:18:19 2012 us=282712 ip_win32_type = 3
Thu Mar 08 16:18:19 2012 us=285260 dhcp_masq_offset = 0
Thu Mar 08 16:18:19 2012 us=287032 dhcp_lease_time = 31536000
Thu Mar 08 16:18:19 2012 us=288513 tap_sleep = 0
Thu Mar 08 16:18:19 2012 us=290491 dhcp_options = DISABLED
Thu Mar 08 16:18:19 2012 us=292198 dhcp_renew = DISABLED
Thu Mar 08 16:18:19 2012 us=294756 dhcp_pre_release = DISABLED
Thu Mar 08 16:18:19 2012 us=296282 dhcp_release = DISABLED
Thu Mar 08 16:18:19 2012 us=297662 domain = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=299967 netbios_scope = '[UNDEF]'
Thu Mar 08 16:18:19 2012 us=301701 netbios_node_type = 0
Thu Mar 08 16:18:19 2012 us=303352 disable_nbt = DISABLED
Thu Mar 08 16:18:19 2012 us=306151 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Thu Mar 08 16:18:19 2012 us=309098 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Mar 08 16:18:19 2012 us=315292 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 08 16:18:19 2012 us=317232 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 08 16:18:19 2012 us=319751 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 08 16:18:19 2012 us=323051 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 08 16:18:19 2012 us=331590 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{55E04AA5-8BF7-413D-B6CA-E29EEBC2D2C5}.tap
Thu Mar 08 16:18:19 2012 us=335245 TAP-Win32 Driver Version 8.4
Thu Mar 08 16:18:19 2012 us=337273 TAP-Win32 MTU=1500
Thu Mar 08 16:18:19 2012 us=338835 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.252 on interface {55E04AA5-8BF7-413D-B6CA-E29EEBC2D2C5} [DHCP-serv: 10.8.0.1, lease-time: 31536000]
Thu Mar 08 16:18:19 2012 us=342200 Successful ARP Flush on interface [15] {55E04AA5-8BF7-413D-B6CA-E29EEBC2D2C5}
Thu Mar 08 16:18:19 2012 us=382479 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Thu Mar 08 16:18:19 2012 us=382621 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Mar 08 16:18:19 2012 us=382637 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Mar 08 16:18:19 2012 us=382670 Local Options hash (VER=V4): 'd3880969'
Thu Mar 08 16:18:19 2012 us=382689 Expected Remote Options hash (VER=V4): 'c41bf3b8'
Thu Mar 08 16:18:19 2012 us=382735 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 08 16:18:19 2012 us=382755 UDPv4 link local (bound): [undef]:1194
Thu Mar 08 16:18:19 2012 us=382766 UDPv4 link remote: 208.67.18.35:443
Thu Mar 08 16:18:30 2012 us=315948 Peer Connection Initiated with 208.67.18.35:443
Thu Mar 08 16:18:30 2012 us=329015 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Thu Mar 08 16:18:30 2012 us=337558 route ADD 208.67.18.35 MASK 255.255.255.255 10.0.0.103
Thu Mar 08 16:18:30 2012 us=348651 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=23]
Thu Mar 08 16:18:30 2012 us=350630 Route addition via IPAPI failed
Thu Mar 08 16:18:30 2012 us=352747 route ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Mar 08 16:18:30 2012 us=357457 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=15]
Thu Mar 08 16:18:30 2012 us=359553 Route addition via IPAPI failed
Thu Mar 08 16:18:30 2012 us=363247 route ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Thu Mar 08 16:18:30 2012 us=369256 ROUTE: route addition failed using CreateIpForwardEntry: One or more arguments are not correct. [if_index=15]
Thu Mar 08 16:18:30 2012 us=371275 Route addition via IPAPI failed
Thu Mar 08 16:18:30 2012 us=373551 Initialization Sequence Completed

thanks.

janjust

as I said: that version is very much outdated; upgrade to 2.2.2 and try again.

globaltech

hello,
when i tried to download it from this link :
http://swupdate.openvpn.org/community/releases/openvpn-2.2.2-install.exe
the gui version is 1.0.3 too !
i tird with openvpn.exe bycomand line it's give me the same log !
thanks.

janjust

that is correct: the GUI is still at v1.03 but the underlying version of openvpn is 2.2.2

which version of Windows are you using?

globaltech

seven also i tired on windows xp the same thing happen.
please note that i run it as administrator
thanks.

janjust

then download and install the 2.2.2 community version from the web site:
http://swupdate.openvpn.org/community/releases/openvpn-2.2.2-install.exe

rerun openvpn and post the client log file here.