Windows client connection problem

mp

Hello,

I have problem with one (and the only one) Windows 7 client - it say "connected", but it cannot ping the server (the server is linux). I used the same client configuration for another windows 7 client and it works...

Windows user is Administrator. I tried (but without any posive results): disable firewall, disable ip v 6 on tap adapter, reset internet catalog.

I have no clue. All of your feedback would be greatly appreciated.

Client configuration

remote [...deleted...] 6100
proto udp
tls-client
dev tun
pull

pkcs12 cert.p12

mute 5
verb 5

comp-lzo

tls-remote [...deleted...]

ns-cert-type server

persist-tun
route-delay 30 30

Client log

Thu Mar 01 13:10:00 2012 us=343000 Current Parameter Settings:
Thu Mar 01 13:10:00 2012 us=358000   config = 'klient.ovpn'
Thu Mar 01 13:10:00 2012 us=358000   mode = 0
Thu Mar 01 13:10:00 2012 us=358000   show_ciphers = DISABLED
Thu Mar 01 13:10:00 2012 us=358000   show_digests = DISABLED
Thu Mar 01 13:10:00 2012 us=358000 NOTE: --mute triggered...
Thu Mar 01 13:10:00 2012 us=358000 267 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 13:10:00 2012 us=358000 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov  8 2010
Thu Mar 01 13:10:00 2012 us=358000 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Thu Mar 01 13:10:00 2012 us=358000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Mar 01 13:10:06 2012 us=489000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Mar 01 13:10:06 2012 us=505000 LZO compression initialized
Thu Mar 01 13:10:06 2012 us=505000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Mar 01 13:10:06 2012 us=505000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 01 13:10:06 2012 us=505000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Mar 01 13:10:06 2012 us=505000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 01 13:10:06 2012 us=505000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 01 13:10:06 2012 us=505000 Local Options hash (VER=V4): '41690919'
Thu Mar 01 13:10:06 2012 us=505000 Expected Remote Options hash (VER=V4): '530fdded'
Thu Mar 01 13:10:06 2012 us=505000 UDPv4 link local (bound): [undef]:1194
Thu Mar 01 13:10:06 2012 us=505000 UDPv4 link remote: 172.17.24.102:6100
Thu Mar 01 13:10:06 2012 us=505000 TLS: Initial packet from 172.17.24.102:6100, sid=63ff229d 1dcdf06e
Thu Mar 01 13:10:06 2012 us=536000 VERIFY OK: depth=1, [...deleted...]
Thu Mar 01 13:10:06 2012 us=536000 VERIFY OK: nsCertType=SERVER
Thu Mar 01 13:10:06 2012 us=536000 VERIFY X509NAME OK: [...deleted...]
Thu Mar 01 13:10:06 2012 us=536000 VERIFY OK: depth=0, [...deleted...]
Thu Mar 01 13:10:06 2012 us=598000 NOTE: --mute triggered...
Thu Mar 01 13:10:06 2012 us=598000 5 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 13:10:06 2012 us=598000 [...deleted...] Peer Connection Initiated with 172.17.24.102:6100
Thu Mar 01 13:10:09 2012 us=1000 SENT CONTROL [...deleted...]: 'PUSH_REQUEST' (status=1)
Thu Mar 01 13:10:09 2012 us=1000 PUSH: Received control message: 'PUSH_REPLY,route 172.16.0.0 255.255.0.0,route 172.17.0.0 255.255.0.0,route 172.20.0.0 255.255.0.0,route 10.201.0.0 255.255.0.0,dhcp-option DNS 172.17.26.26,dhcp-option DOMAIN server.com,dhcp-option WINS 172.16.21.101,dhcp-option NTP 172.17.24.100,ping 10,ping-restart 60,ifconfig 172.18.254.6 172.18.254.5'
Thu Mar 01 13:10:09 2012 us=1000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 01 13:10:09 2012 us=1000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 01 13:10:09 2012 us=1000 OPTIONS IMPORT: route options modified
Thu Mar 01 13:10:09 2012 us=1000 NOTE: --mute triggered...
Thu Mar 01 13:10:09 2012 us=1000 1 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 13:10:09 2012 us=1000 ROUTE default_gateway=[...deleted...]
Thu Mar 01 13:10:09 2012 us=1000 TAP-WIN32 device [Připojení k místní síti 2] opened: \\.\Global\{1F7497FA-6735-457A-B93D-29294929FECD}.tap
Thu Mar 01 13:10:09 2012 us=1000 TAP-Win32 Driver Version 9.7
Thu Mar 01 13:10:09 2012 us=1000 TAP-Win32 MTU=1500
Thu Mar 01 13:10:09 2012 us=1000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 172.18.254.6/255.255.255.252 on interface {1F7497FA-6735-457A-B93D-29294929FECD} [DHCP-serv: 172.18.254.5, lease-time: 31536000]
Thu Mar 01 13:10:09 2012 us=1000 DHCP option string: 0f0b756e 6973636f 6d702e63 7a0604ac 111a1a2c 04ac1015 652a04ac 111864
Thu Mar 01 13:10:09 2012 us=1000 NOTE: FlushIpNetTable failed on interface [22] {1F7497FA-6735-457A-B93D-29294929FECD} (status=1168) : Prvek nebyl nalezen.
Thu Mar 01 13:10:39 2012 us=374000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:39 2012 us=374000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:41 2012 us=558000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:41 2012 us=558000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:42 2012 us=572000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:42 2012 us=572000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:43 2012 us=586000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:43 2012 us=586000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:44 2012 us=600000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:44 2012 us=600000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:45 2012 us=614000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:45 2012 us=614000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:46 2012 us=628000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:46 2012 us=628000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:47 2012 us=642000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:47 2012 us=642000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:48 2012 us=656000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:48 2012 us=656000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:49 2012 us=15000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:49 2012 us=15000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:50 2012 us=138000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:50 2012 us=138000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:51 2012 us=261000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:51 2012 us=261000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:52 2012 us=385000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:52 2012 us=385000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:53 2012 us=508000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:53 2012 us=508000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:54 2012 us=631000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:54 2012 us=631000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:55 2012 us=754000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:55 2012 us=754000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:56 2012 us=877000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:56 2012 us=877000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:58 2012 us=1000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:58 2012 us=1000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:10:59 2012 us=935000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:10:59 2012 us=935000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:01 2012 us=89000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:01 2012 us=89000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:02 2012 us=244000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:02 2012 us=244000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:03 2012 us=398000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:03 2012 us=398000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:04 2012 us=553000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:04 2012 us=553000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:05 2012 us=707000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:05 2012 us=707000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:06 2012 us=861000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:06 2012 us=861000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:08 2012 us=16000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:08 2012 us=16000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 13:11:10 2012 us=13000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 13:11:10 2012 us=13000 WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.0.0] and remote VPN [172.16.0.0/255.255.0.0]
Thu Mar 01 13:11:10 2012 us=13000 C:\WINDOWS\system32\route.exe ADD 172.16.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=13000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=13000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=13000 Route addition fallback to route.exe
 OK!
Thu Mar 01 13:11:10 2012 us=44000 C:\WINDOWS\system32\route.exe ADD 172.17.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=44000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=44000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=44000 Route addition fallback to route.exe
 OK!
Thu Mar 01 13:11:10 2012 us=91000 C:\WINDOWS\system32\route.exe ADD 172.20.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=106000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=106000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=106000 Route addition fallback to route.exe
 OK!
Thu Mar 01 13:11:10 2012 us=137000 C:\WINDOWS\system32\route.exe ADD 10.201.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 13:11:10 2012 us=137000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 13:11:10 2012 us=137000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 13:11:10 2012 us=137000 Route addition fallback to route.exe
 OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 172.16.40.1 p=0 i=10 t=4 pr=3 a=104 h=0 m=20/0/0/0/0
10.201.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
172.16.0.0 255.255.0.0 172.16.23.8 p=0 i=10 t=3 pr=3 a=104 h=0 m=276/0/0/0/0
172.16.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
172.16.23.8 255.255.255.255 172.16.23.8 p=0 i=10 t=3 pr=3 a=104 h=0 m=276/0/0/0/0
172.16.255.255 255.255.255.255 172.16.23.8 p=0 i=10 t=3 pr=3 a=104 h=0 m=276/0/0/0/0
172.17.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
172.20.0.0 255.255.0.0 172.18.254.5 p=0 i=10 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 172.16.23.8 p=0 i=10 t=3 pr=3 a=113 h=0 m=276/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=118 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 172.16.23.8 p=0 i=10 t=3 pr=3 a=113 h=0 m=276/0/0/0/0
SYSTEM ADAPTER LIST
Microsoft Virtual WiFi Miniport Adapter
  Index = 16
  GUID = {3F455EFE-3B35-437C-8EDB-95633380762C}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ed
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV =
  DHCP LEASE OBTAINED = Thu Mar 01 13:11:10 2012
  DHCP LEASE EXPIRES  = Thu Mar 01 13:11:10 2012
  DNS SERV =
Intel(R) Centrino(R) Advanced-N 6205
  Index = 13
  GUID = {2D5F076F-A7E7-4E47-9F59-527C44CF0295}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ec
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV =
  DHCP LEASE OBTAINED = Thu Mar 01 13:11:10 2012
  DHCP LEASE EXPIRES  = Thu Mar 01 13:11:10 2012
  DNS SERV =
Intel(R) 82579LM Gigabit Network Connection
  Index = 10
  GUID = {736B7E08-D63A-44D3-A1DB-B9BC565D959B}
  IP = 172.16.23.8/255.255.0.0
  MAC = 2c:76:8a:e1:76:20
  GATEWAY = 172.16.40.1/255.255.255.255
  DHCP SERV = 172.16.21.116/255.255.255.255
  DHCP LEASE OBTAINED = Thu Mar 01 13:09:26 2012
  DHCP LEASE EXPIRES  = Fri Mar 02 13:09:26 2012
  DNS SERV = 172.17.26.26/255.255.255.255 172.17.24.100/255.255.255.255
Thu Mar 01 13:11:10 2012 us=200000 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )

Server log

Thu Mar  1 13:10:06 2012 us=900775 172.16.23.8:1194 [User_Name] Peer Connection Initiated with 172.16.23.8:1194
Thu Mar  1 13:10:06 2012 us=911766 User_Name/172.16.23.8:1194 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_0b421a282845196cac549
503cbecb4d4.tmp
Thu Mar  1 13:10:06 2012 us=911906 User_Name/172.16.23.8:1194 MULTI: Learn: 172.18.254.6 -> User_Name/172.16.23.8:1194
Thu Mar  1 13:10:06 2012 us=911931 User_Name/172.16.23.8:1194 MULTI: primary virtual IP for User_Name/172.16.23.8:1194: 172.18.254.6
Thu Mar  1 13:10:09 2012 us=291244 User_Name/172.16.23.8:1194 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar  1 13:10:09 2012 us=291372 User_Name/172.16.23.8:1194 SENT CONTROL [User_Name]: 'PUSH_REPLY,route 172.16.0.0 255.255.0.0,route 172.17.0.0 255.255.0.0,route 172.20.0.0 255.255.0.0,route 10.201.0.0 255.255.0.0,dhcp-option DNS 172.17.26.26,dhcp-option DOMAIN server.com,dhcp-option WINS 172.16.21.101,dhcp-option NTP 172.17.24.100,ping 10,ping-restart 60,ifconfig 172.18.254.6 172.18.254.5' (status=1)

maikcat

WARNING: potential route subnet conflict between local LAN [172.16.0.0/255.255.0.0] and remote VPN [172.16.0.0/255.255.0.0]

it says more than enough....

also your pc

IP = 172.16.23.8/255.255.0.0

oops...

what ip your linux server has?

Michael.

janjust

sounds like the tap-win32 adapter is not coming up correctly (or quickly enough) ; add

route-delay 5 30

to the client config; also check that the tap-win32 adapter is configured for automatic (DHCP) addresses.

On a final note, consider upgrading to openvpn 2.2.2, as it works better on Windows 7.

mp

Thank you for your advice.

I copied new (and better) log from the client. It is connection from another site than 172.16.0.0. Version of client is 2.2.2.

I still can not ping any server in private network (for example anything in 172.16.0.0/B or 172.18.0.0/B).

Thu Mar 01 17:38:50 2012 us=534000 Current Parameter Settings:
Thu Mar 01 17:38:50 2012 us=550000   config = 'klient.ovpn'
Thu Mar 01 17:38:50 2012 us=550000   mode = 0
Thu Mar 01 17:38:50 2012 us=550000   show_ciphers = DISABLED
Thu Mar 01 17:38:50 2012 us=550000   show_digests = DISABLED
Thu Mar 01 17:38:50 2012 us=550000 NOTE: --mute triggered...
Thu Mar 01 17:38:50 2012 us=550000 268 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 17:38:50 2012 us=550000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Thu Mar 01 17:38:50 2012 us=550000 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Thu Mar 01 17:38:50 2012 us=550000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Mar 01 17:38:54 2012 us=684000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Mar 01 17:38:54 2012 us=684000 LZO compression initialized
Thu Mar 01 17:38:54 2012 us=684000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Mar 01 17:38:54 2012 us=684000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 01 17:38:54 2012 us=778000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Mar 01 17:38:54 2012 us=778000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 01 17:38:54 2012 us=778000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 01 17:38:54 2012 us=778000 Local Options hash (VER=V4): '41690919'
Thu Mar 01 17:38:54 2012 us=778000 Expected Remote Options hash (VER=V4): '530fdded'
Thu Mar 01 17:38:54 2012 us=778000 UDPv4 link local (bound): [undef]:1194
Thu Mar 01 17:38:54 2012 us=778000 UDPv4 link remote: [...our server public ip...]:6100
Thu Mar 01 17:38:54 2012 us=871000 TLS: Initial packet from [...our server public ip...]:6100, sid=8189557c 8eeaa859
Thu Mar 01 17:38:55 2012 us=745000 VERIFY OK: depth=1, [...deleted...]
Thu Mar 01 17:38:55 2012 us=745000 VERIFY OK: nsCertType=SERVER
Thu Mar 01 17:38:55 2012 us=745000 VERIFY X509NAME OK: [...deleted...]
Thu Mar 01 17:38:55 2012 us=745000 VERIFY OK: depth=0, [...deleted...]
Thu Mar 01 17:38:56 2012 us=712000 NOTE: --mute triggered...
Thu Mar 01 17:38:56 2012 us=712000 5 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 17:38:56 2012 us=712000 [...our server public dns name...] Peer Connection Initiated with [...our server public ip...]:6100
Thu Mar 01 17:38:59 2012 us=21000 SENT CONTROL [...our server public dns name...]: 'PUSH_REQUEST' (status=1)
Thu Mar 01 17:38:59 2012 us=130000 PUSH: Received control message: 'PUSH_REPLY,route 172.16.0.0 255.255.0.0,route 172.17.0.0 255.255.0.0,route 172.20.0.0 255.255.0.0,route 10.201.0.0 255.255.0.0,dhcp-option DNS 172.17.26.26,dhcp-option DOMAIN server.com,dhcp-option WINS 172.16.21.101,dhcp-option NTP 172.17.24.100,ping 10,ping-restart 60,ifconfig 172.18.254.6 172.18.254.5'
Thu Mar 01 17:38:59 2012 us=130000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 01 17:38:59 2012 us=130000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 01 17:38:59 2012 us=130000 OPTIONS IMPORT: route options modified
Thu Mar 01 17:38:59 2012 us=130000 NOTE: --mute triggered...
Thu Mar 01 17:38:59 2012 us=130000 1 variation(s) on previous 5 message(s) suppressed by --mute
Thu Mar 01 17:38:59 2012 us=130000 ROUTE default_gateway= 85.161.182.216 
Thu Mar 01 17:38:59 2012 us=130000 TAP-WIN32 device [...windows device name...] opened: \\.\Global\{683FFFA3-209F-4CE3-9E49-0BB731F043D6}.tap
Thu Mar 01 17:38:59 2012 us=130000 TAP-Win32 Driver Version 9.9
Thu Mar 01 17:38:59 2012 us=130000 TAP-Win32 MTU=1500
Thu Mar 01 17:38:59 2012 us=130000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 172.18.254.6/255.255.255.252 on interface {683FFFA3-209F-4CE3-9E49-0BB731F043D6} [DHCP-serv: 172.18.254.5, lease-time: 31536000]
Thu Mar 01 17:38:59 2012 us=130000 DHCP option string: 0f0b756e 6973636f 6d702e63 7a0604ac 111a1a2c 04ac1015 652a04ac 111864
Thu Mar 01 17:38:59 2012 us=130000 NOTE: FlushIpNetTable failed on interface [22] {683FFFA3-209F-4CE3-9E49-0BB731F043D6} (status=1168) : Prvek nebyl nalezen. [...'Element not found.' in english...]
Thu Mar 01 17:39:29 2012 us=316000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:29 2012 us=316000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:39 2012 us=269000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:39 2012 us=269000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:40 2012 us=502000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:40 2012 us=502000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:41 2012 us=734000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:41 2012 us=734000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:42 2012 us=966000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:42 2012 us=966000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:44 2012 us=199000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:44 2012 us=199000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:45 2012 us=431000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:45 2012 us=431000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:46 2012 us=664000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:46 2012 us=664000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:47 2012 us=896000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:47 2012 us=896000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:49 2012 us=128000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:49 2012 us=128000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:50 2012 us=330000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:50 2012 us=330000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:51 2012 us=359000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:51 2012 us=359000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:52 2012 us=389000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:52 2012 us=389000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:53 2012 us=418000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:53 2012 us=418000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:54 2012 us=448000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:54 2012 us=448000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:55 2012 us=478000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:55 2012 us=478000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:56 2012 us=507000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:56 2012 us=507000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:57 2012 us=537000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:57 2012 us=537000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:58 2012 us=566000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:58 2012 us=566000 Route: Waiting for TUN/TAP interface to come up...
Thu Mar 01 17:39:59 2012 us=393000 TEST ROUTES: 0/4 succeeded len=4 ret=0 a=0 u/d=up
Thu Mar 01 17:39:59 2012 us=393000 C:\WINDOWS\system32\route.exe ADD 172.16.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=409000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=409000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=409000 Route addition fallback to route.exe
 OK!
Thu Mar 01 17:39:59 2012 us=424000 C:\WINDOWS\system32\route.exe ADD 172.17.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=424000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=424000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=424000 Route addition fallback to route.exe
 OK!
Thu Mar 01 17:39:59 2012 us=456000 C:\WINDOWS\system32\route.exe ADD 172.20.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=456000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=456000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=456000 Route addition fallback to route.exe
 OK!
Thu Mar 01 17:39:59 2012 us=471000 C:\WINDOWS\system32\route.exe ADD 10.201.0.0 MASK 255.255.0.0 172.18.254.5
Thu Mar 01 17:39:59 2012 us=487000 Warning: route gateway is not reachable on any active network adapters: 172.18.254.5
Thu Mar 01 17:39:59 2012 us=487000 Route addition via IPAPI failed [adaptive]
Thu Mar 01 17:39:59 2012 us=487000 Route addition fallback to route.exe
 OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 85.161.182.216 p=0 i=48 t=3 pr=3 a=111 h=0 m=31/0/0/0/0
10.201.0.0 255.255.0.0 172.18.254.5 85.161.182.216  85.161.182.216 p=0 i=48 t=3 pr=3 a=111 h=0 m=31/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=213 h=0 m=4531/0/0/0/0
255.255.255.255 255.255.255.255 85.161.182.216 p=0 i=48 t=3 pr=3 a=111 h=0 m=286/0/0/0/0
SYSTEM ADAPTER LIST
Mobile internet
  Index = 48
  GUID = {D508CA9E-99D5-4F0B-9228-D50F84F51EF1}
  IP = 85.161.182.216/255.255.255.255
  MAC =
  GATEWAY = 0.0.0.0/255.255.255.255
  PRI WINS = 10.11.12.13/255.255.255.255
  SEC WINS = 10.11.12.14/255.255.255.255
  DNS SERV = 160.218.167.5/255.255.255.255 160.218.161.60/255.255.255.255
Microsoft Virtual WiFi Miniport Adapter
  Index = 16
  GUID = {3F455EFE-3B35-437C-8EDB-95633380762C}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ed
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV = 
  DHCP LEASE OBTAINED = Thu Mar 01 17:39:59 2012
  DHCP LEASE EXPIRES  = Mon Mar 23 01:01:24 1970
  DNS SERV = 
Intel(R) Centrino(R) Advanced-N 6205
  Index = 13
  GUID = {2D5F076F-A7E7-4E47-9F59-527C44CF0295}
  IP = 0.0.0.0/0.0.0.0
  MAC = 08:11:96:b3:33:ec
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV = 
  DHCP LEASE OBTAINED = Thu Mar 01 17:39:59 2012
  DHCP LEASE EXPIRES  = Thu Jan 01 01:00:00 1970
  DNS SERV = 
Intel(R) 82579LM Gigabit Network Connection
  Index = 10
  GUID = {736B7E08-D63A-44D3-A1DB-B9BC565D959B}
  IP = 0.0.0.0/0.0.0.0
  MAC = 2c:76:8a:e1:76:20
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV = 
  DHCP LEASE OBTAINED = Thu Mar 01 17:39:59 2012
  DHCP LEASE EXPIRES  = Sun Aug 13 19:24:05 1995
  DNS SERV = 
Thu Mar 01 17:39:59 2012 us=627000 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )

janjust wrotesounds like the tap-win32 adapter is not coming up correctly (or quickly enough) ; add

route-delay 5 30

i already have this command in my config (but with '30 30'). Is it ok?

janjust wrote to the client config; also check that the tap-win32 adapter is configured for automatic (DHCP) addresses.
On a final note, consider upgrading to openvpn 2.2.2, as it works better on Windows 7.

I upgraded client, adapter is configured for dhcp addresses.

mp

Hello to all,

I still did not solve the problem. Do you have any new ideas, please?

Than you.

janjust

even in your latest client log I don't see any entries for the 'tap-win32' adapter ...
also, it seems you are using a mobile internet connection - that can cause problems when OpenVPN tries to determine the default GW; try running your setup *without* redirecting the default gateway.

mp

Hello,

I have a soultion. I use firewall (AVG) which requires special settings -- when I disabled "AVG network filter adapter" in TAP-Win32 Adapter Setting, then everything works.

Thank you all.

JackGibson

It's a permissions issue!

Right click on OpenVPN and click 'Run as Administrator' - even if you are already logged in as an Administrator you still need to do this because of the functions OpenVPN is performing.

Hope it helps,

Aled.