I'm using TAP on the VPN so it would work for games I've had a bug before that I couldnt assign static IPs, however using username-as-common-name fixed that. It now reads from the ccd and uses auth-user Although, when I try connecting to the VPN I get [code] Thu Mar 01 17:31:58 2012 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down Thu Mar 01 17:31:58 2012 Route: Waiting for TUN/TAP interface to come up... [/code] For a minute and then it connects, however the IP doesent change. ccd [code] ifconfig-push 10.8.2.1 10.8.2.2 [/code] Help guys!

I assign static IP (10.8.2.1) to a client named adi360, bug

Extornia

I'm using TAP on the VPN so it would work for games

I've had a bug before that I couldnt assign static IPs, however using username-as-common-name fixed that.

It now reads from the ccd and uses auth-user

Although, when I try connecting to the VPN I get

Thu Mar 01 17:31:58 2012 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Thu Mar 01 17:31:58 2012 Route: Waiting for TUN/TAP interface to come up...

For a minute and then it connects, however the IP doesent change.

ccd

ifconfig-push 10.8.2.1 10.8.2.2

Help guys!

maikcat

post server config
post client log using verb 5

Michael.

Extornia

log with verb 5


Fri Mar 02 18:45:09 2012 us=266000 Current Parameter Settings:
Fri Mar 02 18:45:09 2012 us=266000   config = 'client.ovpn'
Fri Mar 02 18:45:09 2012 us=266000   mode = 0
Fri Mar 02 18:45:09 2012 us=266000   show_ciphers = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   show_digests = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   show_engines = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   genkey = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   key_pass_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   show_tls_ciphers = DISABLED
Fri Mar 02 18:45:09 2012 us=266000 Connection profiles [default]:
Fri Mar 02 18:45:09 2012 us=266000   proto = udp
Fri Mar 02 18:45:09 2012 us=266000   local = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   local_port = 0
Fri Mar 02 18:45:09 2012 us=266000   remote = '46.102.240.135'
Fri Mar 02 18:45:09 2012 us=266000   remote_port = 1194
Fri Mar 02 18:45:09 2012 us=266000   remote_float = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   bind_defined = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   bind_local = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   connect_retry_seconds = 5
Fri Mar 02 18:45:09 2012 us=266000   connect_timeout = 10
Fri Mar 02 18:45:09 2012 us=266000   connect_retry_max = 0
Fri Mar 02 18:45:09 2012 us=266000   socks_proxy_server = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   socks_proxy_port = 0
Fri Mar 02 18:45:09 2012 us=266000   socks_proxy_retry = DISABLED
Fri Mar 02 18:45:09 2012 us=266000 Connection profiles END
Fri Mar 02 18:45:09 2012 us=266000   remote_random = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   ipchange = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   dev = 'tap'
Fri Mar 02 18:45:09 2012 us=266000   dev_type = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   dev_node = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   lladdr = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   topology = 1
Fri Mar 02 18:45:09 2012 us=266000   tun_ipv6 = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   ifconfig_local = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   ifconfig_remote_netmask = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   ifconfig_noexec = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   ifconfig_nowarn = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   shaper = 0
Fri Mar 02 18:45:09 2012 us=266000   tun_mtu = 1500
Fri Mar 02 18:45:09 2012 us=266000   tun_mtu_defined = ENABLED
Fri Mar 02 18:45:09 2012 us=266000   link_mtu = 1500
Fri Mar 02 18:45:09 2012 us=266000   link_mtu_defined = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   tun_mtu_extra = 32
Fri Mar 02 18:45:09 2012 us=266000   tun_mtu_extra_defined = ENABLED
Fri Mar 02 18:45:09 2012 us=266000   fragment = 0
Fri Mar 02 18:45:09 2012 us=266000   mtu_discover_type = -1
Fri Mar 02 18:45:09 2012 us=266000   mtu_test = 0
Fri Mar 02 18:45:09 2012 us=266000   mlock = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   keepalive_ping = 0
Fri Mar 02 18:45:09 2012 us=266000   keepalive_timeout = 0
Fri Mar 02 18:45:09 2012 us=266000   inactivity_timeout = 0
Fri Mar 02 18:45:09 2012 us=266000   ping_send_timeout = 0
Fri Mar 02 18:45:09 2012 us=266000   ping_rec_timeout = 0
Fri Mar 02 18:45:09 2012 us=266000   ping_rec_timeout_action = 0
Fri Mar 02 18:45:09 2012 us=266000   ping_timer_remote = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   remap_sigusr1 = 0
Fri Mar 02 18:45:09 2012 us=266000   explicit_exit_notification = 0
Fri Mar 02 18:45:09 2012 us=266000   persist_tun = ENABLED
Fri Mar 02 18:45:09 2012 us=266000   persist_local_ip = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   persist_remote_ip = DISABLED
Fri Mar 02 18:45:09 2012 us=266000   persist_key = ENABLED
Fri Mar 02 18:45:09 2012 us=266000   mssfix = 1450
Fri Mar 02 18:45:09 2012 us=266000   resolve_retry_seconds = 1000000000
Fri Mar 02 18:45:09 2012 us=266000   username = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   groupname = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   chroot_dir = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   cd_dir = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=266000   writepid = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=500000   up_script = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=500000   down_script = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=500000   down_pre = DISABLED
Fri Mar 02 18:45:09 2012 us=500000   up_restart = DISABLED
Fri Mar 02 18:45:09 2012 us=500000   up_delay = DISABLED
Fri Mar 02 18:45:09 2012 us=500000   daemon = DISABLED
Fri Mar 02 18:45:09 2012 us=500000   inetd = 0
Fri Mar 02 18:45:09 2012 us=500000   log = DISABLED
Fri Mar 02 18:45:09 2012 us=500000   suppress_timestamps = DISABLED
Fri Mar 02 18:45:09 2012 us=500000   nice = 0
Fri Mar 02 18:45:09 2012 us=500000   verbosity = 5
Fri Mar 02 18:45:09 2012 us=500000   mute = 0
Fri Mar 02 18:45:09 2012 us=500000   gremlin = 0
Fri Mar 02 18:45:09 2012 us=500000   status_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=500000   status_file_version = 1
Fri Mar 02 18:45:09 2012 us=500000   status_file_update_freq = 60
Fri Mar 02 18:45:09 2012 us=500000   occ = ENABLED
Fri Mar 02 18:45:09 2012 us=500000   rcvbuf = 0
Fri Mar 02 18:45:09 2012 us=500000   sndbuf = 0
Fri Mar 02 18:45:09 2012 us=516000   sockflags = 0
Fri Mar 02 18:45:09 2012 us=516000   fast_io = DISABLED
Fri Mar 02 18:45:09 2012 us=516000   lzo = 7
Fri Mar 02 18:45:09 2012 us=516000   route_script = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=516000   route_default_gateway = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=516000   route_default_metric = 0
Fri Mar 02 18:45:09 2012 us=516000   route_noexec = DISABLED
Fri Mar 02 18:45:09 2012 us=516000   route_delay = 5
Fri Mar 02 18:45:09 2012 us=516000   route_delay_window = 30
Fri Mar 02 18:45:09 2012 us=516000   route_delay_defined = ENABLED
Fri Mar 02 18:45:09 2012 us=516000   route_nopull = DISABLED
Fri Mar 02 18:45:09 2012 us=516000   route_gateway_via_dhcp = DISABLED
Fri Mar 02 18:45:09 2012 us=516000   max_routes = 100
Fri Mar 02 18:45:09 2012 us=516000   allow_pull_fqdn = DISABLED
Fri Mar 02 18:45:09 2012 us=516000   management_addr = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=516000   management_port = 0
Fri Mar 02 18:45:09 2012 us=532000   management_user_pass = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=532000   management_log_history_cache = 250
Fri Mar 02 18:45:09 2012 us=532000   management_echo_buffer_size = 100
Fri Mar 02 18:45:09 2012 us=532000   management_write_peer_info_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=532000   management_client_user = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=532000   management_client_group = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=532000   management_flags = 0
Fri Mar 02 18:45:09 2012 us=532000   shared_secret_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=532000   key_direction = 0
Fri Mar 02 18:45:09 2012 us=532000   ciphername_defined = ENABLED
Fri Mar 02 18:45:09 2012 us=532000   ciphername = 'BF-CBC'
Fri Mar 02 18:45:09 2012 us=532000   authname_defined = ENABLED
Fri Mar 02 18:45:09 2012 us=532000   authname = 'SHA1'
Fri Mar 02 18:45:09 2012 us=532000   prng_hash = 'SHA1'
Fri Mar 02 18:45:09 2012 us=532000   prng_nonce_secret_len = 16
Fri Mar 02 18:45:09 2012 us=532000   keysize = 0
Fri Mar 02 18:45:09 2012 us=547000   engine = DISABLED
Fri Mar 02 18:45:09 2012 us=547000   replay = ENABLED
Fri Mar 02 18:45:09 2012 us=547000   mute_replay_warnings = DISABLED
Fri Mar 02 18:45:09 2012 us=547000   replay_window = 64
Fri Mar 02 18:45:09 2012 us=547000   replay_time = 15
Fri Mar 02 18:45:09 2012 us=547000   packet_id_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=547000   use_iv = ENABLED
Fri Mar 02 18:45:09 2012 us=547000   test_crypto = DISABLED
Fri Mar 02 18:45:09 2012 us=547000   tls_server = DISABLED
Fri Mar 02 18:45:09 2012 us=547000   tls_client = ENABLED
Fri Mar 02 18:45:09 2012 us=547000   key_method = 2
Fri Mar 02 18:45:09 2012 us=547000   ca_file = 'ca.crt'
Fri Mar 02 18:45:09 2012 us=547000   ca_path = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=547000   dh_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=547000   cert_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=547000   priv_key_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=547000   pkcs12_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   cryptoapi_cert = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   cipher_list = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   tls_verify = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   tls_export_cert = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   tls_remote = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   crl_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   ns_cert_type = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_ku[i] = 0
Fri Mar 02 18:45:09 2012 us=563000   remote_cert_eku = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   tls_timeout = 2
Fri Mar 02 18:45:09 2012 us=563000   renegotiate_bytes = 0
Fri Mar 02 18:45:09 2012 us=563000   renegotiate_packets = 0
Fri Mar 02 18:45:09 2012 us=563000   renegotiate_seconds = 3600
Fri Mar 02 18:45:09 2012 us=563000   handshake_window = 60
Fri Mar 02 18:45:09 2012 us=563000   transition_window = 3600
Fri Mar 02 18:45:09 2012 us=563000   single_session = DISABLED
Fri Mar 02 18:45:09 2012 us=563000   push_peer_info = DISABLED
Fri Mar 02 18:45:09 2012 us=563000   tls_exit = DISABLED
Fri Mar 02 18:45:09 2012 us=563000   tls_auth_file = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   server_network = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   server_netmask = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   server_bridge_ip = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   server_bridge_netmask = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   server_bridge_pool_start = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   server_bridge_pool_end = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   ifconfig_pool_defined = DISABLED
Fri Mar 02 18:45:09 2012 us=563000   ifconfig_pool_start = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   ifconfig_pool_end = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   ifconfig_pool_netmask = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=563000   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=563000   ifconfig_pool_persist_refresh_freq = 600
Fri Mar 02 18:45:09 2012 us=563000   n_bcast_buf = 256
Fri Mar 02 18:45:09 2012 us=563000   tcp_queue_limit = 64
Fri Mar 02 18:45:09 2012 us=578000   real_hash_size = 256
Fri Mar 02 18:45:09 2012 us=578000   virtual_hash_size = 256
Fri Mar 02 18:45:09 2012 us=578000   client_connect_script = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=578000   learn_address_script = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=578000   client_disconnect_script = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=578000   client_config_dir = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=578000   ccd_exclusive = DISABLED
Fri Mar 02 18:45:09 2012 us=578000   tmp_dir = 'C:\Users\ADMINI~1\AppData\Local\Temp\'
Fri Mar 02 18:45:09 2012 us=578000   push_ifconfig_defined = DISABLED
Fri Mar 02 18:45:09 2012 us=578000   push_ifconfig_local = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=578000   push_ifconfig_remote_netmask = 0.0.0.0
Fri Mar 02 18:45:09 2012 us=578000   enable_c2c = DISABLED
Fri Mar 02 18:45:09 2012 us=578000   duplicate_cn = DISABLED
Fri Mar 02 18:45:09 2012 us=578000   cf_max = 0
Fri Mar 02 18:45:09 2012 us=578000   cf_per = 0
Fri Mar 02 18:45:09 2012 us=594000   max_clients = 1024
Fri Mar 02 18:45:09 2012 us=594000   max_routes_per_client = 256
Fri Mar 02 18:45:09 2012 us=594000   auth_user_pass_verify_script = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=594000   auth_user_pass_verify_script_via_file = DISABLED
Fri Mar 02 18:45:09 2012 us=594000   ssl_flags = 0
Fri Mar 02 18:45:09 2012 us=594000   client = ENABLED
Fri Mar 02 18:45:09 2012 us=594000   pull = ENABLED
Fri Mar 02 18:45:09 2012 us=594000   auth_user_pass_file = 'stdin'
Fri Mar 02 18:45:09 2012 us=594000   show_net_up = DISABLED
Fri Mar 02 18:45:09 2012 us=594000   route_method = 0
Fri Mar 02 18:45:09 2012 us=594000   ip_win32_defined = DISABLED
Fri Mar 02 18:45:09 2012 us=594000   ip_win32_type = 3
Fri Mar 02 18:45:09 2012 us=594000   dhcp_masq_offset = 0
Fri Mar 02 18:45:09 2012 us=594000   dhcp_lease_time = 31536000
Fri Mar 02 18:45:09 2012 us=594000   tap_sleep = 0
Fri Mar 02 18:45:09 2012 us=594000   dhcp_options = DISABLED
Fri Mar 02 18:45:09 2012 us=594000   dhcp_renew = DISABLED
Fri Mar 02 18:45:09 2012 us=594000   dhcp_pre_release = DISABLED
Fri Mar 02 18:45:09 2012 us=594000   dhcp_release = DISABLED
Fri Mar 02 18:45:09 2012 us=594000   domain = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=594000   netbios_scope = '[UNDEF]'
Fri Mar 02 18:45:09 2012 us=594000   netbios_node_type = 0
Fri Mar 02 18:45:09 2012 us=594000   disable_nbt = DISABLED
Fri Mar 02 18:45:09 2012 us=594000 OpenVPN 2.2.1 Win32-MSVC++ [SSL] [LZO2] built on Jul  1 2011
Fri Mar 02 18:45:16 2012 us=988000 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Mar 02 18:45:16 2012 us=988000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Mar 02 18:45:17 2012 us=191000 LZO compression initialized
Fri Mar 02 18:45:17 2012 us=191000 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Mar 02 18:45:17 2012 us=207000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Mar 02 18:45:17 2012 us=207000 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Fri Mar 02 18:45:17 2012 us=207000 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Mar 02 18:45:17 2012 us=207000 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Mar 02 18:45:17 2012 us=207000 Local Options hash (VER=V4): 'd79ca330'
Fri Mar 02 18:45:17 2012 us=207000 Expected Remote Options hash (VER=V4): 'f7df56b8'
Fri Mar 02 18:45:17 2012 us=207000 UDPv4 link local: [undef]
Fri Mar 02 18:45:17 2012 us=207000 UDPv4 link remote: 46.102.240.135:1194
Fri Mar 02 18:45:17 2012 us=269000 TLS: Initial packet from 46.102.240.135:1194, sid=e783568e 07b59275
Fri Mar 02 18:45:17 2012 us=269000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Mar 02 18:45:17 2012 us=550000 VERIFY OK: depth=1, /C=BA/ST=KS/L=Sarajevo/O=CreativeVPN/CN=CreativeVPN_CA/emailAddress=adi@creativeminds.me
Fri Mar 02 18:45:17 2012 us=550000 VERIFY OK: depth=0, /C=BA/ST=KS/L=Sarajevo/O=CreativeVPN/CN=server/emailAddress=adi@creativeminds.me
Fri Mar 02 18:45:17 2012 us=815000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Mar 02 18:45:17 2012 us=815000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 02 18:45:17 2012 us=815000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Mar 02 18:45:17 2012 us=815000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 02 18:45:17 2012 us=815000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Mar 02 18:45:17 2012 us=815000 [server] Peer Connection Initiated with 46.102.240.135:1194
Fri Mar 02 18:45:20 2012 us=77000 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Mar 02 18:45:20 2012 us=108000 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 8.8.8.8,route-gateway 10.8.1.1,ping 5,ping-restart 30,ifconfig 10.8.2.1 10.8.2.2'
Fri Mar 02 18:45:20 2012 us=124000 OPTIONS IMPORT: timers and/or timeouts modified
Fri Mar 02 18:45:20 2012 us=124000 OPTIONS IMPORT: --ifconfig/up options modified
Fri Mar 02 18:45:20 2012 us=124000 OPTIONS IMPORT: route options modified
Fri Mar 02 18:45:20 2012 us=124000 OPTIONS IMPORT: route-related options modified
Fri Mar 02 18:45:20 2012 us=124000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Mar 02 18:45:20 2012 us=124000 WARNING: Since you are using --dev tap, the second argument to --ifconfig must be a netmask, for example something like 255.255.255.0. (silence this warning with --ifconfig-nowarn)
Fri Mar 02 18:45:20 2012 us=140000 ROUTE default_gateway=192.168.1.1
Fri Mar 02 18:45:20 2012 us=186000 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{C18B4E13-42EE-4FBB-8F20-7E13525AD710}.tap
Fri Mar 02 18:45:20 2012 us=186000 TAP-Win32 Driver Version 9.8 
Fri Mar 02 18:45:20 2012 us=186000 TAP-Win32 MTU=1500
Fri Mar 02 18:45:20 2012 us=186000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.2.1/10.8.2.2 on interface {C18B4E13-42EE-4FBB-8F20-7E13525AD710} [DHCP-serv: 10.8.2.0, lease-time: 31536000]
Fri Mar 02 18:45:20 2012 us=186000 DHCP option string: 0608d043 dede0808 0808
Fri Mar 02 18:45:20 2012 us=186000 Successful ARP Flush on interface [15] {C18B4E13-42EE-4FBB-8F20-7E13525AD710}
Fri Mar 02 18:45:25 2012 us=22000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:25 2012 us=22000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:29 2012 us=141000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:29 2012 us=141000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:30 2012 us=77000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:30 2012 us=77000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:31 2012 us=75000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:31 2012 us=75000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:32 2012 us=42000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:32 2012 us=42000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:33 2012 us=134000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:33 2012 us=134000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:34 2012 us=86000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:34 2012 us=86000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:35 2012 us=53000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:35 2012 us=53000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:36 2012 us=161000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:36 2012 us=161000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:37 2012 us=66000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:37 2012 us=66000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:38 2012 us=236000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:38 2012 us=236000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:39 2012 us=16000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:39 2012 us=16000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:40 2012 us=186000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:40 2012 us=186000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:41 2012 us=746000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:41 2012 us=746000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:42 2012 us=245000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:42 2012 us=245000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:43 2012 us=181000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:43 2012 us=181000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:44 2012 us=242000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:44 2012 us=242000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:45 2012 us=53000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:45 2012 us=53000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:46 2012 us=98000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:46 2012 us=98000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:47 2012 us=611000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:47 2012 us=611000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:48 2012 us=469000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:48 2012 us=469000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:49 2012 us=249000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:49 2012 us=249000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:50 2012 us=61000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:50 2012 us=61000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:51 2012 us=28000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:51 2012 us=28000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:52 2012 us=260000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:52 2012 us=260000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:53 2012 us=586000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:53 2012 us=586000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:54 2012 us=522000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:54 2012 us=522000 Route: Waiting for TUN/TAP interface to come up...
Fri Mar 02 18:45:55 2012 us=271000 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Mar 02 18:45:55 2012 us=271000 C:\WINDOWS\system32\route.exe ADD 46.102.240.135 MASK 255.255.255.255 192.168.1.1
Fri Mar 02 18:45:55 2012 us=271000 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri Mar 02 18:45:55 2012 us=271000 Route addition via IPAPI succeeded [adaptive]
Fri Mar 02 18:45:55 2012 us=271000 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.1.1
Fri Mar 02 18:45:55 2012 us=287000 Warning: route gateway is not reachable on any active network adapters: 10.8.1.1
Fri Mar 02 18:45:55 2012 us=287000 Route addition via IPAPI failed [adaptive]
Fri Mar 02 18:45:55 2012 us=287000 Route addition fallback to route.exe
 OK!
Fri Mar 02 18:45:55 2012 us=411000 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.1.1
Fri Mar 02 18:45:55 2012 us=411000 Warning: route gateway is not reachable on any active network adapters: 10.8.1.1
Fri Mar 02 18:45:55 2012 us=411000 Route addition via IPAPI failed [adaptive]
Fri Mar 02 18:45:55 2012 us=411000 Route addition fallback to route.exe
 OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 192.168.1.1 p=0 i=11 t=4 pr=3 a=5835 h=0 m=20/0/0/0/0
0.0.0.0 128.0.0.0 10.8.1.1 p=0 i=11 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
46.102.240.135 255.255.255.255 192.168.1.1 p=0 i=11 t=4 pr=3 a=0 h=0 m=20/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=5850 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=5850 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=5850 h=0 m=306/0/0/0/0
128.0.0.0 128.0.0.0 10.8.1.1 p=0 i=11 t=4 pr=3 a=0 h=0 m=21/0/0/0/0
169.254.0.0 255.255.0.0 169.254.137.84 p=0 i=15 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
169.254.137.84 255.255.255.255 169.254.137.84 p=0 i=15 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
169.254.255.255 255.255.255.255 169.254.137.84 p=0 i=15 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
192.168.1.0 255.255.255.0 192.168.1.10 p=0 i=11 t=3 pr=3 a=5835 h=0 m=276/0/0/0/0
192.168.1.10 255.255.255.255 192.168.1.10 p=0 i=11 t=3 pr=3 a=5835 h=0 m=276/0/0/0/0
192.168.1.255 255.255.255.255 192.168.1.10 p=0 i=11 t=3 pr=3 a=5835 h=0 m=276/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=5850 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 192.168.1.10 p=0 i=11 t=3 pr=3 a=5840 h=0 m=276/0/0/0/0
224.0.0.0 240.0.0.0 169.254.137.84 p=0 i=15 t=3 pr=3 a=5839 h=0 m=286/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=5850 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 192.168.1.10 p=0 i=11 t=3 pr=3 a=5840 h=0 m=276/0/0/0/0
255.255.255.255 255.255.255.255 169.254.137.84 p=0 i=15 t=3 pr=3 a=5839 h=0 m=286/0/0/0/0
SYSTEM ADAPTER LIST
TAP-Win32 Adapter V9
  Index = 15
  GUID = {C18B4E13-42EE-4FBB-8F20-7E13525AD710}
  IP = 169.254.137.84/255.255.0.0 
  MAC = 00:ff:c1:8b:4e:13
  GATEWAY = 0.0.0.0/255.255.255.255 
  DHCP SERV = 0.0.0.0/255.255.255.255 
  DHCP LEASE OBTAINED = Fri Mar 02 18:45:55 2012
  DHCP LEASE EXPIRES  = Thu Jan 01 01:00:00 1970
  DNS SERV =  
Realtek RTL8168C(P)/8111C(P) Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
  Index = 11
  GUID = {E9805312-8800-44A4-82A2-E6ADFDB6CA13}
  IP = 192.168.1.10/255.255.255.0 
  MAC = 90:e6:ba:64:a9:63
  GATEWAY = 192.168.1.1/255.255.255.255 
  DHCP SERV = 192.168.1.1/255.255.255.255 
  DHCP LEASE OBTAINED = Fri Mar 02 18:00:58 2012
  DHCP LEASE EXPIRES  = Thu Jan 01 01:00:00 1970
  DNS SERV = 77.238.208.31/255.255.255.255 77.238.208.23/255.255.255.255 
Fri Mar 02 18:45:55 2012 us=630000 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )

server.conf


local 46.102.240.135
port 1194
proto udp
dev tap

ca ca.crt
cert server.crt
key server.key
dh dh1024.pem

server 10.8.1.0 255.255.255.0

push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 8.8.8.8"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status openvpnstatus.log
verb 3

user nobody
group nogroup

client-config-dir /etc/openvpn/ccd
route 10.8.2.0 255.255.255.0

plugin /etc/openvpn/auth/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name

maikcat

hi there,

i think your config is a little messed up...

you are using

server 10.8.1.0 255.255.255.0

this means that your vpn clients will use ips from 10.8.1.0/24 subnet..
simply you cant assign 10.8.2.1 to your client

also in your config there is

route 10.8.2.0 255.255.255.0

what extactly you want to achieve may i ask?

Michael.

Extornia

I need clients that dont have a CCD to use a shared address in the subnet, and I followed https://forums.openvpn.net/topic8559.html so thats why I have "route". Also please understand that it works perfectly fine with TUN however I need TAP (for games).

maikcat

bebop uses NAT to accomplish that (the iptables commands).

also it would helped if you mentioned before that you followed bebop's howto.

i dont know if it will work with tap though.

Michael.

Extornia

Fact: Its not due to that. Shared IP range (10.8.1.X) works fine and has access to internet and gets no error, whilst when using ifconfig-push on accounts using CCD causes the
Thu Mar 01 17:31:58 2012 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Thu Mar 01 17:31:58 2012 Route: Waiting for TUN/TAP interface to come up...

error

I'll gladly switch to TUN if you will help me make it work with games.