Stops working when I reboot Server 2008

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
moored99
OpenVpn Newbie
Posts: 8
Joined: Thu Jul 16, 2009 12:47 pm

Stops working when I reboot Server 2008

Post by moored99 » Thu Feb 11, 2010 3:53 am

I am using OpenVPN 2.1.1 and is loaded on Server 2008 x64. And when it works it just works (like it worked on server 2003).

But every time I reboot Server 2008 x64, I have to login and restart the OpenVPN service.

The service doesn't fail or show as an error in the event logs where do I start trying to debug this or is this a know issue with OpenVPN and Server 2008 x64.

Regards.

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Stops working when I reboot Server 2008

Post by krzee » Tue Feb 16, 2010 10:40 am

moored99 wrote: The service doesn't fail or show as an error in the event logs where do I start trying to debug this or is this a know issue with OpenVPN and Server 2008 x64.
I have no idea if it is a known issue, but to start debugging I would try specifying a log file for openvpn with --log <path to file>
maybe that will tell us why the service doesnt want to start on boot but works after when you start it manually

moored99
OpenVpn Newbie
Posts: 8
Joined: Thu Jul 16, 2009 12:47 pm

Re: Stops working when I reboot Server 2008

Post by moored99 » Fri Feb 19, 2010 1:44 pm

Thanks for the suggestion I have turned on append logging, the problem appears to be that the OpenVPN server cant get IP address 10.8.0.1, (is there a way to fix the 10.8.0.1 on the server. All other clients are able to login but because the server can get 10.8.0.1 the other clients cat get the server.

One more question what level of verbose (1 - 5 should I use.

Douglas
Forum Team
Posts: 285
Joined: Wed Aug 27, 2008 2:41 am

Re: Stops working when I reboot Server 2008

Post by Douglas » Sun Feb 21, 2010 3:54 am

moored99 wrote:Thanks for the suggestion I have turned on append logging, the problem appears to be that the OpenVPN server cant get IP address 10.8.0.1, (is there a way to fix the 10.8.0.1 on the server. All other clients are able to login but because the server can get 10.8.0.1 the other clients cat get the server.

One more question what level of verbose (1 - 5 should I use.
6 verbosity is what we usually ask for.

moored99
OpenVpn Newbie
Posts: 8
Joined: Thu Jul 16, 2009 12:47 pm

Re: Stops working when I reboot Server 2008

Post by moored99 » Sun Feb 21, 2010 7:18 am

Here goes I have copied the first part before the clients start to logon please note the bolded route addition failure.

Sun Feb 21 16:54:01 2010 us=689000 Current Parameter Settings:
Sun Feb 21 16:54:01 2010 us=689000 config = 'S001.ovpn'
Sun Feb 21 16:54:01 2010 us=689000 mode = 1
Sun Feb 21 16:54:01 2010 us=689000 show_ciphers = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 show_digests = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 show_engines = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 genkey = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 key_pass_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 show_tls_ciphers = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 Connection profiles [default]:
Sun Feb 21 16:54:01 2010 us=689000 proto = udp
Sun Feb 21 16:54:01 2010 us=689000 local = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 local_port = 1194
Sun Feb 21 16:54:01 2010 us=689000 remote = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 remote_port = 1194
Sun Feb 21 16:54:01 2010 us=689000 remote_float = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 bind_defined = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 bind_local = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 connect_retry_seconds = 5
Sun Feb 21 16:54:01 2010 us=689000 connect_timeout = 10
Sun Feb 21 16:54:01 2010 us=689000 connect_retry_max = 0
Sun Feb 21 16:54:01 2010 us=689000 socks_proxy_server = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 socks_proxy_port = 0
Sun Feb 21 16:54:01 2010 us=689000 socks_proxy_retry = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 Connection profiles END
Sun Feb 21 16:54:01 2010 us=689000 remote_random = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 ipchange = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 dev = 'tun'
Sun Feb 21 16:54:01 2010 us=689000 dev_type = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 dev_node = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 lladdr = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 topology = 1
Sun Feb 21 16:54:01 2010 us=689000 tun_ipv6 = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_local = '10.8.0.1'
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_remote_netmask = '10.8.0.2'
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_noexec = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_nowarn = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 shaper = 0
Sun Feb 21 16:54:01 2010 us=689000 tun_mtu = 1500
Sun Feb 21 16:54:01 2010 us=689000 tun_mtu_defined = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 link_mtu = 1500
Sun Feb 21 16:54:01 2010 us=689000 link_mtu_defined = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 tun_mtu_extra = 0
Sun Feb 21 16:54:01 2010 us=689000 tun_mtu_extra_defined = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 fragment = 0
Sun Feb 21 16:54:01 2010 us=689000 mtu_discover_type = -1
Sun Feb 21 16:54:01 2010 us=689000 mtu_test = 0
Sun Feb 21 16:54:01 2010 us=689000 mlock = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 keepalive_ping = 10
Sun Feb 21 16:54:01 2010 us=689000 keepalive_timeout = 120
Sun Feb 21 16:54:01 2010 us=689000 inactivity_timeout = 0
Sun Feb 21 16:54:01 2010 us=689000 ping_send_timeout = 10
Sun Feb 21 16:54:01 2010 us=689000 ping_rec_timeout = 240
Sun Feb 21 16:54:01 2010 us=689000 ping_rec_timeout_action = 2
Sun Feb 21 16:54:01 2010 us=689000 ping_timer_remote = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 remap_sigusr1 = 0
Sun Feb 21 16:54:01 2010 us=689000 explicit_exit_notification = 0
Sun Feb 21 16:54:01 2010 us=689000 persist_tun = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 persist_local_ip = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 persist_remote_ip = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 persist_key = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 mssfix = 1450
Sun Feb 21 16:54:01 2010 us=689000 resolve_retry_seconds = 1000000000
Sun Feb 21 16:54:01 2010 us=689000 username = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 groupname = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 chroot_dir = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 cd_dir = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 writepid = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 up_script = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 down_script = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 down_pre = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 up_restart = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 up_delay = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 daemon = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 inetd = 0
Sun Feb 21 16:54:01 2010 us=689000 log = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 suppress_timestamps = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 nice = 0
Sun Feb 21 16:54:01 2010 us=689000 verbosity = 6
Sun Feb 21 16:54:01 2010 us=689000 mute = 0
Sun Feb 21 16:54:01 2010 us=689000 gremlin = 0
Sun Feb 21 16:54:01 2010 us=689000 status_file = 'openvpn-status.log'
Sun Feb 21 16:54:01 2010 us=689000 status_file_version = 1
Sun Feb 21 16:54:01 2010 us=689000 status_file_update_freq = 60
Sun Feb 21 16:54:01 2010 us=689000 occ = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 rcvbuf = 0
Sun Feb 21 16:54:01 2010 us=689000 sndbuf = 0
Sun Feb 21 16:54:01 2010 us=689000 sockflags = 0
Sun Feb 21 16:54:01 2010 us=689000 fast_io = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 lzo = 7
Sun Feb 21 16:54:01 2010 us=689000 route_script = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 route_default_gateway = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 route_default_metric = 0
Sun Feb 21 16:54:01 2010 us=689000 route_noexec = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 route_delay = 0
Sun Feb 21 16:54:01 2010 us=689000 route_delay_window = 30
Sun Feb 21 16:54:01 2010 us=689000 route_delay_defined = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 route_nopull = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 route_gateway_via_dhcp = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 max_routes = 100
Sun Feb 21 16:54:01 2010 us=689000 allow_pull_fqdn = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 route 10.8.0.0/255.255.255.0/nil/nil
Sun Feb 21 16:54:01 2010 us=689000 management_addr = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 management_port = 0
Sun Feb 21 16:54:01 2010 us=689000 management_user_pass = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 management_log_history_cache = 250
Sun Feb 21 16:54:01 2010 us=689000 management_echo_buffer_size = 100
Sun Feb 21 16:54:01 2010 us=689000 management_write_peer_info_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 management_client_user = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 management_client_group = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 management_flags = 0
Sun Feb 21 16:54:01 2010 us=689000 shared_secret_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 key_direction = 0
Sun Feb 21 16:54:01 2010 us=689000 ciphername_defined = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 ciphername = 'BF-CBC'
Sun Feb 21 16:54:01 2010 us=689000 authname_defined = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 authname = 'SHA1'
Sun Feb 21 16:54:01 2010 us=689000 prng_hash = 'SHA1'
Sun Feb 21 16:54:01 2010 us=689000 prng_nonce_secret_len = 16
Sun Feb 21 16:54:01 2010 us=689000 keysize = 0
Sun Feb 21 16:54:01 2010 us=689000 engine = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 replay = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 mute_replay_warnings = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 replay_window = 64
Sun Feb 21 16:54:01 2010 us=689000 replay_time = 15
Sun Feb 21 16:54:01 2010 us=689000 packet_id_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 use_iv = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 test_crypto = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 tls_server = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 tls_client = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 key_method = 2
Sun Feb 21 16:54:01 2010 us=689000 ca_file = 'C:\Program Files (x86)\OpenVPN\easy-rsa\keys\ca.crt'
Sun Feb 21 16:54:01 2010 us=689000 ca_path = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 dh_file = 'C:\Program Files (x86)\OpenVPN\easy-rsa\keys\dh1024.pem'
Sun Feb 21 16:54:01 2010 us=689000 cert_file = 'C:\Program Files (x86)\OpenVPN\easy-rsa\keys\S001.crt'
Sun Feb 21 16:54:01 2010 us=689000 priv_key_file = 'C:\Program Files (x86)\OpenVPN\easy-rsa\keys\S001.key'
Sun Feb 21 16:54:01 2010 us=689000 pkcs12_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 cryptoapi_cert = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 cipher_list = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 tls_verify = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 tls_remote = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 crl_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 ns_cert_type = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku[i] = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku[i] = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku[i] = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku[i] = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku[i] = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_ku[i] = 0
Sun Feb 21 16:54:01 2010 us=689000 remote_cert_eku = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 tls_timeout = 2
Sun Feb 21 16:54:01 2010 us=689000 renegotiate_bytes = 0
Sun Feb 21 16:54:01 2010 us=689000 renegotiate_packets = 0
Sun Feb 21 16:54:01 2010 us=689000 renegotiate_seconds = 3600
Sun Feb 21 16:54:01 2010 us=689000 handshake_window = 60
Sun Feb 21 16:54:01 2010 us=689000 transition_window = 3600
Sun Feb 21 16:54:01 2010 us=689000 single_session = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 tls_exit = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 tls_auth_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_protected_authentication = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_private_mode = 00000000
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_cert_private = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_pin_cache_period = -1
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_id = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 pkcs11_id_management = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 server_network = 10.8.0.0
Sun Feb 21 16:54:01 2010 us=689000 server_netmask = 255.255.255.0
Sun Feb 21 16:54:01 2010 us=689000 server_bridge_ip = 0.0.0.0
Sun Feb 21 16:54:01 2010 us=689000 server_bridge_netmask = 0.0.0.0
Sun Feb 21 16:54:01 2010 us=689000 server_bridge_pool_start = 0.0.0.0
Sun Feb 21 16:54:01 2010 us=689000 server_bridge_pool_end = 0.0.0.0
Sun Feb 21 16:54:01 2010 us=689000 push_entry = 'route 10.8.0.0 255.255.255.0'
Sun Feb 21 16:54:01 2010 us=689000 push_entry = 'topology net30'
Sun Feb 21 16:54:01 2010 us=689000 push_entry = 'ping 10'
Sun Feb 21 16:54:01 2010 us=689000 push_entry = 'ping-restart 120'
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_pool_defined = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_pool_start = 10.8.0.4
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_pool_end = 10.8.0.251
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_pool_netmask = 0.0.0.0
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_pool_persist_filename = 'C:\Program Files (x86)\OpenVPN\config\CCD\ipp.txt'
Sun Feb 21 16:54:01 2010 us=689000 ifconfig_pool_persist_refresh_freq = 600
Sun Feb 21 16:54:01 2010 us=689000 n_bcast_buf = 256
Sun Feb 21 16:54:01 2010 us=689000 tcp_queue_limit = 64
Sun Feb 21 16:54:01 2010 us=689000 real_hash_size = 256
Sun Feb 21 16:54:01 2010 us=689000 virtual_hash_size = 256
Sun Feb 21 16:54:01 2010 us=689000 client_connect_script = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 learn_address_script = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 client_disconnect_script = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 client_config_dir = 'ccd'
Sun Feb 21 16:54:01 2010 us=689000 ccd_exclusive = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 tmp_dir = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 push_ifconfig_defined = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 push_ifconfig_local = 0.0.0.0
Sun Feb 21 16:54:01 2010 us=689000 push_ifconfig_remote_netmask = 0.0.0.0
Sun Feb 21 16:54:01 2010 us=689000 enable_c2c = ENABLED
Sun Feb 21 16:54:01 2010 us=689000 duplicate_cn = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 cf_max = 0
Sun Feb 21 16:54:01 2010 us=689000 cf_per = 0
Sun Feb 21 16:54:01 2010 us=689000 max_clients = 1024
Sun Feb 21 16:54:01 2010 us=689000 max_routes_per_client = 256
Sun Feb 21 16:54:01 2010 us=689000 auth_user_pass_verify_script = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 auth_user_pass_verify_script_via_file = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 ssl_flags = 0
Sun Feb 21 16:54:01 2010 us=689000 client = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 pull = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 auth_user_pass_file = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 show_net_up = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 route_method = 0
Sun Feb 21 16:54:01 2010 us=689000 ip_win32_defined = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 ip_win32_type = 3
Sun Feb 21 16:54:01 2010 us=689000 dhcp_masq_offset = 0
Sun Feb 21 16:54:01 2010 us=689000 dhcp_lease_time = 31536000
Sun Feb 21 16:54:01 2010 us=689000 tap_sleep = 10
Sun Feb 21 16:54:01 2010 us=689000 dhcp_options = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 dhcp_renew = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 dhcp_pre_release = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 dhcp_release = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 domain = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 netbios_scope = '[UNDEF]'
Sun Feb 21 16:54:01 2010 us=689000 netbios_node_type = 0
Sun Feb 21 16:54:01 2010 us=689000 disable_nbt = DISABLED
Sun Feb 21 16:54:01 2010 us=689000 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 11 2009
Sun Feb 21 16:54:01 2010 us=689000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Feb 21 16:54:01 2010 us=907000 Diffie-Hellman initialized with 1024 bit key
Sun Feb 21 16:54:01 2010 us=954000 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Feb 21 16:54:01 2010 us=954000 ROUTE default_gateway=192.168.100.254
Sun Feb 21 16:54:01 2010 us=969000 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{07BD7D61-DF7F-47D0-910E-15EEB3CBC4C5}.tap
Sun Feb 21 16:54:01 2010 us=969000 TAP-Win32 Driver Version 9.6
Sun Feb 21 16:54:01 2010 us=969000 TAP-Win32 MTU=1500
Sun Feb 21 16:54:01 2010 us=969000 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {07BD7D61-DF7F-47D0-910E-15EEB3CBC4C5} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sun Feb 21 16:54:01 2010 us=969000 Sleeping for 10 seconds...
Sun Feb 21 16:54:11 2010 us=969000 Successful ARP Flush on interface [12] {07BD7D61-DF7F-47D0-910E-15EEB3CBC4C5}
Sun Feb 21 16:54:11 2010 us=969000 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sun Feb 21 16:54:11 2010 us=969000 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2

Sun Feb 21 16:54:11 2010 us=969000 Route addition via IPAPI failed [adaptive]
Sun Feb 21 16:54:11 2010 us=969000 Route addition fallback to route.exe
Sun Feb 21 16:54:12 2010 us=141000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Feb 21 16:54:12 2010 us=141000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Feb 21 16:54:12 2010 us=141000 UDPv4 link local (bound): [undef]:1194
Sun Feb 21 16:54:12 2010 us=141000 UDPv4 link remote: [undef]
Sun Feb 21 16:54:12 2010 us=141000 MULTI: multi_init called, r=256 v=256
Sun Feb 21 16:54:12 2010 us=141000 IFCONFIG POOL: base=10.8.0.4 size=62
Sun Feb 21 16:54:12 2010 us=141000 IFCONFIG POOL LIST
Sun Feb 21 16:54:12 2010 us=141000 E01,10.8.0.4
Sun Feb 21 16:54:12 2010 us=141000 S01,10.8.0.8
Sun Feb 21 16:54:12 2010 us=141000 B01,10.8.0.12
Sun Feb 21 16:54:12 2010 us=141000 C01,10.8.0.16
Sun Feb 21 16:54:12 2010 us=141000 D01,10.8.0.20
Sun Feb 21 16:54:12 2010 us=141000 B02,10.8.0.24
Sun Feb 21 16:54:12 2010 us=141000 D02,10.8.0.28
Sun Feb 21 16:54:12 2010 us=141000 E02,10.8.0.32
Sun Feb 21 16:54:12 2010 us=141000 S01,10.8.0.36
Sun Feb 21 16:54:12 2010 us=141000 S02,10.8.0.40
Sun Feb 21 16:54:12 2010 us=141000 BO3,10.8.0.44
Sun Feb 21 16:54:12 2010 us=141000 A01,10.8.0.48
Sun Feb 21 16:54:12 2010 us=141000 Initialization Sequence Completed
Sun Feb 21 16:54:12 2010 us=141000 MULTI: multi_create_instance called

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Stops working when I reboot Server 2008

Post by krzee » Sat Mar 06, 2010 1:18 am

sorry i missed this thread was still open... i hope you already got this fixed, but just in case:
You found the right lines to bold!
for these situations try:
route-method exe
route-delay

some people may need to turn off routing and remote acess in administrative tools - routing and remote access

first try route-delay for your error, if that doesnt work try adding route-method exe, if that doesnt work try disabling routing and remote access in windows.

When you add config options, dont forget to read about them in the manual ;) (search for --<config option> )

moored99
OpenVpn Newbie
Posts: 8
Joined: Thu Jul 16, 2009 12:47 pm

Re: Stops working when I reboot Server 2008

Post by moored99 » Wed Mar 10, 2010 3:28 am

Do you have a recommended value.

and is the format for the command:

--route-delay 0 30



--route-delay [n] [w]
Delay n seconds (default=0) after connection establishment, before adding routes. If n is 0, routes will be added immediately upon connection establishment. If --route-delay is omitted, routes will be added immediately after TUN/TAP device open and --up script execution, before any --user or --group privilege downgrade (or --chroot execution.)

This option is designed to be useful in scenarios where DHCP is used to set tap adapter addresses. The delay will give the DHCP handshake time to complete before routes are added.

On Windows, --route-delay tries to be more intelligent by waiting w seconds (w=30 by default) for the TAP-Win32 adapter to come up before adding routes.

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Stops working when I reboot Server 2008

Post by krzee » Wed Mar 10, 2010 4:02 am

On Windows, --route-delay tries to be more intelligent by waiting w seconds (w=30 by default) for the TAP-Win32 adapter to come up before adding routes.

the default is fine, just add route-delay with no options

Post Reply