Config runs under XP but same config fails in Win 7 routing

[geezenslaw]

Howdy, I have the curious situation where my vpn config runs OK under Windows XP but fails in Windows 7. Some type of route failure. Please see included client log:

Fri Mar 25 11:25:45 2011 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov 8 2010
Fri Mar 25 11:25:45 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Fri Mar 25 11:25:45 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Mar 25 11:25:49 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Mar 25 11:25:49 2011 LZO compression initialized
Fri Mar 25 11:25:49 2011 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1300)
Fri Mar 25 11:25:49 2011 Control Channel MTU parms [ L:1358 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Mar 25 11:25:49 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Mar 25 11:25:49 2011 Data Channel MTU parms [ L:1358 D:1358 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Mar 25 11:25:49 2011 Local Options hash (VER=V4): '1e233cda'
Fri Mar 25 11:25:49 2011 Expected Remote Options hash (VER=V4): '56239d74'
Fri Mar 25 11:25:49 2011 UDPv4 link local (bound): [undef]:1194
Fri Mar 25 11:25:49 2011 UDPv4 link remote: 80.190.134.59:1194
Fri Mar 25 11:25:49 2011 TLS: Initial packet from 80.190.134.59:1194, sid=ec9a62ad e0c4b5a0
Fri Mar 25 11:25:50 2011 VERIFY OK: depth=1, /C=DE/ST=Bavaria/L=Munich/O=Netjay_GmbH_u._Co_KG/CN=vpn.netjay.de/emailAddress=stefan.armbruster@netjay.de
Fri Mar 25 11:25:50 2011 VERIFY OK: nsCertType=SERVER
Fri Mar 25 11:25:50 2011 VERIFY OK: depth=0, /C=DE/ST=Bavaria/O=Netjay_GmbH_u._Co_KG/CN=vpn.netjay.de/emailAddress=stefan.armbruster@netjay.de
Fri Mar 25 11:25:51 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1358', remote='link-mtu 1558'
Fri Mar 25 11:25:51 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1300', remote='tun-mtu 1500'
Fri Mar 25 11:25:51 2011 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Mar 25 11:25:51 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 25 11:25:51 2011 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Mar 25 11:25:51 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 25 11:25:51 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Mar 25 11:25:51 2011 [vpn.netjay.de] Peer Connection Initiated with 80.190.134.59:1194
Fri Mar 25 11:25:54 2011 SENT CONTROL [vpn.netjay.de]: 'PUSH_REQUEST' (status=1)
Fri Mar 25 11:25:54 2011 PUSH: Received control message: 'PUSH_REPLY,route 192.168.30.0 255.255.255.0,route 10.183.44.1,topology net30,ping 10,ping-restart 120,ifconfig 10.183.44.78 10.183.44.77'
Fri Mar 25 11:25:54 2011 OPTIONS IMPORT: timers and/or timeouts modified
Fri Mar 25 11:25:54 2011 OPTIONS IMPORT: --ifconfig/up options modified
Fri Mar 25 11:25:54 2011 OPTIONS IMPORT: route options modified
Fri Mar 25 11:25:54 2011 ROUTE default_gateway=10.1.1.254
Fri Mar 25 11:25:54 2011 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{33F91148-61B3-44A6-93E5-5EE150E185CD}.tap
Fri Mar 25 11:25:54 2011 TAP-Win32 Driver Version 9.7
Fri Mar 25 11:25:54 2011 TAP-Win32 MTU=1500
Fri Mar 25 11:25:54 2011 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.183.44.78/255.255.255.252 on interface {33F91148-61B3-44A6-93E5-5EE150E185CD} [DHCP-serv: 10.183.44.77, lease-time: 31536000]
Fri Mar 25 11:25:54 2011 NOTE: FlushIpNetTable failed on interface [25] {33F91148-61B3-44A6-93E5-5EE150E185CD} (status=5) : Access is denied.
Fri Mar 25 11:25:59 2011 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Fri Mar 25 11:25:59 2011 C:\WINDOWS\system32\route.exe ADD 192.168.30.0 MASK 255.255.255.0 10.183.44.77
Fri Mar 25 11:25:59 2011 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=25]
Fri Mar 25 11:25:59 2011 Route addition via IPAPI failed [adaptive]
Fri Mar 25 11:25:59 2011 Route addition fallback to route.exe
The requested operation requires elevation.
Fri Mar 25 11:25:59 2011 ERROR: Windows route add command failed [adaptive]: returned error code 1
Fri Mar 25 11:25:59 2011 C:\WINDOWS\system32\route.exe ADD 10.183.44.1 MASK 255.255.255.255 10.183.44.77
Fri Mar 25 11:25:59 2011 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=25]
Fri Mar 25 11:25:59 2011 Route addition via IPAPI failed [adaptive]
Fri Mar 25 11:25:59 2011 Route addition fallback to route.exe
The requested operation requires elevation.
Fri Mar 25 11:25:59 2011 ERROR: Windows route add command failed [adaptive]: returned error code 1
Fri Mar 25 11:25:59 2011 Initialization Sequence Completed
Fri Mar 25 11:28:36 2011 read from TUN/TAP : The I/O operation has been aborted because of either a thread exit or an application request. (code=995)
Fri Mar 25 11:28:36 2011 TUN/TAP interface has been stopped, exiting
Fri Mar 25 11:28:36 2011 TCP/UDP: Closing socket
Fri Mar 25 11:28:36 2011 Closing TUN/TAP interface
Fri Mar 25 11:28:36 2011 SIGTERM[soft,tun-stop] received, process exiting

[Douglas]

That looks to me like UAC is the issue. Either disable it or set openvpn to run as an administrator.