Multiple Connection / Multiple TAP Interface / Error

[sidharthnayyar]

Hi All,

I have multiple OpenVPN connections that I use. For a particular scenario I need the ability to connect to 2 of the OpenVPN connections at the same time. Initially I wasn't able to but I was told to create another TAP interface and that should allow me to do it. So I did so via Start Menu > OpenVPN > Utilities > Add TAP interface. This allowed me to connect to more than one OpenVPN connection that the same time. Perfect. However what I have found this strange issue that I cannot fix. Here are the steps I'm taking:

1. Connect to 2 OpenVPN connections
2. RDP to the computers on to those networks.
3. Close RDP session.
4. Close both OpenVPN sessions.
5. **** Wait for a while *****
6. Connect to one of the OpenVPN connections again - this will connect again but will take longer. Esp the from the time it says "successful" in the log to the time it shows as connected.
7. RDP to a computer on that network. *** This fails for me

Please note that in step 5 I have to wait for a while to be able to reproduce this error. If I try to reconnect to an OpenVPN connection straight away it works fine for me. In step 6 it does say it connects to the OpenVPN connection correctly but it takes slightly longer. In step 7 I cannot RDP onto the servers with a cannot connect error. I.e. it can't find the server.

Even if I close and start OpenVPN it doesn't work. The only time it works again is if I restart the computer. So I do have a work-around to this problem but obviously it's not ideal.

The version I have is: OpenVPN GUI v1.0.3 on Windows 7.

I hope someone can help me out.

Kind regards
Sidharth

[maikcat]

without configs/logs & output of netstat -nr before & after vpn connection
its impossible to tell what is happening...

server configs/logs are needed also..

Michael.

[sidharthnayyar]

Hi Michael,

Sorry about that. Please see the attached file that contains the OpenVPN log before and after connections (1st and second attempt) and the netstat results before and after (first and second attempt).

After the second connection I couldn't RDP onto the server again. You are right though the log after the second connection looks very different to the log after the first connection and has warnings of:

Fri Feb 08 09:08:53 2013 Successful ARP Flush on interface [22] {DFE205FF-4BE3-4DF2-9227-9D686966D5FF}
Fri Feb 08 09:09:28 2013 Warning: route gateway is not reachable on any active network adapters: 10.1.1.17
OK!

I hope the attached information is okay but please do let me know if you require any further information.

OK, I can't seem to attach the file because txt (and any other extension that I try is giving the error "The extension *** is not allowed". So I'm appending it to the end of this post. Sorry!

Kind regards
Sidharth


****** BEFORE 1st Connection ******

===========================================================================
Interface List
29...00 ff a3 c3 a1 02 ......TAP-Win32 Adapter V9 #2
22...00 ff df e2 05 ff ......TAP-Win32 Adapter V9
11...78 2b cb ae 0f 70 ......Intel(R) 82579LM Gigabit Network Connection
27...08 00 27 00 0c a2 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.168.2 192.168.168.97 10
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.168.0 255.255.255.0 On-link 192.168.168.97 266
192.168.168.97 255.255.255.255 On-link 192.168.168.97 266
192.168.168.255 255.255.255.255 On-link 192.168.168.97 266
192.168.242.0 255.255.255.0 192.168.168.1 192.168.168.97 11
192.168.243.0 255.255.255.0 192.168.168.1 192.168.168.97 11
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 192.168.168.97 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 192.168.168.97 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
192.168.242.0 255.255.255.0 192.168.168.1 1
192.168.243.0 255.255.255.0 192.168.168.1 1
192.168.242.8 255.255.255.0 192.168.168.1 1
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
27 276 fe80::/64 On-link
11 266 fe80::/64 On-link
27 276 fe80::38c2:6850:1fc2:1269/128
On-link
11 266 fe80::49ea:c1e5:c841:f78c/128
On-link
1 306 ff00::/8 On-link
27 276 ff00::/8 On-link
11 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None



***** AFTER 1st Connection ******
C:\Users\snayyar>netstat -nr
===========================================================================
Interface List
29...00 ff a3 c3 a1 02 ......TAP-Win32 Adapter V9 #2
22...00 ff df e2 05 ff ......TAP-Win32 Adapter V9
11...78 2b cb ae 0f 70 ......Intel(R) 82579LM Gigabit Network Connection
27...08 00 27 00 0c a2 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.168.2 192.168.168.97 10
10.1.2.1 255.255.255.255 10.1.2.13 10.1.2.14 30
10.1.2.12 255.255.255.252 On-link 10.1.2.14 286
10.1.2.14 255.255.255.255 On-link 10.1.2.14 286
10.1.2.15 255.255.255.255 On-link 10.1.2.14 286
109.73.126.128 255.255.255.248 10.1.2.13 10.1.2.14 30
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.162.128 255.255.255.128 10.1.2.13 10.1.2.14 30
192.168.168.0 255.255.255.0 On-link 192.168.168.97 266
192.168.168.97 255.255.255.255 On-link 192.168.168.97 266
192.168.168.255 255.255.255.255 On-link 192.168.168.97 266
192.168.242.0 255.255.255.0 192.168.168.1 192.168.168.97 11
192.168.243.0 255.255.255.0 192.168.168.1 192.168.168.97 11
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 10.1.2.14 286
224.0.0.0 240.0.0.0 On-link 192.168.168.97 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 10.1.2.14 286
255.255.255.255 255.255.255.255 On-link 192.168.168.97 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
192.168.242.0 255.255.255.0 192.168.168.1 1
192.168.243.0 255.255.255.0 192.168.168.1 1
192.168.242.8 255.255.255.0 192.168.168.1 1
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
27 276 fe80::/64 On-link
22 286 fe80::/64 On-link
11 266 fe80::/64 On-link
27 276 fe80::38c2:6850:1fc2:1269/128
On-link
11 266 fe80::49ea:c1e5:c841:f78c/128
On-link
22 286 fe80::e815:97ad:92c4:2821/128
On-link
1 306 ff00::/8 On-link
27 276 ff00::/8 On-link
22 286 ff00::/8 On-link
11 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None


********** 1st Connection Log ***********
Fri Feb 08 08:36:02 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Fri Feb 08 08:36:02 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Feb 08 08:36:02 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Feb 08 08:36:05 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Feb 08 08:36:05 2013 Control Channel Authentication: using 'C:\Program Files (x86)\OpenVPN\config-FISS-DR\key.txt' as a OpenVPN static key file
Fri Feb 08 08:36:05 2013 LZO compression initialized
Fri Feb 08 08:36:05 2013 UDPv4 link local: [undef]
Fri Feb 08 08:36:05 2013 UDPv4 link remote: 213.129.88.173:1194
Fri Feb 08 08:36:06 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1500'
Fri Feb 08 08:36:06 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1458'
Fri Feb 08 08:36:06 2013 [front-fw-a.ukp-dr.hosted-at.thebunker.net] Peer Connection Initiated with 213.129.88.173:1194
Fri Feb 08 08:36:08 2013 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{DFE205FF-4BE3-4DF2-9227-9D686966D5FF}.tap
Fri Feb 08 08:36:08 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.1.2.14/255.255.255.252 on interface {DFE205FF-4BE3-4DF2-9227-9D686966D5FF} [DHCP-serv: 10.1.2.13, lease-time: 31536000]
Fri Feb 08 08:36:08 2013 Successful ARP Flush on interface [22] {DFE205FF-4BE3-4DF2-9227-9D686966D5FF}
Fri Feb 08 08:36:13 2013 Initialization Sequence Completed


********** 1st Connection Config **************
client
dev tun
remote 213.129.88.173 1194
nobind
persist-key
persist-tun

ca Apacs-VPN-NEW-CA-cacert.pem

cert C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-DR\\sidharth.nayyar@pulsion.co.uk-cert.pem
key C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-DR\\sidharth.nayyar@pulsion.co.uk-key.pem
tls-auth C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-DR\\key.txt 1

comp-lzo

verb 1


********** After 2nd Connection *************
C:\Users\snayyar>netstat -nr
===========================================================================
Interface List
29...00 ff a3 c3 a1 02 ......TAP-Win32 Adapter V9 #2
22...00 ff df e2 05 ff ......TAP-Win32 Adapter V9
11...78 2b cb ae 0f 70 ......Intel(R) 82579LM Gigabit Network Connection
27...08 00 27 00 0c a2 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.168.2 192.168.168.97 10
10.1.1.1 255.255.255.255 10.1.1.17 10.1.1.18 30
10.1.1.16 255.255.255.252 On-link 10.1.1.18 286
10.1.1.18 255.255.255.255 On-link 10.1.1.18 286
10.1.1.19 255.255.255.255 On-link 10.1.1.18 286
10.1.2.1 255.255.255.255 10.1.2.13 10.1.2.14 30
10.1.2.12 255.255.255.252 On-link 10.1.2.14 286
10.1.2.14 255.255.255.255 On-link 10.1.2.14 286
10.1.2.15 255.255.255.255 On-link 10.1.2.14 286
109.73.126.128 255.255.255.248 10.1.2.13 10.1.2.14 30
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.161.0 255.255.255.128 10.1.1.17 10.1.1.18 30
192.168.161.128 255.255.255.128 10.1.1.17 10.1.1.18 30
192.168.162.128 255.255.255.128 10.1.2.13 10.1.2.14 30
192.168.168.0 255.255.255.0 On-link 192.168.168.97 266
192.168.168.97 255.255.255.255 On-link 192.168.168.97 266
192.168.168.255 255.255.255.255 On-link 192.168.168.97 266
192.168.242.0 255.255.255.0 192.168.168.1 192.168.168.97 11
192.168.243.0 255.255.255.0 192.168.168.1 192.168.168.97 11
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 10.1.2.14 286
224.0.0.0 240.0.0.0 On-link 192.168.168.97 266
224.0.0.0 240.0.0.0 On-link 10.1.1.18 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 10.1.2.14 286
255.255.255.255 255.255.255.255 On-link 192.168.168.97 266
255.255.255.255 255.255.255.255 On-link 10.1.1.18 286
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
192.168.242.0 255.255.255.0 192.168.168.1 1
192.168.243.0 255.255.255.0 192.168.168.1 1
192.168.242.8 255.255.255.0 192.168.168.1 1
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
27 276 fe80::/64 On-link
22 286 fe80::/64 On-link
11 266 fe80::/64 On-link
29 286 fe80::/64 On-link
27 276 fe80::38c2:6850:1fc2:1269/128
On-link
11 266 fe80::49ea:c1e5:c841:f78c/128
On-link
29 286 fe80::b439:c45d:8a32:a706/128
On-link
22 286 fe80::e815:97ad:92c4:2821/128
On-link
1 306 ff00::/8 On-link
27 276 ff00::/8 On-link
22 286 ff00::/8 On-link
11 266 ff00::/8 On-link
29 286 ff00::/8 On-link
===========================================================================
Persistent Routes:
None


********* 2nd Connection Log ***************
Fri Feb 08 08:48:33 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Fri Feb 08 08:48:33 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Feb 08 08:48:33 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Feb 08 08:48:36 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Feb 08 08:48:36 2013 Control Channel Authentication: using 'C:\Program Files (x86)\OpenVPN\config-FISS-PROD\key.txt' as a OpenVPN static key file
Fri Feb 08 08:48:36 2013 LZO compression initialized
Fri Feb 08 08:48:36 2013 UDPv4 link local: [undef]
Fri Feb 08 08:48:36 2013 UDPv4 link remote: 213.129.79.251:1194
Fri Feb 08 08:48:44 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1500'
Fri Feb 08 08:48:44 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1458'
Fri Feb 08 08:48:44 2013 [mid-fw-carp.ukp.hosted-at.thebunker.net] Peer Connection Initiated with 213.129.79.251:1194
Fri Feb 08 08:48:46 2013 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{A3C3A102-AC60-4456-9A38-7AA176AD9752}.tap
Fri Feb 08 08:48:46 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.1.1.18/255.255.255.252 on interface {A3C3A102-AC60-4456-9A38-7AA176AD9752} [DHCP-serv: 10.1.1.17, lease-time: 31536000]
Fri Feb 08 08:48:46 2013 Successful ARP Flush on interface [29] {A3C3A102-AC60-4456-9A38-7AA176AD9752}
Fri Feb 08 08:48:51 2013 Initialization Sequence Completed

******** 2nd Connection Config **************
client
dev tun
remote 213.129.79.251 1194
nobind
persist-key
persist-tun

ca Apacs-VPN-NEW-CA-cacert.pem

cert C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-PROD\\sidharth.nayyar@pulsion.co.uk-cert.pem
key C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-PROD\\sidharth.nayyar@pulsion.co.uk-key.pem
tls-auth C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-PROD\\key.txt 1

comp-lzo

verb 1


********* After disconnection of both OpenVPN connections *************
C:\Users\snayyar>netstat -nr
===========================================================================
Interface List
29...00 ff a3 c3 a1 02 ......TAP-Win32 Adapter V9 #2
22...00 ff df e2 05 ff ......TAP-Win32 Adapter V9
11...78 2b cb ae 0f 70 ......Intel(R) 82579LM Gigabit Network Connection
27...08 00 27 00 0c a2 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.168.2 192.168.168.97 10
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.168.0 255.255.255.0 On-link 192.168.168.97 266
192.168.168.97 255.255.255.255 On-link 192.168.168.97 266
192.168.168.255 255.255.255.255 On-link 192.168.168.97 266
192.168.242.0 255.255.255.0 192.168.168.1 192.168.168.97 11
192.168.243.0 255.255.255.0 192.168.168.1 192.168.168.97 11
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 192.168.168.97 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 192.168.168.97 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
192.168.242.0 255.255.255.0 192.168.168.1 1
192.168.243.0 255.255.255.0 192.168.168.1 1
192.168.242.8 255.255.255.0 192.168.168.1 1
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
27 276 fe80::/64 On-link
11 266 fe80::/64 On-link
27 276 fe80::38c2:6850:1fc2:1269/128
On-link
11 266 fe80::49ea:c1e5:c841:f78c/128
On-link
1 306 ff00::/8 On-link
27 276 ff00::/8 On-link
11 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None


*************** After 2nd connection **************
************** OpenVPN connection was successful but again config said successful and it took an age until openvpn icon said connected successfully ****************
C:\Users\snayyar>netstat -nr
===========================================================================
Interface List
29...00 ff a3 c3 a1 02 ......TAP-Win32 Adapter V9 #2
22...00 ff df e2 05 ff ......TAP-Win32 Adapter V9
11...78 2b cb ae 0f 70 ......Intel(R) 82579LM Gigabit Network Connection
27...08 00 27 00 0c a2 ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.168.2 192.168.168.97 10
10.1.1.1 255.255.255.255 10.1.1.17 192.168.168.97 11
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 169.254.40.33 286
169.254.40.33 255.255.255.255 On-link 169.254.40.33 286
169.254.255.255 255.255.255.255 On-link 169.254.40.33 286
192.168.56.0 255.255.255.0 On-link 192.168.56.1 276
192.168.56.1 255.255.255.255 On-link 192.168.56.1 276
192.168.56.255 255.255.255.255 On-link 192.168.56.1 276
192.168.161.0 255.255.255.128 10.1.1.17 192.168.168.97 11
192.168.161.128 255.255.255.128 10.1.1.17 192.168.168.97 11
192.168.168.0 255.255.255.0 On-link 192.168.168.97 266
192.168.168.97 255.255.255.255 On-link 192.168.168.97 266
192.168.168.255 255.255.255.255 On-link 192.168.168.97 266
192.168.242.0 255.255.255.0 192.168.168.1 192.168.168.97 11
192.168.243.0 255.255.255.0 192.168.168.1 192.168.168.97 11
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.56.1 276
224.0.0.0 240.0.0.0 On-link 169.254.40.33 286
224.0.0.0 240.0.0.0 On-link 192.168.168.97 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.56.1 276
255.255.255.255 255.255.255.255 On-link 169.254.40.33 286
255.255.255.255 255.255.255.255 On-link 192.168.168.97 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
192.168.242.0 255.255.255.0 192.168.168.1 1
192.168.243.0 255.255.255.0 192.168.168.1 1
192.168.242.8 255.255.255.0 192.168.168.1 1
===========================================================================

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
27 276 fe80::/64 On-link
22 286 fe80::/64 On-link
11 266 fe80::/64 On-link
27 276 fe80::38c2:6850:1fc2:1269/128
On-link
11 266 fe80::49ea:c1e5:c841:f78c/128
On-link
22 286 fe80::e815:97ad:92c4:2821/128
On-link
1 306 ff00::/8 On-link
27 276 ff00::/8 On-link
22 286 ff00::/8 On-link
11 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None


**************** 2nd Connection log ******************************

Fri Feb 08 09:08:47 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Fri Feb 08 09:08:47 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Feb 08 09:08:47 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Feb 08 09:08:50 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Feb 08 09:08:50 2013 Control Channel Authentication: using 'C:\Program Files (x86)\OpenVPN\config-FISS-PROD\key.txt' as a OpenVPN static key file
Fri Feb 08 09:08:50 2013 LZO compression initialized
Fri Feb 08 09:08:50 2013 UDPv4 link local: [undef]
Fri Feb 08 09:08:50 2013 UDPv4 link remote: 213.129.79.251:1194
Fri Feb 08 09:08:51 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1500'
Fri Feb 08 09:08:51 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1458'
Fri Feb 08 09:08:51 2013 [mid-fw-carp.ukp.hosted-at.thebunker.net] Peer Connection Initiated with 213.129.79.251:1194
Fri Feb 08 09:08:53 2013 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{DFE205FF-4BE3-4DF2-9227-9D686966D5FF}.tap
Fri Feb 08 09:08:53 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.1.1.18/255.255.255.252 on interface {DFE205FF-4BE3-4DF2-9227-9D686966D5FF} [DHCP-serv: 10.1.1.17, lease-time: 31536000]
Fri Feb 08 09:08:53 2013 Successful ARP Flush on interface [22] {DFE205FF-4BE3-4DF2-9227-9D686966D5FF}
Fri Feb 08 09:09:28 2013 Warning: route gateway is not reachable on any active network adapters: 10.1.1.17
OK!
Fri Feb 08 09:09:28 2013 Warning: route gateway is not reachable on any active network adapters: 10.1.1.17
OK!
Fri Feb 08 09:09:28 2013 Warning: route gateway is not reachable on any active network adapters: 10.1.1.17
OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 192.168.168.2 p=0 i=11 t=4 pr=3 a=172384 h=0 m=10/0/0/0/0
10.1.1.1 255.255.255.255 10.1.1.17 p=0 i=11 t=4 pr=3 a=0 h=0 m=11/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=172407 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=172407 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=172407 h=0 m=306/0/0/0/0
169.254.0.0 255.255.0.0 169.254.40.33 p=0 i=22 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
169.254.40.33 255.255.255.255 169.254.40.33 p=0 i=22 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
169.254.255.255 255.255.255.255 169.254.40.33 p=0 i=22 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
192.168.56.0 255.255.255.0 192.168.56.1 p=0 i=27 t=3 pr=3 a=172391 h=0 m=276/0/0/0/0
192.168.56.1 255.255.255.255 192.168.56.1 p=0 i=27 t=3 pr=3 a=172391 h=0 m=276/0/0/0/0
192.168.56.255 255.255.255.255 192.168.56.1 p=0 i=27 t=3 pr=3 a=172391 h=0 m=276/0/0/0/0
192.168.161.0 255.255.255.128 10.1.1.17 p=0 i=11 t=4 pr=3 a=0 h=0 m=11/0/0/0/0
192.168.161.128 255.255.255.128 10.1.1.17 p=0 i=11 t=4 pr=3 a=0 h=0 m=11/0/0/0/0
192.168.168.0 255.255.255.0 192.168.168.97 p=0 i=11 t=3 pr=3 a=172384 h=0 m=266/0/0/0/0
192.168.168.97 255.255.255.255 192.168.168.97 p=0 i=11 t=3 pr=3 a=172384 h=0 m=266/0/0/0/0
192.168.168.255 255.255.255.255 192.168.168.97 p=0 i=11 t=3 pr=3 a=172384 h=0 m=266/0/0/0/0
192.168.242.0 255.255.255.0 192.168.168.1 p=0 i=11 t=4 pr=3 a=172384 h=0 m=11/0/0/0/0
192.168.243.0 255.255.255.0 192.168.168.1 p=0 i=11 t=4 pr=3 a=172384 h=0 m=11/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=172407 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 192.168.56.1 p=0 i=27 t=3 pr=3 a=172395 h=0 m=276/0/0/0/0
224.0.0.0 240.0.0.0 169.254.40.33 p=0 i=22 t=3 pr=3 a=172395 h=0 m=286/0/0/0/0
224.0.0.0 240.0.0.0 192.168.168.97 p=0 i=11 t=3 pr=3 a=172394 h=0 m=266/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=172407 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 192.168.56.1 p=0 i=27 t=3 pr=3 a=172395 h=0 m=276/0/0/0/0
255.255.255.255 255.255.255.255 169.254.40.33 p=0 i=22 t=3 pr=3 a=172395 h=0 m=286/0/0/0/0
255.255.255.255 255.255.255.255 192.168.168.97 p=0 i=11 t=3 pr=3 a=172394 h=0 m=266/0/0/0/0
SYSTEM ADAPTER LIST
TAP-Win32 Adapter V9 #2
Index = 29
GUID = {A3C3A102-AC60-4456-9A38-7AA176AD9752}
IP = 0.0.0.0/0.0.0.0
MAC = 00:ff:a3:c3:a1:02
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV =
DHCP LEASE OBTAINED = Fri Feb 08 09:09:28 2013
DHCP LEASE EXPIRES = Sun Dec 27 09:54:20 1970
DNS SERV =
TAP-Win32 Adapter V9
Index = 22
GUID = {DFE205FF-4BE3-4DF2-9227-9D686966D5FF}
IP = 169.254.40.33/255.255.0.0
MAC = 00:ff:df:e2:05:ff
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV = 0.0.0.0/255.255.255.255
DHCP LEASE OBTAINED = Fri Feb 08 09:09:28 2013
DHCP LEASE EXPIRES = Sun Dec 27 10:05:00 1970
DNS SERV =
Intel(R) 82579LM Gigabit Network Connection
Index = 11
GUID = {9CB31843-FB4C-412E-9899-083EE90E2BFC}
IP = 192.168.168.97/255.255.255.0
MAC = 78:2b:cb:ae:0f:70
GATEWAY = 192.168.168.2/255.255.255.255
DHCP SERV = 192.168.168.11/255.255.255.255
DHCP LEASE OBTAINED = Wed Feb 06 09:16:23 2013
DHCP LEASE EXPIRES = Thu Jan 01 00:00:00 1970
DNS SERV = 192.168.168.4/255.255.255.255 192.168.168.20/255.255.255.255
VirtualBox Host-Only Ethernet Adapter
Index = 27
GUID = {9D4B8EE6-C166-4B00-896C-D2F2CCEE2BBE}
IP = 192.168.56.1/255.255.255.0
MAC = 08:00:27:00:0c:a2
GATEWAY = 0.0.0.0/255.255.255.255
DNS SERV =
Fri Feb 08 09:09:28 2013 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )

[maikcat]

are you running the gui with admin rights?

also try using

route-method exe

for testing...

Michael.

[sidharthnayyar]

Hi Michael,

I've tried it with admin rights but to no avail. Same error as before.

Um sorry, where is this route-method.exe?

Kind regards
Sidharth

[maikcat]

Um sorry, where is this route-method.exe?

this is openvpn directive,add to your config

route-method exe

Michael.

[sidharthnayyar]

Hi,

I seem to be getting a lot less issues now by doing both those things. But I do intermittently get them - just had it today (openvpn saying connected okay but can't RDP) and here's the log:

Mon Feb 25 12:00:42 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Mon Feb 25 12:00:42 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Feb 25 12:00:42 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Feb 25 12:00:45 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Feb 25 12:00:45 2013 Control Channel Authentication: using 'C:\Program Files (x86)\OpenVPN\config-FISS-PROD\key.txt' as a OpenVPN static key file
Mon Feb 25 12:00:45 2013 LZO compression initialized
Mon Feb 25 12:00:45 2013 UDPv4 link local: [undef]
Mon Feb 25 12:00:45 2013 UDPv4 link remote: 213.129.79.251:1194
Mon Feb 25 12:00:46 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1500'
Mon Feb 25 12:00:46 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1458'
Mon Feb 25 12:00:46 2013 [mid-fw-carp.ukp.hosted-at.thebunker.net] Peer Connection Initiated with 213.129.79.251:1194
Mon Feb 25 12:00:49 2013 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{DFE205FF-4BE3-4DF2-9227-9D686966D5FF}.tap
Mon Feb 25 12:00:49 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.1.1.18/255.255.255.252 on interface {DFE205FF-4BE3-4DF2-9227-9D686966D5FF} [DHCP-serv: 10.1.1.17, lease-time: 31536000]
Mon Feb 25 12:00:49 2013 Successful ARP Flush on interface [22] {DFE205FF-4BE3-4DF2-9227-9D686966D5FF}
OK!
OK!
OK!
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 192.168.168.2 p=0 i=11 t=4 pr=3 a=609955 h=0 m=10/0/0/0/0
10.1.1.1 255.255.255.255 10.1.1.17 p=0 i=11 t=4 pr=3 a=0 h=0 m=11/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=609993 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=609993 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=609993 h=0 m=306/0/0/0/0
169.254.0.0 255.255.0.0 169.254.40.33 p=0 i=22 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
169.254.40.33 255.255.255.255 169.254.40.33 p=0 i=22 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
169.254.255.255 255.255.255.255 169.254.40.33 p=0 i=22 t=3 pr=3 a=25 h=0 m=286/0/0/0/0
192.168.56.0 255.255.255.0 192.168.56.1 p=0 i=27 t=3 pr=3 a=609971 h=0 m=276/0/0/0/0
192.168.56.1 255.255.255.255 192.168.56.1 p=0 i=27 t=3 pr=3 a=609971 h=0 m=276/0/0/0/0
192.168.56.255 255.255.255.255 192.168.56.1 p=0 i=27 t=3 pr=3 a=609971 h=0 m=276/0/0/0/0
192.168.161.0 255.255.255.128 10.1.1.17 p=0 i=11 t=4 pr=3 a=0 h=0 m=11/0/0/0/0
192.168.161.128 255.255.255.128 10.1.1.17 p=0 i=11 t=4 pr=3 a=0 h=0 m=11/0/0/0/0
192.168.168.0 255.255.255.0 192.168.168.97 p=0 i=11 t=3 pr=3 a=609955 h=0 m=266/0/0/0/0
192.168.168.97 255.255.255.255 192.168.168.97 p=0 i=11 t=3 pr=3 a=609955 h=0 m=266/0/0/0/0
192.168.168.255 255.255.255.255 192.168.168.97 p=0 i=11 t=3 pr=3 a=609955 h=0 m=266/0/0/0/0
192.168.242.0 255.255.255.0 192.168.168.1 p=0 i=11 t=4 pr=3 a=609955 h=0 m=11/0/0/0/0
192.168.243.0 255.255.255.0 192.168.168.1 p=0 i=11 t=4 pr=3 a=609955 h=0 m=11/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=609993 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 169.254.40.33 p=0 i=22 t=3 pr=3 a=609975 h=0 m=286/0/0/0/0
224.0.0.0 240.0.0.0 192.168.56.1 p=0 i=27 t=3 pr=3 a=609975 h=0 m=276/0/0/0/0
224.0.0.0 240.0.0.0 192.168.168.97 p=0 i=11 t=3 pr=3 a=609975 h=0 m=266/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=609993 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 169.254.40.33 p=0 i=22 t=3 pr=3 a=609975 h=0 m=286/0/0/0/0
255.255.255.255 255.255.255.255 192.168.56.1 p=0 i=27 t=3 pr=3 a=609975 h=0 m=276/0/0/0/0
255.255.255.255 255.255.255.255 192.168.168.97 p=0 i=11 t=3 pr=3 a=609975 h=0 m=266/0/0/0/0
SYSTEM ADAPTER LIST
TAP-Win32 Adapter V9 #2
Index = 29
GUID = {A3C3A102-AC60-4456-9A38-7AA176AD9752}
IP = 0.0.0.0/0.0.0.0
MAC = 00:ff:a3:c3:a1:02
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV =
DHCP LEASE OBTAINED = Mon Feb 25 12:01:24 2013
DHCP LEASE EXPIRES = Wed Feb 24 22:17:24 1971
DNS SERV =
TAP-Win32 Adapter V9
Index = 22
GUID = {DFE205FF-4BE3-4DF2-9227-9D686966D5FF}
IP = 169.254.40.33/255.255.0.0
MAC = 00:ff:df:e2:05:ff
GATEWAY = 0.0.0.0/255.255.255.255
DHCP SERV = 0.0.0.0/255.255.255.255
DHCP LEASE OBTAINED = Mon Feb 25 12:01:24 2013
DHCP LEASE EXPIRES = Wed Feb 24 22:28:04 1971
DNS SERV =
Intel(R) 82579LM Gigabit Network Connection
Index = 11
GUID = {9CB31843-FB4C-412E-9899-083EE90E2BFC}
IP = 192.168.168.97/255.255.255.0
MAC = 78:2b:cb:ae:0f:70
GATEWAY = 192.168.168.2/255.255.255.255
DHCP SERV = 192.168.168.11/255.255.255.255
DHCP LEASE OBTAINED = Fri Feb 22 10:35:24 2013
DHCP LEASE EXPIRES = Thu Jan 01 00:00:00 1970
DNS SERV = 192.168.168.4/255.255.255.255 192.168.168.20/255.255.255.255
VirtualBox Host-Only Ethernet Adapter
Index = 27
GUID = {9D4B8EE6-C166-4B00-896C-D2F2CCEE2BBE}
IP = 192.168.56.1/255.255.255.0
MAC = 08:00:27:00:0c:a2
GATEWAY = 0.0.0.0/255.255.255.255
DNS SERV =
Mon Feb 25 12:01:24 2013 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )


Kind regards
Sidharth

[maikcat]

Code: Select all

Mon Feb 25 12:00:46 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1500'
Mon Feb 25 12:00:46 2013 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1458'

can you repost your configs used?

please post them using "code" tag...

Michael.

[sidharthnayyar]

Hi,

Here you go:

Code: Select all

client
dev tun
remote 213.129.79.251 1194
nobind
persist-key
persist-tun
route-method exe

ca Apacs-VPN-NEW-CA-cacert.pem

cert C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-PROD\\sidharth.nayyar@pulsion.co.uk-cert.pem
key C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-PROD\\sidharth.nayyar@pulsion.co.uk-key.pem
tls-auth C:\\Program\ Files\ (x86)\\OpenVPN\\config-FISS-PROD\\key.txt 1

comp-lzo

verb 1

Kind regards
Sidharth

[aviden]

2 all: problem using multiple TAP devices with OpenVPN is in order of their initialization and in fact that Windows remembers last used IP address for every adapter (even currently inactive) and also in that fact that no two adapters (even inactive!) can have same IP address at same time.

For example, you have 2 TAP devices. You establish first session, getting IP 10.0.0.10, and then second, with IP 10.0.2.1.
Now close both sessions. Virtual TAP adapters in "Network connections" folder become inactive, BUT they still have assigned their IP's somehow, despite the fact that in Connection Info dialog you see that is has no any IP address assigned. Let's call this "hidden address" (sorry for inventing new terms). Now if you try to establish second connection again (which would give you address 10.0.2.1), it'll try yo use first unused adapter, i.e. one with "hidden IP" 10.0.0.10. Connection will be almost successfully initiated, but it's new IP will conflict with same "hidden IP" of second adapter!

To work this around you can disable second adapter in "Network connections" folder prior to connecting again, this will eliminate IP conflict. You can enable it and use in another session afterwards.

And yes, this behavior become extremely annoying when you use more TAP adapter (I use four, for example). Currently I don't know what to do with this except the above workaround. Hope this helps.

[aviden]

debbie10t,

Which log is this .. client or server ?

Have you looked at the log (and config) itself? That is definitely client one, this should be clear...