Hi all,
I can't get the OpenVPN to work properly anymore. Does anyone see the mistake or know the trick to get it to work?
RUTX10 - OpenVPN Server Config
- See screenshot
- RUTX10 DHCP enabled and is working for local connections (wired and wireless). Internet connection also works.
- Router IP: 192.168.14.254
OpenVPN - Client - Config
- Windows 10
- OpenVPN 2.5.3 (Community download)
.OVPN Client Config file:
client
dev tap
dev-node MyTap
proto udp
remote 5.206.212.114 1194
resolv-retry infinite
nobind
persist-key
;persist-tun
ca ca.crt
cert opa.crt
key opa.key
remote-cert-tls server
cipher AES-256-CBC
verb 3
Client LOG file
2021-07-29 14:48:04 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-07-29 14:48:04 OpenVPN 2.5.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 17 2021
2021-07-29 14:48:04 Windows version 10.0 (Windows 10 or greater) 64bit
2021-07-29 14:48:04 library versions: OpenSSL 1.1.1k 25 Mar 2021, LZO 2.10
Enter Management Password:
2021-07-29 14:48:04 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
2021-07-29 14:48:04 Need hold release from management interface, waiting...
2021-07-29 14:48:05 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
2021-07-29 14:48:05 MANAGEMENT: CMD 'state on'
2021-07-29 14:48:05 MANAGEMENT: CMD 'log all on'
2021-07-29 14:48:05 MANAGEMENT: CMD 'echo all on'
2021-07-29 14:48:05 MANAGEMENT: CMD 'bytecount 5'
2021-07-29 14:48:05 MANAGEMENT: CMD 'hold off'
2021-07-29 14:48:05 MANAGEMENT: CMD 'hold release'
2021-07-29 14:48:05 TCP/UDP: Preserving recently used remote address: [AF_INET]5.206.212.114:1194
2021-07-29 14:48:05 Socket Buffers: R=[65536->65536] S=[65536->65536]
2021-07-29 14:48:05 UDP link local: (not bound)
2021-07-29 14:48:05 UDP link remote: [AF_INET]5.206.212.114:1194
2021-07-29 14:48:05 MANAGEMENT: >STATE:1627562885,WAIT,,,,,,
2021-07-29 14:48:05 MANAGEMENT: >STATE:1627562885,AUTH,,,,,,
2021-07-29 14:48:05 TLS: Initial packet from [AF_INET]5.206.212.114:1194, sid=a548adfc ae1986ff
2021-07-29 14:48:05 VERIFY OK: depth=1, CN=server
2021-07-29 14:48:05 VERIFY KU OK
2021-07-29 14:48:05 Validating certificate extended key usage
2021-07-29 14:48:05 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-07-29 14:48:05 VERIFY EKU OK
2021-07-29 14:48:05 VERIFY OK: depth=0, CN=server
2021-07-29 14:48:05 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-07-29 14:48:05 [server] Peer Connection Initiated with [AF_INET]5.206.212.114:1194
2021-07-29 14:48:05 PUSH: Received control message: 'PUSH_REPLY,route 192.168.14.0 255.255.255.0,ping 10,ping-restart 120,peer-id 0,cipher AES-256-GCM'
2021-07-29 14:48:05 OPTIONS IMPORT: timers and/or timeouts modified
2021-07-29 14:48:05 OPTIONS IMPORT: route options modified
2021-07-29 14:48:05 OPTIONS IMPORT: peer-id set
2021-07-29 14:48:05 OPTIONS IMPORT: adjusting link_mtu to 1656
2021-07-29 14:48:05 OPTIONS IMPORT: data channel crypto options modified
2021-07-29 14:48:05 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-07-29 14:48:05 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-07-29 14:48:05 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-07-29 14:48:05 interactive service msg_channel=572
2021-07-29 14:48:05 ROUTE_GATEWAY 192.168.30.254/255.255.255.0 I=10 HWADDR=3c:a9:f4:b3:35:d4
2021-07-29 14:48:05 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
2021-07-29 14:48:05 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.14.0
2021-07-29 14:48:05 open_tun
2021-07-29 14:48:05 tap-windows6 device [MyTap] opened
2021-07-29 14:48:05 TAP-Windows Driver Version 9.24
2021-07-29 14:48:05 Successful ARP Flush on interface [12] {5D1C80BC-5199-43F9-A8F6-F6F929E19591}
2021-07-29 14:48:05 MANAGEMENT: >STATE:1627562885,ASSIGN_IP,,,,,,
2021-07-29 14:48:10 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up
2021-07-29 14:48:10 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2021-07-29 14:48:10 Initialization Sequence Completed
2021-07-29 14:48:10 MANAGEMENT: >STATE:1627562890,CONNECTED,SUCCESS,,5.206.212.114,1194,,
2021-07-29 14:48:21 Closing TUN/TAP interface
2021-07-29 14:48:21 TAP: DHCP address released
2021-07-29 14:48:21 SIGTERM[hard,] received, process exiting
2021-07-29 14:48:21 MANAGEMENT: >STATE:1627562901,EXITING,SIGTERM,,,,,
Notes
- VPN is able to connnect.
- The client receives a correct IP: 192.168.14.188 (see screenshot)
- Client is not able to ping to local lan of VPN server (192.168.14.254)
- Print route on client (see screenshot)
Thank you.
Olivier
