Please help!
I had OpenVPN configured and working on a server 2012 with windows clients. After a restart I can't ping 10.8.0.1 anymore - neither on client nor server.
It's unlikely that config's been changed. What MAY have changed is the IP's of the client. I think they used to be .4 and .8 (as in ipp.txt). Now they're .6 and .10 but I can't get them back. It could be that they really were .6 and .10 when everything was working also.
One more thing MAY be different on the server log file, compared to an old saved log file that I know worked:
Thu Aug 11 15:14:22 2016 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Thu Aug 11 15:14:22 2016 Warning: route gateway is not reachable on any active network adapters: 10.8.0.2
Thu Aug 11 15:14:22 2016 Route addition via IPAPI failed [adaptive]
Thu Aug 11 15:14:22 2016 Route addition fallback to route.exe
OK!
That used to be:
Fri May 27 18:16:54 2016 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Fri May 27 18:16:54 2016 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 27 18:16:54 2016 Route addition via IPAPI succeeded [adaptive]
The route is there though, according to route print
.
As I said, I can't be absolutely sure any of these clues have anything to do with it.
Thank you!
Edit:
I've never had this in my config before:
route-method exe
route-delay 2
But I tried it following the advice of @cormpadre. The log now shows
Thu Aug 11 15:56:48 2016 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
OK!
but still no ping.
Edit 2 - Experiments with Wireshark
Got wireshark listening on both client and server, on VPN adapters and LAN/internet adapters while pinging.
Client pings 10.8.0.1.
ICMP packets on client VPN adapter. No response.
UPD packets on client LAN adapter. Getting responses.
UPD packets on server LAN adapter. Sending responses.
No packets on server VPN adapter.
Server pings 10.8.0.6 and 10.8.0.1.
I deem only control packets on server LAN adapter. These are sent regardless and ping packets tend to be 101 bytes when they're UDP-wrapped.
Nothing on the server VPN adapter. Ever. Flat line.
Edit 3
Found out how to tune Wireshark to OpenVPN packets. Those UDP packets turned out to P_DATA_V1 types. The control packets seem to be ignored.