1

Issues:

  • Unable to ping internal network
  • Client sometimes gets DHCP address
  • Errors in logfile

    Sun Feb 19 12:49:17 2017 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.0.0

    Sun Feb 19 12:49:17 2017 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options

Server Settings

Server Mode: Remote Access (SSL/TLS)
Protocol: UDP
Device Mode: TAP
Interface: WAN
Local port: 1194
Description: *************

Crypto Settings:

TLS Authentication: Check both check boxes
Peer Certificate Authority: Use the CA we created ealier
Peer Revoke List: 
Server Certificate: Mobile
DH Paramters Length: 2048
Encryption Algorithm: AES-256-CBC
Hardware Crypto: No
Cert Depth: One

tunnel Settings
Tunnel Network: Blank
Bridge DHCP: Checked
Bridge Interface: LAN
Server DHCP Start/Stop: Blank
Redirect Gateway: Unchecked
Concurrent Connections: self explanatory
Compression: checked
TOS: unchecked
Inter-client communication: Checked
Duplicate connections: Blank

Custom options: push "route 192.168.0.0 255.255.255.0"

Client Config:

dev tap
persist-tun
persist-key
cipher AES-256-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote FQDN 1194 udp
verify-x509-name "Mobile Users Certificate" name
pkcs12 firewall-udp-1194-[UserName].p12
tls-auth firewall-udp-1194-[UserName]-tls.key 1
ns-cert-type server
comp-lzo adaptive

Log file from use with issue

Sun Feb 19 12:49:14 2017 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Sun Feb 19 12:49:14 2017 Windows version 6.1 (Windows 7) 64bit
Sun Feb 19 12:49:14 2017 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Enter Management Password:
Sun Feb 19 12:49:15 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]66.27.79.183:1194
Sun Feb 19 12:49:15 2017 UDP link local (bound): [AF_INET][undef]:1194
Sun Feb 19 12:49:15 2017 UDP link remote: [AF_INET][IP]:1194
Sun Feb 19 12:49:16 2017 [Mobile Users Certificate] Peer Connection Initiated with [AF_INET]66.27.79.183:1194
Sun Feb 19 12:49:17 2017 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Sun Feb 19 12:49:17 2017 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.0.0
Sun Feb 19 12:49:17 2017 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Sun Feb 19 12:49:17 2017 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.0.1
Sun Feb 19 12:49:17 2017 open_tun
Sun Feb 19 12:49:17 2017 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{024DC9A5-CA6C-4D7A-BB5F-0FCF63C5F246}.tap
Sun Feb 19 12:49:17 2017 Successful ARP Flush on interface [18] {024DC9A5-CA6C-4D7A-BB5F-0FCF63C5F246}
Sun Feb 19 12:49:22 2017 Initialization Sequence Completed
Sun Feb 19 12:49:22 2017 Register_dns request sent to the service

Sometimes the client get a local IP and sometimes it does not get one...

  • Why aren't you specifying a tunnel network? Are you expecting to tunnel the LAN subnet? – Linuxx Feb 19 '17 at 21:56
  • The directions here: forum.pfsense.org/index.php?topic=46984.0 say not to bc itsa tap network – exilepc Feb 19 '17 at 22:04
  • I see it now, I missed it before. I've never configured tap. did you try tun and see if everything works? – Linuxx Feb 19 '17 at 23:07
  • I my computer it works, I takes a few seconds (like a minute to get an ip) – exilepc Feb 20 '17 at 1:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.