Hi Jan,
The VPN tunnel is established successfully and connectivity is possible
through the tunnel, except the link-mtu warning.
Attached the client log.
Thanx,
Alex
On Wed, Sep 20, 2017 at 12:25 PM, Jan Just Keijser <[email protected]>
wrote:
> Hi Alex,
>
> On 18/09/17 18:53, Alex K wrote:
>
> Hi Jan,
>
> Yes, I use ncp-disable on client side so as to be able to have per client
> cipher negotiation.
> How can one have ncp-disable and avoid link MTU issues?
>
>
> I must say that I have not tried the per-client cipher patch yet, but I
> can imagine at which point it might cause problems. Of course, a per-client
> cipher would never have worked with OpenVPN < 2.4, so I am not surprised
> that you did not see it in the past.
> Can you post/mail the client-side log file of a failing connection?
>
> cheers,
>
> JJK
>
>
> On Mon, Sep 18, 2017 at 7:43 PM, Jan Just Keijser <[email protected]>
> wrote:
>
>> Hi Alex,
>>
>> On 15/09/17 18:54, Alex K wrote:
>>
>> Hi all,
>>
>> I am receiving the below warning on server and client side when setting
>> up the tunnel:
>>
>> server:
>> Fri Sep 15 16:45:14 2017 172.30.0.180:44304 WARNING: 'link-mtu' is used
>> inconsistently, local='link-mtu 1562', remote='link-mtu 1530'
>>
>> client:
>> Fri Sep 15 16:45:14 2017 us=87436 WARNING: 'link-mtu' is used
>> inconsistently, local='link-mtu 1530', remote='link-mtu 1562'
>>
>> and further down on client side:
>> Fri Sep 15 16:45:15 2017 us=282768 OPTIONS IMPORT: adjusting link_mtu to
>> 1629
>>
>>
>> I have on server side:
>> tun-mtu 1500
>> fragment 1360
>> mssfix
>>
>>
>> and on client side exactly the same:
>> tun-mtu 1500
>> fragment 1360
>> mssfix
>>
>> The tun interfaces on both sides show as 1500 with ifconfig.
>>
>> Why is this case? I cannot recall seeing such warning on openvpn 2.2.1-8.
>> I can provide more details if needed.
>>
>>
>> the link-mtu size also depends on the cipher and auth used ; are you
>> using NCP at all (i.e. do you explicitly specify 'disable-ncp' ?) A log
>> file of a failing client with 'verb 4' set would help.
>>
>> HTH,
>>
>> JJK
>>
>>
>
>
Wed Sep 20 09:45:32 2017 us=904954 Current Parameter Settings:
Wed Sep 20 09:45:32 2017 us=905032 config = '/etc/openvpn/fbb0.conf'
Wed Sep 20 09:45:32 2017 us=905045 mode = 0
Wed Sep 20 09:45:32 2017 us=905056 persist_config = DISABLED
Wed Sep 20 09:45:32 2017 us=905066 persist_mode = 1
Wed Sep 20 09:45:32 2017 us=905075 show_ciphers = DISABLED
Wed Sep 20 09:45:32 2017 us=905085 show_digests = DISABLED
Wed Sep 20 09:45:32 2017 us=905095 show_engines = DISABLED
Wed Sep 20 09:45:32 2017 us=905104 genkey = DISABLED
Wed Sep 20 09:45:32 2017 us=905114 key_pass_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905124 show_tls_ciphers = DISABLED
Wed Sep 20 09:45:32 2017 us=905133 connect_retry_max = 0
Wed Sep 20 09:45:32 2017 us=905143 Connection profiles [0]:
Wed Sep 20 09:45:32 2017 us=905153 proto = udp
Wed Sep 20 09:45:32 2017 us=905163 local = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905173 local_port = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905183 remote = '172.30.0.228'
Wed Sep 20 09:45:32 2017 us=905193 remote_port = '1194'
Wed Sep 20 09:45:32 2017 us=905202 remote_float = DISABLED
Wed Sep 20 09:45:32 2017 us=905212 bind_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=905221 bind_local = DISABLED
Wed Sep 20 09:45:32 2017 us=905231 bind_ipv6_only = DISABLED
Wed Sep 20 09:45:32 2017 us=905241 connect_retry_seconds = 5
Wed Sep 20 09:45:32 2017 us=905250 connect_timeout = 120
Wed Sep 20 09:45:32 2017 us=905260 socks_proxy_server = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905270 socks_proxy_port = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905279 tun_mtu = 1500
Wed Sep 20 09:45:32 2017 us=905289 tun_mtu_defined = ENABLED
Wed Sep 20 09:45:32 2017 us=905299 link_mtu = 1500
Wed Sep 20 09:45:32 2017 us=905308 link_mtu_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=905318 tun_mtu_extra = 0
Wed Sep 20 09:45:32 2017 us=905328 tun_mtu_extra_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=905337 mtu_discover_type = -1
Wed Sep 20 09:45:32 2017 us=905347 fragment = 1360
Wed Sep 20 09:45:32 2017 us=905356 mssfix = 1360
Wed Sep 20 09:45:32 2017 us=905366 explicit_exit_notification = 0
Wed Sep 20 09:45:32 2017 us=905376 Connection profiles END
Wed Sep 20 09:45:32 2017 us=905385 remote_random = DISABLED
Wed Sep 20 09:45:32 2017 us=905395 ipchange = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905405 dev = 'tun1'
Wed Sep 20 09:45:32 2017 us=905418 dev_type = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905428 dev_node = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905438 lladdr = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905447 topology = 1
Wed Sep 20 09:45:32 2017 us=905457 ifconfig_local = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905467 ifconfig_remote_netmask = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905477 ifconfig_noexec = DISABLED
Wed Sep 20 09:45:32 2017 us=905486 ifconfig_nowarn = DISABLED
Wed Sep 20 09:45:32 2017 us=905496 ifconfig_ipv6_local = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905505 ifconfig_ipv6_netbits = 0
Wed Sep 20 09:45:32 2017 us=905515 ifconfig_ipv6_remote = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905525 shaper = 0
Wed Sep 20 09:45:32 2017 us=905534 mtu_test = 0
Wed Sep 20 09:45:32 2017 us=905544 mlock = DISABLED
Wed Sep 20 09:45:32 2017 us=905553 keepalive_ping = 0
Wed Sep 20 09:45:32 2017 us=905563 keepalive_timeout = 0
Wed Sep 20 09:45:32 2017 us=905573 inactivity_timeout = 0
Wed Sep 20 09:45:32 2017 us=905582 ping_send_timeout = 0
Wed Sep 20 09:45:32 2017 us=905592 ping_rec_timeout = 0
Wed Sep 20 09:45:32 2017 us=905614 ping_rec_timeout_action = 0
Wed Sep 20 09:45:32 2017 us=905624 ping_timer_remote = DISABLED
Wed Sep 20 09:45:32 2017 us=905634 remap_sigusr1 = 0
Wed Sep 20 09:45:32 2017 us=905644 persist_tun = ENABLED
Wed Sep 20 09:45:32 2017 us=905654 persist_local_ip = DISABLED
Wed Sep 20 09:45:32 2017 us=905663 persist_remote_ip = DISABLED
Wed Sep 20 09:45:32 2017 us=905673 persist_key = ENABLED
Wed Sep 20 09:45:32 2017 us=905682 passtos = ENABLED
Wed Sep 20 09:45:32 2017 us=905692 resolve_retry_seconds = 1000000000
Wed Sep 20 09:45:32 2017 us=905702 resolve_in_advance = DISABLED
Wed Sep 20 09:45:32 2017 us=905727 username = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905739 groupname = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905748 chroot_dir = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=905758 cd_dir = '/etc/openvpn'
Wed Sep 20 09:45:32 2017 us=905768 writepid = '/var/run/openvpn.fbb0.pid'
Wed Sep 20 09:45:32 2017 us=905778 up_script = '/usr/bin/vpn_up_down'
Wed Sep 20 09:45:32 2017 us=905788 down_script = '/usr/bin/vpn_up_down'
Wed Sep 20 09:45:32 2017 us=905798 down_pre = DISABLED
Wed Sep 20 09:45:32 2017 us=905807 up_restart = ENABLED
Wed Sep 20 09:45:32 2017 us=905817 up_delay = DISABLED
Wed Sep 20 09:45:32 2017 us=905826 daemon = ENABLED
Wed Sep 20 09:45:32 2017 us=905836 inetd = 0
Wed Sep 20 09:45:32 2017 us=905846 log = ENABLED
Wed Sep 20 09:45:32 2017 us=905856 suppress_timestamps = DISABLED
Wed Sep 20 09:45:32 2017 us=905866 machine_readable_output = DISABLED
Wed Sep 20 09:45:32 2017 us=905875 nice = 0
Wed Sep 20 09:45:32 2017 us=905885 verbosity = 4
Wed Sep 20 09:45:32 2017 us=905895 mute = 0
Wed Sep 20 09:45:32 2017 us=905905 status_file = '/var/run/openvpn.fbb0.status'
Wed Sep 20 09:45:32 2017 us=905937 status_file_version = 1
Wed Sep 20 09:45:32 2017 us=905948 status_file_update_freq = 10
Wed Sep 20 09:45:32 2017 us=905958 occ = ENABLED
Wed Sep 20 09:45:32 2017 us=905967 rcvbuf = 0
Wed Sep 20 09:45:32 2017 us=905977 sndbuf = 0
Wed Sep 20 09:45:32 2017 us=905987 mark = 0
Wed Sep 20 09:45:32 2017 us=905996 sockflags = 0
Wed Sep 20 09:45:32 2017 us=906007 fast_io = DISABLED
Wed Sep 20 09:45:32 2017 us=906017 comp.alg = 4
Wed Sep 20 09:45:32 2017 us=906027 comp.flags = 4
Wed Sep 20 09:45:32 2017 us=906037 route_script = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906047 route_default_gateway = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906063 route_default_metric = 0
Wed Sep 20 09:45:32 2017 us=906075 route_noexec = DISABLED
Wed Sep 20 09:45:32 2017 us=906085 route_delay = 0
Wed Sep 20 09:45:32 2017 us=906095 route_delay_window = 30
Wed Sep 20 09:45:32 2017 us=906105 route_delay_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=906114 route_nopull = DISABLED
Wed Sep 20 09:45:32 2017 us=906125 route_gateway_via_dhcp = DISABLED
Wed Sep 20 09:45:32 2017 us=906134 allow_pull_fqdn = DISABLED
Wed Sep 20 09:45:32 2017 us=906145 management_addr = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906170 management_port = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906181 management_user_pass = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906191 management_log_history_cache = 250
Wed Sep 20 09:45:32 2017 us=906201 management_echo_buffer_size = 100
Wed Sep 20 09:45:32 2017 us=906211 management_write_peer_info_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906221 management_client_user = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906232 management_client_group = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906242 management_flags = 0
Wed Sep 20 09:45:32 2017 us=906251 shared_secret_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906261 key_direction = 2
Wed Sep 20 09:45:32 2017 us=906271 ciphername = 'none'
Wed Sep 20 09:45:32 2017 us=906281 ncp_enabled = DISABLED
Wed Sep 20 09:45:32 2017 us=906291 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed Sep 20 09:45:32 2017 us=906301 authname = 'SHA1'
Wed Sep 20 09:45:32 2017 us=906311 prng_hash = 'SHA1'
Wed Sep 20 09:45:32 2017 us=906321 prng_nonce_secret_len = 16
Wed Sep 20 09:45:32 2017 us=906331 keysize = 0
Wed Sep 20 09:45:32 2017 us=906341 engine = DISABLED
Wed Sep 20 09:45:32 2017 us=906351 replay = ENABLED
Wed Sep 20 09:45:32 2017 us=906361 mute_replay_warnings = DISABLED
Wed Sep 20 09:45:32 2017 us=906371 replay_window = 64
Wed Sep 20 09:45:32 2017 us=906381 replay_time = 15
Wed Sep 20 09:45:32 2017 us=906390 packet_id_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906400 use_iv = ENABLED
Wed Sep 20 09:45:32 2017 us=906410 test_crypto = DISABLED
Wed Sep 20 09:45:32 2017 us=906420 tls_server = DISABLED
Wed Sep 20 09:45:32 2017 us=906430 tls_client = ENABLED
Wed Sep 20 09:45:32 2017 us=906456 key_method = 2
Wed Sep 20 09:45:32 2017 us=906468 ca_file = 'keys/ca.crt'
Wed Sep 20 09:45:32 2017 us=906478 ca_path = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906487 dh_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906497 cert_file = 'keys/Gateway-VM.crt'
Wed Sep 20 09:45:32 2017 us=906507 extra_certs_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906517 priv_key_file = 'keys/Gateway-VM.key'
Wed Sep 20 09:45:32 2017 us=906527 pkcs12_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906537 cipher_list = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906547 tls_verify = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906556 tls_export_cert = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906566 verify_x509_type = 0
Wed Sep 20 09:45:32 2017 us=906576 verify_x509_name = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906586 crl_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906595 ns_cert_type = 1
Wed Sep 20 09:45:32 2017 us=906617 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906627 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906636 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906646 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906656 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906666 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906675 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906685 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906695 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906704 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906714 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906724 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906733 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906743 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906753 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906762 remote_cert_ku[i] = 0
Wed Sep 20 09:45:32 2017 us=906772 remote_cert_eku = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906782 ssl_flags = 0
Wed Sep 20 09:45:32 2017 us=906791 tls_timeout = 2
Wed Sep 20 09:45:32 2017 us=906801 renegotiate_bytes = -1
Wed Sep 20 09:45:32 2017 us=906811 renegotiate_packets = 0
Wed Sep 20 09:45:32 2017 us=906821 renegotiate_seconds = 0
Wed Sep 20 09:45:32 2017 us=906830 handshake_window = 60
Wed Sep 20 09:45:32 2017 us=906840 transition_window = 3600
Wed Sep 20 09:45:32 2017 us=906850 single_session = DISABLED
Wed Sep 20 09:45:32 2017 us=906860 push_peer_info = DISABLED
Wed Sep 20 09:45:32 2017 us=906869 tls_exit = DISABLED
Wed Sep 20 09:45:32 2017 us=906879 tls_auth_file = 'keys/ta.key'
Wed Sep 20 09:45:32 2017 us=906889 tls_crypt_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=906909 server_network = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=906920 server_netmask = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=906934 server_network_ipv6 = ::
Wed Sep 20 09:45:32 2017 us=906944 server_netbits_ipv6 = 0
Wed Sep 20 09:45:32 2017 us=906955 server_bridge_ip = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=906966 server_bridge_netmask = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=906976 server_bridge_pool_start = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=906987 server_bridge_pool_end = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=906997 ifconfig_pool_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=907011 ifconfig_pool_start = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=907023 ifconfig_pool_end = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=907034 ifconfig_pool_netmask = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=907044 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907054 ifconfig_pool_persist_refresh_freq = 600
Wed Sep 20 09:45:32 2017 us=907064 ifconfig_ipv6_pool_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=907075 ifconfig_ipv6_pool_base = ::
Wed Sep 20 09:45:32 2017 us=907085 ifconfig_ipv6_pool_netbits = 0
Wed Sep 20 09:45:32 2017 us=907095 n_bcast_buf = 256
Wed Sep 20 09:45:32 2017 us=907105 tcp_queue_limit = 64
Wed Sep 20 09:45:32 2017 us=907115 real_hash_size = 256
Wed Sep 20 09:45:32 2017 us=907125 virtual_hash_size = 256
Wed Sep 20 09:45:32 2017 us=907135 client_connect_script = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907151 learn_address_script = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907162 client_disconnect_script = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907172 client_config_dir = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907182 ccd_exclusive = DISABLED
Wed Sep 20 09:45:32 2017 us=907191 tmp_dir = '/tmp'
Wed Sep 20 09:45:32 2017 us=907201 push_ifconfig_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=907212 push_ifconfig_local = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=907223 push_ifconfig_remote_netmask = 0.0.0.0
Wed Sep 20 09:45:32 2017 us=907233 push_ifconfig_ipv6_defined = DISABLED
Wed Sep 20 09:45:32 2017 us=907244 push_ifconfig_ipv6_local = ::/0
Wed Sep 20 09:45:32 2017 us=907255 push_ifconfig_ipv6_remote = ::
Wed Sep 20 09:45:32 2017 us=907265 enable_c2c = DISABLED
Wed Sep 20 09:45:32 2017 us=907274 duplicate_cn = DISABLED
Wed Sep 20 09:45:32 2017 us=907284 cf_max = 0
Wed Sep 20 09:45:32 2017 us=907294 cf_per = 0
Wed Sep 20 09:45:32 2017 us=907304 max_clients = 1024
Wed Sep 20 09:45:32 2017 us=907314 max_routes_per_client = 256
Wed Sep 20 09:45:32 2017 us=907324 auth_user_pass_verify_script = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907334 auth_user_pass_verify_script_via_file = DISABLED
Wed Sep 20 09:45:32 2017 us=907343 auth_token_generate = DISABLED
Wed Sep 20 09:45:32 2017 us=907354 auth_token_lifetime = 0
Wed Sep 20 09:45:32 2017 us=907363 port_share_host = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907373 port_share_port = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907383 client = ENABLED
Wed Sep 20 09:45:32 2017 us=907393 pull = ENABLED
Wed Sep 20 09:45:32 2017 us=907403 auth_user_pass_file = '[UNDEF]'
Wed Sep 20 09:45:32 2017 us=907422 OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug 24 2017
Wed Sep 20 09:45:32 2017 us=907444 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.06
Wed Sep 20 09:45:32 2017 us=907956 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Wed Sep 20 09:45:32 2017 us=907993 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Sep 20 09:45:32 2017 us=908870 ******* WARNING *******: '--cipher none' was specified. This means NO encryption will be performed and tunnelled data WILL be transmitted in clear text over the network! PLEASE DO RECONSIDER THIS SETTING!
Wed Sep 20 09:45:32 2017 us=908970 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 20 09:45:32 2017 us=908985 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 20 09:45:32 2017 us=908999 LZ4 compression initializing
Wed Sep 20 09:45:32 2017 us=909092 Control Channel MTU parms [ L:1626 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Wed Sep 20 09:45:32 2017 us=909247 Data Channel MTU parms [ L:1626 D:1360 EF:126 EB:407 ET:0 EL:3 AF:14/126 ]
Wed Sep 20 09:45:32 2017 us=909263 Fragmentation MTU parms [ L:1626 D:1360 EF:125 EB:407 ET:1 EL:3 AF:14/126 ]
Wed Sep 20 09:45:32 2017 us=909284 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1530,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,keydir 1,cipher [null-cipher],auth SHA1,keysize 0,tls-auth,key-method 2,tls-client'
Wed Sep 20 09:45:32 2017 us=909294 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1530,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,keydir 0,cipher [null-cipher],auth SHA1,keysize 0,tls-auth,key-method 2,tls-server'
Wed Sep 20 09:45:32 2017 us=909310 TCP/UDP: Preserving recently used remote address: [AF_INET]172.30.0.228:1194
Wed Sep 20 09:45:32 2017 us=909330 Socket Buffers: R=[212992->212992] S=[212992->212992]
Wed Sep 20 09:45:32 2017 us=909341 UDP link local: (not bound)
Wed Sep 20 09:45:32 2017 us=909351 UDP link remote: [AF_INET]172.30.0.228:1194
Wed Sep 20 09:45:32 2017 us=918624 TLS: Initial packet from [AF_INET]172.30.0.228:1194, sid=0e9f588d 273d8b0b
Wed Sep 20 09:45:32 2017 us=922582 VERIFY OK: depth=1, C=GR, ST=Greece, L=Athens, O=Company, OU=O-HUB, CN=O-HUB, name=O-HUB, [email protected]
Wed Sep 20 09:45:32 2017 us=922888 VERIFY OK: nsCertType=SERVER
Wed Sep 20 09:45:32 2017 us=922905 VERIFY OK: depth=0, C=GR, ST=Greece, L=Athens, O=Company, OU=O-HUB, CN=O-HUB, name=O-HUB, [email protected]
Wed Sep 20 09:45:32 2017 us=933258 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1530', remote='link-mtu 1562'
Wed Sep 20 09:45:32 2017 us=933304 WARNING: 'cipher' is used inconsistently, local='cipher [null-cipher]', remote='cipher AES-128-CBC'
Wed Sep 20 09:45:32 2017 us=933324 WARNING: 'keysize' is used inconsistently, local='keysize 0', remote='keysize 128'
Wed Sep 20 09:45:32 2017 us=933468 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Wed Sep 20 09:45:32 2017 us=933501 [O-HUB] Peer Connection Initiated with [AF_INET]172.30.0.228:1194
Wed Sep 20 09:45:34 2017 us=27811 SENT CONTROL [O-HUB]: 'PUSH_REQUEST' (status=1)
Wed Sep 20 09:45:34 2017 us=682023 PUSH: Received control message: 'PUSH_REPLY,route-gateway 169.251.0.1,topology subnet,ping 120,ping-restart 600,redirect-gateway def1 bypass-dhcp,compress lz4,ifconfig 169.251.0.49 255.255.0.0,peer-id 0'
Wed Sep 20 09:45:34 2017 us=682116 OPTIONS IMPORT: timers and/or timeouts modified
Wed Sep 20 09:45:34 2017 us=682129 OPTIONS IMPORT: compression parms modified
Wed Sep 20 09:45:34 2017 us=682138 LZ4 compression initializing
Wed Sep 20 09:45:34 2017 us=682146 OPTIONS IMPORT: --ifconfig/up options modified
Wed Sep 20 09:45:34 2017 us=682154 OPTIONS IMPORT: route options modified
Wed Sep 20 09:45:34 2017 us=682162 OPTIONS IMPORT: route-related options modified
Wed Sep 20 09:45:34 2017 us=682169 OPTIONS IMPORT: peer-id set
Wed Sep 20 09:45:34 2017 us=682177 OPTIONS IMPORT: adjusting link_mtu to 1629
Wed Sep 20 09:45:34 2017 us=682185 ******* WARNING *******: '--cipher none' was specified. This means NO encryption will be performed and tunnelled data WILL be transmitted in clear text over the network! PLEASE DO RECONSIDER THIS SETTING!
Wed Sep 20 09:45:34 2017 us=682198 Data Channel MTU parms [ L:1533 D:1360 EF:33 EB:407 ET:0 EL:3 AF:14/126 ]
Wed Sep 20 09:45:34 2017 us=682288 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 20 09:45:34 2017 us=682301 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Sep 20 09:45:34 2017 us=682810 TUN/TAP device tun1 opened
Wed Sep 20 09:45:34 2017 us=682834 TUN/TAP TX queue length set to 100
Wed Sep 20 09:45:34 2017 us=682852 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Sep 20 09:45:34 2017 us=682869 /sbin/ip link set dev tun1 up mtu 1500
Wed Sep 20 09:45:34 2017 us=697154 /sbin/ip addr add dev tun1 169.251.0.49/16 broadcast 169.251.255.255
Wed Sep 20 09:45:34 2017 us=698649 /usr/bin/vpn_up_down tun1 1500 1533 169.251.0.49 255.255.0.0 init
Wed Sep 20 09:45:34 2017 us=757348 /sbin/ip route add 172.30.0.228/32 via 192.168.28.100
Wed Sep 20 09:45:34 2017 us=758865 /sbin/ip route add 0.0.0.0/1 via 169.251.0.1
Wed Sep 20 09:45:34 2017 us=760110 /sbin/ip route add 128.0.0.0/1 via 169.251.0.1
Wed Sep 20 09:45:34 2017 us=761425 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Sep 20 09:45:34 2017 us=761448 Initialization Sequence Completed
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
