How to connect to openvpn server from ubuntu 18.04 client?
I have a openvpn server which I am trying to connect to. I have the ovpn file which I use to connect to the VPN server using:
sudo openvpn --config client.ovpn
When I can connect using the same command from ubuntu 16.04 machine, I am able to connect to VPN server and my IP is changed. When I try to run the same command I get connected to VPN but my IP remains the same. When I run the command, the output of ubuntu 18.04 machine is:
Fri Dec 7 11:20:20 2018 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018
Fri Dec 7 11:20:20 2018 library versions: OpenSSL 1.1.0g 2 Nov 2017, LZO 2.08
Fri Dec 7 11:20:20 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Fri Dec 7 11:20:20 2018 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:20 2018 Socket Buffers: R=[212992->200000] S=[212992->200000]
Fri Dec 7 11:20:20 2018 UDP link local: (not bound)
Fri Dec 7 11:20:20 2018 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:21 2018 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=f9e40629 cfa2b1e2
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=1, CN=OpenVPN CA
Fri Dec 7 11:20:21 2018 VERIFY OK: nsCertType=SERVER
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=0, CN=OpenVPN Server
Fri Dec 7 11:20:21 2018 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Dec 7 11:20:21 2018 [OpenVPN Server] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:22 2018 SENT CONTROL [OpenVPN Server]: 'PUSH_REQUEST' (status=1)
Fri Dec 7 11:20:22 2018 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 12,ping-restart 50,comp-lzo yes,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,route-gateway 172.27.232.1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,register-dns,block-ipv6,ifconfig 172.27.232.248 255.255.248.0'
Fri Dec 7 11:20:22 2018 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:1 is ignored by previous <connection> blocks
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:4: dhcp-pre-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:5: dhcp-renew (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:6: dhcp-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:17: register-dns (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:18: block-ipv6 (2.4.4)
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: compression parms modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route-related options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlp3s0 HWADDR=xx:xx:xx:xx:xx:xx
Fri Dec 7 11:20:22 2018 TUN/TAP device tun0 opened
Fri Dec 7 11:20:22 2018 TUN/TAP TX queue length set to 100
Fri Dec 7 11:20:22 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Dec 7 11:20:22 2018 /sbin/ip link set dev tun0 up mtu 1500
Fri Dec 7 11:20:22 2018 /sbin/ip addr add dev tun0 172.27.232.248/21 broadcast 172.27.239.255
Fri Dec 7 11:20:27 2018 ROUTE remote_host is NOT LOCAL
Fri Dec 7 11:20:27 2018 /sbin/ip route add xx.xx.xx.xx/32 via 192.168.1.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 0.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 128.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Dec 7 11:20:27 2018 Initialization Sequence Completed
Running route before connecting to VPN:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
Running route after connecting:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
172.27.232.0 0.0.0.0 255.255.248.0 U 0 0 0 tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
In my client file I have already tried adding:
redirect-gateway def1
I would simply like to redirect all my traffic from this VPN server.
networking ubuntu vpn openvpn ubuntu-18.04
add a comment |
I have a openvpn server which I am trying to connect to. I have the ovpn file which I use to connect to the VPN server using:
sudo openvpn --config client.ovpn
When I can connect using the same command from ubuntu 16.04 machine, I am able to connect to VPN server and my IP is changed. When I try to run the same command I get connected to VPN but my IP remains the same. When I run the command, the output of ubuntu 18.04 machine is:
Fri Dec 7 11:20:20 2018 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018
Fri Dec 7 11:20:20 2018 library versions: OpenSSL 1.1.0g 2 Nov 2017, LZO 2.08
Fri Dec 7 11:20:20 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Fri Dec 7 11:20:20 2018 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:20 2018 Socket Buffers: R=[212992->200000] S=[212992->200000]
Fri Dec 7 11:20:20 2018 UDP link local: (not bound)
Fri Dec 7 11:20:20 2018 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:21 2018 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=f9e40629 cfa2b1e2
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=1, CN=OpenVPN CA
Fri Dec 7 11:20:21 2018 VERIFY OK: nsCertType=SERVER
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=0, CN=OpenVPN Server
Fri Dec 7 11:20:21 2018 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Dec 7 11:20:21 2018 [OpenVPN Server] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:22 2018 SENT CONTROL [OpenVPN Server]: 'PUSH_REQUEST' (status=1)
Fri Dec 7 11:20:22 2018 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 12,ping-restart 50,comp-lzo yes,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,route-gateway 172.27.232.1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,register-dns,block-ipv6,ifconfig 172.27.232.248 255.255.248.0'
Fri Dec 7 11:20:22 2018 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:1 is ignored by previous <connection> blocks
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:4: dhcp-pre-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:5: dhcp-renew (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:6: dhcp-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:17: register-dns (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:18: block-ipv6 (2.4.4)
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: compression parms modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route-related options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlp3s0 HWADDR=xx:xx:xx:xx:xx:xx
Fri Dec 7 11:20:22 2018 TUN/TAP device tun0 opened
Fri Dec 7 11:20:22 2018 TUN/TAP TX queue length set to 100
Fri Dec 7 11:20:22 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Dec 7 11:20:22 2018 /sbin/ip link set dev tun0 up mtu 1500
Fri Dec 7 11:20:22 2018 /sbin/ip addr add dev tun0 172.27.232.248/21 broadcast 172.27.239.255
Fri Dec 7 11:20:27 2018 ROUTE remote_host is NOT LOCAL
Fri Dec 7 11:20:27 2018 /sbin/ip route add xx.xx.xx.xx/32 via 192.168.1.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 0.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 128.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Dec 7 11:20:27 2018 Initialization Sequence Completed
Running route before connecting to VPN:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
Running route after connecting:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
172.27.232.0 0.0.0.0 255.255.248.0 U 0 0 0 tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
In my client file I have already tried adding:
redirect-gateway def1
I would simply like to redirect all my traffic from this VPN server.
networking ubuntu vpn openvpn ubuntu-18.04
add a comment |
I have a openvpn server which I am trying to connect to. I have the ovpn file which I use to connect to the VPN server using:
sudo openvpn --config client.ovpn
When I can connect using the same command from ubuntu 16.04 machine, I am able to connect to VPN server and my IP is changed. When I try to run the same command I get connected to VPN but my IP remains the same. When I run the command, the output of ubuntu 18.04 machine is:
Fri Dec 7 11:20:20 2018 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018
Fri Dec 7 11:20:20 2018 library versions: OpenSSL 1.1.0g 2 Nov 2017, LZO 2.08
Fri Dec 7 11:20:20 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Fri Dec 7 11:20:20 2018 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:20 2018 Socket Buffers: R=[212992->200000] S=[212992->200000]
Fri Dec 7 11:20:20 2018 UDP link local: (not bound)
Fri Dec 7 11:20:20 2018 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:21 2018 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=f9e40629 cfa2b1e2
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=1, CN=OpenVPN CA
Fri Dec 7 11:20:21 2018 VERIFY OK: nsCertType=SERVER
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=0, CN=OpenVPN Server
Fri Dec 7 11:20:21 2018 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Dec 7 11:20:21 2018 [OpenVPN Server] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:22 2018 SENT CONTROL [OpenVPN Server]: 'PUSH_REQUEST' (status=1)
Fri Dec 7 11:20:22 2018 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 12,ping-restart 50,comp-lzo yes,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,route-gateway 172.27.232.1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,register-dns,block-ipv6,ifconfig 172.27.232.248 255.255.248.0'
Fri Dec 7 11:20:22 2018 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:1 is ignored by previous <connection> blocks
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:4: dhcp-pre-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:5: dhcp-renew (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:6: dhcp-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:17: register-dns (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:18: block-ipv6 (2.4.4)
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: compression parms modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route-related options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlp3s0 HWADDR=xx:xx:xx:xx:xx:xx
Fri Dec 7 11:20:22 2018 TUN/TAP device tun0 opened
Fri Dec 7 11:20:22 2018 TUN/TAP TX queue length set to 100
Fri Dec 7 11:20:22 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Dec 7 11:20:22 2018 /sbin/ip link set dev tun0 up mtu 1500
Fri Dec 7 11:20:22 2018 /sbin/ip addr add dev tun0 172.27.232.248/21 broadcast 172.27.239.255
Fri Dec 7 11:20:27 2018 ROUTE remote_host is NOT LOCAL
Fri Dec 7 11:20:27 2018 /sbin/ip route add xx.xx.xx.xx/32 via 192.168.1.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 0.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 128.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Dec 7 11:20:27 2018 Initialization Sequence Completed
Running route before connecting to VPN:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
Running route after connecting:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
172.27.232.0 0.0.0.0 255.255.248.0 U 0 0 0 tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
In my client file I have already tried adding:
redirect-gateway def1
I would simply like to redirect all my traffic from this VPN server.
networking ubuntu vpn openvpn ubuntu-18.04
I have a openvpn server which I am trying to connect to. I have the ovpn file which I use to connect to the VPN server using:
sudo openvpn --config client.ovpn
When I can connect using the same command from ubuntu 16.04 machine, I am able to connect to VPN server and my IP is changed. When I try to run the same command I get connected to VPN but my IP remains the same. When I run the command, the output of ubuntu 18.04 machine is:
Fri Dec 7 11:20:20 2018 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 5 2018
Fri Dec 7 11:20:20 2018 library versions: OpenSSL 1.1.0g 2 Nov 2017, LZO 2.08
Fri Dec 7 11:20:20 2018 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.
Fri Dec 7 11:20:20 2018 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:20 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:20 2018 Socket Buffers: R=[212992->200000] S=[212992->200000]
Fri Dec 7 11:20:20 2018 UDP link local: (not bound)
Fri Dec 7 11:20:20 2018 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:21 2018 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=f9e40629 cfa2b1e2
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=1, CN=OpenVPN CA
Fri Dec 7 11:20:21 2018 VERIFY OK: nsCertType=SERVER
Fri Dec 7 11:20:21 2018 VERIFY OK: depth=0, CN=OpenVPN Server
Fri Dec 7 11:20:21 2018 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Dec 7 11:20:21 2018 [OpenVPN Server] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:1194
Fri Dec 7 11:20:22 2018 SENT CONTROL [OpenVPN Server]: 'PUSH_REQUEST' (status=1)
Fri Dec 7 11:20:22 2018 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 12,ping-restart 50,comp-lzo yes,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,route-gateway 172.27.232.1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,register-dns,block-ipv6,ifconfig 172.27.232.248 255.255.248.0'
Fri Dec 7 11:20:22 2018 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:1 is ignored by previous <connection> blocks
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:4: dhcp-pre-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:5: dhcp-renew (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:6: dhcp-release (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:17: register-dns (2.4.4)
Fri Dec 7 11:20:22 2018 Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:18: block-ipv6 (2.4.4)
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: compression parms modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: route-related options modified
Fri Dec 7 11:20:22 2018 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 7 11:20:22 2018 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 7 11:20:22 2018 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlp3s0 HWADDR=xx:xx:xx:xx:xx:xx
Fri Dec 7 11:20:22 2018 TUN/TAP device tun0 opened
Fri Dec 7 11:20:22 2018 TUN/TAP TX queue length set to 100
Fri Dec 7 11:20:22 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Dec 7 11:20:22 2018 /sbin/ip link set dev tun0 up mtu 1500
Fri Dec 7 11:20:22 2018 /sbin/ip addr add dev tun0 172.27.232.248/21 broadcast 172.27.239.255
Fri Dec 7 11:20:27 2018 ROUTE remote_host is NOT LOCAL
Fri Dec 7 11:20:27 2018 /sbin/ip route add xx.xx.xx.xx/32 via 192.168.1.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 0.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 /sbin/ip route add 128.0.0.0/1 via 172.27.232.1
Fri Dec 7 11:20:27 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Dec 7 11:20:27 2018 Initialization Sequence Completed
Running route before connecting to VPN:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
Running route after connecting:
/dev/net$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default _gateway 0.0.0.0 UG 600 0 0 wlp3s0
link-local 0.0.0.0 255.255.0.0 U 1000 0 0 wlp3s0
172.27.232.0 0.0.0.0 255.255.248.0 U 0 0 0 tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp3s0
In my client file I have already tried adding:
redirect-gateway def1
I would simply like to redirect all my traffic from this VPN server.
networking ubuntu vpn openvpn ubuntu-18.04
networking ubuntu vpn openvpn ubuntu-18.04
edited Dec 10 '18 at 10:06
asked Dec 10 '18 at 8:00
user2627846
12
12
add a comment |
add a comment |
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1382253%2fhow-to-connect-to-openvpn-server-from-ubuntu-18-04-client%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1382253%2fhow-to-connect-to-openvpn-server-from-ubuntu-18-04-client%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown