{"action":"created","issue":{"url":"https://api.github.com/repos/pivpn/pivpn/issues/55","repository_url":"https://api.github.com/repos/pivpn/pivpn","labels_url":"https://api.github.com/repos/pivpn/pivpn/issues/55/labels{/name}","comments_url":"https://api.github.com/repos/pivpn/pivpn/issues/55/comments","events_url":"https://api.github.com/repos/pivpn/pivpn/issues/55/events","html_url":"https://github.com/pivpn/pivpn/issues/55","id":167151943,"number":55,"title":"No Default Gateway in Tunnel","user":{"login":"Len-F","id":20604659,"avatar_url":"https://avatars.githubusercontent.com/u/20604659?v=3","gravatar_id":"","url":"https://api.github.com/users/Len-F","html_url":"https://github.com/Len-F","followers_url":"https://api.github.com/users/Len-F/followers","following_url":"https://api.github.com/users/Len-F/following{/other_user}","gists_url":"https://api.github.com/users/Len-F/gists{/gist_id}","starred_url":"https://api.github.com/users/Len-F/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Len-F/subscriptions","organizations_url":"https://api.github.com/users/Len-F/orgs","repos_url":"https://api.github.com/users/Len-F/repos","events_url":"https://api.github.com/users/Len-F/events{/privacy}","received_events_url":"https://api.github.com/users/Len-F/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-07-22T23:35:28Z","updated_at":"2016-08-02T20:25:20Z","closed_at":null,"body":"Setup PIVPN on RaspberryPi 3 - No Problems.\r\nCreated 3 user profiles on Rpi3 - No Problems.\r\nSetup Windows Client OpenVPN-GUI (v2.3.11) - No Problems.\r\nConnect to VPN - No Internet connectivity, but I can ping the VPN server, ssh to the VPN server, and then I can successfully ping the Internet world.\r\n\r\n1) I cannot access the Internet from my laptop when connected to the VPN.\r\n2) Errors appear in the client status log.\r\n\r\nHere is the complete client status log:\r\n\r\n-----------------------------------------------------------------------------\r\nThu Jul 21 14:02:27 2016 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016\r\nThu Jul 21 14:02:27 2016 Windows version 6.1 (Windows 7) 64bit\r\nThu Jul 21 14:02:27 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09\r\nThu Jul 21 14:02:51 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this\r\nThu Jul 21 14:02:51 2016 Control Channel Authentication: tls-auth using INLINE static key file\r\nThu Jul 21 14:02:51 2016 UDPv4 link local: [undef]\r\nThu Jul 21 14:02:51 2016 UDPv4 link remote: [AF_INET]75.85.162.112:1194\r\nThu Jul 21 14:02:52 2016 [pivpn] Peer Connection Initiated with [AF_INET]75.85.162.112:1194\r\nThu Jul 21 14:02:57 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0\r\nThu Jul 21 14:02:57 2016 open_tun, tt->ipv6=0\r\nThu Jul 21 14:02:57 2016 TAP-WIN32 device [Local Area Connection 2] opened: \\\\.\\Global\\{87CA0FDB-AE94-4F72-B989-F29E9557973A}.tap\r\nThu Jul 21 14:02:57 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {87CA0FDB-AE94-4F72-B989-F29E9557973A} [DHCP-serv: 10.8.0.5, lease-time: 31536000]\r\nThu Jul 21 14:02:57 2016 Successful ARP Flush on interface [37] {87CA0FDB-AE94-4F72-B989-F29E9557973A}\r\nThu Jul 21 14:03:02 2016 **Warning: address 192.168.10.100 is not a network address in relation to netmask 255.255.255.0**\r\nThu Jul 21 14:03:02 2016 **ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.   [status=87 if_index=37]**\r\nThu Jul 21 14:03:02 2016 env_block: add PATH=C:\\Windows\\System32;C:\\Windows;C:\\Windows\\System32\\Wbem\r\nThu Jul 21 14:03:02 2016 **ROUTE: route addition failed using CreateIpForwardEntry: The object already exists.   [status=5010 if_index=37]**\r\nThu Jul 21 14:03:02 2016 env_block: add PATH=C:\\Windows\\System32;C:\\Windows;C:\\Windows\\System32\\Wbem\r\nThu Jul 21 14:03:02 2016 Initialization Sequence Completed\r\n\r\n---------------------------------------------------------------------------\r\nHere is the relevant portion of the windows config (ipconfig /all) when connected to the tunnel:\r\n\r\n---------------------------------------------------------------------------\r\nWindows IP Configuration\r\n\r\n   Host Name . . . . . . . . . . . . : Skibuff-T410\r\n   Primary Dns Suffix  . . . . . . . : \r\n   Node Type . . . . . . . . . . . . : Hybrid\r\n   IP Routing Enabled. . . . . . . . : No\r\n   WINS Proxy Enabled. . . . . . . . : No\r\n\r\nEthernet adapter Local Area Connection 2:\r\n\r\n   Connection-specific DNS Suffix  . : \r\n   Description . . . . . . . . . . . : TAP-Windows Adapter V9\r\n   Physical Address. . . . . . . . . : 00-FF-87-CA-0F-DB\r\n   DHCP Enabled. . . . . . . . . . . : Yes\r\n   Autoconfiguration Enabled . . . . : Yes\r\n   Link-local IPv6 Address . . . . . : fe80::94c1:f970:6c7c:7adc%37(Preferred) \r\n   IPv4 Address. . . . . . . . . . . : 10.8.0.6(Preferred) \r\n   Subnet Mask . . . . . . . . . . . : 255.255.255.252\r\n   Lease Obtained. . . . . . . . . . : Friday, July 22, 2016 2:01:24 PM\r\n   Lease Expires . . . . . . . . . . : Saturday, July 22, 2017 2:01:24 PM\r\n   **Default Gateway** . . . . . . . . . : \r\n   DHCP Server . . . . . . . . . . . : 10.8.0.5\r\n   DHCPv6 IAID . . . . . . . . . . . : 620822407\r\n   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-30-76-37-F0-DE-F1-17-B5-A5\r\n   DNS Servers . . . . . . . . . . . : 8.8.8.8\r\n                                       8.8.4.4\r\n   NetBIOS over Tcpip. . . . . . . . : Enabled\r\n\r\n---------------------------------------------------------------------------------\r\nAs you can see, the \"Default Gateway\" is blank.  My guess is that this is related to the \"failed\" route pushes during the VPN connection.\r\n\r\nFinally, here is the server.conf file:\r\n\r\n---------------------------------------------------------------------------------\r\ndev tun\r\nproto udp\r\nport 1194\r\nca /etc/openvpn/easy-rsa/keys/ca.crt\r\ncert /etc/openvpn/easy-rsa/keys/pivpn.crt\r\nkey /etc/openvpn/easy-rsa/keys/pivpn.key\r\ndh /etc/openvpn/easy-rsa/keys/dh2048.pem\r\nserver 10.8.0.0 255.255.255.0\r\n# server and remote endpoints\r\nifconfig 10.8.0.1 10.8.0.2\r\n# Add route to Client routing table for the OpenVPN Server\r\npush \"route 10.8.0.1 255.255.255.255\"\r\n# Add route to Client routing table for the OPenVPN Subnet\r\npush \"route 10.8.0.0 255.255.255.0\"\r\n# your local subnet\r\npush \"route 192.168.10.100 255.255.255.0\"\r\n# Set your primary domain name server address for clients\r\npush \"dhcp-option DNS 8.8.8.8\"\r\npush \"dhcp-option DNS 8.8.4.4\"\r\n# Override the Client default gateway by using 0.0.0.0/1 and\r\n# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of\r\n# overriding but not wiping out the original default gateway.\r\npush \"redirect-gateway def1\"\r\nclient-to-client\r\nduplicate-cn\r\nkeepalive 10 120\r\ntls-version-min 1.2\r\ntls-auth /etc/openvpn/easy-rsa/keys/ta.key 0\r\ncipher AES-256-CBC\r\nauth SHA256\r\ncomp-lzo\r\nuser nobody\r\ngroup nogroup\r\npersist-key\r\npersist-tun\r\n#crl-verify /etc/openvpn/crl.pem\r\nstatus /var/log/openvpn-status.log 20\r\nlog /var/log/openvpn.log\r\nverb 1\r\n# This configuration file was originally written by Lauren Orsini at ReadWrite.\r\n\r\n-----------------------------------------------------------------------------\r\nCan you advise me as to why the errors in the GUI status log, and why no Internet connectivity from client?  And thanks for doing this project.\r\n"},"comment":{"url":"https://api.github.com/repos/pivpn/pivpn/issues/comments/237032245","html_url":"https://github.com/pivpn/pivpn/issues/55#issuecomment-237032245","issue_url":"https://api.github.com/repos/pivpn/pivpn/issues/55","id":237032245,"user":{"login":"0-kaladin","id":3620760,"avatar_url":"https://avatars.githubusercontent.com/u/3620760?v=3","gravatar_id":"","url":"https://api.github.com/users/0-kaladin","html_url":"https://github.com/0-kaladin","followers_url":"https://api.github.com/users/0-kaladin/followers","following_url":"https://api.github.com/users/0-kaladin/following{/other_user}","gists_url":"https://api.github.com/users/0-kaladin/gists{/gist_id}","starred_url":"https://api.github.com/users/0-kaladin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0-kaladin/subscriptions","organizations_url":"https://api.github.com/users/0-kaladin/orgs","repos_url":"https://api.github.com/users/0-kaladin/repos","events_url":"https://api.github.com/users/0-kaladin/events{/privacy}","received_events_url":"https://api.github.com/users/0-kaladin/received_events","type":"User","site_admin":false},"created_at":"2016-08-02T20:25:20Z","updated_at":"2016-08-02T20:25:20Z","body":"hmm not sure what is going on here.  can you paste just the config (not certs) of the ovpn you are using?  Please paste within the code tags so it doesn't get formatted."}}
{"actor":{"display_login":"0-kaladin"}}