openvpn как назначить статический IP-адрес

[depresnak]

конфиг сервера

# TCP or UDP server?
proto tcp
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/myservername.crt
key /etc/openvpn/keys/myservername.key
dh /etc/openvpn/keys/dh1024.pem
dev tun
server 10.8.0.0 255.255.255.0
;client-config-dir ccd
ifconfig-pool-persist /etc/openvpn/ipp.txt 0
client-to-client
keepalive 10 120
# Сжатие трафика
comp-lzo
# Максимум клиентов
max-clients 5
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
# Детальность логирования
verb 3
# Защита от повторов (максимум 20 одинаковых сообщений подряд)
mute 20

конфиг клиента

remote 192.168.0.34 8023
#remote 192.168.0.115 1194
client                                         
dev tun
proto tcp
persist-key
persist-tun
ca c:\\keys\\ca.crt
cert c:\\keys\\client1.crt
key c:\\keys\\client1.key
comp-lzo
verb 3
mute 20


файл ipp.txt

client1,10.8.0.200
efim1,10.8.0.130

у client1 назначается  202 айпишник вот лог:

Wed Jul 31 12:16:28 2013 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Jul 31 12:16:28 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 31 12:16:28 2013 Re-using SSL/TLS context
Wed Jul 31 12:16:28 2013 LZO compression initialized
Wed Jul 31 12:16:28 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jul 31 12:16:28 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 31 12:16:28 2013 Local Options hash (VER=V4): '69109d17'
Wed Jul 31 12:16:28 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jul 31 12:16:28 2013 Attempting to establish TCP connection with 192.168.0.34:8023
Wed Jul 31 12:16:28 2013 TCP connection established with 192.168.0.34:8023
Wed Jul 31 12:16:28 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 31 12:16:28 2013 TCPv4_CLIENT link local: [undef]
Wed Jul 31 12:16:28 2013 TCPv4_CLIENT link remote: 192.168.0.34:8023
Wed Jul 31 12:16:28 2013 TLS: Initial packet from 192.168.0.34:8023, sid=228fdf6c f1103d05
Wed Jul 31 12:16:28 2013 VERIFY OK: depth=1, /C=RU/ST=Samara_region/L=Samara/O=server/OU=server/CN=server/name=server/emailAddress=it@mail.ru
Wed Jul 31 12:16:28 2013 VERIFY OK: depth=0, /C=RU/ST=Samara_region/L=Samara/O=server/OU=server/CN=myservername/name=server/emailAddress=it@mail.ru
Wed Jul 31 12:16:28 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 31 12:16:28 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 31 12:16:28 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 31 12:16:28 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 31 12:16:28 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jul 31 12:16:28 2013 [myservername] Peer Connection Initiated with 192.168.0.34:8023
Wed Jul 31 12:16:31 2013 SENT CONTROL [myservername]: 'PUSH_REQUEST' (status=1)
Wed Jul 31 12:16:31 2013 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.202 10.8.0.201'
Wed Jul 31 12:16:31 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul 31 12:16:31 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul 31 12:16:31 2013 OPTIONS IMPORT: route options modified
Wed Jul 31 12:16:31 2013 Preserving previous TUN/TAP instance: Подключение по локальной сети 2
Wed Jul 31 12:16:31 2013 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
Wed Jul 31 12:16:31 2013 C:\WINDOWS\system32\route.exe DELETE 10.8.0.0 MASK 255.255.255.0 10.8.0.45
Wed Jul 31 12:16:31 2013 Route deletion via IPAPI succeeded [adaptive]
Wed Jul 31 12:16:31 2013 Closing TUN/TAP interface
Wed Jul 31 12:16:32 2013 ROUTE default_gateway=192.168.0.230
Wed Jul 31 12:16:32 2013 TAP-WIN32 device [Подключение по локальной сети 2] opened: \\.\Global\{88499FC5-3452-42D5-8B12-3834B180AB4C}.tap
Wed Jul 31 12:16:32 2013 TAP-Win32 Driver Version 9.6
Wed Jul 31 12:16:32 2013 TAP-Win32 MTU=1500
Wed Jul 31 12:16:32 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.202/255.255.255.252 on interface {88499FC5-3452-42D5-8B12-3834B180AB4C} [DHCP-serv: 10.8.0.201, lease-time: 31536000]
Wed Jul 31 12:16:32 2013 Successful ARP Flush on interface [20] {88499FC5-3452-42D5-8B12-3834B180AB4C}
Wed Jul 31 12:16:37 2013 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Wed Jul 31 12:16:37 2013 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.201
Wed Jul 31 12:16:37 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jul 31 12:16:37 2013 Route addition via IPAPI succeeded [adaptive]
Wed Jul 31 12:16:37 2013 Initialization Sequence Completed

у efim1 назначается  130 айпишник вот лог:


Wed Jul 31 13:08:12 2013 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Jul 31 13:08:12 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 31 13:08:12 2013 LZO compression initialized
Wed Jul 31 13:08:12 2013 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jul 31 13:08:12 2013 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 31 13:08:12 2013 Local Options hash (VER=V4): '69109d17'
Wed Jul 31 13:08:12 2013 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Jul 31 13:08:12 2013 Attempting to establish TCP connection with 192.168.0.34:8023
Wed Jul 31 13:08:12 2013 TCP connection established with 192.168.0.34:8023
Wed Jul 31 13:08:12 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 31 13:08:12 2013 TCPv4_CLIENT link local: [undef]
Wed Jul 31 13:08:12 2013 TCPv4_CLIENT link remote: 192.168.0.34:8023
Wed Jul 31 13:08:12 2013 TLS: Initial packet from 192.168.0.34:8023, sid=85bb54b7 6b8c10ff
Wed Jul 31 13:08:12 2013 VERIFY OK: depth=1, /C=RU/ST=Samara_region/L=Samara/O=server/OU=server/CN=server/name=server/emailAddress=it@mail.ru
Wed Jul 31 13:08:12 2013 VERIFY OK: depth=0, /C=RU/ST=Samara_region/L=Samara/O=server/OU=server/CN=myservername/name=server/emailAddress=it@mail.ru
Wed Jul 31 13:08:12 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 31 13:08:12 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 31 13:08:12 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 31 13:08:12 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 31 13:08:12 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jul 31 13:08:12 2013 [myservername] Peer Connection Initiated with 192.168.0.34:8023
Wed Jul 31 13:08:15 2013 SENT CONTROL [myservername]: 'PUSH_REQUEST' (status=1)
Wed Jul 31 13:08:15 2013 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.130 10.8.0.129'
Wed Jul 31 13:08:15 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul 31 13:08:15 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul 31 13:08:15 2013 OPTIONS IMPORT: route options modified
Wed Jul 31 13:08:15 2013 ROUTE default_gateway=192.168.0.230
Wed Jul 31 13:08:15 2013 TAP-WIN32 device [Подключение по локальной сети 2] opened: \\.\Global\{272F5EB4-BE4E-427F-9F1A-344E6FCA70E2}.tap
Wed Jul 31 13:08:15 2013 TAP-Win32 Driver Version 9.6
Wed Jul 31 13:08:15 2013 TAP-Win32 MTU=1500
Wed Jul 31 13:08:15 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.130/255.255.255.252 on interface {272F5EB4-BE4E-427F-9F1A-344E6FCA70E2} [DHCP-serv: 10.8.0.129, lease-time: 31536000]
Wed Jul 31 13:08:15 2013 Successful ARP Flush on interface [18] {272F5EB4-BE4E-427F-9F1A-344E6FCA70E2}
Wed Jul 31 13:08:20 2013 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Wed Jul 31 13:08:20 2013 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.129
Wed Jul 31 13:08:20 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jul 31 13:08:20 2013 Route addition via IPAPI succeeded [adaptive]
Wed Jul 31 13:08:20 2013 Initialization Sequence Completed


в чем может быть проблема?

[fisher74]

А вот не надо насиловать софт, если не владеете знаниями.
10.8.0.200 для tun-интерфейса является адресом сети, а не хоста. Причём в логах это видно

[depresnak]

а причем здесь tun интерфейс это назначение ip для клиентов, а ответ я уже нашёл http://openvpn.net/index.php/open-source/documentation/howto.html#policy внизу таблица допустимых ip

[fisher74]

А при том, что если почитать указанный Вами HOWTO, походив по встроенным в текст ссылочкам, и немного вникнуть, то будет понятно, что tun-интерфейс используется для point-to-point соединений, в отличие от tap-интерфейса

A TAP device is a virtual ethernet adapter, while a TUN device is a virtual point-to-point IP link.

Сделовательно этот интерфейс (tun) работает исключительно с маской 30. А по этой маске 10.8.0.200 - ни что иное, как адрес сети и быть адресом хоста никак не могет.

[depresnak]

спасибо за разъяснение, английским я не особо владею.

[achilles_85]

Озадачился такой проблемой и я.
Конфиг сервера

(Нажмите, чтобы показать/скрыть)

port 2000
proto udp
dev tap0
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh2048.pem
tls-auth keys/ta.key 0
up "/etc/openvpn/up_tap.sh br0"
script-security 3
server-bridge 192.168.5.254 255.255.255.0 192.168.5.200 192.168.5.250
ifconfig-pool-persist ipp.txt
mode server
tls-server
client-config-dir ccd
cipher AES-128-CBC
auth SHA256
client-to-client
keepalive 10 120
max-clients 50
user nobody
group nogroup
persist-key
persist-tun
comp-lzo no
status /var/log/openvpn/openvpn-status.log
log-append  /var/log/openvpn/openvpn.log
verb 4
mute 20

Клиент

(Нажмите, чтобы показать/скрыть)

client
dev tap
proto udp
remote 99.999.999.999 2000
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
comp-lzo no
ca ca.crt
ns-cert-type server
key client.key
cert client.crt
tls-auth ta.key 1
remote-cert-tls server
cipher AES-128-CBC
auth SHA256

В файле ipp.txt при подключении клиента появляется запись client,192.168.5.200
В папке ccd создал файл с именем client. Пишу в нем ifconfig-push 192.168.5.201 255.255.255.0
В итоге клиент после этих манипуляций очень долго пытается подключиться и не получается адрес из директории с настройками
Вот лог клиент

(Нажмите, чтобы показать/скрыть)

Fri Dec 09 14:28:07 2016 OpenVPN 2.3.14 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec  7 2016
Fri Dec 09 14:28:07 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Dec 09 14:28:07 2016 library versions: OpenSSL 1.0.2i  22 Sep 2016, LZO 2.09
Enter Management Password:
Fri Dec 09 14:28:07 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Dec 09 14:28:07 2016 Need hold release from management interface, waiting...
Fri Dec 09 14:28:07 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Dec 09 14:28:08 2016 MANAGEMENT: CMD 'state on'
Fri Dec 09 14:28:08 2016 MANAGEMENT: CMD 'log all on'
Fri Dec 09 14:28:08 2016 MANAGEMENT: CMD 'hold off'
Fri Dec 09 14:28:08 2016 MANAGEMENT: CMD 'hold release'
Fri Dec 09 14:28:08 2016 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri Dec 09 14:28:08 2016 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Dec 09 14:28:08 2016 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Dec 09 14:28:08 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Dec 09 14:28:08 2016 UDPv4 link local: [undef]
Fri Dec 09 14:28:08 2016 UDPv4 link remote: [AF_INET]99.999.999.999:2000
Fri Dec 09 14:28:08 2016 MANAGEMENT: >STATE:1481282888,WAIT,,,
Fri Dec 09 14:28:08 2016 MANAGEMENT: >STATE:1481282888,AUTH,,,
Fri Dec 09 14:28:08 2016 TLS: Initial packet from [AF_INET]99.999.999.999:2000, sid=1dcef534 c113c75c
Fri Dec 09 14:28:08 2016 VERIFY OK: depth=1, C=RU, ST=NY, L=NY, O=OOO, OU=OOO, CN=OOO CA, name=server, emailAddress=support@OOO.ru
Fri Dec 09 14:28:08 2016 VERIFY OK: nsCertType=SERVER
Fri Dec 09 14:28:08 2016 Validating certificate key usage
Fri Dec 09 14:28:08 2016 ++ Certificate has key usage  00a0, expects 00a0
Fri Dec 09 14:28:08 2016 VERIFY KU OK
Fri Dec 09 14:28:08 2016 Validating certificate extended key usage
Fri Dec 09 14:28:08 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Dec 09 14:28:08 2016 VERIFY EKU OK
Fri Dec 09 14:28:08 2016 VERIFY OK: depth=0, C=RU, ST=NY, L=NY, O=OOO, OU=OOO, CN=server, name=server, emailAddress=support@OOO.ru
Fri Dec 09 14:28:08 2016 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 09 14:28:08 2016 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Dec 09 14:28:08 2016 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 09 14:28:08 2016 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Dec 09 14:28:08 2016 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Dec 09 14:28:08 2016 [server] Peer Connection Initiated with [AF_INET]99.999.999.999:2000
Fri Dec 09 14:28:09 2016 MANAGEMENT: >STATE:1481282889,GET_CONFIG,,,
Fri Dec 09 14:28:10 2016 SENT CONTROL [gate]: 'PUSH_REQUEST' (status=1)
Fri Dec 09 14:28:10 2016 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.5.254,ping 10,ping-restart 120,ifconfig 192.168.5.201 255.255.255.0'
Fri Dec 09 14:28:10 2016 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 09 14:28:10 2016 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 09 14:28:10 2016 OPTIONS IMPORT: route-related options modified
Fri Dec 09 14:28:10 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Dec 09 14:28:10 2016 MANAGEMENT: >STATE:1481282890,ASSIGN_IP,,192.168.5.201,
Fri Dec 09 14:28:10 2016 open_tun, tt->ipv6=0
Fri Dec 09 14:28:10 2016 TAP-WIN32 device [Ethernet] opened: \\.\Global\{65CB9A81-331C-4C82-B291-0EFED71D98A4}.tap
Fri Dec 09 14:28:10 2016 TAP-Windows Driver Version 9.21
Fri Dec 09 14:28:10 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.5.201/255.255.255.0 on interface {65CB9A81-331C-4C82-B291-0EFED71D98A4} [DHCP-serv: 192.168.5.0, lease-time: 31536000]
Fri Dec 09 14:28:10 2016 Successful ARP Flush on interface [27] {65CB9A81-331C-4C82-B291-0EFED71D98A4}
Fri Dec 09 14:28:15 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:15 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:20 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:20 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:21 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:21 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:22 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:22 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:23 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:23 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:24 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:24 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:25 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:25 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:26 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:26 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:27 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:27 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:28 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:28 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:29 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:29 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:30 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:30 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:31 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:31 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:33 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:33 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:34 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:34 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:35 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:35 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:36 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:36 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:37 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:37 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:38 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:38 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:40 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:40 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:41 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:41 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:42 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:42 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:44 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
Fri Dec 09 14:28:44 2016 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 09 14:28:45 2016 TEST ROUTES: 0/0 succeeded len=0 ret=0 a=0 u/d=down
SYSTEM ROUTING TABLE
0.0.0.0 0.0.0.0 10.1.220.1 p=0 i=23 t=4 pr=3 a=11457 h=0 m=266/0/0/0/0
10.0.0.0 255.0.0.0 10.1.220.1 p=0 i=23 t=4 pr=3 a=11453 h=0 m=11/0/0/0/0
10.1.220.0 255.255.255.0 10.1.220.20 p=0 i=23 t=3 pr=2 a=11453 h=0 m=266/0/0/0/0
10.1.220.20 255.255.255.255 10.1.220.20 p=0 i=23 t=3 pr=2 a=11453 h=0 m=266/0/0/0/0
10.1.220.255 255.255.255.255 10.1.220.20 p=0 i=23 t=3 pr=2 a=11453 h=0 m=266/0/0/0/0
127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=11610 h=0 m=306/0/0/0/0
127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=11610 h=0 m=306/0/0/0/0
127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=11610 h=0 m=306/0/0/0/0
192.168.5.0 255.255.255.0 192.168.5.200 p=0 i=27 t=3 pr=2 a=5162 h=0 m=276/0/0/0/0
192.168.5.200 255.255.255.255 192.168.5.200 p=0 i=27 t=3 pr=2 a=5162 h=0 m=276/0/0/0/0
192.168.5.255 255.255.255.255 192.168.5.200 p=0 i=27 t=3 pr=2 a=5162 h=0 m=276/0/0/0/0
224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=11610 h=0 m=306/0/0/0/0
224.0.0.0 240.0.0.0 10.1.220.20 p=0 i=23 t=3 pr=2 a=11596 h=0 m=266/0/0/0/0
224.0.0.0 240.0.0.0 192.168.5.200 p=0 i=27 t=3 pr=2 a=10513 h=0 m=276/0/0/0/0
255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=11610 h=0 m=306/0/0/0/0
255.255.255.255 255.255.255.255 10.1.220.20 p=0 i=23 t=3 pr=2 a=11596 h=0 m=266/0/0/0/0
255.255.255.255 255.255.255.255 192.168.5.200 p=0 i=27 t=3 pr=2 a=10513 h=0 m=276/0/0/0/0
SYSTEM ADAPTER LIST
TAP-Windows Adapter V9
  Index = 27
  GUID = {65CB9A81-331C-4C82-B291-0EFED71D98A4}
  IP = 192.168.5.200/255.255.255.0
  MAC = 00:ff:65:cb:9a:81
  GATEWAY = 0.0.0.0/255.255.255.255
  DHCP SERV = 192.168.5.0/255.255.255.255
  DHCP LEASE OBTAINED = Fri Dec 09 13:02:42 2016
  DHCP LEASE EXPIRES  = Sat Dec 09 13:02:42 2017
  DNS SERV = 
Сетевое подключение Intel(R) 82574L Gigabit
  Index = 23
  GUID = {27C00CD3-F40B-44F7-8ED4-18D6672DC83B}
  IP = 10.1.220.20/255.255.255.0
  MAC = 00:0c:29:7b:86:ac
  GATEWAY = 10.1.220.1/255.255.255.255
  DNS SERV = 10.10.1.3/255.255.255.255
Fri Dec 09 14:28:45 2016 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Fri Dec 09 14:28:45 2016 MANAGEMENT: >STATE:1481282925,CONNECTED,ERROR,192.168.5.201,99.999.999.999

Что не так?

[Sly_tom_cat]

achilles_85, а прочитать тему - трудно что-ли - как раз ваш случай - задаете хосту IP сети - так делать нельзя.
задайте хотя бы  client,192.168.5.201

[achilles_85]

Sly_tom_cat, Тему читал. ТС пишет про tun интерфейс, у меня tap. И вообще вы меж строк прочли мое сообщение.
ipp.txt я не редактирую, т.к после рестарта сервера этот файл перезаписывается. В директории ccd создал файл client, в нем прописал ifconfig-push 192.168.5.201 и результат вы можете глянуть под спойлером. Так что я все это читал, но ни черта оно не работает.
Про ip сети и хоста читал. Также я написал, что по dhcp клиент получает 192.168.5.200. Это вроде ip сети))) Но в случае с тапом это не так как бы

[fisher74]

ipp попробуйте очистить

[achilles_85]

fisher74, Его как раз и чистил, перезагружаю сервера, а там опять запись о клиенте. Хоть клиента отключай, запись появляется обратно.

[achilles_85]

fisher74,
На Win10 клиент получает настройки из папки ccd, а server 2012 нет. Тот лог с ошибкой он как раз с сервера 2012. Сервер также не может получить push "dhcp-option DNS 8.8.8.8". Выходит openvpn сервер я настраиваю правильно. Как заставить серверную винду нормально подключаться?

[fisher74]

Как заставить серверную винду нормально подключаться?

Это уже тема другого форума... ну или в курилку

[achilles_85]

Напишу для тех кто так же будет бодаться с виндой) Повесил какую-то старую сборку впн клиента, ошибка с тест роутес все равно вываливается, но! интерфейс поднимается и получает настройки днс и адреса из папки ccd от сервера. Так что Windows очередной раз похвасталась своими багами