OpenVPN for Windows to pfSense - route addition failed using CreateIpForwardEntry

[Patrick]

I have the strangest issue with OpenVPN for Windows. I have a VPN that will come up, but it will not pass traffic. I am using the same configuration and same client that will connect and pass to other VPN endpoints, so I know the client software is working. I checked configs of both server and client line-by-line and the only differences are the WAN IPs, tunnel IPs, and the LAN IPs.

On the WAN/ tunnel IP side, the tunnel will say it is connected so I am thinking the issue is the line that says: ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.

I tried a different WiFi network (my phone) and a wired one where I am remote but it does not seem to be local LAN IP ranges.

The most common Google answer seems to be run as Administrator. It is certainly was run as admin and works to other VPN endpoints.

Any ideas? Here is the OpenVPN log output:

Sat Mar 25 07:07:44 2017 open_tun
Sat Mar 25 07:07:44 2017 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{C3762B75-FBF4-46AA-AC39-DAE32624CAA6}.tap
Sat Mar 25 07:07:44 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.247.0/192.168.247.2/255.255.255.224 [SUCCEEDED]
Sat Mar 25 07:07:44 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.247.2/255.255.255.224 on interface {C3762B75-FBF4-46AA-AC39-DAE32624CAA6} [DHCP-serv: 192.168.247.30, lease-time: 31536000]
Sat Mar 25 07:07:44 2017 Successful ARP Flush on interface [16] {C3762B75-FBF4-46AA-AC39-DAE32624CAA6}
Sat Mar 25 07:07:44 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Mar 25 07:07:49 2017 Warning: address 192.168.1.1 is not a network address in relation to netmask 255.255.252.0
Sat Mar 25 07:07:49 2017 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.   [status=87 if_index=16]
Sat Mar 25 07:07:49 2017 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Mar 25 07:07:49 2017 Initialization Sequence Completed

 

[namike]

Sat Mar 25 07:07:49 2017 Warning: address 192.168.1.1 is not a network address in relation to netmask 255.255.252.0

Your mask (/22) does not match the given network (192.168.1.1). Given that netmask, your network would be 192.168.0.0/22 with a range of 192.168.0.0-192.168.3.254. I assume a typo in the netmask portion

 

[Patrick]

Ha! Simple things. Altitude is getting to me.

 

[Evan]

Amazing what a fresh set of eyes does in these instances. Somebody who has not been doing or looking at the config that week.

 

[AkLviaLDN]

Ha! Simple things. Altitude is getting to me.

Crikey, how tall are you?


Sent from my iPhone using Tapatalk

 

[rotsen]

Sat Mar 25 07:07:49 2017 Warning: address 192.168.1.1 is not a network address in relation to netmask 255.255.252.0

Your mask (/22) does not match the given network (192.168.1.1). Given that netmask, your network would be 192.168.0.0/22 with a range of 192.168.0.0-192.168.3.254. I assume a typo in the netmask portion

I am having this problem and I do not know enough,
can you explain to me why what do I need to do do.

Thanks

Rotsen

 

[chrisit]

@rotsen try changing 192.168.1.1 to 192.168.1.0, or from 192.168.0.1 to 192.168.0.0, or whatever your subnet is.

Also try a typical netmask of 24 which is written 255.255.255.0