OpenVPN for Windows to pfSense - route addition failed using CreateIpForwardEntry

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

Patrick

Administrator
Staff member
Dec 21, 2010
12,512
5,800
113
I have the strangest issue with OpenVPN for Windows. I have a VPN that will come up, but it will not pass traffic. I am using the same configuration and same client that will connect and pass to other VPN endpoints, so I know the client software is working. I checked configs of both server and client line-by-line and the only differences are the WAN IPs, tunnel IPs, and the LAN IPs.

On the WAN/ tunnel IP side, the tunnel will say it is connected so I am thinking the issue is the line that says: ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.

I tried a different WiFi network (my phone) and a wired one where I am remote but it does not seem to be local LAN IP ranges.

The most common Google answer seems to be run as Administrator. It is certainly was run as admin and works to other VPN endpoints.

Any ideas? Here is the OpenVPN log output:

Code:
Sat Mar 25 07:07:44 2017 open_tun
Sat Mar 25 07:07:44 2017 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{C3762B75-FBF4-46AA-AC39-DAE32624CAA6}.tap
Sat Mar 25 07:07:44 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.247.0/192.168.247.2/255.255.255.224 [SUCCEEDED]
Sat Mar 25 07:07:44 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.247.2/255.255.255.224 on interface {C3762B75-FBF4-46AA-AC39-DAE32624CAA6} [DHCP-serv: 192.168.247.30, lease-time: 31536000]
Sat Mar 25 07:07:44 2017 Successful ARP Flush on interface [16] {C3762B75-FBF4-46AA-AC39-DAE32624CAA6}
Sat Mar 25 07:07:44 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Mar 25 07:07:49 2017 Warning: address 192.168.1.1 is not a network address in relation to netmask 255.255.252.0
Sat Mar 25 07:07:49 2017 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.   [status=87 if_index=16]
Sat Mar 25 07:07:49 2017 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Sat Mar 25 07:07:49 2017 Initialization Sequence Completed
 

namike

Member
Sep 2, 2014
70
18
8
43
Code:
Sat Mar 25 07:07:49 2017 Warning: address 192.168.1.1 is not a network address in relation to netmask 255.255.252.0
Your mask (/22) does not match the given network (192.168.1.1). Given that netmask, your network would be 192.168.0.0/22 with a range of 192.168.0.0-192.168.3.254. I assume a typo in the netmask portion :)
 

Evan

Well-Known Member
Jan 6, 2016
3,346
598
113
Amazing what a fresh set of eyes does in these instances. Somebody who has not been doing or looking at the config that week.
 
  • Like
Reactions: chilipepperz

rotsen

New Member
May 19, 2019
1
0
1
Code:
Sat Mar 25 07:07:49 2017 Warning: address 192.168.1.1 is not a network address in relation to netmask 255.255.252.0
Your mask (/22) does not match the given network (192.168.1.1). Given that netmask, your network would be 192.168.0.0/22 with a range of 192.168.0.0-192.168.3.254. I assume a typo in the netmask portion :)
I am having this problem and I do not know enough,
can you explain to me why what do I need to do do.

Thanks

Rotsen
 

chrisit

New Member
May 25, 2019
1
0
1
@rotsen try changing 192.168.1.1 to 192.168.1.0, or from 192.168.0.1 to 192.168.0.0, or whatever your subnet is.

Also try a typical netmask of 24 which is written 255.255.255.0
 
Last edited: