[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Web openvpn.net

[Openvpn-users] Certain certs can't acquire IP address

  • Subject: [Openvpn-users] Certain certs can't acquire IP address
  • From: "Craig Jackson" <CJackson@xxxxxxxxxxxxxxxxx>
  • Date: Sat, 21 Jul 2007 09:56:07 -0500


This is a very nasty problem. And somewhat urgent.

Certain certificates connect to the Openvpn server and are assigned an
IP address but the Tap 32 device is unable to acquire the address. The
Windows event log says first this:

The Network Address Translator (NAT) was unable to request an operation
of the kernel-mode translation module. This may indicate
misconfiguration, insufficient resources, or an internal error. The data
is the error code

Then the event log says this repeatedly:

The IP address lease for the Network Card with network address
00FF25AAD7E9 has been denied by the DHCP server (The DHCP
Server sent a DHCPNACK message).

Other certificates on the same computer work fine. The same problematic
certificates fail on other computers also. This is a real problem
because those problematic certificate have already been distributed and
were all working at one time. Note that each certificate is unique and
gets a unique IP address of which there are plenty.

Using OpenVPN 2.0.9 in bridge mode on XP SP2 with openvpnGUIv1.0rc4
OpenVPN mailing lists