VPN Connection issue. Server is running Squid3 transparent.

----------------------------------------
Interface config

auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet dhcp
dns-nameserver 8.8.8.8

auto eth1
iface eth1 inet manual
 up ip link set $IFACE up promisc on

auto br0
iface br0 inet static
 address 192.168.2.1
 netmask 255.255.255.0
 bridge_ports eth1

--------------------------------------
Server Conf

port 1194
proto udp
dev tap
up "/etc/openvpn/up.sh br0 eth1"
ca ****
cert ****
key ****
dh ****
ifconfig-pool-persist ipp.txt
server-bridge 192.168.2.1 255.255.255.0 192.168.2.100 192.168.2.101
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

-------------------------------------
up.sh

#!/bin/sh

BR=$1
ETHDEV=$2
TAPDEV=$3

/sbin/ip link set "$TAPDEV" up
/sbin/ip link set "$ETHDEV" promisc on
/sbin/brctl addif $BR $TAPDEV

---------------------------------------
Client Config on Windows
client
remote 70.179.xxx.xxx
port 1194
proto udp
dev tun
dev-type tun
ns-cert-type server
reneg-sec 86400
# auth-user-pass
# auth-retry interact
comp-lzo yes
verb 3
ca ****.crt
cert ****.crt
key ****
# management 127.0.0.1 1194
# management-hold
# management-query-passwords
auth-retry interact
; Set the name of the Windows TAP network interface device here
dev-node MyTAP

---------------------------------------
syslog of vpn connection

Mar 28 00:24:49 SquidTrans ovpn-server[21347]: client1/50.201.xxs.xxs:1194 TLS: new session incoming connection from [AF_INET]50.201.xxx.xxx:1194
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 VERIFY OK: depth=1, C=US, ST=XX, L=XX, O=MyVPN, OU=MyVPN, CN=MyVPN CA, name=MyVPN, [email protected]
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 VERIFY OK: depth=0, C=US, ST=XX, L=XX, O=MyVPN, OU=MyVPN, CN=client1, name=MyVPN, [email protected]
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 WARNING: 'dev-type' is used inconsistently, local='dev-type tap', remote='dev-type tun'
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1574', remote='link-mtu 1542'
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 TLS: tls_multi_process: untrusted session promoted to semi-trusted
Mar 28 00:24:50 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mar 28 00:24:53 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 PUSH: Received control message: 'PUSH_REQUEST'
Mar 28 00:24:53 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 send_push_reply(): safe_cap=940
Mar 28 00:24:53 SquidTrans ovpn-server[21347]: client1/50.201.xxx.xxx:1194 SENT CONTROL [client1]: 'PUSH_REPLY,route-gateway 192.168.2.1,ping 10,ping-restart 120,ifconfig 192.168.2.100 255.255.255.0' (status=1)

----------------------------------------------
Final message on OpenVPN connection from windows machine.

There is a problem in your selection of --ifconfig endpoints [local=192.168.2.100, remote=255.255.255.0]. The local and remote VPN enpoints must exist within the same 255.255.255.252 subnet. This is a limitation of -dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.