Connection Issue

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Samuele.Massaro
    Junior Member
    • May 2024
    • 2

    Connection Issue

    Hello.
    Starting from saturday the 11th of May clients stop the connection suddenly for two times. Last was yesterday at about 20.15. When i noticed that all client disconnected i was able to acces the server and simply doing a Reconnct from OpenVPN GUI the client started to reconnect. This happened saturday 11 of May at about 19.15 too. The server/client configuration never changed since last one year an everything worked fine.
    No modification was applied to firewall NAT and rules, neither in the server or client config files.
    The only operation recently done is renewing server certificate on May 5.
    The clients are control devices with enbedded open vpn (not user computer or workstation).
    I'm using OpenVPN 2.5.5 based on Windows 2019 server.
    Looking at the server log, i started to see some errors and warnings that probably refers to NAT issues according what i've found in variuos forum and in your support website. E.G.:

    read UDP: Unknown error (code=10054)
    2024-05-15 20:11:11 ViaRaschietti/151.38.3.152:22068 [ViaRaschietti] Inactivity timeout (--ping-restart), restarting
    2024-05-15 20:11:11 ViaRaschietti/151.38.3.152:22068 SIGUSR1[soft,ping-restart] received, client-instance restarting

    2024-05-15 20:15:13 151.38.71.64:9086 SIGUSR1[soft,tls-error] received, client-instance restarting
    2024-05-15 20:15:13 151.38.71.64:9086 TLS: Initial packet from [AF_INET]151.38.71.64:9086, sid=9d2d500e 404910ad
    2024-05-15 20:16:13 151.38.71.64:9086 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    2024-05-15 20:16:13 151.38.71.64:9086 TLS Error: TLS handshake failed

    I attach the server configuration, one client configuraqtion file and server log.
    I'm planning to restart my main firewall and network connectivity devices but i won't be able to do until tomorrow.
    Thank you in advance for a feedback.
    Attached Files
  • Pippin
    Administrator
    • Dec 2023
    • 19

    #2
    In the server log I see lots of:
    2024-05-15 19:15:06 MULTI: new connection by client 'OPNervesa' will cause previous active sessions by this client to be dropped.
    Together with,
    The only operation recently done is renewing server certificate on May 5.
    The first thing is to make sure you do not have duplicate certificates.

    Also, server has
    Code:
    cipher AES-256-CBC
    while client has
    Code:
    cipher AES-256-GCM
    Please see
    --cipher alg
    --data-ciphers cipher-list
    --data-ciphers-fallback alg
    in manual 2.5:

    Comment

    Working...
    😀
    😂
    🥰
    😘
    🤢
    😎
    😞
    😡
    👍
    👎