Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN (SSL/TLS,TCP,Client) No Management Daemon

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    11 Posts 2 Posters 7.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      meson
      last edited by

      Hello,

      I've a little problem with OpenVPN in clientmode to some ipcop/zerina boxes. I've tested several 2.0-BETA4 (i386) snapshots of the last days. After getting things up and running all seemed fine until the first 24hour reconnect occurred.
      After reconnecting only 1 or 2 of my 3 tunnels reestablish. The other Tunnels are listed as "down" and the Remote Host entry at the status page says "No Management Daemon".

      If I start the tunnels in the services tab or by editing the respective entries the tunnels are established and all is running fine until the next reconnect. Rebooting the pfsense box shows the same behavior.
      Sounds a little bit like the problem mentioned in the sticky thread http://forum.pfsense.org/index.php/topic,25183.msg130482.html#msg130482
      but its a fresh installation and I deleted one of the tunnel definitions and recreated it, to make sure that it had never seen the "Disable this client" option.

      The OpenVPN/System logs don't show anything about the tunnels not running, only for the running tunnels entries are created. Furthermore it seems like after reboot every time the first tunnel in the list (and only this one) is started
      whereas after a normal reconnect it seems that random tunnels are reestablished.

      Maybe you have any suggestions or need some logs?

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        What type of connection do you have on WAN?

        All of those OpenVPN instances should be starting at boot. If you get that "no management daemon" error now it's probably because that OpenVPN instance is not running at all, as you confirmed on the Status > Services page.

        Your post seems to contradict itself though, or perhaps I'm not reading it right. You said at first that after a 24-hour disconnect/reconnect that they did not come up properly, but later you said they didn't come up properly on bootup but they did come back up after a reconnect. So which is it?  The system log (not the OpenVPN log) might have some information about why it didn't start.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • M
          meson
          last edited by

          Thanks for your reply, I admit - sounds a little confusing, so here again a little bit more in order:

          1. after reboot
          -only one tunnel is started, an it hardly seems that its always the same one

          2. after reboot
          -started missing tunnels manually at the services tab
          -tunnels come up instantly, seems ok then

          3. after reconnect
          -random tunnels are restarted properly and come up after a while
          -noticeable is, that the ones which don't come back, are listed with "No Management Daemon" instantly (03_after_reconnect_status_01.jpg)

          01_after_reboot_services.jpg
          01_after_reboot_services.jpg_thumb
          01_after_reboot_status.jpg
          01_after_reboot_status.jpg_thumb
          02_started_services_status.jpg
          02_started_services_status.jpg_thumb
          03_after_reconnect_services.jpg
          03_after_reconnect_services.jpg_thumb
          03_after_reconnect_status_01.jpg
          03_after_reconnect_status_01.jpg_thumb
          03_after_reconnect_status_02.jpg
          03_after_reconnect_status_02.jpg_thumb
          01_after_reboot_system_log.txt
          03_after_reconnect_system_log.txt

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            The actual config from those OpenVPN instances might be more useful to see, along with the system logs

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • M
              meson
              last edited by

              Here the config and the whole system log…

              client1.conf.txt
              client2.conf.txt
              client3.conf.txt
              system.log.txt

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                Nothing really noteworthy there… How about the actual GUI portion of the OpenVPN config, not the generated config files.

                That, and the system log file.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • M
                  meson
                  last edited by

                  Thanks for your Help! Attached the Screenshots and the system.log of the past days.

                  Maybe I should try reinstalling the box if I'm the only one with this issue?

                  server_tab.jpg
                  server_tab.jpg_thumb
                  client_tab.jpg
                  client_tab.jpg_thumb
                  system.log.txt

                  1 Reply Last reply Reply Quote 0
                  • M
                    meson
                    last edited by

                    some more

                    dapr_kl.jpg
                    dapr_kl.jpg_thumb
                    dagl_kl.jpg
                    dagl_kl.jpg_thumb
                    dagb_kl.jpg
                    dagb_kl.jpg_thumb

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      Looks like you may be on a snapshot that has a bug with check_reload_status starting too many times. It might be contributing.

                      Wait for the next new snapshot (it's building right now) and then upgrade and try it out again.

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • M
                        meson
                        last edited by

                        I have tried the last snapshots, but the unfortunately the problem remains. Here the actual system log, seems that the ceck_reload_status behavior has changed. Maybe you have another idea?

                        system.log.txt

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          Still looks rather erratic, as though there are connectivity issues between all of the sites that make the tunnels go up and down.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.