Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    losing OpenVPN connection every 20 - 120 seconds

    Scheduled Pinned Locked Moved OpenVPN
    76 Posts 7 Posters 12.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      akkiz @akkiz
      last edited by

      @akkiz no difference still disconnects......

      1 Reply Last reply Reply Quote 0
      • A
        akkiz @chpalmer
        last edited by

        @chpalmer i also tried connecting a modem before pf box and used dhcp in wan interface but the problem is still same and wan ip never changes

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Where did you get all those custom options from in the OpenVPN setup? Most of those are duplicated in the normal settings anyway.

          I don't actually see any errors there. The connection comes up and receives a new IP from the server. It's assigned so has a gateway, pfSense treats it as a WAN and triggers the appropriate scripts when that happens. You could disable 'gateway monitoring action' for now to reduce what is run there.

          Do you have a conflict with the LAN? What subnet are you running there? Can we see the routing table from Diag > Routes?

          Steve

          A 1 Reply Last reply Reply Quote 0
          • A
            akkiz @stephenw10
            last edited by akkiz

            @stephenw10 hi custom options were taken as per user guide of express vpn i deleted them made no difference ,also gateway monitoring was disabled didnt help either
            ss13.jpg ss12.jpg ss1.jpg

            1 Reply Last reply Reply Quote 0
            • chpalmerC
              chpalmer
              last edited by

              my guess is that your ISP is doing something funky with traffic and affecting your VPN. Have you rebooted your modem device? Maybe contact the ISP and ask if they have been having issues..

              We have over 10 OpenVPN instances running between here and various locations and I can tell you that rarely do they ever go down. And if they do its a connectivity issue..

              Triggering snowflakes one by one..
              Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

              A 1 Reply Last reply Reply Quote 0
              • A
                akkiz @chpalmer
                last edited by akkiz

                @chpalmer yes the isp here blocks vpn networks just like china,but internet speeds are very very good its a 250/50mbps line but on open vpn i usually get 50mbps on my laptop using express vpn app,like i told ddwrt works fine,and yes i rebooted
                Screenshot_20200109-214243_Speedtest.jpg

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                  also gateway monitoring was disabled didnt help either

                  Don't disable monitoring disable the monitoring action.

                  The routing table looks OK except that I see only ovpnc2 there and your logs earlier showed ovpnc1. Havbe you configured two clients connecting to the same server? Are they still both enabled and disconnecting each other?

                  It looks to be connecting to the server since you're getting an IP address. Do you see any traffic coming back across the tunnel? Check the Status > OpenVPN page for traffic in both directions.

                  Steve

                  A 1 Reply Last reply Reply Quote 0
                  • A
                    akkiz @stephenw10
                    last edited by akkiz

                    @stephenw10 ok i enabled monitoring as u adviced,yes i added 2 clients but enabled only one but no effect still disconnecting
                    23.png 22.png

                    1 Reply Last reply Reply Quote 0
                    • GertjanG
                      Gertjan @akkiz
                      last edited by Gertjan

                      Hi,

                      This is something I didn't see before :

                      @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                      Jan 8 18:52:14 php-fpm 342 /rc.newwanip: rc.newwanip called with empty interface.

                      This is an error condition.
                      Way back, the pfSense coders said this about the event of a "empty interface" :

                      /* XXX: This really possible? */

                      ( see the rc.rc.newwanip file )
                      So, a very special situation - I can't tell anything more. Never saw such a issue.
                      The result will be :
                      Filters - firewall re reloaled.
                      Packages get restarted.
                      ... and bail out.

                      Btw : this is me just thinking out loud.
                      I do have an Express VPN account, but never set it up with pfSense.

                      re-edit : "Empty interface" is normal after all: The VPN clients is bound to an Interface (bu you : the OPT1 interface) without an IPv4 or IPv6 specified. That's ok.

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      A 1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Ok so it connects and there is two way traffic and then presumably it disconnects.

                        Let see more OpenVPN logs showing that happening.

                        1 Reply Last reply Reply Quote 0
                        • A
                          akkiz @Gertjan
                          last edited by akkiz

                          @Gertjan @stephenw10 ok

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            akkiz @akkiz
                            last edited by akkiz

                            @stephenw10
                            Last 50 OpenVPN Log Entries. (Maximum 50)
                            Jan 10 20:18:52 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:18:52 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:18:52 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:18:55 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:18:55 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:18:55 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:18:59 openvpn 79060 [UNDEF] Inactivity timeout (--ping-restart), restarting
                            Jan 10 20:18:59 openvpn 79060 SIGUSR1[soft,ping-restart] received, process restarting
                            Jan 10 20:18:59 openvpn 79060 Restart pause, 10 second(s)
                            Jan 10 20:19:09 openvpn 79060 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                            Jan 10 20:19:09 openvpn 79060 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                            Jan 10 20:19:09 openvpn 79060 TCP/UDP: Preserving recently used remote address: [AF_INET]185.128.27.148:1195
                            Jan 10 20:19:09 openvpn 79060 Socket Buffers: R=[42080->524288] S=[57344->524288]
                            Jan 10 20:19:09 openvpn 79060 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                            Jan 10 20:19:09 openvpn 79060 UDPv4 link remote: [AF_INET]185.128.27.148:1195
                            Jan 10 20:19:15 openvpn 79060 TLS: Initial packet from [AF_INET]185.128.27.148:1195, sid=e15210b7 adc6f7b9
                            Jan 10 20:19:15 openvpn 79060 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
                            Jan 10 20:19:15 openvpn 79060 VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
                            Jan 10 20:19:15 openvpn 79060 VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3360-1a, emailAddress=support@expressvpn.com
                            Jan 10 20:19:15 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:19:15 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:19:15 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:19:24 openvpn 79060 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1606'
                            Jan 10 20:19:24 openvpn 79060 WARNING: 'mtu-dynamic' is present in remote config but missing in local config, remote='mtu-dynamic'
                            Jan 10 20:19:24 openvpn 79060 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
                            Jan 10 20:19:24 openvpn 79060 [Server-3360-1a] Peer Connection Initiated with [AF_INET]185.128.27.148:1195
                            Jan 10 20:19:25 openvpn 79060 SENT CONTROL [Server-3360-1a]: 'PUSH_REQUEST' (status=1)
                            Jan 10 20:19:25 openvpn 79060 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.187.0.1,comp-lzo no,route 10.187.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.187.0.38 10.187.0.37,peer-id 7'
                            Jan 10 20:19:25 openvpn 79060 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
                            Jan 10 20:19:25 openvpn 79060 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
                            Jan 10 20:19:25 openvpn 79060 Options error: option 'route' cannot be used in this context ([PUSH-OPTIONS])
                            Jan 10 20:19:25 openvpn 79060 OPTIONS IMPORT: timers and/or timeouts modified
                            Jan 10 20:19:25 openvpn 79060 OPTIONS IMPORT: compression parms modified
                            Jan 10 20:19:25 openvpn 79060 OPTIONS IMPORT: --ifconfig/up options modified
                            Jan 10 20:19:25 openvpn 79060 OPTIONS IMPORT: peer-id set
                            Jan 10 20:19:25 openvpn 79060 OPTIONS IMPORT: adjusting link_mtu to 1625
                            Jan 10 20:19:25 openvpn 79060 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                            Jan 10 20:19:25 openvpn 79060 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                            Jan 10 20:19:25 openvpn 79060 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                            Jan 10 20:19:25 openvpn 79060 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                            Jan 10 20:19:25 openvpn 79060 TUN/TAP device ovpnc2 exists previously, keep at program end
                            Jan 10 20:19:25 openvpn 79060 TUN/TAP device /dev/tun2 opened
                            Jan 10 20:19:25 openvpn 79060 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
                            Jan 10 20:19:25 openvpn 79060 /sbin/ifconfig ovpnc2 10.187.0.38 10.187.0.37 mtu 1500 netmask 255.255.255.255 up
                            Jan 10 20:19:25 openvpn 79060 /usr/local/sbin/ovpn-linkup ovpnc2 1500 1605 10.187.0.38 10.187.0.37 init
                            Jan 10 20:19:25 openvpn 79060 Initialization Sequence Completed
                            Jan 10 20:19:35 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:19:35 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:19:35 openvpn 79060 MANAGEMENT: CMD 'status 2'
                            Jan 10 20:19:35 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:21:54 openvpn 79060 OPTIONS IMPORT: --ifconfig/up options modified
                            Jan 10 20:21:54 openvpn 79060 OPTIONS IMPORT: peer-id set
                            Jan 10 20:21:54 openvpn 79060 OPTIONS IMPORT: adjusting link_mtu to 1625
                            Jan 10 20:21:54 openvpn 79060 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                            Jan 10 20:21:54 openvpn 79060 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                            Jan 10 20:21:54 openvpn 79060 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                            Jan 10 20:21:54 openvpn 79060 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                            Jan 10 20:21:54 openvpn 79060 Preserving previous TUN/TAP instance: ovpnc2
                            Jan 10 20:21:54 openvpn 79060 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
                            Jan 10 20:21:54 openvpn 79060 Closing TUN/TAP interface
                            Jan 10 20:21:54 openvpn 79060 /usr/local/sbin/ovpn-linkdown ovpnc2 1500 1605 10.187.0.38 10.187.0.37 init
                            Jan 10 20:21:55 openvpn 79060 TUN/TAP device ovpnc2 exists previously, keep at program end
                            Jan 10 20:21:55 openvpn 79060 TUN/TAP device /dev/tun2 opened
                            Jan 10 20:21:55 openvpn 79060 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
                            Jan 10 20:21:55 openvpn 79060 /sbin/ifconfig ovpnc2 10.87.0.90 10.87.0.89 mtu 1500 netmask 255.255.255.255 up
                            Jan 10 20:21:55 openvpn 79060 /usr/local/sbin/ovpn-linkup ovpnc2 1500 1605 10.87.0.90 10.87.0.89 init
                            Jan 10 20:21:55 openvpn 79060 Initialization Sequence Completed
                            Jan 10 20:22:04 openvpn 79060 Bad compression stub decompression header byte: 0
                            Jan 10 20:22:14 openvpn 79060 Bad compression stub decompression header byte: 0
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: CMD 'status 2'
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: CMD 'status 2'
                            Jan 10 20:22:19 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:22:22 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:22:22 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:22:22 openvpn 79060 MANAGEMENT: CMD 'status 2'
                            Jan 10 20:22:22 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:22:45 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:22:45 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:22:45 openvpn 79060 MANAGEMENT: CMD 'status 2'
                            Jan 10 20:22:45 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:22:54 openvpn 79060 [Server-2719-0a] Inactivity timeout (--ping-restart), restarting
                            Jan 10 20:22:54 openvpn 79060 SIGUSR1[soft,ping-restart] received, process restarting
                            Jan 10 20:22:54 openvpn 79060 Restart pause, 10 second(s)
                            Jan 10 20:23:04 openvpn 79060 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                            Jan 10 20:23:04 openvpn 79060 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                            Jan 10 20:23:04 openvpn 79060 TCP/UDP: Preserving recently used remote address: [AF_INET]185.183.105.194:1195
                            Jan 10 20:23:04 openvpn 79060 Socket Buffers: R=[42080->524288] S=[57344->524288]
                            Jan 10 20:23:04 openvpn 79060 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                            Jan 10 20:23:04 openvpn 79060 UDPv4 link remote: [AF_INET]185.183.105.194:1195
                            Jan 10 20:23:20 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:23:20 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:23:20 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:23:26 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:23:26 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:23:26 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:23:04 openvpn 79060 Socket Buffers: R=[42080->524288] S=[57344->524288]
                            Jan 10 20:23:04 openvpn 79060 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                            Jan 10 20:23:04 openvpn 79060 UDPv4 link remote: [AF_INET]185.183.105.194:1195
                            Jan 10 20:23:20 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:23:20 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:23:20 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:23:26 openvpn 79060 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                            Jan 10 20:23:26 openvpn 79060 MANAGEMENT: CMD 'state 1'
                            Jan 10 20:23:26 openvpn 79060 MANAGEMENT: Client disconnected
                            Jan 10 20:24:04 openvpn 79060 [UNDEF] Inactivity timeout (--ping-restart), restarting
                            Jan 10 20:24:04 openvpn 79060 SIGUSR1[soft,ping-restart] received, process restarting
                            Jan 10 20:24:04 openvpn 79060 Restart pause, 10 second(s)
                            Jan 10 20:24:14 openvpn 79060 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                            Jan 10 20:24:14 openvpn 79060 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                            Jan 10 20:24:14 openvpn 79060 TCP/UDP: Preserving recently used remote address: [AF_INET]37.120.135.136:1195
                            Jan 10 20:24:14 openvpn 79060 Socket Buffers: R=[42080->524288] S=[57344->524288]
                            Jan 10 20:24:14 openvpn 79060 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                            Jan 10 20:24:14 openvpn 79060 UDPv4 link remote: [AF_INET]37.120.135.136:1195
                            Jan 10 20:24:20 openvpn 79060 TLS: Initial packet from [AF_INET]37.120.135.136:1195, sid=9315b41a e4a2f938
                            Jan 10 20:24:20 openvpn 79060 VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
                            Jan 10 20:24:20 openvpn 79060 VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-5165-1a, emailAddress=support@expressvpn.com
                            Jan 10 20:24:20 openvpn 79060 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1606'
                            Jan 10 20:24:20 openvpn 79060 WARNING: 'mtu-dynamic' is present in remote config but missing in local config, remote='mtu-dynamic'
                            Jan 10 20:24:20 openvpn 79060 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
                            Jan 10 20:24:20 openvpn 79060 [Server-5165-1a] Peer Connection Initiated with [AF_INET]37.120.135.136:1195
                            Jan 10 20:24:21 openvpn 79060 SENT CONTROL [Server-5165-1a]: 'PUSH_REQUEST' (status=1)
                            Jan 10 20:24:21 openvpn 79060 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.17.0.1,comp-lzo no,route 10.17.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.17.0.66 10.17.0.65,peer-id 13'
                            Jan 10 20:24:21 openvpn 79060 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
                            Jan 10 20:24:21 openvpn 79060 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
                            Jan 10 20:24:21 openvpn 79060 Options error: option 'route' cannot be used in this context ([PUSH-OPTIONS])
                            Jan 10 20:24:21 openvpn 79060 OPTIONS IMPORT: timers and/or timeouts modified
                            Jan 10 20:24:21 openvpn 79060 OPTIONS IMPORT: compression parms modified
                            Jan 10 20:24:21 openvpn 79060 OPTIONS IMPORT: --ifconfig/up options modified
                            Jan 10 20:24:21 openvpn 79060 OPTIONS IMPORT: peer-id set
                            Jan 10 20:24:21 openvpn 79060 OPTIONS IMPORT: adjusting link_mtu to 1625
                            Jan 10 20:24:21 openvpn 79060 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                            Jan 10 20:24:21 openvpn 79060 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                            Jan 10 20:24:21 openvpn 79060 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                            Jan 10 20:24:21 openvpn 79060 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                            Jan 10 20:24:21 openvpn 79060 Preserving previous TUN/TAP instance: ovpnc2
                            Jan 10 20:24:21 openvpn 79060 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
                            Jan 10 20:24:21 openvpn 79060 Closing TUN/TAP interface
                            Jan 10 20:24:21 openvpn 79060 /usr/local/sbin/ovpn-linkdown ovpnc2 1500 1605 10.87.0.90 10.87.0.89 init
                            Jan 10 20:24:22 openvpn 79060 TUN/TAP device ovpnc2 exists previously, keep at program end
                            Jan 10 20:24:22 openvpn 79060 TUN/TAP device /dev/tun2 opened
                            Jan 10 20:24:22 openvpn 79060 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
                            Jan 10 20:24:22 openvpn 79060 /sbin/ifconfig ovpnc2 10.17.0.66 10.17.0.65 mtu 1500 netmask 255.255.255.255 up
                            Jan 10 20:24:22 openvpn 79060 /usr/local/sbin/ovpn-linkup ovpnc2 1500 1605 10.17.0.66 10.17.0.65 init
                            Jan 10 20:24:22 openvpn 79060 Initialization Sequence Completed
                            Jan 10 20:24:31 openvpn 79060 Bad compression stub decompression header byte: 0
                            Jan 10 20:24:31 openvpn 79060 Bad compression stub decompression header byte: 0
                            Jan 10 20:24:39 openvpn 79060 Bad compression stub decompression header byte: 0
                            Jan 10 20:25:21 openvpn 79060 [Server-5165-1a] Inactivity timeout (--ping-restart), restarting
                            Jan 10 20:25:21 openvpn 79060 SIGUSR1[soft,ping-restart] received, process restarting
                            Jan 10 20:25:21 openvpn 79060 Restart pause, 10 second(s)
                            Jan 10 20:25:31 openvpn 79060 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                            Jan 10 20:25:31 openvpn 79060 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                            Jan 10 20:25:31 openvpn 79060 TCP/UDP: Preserving recently used remote address: [AF_INET]37.120.135.136:1195
                            Jan 10 20:25:31 openvpn 79060 Socket Buffers: R=[42080->524288] S=[57344->524288]
                            Jan 10 20:25:31 openvpn 79060 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                            Jan 10 20:25:31 openvpn 79060 UDPv4 link remote: [AF_INET]37.120.135.136:1195
                            Jan 10 20:26:31 openvpn 79060 [UNDEF] Inactivity timeout (--ping-restart), restarting
                            Jan 10 20:26:31 openvpn 79060 SIGUSR1[soft,ping-restart] received, process restarting
                            Jan 10 20:26:31 openvpn 79060 Restart pause, 10 second(s)
                            Jan 10 20:26:41 openvpn 79060 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                            Jan 10 20:26:41 openvpn 79060 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                            Jan 10 20:26:41 openvpn 79060 TCP/UDP: Preserving recently used remote address: [AF_INET]185.128.27.148:1195
                            Jan 10 20:26:41 openvpn 79060 Socket Buffers: R=[42080->524288] S=[57344->524288]
                            Jan 10 20:26:41 openvpn 79060 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                            Jan 10 20:26:41 openvpn 79060 UDPv4 link remote: [AF_INET]185.128.27.148:1195
                            Jan 10 20:27:41 openvpn 79060 [UNDEF] Inactivity timeout (--ping-restart), restarting
                            Jan 10 20:27:41 openvpn 79060 SIGUSR1[soft,ping-restart] received, process restarting
                            Jan 10 20:27:41 openvpn 79060 Restart pause, 10 second(s)

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Looks like you have a compression mismatch. The server is pushing comp-lzo no but you have it enabled in both the gui setup and custom options (if you still have those). Try setting it to 'Omit Preference' instead.

                              Steve

                              A 1 Reply Last reply Reply Quote 0
                              • A
                                akkiz @stephenw10
                                last edited by akkiz

                                didnt help and custom options was blank

                                A 1 Reply Last reply Reply Quote 0
                                • A
                                  akkiz @akkiz
                                  last edited by

                                  @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                                  didnt help and custom options was blank

                                  Jan 10 21:23:17 openvpn 51111 MANAGEMENT: Client disconnected
                                  Jan 10 21:23:18 openvpn 51111 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                                  Jan 10 21:23:18 openvpn 51111 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                                  Jan 10 21:23:18 openvpn 51111 TCP/UDP: Preserving recently used remote address: [AF_INET]37.120.135.136:1195
                                  Jan 10 21:23:18 openvpn 51111 Socket Buffers: R=[42080->524288] S=[57344->524288]
                                  Jan 10 21:23:18 openvpn 51111 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                                  Jan 10 21:23:18 openvpn 51111 UDPv4 link remote: [AF_INET]37.120.135.136:1195
                                  Jan 10 21:23:37 openvpn 51111 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                                  Jan 10 21:23:37 openvpn 51111 MANAGEMENT: CMD 'state 1'
                                  Jan 10 21:23:37 openvpn 51111 MANAGEMENT: Client disconnected
                                  Jan 10 21:24:18 openvpn 51111 [UNDEF] Inactivity timeout (--ping-restart), restarting
                                  Jan 10 21:24:18 openvpn 51111 SIGUSR1[soft,ping-restart] received, process restarting
                                  Jan 10 21:24:18 openvpn 51111 Restart pause, 10 second(s)
                                  Jan 10 21:24:28 openvpn 51111 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                                  Jan 10 21:24:28 openvpn 51111 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                                  Jan 10 21:24:28 openvpn 51111 TCP/UDP: Preserving recently used remote address: [AF_INET]185.183.105.194:1195
                                  Jan 10 21:24:28 openvpn 51111 Socket Buffers: R=[42080->524288] S=[57344->524288]
                                  Jan 10 21:24:28 openvpn 51111 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                                  Jan 10 21:24:28 openvpn 51111 UDPv4 link remote: [AF_INET]185.183.105.194:1195
                                  Jan 10 21:24:28 openvpn 51111 TLS: Initial packet from [AF_INET]185.183.105.194:1195, sid=bca25ec8 d3025870
                                  Jan 10 21:24:28 openvpn 51111 VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
                                  Jan 10 21:24:28 openvpn 51111 VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-2719-0a, emailAddress=support@expressvpn.com
                                  Jan 10 21:24:29 openvpn 51111 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1606'
                                  Jan 10 21:24:29 openvpn 51111 WARNING: 'mtu-dynamic' is present in remote config but missing in local config, remote='mtu-dynamic'
                                  Jan 10 21:24:29 openvpn 51111 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
                                  Jan 10 21:24:29 openvpn 51111 [Server-2719-0a] Peer Connection Initiated with [AF_INET]185.183.105.194:1195
                                  Jan 10 21:24:30 openvpn 51111 SENT CONTROL [Server-2719-0a]: 'PUSH_REQUEST' (status=1)
                                  Jan 10 21:24:30 openvpn 51111 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.87.0.1,comp-lzo no,route 10.87.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.87.0.38 10.87.0.37,peer-id 6'
                                  Jan 10 21:24:30 openvpn 51111 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
                                  Jan 10 21:24:30 openvpn 51111 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
                                  Jan 10 21:24:30 openvpn 51111 Options error: option 'route' cannot be used in this context ([PUSH-OPTIONS])
                                  Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: timers and/or timeouts modified
                                  Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: compression parms modified
                                  Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: --ifconfig/up options modified
                                  Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: peer-id set
                                  Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: adjusting link_mtu to 1625
                                  Jan 10 21:24:30 openvpn 51111 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                                  Jan 10 21:24:30 openvpn 51111 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                                  Jan 10 21:24:30 openvpn 51111 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                                  Jan 10 21:24:30 openvpn 51111 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                                  Jan 10 21:24:30 openvpn 51111 Preserving previous TUN/TAP instance: ovpnc2
                                  Jan 10 21:24:30 openvpn 51111 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
                                  Jan 10 21:24:30 openvpn 51111 Closing TUN/TAP interface
                                  Jan 10 21:24:30 openvpn 51111 /usr/local/sbin/ovpn-linkdown ovpnc2 1500 1605 10.17.0.98 10.17.0.97 init
                                  Jan 10 21:24:31 openvpn 51111 TUN/TAP device ovpnc2 exists previously, keep at program end
                                  Jan 10 21:24:31 openvpn 51111 TUN/TAP device /dev/tun2 opened
                                  Jan 10 21:24:31 openvpn 51111 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
                                  Jan 10 21:24:31 openvpn 51111 /sbin/ifconfig ovpnc2 10.87.0.38 10.87.0.37 mtu 1500 netmask 255.255.255.255 up
                                  Jan 10 21:24:31 openvpn 51111 /usr/local/sbin/ovpn-linkup ovpnc2 1500 1605 10.87.0.38 10.87.0.37 init
                                  Jan 10 21:24:31 openvpn 51111 Initialization Sequence Completed

                                  A 1 Reply Last reply Reply Quote 0
                                  • A
                                    akkiz @akkiz
                                    last edited by

                                    @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                                    @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                                    didnt help and custom options was blank

                                    Jan 10 21:23:17 openvpn 51111 MANAGEMENT: Client disconnected
                                    Jan 10 21:23:18 openvpn 51111 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                                    Jan 10 21:23:18 openvpn 51111 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                                    Jan 10 21:23:18 openvpn 51111 TCP/UDP: Preserving recently used remote address: [AF_INET]37.120.135.136:1195
                                    Jan 10 21:23:18 openvpn 51111 Socket Buffers: R=[42080->524288] S=[57344->524288]
                                    Jan 10 21:23:18 openvpn 51111 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                                    Jan 10 21:23:18 openvpn 51111 UDPv4 link remote: [AF_INET]37.120.135.136:1195
                                    Jan 10 21:23:37 openvpn 51111 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                                    Jan 10 21:23:37 openvpn 51111 MANAGEMENT: CMD 'state 1'
                                    Jan 10 21:23:37 openvpn 51111 MANAGEMENT: Client disconnected
                                    Jan 10 21:24:18 openvpn 51111 [UNDEF] Inactivity timeout (--ping-restart), restarting
                                    Jan 10 21:24:18 openvpn 51111 SIGUSR1[soft,ping-restart] received, process restarting
                                    Jan 10 21:24:18 openvpn 51111 Restart pause, 10 second(s)
                                    Jan 10 21:24:28 openvpn 51111 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                                    Jan 10 21:24:28 openvpn 51111 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                                    Jan 10 21:24:28 openvpn 51111 TCP/UDP: Preserving recently used remote address: [AF_INET]185.183.105.194:1195
                                    Jan 10 21:24:28 openvpn 51111 Socket Buffers: R=[42080->524288] S=[57344->524288]
                                    Jan 10 21:24:28 openvpn 51111 UDPv4 link local (bound): [AF_INET]2.51.235.8:0
                                    Jan 10 21:24:28 openvpn 51111 UDPv4 link remote: [AF_INET]185.183.105.194:1195
                                    Jan 10 21:24:28 openvpn 51111 TLS: Initial packet from [AF_INET]185.183.105.194:1195, sid=bca25ec8 d3025870
                                    Jan 10 21:24:28 openvpn 51111 VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
                                    Jan 10 21:24:28 openvpn 51111 VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-2719-0a, emailAddress=support@expressvpn.com
                                    Jan 10 21:24:29 openvpn 51111 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1606'
                                    Jan 10 21:24:29 openvpn 51111 WARNING: 'mtu-dynamic' is present in remote config but missing in local config, remote='mtu-dynamic'
                                    Jan 10 21:24:29 openvpn 51111 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
                                    Jan 10 21:24:29 openvpn 51111 [Server-2719-0a] Peer Connection Initiated with [AF_INET]185.183.105.194:1195
                                    Jan 10 21:24:30 openvpn 51111 SENT CONTROL [Server-2719-0a]: 'PUSH_REQUEST' (status=1)
                                    Jan 10 21:24:30 openvpn 51111 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.87.0.1,comp-lzo no,route 10.87.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.87.0.38 10.87.0.37,peer-id 6'
                                    Jan 10 21:24:30 openvpn 51111 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
                                    Jan 10 21:24:30 openvpn 51111 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
                                    Jan 10 21:24:30 openvpn 51111 Options error: option 'route' cannot be used in this context ([PUSH-OPTIONS])
                                    Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: timers and/or timeouts modified
                                    Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: compression parms modified
                                    Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: --ifconfig/up options modified
                                    Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: peer-id set
                                    Jan 10 21:24:30 openvpn 51111 OPTIONS IMPORT: adjusting link_mtu to 1625
                                    Jan 10 21:24:30 openvpn 51111 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                                    Jan 10 21:24:30 openvpn 51111 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                                    Jan 10 21:24:30 openvpn 51111 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
                                    Jan 10 21:24:30 openvpn 51111 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                                    Jan 10 21:24:30 openvpn 51111 Preserving previous TUN/TAP instance: ovpnc2
                                    Jan 10 21:24:30 openvpn 51111 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
                                    Jan 10 21:24:30 openvpn 51111 Closing TUN/TAP interface
                                    Jan 10 21:24:30 openvpn 51111 /usr/local/sbin/ovpn-linkdown ovpnc2 1500 1605 10.17.0.98 10.17.0.97 init
                                    Jan 10 21:24:31 openvpn 51111 TUN/TAP device ovpnc2 exists previously, keep at program end
                                    Jan 10 21:24:31 openvpn 51111 TUN/TAP device /dev/tun2 opened
                                    Jan 10 21:24:31 openvpn 51111 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
                                    Jan 10 21:24:31 openvpn 51111 /sbin/ifconfig ovpnc2 10.87.0.38 10.87.0.37 mtu 1500 netmask 255.255.255.255 up
                                    Jan 10 21:24:31 openvpn 51111 /usr/local/sbin/ovpn-linkup ovpnc2 1500 1605 10.87.0.38 10.87.0.37 init
                                    Jan 10 21:24:31 openvpn 51111 Initialization Sequence Completed

                                    123.jpg

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      bcruze
                                      last edited by

                                      try omit preference + disable lzo compression

                                      A 1 Reply Last reply Reply Quote 0
                                      • A
                                        akkiz @bcruze
                                        last edited by akkiz

                                        @bcruze ok but it creates compression stub message see the log didnt help

                                        A 1 Reply Last reply Reply Quote 0
                                        • A
                                          akkiz @akkiz
                                          last edited by akkiz

                                          @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                                          Jan 10 21:57:24 openvpn 88382 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
                                          Jan 10 21:57:24 openvpn 88382 /sbin/ifconfig ovpnc2 10.136.0.54 10.136.0.53 mtu 1500 netmask 255.255.255.255 up
                                          Jan 10 21:57:24 openvpn 88382 /usr/local/sbin/ovpn-linkup ovpnc2 1500 1605 10.136.0.54 10.136.0.53 init
                                          Jan 10 21:57:24 openvpn 88382 Initialization Sequence Completed
                                          Jan 10 21:57:33 openvpn 88382 Bad compression stub decompression header byte: 0
                                          Jan 10 21:57:43 openvpn 88382 MANAGEMENT: Client connected from /var/etc/openvpn/client2.sock
                                          Jan 10 21:57:43 openvpn 88382 MANAGEMENT: CMD 'state 1'
                                          Jan 10 21:57:43 openvpn 88382 MANAGEMENT: CMD 'status 2'
                                          Jan 10 21:57:43 openvpn 88382 MANAGEMENT: Client disconnected

                                          A 1 Reply Last reply Reply Quote 0
                                          • A
                                            akkiz @akkiz
                                            last edited by akkiz

                                            @akkiz I really am happy to see such a active helpful community here willing to help thanks guys!!!!
                                            Hope one of you guys will crack my issue....

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.