Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    losing OpenVPN connection every 20 - 120 seconds

    Scheduled Pinned Locked Moved OpenVPN
    76 Posts 7 Posters 12.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      akkiz @akkiz
      last edited by akkiz

      @akkiz I really am happy to see such a active helpful community here willing to help thanks guys!!!!
      Hope one of you guys will crack my issue....

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        What does ExpressVPN say the compression should be set to?

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        A 1 Reply Last reply Reply Quote 0
        • B
          bcruze
          last edited by bcruze

          Well my post is flagged as spam if I post the express pfsense tutorial link

          Adaptive lzo... so it’s almost like there is something wrong with the particular server he is using

          I don’t have an account with express to see what will work..

          A 1 Reply Last reply Reply Quote 0
          • A
            akkiz @Derelict
            last edited by

            @Derelict adaptive lzo

            1 Reply Last reply Reply Quote 0
            • A
              akkiz @bcruze
              last edited by

              @bcruze I tried 6 servers they behaved similar shall I post results from a german or a uk server

              A 1 Reply Last reply Reply Quote 0
              • A
                akkiz @akkiz
                last edited by

                @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                @bcruze I tried 6 servers they behaved similar shall I post results from a german or a uk server

                german server same disconects see logs
                Jan 11 08:23:51 openvpn 57875 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                Jan 11 08:23:51 openvpn 57875 TCP/UDP: Preserving recently used remote address: [AF_INET]85.203.15.86:1195
                Jan 11 08:23:51 openvpn 57875 Socket Buffers: R=[42080->42080] S=[57344->57344]
                Jan 11 08:23:51 openvpn 57875 UDPv4 link local (bound): [AF_INET]86.99.109.193:0
                Jan 11 08:23:51 openvpn 57875 UDPv4 link remote: [AF_INET]85.203.15.86:1195
                Jan 11 08:24:51 openvpn 57875 [UNDEF] Inactivity timeout (--ping-restart), restarting
                Jan 11 08:24:51 openvpn 57875 SIGUSR1[soft,ping-restart] received, process restarting
                Jan 11 08:24:51 openvpn 57875 Restart pause, 10 second(s)
                Jan 11 08:25:01 openvpn 57875 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                Jan 11 08:25:01 openvpn 57875 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                Jan 11 08:25:01 openvpn 57875 TCP/UDP: Preserving recently used remote address: [AF_INET]85.203.15.85:1195
                Jan 11 08:25:01 openvpn 57875 Socket Buffers: R=[42080->42080] S=[57344->57344]
                Jan 11 08:25:01 openvpn 57875 UDPv4 link local (bound): [AF_INET]86.99.109.193:0
                Jan 11 08:25:01 openvpn 57875 UDPv4 link remote: [AF_INET]85.203.15.85:1195
                Jan 11 08:25:14 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:25:14 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:25:14 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:25:14 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:25:14 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:25:14 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:25:17 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:25:17 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:25:17 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:25:19 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:25:19 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:25:19 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:26:01 openvpn 57875 [UNDEF] Inactivity timeout (--ping-restart), restarting
                Jan 11 08:26:01 openvpn 57875 SIGUSR1[soft,ping-restart] received, process restarting
                Jan 11 08:26:01 openvpn 57875 Restart pause, 10 second(s)
                Jan 11 08:26:11 openvpn 57875 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
                Jan 11 08:26:11 openvpn 57875 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                Jan 11 08:26:11 openvpn 57875 TCP/UDP: Preserving recently used remote address: [AF_INET]85.203.15.86:1195
                Jan 11 08:26:11 openvpn 57875 Socket Buffers: R=[42080->42080] S=[57344->57344]
                Jan 11 08:26:11 openvpn 57875 UDPv4 link local (bound): [AF_INET]86.99.109.193:0
                Jan 11 08:26:11 openvpn 57875 UDPv4 link remote: [AF_INET]85.203.15.86:1195
                Jan 11 08:27:04 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:27:04 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:27:04 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:27:04 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:27:04 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:27:04 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:27:07 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:27:07 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:27:07 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:27:09 openvpn 57875 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                Jan 11 08:27:09 openvpn 57875 MANAGEMENT: CMD 'state 1'
                Jan 11 08:27:09 openvpn 57875 MANAGEMENT: Client disconnected
                Jan 11 08:27:11 openvpn 57875 [UNDEF] Inactivity timeout (--ping-restart), restarting
                Jan 11 08:27:11 openvpn 57875 SIGUSR1[soft,ping-restart] received, process restarting
                Jan 11 08:27:11 openvpn 57875 Restart pause, 10 second(s)

                A 1 Reply Last reply Reply Quote 0
                • A
                  akkiz @akkiz
                  last edited by akkiz

                  @akkiz express1.jpg
                  Jan 11 08:37:19 openvpn 12072 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
                  Jan 11 08:37:19 openvpn 12072 TUN/TAP device ovpnc3 exists previously, keep at program end
                  Jan 11 08:37:19 openvpn 12072 TUN/TAP device /dev/tun3 opened
                  Jan 11 08:37:19 openvpn 12072 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
                  Jan 11 08:37:19 openvpn 12072 /sbin/ifconfig ovpnc3 10.199.0.146 10.199.0.145 mtu 1500 netmask 255.255.255.255 up
                  Jan 11 08:37:19 openvpn 12072 /usr/local/sbin/ovpn-linkup ovpnc3 1500 1609 10.199.0.146 10.199.0.145 init
                  Jan 11 08:37:22 openvpn 12072 Initialization Sequence Completed
                  Jan 11 08:37:28 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:37:28 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:37:28 openvpn 12072 MANAGEMENT: CMD 'status 2'
                  Jan 11 08:37:28 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'status 2'
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'status 2'
                  Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:37:44 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:37:44 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:37:44 openvpn 12072 MANAGEMENT: CMD 'status 2'
                  Jan 11 08:37:44 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:37:48 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:37:48 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:37:48 openvpn 12072 MANAGEMENT: CMD 'status 2'
                  Jan 11 08:37:48 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:38:49 openvpn 12072 [Server-4256-0a] Inactivity timeout (--ping-restart), restarting
                  Jan 11 08:38:49 openvpn 12072 SIGUSR1[soft,ping-restart] received, process restarting
                  Jan 11 08:38:49 openvpn 12072 Restart pause, 10 second(s)
                  Jan 11 08:38:59 openvpn 12072 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
                  Jan 11 08:38:59 openvpn 12072 TCP/UDP: Preserving recently used remote address: [AF_INET]85.203.15.86:1195
                  Jan 11 08:38:59 openvpn 12072 Socket Buffers: R=[42080->524288] S=[57344->524288]
                  Jan 11 08:38:59 openvpn 12072 UDPv4 link local (bound): [AF_INET]86.99.109.193:0
                  Jan 11 08:38:59 openvpn 12072 UDPv4 link remote: [AF_INET]85.203.15.86:1195
                  Jan 11 08:39:41 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:39:41 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:39:41 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:39:48 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:39:48 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:39:52 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:39:52 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:39:52 openvpn 12072 MANAGEMENT: Client disconnected
                  Jan 11 08:39:56 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
                  Jan 11 08:39:56 openvpn 12072 MANAGEMENT: CMD 'state 1'
                  Jan 11 08:39:56 openvpn 12072 MANAGEMENT: Client disconnected

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    It looks like it connects OK and then timesout with no data after 1min. There is some data shown though.

                    During that 1 min can you send/receive anything over the tunnel?

                    You are using the same login info from a host client and are able to connect OK? You have the connection log showing the successful connection from there?

                    Steve

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      akkiz @stephenw10
                      last edited by

                      @stephenw10 let me check and get back to u

                      A 1 Reply Last reply Reply Quote 0
                      • A
                        akkiz @akkiz
                        last edited by akkiz

                        @akkiz couldnt see any traffic coming out of OPT1 port (which is assigned ovp3) problem still persist

                        chpalmerC 1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Ok are you able to connect to ExpressVPN using that same config from a local client directly?

                          Can you get the connection logs from that so we can see how it connects?

                          Steve

                          A 1 Reply Last reply Reply Quote 0
                          • chpalmerC
                            chpalmer @akkiz
                            last edited by

                            @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                            @akkiz couldnt see any traffic coming out of OPT1 port (which is assigned ovp3) problem still persist

                            You do not generally need to assign a VPN connection to an interface.. (not sure if this is the case when transferring all traffic to a "VPN service".

                            Is it possible to remove this "assignment" to test?

                            Triggering snowflakes one by one..
                            Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                            A 1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              It shouldn't make any difference here but it's easy to test so...

                              I notice it's setting the send and receive buffers everytime. You might try removing that setting so it just uses the default values.

                              Connecting but not passing traffic really looks like a compression mismatch though. If you can connect using those settings from a host client instead of pfSense then we will at least have a known set of connection settings.

                              1 Reply Last reply Reply Quote 0
                              • A
                                akkiz @stephenw10
                                last edited by

                                @stephenw10 let me set up and see but through their app it works fine for some countries but for some countries it connects but no traffic flows since ISP is blocking or throttling vpn connection hereScreenshot_20200114-075447_ExpressVPN.jpg

                                1 Reply Last reply Reply Quote 0
                                • A
                                  akkiz @chpalmer
                                  last edited by

                                  @chpalmer it didnt make any difference Screenshot_20200114-075817_Chrome.jpg

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Ok so no connection logs from a phone app, you're going to need to connect from a PC to get that I think.

                                    However the fact it connects and doesn't pass traffic to some servers seems exactly like what you're seeing in pfSense. It could just be your ISP blocking the traffic.

                                    Steve

                                    A 2 Replies Last reply Reply Quote 0
                                    • A
                                      akkiz @stephenw10
                                      last edited by akkiz

                                      @stephenw10 yes i just came to know here they are blocking open vpn protocol but ipsec is open but i cant find any write up for it do u know how to configure ipsec in pf sense

                                      A 1 Reply Last reply Reply Quote 0
                                      • A
                                        akkiz @akkiz
                                        last edited by

                                        @akkiz because i tried open vpn on my work pc it connects fine but no internet flows so i think my isp blocks open vpn from ipsec works fine here

                                        1 Reply Last reply Reply Quote 0
                                        • A
                                          akkiz @stephenw10
                                          last edited by akkiz

                                          @stephenw10 through phone app it works fine since it had all 3 protocols see attached pic zz.jpg

                                          1 Reply Last reply Reply Quote 0
                                          • B
                                            bcruze
                                            last edited by

                                            to be clear.

                                            its not working using their equipment + pfsense and openvpn

                                            but its working over wireless using the same equipment using the app + openvpn?

                                            A 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.