Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    losing OpenVPN connection every 20 - 120 seconds

    OpenVPN
    7
    76
    9.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      akkiz @akkiz
      last edited by akkiz

      @akkiz express1.jpg
      Jan 11 08:37:19 openvpn 12072 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
      Jan 11 08:37:19 openvpn 12072 TUN/TAP device ovpnc3 exists previously, keep at program end
      Jan 11 08:37:19 openvpn 12072 TUN/TAP device /dev/tun3 opened
      Jan 11 08:37:19 openvpn 12072 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
      Jan 11 08:37:19 openvpn 12072 /sbin/ifconfig ovpnc3 10.199.0.146 10.199.0.145 mtu 1500 netmask 255.255.255.255 up
      Jan 11 08:37:19 openvpn 12072 /usr/local/sbin/ovpn-linkup ovpnc3 1500 1609 10.199.0.146 10.199.0.145 init
      Jan 11 08:37:22 openvpn 12072 Initialization Sequence Completed
      Jan 11 08:37:28 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:37:28 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:37:28 openvpn 12072 MANAGEMENT: CMD 'status 2'
      Jan 11 08:37:28 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'status 2'
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: CMD 'status 2'
      Jan 11 08:37:41 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:37:44 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:37:44 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:37:44 openvpn 12072 MANAGEMENT: CMD 'status 2'
      Jan 11 08:37:44 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:37:48 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:37:48 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:37:48 openvpn 12072 MANAGEMENT: CMD 'status 2'
      Jan 11 08:37:48 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:38:49 openvpn 12072 [Server-4256-0a] Inactivity timeout (--ping-restart), restarting
      Jan 11 08:38:49 openvpn 12072 SIGUSR1[soft,ping-restart] received, process restarting
      Jan 11 08:38:49 openvpn 12072 Restart pause, 10 second(s)
      Jan 11 08:38:59 openvpn 12072 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
      Jan 11 08:38:59 openvpn 12072 TCP/UDP: Preserving recently used remote address: [AF_INET]85.203.15.86:1195
      Jan 11 08:38:59 openvpn 12072 Socket Buffers: R=[42080->524288] S=[57344->524288]
      Jan 11 08:38:59 openvpn 12072 UDPv4 link local (bound): [AF_INET]86.99.109.193:0
      Jan 11 08:38:59 openvpn 12072 UDPv4 link remote: [AF_INET]85.203.15.86:1195
      Jan 11 08:39:41 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:39:41 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:39:41 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:39:48 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:39:48 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:39:48 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:39:52 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:39:52 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:39:52 openvpn 12072 MANAGEMENT: Client disconnected
      Jan 11 08:39:56 openvpn 12072 MANAGEMENT: Client connected from /var/etc/openvpn/client3.sock
      Jan 11 08:39:56 openvpn 12072 MANAGEMENT: CMD 'state 1'
      Jan 11 08:39:56 openvpn 12072 MANAGEMENT: Client disconnected

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        It looks like it connects OK and then timesout with no data after 1min. There is some data shown though.

        During that 1 min can you send/receive anything over the tunnel?

        You are using the same login info from a host client and are able to connect OK? You have the connection log showing the successful connection from there?

        Steve

        A 1 Reply Last reply Reply Quote 0
        • A
          akkiz @stephenw10
          last edited by

          @stephenw10 let me check and get back to u

          A 1 Reply Last reply Reply Quote 0
          • A
            akkiz @akkiz
            last edited by akkiz

            @akkiz couldnt see any traffic coming out of OPT1 port (which is assigned ovp3) problem still persist

            chpalmerC 1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Ok are you able to connect to ExpressVPN using that same config from a local client directly?

              Can you get the connection logs from that so we can see how it connects?

              Steve

              A 1 Reply Last reply Reply Quote 0
              • chpalmerC
                chpalmer @akkiz
                last edited by

                @akkiz said in losing OpenVPN connection every 20 - 120 seconds:

                @akkiz couldnt see any traffic coming out of OPT1 port (which is assigned ovp3) problem still persist

                You do not generally need to assign a VPN connection to an interface.. (not sure if this is the case when transferring all traffic to a "VPN service".

                Is it possible to remove this "assignment" to test?

                Triggering snowflakes one by one..
                Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                A 1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  It shouldn't make any difference here but it's easy to test so...

                  I notice it's setting the send and receive buffers everytime. You might try removing that setting so it just uses the default values.

                  Connecting but not passing traffic really looks like a compression mismatch though. If you can connect using those settings from a host client instead of pfSense then we will at least have a known set of connection settings.

                  1 Reply Last reply Reply Quote 0
                  • A
                    akkiz @stephenw10
                    last edited by

                    @stephenw10 let me set up and see but through their app it works fine for some countries but for some countries it connects but no traffic flows since ISP is blocking or throttling vpn connection hereScreenshot_20200114-075447_ExpressVPN.jpg

                    1 Reply Last reply Reply Quote 0
                    • A
                      akkiz @chpalmer
                      last edited by

                      @chpalmer it didnt make any difference Screenshot_20200114-075817_Chrome.jpg

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Ok so no connection logs from a phone app, you're going to need to connect from a PC to get that I think.

                        However the fact it connects and doesn't pass traffic to some servers seems exactly like what you're seeing in pfSense. It could just be your ISP blocking the traffic.

                        Steve

                        A 2 Replies Last reply Reply Quote 0
                        • A
                          akkiz @stephenw10
                          last edited by akkiz

                          @stephenw10 yes i just came to know here they are blocking open vpn protocol but ipsec is open but i cant find any write up for it do u know how to configure ipsec in pf sense

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            akkiz @akkiz
                            last edited by

                            @akkiz because i tried open vpn on my work pc it connects fine but no internet flows so i think my isp blocks open vpn from ipsec works fine here

                            1 Reply Last reply Reply Quote 0
                            • A
                              akkiz @stephenw10
                              last edited by akkiz

                              @stephenw10 through phone app it works fine since it had all 3 protocols see attached pic zz.jpg

                              1 Reply Last reply Reply Quote 0
                              • B
                                bcruze
                                last edited by

                                to be clear.

                                its not working using their equipment + pfsense and openvpn

                                but its working over wireless using the same equipment using the app + openvpn?

                                A 1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  That looks like a Windows application. Are there logs there showing how it is connecting?

                                  You might try using their TCP setting instead, if you know what those are.

                                  IPSec is far more likely to be blocked, on the standard ports at least.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • A
                                    akkiz @bcruze
                                    last edited by

                                    @bcruze express vpn app works fine in android and in windows laptop but open vpn does not work in pf sense or in windows ,but ipsec is working in windows

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      akkiz @akkiz
                                      last edited by

                                      @stephenw10 my goal is to create 2 wireless access point one regular internet one vpn internet,so i can switch between the 2 networks

                                      A 1 Reply Last reply Reply Quote 0
                                      • A
                                        akkiz @akkiz
                                        last edited by akkiz

                                        the internet speed is nearly same as before vpn

                                        zz.jpg

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          So OpenVPN does not work from Windows using either UDP or TCP?

                                          A 2 Replies Last reply Reply Quote 0
                                          • A
                                            akkiz @stephenw10
                                            last edited by

                                            @stephenw10 wait a sec let me try

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post