Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    OpenVPN tunnel goes down every hour

    OpenVPN
    1
    1
    980
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tsmalmbe last edited by

      Win 7 -> VPNClient: Asus 4G AC-55-U (4G) -> VPNServer: pfSense 2.3  (ADSL) -> Webserver

      The connection works as such, I can reach whatever I want through the tunnel (except for Samba browser but that is beside the point).

      I have wondered why I am losing some connectivity every now and then from my Win 7 to my webserver. Wierd, yes. Usually I am losing ping, while I can http to the same resource (webserver) - or then I can reach it using an IP but not using the name (same webserver).

      The only thing I can think of, is that my windows 7 is confused by "routes going up and down" due to the fact that the OpenVPN tunnel goes up and down.

      My DNS-server is on the same server as the Webserver, and I am using DNS-services over the VPN-connection.

      Here's the Asus logs, this same pattern occurs hourly:

      
Nov 20 13:49:39 start_nat_rules: apply the nat_rules(/tmp/nat_rules_usb0_usb0)!
Nov 20 13:49:39 wan: finish adding multi routes
Nov 20 13:49:41 rc_service: udhcpc 22112:notify_rc stop_upnp
Nov 20 13:49:41 miniupnpd[9393]: shutting down MiniUPnPd
Nov 20 13:49:42 rc_service: udhcpc 22112:notify_rc start_upnp
Nov 20 13:49:42 miniupnpd[22518]: version 1.9 started
Nov 20 13:49:42 miniupnpd[22518]: HTTP listening on port 54643
Nov 20 13:49:42 miniupnpd[22518]: Listening for NAT-PMP/PCP traffic on port 5351
Nov 20 13:49:43 rc_service: udhcpc 22112:notify_rc stop_vpnclient5
Nov 20 13:49:43 rc_service: udhcpc 22112:notify_rc start_vpnclient5
Nov 20 13:49:43 rc_service: waitting "stop_vpnclient5" via udhcpc ...
Nov 20 13:49:43 ntp: start NTP update
Nov 20 13:49:43 openvpn[9634]: event_wait : Interrupted system call (code=4)
Nov 20 13:49:43 openvpn[9634]: TCP/UDP: Closing socket
Nov 20 13:49:43 openvpn[9634]: /sbin/route del -net 194.100.53.58 netmask 255.255.255.255
Nov 20 13:49:43 openvpn[9634]: /sbin/route del -net 10.99.0.0 netmask 255.255.0.0
Nov 20 13:49:43 openvpn[9634]: /sbin/route del -net 10.10.1.0 netmask 255.255.255.0
Nov 20 13:49:43 openvpn[9634]: /sbin/route del -net 192.168.1.0 netmask 255.255.255.0
Nov 20 13:49:43 openvpn[9634]: Closing TUN/TAP interface
Nov 20 13:49:43 openvpn[9634]: /sbin/ifconfig tun15 0.0.0.0
Nov 20 13:49:43 openvpn[9634]: SIGTERM[hard,] received, process exiting
Nov 20 13:49:44 dhcp client: bound 100.82.12.138 via 100.82.12.138 during 7200 seconds.
Nov 20 13:49:44 openvpn[22572]: Current Parameter Settings:
Nov 20 13:49:44 openvpn[22572]:   config = 'config.ovpn'
Nov 20 13:49:44 openvpn[22572]:   mode = 0
Nov 20 13:49:44 openvpn[22572]:   persist_config = DISABLED
Nov 20 13:49:44 openvpn[22572]:   persist_mode = 1
Nov 20 13:49:44 openvpn[22572]:   show_ciphers = DISABLED
Nov 20 13:49:44 openvpn[22572]:   show_digests = DISABLED
Nov 20 13:49:44 openvpn[22572]:   show_engines = DISABLED
Nov 20 13:49:44 openvpn[22572]:   genkey = DISABLED
Nov 20 13:49:44 openvpn[22572]:   key_pass_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   show_tls_ciphers = DISABLED
Nov 20 13:49:44 openvpn[22572]: Connection profiles [default]:
Nov 20 13:49:44 openvpn[22572]:   proto = udp
Nov 20 13:49:44 openvpn[22572]:   local = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   local_port = 0
Nov 20 13:49:44 openvpn[22572]:   remote = '217.30.178.237'
Nov 20 13:49:44 openvpn[22572]:   remote_port = 1196
Nov 20 13:49:44 openvpn[22572]:   remote_float = DISABLED
Nov 20 13:49:44 openvpn[22572]:   bind_defined = DISABLED
Nov 20 13:49:44 openvpn[22572]:   bind_local = DISABLED
Nov 20 13:49:44 openvpn[22572]:   connect_retry_seconds = 5
Nov 20 13:49:44 openvpn[22572]:   connect_timeout = 10
Nov 20 13:49:44 openvpn[22572]:   connect_retry_max = 0
Nov 20 13:49:44 openvpn[22572]:   tun_mtu = 1500
Nov 20 13:49:44 openvpn[22572]:   tun_mtu_defined = ENABLED
Nov 20 13:49:44 openvpn[22572]:   link_mtu = 1500
Nov 20 13:49:44 openvpn[22572]:   link_mtu_defined = DISABLED
Nov 20 13:49:44 openvpn[22572]:   tun_mtu_extra = 0
Nov 20 13:49:44 openvpn[22572]:   tun_mtu_extra_defined = DISABLED
Nov 20 13:49:44 openvpn[22572]:   mtu_discover_type = -1
Nov 20 13:49:44 openvpn[22572]:   fragment = 0
Nov 20 13:49:44 openvpn[22572]:   mssfix = 1450
Nov 20 13:49:44 openvpn[22572]:   explicit_exit_notification = 0
Nov 20 13:49:44 openvpn[22572]: Connection profiles END
Nov 20 13:49:44 openvpn[22572]:   remote_random = DISABLED
Nov 20 13:49:44 openvpn[22572]:   ipchange = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   dev = 'tun15'
Nov 20 13:49:44 openvpn[22572]:   dev_type = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   dev_node = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   lladdr = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   topology = 1
Nov 20 13:49:44 openvpn[22572]:   tun_ipv6 = DISABLED
Nov 20 13:49:44 openvpn[22572]:   ifconfig_local = '10.100.101.2'
Nov 20 13:49:44 openvpn[22572]:   ifconfig_remote_netmask = '10.100.101.1'
Nov 20 13:49:44 openvpn[22572]:   ifconfig_noexec = DISABLED
Nov 20 13:49:44 openvpn[22572]:   ifconfig_nowarn = DISABLED
Nov 20 13:49:44 openvpn[22572]:   ifconfig_ipv6_local = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   ifconfig_ipv6_netbits = 0
Nov 20 13:49:44 openvpn[22572]:   ifconfig_ipv6_remote = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   shaper = 0
Nov 20 13:49:44 openvpn[22572]:   mtu_test = 0
Nov 20 13:49:44 openvpn[22572]:   mlock = DISABLED
Nov 20 13:49:44 openvpn[22572]:   keepalive_ping = 10
Nov 20 13:49:44 openvpn[22572]:   keepalive_timeout = 60
Nov 20 13:49:44 openvpn[22572]:   inactivity_timeout = 0
Nov 20 13:49:44 openvpn[22572]:   ping_send_timeout = 10
Nov 20 13:49:44 openvpn[22572]:   ping_rec_timeout = 60
Nov 20 13:49:44 openvpn[22572]:   ping_rec_timeout_action = 2
Nov 20 13:49:44 openvpn[22572]:   ping_timer_remote = ENABLED
Nov 20 13:49:44 openvpn[22572]:   remap_sigusr1 = 0
Nov 20 13:49:44 openvpn[22572]:   persist_tun = ENABLED
Nov 20 13:49:44 openvpn[22572]:   persist_local_ip = DISABLED
Nov 20 13:49:44 openvpn[22572]:   persist_remote_ip = DISABLED
Nov 20 13:49:44 openvpn[22572]:   persist_key = ENABLED
Nov 20 13:49:44 openvpn[22572]:   passtos = DISABLED
Nov 20 13:49:44 openvpn[22572]:   resolve_retry_seconds = 1000000000
Nov 20 13:49:44 openvpn[22572]:   username = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   groupname = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   chroot_dir = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   cd_dir = '/etc/openvpn/client5'
Nov 20 13:49:44 openvpn[22572]:   writepid = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   up_script = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   down_script = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   down_pre = DISABLED
Nov 20 13:49:44 openvpn[22572]:   up_restart = DISABLED
Nov 20 13:49:44 openvpn[22572]:   up_delay = DISABLED
Nov 20 13:49:44 openvpn[22572]:   daemon = ENABLED
Nov 20 13:49:44 openvpn[22572]:   inetd = 0
Nov 20 13:49:44 openvpn[22572]:   log = DISABLED
Nov 20 13:49:44 openvpn[22572]:   suppress_timestamps = DISABLED
Nov 20 13:49:44 openvpn[22572]:   nice = 0
Nov 20 13:49:44 openvpn[22572]:   verbosity = 5
Nov 20 13:49:44 openvpn[22572]:   mute = 0
Nov 20 13:49:44 openvpn[22572]:   status_file = 'status'
Nov 20 13:49:44 openvpn[22572]:   status_file_version = 2
Nov 20 13:49:44 openvpn[22572]:   status_file_update_freq = 60
Nov 20 13:49:44 openvpn[22572]:   occ = ENABLED
Nov 20 13:49:44 openvpn[22572]:   rcvbuf = 65536
Nov 20 13:49:44 openvpn[22572]:   sndbuf = 65536
Nov 20 13:49:44 openvpn[22572]:   mark = 0
Nov 20 13:49:44 openvpn[22572]:   sockflags = 0
Nov 20 13:49:44 openvpn[22572]:   fast_io = DISABLED
Nov 20 13:49:44 openvpn[22572]:   lzo = 7
Nov 20 13:49:44 openvpn[22572]:   route_script = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   route_default_gateway = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   route_default_metric = 0
Nov 20 13:49:44 openvpn[22572]:   route_noexec = DISABLED
Nov 20 13:49:44 openvpn[22572]:   route_delay = 0
Nov 20 13:49:44 openvpn[22572]:   route_delay_window = 30
Nov 20 13:49:44 openvpn[22572]:   route_delay_defined = DISABLED
Nov 20 13:49:44 openvpn[22572]:   route_nopull = DISABLED
Nov 20 13:49:44 openvpn[22572]:   route_gateway_via_dhcp = DISABLED
Nov 20 13:49:44 openvpn[22572]:   max_routes = 100
Nov 20 13:49:44 openvpn[22572]:   allow_pull_fqdn = DISABLED
Nov 20 13:49:44 openvpn[22572]:   route 192.168.1.0/255.255.255.0/nil/nil
Nov 20 13:49:44 openvpn[22572]:   route 10.10.1.0/255.255.255.0/nil/nil
Nov 20 13:49:44 openvpn[22572]:   route 10.99.0.0/255.255.0.0/nil/nil
Nov 20 13:49:44 openvpn[22572]:   route 194.100.53.58/255.255.255.255/nil/nil
Nov 20 13:49:44 openvpn[22572]:   management_addr = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   management_port = 0
Nov 20 13:49:44 openvpn[22572]:   management_user_pass = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   management_log_history_cache = 250
Nov 20 13:49:44 openvpn[22572]:   management_echo_buffer_size = 100
Nov 20 13:49:44 openvpn[22572]:   management_write_peer_info_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   management_client_user = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   management_client_group = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   management_flags = 0
Nov 20 13:49:44 openvpn[22572]:   shared_secret_file = 'static.key'
Nov 20 13:49:44 openvpn[22572]:   key_direction = 0
Nov 20 13:49:44 openvpn[22572]:   ciphername_defined = ENABLED
Nov 20 13:49:44 openvpn[22572]:   ciphername = 'AES-128-CBC'
Nov 20 13:49:44 openvpn[22572]:   authname_defined = ENABLED
Nov 20 13:49:44 openvpn[22572]:   authname = 'SHA256'
Nov 20 13:49:44 openvpn[22572]:   prng_hash = 'SHA1'
Nov 20 13:49:44 openvpn[22572]:   prng_nonce_secret_len = 16
Nov 20 13:49:44 openvpn[22572]:   keysize = 0
Nov 20 13:49:44 openvpn[22572]:   engine = DISABLED
Nov 20 13:49:44 openvpn[22572]:   replay = ENABLED
Nov 20 13:49:44 openvpn[22572]:   mute_replay_warnings = DISABLED
Nov 20 13:49:44 openvpn[22572]:   replay_window = 64
Nov 20 13:49:44 openvpn[22572]:   replay_time = 15
Nov 20 13:49:44 openvpn[22572]:   packet_id_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   use_iv = ENABLED
Nov 20 13:49:44 openvpn[22572]:   test_crypto = DISABLED
Nov 20 13:49:44 openvpn[22572]:   tls_server = DISABLED
Nov 20 13:49:44 openvpn[22572]:   tls_client = DISABLED
Nov 20 13:49:44 openvpn[22572]:   key_method = 2
Nov 20 13:49:44 openvpn[22572]:   ca_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   ca_path = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   dh_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   cert_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   priv_key_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   pkcs12_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   cipher_list = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   tls_verify = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   tls_export_cert = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   verify_x509_type = 0
Nov 20 13:49:44 openvpn[22572]:   verify_x509_name = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   crl_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   ns_cert_type = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   remote_cert_ku[i] = 0
Nov 20 13:49:44 openvpn[22572]:   ifconfig_pool_netmask = 0.0.0.0
Nov 20 13:49:44 openvpn[22572]:   ifconfig_pool_persist_filename = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   ifconfig_pool_persist_refresh_freq = 600
Nov 20 13:49:44 openvpn[22572]:   ifconfig_ipv6_pool_defined = DISABLED
Nov 20 13:49:44 openvpn[22572]:   ifconfig_ipv6_pool_base = ::
Nov 20 13:49:44 openvpn[22572]:   ifconfig_ipv6_pool_netbits = 0
Nov 20 13:49:44 openvpn[22572]:   n_bcast_buf = 256
Nov 20 13:49:44 openvpn[22572]:   tcp_queue_limit = 64
Nov 20 13:49:44 openvpn[22572]:   real_hash_size = 256
Nov 20 13:49:44 openvpn[22572]:   virtual_hash_size = 256
Nov 20 13:49:44 openvpn[22572]:   client_connect_script = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   learn_address_script = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   client_disconnect_script = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   client_config_dir = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   ccd_exclusive = DISABLED
Nov 20 13:49:44 openvpn[22572]:   tmp_dir = '/tmp'
Nov 20 13:49:44 openvpn[22572]:   push_ifconfig_defined = DISABLED
Nov 20 13:49:44 openvpn[22572]:   push_ifconfig_local = 0.0.0.0
Nov 20 13:49:44 openvpn[22572]:   push_ifconfig_remote_netmask = 0.0.0.0
Nov 20 13:49:44 openvpn[22572]:   push_ifconfig_ipv6_defined = DISABLED
Nov 20 13:49:44 openvpn[22572]:   push_ifconfig_ipv6_local = ::/0
Nov 20 13:49:44 openvpn[22572]:   push_ifconfig_ipv6_remote = ::
Nov 20 13:49:44 openvpn[22572]:   enable_c2c = DISABLED
Nov 20 13:49:44 openvpn[22572]:   duplicate_cn = DISABLED
Nov 20 13:49:44 openvpn[22572]:   cf_max = 0
Nov 20 13:49:44 openvpn[22572]:   cf_per = 0
Nov 20 13:49:44 openvpn[22572]:   max_clients = 1024
Nov 20 13:49:44 openvpn[22572]:   max_routes_per_client = 256
Nov 20 13:49:44 openvpn[22572]:   auth_user_pass_verify_script = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   auth_user_pass_verify_script_via_file = DISABLED
Nov 20 13:49:44 openvpn[22572]:   port_share_host = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]:   port_share_port = 0
Nov 20 13:49:44 openvpn[22572]:   client = DISABLED
Nov 20 13:49:44 openvpn[22572]:   pull = DISABLED
Nov 20 13:49:44 openvpn[22572]:   auth_user_pass_file = '[UNDEF]'
Nov 20 13:49:44 openvpn[22572]: OpenVPN 2.3.2 mips-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Apr 18 2016
Nov 20 13:49:44 openvpn[22572]: Static Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Nov 20 13:49:44 openvpn[22572]: Static Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Nov 20 13:49:44 openvpn[22572]: Static Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Nov 20 13:49:44 openvpn[22572]: Static Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Nov 20 13:49:44 openvpn[22572]: LZO compression initialized
Nov 20 13:49:44 openvpn[22572]: Socket Buffers: R=[163840->131072] S=[163840->131072]
Nov 20 13:49:44 openvpn[22572]: TUN/TAP device tun15 opened
Nov 20 13:49:44 openvpn[22572]: TUN/TAP TX queue length set to 100
Nov 20 13:49:44 openvpn[22572]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Nov 20 13:49:44 openvpn[22572]: /sbin/ifconfig tun15 10.100.101.2 pointopoint 10.100.101.1 mtu 1500
Nov 20 13:49:44 openvpn[22572]: /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.100.101.1
Nov 20 13:49:44 openvpn[22572]: /sbin/route add -net 10.10.1.0 netmask 255.255.255.0 gw 10.100.101.1
Nov 20 13:49:44 openvpn[22572]: /sbin/route add -net 10.99.0.0 netmask 255.255.0.0 gw 10.100.101.1
Nov 20 13:49:44 openvpn[22572]: /sbin/route add -net 194.100.53.58 netmask 255.255.255.255 gw 10.100.101.1
Nov 20 13:49:44 openvpn[22572]: Data Channel MTU parms [ L:1573 D:1450 EF:73 EB:135 ET:0 EL:0 AF:3/1 ]
Nov 20 13:49:44 openvpn[22572]: Local Options String: 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,ifconfig 10.100.101.1 10.100.101.2,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,secret'
Nov 20 13:49:44 openvpn[22572]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1573,tun-mtu 1500,proto UDPv4,ifconfig 10.100.101.2 10.100.101.1,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,secret'
Nov 20 13:49:44 openvpn[22572]: Local Options hash (VER=V4): 'f3d7fc1b'
Nov 20 13:49:44 openvpn[22572]: Expected Remote Options hash (VER=V4): 'ea1dc833'
Nov 20 13:49:44 openvpn[22597]: UDPv4 link local: [undef]
Nov 20 13:49:44 openvpn[22597]: UDPv4 link remote: [AF_INET]217.30.178.237:1196
Nov 20 13:49:53 openvpn[22597]: Peer Connection Initiated with [AF_INET]217.30.178.237:1196
Nov 20 13:49:54 openvpn[22597]: Initialization Sequence Completed
Nov 20 13:52:30 kernel: [wifi1] FWLOG: [9641532] WHAL_ERROR_RESET_CHANNF1 (  )
Nov 20 13:52:30 kernel: [wifi1] FWLOG: [9641532] WHAL_ERROR_RESET_ERRID ( 0x1 )

Any commens or ideas what is going on? Perhaps this "hourly" behavior is normal, and my problems are completely irrelevant of this hourly occurence?
[/i][/i][/i][/i][/i][/i][/i][/i][/i][/i][/i][/i]

      Security Consultant at Mint Security Ltd - www.mintsecurity.fi

      1 Reply Last reply Reply Quote 0
      • First post
        Last post