Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    "No TLS state for client" after 90 seconds of inactivity

    Scheduled Pinned Locked Moved OpenVPN
    1 Posts 1 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      kgmoney
      last edited by

      Hi,

      I'm running OpenVPN server and connecting with a cellular router as a client.  Everything works great as long the connection isn't idle too long.  However, it seems that if the connection is idle for 90secs or more, further requests from the client fail and in the server log I see the following:

      Mar 30 15:07:07	openvpn	66229	GET INST BY REAL: 172.56.13.250:60368 [failed]
Mar 30 15:07:07	openvpn	66229	TLS State Error: No TLS state for client [AF_INET]172.56.13.250:60368, opcode=6
Mar 30 15:07:07	openvpn	66229	test/172.56.12.124:26857 UDPv4 WRITE [69] to [AF_INET]172.56.12.124:26857: P_DATA_V1 kid=0 DATA len=68
Mar 30 15:07:07	openvpn	66229	test/172.56.12.124:26857 SENT PING
Mar 30 15:07:07	openvpn	66229	test/172.56.12.124:26857 TLS: tls_pre_encrypt: key_id=0

      If I use a keep-alive ping lower than 90 it works fine, but I'm trying to reduce traffic as much as possible (since it's a cell modem), so I'd like my keep-alive to be several minutes.

      Here is my client log…suggests to me that it connected fine...

      2017-03-30 21:38:34 last message repeated 2 times
2017-03-30 21:38:46 openvpn[4900]: event_wait : Interrupted system call (code=4)
2017-03-30 21:38:46 openvpn[4900]: TCP/UDP: Closing socket
2017-03-30 21:38:46 openvpn[4900]: /sbin/route del -net 192.168.2.0 netmask 255.255.255.0
2017-03-30 21:38:46 openvpn[4900]: Closing TUN/TAP interface
2017-03-30 21:38:46 openvpn[4900]: /sbin/ifconfig tun0 0.0.0.0
2017-03-30 21:38:46 openvpn[4900]: SIGTERM[hard,] received, process exiting
2017-03-30 21:38:47 openvpn[5933]: NOTE: debug verbosity (--verb 7) is enabled but this build lacks debug support.
2017-03-30 21:38:47 openvpn[5933]: Current Parameter Settings:
2017-03-30 21:38:47 openvpn[5933]:   config = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   mode = 0
2017-03-30 21:38:47 openvpn[5933]:   persist_config = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   persist_mode = 1
2017-03-30 21:38:47 openvpn[5933]:   show_ciphers = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   show_digests = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   show_engines = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   genkey = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   key_pass_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   show_tls_ciphers = DISABLED
2017-03-30 21:38:47 openvpn[5933]: Connection profiles [default]:
2017-03-30 21:38:47 openvpn[5933]:   proto = udp
2017-03-30 21:38:47 openvpn[5933]:   local = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   local_port = 1195
2017-03-30 21:38:47 openvpn[5933]:   remote = 'xxx.xxx.xxx.xxx'
2017-03-30 21:38:47 openvpn[5933]:   remote_port = 1195
2017-03-30 21:38:47 openvpn[5933]:   remote_float = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   bind_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   bind_local = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   connect_retry_seconds = 5
2017-03-30 21:38:47 openvpn[5933]:   connect_timeout = 10
2017-03-30 21:38:47 openvpn[5933]:   connect_retry_max = 0
2017-03-30 21:38:47 openvpn[5933]:   tun_mtu = 1500
2017-03-30 21:38:47 openvpn[5933]:   tun_mtu_defined = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   link_mtu = 1500
2017-03-30 21:38:47 openvpn[5933]:   link_mtu_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   tun_mtu_extra = 0
2017-03-30 21:38:47 openvpn[5933]:   tun_mtu_extra_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   mtu_discover_type = -1
2017-03-30 21:38:47 openvpn[5933]:   fragment = 0
2017-03-30 21:38:47 openvpn[5933]:   mssfix = 1450
2017-03-30 21:38:47 openvpn[5933]:   explicit_exit_notification = 0
2017-03-30 21:38:47 openvpn[5933]: Connection profiles END
2017-03-30 21:38:47 openvpn[5933]:   remote_random = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   ipchange = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   dev = 'tun0'
2017-03-30 21:38:47 openvpn[5933]:   dev_type = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   dev_node = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   lladdr = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   topology = 1
2017-03-30 21:38:47 openvpn[5933]:   tun_ipv6 = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_local = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_remote_netmask = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_noexec = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_nowarn = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_ipv6_local = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_ipv6_netbits = 0
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_ipv6_remote = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   shaper = 0
2017-03-30 21:38:47 openvpn[5933]:   mtu_test = 0
2017-03-30 21:38:47 openvpn[5933]:   mlock = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   keepalive_ping = 0
2017-03-30 21:38:47 openvpn[5933]:   keepalive_timeout = 0
2017-03-30 21:38:47 openvpn[5933]:   inactivity_timeout = 0
2017-03-30 21:38:47 openvpn[5933]:   ping_send_timeout = 0
2017-03-30 21:38:47 openvpn[5933]:   ping_rec_timeout = 0
2017-03-30 21:38:47 openvpn[5933]:   ping_rec_timeout_action = 0
2017-03-30 21:38:47 openvpn[5933]:   ping_timer_remote = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   remap_sigusr1 = 0
2017-03-30 21:38:47 openvpn[5933]:   persist_tun = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   persist_local_ip = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   persist_remote_ip = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   persist_key = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   passtos = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   resolve_retry_seconds = 1000000000
2017-03-30 21:38:47 openvpn[5933]:   username = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   groupname = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   chroot_dir = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   cd_dir = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   writepid = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   up_script = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   down_script = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   down_pre = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   up_restart = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   up_delay = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   daemon = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   inetd = 0
2017-03-30 21:38:47 openvpn[5933]:   log = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   suppress_timestamps = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   nice = 0
2017-03-30 21:38:47 openvpn[5933]:   verbosity = 7
2017-03-30 21:38:47 openvpn[5933]:   mute = 0
2017-03-30 21:38:47 openvpn[5933]:   status_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   status_file_version = 1
2017-03-30 21:38:47 openvpn[5933]:   status_file_update_freq = 60
2017-03-30 21:38:47 openvpn[5933]:   occ = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   rcvbuf = 0
2017-03-30 21:38:47 openvpn[5933]:   sndbuf = 0
2017-03-30 21:38:47 openvpn[5933]:   mark = 0
2017-03-30 21:38:47 openvpn[5933]:   sockflags = 0
2017-03-30 21:38:47 openvpn[5933]:   fast_io = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   lzo = 7
2017-03-30 21:38:47 openvpn[5933]:   route_script = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   route_default_gateway = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   route_default_metric = 0
2017-03-30 21:38:47 openvpn[5933]:   route_noexec = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   route_delay = 0
2017-03-30 21:38:47 openvpn[5933]:   route_delay_window = 30
2017-03-30 21:38:47 openvpn[5933]:   route_delay_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   route_nopull = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   route_gateway_via_dhcp = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   max_routes = 100
2017-03-30 21:38:47 openvpn[5933]:   allow_pull_fqdn = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   shared_secret_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   key_direction = 2
2017-03-30 21:38:47 openvpn[5933]:   ciphername_defined = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   ciphername = 'AES-256-CBC'
2017-03-30 21:38:47 openvpn[5933]:   authname_defined = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   authname = 'SHA1'
2017-03-30 21:38:47 openvpn[5933]:   prng_hash = 'SHA1'
2017-03-30 21:38:47 openvpn[5933]:   prng_nonce_secret_len = 16
2017-03-30 21:38:47 openvpn[5933]:   keysize = 0
2017-03-30 21:38:47 openvpn[5933]:   engine = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   replay = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   mute_replay_warnings = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   replay_window = 64
2017-03-30 21:38:47 openvpn[5933]:   replay_time = 15
2017-03-30 21:38:47 openvpn[5933]:   packet_id_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   use_iv = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   test_crypto = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   tls_server = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   tls_client = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   key_method = 2
2017-03-30 21:38:47 openvpn[5933]:   ca_file = '/var/openvpn/ca1.pem'
2017-03-30 21:38:47 openvpn[5933]:   ca_path = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   dh_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   cert_file = '/var/openvpn/cert1.pem'
2017-03-30 21:38:47 openvpn[5933]:   extra_certs_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   priv_key_file = '/var/openvpn/key1.pem'
2017-03-30 21:38:47 openvpn[5933]:   pkcs12_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   cipher_list = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   tls_verify = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   tls_export_cert = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   verify_x509_type = 0
2017-03-30 21:38:47 openvpn[5933]:   verify_x509_name = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   crl_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   ns_cert_type = 0
2017-03-30 21:38:47 openvpn[5933]:   remote_cert_ku[i] = 0
2017-03-30 21:38:47 last message repeated 15 times
2017-03-30 21:38:47 openvpn[5933]:   remote_cert_eku = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   ssl_flags = 0
2017-03-30 21:38:47 openvpn[5933]:   tls_timeout = 2
2017-03-30 21:38:47 openvpn[5933]:   renegotiate_bytes = 0
2017-03-30 21:38:47 openvpn[5933]:   renegotiate_packets = 0
2017-03-30 21:38:47 openvpn[5933]:   renegotiate_seconds = 3600
2017-03-30 21:38:47 openvpn[5933]:   handshake_window = 120
2017-03-30 21:38:47 openvpn[5933]:   transition_window = 3600
2017-03-30 21:38:47 openvpn[5933]:   single_session = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   push_peer_info = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   tls_exit = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   tls_auth_file = '/var/openvpn/secret1.pem'
2017-03-30 21:38:47 openvpn[5933]:   server_network = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   server_netmask = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   server_network_ipv6 = ::
2017-03-30 21:38:47 openvpn[5933]:   server_netbits_ipv6 = 0
2017-03-30 21:38:47 openvpn[5933]:   server_bridge_ip = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   server_bridge_netmask = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   server_bridge_pool_start = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   server_bridge_pool_end = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_pool_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_pool_start = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_pool_end = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_pool_netmask = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_pool_persist_filename = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_pool_persist_refresh_freq = 600
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_ipv6_pool_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_ipv6_pool_base = ::
2017-03-30 21:38:47 openvpn[5933]:   ifconfig_ipv6_pool_netbits = 0
2017-03-30 21:38:47 openvpn[5933]:   n_bcast_buf = 256
2017-03-30 21:38:47 openvpn[5933]:   tcp_queue_limit = 64
2017-03-30 21:38:47 openvpn[5933]:   real_hash_size = 256
2017-03-30 21:38:47 openvpn[5933]:   virtual_hash_size = 256
2017-03-30 21:38:47 openvpn[5933]:   client_connect_script = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   learn_address_script = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   client_disconnect_script = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   client_config_dir = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   ccd_exclusive = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   tmp_dir = '/tmp'
2017-03-30 21:38:47 openvpn[5933]:   push_ifconfig_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   push_ifconfig_local = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   push_ifconfig_remote_netmask = 0.0.0.0
2017-03-30 21:38:47 openvpn[5933]:   push_ifconfig_ipv6_defined = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   push_ifconfig_ipv6_local = ::/0
2017-03-30 21:38:47 openvpn[5933]:   push_ifconfig_ipv6_remote = ::
2017-03-30 21:38:47 openvpn[5933]:   enable_c2c = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   duplicate_cn = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   cf_max = 0
2017-03-30 21:38:47 openvpn[5933]:   cf_per = 0
2017-03-30 21:38:47 openvpn[5933]:   max_clients = 1024
2017-03-30 21:38:47 openvpn[5933]:   max_routes_per_client = 256
2017-03-30 21:38:47 openvpn[5933]:   auth_user_pass_verify_script = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   auth_user_pass_verify_script_via_file = DISABLED
2017-03-30 21:38:47 openvpn[5933]:   port_share_host = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]:   port_share_port = 0
2017-03-30 21:38:47 openvpn[5933]:   client = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   pull = ENABLED
2017-03-30 21:38:47 openvpn[5933]:   auth_user_pass_file = '[UNDEF]'
2017-03-30 21:38:47 openvpn[5933]: OpenVPN 2.3.11 [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6]
2017-03-30 21:38:47 openvpn[5933]: library versions: OpenSSL 1.0.2j  26 Sep 2016, LZO 2.09
2017-03-30 21:38:47 openvpn[5933]: Control Channel Authentication: using '/var/openvpn/secret1.pem' as a OpenVPN static key file
2017-03-30 21:38:47 openvpn[5933]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-03-30 21:38:47 openvpn[5933]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-03-30 21:38:47 openvpn[5933]: crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
2017-03-30 21:38:47 openvpn[5933]: crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 28 bytes
2017-03-30 21:38:47 openvpn[5933]: LZO compression initialized
2017-03-30 21:38:47 openvpn[5933]: Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2017-03-30 21:38:47 openvpn[5933]: Socket Buffers: R=[163840-163840] S=[163840-163840]
2017-03-30 21:38:47 openvpn[5933]: Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
2017-03-30 21:38:47 openvpn[5933]: Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
2017-03-30 21:38:47 openvpn[5933]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
2017-03-30 21:38:47 openvpn[5933]: Local Options hash (VER=V4): '9e7066d2'
2017-03-30 21:38:47 openvpn[5933]: Expected Remote Options hash (VER=V4): '162b04de'
2017-03-30 21:38:47 openvpn[5933]: UDPv4 link local (bound): [undef]
2017-03-30 21:38:47 openvpn[5933]: UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1195
2017-03-30 21:38:47 openvpn[5933]: UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [54] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
2017-03-30 21:38:48 openvpn[5933]: TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:1195, sid=309dbb12 6d797d2b
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [50] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [287] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=245
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [1172] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #2 ] [ 1 ] pid=1 DATA len=1118
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [50] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #4 ] [ 1 ]
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [1160] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=2 DATA len=1118
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [50] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #5 ] [ 2 ]
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [1160] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=3 DATA len=1118
2017-03-30 21:38:48 openvpn[5933]: VERIFY OK: depth=1, C=US, ST=Illinois, L=Congerville, O=home, emailAddress=admin@kgmoney.net, CN=internal-ca
2017-03-30 21:38:48 openvpn[5933]: VERIFY OK: depth=0, C=US, ST=Illinois, L=Congerville, O=home, emailAddress=admin@kgmoney.net, CN=openvpn test
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [50] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #6 ] [ 3 ]
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [594] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=4 DATA len=552
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [1172] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #7 ] [ 4 ] pid=2 DATA len=1118
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [1160] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #8 ] [ ] pid=3 DATA len=1118
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [1160] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #9 ] [ ] pid=4 DATA len=1118
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [241] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #10 ] [ ] pid=5 DATA len=199
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [50] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #6 ] [ 2 ]
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [50] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #7 ] [ 3 ]
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [50] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #8 ] [ 4 ]
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [105] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #9 ] [ 5 ] pid=5 DATA len=51
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [395] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #11 ] [ 5 ] pid=6 DATA len=341
2017-03-30 21:38:48 openvpn[5933]: UDPv4 READ [307] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #10 ] [ 6 ] pid=6 DATA len=253
2017-03-30 21:38:48 openvpn[5933]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-03-30 21:38:48 openvpn[5933]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-03-30 21:38:48 openvpn[5933]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-03-30 21:38:48 openvpn[5933]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-03-30 21:38:48 openvpn[5933]: UDPv4 WRITE [50] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #12 ] [ 6 ]
2017-03-30 21:38:48 openvpn[5933]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2017-03-30 21:38:48 openvpn[5933]: [openvpn test] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1195
2017-03-30 21:38:51 openvpn[5933]: SENT CONTROL [openvpn test]: 'PUSH_REQUEST' (status=1)
2017-03-30 21:38:51 openvpn[5933]: UDPv4 WRITE [84] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #13 ] [ ] pid=7 DATA len=42
2017-03-30 21:38:51 openvpn[5933]: UDPv4 READ [50] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #11 ] [ 7 ]
2017-03-30 21:38:51 openvpn[5933]: UDPv4 READ [214] from [AF_INET]xxx.xxx.xxx.xxx:1195: P_CONTROL_V1 kid=0 pid=[ #12 ] [ ] pid=7 DATA len=172
2017-03-30 21:38:51 openvpn[5933]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route-gateway 10.99.0.1,topology subnet,ping 600,ping-restart 1800,ifconfig 10.99.0.2 255.255.255.0'
2017-03-30 21:38:51 openvpn[5933]: OPTIONS IMPORT: timers and/or timeouts modified
2017-03-30 21:38:51 openvpn[5933]: OPTIONS IMPORT: --ifconfig/up options modified
2017-03-30 21:38:51 openvpn[5933]: OPTIONS IMPORT: route options modified
2017-03-30 21:38:51 openvpn[5933]: OPTIONS IMPORT: route-related options modified
2017-03-30 21:38:51 openvpn[5933]: TUN/TAP device tun0 opened
2017-03-30 21:38:51 openvpn[5933]: TUN/TAP TX queue length set to 100
2017-03-30 21:38:51 openvpn[5933]: /sbin/ifconfig tun0 10.99.0.2 netmask 255.255.255.0 mtu 1500 broadcast 10.99.0.255
2017-03-30 21:38:51 openvpn[5933]: /sbin/route add -net 192.168.2.0 netmask 255.255.255.0 gw 10.99.0.1
2017-03-30 21:38:51 openvpn[5933]: Initialization Sequence Completed
2017-03-30 21:38:51 openvpn[5933]: UDPv4 WRITE [50] to [AF_INET]xxx.xxx.xxx.xxx:1195: P_ACK_V1 kid=0 pid=[ #14 ] [ 7 ]

Any thoughts?

Thanks,
Kevin

[/i]
      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.