Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PIA / OpenVPN warnings

    Scheduled Pinned Locked Moved OpenVPN
    4 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      repomanz
      last edited by

      Hey folks,

      I have PIA configured using the strong encryption (4096) but i get these warnings in the logs:

      Oct 23 13:51:45 openvpn 71654 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1570', remote='link-mtu 1542'
      Oct 23 13:51:45 openvpn 71654 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
      Oct 23 13:51:45 openvpn 71654 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA1'
      Oct 23 13:51:45 openvpn 71654 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'

      Am i mis-configured here? Traffic is going through VPN however.

      JJ

      1 Reply Last reply Reply Quote 0
      • V
        Velcro
        last edited by

        Just a guess but I believe you can have strong and weak encryption setup with PIA…not sure what your setup is but double check you didn't mix them up when you setup PIA? Also the PIA instructions on their website are no longer up-to-date since pfSense 2.4 came out...not sure what version you are using. I think OpenVPN was updated with 2.4...

        1 Reply Last reply Reply Quote 0
        • G
          guardian Rebel Alliance
          last edited by

          Was it working before? (i.e. Did you check your logs to make sure this is new.)

          I believe the strong encryption only works on UDP/1197 - but I may be mistaken.

          If you find my post useful, please give it a thumbs up!
          pfSense 2.7.2-RELEASE

          1 Reply Last reply Reply Quote 0
          • H
            Hakon74
            last edited by

            take a look here https://helpdesk.privateinternetaccess.com/hc/en-us/articles/225274288-Which-encryption-auth-settings-should-I-use-for-ports-on-your-gateways-

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.