Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    OVPN Site to site - no clients?

    OpenVPN
    2
    5
    219
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      BigMikeSK last edited by

      Hello,

      it all worked just fine, but after upgrading to 2.5 I have a an issue that OpenVPN Status shows 0 clients connected, but client is defintely connected. Another new issue is, that I can ping this remote client, but client cannot ping me. As I said, it all worked fine before. Are there any breaking changes that can couse this?

      Thank you.

      B 1 Reply Last reply Reply Quote 0
      • B
        BigMikeSK @BigMikeSK last edited by

        Any idea if would clean installation of the latest version resolve this issues or is something wrong with 2.5 itself?

        Thanks again.

        1 Reply Last reply Reply Quote 0
        • B
          BigMikeSK last edited by

          So when I try to ping OpenVPN server from client, I can see this in OpenVPN log:

          IP packet with unknown IP version=0 seen
          

          🤔
          I have comression disabled on both sides so that in not the issue I guess.

          KOM 1 Reply Last reply Reply Quote 0
          • KOM
            KOM @BigMikeSK last edited by

            @bigmikesk OpenVPN 2.5 deprecated some ciphers IIRC which broke a lot of people's working configs. I have site to site configured and I have:

            Data Encryption Negotiation: Checked
            Data Encryption Algorithms: AES-128-GCM, AES-256-GCM, CHACHA20-POLY1305
            Fallback Data Encryption Algorithm: AES-256-CBC
            Auth digest algorithm: SHA256

            B 1 Reply Last reply Reply Quote 0
            • B
              BigMikeSK @KOM last edited by

              @kom Hi,
              I think if it would be the encryption issue, I woud't be able to connect at all I guess.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post