Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    22.05.b.20220518.0600 OVPN Client problems

    Scheduled Pinned Locked Moved
    Plus 22.05 Development Snapshots (Retired)
    3
    16
    1.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Bob.DigB
      Bob.Dig LAYER 8 @stephenw10
      last edited by

      @stephenw10 Just changed the last pic to a more used tunnel...
      It works like this like forever. The privacyVPNs have tutorials for setting it up in pfSense and they are like this. I can't change the tunnel config anyways.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Yeah, I understand. I'm not seeing anything that would have changed that might have stopped that working.

        It's seen as invalid because if you tried to ping, say, 10.8.8.26 pfSense sees that as connected directly on 4 interfaces. It has no way to know which one to ARP on.

        When you were on todays snap did you see any traffic on any OpenVPN tunnel?

        Do you have any IPv6 configured on any of them?

        Let me see if I can replicate it...

        Bob.DigB 1 Reply Last reply Reply Quote 1
        • Bob.DigB
          Bob.Dig LAYER 8 @stephenw10
          last edited by Bob.Dig

          @stephenw10 To be honest right after testing that UPnP now is working for me, I noticed that I can't browse the web. Than that the gateway Widget made no sense to me and I saw this weird log entry I posted in the startpost. I decided that there is something fundamentally broken here and I "rolled" back.
          Then I remembered that I changed al lot of the interfaces the other day... which are working fine.
          I will take another look tomorrow, if there is any traffic on those OVPN interfaces but I am kinda sure that even "SSATVIE" wasn't working and that is the one my browser is using, so not much hope.
          IPv6 is not supported by any of them.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Ok, I've replicated that on a tunnel now. Were you seeing something like?:

             May 18 17:16:51 	openvpn 	1424 	Authenticate/Decrypt packet error: packet HMAC authentication failed

            Steve

            Bob.DigB 1 Reply Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @stephenw10
              last edited by Bob.Dig

              @stephenw10 So I "upgraded" again, only thing I find is this

              May 18 18:46:04 	openvpn 	21814 	Authenticate/Decrypt packet error: missing authentication info
May 18 18:46:03 	openvpn 	77994 	Authenticate/Decrypt packet error: missing authentication info
May 18 18:46:03 	openvpn 	59187 	Authenticate/Decrypt packet error: missing authentication info
May 18 18:46:03 	openvpn 	39525 	Authenticate/Decrypt packet error: missing authentication info

              Everything looks good though
              1.PNG

              But non of it is working
              2.PNG
              Even if I say, don't monitor, treat as up anyway, nothing is going through.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Yes, there's definitely an issue. We are pinning it down now...

                Bob.DigB 1 Reply Last reply Reply Quote 0
                • Bob.DigB
                  Bob.Dig LAYER 8 @stephenw10
                  last edited by Bob.Dig

                  @stephenw10 Wow, would be great, everything else is working, like Wireguard or my own OVPN-Server. I will go back now to check if "Authenticate/Decrypt packet error: missing authentication info" is just normal log noise for me. Also disabling all but one OVPN Client gateway didn't helped.
                  Edit: Going back now takes only seconds, that is a plus. 😝
                  But I wonder, can I still see logfiles from the time before? If no, "Authenticate/Decrypt packet error: missing authentication info" is "normal" in my case.
                  Even when I am rebooting with 20220513 I have the feeling the OpenVPN Clients have to be restarted by me, but then they are working fine.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    If that is the case then that's something different. Clients connect fine at boot here if they are able.

                    Looks like an upstream issue was pulled in and appeared in Tuesdays snaps. We are testing now....

                    Bob.DigB 1 Reply Last reply Reply Quote 1
                    • Bob.DigB
                      Bob.Dig LAYER 8
                      last edited by Bob.Dig

                      Today I made another attempt (this time 22.05.b.20220520.0600) and no problem, as if it never existed. 👍

                      1 Reply Last reply Reply Quote 1
                      • Bob.DigB
                        Bob.Dig LAYER 8 @stephenw10
                        last edited by Bob.Dig

                        This post is deleted!
                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post