Open VPN Client Satus Problem

sunch1ld

Hi I am using pfsense 2.0.3-PRERELEASE. When I open the page Status > Services, the ovpn client status is down, but the open vpn client is up. How can I solve this problem?

jimp

What exactly does the OpenVPN status screen show? (Screenshot is best)
Does it show down on both sides of the connection? Or just one?

Is it SSL/TLS with a /30 tunnel network, SSL/TLS with a larger tunnel network, Shared key, etc?

Need a lot more info to go on.

sunch1ld

Hi Thanks for your reply

Yes is SSL/TLS client.

I show you parameters and status using the attached images.

jimp

That indicates that the process isn't running, and can't be reached through the management daemon (which typically also means the process is not running)

Given that I really doubt it's actually working.

I have a 2.0.3 VM here and the status shows fine for shared key and SSL/TLS clients for me.

sunch1ld

For me the process is running, but the status is wrong because I connect to that machine through the vpn address. That place has little bandwith.

jimp

check this:

ps uxawww | grep openvpn

ls -l /var/run/openvpn*

ls -l /var/etc/openvpn*

If it can't contact the management daemon, it's not running properly or as expected. It works fine with a stock config, so it's also possible that one of your advanced option entries is causing the status to fail.

sunch1ld

I have execute these commands:

ps uxawww | grep openvpn

root 19730 0.0 1.5 5116 3740 ?? RNs Sat12PM 0:46.99 /usr/local/sbin/openvpn –config /var/etc/openvpn/client1.conf
root 55892 0.0 0.5 3524 1200 0 R+ 10:26PM 0:00.01 grep openvpn

ls -l /var/run/openvpn*
-rw-r--r-- 1 root wheel 6 Feb 23 12:12 /var/run/openvpn_client1.pid
ls -l /var/etc/openvpn*
/var/etc/openvpn:
total 10
-rw------- 1 root wheel 662 Feb 23 12:12 client1.ca
-rw------- 1 root wheel 672 Feb 23 12:12 client1.cert
-rw------- 1 root wheel 643 Feb 23 12:12 client1.conf
-rw------- 1 root wheel 898 Feb 23 12:12 client1.key
srwxrwxrwx 1 root wheel 0 Feb 23 12:12 client1.sock
-rw------- 1 root wheel 618 Feb 23 12:12 client1.tls-auth

/var/etc/openvpn-csc:
total 0

phil.davis

My example of this "feature" is at http://forum.pfsense.org/index.php/topic,59464.0.html
I have noticed it with both Peer-to-peer shared key and SSL/TLS links every now and then. I saw it just now and managed to gather some data.