Packet Loss over OpenVPN Connection



  • I'm running pfSense 2.0.1 and OpenVPN 2.3.4 for a remote access VPN. The client is running on Windows 8.1. I can connect to the VPN just fine, but while connected I drop a lot of packets:

    PS C:\Users\> ping -n 20 172.16.0.55
    
    Pinging 172.16.0.55 with 32 bytes of data:
    Reply from 172.16.0.55: bytes=32 time=62ms TTL=127
    Reply from 172.16.0.55: bytes=32 time=61ms TTL=127
    Reply from 172.16.0.55: bytes=32 time=61ms TTL=127
    Reply from 172.16.0.55: bytes=32 time=61ms TTL=127
    Request timed out.
    Reply from 172.16.0.55: bytes=32 time=61ms TTL=127
    Reply from 172.16.0.55: bytes=32 time=62ms TTL=127
    Reply from 172.16.0.55: bytes=32 time=62ms TTL=126
    Reply from 172.16.0.55: bytes=32 time=62ms TTL=126
    Request timed out.
    Reply from 172.16.0.55: bytes=32 time=62ms TTL=126
    Request timed out.
    Request timed out.
    Reply from 172.16.0.55: bytes=32 time=61ms TTL=126
    Reply from 172.16.0.55: bytes=32 time=63ms TTL=126
    Reply from 172.16.0.55: bytes=32 time=62ms TTL=126
    Request timed out.
    Reply from 172.16.0.55: bytes=32 time=63ms TTL=127
    Reply from 172.16.0.55: bytes=32 time=62ms TTL=127
    Request timed out.
    
    Ping statistics for 172.16.0.55:
        Packets: Sent = 20, Received = 14, Lost = 6 (30% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 61ms, Maximum = 63ms, Average = 61ms
    

    Other users don't experience this. I don't see any issues on the firewall itself. I'm really not sure what to check. My local network is behind a Cisco ASA 5505, so I thought maybe that was causing issues, but I can't see anything on that either.
    What else can I do to try and troubleshoot this issue? Thanks.

    Here's the OpenVPN config file:

    dev tun
    persist-tun
    persist-key
    proto udp
    cipher AES-128-CBC
    tls-client
    client
    resolv-retry infinite
    remote <redacted> 1194
    tls-remote vpnuser
    auth-user-pass
    ca fw01-udp-1194-ca.crt
    tls-auth fw01-udp-1194-tls.key 1</redacted>
    


  • So I think this is related to the ASA I'm using. I'm connected at another location and I'm not experiencing any packet loss.