Packet Loss over OpenVPN Connection
-
I'm running pfSense 2.0.1 and OpenVPN 2.3.4 for a remote access VPN. The client is running on Windows 8.1. I can connect to the VPN just fine, but while connected I drop a lot of packets:
PS C:\Users\> ping -n 20 172.16.0.55 Pinging 172.16.0.55 with 32 bytes of data: Reply from 172.16.0.55: bytes=32 time=62ms TTL=127 Reply from 172.16.0.55: bytes=32 time=61ms TTL=127 Reply from 172.16.0.55: bytes=32 time=61ms TTL=127 Reply from 172.16.0.55: bytes=32 time=61ms TTL=127 Request timed out. Reply from 172.16.0.55: bytes=32 time=61ms TTL=127 Reply from 172.16.0.55: bytes=32 time=62ms TTL=127 Reply from 172.16.0.55: bytes=32 time=62ms TTL=126 Reply from 172.16.0.55: bytes=32 time=62ms TTL=126 Request timed out. Reply from 172.16.0.55: bytes=32 time=62ms TTL=126 Request timed out. Request timed out. Reply from 172.16.0.55: bytes=32 time=61ms TTL=126 Reply from 172.16.0.55: bytes=32 time=63ms TTL=126 Reply from 172.16.0.55: bytes=32 time=62ms TTL=126 Request timed out. Reply from 172.16.0.55: bytes=32 time=63ms TTL=127 Reply from 172.16.0.55: bytes=32 time=62ms TTL=127 Request timed out. Ping statistics for 172.16.0.55: Packets: Sent = 20, Received = 14, Lost = 6 (30% loss), Approximate round trip times in milli-seconds: Minimum = 61ms, Maximum = 63ms, Average = 61ms
Other users don't experience this. I don't see any issues on the firewall itself. I'm really not sure what to check. My local network is behind a Cisco ASA 5505, so I thought maybe that was causing issues, but I can't see anything on that either.
What else can I do to try and troubleshoot this issue? Thanks.Here's the OpenVPN config file:
dev tun persist-tun persist-key proto udp cipher AES-128-CBC tls-client client resolv-retry infinite remote <redacted> 1194 tls-remote vpnuser auth-user-pass ca fw01-udp-1194-ca.crt tls-auth fw01-udp-1194-tls.key 1</redacted>
-
So I think this is related to the ASA I'm using. I'm connected at another location and I'm not experiencing any packet loss.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.