Sometimes Connected and sometimes not...

amanshukor

Hi,

I set up an OpenVPN server.

When I tried to connect the client ,
I will receive

Fri May 25 18:28:54 2012 UDPv4 link local: [undef]
Fri May 25 18:28:54 2012 UDPv4 link remote: [AF_INET]50.115.160.170:53
Fri May 25 18:28:54 2012 TCP/UDP: Incoming packet rejected from [AF_INET]50.115.160.171:53[2], expected peer address: [AF_INET]50.115.160.170:53 (allow this incoming source address/port by removing --remote or adding --float)
Fri May 25 18:28:55 2012 TCP/UDP: Incoming packet rejected from [AF_INET]50.115.160.171:53[2], expected peer address: [AF_INET]50.115.160.170:53 (allow this incoming source address/port by removing --remote or adding --float)
Fri May 25 18:28:56 2012 TCP/UDP: Incoming packet rejected from [AF_INET]50.115.160.171:53[2], expected peer address: [AF_INET]50.115.160.170:53 (allow this incoming source address/port by removing --remote or adding --float)

I tried to check the openvpn log file...

Fri May 25 06:28:54 2012 MULTI: multi_create_instance called
Fri May 25 06:28:54 2012 183.78.79.112:53855 Re-using SSL/TLS context
Fri May 25 06:28:54 2012 183.78.79.112:53855 LZO compression initialized
Fri May 25 06:28:54 2012 183.78.79.112:53855 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri May 25 06:28:54 2012 183.78.79.112:53855 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 25 06:28:54 2012 183.78.79.112:53855 Local Options hash (VER=V4): '530fdded'
Fri May 25 06:28:54 2012 183.78.79.112:53855 Expected Remote Options hash (VER=V4): '41690919'
Fri May 25 06:28:54 2012 183.78.79.112:53855 TLS: Initial packet from [AF_INET]183.78.79.112:53855, sid=bafb3198 1e76f032
Fri May 25 06:29:13 2012 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri May 25 06:29:14 2012 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri May 25 06:29:17 2012 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri May 25 06:29:18 2012 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri May 25 06:29:20 2012 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri May 25 06:29:22 2012 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri May 25 06:29:54 2012 183.78.79.112:53855 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri May 25 06:29:54 2012 183.78.79.112:53855 TLS Error: TLS handshake failed
Fri May 25 06:29:54 2012 183.78.79.112:53855 SIGUSR1[soft,tls-error] received, client-instance restarting

And my server had 2 IP address,
but I only use that end with 170 not 171...

I cant troubleshoot this as it sometimes can be connected and sometimes it will give me about my packet being rejected.

janjust

if your server has two public IPs then the return route can go out either interface (depending on how the server is set up).
if you add 'float' to the client config you might be able to work around this, or you'd have to set up source routing on the server.

amanshukor

Is it mean that I need to do iptables
on making the return traffic to a specific IP .

or I need to open both of the public IP.

or just turn off the second public ip ?

I know the answer will be best to google it,

but I will have a problems with the keyword to search as I don't know
the term to use for searching that solution...

lmgfy if you can ...

Mimiko

You can use iptables to do the trick, just search this forum. Also you can disable one IP. Or try using

local 50.115.160.170

in the server config.