Sever with 2 interfaces default route issue??

dad311

Im getting the following error when my client(s) try to connect to my OpenVPN server:

TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Ive successfully setup several OpenVPN servers in the past but never with the interface config below.

eth0 10.16.x.x Default route
eth0:1 69.95.x.x

Here is what I "think" is happening, but Im not sure.

1) My client initiates an OpenVPN connection using the the servers 69.95.x.x interface.
2) The server responds, but sends the response out the 10.16.x.x interface (then out to the internet)
3) The NAT router on the client side sees a reply from the server, but the reply has the wrong source ip address. So the connection is blocked.

Does this sound logical???

janjust

yep this is exactly what's happening ; if you're using a non-windows OS for your VPN server you can use source routing to specify which interface the traffic should use.