VPN not connecting to QNAP device

gdeboisblanc

Greetings!
I just purchased a QNAP NAS that supports OpenVPN and I am having difficulty getting it to work. Here is what I have done thus far.

1. Opened port #1194 (UDP and TCP) and forward to the QNAP IP
2. After making changes to OPEN VPN configuration on QNAP, I downloaded and placed the ca.crt, key.txt and openvpn.ovpn files in
C:\Program Files (x86)\OpenVPN\config
3. I have registered a DDNS account and this fails at times but is not the cause for the failure to connect.

Any help you guys could provide would be really appreciated! 😃

Please see the log file below....

Tue Jul 31 07:45:26 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Jul 31 07:45:32 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:45:32 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:45:32 2012 LZO compression initialized
Tue Jul 31 07:45:32 2012 UDPv4 link local: [undef]
Tue Jul 31 07:45:32 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:45:32 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:45:34 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:45:38 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:45:46 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:46:03 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:46:32 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:46:32 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:46:32 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:46:34 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:46:34 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:46:34 2012 LZO compression initialized
Tue Jul 31 07:46:35 2012 UDPv4 link local: [undef]
Tue Jul 31 07:46:35 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:46:35 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:46:37 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:46:41 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:46:49 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:47:05 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:47:35 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:47:35 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:47:35 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:47:37 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:47:37 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:47:37 2012 LZO compression initialized
Tue Jul 31 07:47:37 2012 UDPv4 link local: [undef]
Tue Jul 31 07:47:37 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:47:37 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:47:40 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:47:44 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:47:52 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:48:08 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:48:37 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:48:37 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:48:37 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:48:39 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:48:39 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:48:39 2012 LZO compression initialized
Tue Jul 31 07:48:39 2012 UDPv4 link local: [undef]
Tue Jul 31 07:48:39 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:48:39 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:48:41 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:48:45 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:48:53 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:49:09 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:49:39 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:49:39 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:49:39 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:49:41 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:49:41 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:49:41 2012 LZO compression initialized
Tue Jul 31 07:49:41 2012 UDPv4 link local: [undef]
Tue Jul 31 07:49:41 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:49:41 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:49:44 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:49:49 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:49:56 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:50:12 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:50:42 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:50:42 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:50:42 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:50:44 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:50:44 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:50:44 2012 LZO compression initialized
Tue Jul 31 07:50:44 2012 UDPv4 link local: [undef]
Tue Jul 31 07:50:44 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:50:44 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:50:46 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:50:50 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:50:58 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:51:14 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:51:44 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:51:44 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:51:44 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:51:46 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:51:46 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:51:46 2012 LZO compression initialized
Tue Jul 31 07:51:46 2012 UDPv4 link local: [undef]
Tue Jul 31 07:51:46 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:51:46 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:51:48 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:51:52 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:52:00 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:52:16 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:52:46 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:52:46 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:52:46 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:52:48 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:52:48 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:52:48 2012 LZO compression initialized
Tue Jul 31 07:52:48 2012 UDPv4 link local: [undef]
Tue Jul 31 07:52:48 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:52:48 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:52:50 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:52:54 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:53:02 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:53:18 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:53:48 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:53:48 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:53:48 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:53:50 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:53:50 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:53:50 2012 LZO compression initialized
Tue Jul 31 07:53:50 2012 UDPv4 link local: [undef]
Tue Jul 31 07:53:50 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:53:50 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:53:52 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:53:57 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:54:06 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:54:22 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:54:50 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:54:50 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:54:50 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:54:52 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:54:52 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:54:52 2012 LZO compression initialized
Tue Jul 31 07:54:52 2012 UDPv4 link local: [undef]
Tue Jul 31 07:54:52 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:54:52 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:54:54 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:54:58 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:55:06 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:55:22 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:55:52 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:55:52 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:55:52 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:55:54 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:55:54 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:55:54 2012 LZO compression initialized
Tue Jul 31 07:55:55 2012 UDPv4 link local: [undef]
Tue Jul 31 07:55:55 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:55:55 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:55:57 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:56:01 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:56:09 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:56:25 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:56:55 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:56:55 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:56:55 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:56:57 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:56:57 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:56:57 2012 LZO compression initialized
Tue Jul 31 07:56:57 2012 UDPv4 link local: [undef]
Tue Jul 31 07:56:57 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:56:57 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:56:59 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:57:03 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:57:11 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:57:27 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:57:58 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:57:58 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:57:58 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:58:00 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:58:00 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:58:00 2012 LZO compression initialized
Tue Jul 31 07:58:00 2012 UDPv4 link local: [undef]
Tue Jul 31 07:58:00 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:58:00 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:58:02 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:58:07 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:58:15 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:58:31 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:59:00 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 07:59:00 2012 TLS Error: TLS handshake failed
Tue Jul 31 07:59:00 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 07:59:02 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 07:59:02 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 07:59:02 2012 LZO compression initialized
Tue Jul 31 07:59:02 2012 UDPv4 link local: [undef]
Tue Jul 31 07:59:02 2012 UDPv4 link remote: 216.80.129.140:1194
Tue Jul 31 07:59:02 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:59:05 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:59:10 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:59:18 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 07:59:34 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 31 08:00:02 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 31 08:00:02 2012 TLS Error: TLS handshake failed
Tue Jul 31 08:00:02 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 31 08:00:04 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jul 31 08:00:04 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jul 31 08:00:04 2012 LZO compression initialized
Tue Jul 31 08:00:05 2012 RESOLVE: Cannot resolve host address: smoothsailingcomputers.mycloudnas.com: [TRY_AGAIN] A temporary error occurred on an authoritative name server.
Tue Jul 31 08:00:06 2012 RESOLVE: Cannot resolve host address: smoothsailingcomputers.mycloudnas.com: [TRY_AGAIN] A temporary error occurred on an authoritative name server.
Tue Jul 31 08:00:12 2012 RESOLVE: Cannot resolve host address: smoothsailingcomputers.mycloudnas.com: [TRY_AGAIN] A temporary error occurred on an authoritative name server.
Tue Jul 31 08:00:18 2012 RESOLVE: Cannot resolve host address: smoothsailingcomputers.mycloudnas.com: [TRY_AGAIN] A temporary error occurred on an authoritative name server.
Tue Jul 31 08:00:24 2012 RESOLVE: Cannot resolve host address: smoothsailingcomputers.mycloudnas.com: [TRY_AGAIN] A temporary error occurred on an authoritative name server.
Tue Jul 31 08:00:30 2012 RESOLVE: signal received during DNS resolution attempt
Tue Jul 31 08:00:30 2012 SIGTERM[hard,init_instance] received, process exiting

maikcat

these errors:

Tue Jul 31 07:59:02 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)

usually means that:

something blocking openvpn service port or
nat is not configured on your router or
openvpn service in not up...

what your server logs say?

Michael.

gdeboisblanc

Maikcat,
Thanks for your reply. I really apprecaite it!

I know that NAT is turned on with the router. My local IP's are in the 192.168.xx.xx range.
The web site canyouseeme.org shows that my port 1194 is open. Also the OPENVPN service is running on the QNAP. I will try to restart it to be sure as I don't think I have done that since enabling the service. I am not sure how else to test to see if the service is running on the qnap other than connecting to the GUI and looking to see that the check box is marked.

Any other ideas would be appreciated. I am stumped!

gdeboisblanc

Well as it turned out I figured out what was causing the issue. The QNAP has a UPnP feature that my router does not support.
After I turned that off, the routes I had configured started working (or rather started being accepted by the QNAP) and the connections for both OPENVPN and PPPT are working fine now.

Yea!!!

Gregg