menafraa
Hi all , im new in the forum so be pasient with me please
I have a openvpn working with 50 users , it wal all working ok but today it start giving me this messages in some cases (aporx 10 users cant connect but others one can connect to the tunnel)
Dec 14 13:24:17 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 SIGUSR1[soft,connection-reset] received, client-instance restarting
Dec 14 13:24:17 vpnserver openvpn[3277]: TCP/UDP: Closing socket
The finish all the proccess of connection but it gime me this message in the finish part (other users than can connecto to the tunnel give all the same output but not this two last lines)
All the output for the user with this issue is :
Dec 14 13:24:15 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 [spallinag] Peer Connection Initiated with 200.125.82.202:4600
Dec 14 13:24:15 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 MULTI: Learn: 172.19.90.30 -> spallinag/200.125.82.202:4600
Dec 14 13:24:15 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 MULTI: primary virtual IP for spallinag/200.125.82.202:4600: 172.19.90.30
Dec 14 13:24:17 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 PUSH: Received control message: 'PUSH_REQUEST'
Dec 14 13:24:17 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 SENT CONTROL [spallinag]: 'PUSH_REPLY,dhcp-option DNS 10.248.xxx.xxx,dhcp-option DNS 10.248.xxx.xxx,route 10.0.0.0 255.0.0.0,route 172.0.0.0 255.0.0.0,route 192.168.xxx.0 255.255.255.0,route 172.19.xxx.0 255.255.254.0,topology net30,ping 10,ping-restart 120,ifconfig 172.19.xxx.xxx 172.19.xxx.xxx' (status=1)
Dec 14 13:24:17 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 Connection reset, restarting [-1]
Dec 14 13:24:17 vpnserver openvpn[3277]: user/200.xxx.xxx.xxx:4600 SIGUSR1[soft,connection-reset] received, client-instance restarting
Dec 14 13:24:17 vpnserver openvpn[3277]: TCP/UDP: Closing socket
My config is:
port 1194
proto tcp
dev tun
ca /etc/openvpn/b.crt
cert /etc/openvpn/s.crt
key /etc/openvpn/s.key
dh /etc/openvpn/dh1024.pem
server 172.19.xxx.xxx 255.255.xxx.0
push "dhcp-option DNS 10.248.xxx.xxx"
push "dhcp-option DNS 10.248.xxx.xxx"
push "route 10.0.0.0 255.0.0.0"
push "route 172.0.0.0 255.0.0.0"
push "route 192.168.xxx.0 255.255.255.0"
ifconfig-pool-persist /etc/openvpn/ipp.txt
client-config-dir /etc/openvpn/ccd
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
user nobody
group users
username-as-common-name
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
reneg-sec 43200
status /etc/openvpn/server-status.log
verb 5
and client is:
client
dev tun
proto tcp
remote xxx.xxx.xxx.xxx 1194
float
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\certificados\\b.crt"
cert "C:\\certificados\\aaaa.crt"
key "C:\\certificados\\aaaa.key"
auth-user-pass
comp-lzo
reneg-sec 43200
verb 3
(My security admin told me that i cant put my ips ...sorry)
More info:
SELinux status: disabled
I gave new certificate for one user with this issue but he cant connect with this other news cert. too
The worst think is , one user have his VPN client in two pc, one is working and the other isnt working ...i dont know what to do ?!
What do you think?, can you please helpme with that?
