Client doesn't connect when outside network

nburkholder

Thank you for your help in advance.

I have OpenVPN installed on my server at home and a laptop. When I am in network (or at home with the server) OpenVPN will connect. When I am at school on their wifi, my Client computer can't connect. I get the following log:

Mon Aug 26 08:36:22 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Mon Aug 26 08:36:22 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Aug 26 08:36:22 2013 Need hold release from management interface, waiting...
Mon Aug 26 08:36:22 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Aug 26 08:36:22 2013 MANAGEMENT: CMD 'state on'
Mon Aug 26 08:36:22 2013 MANAGEMENT: CMD 'log all on'
Mon Aug 26 08:36:22 2013 MANAGEMENT: CMD 'hold off'
Mon Aug 26 08:36:22 2013 MANAGEMENT: CMD 'hold release'
Mon Aug 26 08:36:23 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 26 08:36:23 2013 UDPv4 link local: [undef]
Mon Aug 26 08:36:23 2013 UDPv4 link remote: [AF_INET]192.168.1.206:1194
Mon Aug 26 08:36:23 2013 MANAGEMENT: >STATE:1377524183,WAIT,,,
Mon Aug 26 08:37:23 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 26 08:37:23 2013 TLS Error: TLS handshake failed
Mon Aug 26 08:37:23 2013 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 26 08:37:23 2013 MANAGEMENT: >STATE:1377524243,RECONNECTING,tls-error,,
Mon Aug 26 08:37:23 2013 Restart pause, 2 second(s)
Mon Aug 26 08:37:25 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 26 08:37:25 2013 UDPv4 link local: [undef]
Mon Aug 26 08:37:25 2013 UDPv4 link remote: [AF_INET]192.168.1.206:1194
Mon Aug 26 08:37:25 2013 MANAGEMENT: >STATE:1377524245,WAIT,,,
Mon Aug 26 08:38:25 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 26 08:38:25 2013 TLS Error: TLS handshake failed
Mon Aug 26 08:38:25 2013 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 26 08:38:25 2013 MANAGEMENT: >STATE:1377524305,RECONNECTING,tls-error,,
Mon Aug 26 08:38:25 2013 Restart pause, 2 second(s)
Mon Aug 26 08:38:27 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 26 08:38:27 2013 UDPv4 link local: [undef]
Mon Aug 26 08:38:27 2013 UDPv4 link remote: [AF_INET]192.168.1.206:1194
Mon Aug 26 08:38:27 2013 MANAGEMENT: >STATE:1377524307,WAIT,,,
Mon Aug 26 08:39:27 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 26 08:39:27 2013 TLS Error: TLS handshake failed
Mon Aug 26 08:39:27 2013 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 26 08:39:27 2013 MANAGEMENT: >STATE:1377524367,RECONNECTING,tls-error,,
Mon Aug 26 08:39:27 2013 Restart pause, 2 second(s)
Mon Aug 26 08:39:29 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 26 08:39:29 2013 UDPv4 link local: [undef]
Mon Aug 26 08:39:29 2013 UDPv4 link remote: [AF_INET]192.168.1.206:1194
Mon Aug 26 08:39:29 2013 MANAGEMENT: >STATE:1377524369,WAIT,,,
Mon Aug 26 08:40:29 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 26 08:40:29 2013 TLS Error: TLS handshake failed
Mon Aug 26 08:40:29 2013 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 26 08:40:29 2013 MANAGEMENT: >STATE:1377524429,RECONNECTING,tls-error,,
Mon Aug 26 08:40:29 2013 Restart pause, 2 second(s)
Mon Aug 26 08:40:31 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 26 08:40:31 2013 UDPv4 link local: [undef]
Mon Aug 26 08:40:31 2013 UDPv4 link remote: [AF_INET]192.168.1.206:1194
Mon Aug 26 08:40:31 2013 MANAGEMENT: >STATE:1377524431,WAIT,,,

I have my router at home port forward setup for OpenVPN so i don't know where the problem is.

maikcat

hi there,

I have my router at home port forward setup for OpenVPN so i don't know where the problem is.

ok so far...

Mon Aug 26 08:39:29 2013 UDPv4 link remote: [AF_INET] 192.168.1.206:1194

you are connecting where...? to your homes lan ip? :?

Michael.

nburkholder

That is my server's static ip address. should it be the routers ip?

maikcat

That is my server's static ip address. should it be the routers ip?

yeap....

Michael.

nburkholder

Ok, I changed it and still got the same error.

maikcat

post server logs please,

maybe your network filters out outgoing traffic,
if this is the case you cant do much... (except configure openvpn to use tcp/443) 😉

Michael.

nburkholder

When I go to View Log on the the server, it gives me the message:

Error Starting Log-viewer: C:\Windows\notepad.exe

Or if you meant the OVPN file:

port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"  # This file should be kept secret
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

maikcat

Error Starting Log-viewer: C:\Windows\notepad.exe

can you find a different program to open openvpn log file? (f.e wordpad)

Michael.

nburkholder

How do i change which program it uses?

nburkholder

Maybe this is it?

Sat Aug 31 08:07:45 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 8 2013
Sat Aug 31 08:07:45 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat Aug 31 08:07:45 2013 Need hold release from management interface, waiting...
Sat Aug 31 08:07:45 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat Aug 31 08:07:45 2013 MANAGEMENT: CMD 'state on'
Sat Aug 31 08:07:45 2013 MANAGEMENT: CMD 'log all on'
Sat Aug 31 08:07:45 2013 MANAGEMENT: CMD 'hold off'
Sat Aug 31 08:07:45 2013 MANAGEMENT: CMD 'hold release'
Sat Aug 31 08:07:45 2013 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat Aug 31 08:07:46 2013 Diffie-Hellman initialized with 1024 bit key
Sat Aug 31 08:07:46 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Aug 31 08:07:46 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Aug 31 08:07:46 2013 MANAGEMENT: >STATE:1377954466,ASSIGN_IP,,10.8.0.1,
Sat Aug 31 08:07:46 2013 open_tun, tt->ipv6=0
Sat Aug 31 08:07:46 2013 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{9E240085-2851-477E-B75B-732449B7DBB4}.tap
Sat Aug 31 08:07:46 2013 TAP-Windows Driver Version 9.9
Sat Aug 31 08:07:46 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {9E240085-2851-477E-B75B-732449B7DBB4} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sat Aug 31 08:07:46 2013 Sleeping for 10 seconds...
Sat Aug 31 08:07:56 2013 Successful ARP Flush on interface [16] {9E240085-2851-477E-B75B-732449B7DBB4}
Sat Aug 31 08:07:56 2013 MANAGEMENT: >STATE:1377954476,ADD_ROUTES,,,
Sat Aug 31 08:07:56 2013 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sat Aug 31 08:07:56 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat Aug 31 08:07:56 2013 Route addition via IPAPI succeeded [adaptive]
Sat Aug 31 08:07:56 2013 UDPv4 link local (bound): [undef]
Sat Aug 31 08:07:56 2013 UDPv4 link remote: [undef]
Sat Aug 31 08:07:56 2013 MULTI: multi_init called, r=256 v=256
Sat Aug 31 08:07:56 2013 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Aug 31 08:07:56 2013 ifconfig_pool_read(), in='OnyxLion,10.8.0.4', TODO: IPv6
Sat Aug 31 08:07:56 2013 succeeded -> ifconfig_pool_set()
Sat Aug 31 08:07:56 2013 IFCONFIG POOL LIST
Sat Aug 31 08:07:56 2013 OnyxLion,10.8.0.4
Sat Aug 31 08:07:56 2013 Initialization Sequence Completed
Sat Aug 31 08:07:56 2013 MANAGEMENT: >STATE:1377954476,CONNECTED,SUCCESS,10.8.0.1,

maikcat

yes this is your log,

however though it does not show any log in attempts,

maybe your outgoing traffic is filtered out,

try using tcp/443 port/proto combo.

Michael.

nburkholder

will that make the system more accessible?

What's the difference between port 1194 and 443?

maikcat

port 443/tcp is used by https so there is a very good chance to allow traffic for it.

Michael.