Connected but no packets recieved, only packets sent

kunala05

Hi,

I manage to connect to the VPN server but I am not receiving any packets

My TAP connection has the following status:-

Sent Packets: 3235
Received Packets: 1

Any inputs on this would be greatly appreciated.

Thanks
Kevin A.

Sun Sep 29 04:03:20 2013 Initialization Sequence Completed
Sun Sep 29 04:03:20 2013 MANAGEMENT: >STATE:1380402200,CONNECTED,SUCCESS,192.168.50.4,110.171.0.22
Sun Sep 29 04:04:24 2013 [TERMINUS] Inactivity timeout (--ping-restart), restarting
Sun Sep 29 04:04:24 2013 SIGUSR1[soft,ping-restart] received, process restarting
Sun Sep 29 04:04:24 2013 MANAGEMENT: >STATE:1380402264,RECONNECTING,ping-restart,,
Sun Sep 29 04:04:24 2013 Restart pause, 2 second(s)
Sun Sep 29 04:04:26 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 29 04:04:26 2013 MANAGEMENT: >STATE:1380402266,RESOLVE,,,
Sun Sep 29 04:04:26 2013 UDPv4 link local: [undef]
Sun Sep 29 04:04:26 2013 UDPv4 link remote: [AF_INET]110.171.0.22:1194
Sun Sep 29 04:04:26 2013 MANAGEMENT: >STATE:1380402266,WAIT,,,
Sun Sep 29 04:04:27 2013 MANAGEMENT: >STATE:1380402267,AUTH,,,
Sun Sep 29 04:04:27 2013 TLS: Initial packet from [AF_INET]110.171.0.22:1194, sid=b6ee20c8 009793c1
Sun Sep 29 04:04:36 2013 VERIFY OK: depth=1, C=TH, ST=BA, L=BA, O=SI, OU=AE, CN=TERMINUS, name=TERMINUSCODE, emailAddress=kunal.oa@gmail.com
Sun Sep 29 04:04:36 2013 VERIFY OK: nsCertType=SERVER
Sun Sep 29 04:04:36 2013 VERIFY OK: depth=0, C=TH, ST=BANGKOK, L=BANGKOK, O=SINOTERMINUS, OU=AE-777, CN=TERMINUS, name=TERMINUSCODE, emailAddress=kunal.oa@gmail.com
Sun Sep 29 04:04:50 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Sep 29 04:04:50 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 29 04:04:50 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Sep 29 04:04:50 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 29 04:04:50 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep 29 04:04:50 2013 [TERMINUS] Peer Connection Initiated with [AF_INET]110.171.0.22:1194
Sun Sep 29 04:04:51 2013 MANAGEMENT: >STATE:1380402291,GET_CONFIG,,,
Sun Sep 29 04:04:52 2013 SENT CONTROL [TERMINUS]: 'PUSH_REQUEST' (status=1)
Sun Sep 29 04:04:52 2013 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.50.1,ping 15,ping-restart 60,ifconfig 192.168.50.4 255.255.255.0'
Sun Sep 29 04:04:52 2013 OPTIONS IMPORT: timers and/or timeouts modified
Sun Sep 29 04:04:52 2013 OPTIONS IMPORT: --ifconfig/up options modified
Sun Sep 29 04:04:52 2013 OPTIONS IMPORT: route-related options modified
Sun Sep 29 04:04:52 2013 Preserving previous TUN/TAP instance: Local Area Connection 2
Sun Sep 29 04:04:52 2013 Initialization Sequence Completed
Sun Sep 29 04:04:52 2013 MANAGEMENT: >STATE:1380402292,CONNECTED,SUCCESS,192.168.50.4,110.171.0.22
Sun Sep 29 04:12:32 2013 [TERMINUS] Inactivity timeout (--ping-restart), restarting
Sun Sep 29 04:12:32 2013 SIGUSR1[soft,ping-restart] received, process restarting
Sun Sep 29 04:12:32 2013 MANAGEMENT: >STATE:1380402752,RECONNECTING,ping-restart,,
Sun Sep 29 04:12:32 2013 Restart pause, 2 second(s)
Sun Sep 29 04:12:34 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 29 04:12:34 2013 MANAGEMENT: >STATE:1380402754,RESOLVE,,,
Sun Sep 29 04:12:34 2013 RESOLVE: Cannot resolve host address: sinoterminus.com: No such host is known. 
Sun Sep 29 04:12:34 2013 MANAGEMENT: >STATE:1380402754,RESOLVE,,,
Sun Sep 29 04:12:34 2013 RESOLVE: Cannot resolve host address: sinoterminus.com: No such host is known. 
Sun Sep 29 04:12:40 2013 UDPv4 link local: [undef]
Sun Sep 29 04:12:40 2013 UDPv4 link remote: [AF_INET]110.171.0.22:1194
Sun Sep 29 04:12:40 2013 MANAGEMENT: >STATE:1380402760,WAIT,,,
Sun Sep 29 04:12:40 2013 MANAGEMENT: >STATE:1380402760,AUTH,,,
Sun Sep 29 04:12:40 2013 TLS: Initial packet from [AF_INET]110.171.0.22:1194, sid=f01d085a 7fc89184
Sun Sep 29 04:12:45 2013 VERIFY OK: depth=1, C=TH, ST=BA, L=BA, O=SI, OU=AE, CN=TERMINUS, name=TERMINUSCODE, emailAddress=kunal.oa@gmail.com
Sun Sep 29 04:12:45 2013 VERIFY OK: nsCertType=SERVER
Sun Sep 29 04:12:45 2013 VERIFY OK: depth=0, C=TH, ST=BANGKOK, L=BANGKOK, O=SINOTERMINUS, OU=AE-777, CN=TERMINUS, name=TERMINUSCODE, emailAddress=kunal.oa@gmail.com
Sun Sep 29 04:12:53 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Sep 29 04:12:53 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 29 04:12:53 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Sep 29 04:12:53 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 29 04:12:53 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep 29 04:12:53 2013 [TERMINUS] Peer Connection Initiated with [AF_INET]110.171.0.22:1194
Sun Sep 29 04:12:54 2013 MANAGEMENT: >STATE:1380402774,GET_CONFIG,,,
Sun Sep 29 04:12:55 2013 SENT CONTROL [TERMINUS]: 'PUSH_REQUEST' (status=1)
Sun Sep 29 04:12:57 2013 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.50.1,ping 15,ping-restart 60,ifconfig 192.168.50.4 255.255.255.0'
Sun Sep 29 04:12:57 2013 OPTIONS IMPORT: timers and/or timeouts modified
Sun Sep 29 04:12:57 2013 OPTIONS IMPORT: --ifconfig/up options modified
Sun Sep 29 04:12:57 2013 OPTIONS IMPORT: route-related options modified
Sun Sep 29 04:12:57 2013 Preserving previous TUN/TAP instance: Local Area Connection 2
Sun Sep 29 04:12:57 2013 Initialization Sequence Completed
Sun Sep 29 04:12:57 2013 MANAGEMENT: >STATE:1380402777,CONNECTED,SUCCESS,192.168.50.4,110.171.0.22
Sun Sep 29 04:13:57 2013 [TERMINUS] Inactivity timeout (--ping-restart), restarting
Sun Sep 29 04:13:57 2013 SIGUSR1[soft,ping-restart] received, process restarting
Sun Sep 29 04:13:57 2013 MANAGEMENT: >STATE:1380402837,RECONNECTING,ping-restart,,
Sun Sep 29 04:13:57 2013 Restart pause, 2 second(s)
Sun Sep 29 04:13:59 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 29 04:13:59 2013 MANAGEMENT: >STATE:1380402839,RESOLVE,,,
Sun Sep 29 04:13:59 2013 UDPv4 link local: [undef]
Sun Sep 29 04:13:59 2013 UDPv4 link remote: [AF_INET]110.171.0.22:1194
Sun Sep 29 04:13:59 2013 MANAGEMENT: >STATE:1380402839,WAIT,,,
Sun Sep 29 04:14:00 2013 MANAGEMENT: >STATE:1380402840,AUTH,,,
Sun Sep 29 04:14:00 2013 TLS: Initial packet from [AF_INET]110.171.0.22:1194, sid=fb9266a6 8f9e033b
Sun Sep 29 04:14:04 2013 VERIFY OK: depth=1, C=TH, ST=BA, L=BA, O=SI, OU=AE, CN=TERMINUS, name=TERMINUSCODE, emailAddress=kunal.oa@gmail.com
Sun Sep 29 04:14:04 2013 VERIFY OK: nsCertType=SERVER
Sun Sep 29 04:14:04 2013 VERIFY OK: depth=0, C=TH, ST=BANGKOK, L=BANGKOK, O=SINOTERMINUS, OU=AE-777, CN=TERMINUS, name=TERMINUSCODE, emailAddress=kunal.oa@gmail.com
Sun Sep 29 04:14:12 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Sep 29 04:14:12 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 29 04:14:12 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Sep 29 04:14:12 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 29 04:14:12 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Sep 29 04:14:12 2013 [TERMINUS] Peer Connection Initiated with [AF_INET]110.171.0.22:1194
Sun Sep 29 04:14:13 2013 MANAGEMENT: >STATE:1380402853,GET_CONFIG,,,
Sun Sep 29 04:14:14 2013 SENT CONTROL [TERMINUS]: 'PUSH_REQUEST' (status=1)
Sun Sep 29 04:14:15 2013 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.50.1,ping 15,ping-restart 60,ifconfig 192.168.50.4 255.255.255.0'
Sun Sep 29 04:14:15 2013 OPTIONS IMPORT: timers and/or timeouts modified
Sun Sep 29 04:14:15 2013 OPTIONS IMPORT: --ifconfig/up options modified
Sun Sep 29 04:14:15 2013 OPTIONS IMPORT: route-related options modified
Sun Sep 29 04:14:15 2013 Preserving previous TUN/TAP instance: Local Area Connection 2
Sun Sep 29 04:14:15 2013 Initialization Sequence Completed
Sun Sep 29 04:14:15 2013 MANAGEMENT: >STATE:1380402855,CONNECTED,SUCCESS,192.168.50.4,110.171.0.22

kunala05

Hi Debbie10t

Thanks for your feedback.

It seems like I found the problem. It was in the client configuration the problem

I had comp-lzo on the configuration file which was causing problems in the packages. Once I removed it the connection worked briefly and I was able to connect to the server(my router running OpenVPN-Server) but again it is not working.

But the brief second of connection to my server was moments of joy. Wish I had jumped into the log and checked what was the problem. I believe it has something to do with duplicate certificates = duplicate-cn.

I think I need to add duplicate-cn in my server config file to allow other clients that are using similar CA to access.

Please provide your advise/feedback.

Best Regards
Kevin A.

kunala05

Hi. On the server side this is the kind of error I am getting

Sep 28 09:39:17 unknown daemon.notice openvpn[1358]: MULTI: new connection by client 'KUNAL' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Sep 28 09:39:17 unknown daemon.err openvpn[1358]: read UDPv4 [ECONNREFUSED]: Connection refused (code=146)
Sep 28 09:39:19 unknown daemon.notice openvpn[1358]: KUNAL/79.170.55.213:2471 PUSH: Received control message: 'PUSH_REQUEST'
Sep 28 09:39:19 unknown daemon.notice openvpn[1358]: KUNAL/79.170.55.213:2471 SENT CONTROL [KUNAL]: 'PUSH_REPLY,route-gateway 192.168.50.1,ping 15,ping-restart 60,ifconfig 192.168.50.51 255.255.255.0' (status=1)

Is the MULTI notice something I need to act on ?

Complete Key managment? How?

kunala05

Hi Debbie,

I already have 1 client working. I am trying to get a second client to work and I believe its because of this:

: MULTI: new connection by client 'KUNAL' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.

Would "duplicate-cn" stop this?

kunala05

Hi Debbie,

I managed to connect to my server but I cannot connect to the other client router.

I am using OpenVPN on my laptop. I noticed some problem in the OpenVPN Server Status(primary router). See below for the detail:-

Common Name Real Address Virtual Address Bytes Received Bytes Sent Connected Since
KUNAL 79.170.55.52:9283 192.168.50.3 16972 6611 Mon Sep 30 23:15:40 2013
KUNAL 79.170.55.52:5214 192.168.50.6 2224147 4584054 Mon Sep 30 22:44:31 2013
KUNAL 79.170.55.52:5247 192.168.50.5 4182 6162 Mon Sep 30 23:18:20 2013
KUNAL 79.170.55.52:5243 192.168.50.4 14333 5849 Mon Sep 30 23:17:00 2013
AJAYJSC 171.99.168.115:2059 192.168.50.2 3783946 7184826 Mon Sep 30 08:06:08 2013

I am not sure how I have 4 connections from the same client(same IP). All have different IP address and seem to be getting assigned by some DHCP method that I am not aware of. Only AJAYJSC has the right IP address.

Please help inform what config I need to add to the client to have a fixed IP set and how to end all these other additional connections from one IP.

Thanks
Kunal A.