VPN connection gets paused

mapito

Hi,

I setup openvpn server on my home ubuntu machine and created the required files for a client (iphone 5) ..created the client.ovpn file and used inline certificates

I seem to now have two problems recently;

1) after a period of time the VPN connection drops (i think its when the phone locks/is idle for a period of time )- but it doesn't reconnect when the phones active again
and it says (pause network unavailable) in the openVPN ioS app - the VPN is still up and disconnecting and reconnecting will work fine

2) Not sure if this has happened since ios7..but i can't think what else it could be, I'm connected to the VPN
BUT i can't reach any websites AT all atm - I'm using the same server config as I was before and have the same client file for my iphone , the server is up and the iphone is shown as connected

Nothing at all is changed and yet I can't access anything now..previously it was just the issue of pause (network unavailable)

any help greatly appreciated

thanks

map

mapito

2013-10-15 19:34:03 ----- OpenVPN Stop -----
2013-10-15 19:34:13 ----- OpenVPN Start -----
2013-10-15 19:34:13 LZO-ASYM init swap=0 asym=0
2013-10-15 19:34:13 EVENT: RESOLVE
2013-10-15 19:34:13 Contacting 94.193.78.219:1194 via UDP
2013-10-15 19:34:13 EVENT: WAIT
2013-10-15 19:34:13 Connecting to 94.193.78.219:1194 (94.193.78.219) via UDPv4
2013-10-15 19:34:14 EVENT: CONNECTING
2013-10-15 19:34:14 Tunnel Options:V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client
2013-10-15 19:34:14 Peer Info:
IV_VER=1.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2013-10-15 19:34:18 VERIFY OK: depth=0
cert. version : 3
serial number : 01
issuer name : C=UK, ST=PORTSMOUTH, L=PO, O=TEST VPN, OU=changeme, CN=vpn1, 0x29=mark, emailAddress=mail@host.domain
subject name : C=UK, ST=PORTSMOUTH, L=PO, O=TEST VPN, OU=changeme, CN=server, 0x29=mark, emailAddress=mail@host.domain
issued on : 2013-09-14 06:21:45
expires on : 2023-09-12 06:21:45
signed using : RSA+SHA1
RSA key size : 1024 bits

2013-10-15 19:34:18 VERIFY OK: depth=1
cert. version : 3
serial number : EB:51:FF:1C:A4:96:82:76
issuer name : C=UK, ST=PORTSMOUTH, L=PO, O=TEST VPN, OU=changeme, CN=vpn1, 0x29=mark, emailAddress=mail@host.domain
subject name : C=UK, ST=PORTSMOUTH, L=PO, O=TEST VPN, OU=changeme, CN=vpn1, 0x29=mark, emailAddress=mail@host.domain
issued on : 2013-09-14 06:11:35
expires on : 2023-09-12 06:11:35
signed using : RSA+SHA1
RSA key size : 1024 bits

2013-10-15 19:34:20 SSL Handshake: TLSv1.0/SSL-EDH-RSA-AES-256-SHA
2013-10-15 19:34:20 Session is ACTIVE
2013-10-15 19:34:21 EVENT: GET_CONFIG
2013-10-15 19:34:21 Sending PUSH_REQUEST to server...
2013-10-15 19:34:21 OPTIONS:
0 [redirect-gateway] [def1] [bypass-dhcp]
1 [route] [10.8.0.1]
2 [topology] [net30]
3 [ping] [10]
4 [ping-restart] [120]
5 [ifconfig] [10.8.0.14] [10.8.0.13]

2013-10-15 19:34:21 LZO-ASYM init swap=0 asym=0
2013-10-15 19:34:21 EVENT: ASSIGN_IP
2013-10-15 19:34:21 Connected via tun
2013-10-15 19:34:21 EVENT: CONNECTED @94.193.78.219:1194 (94.193.78.219) via /UDPv4 on tun/10.8.0.14/
2013-10-15 19:37:22 OS Event: SLEEP
2013-10-15 19:37:22 EVENT: PAUSE
2013-10-15 19:37:53 OS Event: WAKEUP
2013-10-15 19:39:17 OS Event: SLEEP
2013-10-15 19:40:38 OS Event: WAKEUP

Sent from my iPhone

a log file from the iphone if anyone can offer any help

as you can see the OS Event; SLEEP then EVENT Pause

that looks to be when the phone goes to the lock screen after being idle for a few mins
then it seems to recieve an event OS ; WAKEUP..but it never seems to manage to reconnect it just sits there on pause (network unavaliable)

steve

I have exactly the same issue on my iPhone 4S using iOS 7. Would be much appreciated if there is a solution. I found that iPhone setting shows "VPN Connecting...". But VPN server does not receive any packet from iPhone. It looks that it is the openvpn client app issue.

steve

For iOS 7, I found "Reconnect on wakeup" works only in WIFI. On cellular network, iPhone does not reconnect on wakeup on iOS 7. Is it a bug?

anatoli

Hi!

I'm experiencing the same problems many users reported in this and other threads: https://forums.openvpn.net/topic14020.html, https://forums.openvpn.net/topic13871.html, https://forums.openvpn.net/topic14206.html (please note that some users report the same problems on Android as well).

Also, OpenVPN Connect iOS version 1.0.1 Release Notes (May 20, 2013; https://forums.openvpn.net/topic12930.html) has a statement "As device moves between WiFi and cellular networks, proactively reconnect", which looks like is not the case.

Here, just in case the development team doesn't yet have sufficient debugging data, I provide my configuration files and logs (server v2.3.2, client iPhone 4S iOS 7.0.2 with OVPNC v1.0.1).

#####################
### SERVER CONFIG ###
#####################

dev tun
mode server
topology subnet
push "topology subnet"
tun-mtu 1500
ifconfig 10.3.0.1 255.255.255.0
ifconfig-pool 10.3.0.100 10.3.0.254
push "route-gateway 10.3.0.1"
push "redirect-gateway def1 autolocal block-local bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"

# crypto options omitted

ping 5
push "ping 5"
push "ping-restart 15"

persist-tun
persist-key
push "persist-key"
push "explicit-exit-notify"

comp-lzo

verb 4
mute 10

###########################
### CLIENT CONFIG (iOS) ###
###########################

remote xxxxx (either IP or fqdn)
resolv-retry infinite
nobind
dev tun
tun-mtu 1500
allow-pull-fqdn
pull

# crypto options omitted

comp-lzo
verb 4
mute 10

The problems are:

1. The app does not reconnect when switching from WiFi to cellular network (immediately reports "OS Event: NET UNAVAILABLE (PAUSE)").

2013-11-17 06:13:56 SSL Handshake: TLSv1.0/SSL-EDH-RSA-AES-256-SHA
2013-11-17 06:13:56 Session is ACTIVE
2013-11-17 06:13:57 EVENT: GET_CONFIG
2013-11-17 06:13:57 Sending PUSH_REQUEST to server...
2013-11-17 06:13:57 OPTIONS:
0 [topology] [subnet] 
1 [route-gateway] [10.3.0.1] 
2 [redirect-gateway] [def1] [autolocal] [block-local] [bypass-dhcp] 
3 [dhcp-option] [DNS] [8.8.8.8] 
4 [ping] [5] 
5 [ping-restart] [15] 
6 [persist-key] 
7 [explicit-exit-notify] 
8 [ifconfig] [10.3.0.101] [255.255.255.0] 

2013-11-17 06:13:57 LZO-ASYM init swap=0 asym=0
2013-11-17 06:13:57 EVENT: ASSIGN_IP
2013-11-17 06:13:57 Connected via tun
2013-11-17 06:13:57 EVENT: CONNECTED @xx.xx.xx.xx:1194 (xx.xx.xx.xx) via /UDPv4 on tun/10.3.0.101/ <====== [THE LAST MESSAGE BEFORE SWITCHING TO CELLULAR NETWORK]

2013-11-17 06:14:48 OS Event: NET UNAVAILABLE (PAUSE): Reachability<reachable=1 connectionRequired=0 isWWAN=0>
2013-11-17 06:14:48 UDP send error: send: Can't assign requested address
2013-11-17 06:14:48 EVENT: PAUSE

[stops here]

2. When 3G cellular network is dropped (to EDGE or no data connection at all) and later reconnected, VPN is not reconnected (cycles with "EVENT: RECONNECTING" + "Transport Error: UDP connect error on ' xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable" + "EVENT: WAIT" log error).

2013-11-17 06:15:41 LZO-ASYM init swap=0 asym=0
2013-11-17 06:15:41 EVENT: ASSIGN_IP
2013-11-17 06:15:41 Connected via tun
2013-11-17 06:15:41 EVENT: CONNECTED @xx.xx.xx.xx:1194 (xx.xx.xx.xx) via /UDPv4 on tun/10.3.0.101/ <====== [THE LAST MESSAGE BEFORE 3G CELLULAR NETWORK IS DROPPED]

2013-11-17 06:17:11 OS Event: NET UNAVAILABLE (PAUSE): Reachability<reachable=1 connectionRequired=0 isWWAN=1>
2013-11-17 06:17:11 UDP send error: send: Can't assign requested address
2013-11-17 06:17:11 EVENT: PAUSE
2013-11-17 06:17:11 OS Event: NET AVAILABLE (RESUME): Reachability<reachable=1 connectionRequired=1 isWWAN=0>
2013-11-17 06:17:11 Client terminated, reconnecting in 3...
2013-11-17 06:17:14 EVENT: RESUME
2013-11-17 06:17:14 EVENT: RECONNECTING
2013-11-17 06:17:14 LZO-ASYM init swap=0 asym=0
2013-11-17 06:17:14 Contacting xx.xx.xx.xx:1194 via UDP
2013-11-17 06:17:14 EVENT: WAIT
2013-11-17 06:17:14 Transport Error: UDP connect error on 'xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable
2013-11-17 06:17:14 Client terminated, restarting in 2...
2013-11-17 06:17:16 EVENT: RECONNECTING
2013-11-17 06:17:16 LZO-ASYM init swap=0 asym=0
2013-11-17 06:17:16 EVENT: RESOLVE
2013-11-17 06:17:16 Contacting xx.xx.xx.xx:1194 via UDP
2013-11-17 06:17:16 EVENT: WAIT
2013-11-17 06:17:16 Transport Error: UDP connect error on 'xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable
2013-11-17 06:17:16 Client terminated, restarting in 2...
2013-11-17 06:17:18 EVENT: RECONNECTING
2013-11-17 06:17:18 LZO-ASYM init swap=0 asym=0
2013-11-17 06:17:18 EVENT: RESOLVE
2013-11-17 06:17:18 Contacting xx.xx.xx.xx:1194 via UDP
2013-11-17 06:17:18 EVENT: WAIT
2013-11-17 06:17:18 Transport Error: UDP connect error on 'xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable
2013-11-17 06:17:18 Client terminated, restarting in 2...

[cycles until VPN is switched off]

3. When the VPN channel is dropped on cellular network (for example, restarting the server), VPN is not reconnected (cycles with "EVENT: RECONNECTING" + "Transport Error: UDP connect error on ' xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable" + "EVENT: WAIT" log error).

2013-11-17 06:20:01 LZO-ASYM init swap=0 asym=0
2013-11-17 06:20:01 EVENT: ASSIGN_IP
2013-11-17 06:20:01 Connected via tun
2013-11-17 06:20:01 EVENT: CONNECTED @xx.xx.xx.xx:1194 (xx.xx.xx.xx) via /UDPv4 on tun/10.3.0.101/ <====== [THE LAST MESSAGE BEFORE VPN CHANNEL IS DROPPED]

2013-11-17 06:21:43 Session invalidated
2013-11-17 06:21:43 Client terminated, restarting in 2...
2013-11-17 06:21:45 EVENT: RECONNECTING
2013-11-17 06:21:45 LZO-ASYM init swap=0 asym=0
2013-11-17 06:21:45 Contacting xx.xx.xx.xx:1194 via UDP
2013-11-17 06:21:45 EVENT: WAIT
2013-11-17 06:21:45 Transport Error: UDP connect error on 'xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable
2013-11-17 06:21:45 Client terminated, restarting in 2...
2013-11-17 06:21:47 EVENT: RECONNECTING
2013-11-17 06:21:47 LZO-ASYM init swap=0 asym=0
2013-11-17 06:21:47 EVENT: RESOLVE
2013-11-17 06:21:47 Contacting xx.xx.xx.xx:1194 via UDP
2013-11-17 06:21:47 EVENT: WAIT
2013-11-17 06:21:47 Transport Error: UDP connect error on 'xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable
2013-11-17 06:21:47 Client terminated, restarting in 2...
2013-11-17 06:21:49 EVENT: RECONNECTING
2013-11-17 06:21:49 LZO-ASYM init swap=0 asym=0
2013-11-17 06:21:49 EVENT: RESOLVE
2013-11-17 06:21:49 Contacting xx.xx.xx.xx:1194 via UDP
2013-11-17 06:21:49 EVENT: WAIT
2013-11-17 06:21:49 Transport Error: UDP connect error on 'xx.xx.xx.xx:1194' (xx.xx.xx.xx:1194): Network is unreachable
2013-11-17 06:21:49 Client terminated, restarting in 2...

[cycles until VPN is switched off]

When one of the connection problems occurs and VPN is switched OFF and then immediately ON (manually), a new VPN connection is established without any problem.

Could OpenVPN Technologies representatives please confirm whether or not the development team has enough data to reproduce and trace the problems and whether or not they plan to fix them for the mid-December release?

And thanks for this great product.

oddstan

Hello,

I have same problem.
Server is installed on router:

OpenVPN 2.3.2 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Nov 11 2013

Client is installed on IOS 7, 1.0.1 build 88

The log when connected via 2g/3g internet and iphone goes on "hold":

2013-11-21 21:39:21 OS Event: SLEEP
2013-11-21 21:39:21 EVENT: PAUSE
2013-11-21 21:39:23 OS Event: WAKEUP
2013-11-21 21:39:28 OS Event: SLEEP
2013-11-21 21:40:44 OS Event: WAKEUP

Have anyone solved the problem? Or it is a bug of server/client?
Does anyone know whether TAP is planned to be implemented into the client on IOS?

maxsverdlove

bump... I'm also experiencing this problem.... is there any fix in the works?

I really hope so... it completely blocks data on cellular. I won't be able to use it this way...

If it just didn't connect, I'd be more ok, not as happy, but if it completely just blocks it until I manually start it.. it blocks notifications, it blocks my SMS, I might as well connect using L2TP (where I have to manually connect/disconnect anyway...)

jamesyonan

We've confirmed this is a bug affecting OpenVPN Connect only when run on iOS 7. iOS 7 made some subtle changes to the VPN routing system that has broken the way that OpenVPN detects cellular data network availability. We are working on a resolution.

James

maxsverdlove

Thank you for the update. Please let me know if there is anything I can do to help. 🙂

anatoli

James, thanks for your reply. Does the OVPN Team have an approximate date of the new release with this bug fixed?

jamesyonan

This issue should be fixed by iOS 7.1.

James

Berndinox

Too bad, that there will not be an "real" solution for this. Cause i think some of the User prefer to stay on 7.0 cause of Jailbreaking and some other reasons. So i think i have to look for another alternative vpn solution....

jdhatch

Can anyone verify if iOS 7.1 fixed this behaviour?

Thanks, Jason

jdhatch

jdhatch wroteCan anyone verify if iOS 7.1 fixed this behaviour?

Thanks, Jason

So far so good!
I cleared some pictures off my phone to free up memory and updated to iOS 7.1 last night.
It is now reestablishing a tunnel when it switches from Wifi to cellular.

Jason