Hello, I hope the administrators will be kind and help me with my issues. First of all to state my goal: To set up a persistent VPN between a remote office and the VPS server (CentOS) using OpenVPN access Server with little to no administrative oversight. The Issues: There are three... 1) After a while the Admin UI is unreachable until I perform a "service openvpn restart" 2) The router loses connection and tries to restart the connection. The server continues to provide connections until all the licenses run out (2 licenses) 3) Server refusing connection - read UDPv4 [ECONNREFUSED]: Connection refused (code=111) I have scoured the forums for an answer tried the various fixes but I continue to have the same issues. Can you please point me in the right direction or better yet tell me what I need to fix? I thank you in advance... :) Set-up: Server - VPS CentOS with Open VPN AS V1.8.5 configured in early Sept 2013 Client - OpenVPN router V2.2.0 mips-linux [SSL] [LZO2] built on May 27 2011 Configuration Files: Access Server (names were changed to protect the innocent!) [code]# OpenVPN AS 1.1 configuration file # # NOTE: The ~ symbol used below expands to the directory that # the configuration file is saved in # remove for production # DEBUG=false # enable AS Connect functionality AS_CONNECT=true # temporary directory tmp_dir=~/tmp lic.dir=~/licenses # run_start retries run_start_retry.give_up=60 run_start_retry.resample=10 # enable client gateway sa.show_c2s_routes=true # certificates database certs_db=sqlite:///~/db/certs.db # user properties DB user_prop_db=sqlite:///~/db/userprop.db # configuration DB config_db=sqlite:///~/db/config.db # log DB log_db=sqlite:///~/db/log.db # wait this many seconds between failed retries db_retry.interval=1 # how many retries to attempt before failing db_retry.n_attempts=6 # On startup, wait up to n seconds for DB files to become # available if they do not yet exist. This is generally # only useful on secondary nodes used for standby purposes. # db_startup_wait= # Node type: PRIMARY|SECONDARY. Defaults to PRIMARY. # node_type= # bootstrap authentication via PAM -- allows # admin to log into web UI before authentication # system has been configured. Configure PAM users # allowed to access via the bootstrap auth mechanism. boot_pam_service=openvpnas boot_pam_users.0=openvpn # boot_pam_users.1= # boot_pam_users.2= # boot_pam_users.3= # boot_pam_users.4= # System users that are allowed to access the server agent XML API. # The user that the web server will run as should be in this list. system_users_local.0=root system_users_local.1=openvpn_as # The user/group that the web server will run as cs.user=openvpn_as cs.group=openvpn_as # socket directory general.sock_dir=~/sock # path to linux openvpn executable # if undefined, find openvpn on the PATH #general.openvpn_exe_path= # source directory for OpenVPN Windows executable # (Must have been built with MultiFileExtract) sa.win_exe_dir=~/exe # The company name will be shown in the UI sa.company_name=Joe's Bar & Grill sa.logo_image_file=usr/local/openvpn_as/etc/JBandG.jpg # server agent socket sa.sock=~/sock/sagent # If enabled, automatically generate a client configuration # when a client logs into the site and successfully authenticates cs.auto_generate=true # files for web server (PEM format) cs.ca_bundle=~/web-ssl/ca.crt cs.priv_key=~/web-ssl/server.key cs.cert=~/web-ssl/server.crt # web server will use three consecutive ports starting at this # address, for use with the OpenVPN port share feature cs.dynamic_port_base=870 # which service groups should be started during # server agent initialization sa.initial_run_groups.0=web_group #sa.initial_run_groups.1=openvpn_group # use this twisted reactor sa.reactor=epoll # The unit number of this particular AS configuration. # Normally set to 0. If you have multiple, independent AS instances # running on the same machine, each should have a unique unit number. sa.unit=0 # If true, open up web ports on the firewall using iptables iptables.web=true vpn.server.user=openvpn_as vpn.server.group=openvpn_as [/code] Client: [code]# Automatically generated OpenVPN client config file # Generated on Sat Nov 9 08:48:30 2013 by MyVPNServer # Note: this config file contains inline private keys # and therefore should be kept confidential! # Note: this configuration is user-locked to the username below # OVPN_ACCESS_SERVER_USERNAME=user5 # Define the profile name of this particular configuration file # OVPN_ACCESS_SERVER_PROFILE=user5@/AUTOLOGIN # OVPN_ACCESS_SERVER_AUTOLOGIN=1 # OVPN_ACCESS_SERVER_CLI_PREF_ALLOW_WEB_IMPORT=True # OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_CONNECT=True # OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_XD_PROXY=True # OVPN_ACCESS_SERVER_WSHOST=:443 # OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_START # -----BEGIN CERTIFICATE----- # XXXX # -----END CERTIFICATE----- # OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_STOP # OVPN_ACCESS_SERVER_IS_OPENVPN_WEB_CA=1 # OVPN_ACCESS_SERVER_ORGANIZATION=Advanced Concept Consulting VPN setenv FORWARD_COMPATIBLE 1 client server-poll-timeout 4 nobind remote 1194 udp remote 1194 udp remote 443 tcp remote 1194 udp remote 1194 udp remote 1194 udp remote 1194 udp remote 1194 udp dev tun dev-type tun ns-cert-type server reneg-sec 604800 sndbuf 100000 rcvbuf 100000 # NOTE: LZO commands are pushed by the Access Server at connect time. # NOTE: The below line doesn't disable LZO. comp-lzo no verb 3 setenv PUSH_PEER_INFO keepalive 10 60 -----BEGIN CERTIFICATE----- XXXX -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- XXXX -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- XXXX -----END PRIVATE KEY----- key-direction 1 # # 2048 bit OpenVPN static key (Server Agent) # -----BEGIN OpenVPN Static key V1----- XXXX -----END OpenVPN Static key V1----- ## -----BEGIN RSA SIGNATURE----- ## DIGEST:sha256 ## XXXX ## -----END RSA SIGNATURE----- ## -----BEGIN CERTIFICATE----- ##XXXX ## -----END CERTIFICATE----- ## -----BEGIN CERTIFICATE----- ## XXXX ## -----END CERTIFICATE----- [/code] Server Log File: (please note I start the log file from the point I perform a "service openvpn restart"

Connection lost/Admin UI unreachable/Connection refused

jjbungles

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

jjbungles

 10:25:03 *** MyError.report ***
 10:25:03 Stack Traceback
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/svc/svc.py', 637, '_walk', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 210, 'stop', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 194, 'cb0', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/net/net.py', 36, 'cancel', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/util/simplefile.py', 11, 'write_string_to_file', None)
 10:25:03 [Errno 2] No such file or directory: '/proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_be_liberal': svc/svc:637,sagent/ipts:210,sagent/ipts:194,net/net:36,util/simplefile:11 (exceptions.IOError)
 10:25:03 *** MyError.report ***
 10:25:03 Stack Traceback
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/defer.py', 323, '_runCallbacks', 'self.result = callback(self.result, *args, **kw)')
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 90, 'cb2', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 46, 'process_cmd_result', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/sagent/sagent_entry.py', 11, 'run_server_agent', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/util/daemon.py', 28, 'twistd_with_reactor', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/util/daemon.py', 69, 'twistd', None)
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/application/app.py', 423, 'run', 'self.postApplication()')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/scripts/_twistd_unix.py', 202, 'postApplication', 'self.startReactor(None, self.oldstdout, self.oldstderr)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/application/app.py', 445, 'startReactor', 'self.config, oldstdout, oldstderr, self.profiler, reactor)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/application/app.py', 348, 'runReactorWithLogging', 'reactor.run()')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/base.py', 1166, 'run', 'self.mainLoop()')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/base.py', 1178, 'mainLoop', 'self.doIteration(t)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/epollreactor.py', 194, 'doPoll', 'log.callWithLogger(selectable, _drdw, selectable, fd, event)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/python/log.py', 85, 'callWithLogger', 'return callWithContext({"system": lp}, func, *args, **kw)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/python/log.py', 70, 'callWithContext', 'return context.call({ILogContext: newCtx}, func, *args, **kw)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/python/context.py', 59, 'callWithContext', 'return self.currentContext().callWithContext(ctx, func, *args, **kw)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/python/context.py', 37, 'callWithContext', 'return func(*args,**kw)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/epollreactor.py', 223, '_doReadOrWrite', 'self._disconnectSelectable(selectable, why, inRead)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/posixbase.py', 191, '_disconnectSelectable', 'selectable.connectionLost(f)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/process.py', 260, 'connectionLost', 'self.proc.childConnectionLost(self.name, reason)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/process.py', 762, 'childConnectionLost', 'self.maybeCallProcessEnded()')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/process.py', 773, 'maybeCallProcessEnded', 'self.reapProcess()')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/process.py', 306, 'reapProcess', 'self.processEnded(status)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/_baseprocess.py', 48, 'processEnded', 'self.maybeCallProcessEnded()')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/process.py', 775, 'maybeCallProcessEnded', '_BaseProcess.maybeCallProcessEnded(self)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/_baseprocess.py', 60, 'maybeCallProcessEnded', 'proto.processEnded(Failure(reason))')
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/svc/pp.py', 117, 'processEnded', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/svc/svcnotify.py', 32, 'notify_change_state', None)
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/defer.py', 238, 'callback', 'self._startRunCallbacks(result)')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/defer.py', 307, '_startRunCallbacks', 'self._runCallbacks()')
 10:25:03 ('/usr/local/openvpn_as/lib/python2.6/site-packages/Twisted-9.0.0-py2.6-linux-x86_64.egg/twisted/internet/defer.py', 323, '_runCallbacks', 'self.result = callback(self.result, *args, **kw)')
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 90, 'cb2', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/sagent/ipts.py', 46, 'process_cmd_result', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/util/error.py', 61, '__init__', None)
 10:25:03 ('build/bdist.linux-x86_64/egg/pyovpn/util/error.py', 44, '__init__', None)
 10:25:03 Service deferred error: IPTablesServiceBase: failed to run iptables-save [status=1]: []: internet/defer:323,sagent/ipts:90,sagent/ipts:46,sagent/sagent_entry:11,util/daemon:28,util/daemon:69,application/app:423,scripts/_twistd_unix:202,application/app:445,application/app:348,internet/base:1166,internet/base:1178,internet/epollreactor:194,python/log:85,python/log:70,python/context:59,python/context:37,internet/epollreactor:223,internet/posixbase:191,internet/process:260,internet/process:762,internet/process:773,internet/process:306,internet/_baseprocess:48,internet/process:775,internet/_baseprocess:60,svc/pp:117,svc/svcnotify:32,internet/defer:238,internet/defer:307,internet/defer:323,sagent/ipts:90,sagent/ipts:46,util/error:61,util/error:44
 10:25:03 Server Agent shutting down, stop status: {'errors': {'iptables_openvpn': [('error', "[Errno 2] No such file or directory: '/proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_be_liberal': svc/svc:637,sagent/ipts:210,sagent/ipts:194,net/net:36,util/simplefile:11 (exceptions.IOError)")], 'iptables_web': [('error', 'Service deferred error: IPTablesServiceBase: failed to run iptables-save [status=1]: []: internet/defer:323,sagent/ipts:90,sagent/ipts:46,sagent/sagent_entry:11,util/daemon:28,util/daemon:69,application/app:423,scripts/_twistd_unix:202,application/app:445,application/app:348,internet/base:1166,internet/base:1178,internet/epollreactor:194,python/log:85,python/log:70,python/context:59,python/context:37,internet/epollreactor:223,internet/posixbase:191,internet/process:260,internet/process:762,internet/process:773,internet/process:306,internet/_baseprocess:48,internet/process:775,internet/_baseprocess:60,svc/pp:117,svc/svcnotify:32,internet/defer:238,internet/defer:307,internet/defer:323,sagent/ipts:90,sagent/ipts:46,util/error:61,util/error:44')]}, 'service_status': {'bridge': 'off', 'openvpn_4': 'off', 'openvpn_5': 'off', 'openvpn_6': 'off', 'api': 'off', 'openvpn_0': 'off', 'openvpn_1': 'off', 'openvpn_2': 'off', 'openvpn_3': 'off', 'openvpn_8': 'off', 'openvpn_9': 'off', 'web': 'off', 'log': 'off', 'iptables_web': 'on', 'iptables_openvpn': 'on', 'iptables_live': 'off', 'db_push': 'off', 'auth': 'off', 'client_query': 'off', 'user': 'off', 'license': 'off', 'openvpn_14': 'off', 'openvpn_15': 'off', 'openvpn_12': 'off', 'openvpn_13': 'off', 'openvpn_10': 'off', 'openvpn_11': 'off', 'openvpn_7': 'off', 'crl': 'off'}, 'active_profile': 'Default'}
 10:25:03 (Port None Closed)
 10:25:03 (Port None Closed)
 10:25:04 (Port None Closed)
 10:25:04 Received SIGTERM, shutting down.
 10:25:04 Main loop terminated.
 10:25:04 Server Shut Down.
 10:26:06 Log opened.
 10:26:06 twistd 9.0.0 (/usr/local/openvpn_as/bin/python 2.6.6) starting up.
 10:26:06 reactor class: twisted.internet.epollreactor.EPollReactor.
 10:26:06 rmdir /usr/local/openvpn_as/etc/db_push
 10:26:08 ACCESS SERVER starting, version=1.8.5
 10:26:08 Max open files set to (4096, 4096)
 10:26:08 /etc/resolv.conf changed, reparsing
 10:26:08 Resolver added ('8.8.8.8', 53) to server list
 10:26:08 Resolver added ('8.8.4.4', 53) to server list
 10:26:11 PortPool: port 953: [Errno 98] Address already in use: util/sock:190,<string>:1 (socket.error)
 10:26:12 twisted.web.server.Site starting on "u'/usr/local/openvpn_as/etc/sock/sagent'"
 10:26:12 twisted.web.server.Site starting on "u'/usr/local/openvpn_as/etc/sock/sagent.localroot'"
 10:26:12 twisted.web.server.Site starting on "u'/usr/local/openvpn_as/etc/sock/sagent.api'"
 10:26:13 OpenVPNDataDir: using shared dir: '/dev/shm/openvpn_as/pso'
 10:26:15 WEB OUT: 'WSERV admin <server-ip-addr> 943'
 10:26:15 WEB OUT: 'WSERV client+xmlrpc <server-ip-addr> 443'
 10:26:15 WEB OUT: 'WSERV admin+client 127.0.0.1 904'
 10:26:15 WEB OUT: 'WSERV admin 127.0.0.1 905'
 10:26:15 WEB OUT: 'WSERV client 127.0.0.1 906'
 10:26:15 WEB OUT: 'WSERV xmlrpc 127.0.0.1 907'
 10:26:15 WEB OUT: 'WSERV admin+client+xmlrpc 127.0.0.1 908'
 10:26:15 WEB OUT: 'WSERV client+xmlrpc 127.0.0.1 909'
 10:26:15 WEB OUT: ' 10:26:15 Log opened.'
 10:26:15 WEB OUT: ' 10:26:15 twistd 9.0.0 (/usr/local/openvpn_as/bin/python 2.6.6) starting up.'
 10:26:15 WEB OUT: ' 10:26:15 reactor class: twisted.internet.epollreactor.EPollReactor.'
 10:26:15 WEB OUT: ' 10:26:15 pyovpn.web.webbase.MySiteBase starting on 943'
 10:26:15 WEB OUT: ' 10:26:15 pyovpn.web.webbase.MySiteBase starting on 443'
 10:26:15 WEB OUT: ' 10:26:15 pyovpn.web.webbase.MySiteBase starting on 904'
 10:26:15 WEB OUT: ' 10:26:15 pyovpn.web.webbase.MySiteBase starting on 905'
 10:26:15 WEB OUT: ' 10:26:15 pyovpn.web.webbase.MySiteBase starting on 906'
 10:26:15 WEB OUT: ' 10:26:15 twisted.web.server.Site starting on 907'
 10:26:15 WEB OUT: ' 10:26:15 pyovpn.web.webbase.MySiteBase starting on 908'
 10:26:15 WEB OUT: ' 10:26:15 pyovpn.web.webbase.MySiteBase starting on 909'
 10:26:15 WEB OUT: ' 10:26:15 set uid/gid 507/508'
 10:26:15 WEB OUT: ' 10:26:15 Web server running as UID 507'
 10:26:17 OpenVPNDataDir: using shared dir: '/dev/shm/openvpn_as/memstats'
 10:26:17 License Info {'concurrent_connections': 2}
 10:26:17 <class 'pyovpn.omi.omiauth.OMIServerAuthFactory'> starting on "u'/usr/local/openvpn_as/etc/sock/omisock-xIkJWcuTbPv8'"
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 OpenVPN 2.1.23 x86_64-unknown-linux-gnu [SSL] [LZO2] [SNAPPY] [EPOLL] built on May  2 2013'
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 MANAGEMENT: client_uid=0'
 10:26:17 (Port None Closed)
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 MANAGEMENT: Connected to management server at /usr/local/openvpn_as/etc/sock/omisock-xIkJWcuTbPv8'
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 MANAGEMENT: CMD 'state on'"
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 MANAGEMENT: CMD 'echo on'"
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 MANAGEMENT: CMD 'bytecount 300'"
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 MANAGEMENT: CMD 'env-filter 1'"
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 MANAGEMENT: CMD 'hold off'"
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 MANAGEMENT: CMD 'hold release'"
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables"
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 NOTE: --fast-io is disabled since we are not using UDP'
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 Initializing OpenSSL auto engine support'
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 Diffie-Hellman initialized with 1024 bit key'
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 Control Channel Authentication: tls-auth using INLINE static key file'
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication"
 10:26:17 OVPN 0 OUT: "Tue Nov 12 10:26:17 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication"
 10:26:17 OVPN 0 OUT: 'Tue Nov 12 10:26:17 2013 Socket Buffers: R=[87380->200000] S=[16384->200000]'
 10:26:18 OVPN 0 OUT: 'Tue Nov 12 10:26:18 2013 TUN/TAP device as0t0 opened'
 10:26:18 OVPN 1 OUT: 'Tue Nov 12 10:26:18 2013 TUN/TAP device as0t1 opened'
 10:26:18 OVPN 2 OUT: 'Tue Nov 12 10:26:18 2013 TUN/TAP device as0t2 opened'
 10:26:18 OVPN 3 OUT: 'Tue Nov 12 10:26:18 2013 TUN/TAP device as0t3 opened'
 10:26:18 OVPN 4 OUT: 'Tue Nov 12 10:26:18 2013 TUN/TAP device as0t4 opened'
 10:26:18 OVPN 5 OUT: 'Tue Nov 12 10:26:18 2013 TUN/TAP device as0t5 opened'
 10:26:19 OVPN 6 OUT: 'Tue Nov 12 10:26:19 2013 TUN/TAP device as0t6 opened'
 10:26:19 OVPN 7 OUT: 'Tue Nov 12 10:26:19 2013 TUN/TAP device as0t7 opened'
 10:26:19 OVPN 8 OUT: 'Tue Nov 12 10:26:19 2013 TUN/TAP device as0t8 opened'
 10:26:19 OVPN 9 OUT: 'Tue Nov 12 10:26:19 2013 TUN/TAP device as0t9 opened'
 10:26:20 OVPN 10 OUT: 'Tue Nov 12 10:26:20 2013 TUN/TAP device as0t10 opened'
 10:26:20 OVPN 11 OUT: 'Tue Nov 12 10:26:20 2013 TUN/TAP device as0t11 opened'
 10:26:20 OVPN 12 OUT: 'Tue Nov 12 10:26:20 2013 TUN/TAP device as0t12 opened'
 10:26:20 OVPN 13 OUT: 'Tue Nov 12 10:26:20 2013 TUN/TAP device as0t13 opened'
 10:26:21 OVPN 14 OUT: 'Tue Nov 12 10:26:21 2013 TUN/TAP device as0t14 opened'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 TUN/TAP device as0t15 opened'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 TUN/TAP TX queue length set to 200'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 MANAGEMENT: >STATE:1384251981,ASSIGN_IP,,10.0.3.241,'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 /sbin/ifconfig as0t15 10.0.3.241 netmask 255.255.255.240 mtu 1500 broadcast 10.0.3.255'
 10:26:21 [OMIClientAuth,0,] Server Agent initialization status: {'errors': {'openvpn_4': [('info', u'process started successfully on 10.0.3.65')], 'openvpn_5': [('info', u'process started successfully on 10.0.3.81')], 'openvpn_6': [('info', u'process started successfully on 10.0.3.97')], 'openvpn_7': [('info', u'process started successfully on 10.0.3.113')], 'openvpn_0': [('info', u'process started successfully on 10.0.3.1')], 'openvpn_1': [('info', u'process started successfully on 10.0.3.17')], 'openvpn_2': [('info', u'process started successfully on 10.0.3.33')], 'openvpn_3': [('info', u'process started successfully on 10.0.3.49')], 'openvpn_8': [('info', u'process started successfully on 10.0.3.129')], 'openvpn_9': [('info', u'process started successfully on 10.0.3.145')], 'openvpn_14': [('info', u'process started successfully on 10.0.3.225')], 'openvpn_15': [('info', u'process started successfully on 10.0.3.241')], 'openvpn_12': [('info', u'process started successfully on 10.0.3.193')], 'openvpn_13': [('info', u'process started successfully on 10.0.3.209')], 'openvpn_10': [('info', u'process started successfully on 10.0.3.161')], 'openvpn_11': [('info', u'process started successfully on 10.0.3.177')]}, 'service_status': {'bridge': 'started', 'openvpn_4': 'started', 'openvpn_5': 'started', 'openvpn_6': 'started', 'api': 'started', 'openvpn_0': 'started', 'openvpn_1': 'started', 'openvpn_2': 'started', 'openvpn_3': 'started', 'openvpn_8': 'started', 'openvpn_9': 'started', 'web': 'started', 'log': 'started', 'iptables_web': 'started', 'iptables_openvpn': 'started', 'iptables_live': 'started', 'db_push': 'started', 'auth': 'started', 'client_query': 'started', 'user': 'started', 'license': 'started', 'openvpn_14': 'started', 'openvpn_15': 'started', 'openvpn_12': 'started', 'openvpn_13': 'started', 'openvpn_10': 'started', 'openvpn_11': 'started', 'openvpn_7': 'started', 'crl': 'started'}}
 10:26:21 [OMIClientAuth,0,] Server Agent started
 10:26:21 OVPN 15 OUT: "Tue Nov 12 10:26:21 2013 chroot to '/dev/shm/openvpn_as' and cd to '/' succeeded"
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 GID set to openvpn_as'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 UID set to openvpn_as'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 memstats data will be written to /memstats/memstat-jLU61gxmqbPB.dat'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 UDPv4 link local (bound): <server-ip-addr>:929'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 UDPv4 link remote: [undef]'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 MULTI: multi_init called, r=4096 v=4096'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 Initialization Sequence Completed'
 10:26:21 OVPN 15 OUT: 'Tue Nov 12 10:26:21 2013 MANAGEMENT: >STATE:1384251981,CONNECTED,SUCCESS,10.0.3.241,'
 10:26:21 OVPN 10 OUT: 'Tue Nov 12 10:26:21 2013 <client-ip-addr>:53589 VERIFY OK: depth=1, /CN=OpenVPN CA'
 10:26:21 OVPN 10 OUT: 'Tue Nov 12 10:26:21 2013 <client-ip-addr>:53589 VERIFY OK: nsCertType=CLIENT'
 10:26:21 OVPN 10 OUT: 'Tue Nov 12 10:26:21 2013 <client-ip-addr>:53589 VERIFY OK: depth=0, /CN=user5_AUTOLOGIN'
 10:26:22 AUTH SUCCESS {'status': 0, 'reason': 'AuthTrue: autologin certificate auth succeeded', 'serial_list': [], 'user': u'user5', 'proplist': {u'prop_autologin': u'true', u'type': u'user_connect', u'prop_autogenerate': u'true'}, 'common_name': u'user5_AUTOLOGIN', 'serial': u'3'} cli=''/''
 10:26:22 OVPN 10 OUT: "Tue Nov 12 10:26:22 2013 MANAGEMENT: CMD 'client-auth 0 0'"
 10:26:22 OVPN 10 OUT: 'Tue Nov 12 10:26:22 2013 <client-ip-addr>:53589 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA'
 10:26:22 OVPN 10 OUT: 'Tue Nov 12 10:26:22 2013 <client-ip-addr>:53589 [user5_AUTOLOGIN] Peer Connection Initiated with <client-ip-addr>:53589'
 10:26:22 OVPN 10 OUT: 'Tue Nov 12 10:26:22 2013 user5_AUTOLOGIN/<client-ip-addr>:53589 OPTIONS IMPORT: compression parms modified'
 10:26:22 OVPN 10 OUT: 'Tue Nov 12 10:26:22 2013 user5_AUTOLOGIN/<client-ip-addr>:53589 MULTI: Learn: 10.0.3.162 -> user5_AUTOLOGIN/<client-ip-addr>:53589'
 10:26:22 OVPN 10 OUT: 'Tue Nov 12 10:26:22 2013 user5_AUTOLOGIN/<client-ip-addr>:53589 MULTI: primary virtual IP for user5_AUTOLOGIN/<client-ip-addr>:53589: 10.0.3.162'
 10:26:22 License Info {'concurrent_connections': 2}
 10:26:24 OVPN 10 OUT: "Tue Nov 12 10:26:24 2013 user5_AUTOLOGIN/<client-ip-addr>:53589 SENT CONTROL [user5_AUTOLOGIN]: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,explicit-exit-notify 3,ping 12,ping-restart 50,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,route-gateway 10.0.3.161,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,register-dns,comp-lzo no,ifconfig 10.0.3.162 255.255.255.240' (status=1)"
 10:28:37 WEB OUT: ' 10:28:37 [UDSProxyQueryProtocol,client] Logout of portal <twisted.cred.portal.Portal instance at 0x7124518>'
 10:28:37 [HTTPChannel,9,] License Info {'concurrent_connections': 2}
 10:28:51 [HTTPChannel,18,] License Info {'concurrent_connections': 2}
 10:28:56 [HTTPChannel,28,] License Info {'concurrent_connections': 2}
 10:30:55 OVPN 11 OUT: 'Tue Nov 12 10:30:55 2013 <client-ip-addr>:40533 TLS: Initial packet from <client-ip-addr>:40533, sid=fb1ba789 40520667'
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 <client-ip-addr>:40533 VERIFY OK: depth=1, /CN=OpenVPN CA'
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 <client-ip-addr>:40533 VERIFY OK: nsCertType=CLIENT'
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 <client-ip-addr>:40533 VERIFY OK: depth=0, /CN=user5_AUTOLOGIN'
 10:30:56 AUTH SUCCESS {'status': 0, 'reason': 'AuthTrue: autologin certificate auth succeeded', 'serial_list': [], 'user': u'user5', 'proplist': {u'prop_autologin': u'true', u'type': u'user_connect', u'prop_autogenerate': u'true'}, 'common_name': u'user5_AUTOLOGIN', 'serial': u'3'} cli=''/''
 10:30:56 OVPN 11 OUT: "Tue Nov 12 10:30:56 2013 MANAGEMENT: CMD 'client-auth 0 0'"
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 <client-ip-addr>:40533 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA'
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 <client-ip-addr>:40533 [user5_AUTOLOGIN] Peer Connection Initiated with <client-ip-addr>:40533'
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 user5_AUTOLOGIN/<client-ip-addr>:40533 OPTIONS IMPORT: compression parms modified'
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 user5_AUTOLOGIN/<client-ip-addr>:40533 MULTI: Learn: 10.0.3.178 -> user5_AUTOLOGIN/<client-ip-addr>:40533'
 10:30:56 OVPN 11 OUT: 'Tue Nov 12 10:30:56 2013 user5_AUTOLOGIN/<client-ip-addr>:40533 MULTI: primary virtual IP for user5_AUTOLOGIN/<client-ip-addr>:40533: 10.0.3.178'
 10:30:58 OVPN 11 OUT: "Tue Nov 12 10:30:58 2013 user5_AUTOLOGIN/<client-ip-addr>:40533 SENT CONTROL [user5_AUTOLOGIN]: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,explicit-exit-notify 3,ping 12,ping-restart 50,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,route-gateway 10.0.3.177,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,register-dns,comp-lzo no,ifconfig 10.0.3.178 255.255.255.240' (status=1)"
 10:30:59 OVPN 10 OUT: 'Tue Nov 12 10:30:59 2013 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)'
 10:31:49 OVPN 10 OUT: 'Tue Nov 12 10:31:49 2013 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)'
 10:31:50 [HTTPChannel,35,] License Info {'concurrent_connections': 2}
 10:32:01 OVPN 10 OUT: 'Tue Nov 12 10:32:01 2013 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)'
 10:32:02 OVPN 10 OUT: 'Tue Nov 12 10:32:02 2013 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)'
 10:32:11 OVPN 10 OUT: 'Tue Nov 12 10:32:11 2013 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)'
 10:32:14 OVPN 10 OUT: 'Tue Nov 12 10:32:14 2013 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)'
 10:32:19 [HTTPChannel,42,] License Info {'concurrent_connections': 2}
 10:32:26 OVPN 10 OUT: 'Tue Nov 12 10:32:26 2013 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)'
 10:32:32 OVPN 10 OUT: 'Tue Nov 12 10:32:32 2013 user5_AUTOLOGIN/<client-ip-addr>:53589 [user5_AUTOLOGIN] Inactivity timeout (--ping-restart), restarting'
 10:32:32 OVPN 10 OUT: 'Tue Nov 12 10:32:32 2013 user5_AUTOLOGIN/<client-ip-addr>:53589 SIGUSR1[soft,ping-restart] received, client-instance restarting'
 10:32:49 [HTTPChannel,50,] License Info {'concurrent_connections': 2}
 10:32:49 OVPN 12 OUT: "Tue Nov 12 10:32:49 2013 MANAGEMENT: CMD 'status 3'"
 10:32:49 OVPN 14 OUT: "Tue Nov 12 10:32:49 2013 MANAGEMENT: CMD 'status 3'"
 10:32:49 OVPN 15 OUT: "Tue Nov 12 10:32:49 2013 MANAGEMENT: CMD 'status 3'"

jjbungles

I hate to Bump this tread but...

Can the administrators please tell me why my question is not answered and other questions on a later date were answered?

Have I done something wrong?

Have I ask the wrong question?

Is my format wrong?

Is my question valid?

Do I need to contact some other organisation?

Why am I being ignored?

If this question has already been answered then I honestly havent been able to find it.

Can't I get a reply that says why I am being ignored? I am absolutely scared to PM anyone, I just need some guidance.

JJ

jjbungles

Debbie,

Thank you for replying. Originally I loaded the open source OpenVPN then I switched to OpenVPN AS because the performance improvement is just what I need.

Are you saying that the open source version is lurking/interfering with OpenVPN AS? I thought my config files were all OpenVPN AS versions?

Is there something in the log report that says the open source version is running? It is probably obvious for you, but I can't see it. Hence the reason for requiring your kind assistance.

Can you please help me with a) identifying I have an incompatibility issue and b) how/where to look for the open source software running on either client or server and how to remove because I thought I used the correct Linux and windows uninstall commands to remove the open source version.

I have purchased 10 licenses on the 17 of Nov, more than happy to pay for a fast, stable VPN under my control.

I currently have fast, I am trying to get to the stable step. That's where your help pointing me in the right direction will help. The post you referred to did not say that there are incompatibility issues between open source and OpenVPN AS and how to fix. That's what I need help on.

Thanking you in advance,

JJ

jjbungles

Debbie,

Reference my first post there is an error because I was doing it from memory;

The command I enter to restart the Access server is

service openvpnas restart

jjbungles

Debbie10t,

Apologies but I thought we were onto something as to why I am having the issues with the server side of the OpenVPN AS install.

I thought you could see from the log that I am having conflicts with the old OpenVPN open source install and OpenVPN AS which is why after a few minutes from a restart everyone is unable to access the admin or client GUI.

Once this lock out occurs I use PuTTY and check the processes using ps -e and it shows some of the Openvpn AS processes as <defunct>.

The issue I am having is I can't interpret from the log file what is happening to OpenVPN AS server to make both ports 443 and 943 inaccesible. Can you?

Once I restart I can Access these ports to get to the GUIs via web browser (client and admin) for 15-20 minutes.

Maybe if we focus on this all other issues will disappear.

JJ

jjbungles

Debbie10t,

Is there a more detailed manual than the admin guide for OpenVPN AS so that I can Learn how to interpret the log files? If your too busy and no one else is helping I need to read the manual for OpenVPN AS so I can interpret the log files on my own..

Can you please provide the link to the full blown user manual?

Thanks,

JJ

jjbungles

Hello All,

I think I fixed my problem. If I do not reply on this thread then the answer below is indeed the fix!

If you look at my first few posts on this thread, my OpenVPN AS server after 20-30 minutes would deny access to the ADMIN UI
and USER UI. My connection would be dropped in minutes to hours, many reconnections are logged in the OpenVPN AS Admin UI.

When you TTY into the OpenVPN AS server and perform a ps -e linux command there are lots of openvpn processes that say <defunct>.

These are all tell tale signs that your server is LOW ON MEMORY. My OpenVPN AS is running on a CentOS 5.6 x64 machine with 1GHz CPU with 256MB RAM.
(I know, I know!) with no SWAP running.

The fix was to start a SWAP partition and it worked. Web accesses have been checked over the last 11 hours (an absolute record for my server) and each time shows the log-in page.

Only one connection has been logged - no multiple reconnects from the same node. This has been performing the best so far.

What I need to see is if the speed takes a hit or there is more delay in the VPN connection due to thrashing. However I am hoping to learn more about how I can keep the majority of my
RAM for OpenVPN AS and push other processes that require memory onto the SWAP so that my throughput speed stays as closes to my broadband speed. Suggestions anyone?

@Debbie10t thanks for your help - your were the vendor whom I purchased the licenses from (Open VPN technologies) which is why I was using this forum to help me solve this problem.

I hope this helps those who are trying to solve a similar problem..

JJ