RomanB1005
Hello
I ´m quite new in VPN problematic , but i will try to explain my issue.
I did setup VPN server on centos 6.4 an setup 2 test users , local authentification and so on ..
VPN server is behind firewall , ports are allowed , and forwarded into my LAN ..
Every thing works fine RDP/SSH so on , but whe i try to copy something bigger then 1mb VPN client falls ..
I did try customize my MTU size ,
i used these parameters :
fragment
mssfix
But if i put those parameters to "Server Config Directives" and "client Config Directives" under "advance vpn" settings in web GUI nothing happened ..
if i put there "link-mtu" parameter client did not connetc to server due authentification error
log bellow ..
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 DEPRECATED OPTION: --no-name-remapping, please update your configuration'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 OpenVPN 2.3_AS7 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [SNAPPY] [EPOLL] [MH] [IPv6] built on Nov 1 2013'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 MANAGEMENT: client_uid=0'
2013-12-05 14:30:14+0100 [-] (Port None Closed)
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 MANAGEMENT: Connected to management server at /usr/local/openvpn_as/etc/sock/omisock-OK4PH339UeN0'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 MANAGEMENT: CMD 'state on'"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 MANAGEMENT: CMD 'echo on'"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 MANAGEMENT: CMD 'bytecount 300'"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 MANAGEMENT: CMD 'env-filter 1'"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 MANAGEMENT: CMD 'hold off'"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 MANAGEMENT: CMD 'hold release'"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 Initializing OpenSSL auto engine support'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 Diffie-Hellman initialized with 1024 bit key'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 Control Channel Authentication: tls-auth using INLINE static key file'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 14:30:14 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1158)'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 Socket Buffers: R=[229376->200000] S=[229376->200000]'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 TUN/TAP device as0t0 opened'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 TUN/TAP TX queue length set to 200'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 MANAGEMENT: >STATE:1386250214,ASSIGN_IP,,172.27.224.1,'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 14:30:14 2013 /sbin/ifconfig as0t0 172.27.224.1 netmask 255.255.240.0 mtu 1158 broadcast 172.27.239.255'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: "Thu Dec 5 13:30:14 2013 chroot to '/dev/shm/openvpn_as' and cd to '/' succeeded"
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 GID set to openvpn_as'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 UID set to openvpn_as'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 memstats data will be written to /memstats/memstat-OTo3W9gWFKf1.dat'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 UDPv4 link local (bound): [AF_INET]10.0.0.254:1199'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 UDPv4 link remote: [undef]'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 MULTI: multi_init called, r=4096 v=4096'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 Initialization Sequence Completed'
2013-12-05 14:30:14+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:14 2013 MANAGEMENT: >STATE:1386250214,CONNECTED,SUCCESS,172.27.224.1,'
2013-12-05 14:30:59+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:59 2013 87.197.103.213:34765 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1154)'
2013-12-05 14:30:59+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:30:59 2013 87.197.103.213:34765 TLS: Initial packet from [AF_INET]87.197.103.213:34765, sid=d4ad393e f43ab314'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 VERIFY OK: depth=1, /CN=OpenVPN CA'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 VERIFY OK: nsCertType=CLIENT'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 VERIFY OK: depth=0, /CN=openvpn'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 peer info: IV_VER=2.3_AS6'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 peer info: IV_PLAT=win'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 peer info: IV_LZO=1'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 peer info: IV_COMP_STUB=1'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 peer info: IV_HWADDR=00:1e:4c:88:e8:9d'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 peer info: UV_ASCLI_VER=2.0.0.400'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 peer info: UV_PLAT_REL=7'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: "Thu Dec 5 13:31:00 2013 87.197.103.213:34765 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1200', remote='link-mtu 1542'"
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: "Thu Dec 5 13:31:00 2013 87.197.103.213:34765 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1154', remote='tun-mtu 1500'"
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: "Thu Dec 5 13:31:00 2013 87.197.103.213:34765 WARNING: 'mtu-dynamic' is present in local config but missing in remote config, local='mtu-dynamic'"
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 Option inconsistency warnings triggering disconnect due to --opt-verify'
2013-12-05 14:31:00+0100 [-] AUTH SUCCESS {'status': 0, 'session_id': '[redacted]', 'reason': 'SESSION_ID auth succeeded', 'serial_list': [], 'user': 'openvpn', 'proplist': {u'pvt_google_auth_secret_locked': u'false', u'prop_autogenerate': u'true', 'prop_deny': 'false', u'pvt_google_auth_secret': u'QFTVKLDJT4OI4KMA', u'type': u'user_compile', u'prop_superuser': u'true'}, 'common_name': u'openvpn', 'serial': u'2'} cli=u'win'/u'2.3_AS6'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: "Thu Dec 5 13:31:00 2013 MANAGEMENT: CMD 'client-auth 0 0'"
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA'
2013-12-05 14:31:00+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:00 2013 87.197.103.213:34765 [openvpn] Peer Connection Initiated with [AF_INET]87.197.103.213:34765'
2013-12-05 14:31:02+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:02 2013 87.197.103.213:34765 Delayed exit in 5 seconds'
2013-12-05 14:31:02+0100 [-] OVPN 0 OUT: "Thu Dec 5 13:31:02 2013 87.197.103.213:34765 SENT CONTROL [openvpn]: 'AUTH_FAILED' (status=1)"
2013-12-05 14:31:07+0100 [-] OVPN 0 OUT: 'Thu Dec 5 13:31:07 2013 87.197.103.213:34765 SIGTERM[soft,delayed-exit] received, client-instance exiting'
Please cas somebody help me .. ?
Thanks in Advance. .
ROman
