Hello Guys,
im using Openvpn on an Linux Box running Rhel6. My version is 2.3.2.
Im using Securepoint OpenVPN ver 1.0 as Client Software on my Laptop (WinXP SP3).
I route the whole traffic through the tunnel when i'm at the university.
But sometimes the coinnections drops after a random amount of time.
I've tried to adjust the keepalive settings on server/client but improvement.
Sometimes the connection runs stable for about one hour, then only for many minutes.
My server config:
port 1194
proto udp
dev tun0
mssfix
fragment 1300
persist-tun
client-to-client
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh1024.pem
server 172.16.0.0 255.255.255.0
crl-verify keys/crl.pem
user root
group root
status servers/gate/logs/openvpn-status.log
log-append servers/gate/logs/openvpn.log
verb 4
mute 20
max-clients 10
tls-auth keys/ta.key 0
tun-mtu 1500
keepalive 10 120
client-config-dir /etc/openvpn/servers/gate/ccd
comp-lzo
persist-key
persist-tun
client-to-client
ccd-exclusive
cipher AES-256-CBC
push "redirect-gateway def1"
push "ip-win32 dynamic"
push "explicit-exit-notify 3"
push "dhcp-option NTP 192.53.103.108"
push "dhcp-option DNS 172.16.0.1"
push "dhcp-option WINS 172.16.0.1"
My client config:
client
proto udp
dev tun
ca ca.crt
dh dh1024.pem
cert red-box.crt
key red-box.key
remote FQHN 1194
cipher AES-256-CBC
user nobody
group nobody
verb 3
mute 20
tun-mtu 1500
keepalive 10 120
comp-lzo
persist-key
persist-tun
resolv-retry infinite
nobind
float
tls-auth ta.key 1
mssfix
fragment 1300
persist-tun
Server log before lost connection:
variation(s) on previous 20 message(s) suppressed by --mute
[red-box] Inactivity timeout (--ping-restart), restarting
SIGUSR1[soft,ping-restart] received, client-instance restarting
Client log before lost connection:
[server] Inactivity timeout (--ping-restart), restarting
TCP/UDP: Closing socket
SIGUSR1[soft,ping-restart] received, process restarting
Restart pause, 2 second(s)
WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Re-using SSL/TLS context
LZO compression initialized
Control Channel MTU parms [ L:1562 D:166 EF:66 EB:0 ET:0 EL:0 ]
Socket Buffers: R=[8192->8192] S=[8192->8192]
Data Channel MTU parms [ L:1562 D:1300 EF:62 EB:135 ET:0 EL:0 AF:3/1 ]
Fragmentation MTU parms [ L:1562 D:1300 EF:61 EB:135 ET:1 EL:0 AF:3/1 ]
Local Options hash (VER=V4): 'e05aa1c5'
Expected Remote Options hash (VER=V4): '0088baee'
UDPv4 link local: [undef]
UDPv4 link remote: IP_ADDR:1194
ERROR: TLS error! See log for details
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
TCP/UDP: Closing socket
SIGUSR1[soft,tls-error] received, process restarting
Restart pause, 2 second(s)
DisconnectedTimeout[Maybe your cetificates are not valid. Please check if it is revoked], restart pause will be ignored! Shuting down OpenVPN ..
Could that be a DHCP or a Firewall issue?
