[deleted]
Hello
I have set openvpn 2.3.2 on my server and client with cipher and auth as none. On my client machine, I get "Authenticate/Decrypt packet error: packet HMAC authentication failed" after few seconds of successful connection establishment. After few seconds of getting the error, the client gets restarted.
Server logs
"
IP packet with unknown IP version=1 seen
Sun Apr 13 11:27:51 2014 maxwell-t2-bm7/106.51.218.66:7000 IP packet with unknown IP version=14 seen
Sun Apr 13 11:28:01 2014 maxwell-t2-bm7/106.51.218.66:7000 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #1612508332 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
"
Client is in India and server is in China. Client and server time are synced with respective to the timezone.
I didn't want encryption and compression, since I am using the architecture for routing purposes.
Server.conf
**********************************************************
port 1195
proto udp
dev tun1
ca keys/xxxxxxx/ca.crt
cert keys/xxxxxxx/maxwell-t2.crt
key keys/xxxxxxxx/maxwell-t2.key
dh keys/xxxxxxxx/dh2048.pem
server 172.16.0.0 255.255.255.0
crl-verify keys/xxxxxxxxx/crl.pem
cipher none
auth none
user nobody
group nogroup
status servers/maxwell-t2/logs/openvpn-status.log
log-append servers/maxwell-t2/logs/openvpn.log
verb 3
mute 20
max-clients 100
management 127.0.0.1 6667
keepalive 10 120
client-config-dir /etc/openvpn/servers/maxwell-t2/ccd
duplicate-cn
persist-key
ccd-exclusive
push "redirect-gateway def1"
topology subnet
route-noexec
******************************************************************
client.conf
********************************************************
client
proto udp
lport 7000
dev vpn0
dev-type tun
ca ca.crt
dh dh2048.pem
cert maxwell-t2-bm7.crt
key maxwell-t2-bm7.key
cipher none
remote x.x.x.x 1195
verb 3
mute 20
keepalive 10 120
persist-key
float
resolv-retry infinite
ns-cert-type server
reneg-sec 604800
sndbuf 100000
rcvbuf 100000
setenv FORWARD_COMPATIBLE 1
setenv PUSH_PEER_INFO
server-poll-timeout 4
topology subnet
******************************************************************
What do I miss? How to fix this?
--
Vinoth
[deleted]
Fixed.
From the openvpn client logs,
"WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'"
In server conf, "auth none" but in client conf "auth sha1". That causes the error. On adding "auth none" in client config, I didn't get the reported errors. Should read the logs first ;-)
Thanks.
