Initial packet from

kosder1908

Hello to all,

i set up openvpn server and client configuration files with ssl keys correctly (i think).
my connection on server is succesful but when i try to connect from android mobile phone i see on the status of server the following messages:

Fri Mar 20 20:46:10 2015 5.203.94.101:1194 TLS: Initial packet from [AF_INET]5.203.**.***:1194, sid=d6d3a282 79960bf3
Fri Mar 20 20:47:10 2015 5.203.94.101:1194 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

because the server side netword is complicated the above error is from server or client?
i think tha the packet arrives on server from client but not from server to client.

Could you please help?
I dont post the conf. files because i am sure tha the error is on network

thank u

Kostas

maikcat

hello kostas, (greek?) 🙂

TLS errors usually reveal network filtering....

my connection on server is succesful but when i try to connect from android mobile phone i see on the status of server the following messages:

your connection on server from where?another pc?
if yes then i believe its android mobile phone side problem...

Michael.

kosder1908

yes i am greek.
να μιλησουμε ελληνικα;

kosder1908

hello again michali,

because i am from yesterday to this and it must be solved i post you the network

server side.

i connect to the loal intranet from work and the employments have set a proxy http server because we want to connect to the internet. the pc which is the proxy have been bridged with the interface of local intranet.
So:

the local intranet uses the following ip addresses 172.18.27.0/24, the proxy machine 172.18.27.28 with port 3389 and my workstation 172.18.27.89
the router which we use have an ip 192.168.1.1 and 192.168.1.132 for proxy server which bridged with 172.18.27.28

i opend the port 11194 udp/local ip 172.18.27.89 and i set a route on 192.168.1.1 "172.18.2.89 255.255.255.255 192.168.1.132"

Could you please help me?

i forgot to tell you that never i connected to server side but i think with above log file that the paccket arrives on server but it dont get back.
if you want and you know i post you config filos both server and client sides

thank u.

maikcat

first, i would like to write greek here but since this a public forum i would
prefer to keep it in english in case another member wants to help...

due of the complexity of your network i would simply advise for start to switch
to tcp for easier troubleshoot,keep in mind that if you switch to tcp you can telnet
to openvpn port and see if you get a response back..

also you can always use tcpdump on both server/client fro troubleshooting..

Michael.

kosder1908

thank u,

i think tha the problem is on the server side. i want to connect from server through proxy but on the settings to gui write only the proxy address and port not username and password.

Do you know how to configure with username/password

kosder1908

Hello,

I can ping from server to client but i cant from client to server

maikcat

I can ping from server to client but i cant from client to server

Good morning from rainy athens,

unless you NAT somewhere in your setup its possibly a firewall blocking
incoming traffic on your server...

again tcpdump is your friend 😉

Michael

kosder1908

Hello michalis,

I set it up by tcp protocol, i did trace route to server and was blocked from first step so the packets dont arrive to gateway..maybe the problem is on routing,,is it useful or necessary to add a static route.i post you results in ten minutes.
Thanks for advice, greek mind is always open and clever