openvpn intemittent onnection

jatinkumar

it was working fine from almost an year and last two days it is giving some issues.
i am able to start application on server as well as client and the logs also shows OK for the certificates but the connection only stays for 15 to 30 seconds and then it breaks.
when i see server logs it refreshes/ reconnects again to same client.

server log screen is here.
https://onedrive.live.com/redir?resid=B78EF500EFCA915F!4883&authkey=!ACqCYNuYPGhm4Fs&v=3&ithint=photo%2cpng

jatinkumar

i wont be able to run grep command as my server is Microsoft based. thats why i thought of sharing the screen
secondly i just noticed that the time which is coming in the server console is different then server time

openvon console is 2 days ahead then my server time. anything which you can help here. or this is causing issue

Traffic

jatinkumar wrotei wont be able to run grep command as my server is Microsoft based

use notepad ..

jatinkumar wrotethats why i thought of sharing the screen

screen is unreadable without magnifying glass .. post you log file here.

jatinkumar wroteopenvon console is 2 days ahead then my server time

set your time correctly.

jatinkumar

1)
Thu Jan 14 15:59:12 2016 CLIENT1-Admin/197.225.129.232:63157 [CLIENT1-Admin] Inactivity timeout (--ping-restart), restarting
Thu Jan 14 15:59:12 2016 CLIENT1-Admin/197.225.129.232:63157 SIGUSR1[soft,ping-restart] received, client-instance restarting
Thu Jan 14 15:54:29 2016 197.224.254.179:10423 TLS: Initial packet from [AF_INET]197.224.254.179:10423, sid=b1add867 e724589e
Thu Jan 14 15:54:32 2016 197.224.254.179:10423 VERIFY OK:
Thu Jan 14 15:54:32 2016 197.224.254.179:10423 VERIFY OK: depth=0, C=MU, ST=PL, L=City, O=Company Technologies Ltd., OU=Secure Connect, CN=Client-2, name=VPN Key, emailAddress=email@domain.com
Thu Jan 14 15:54:36 2016 197.224.254.179:10423 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 15:54:36 2016 197.224.254.179:10423 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 15:54:36 2016 197.224.254.179:10423 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 15:54:36 2016 197.224.254.179:10423 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 15:54:36 2016 197.224.254.179:10423 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 14 15:54:36 2016 197.224.254.179:10423 [Client-2] Peer Connection Initiated with [AF_INET]197.224.254.179:10423
Thu Jan 14 15:54:36 2016 Client-2/197.224.254.179:10423 MULTI_sva: pool returned IPv4=10.8.0.34, IPv6=(Not enabled)
Thu Jan 14 15:54:36 2016 Client-2/197.224.254.179:10423 MULTI: Learn: 10.8.0.34 -> Client-2/197.224.254.179:10423
Thu Jan 14 15:54:36 2016 Client-2/197.224.254.179:10423 MULTI: primary virtual IP for Client-2/197.224.254.179:10423: 10.8.0.34
Thu Jan 14 15:54:39 2016 Client-2/197.224.254.179:10423 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 14 15:54:39 2016 Client-2/197.224.254.179:10423 send_push_reply(): safe_cap=940
Thu Jan 14 15:54:39 2016 Client-2/197.224.254.179:10423 SENT CONTROL [Client-2]: 'PUSH_REPLY,route 172.20.0.0 255.255.0.0,route 172.16.0.0 255.240.0.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.34 10.8.0.33' (status=1)
Thu Jan 14 15:55:05 2016 197.225.129.232:63151 TLS: Initial packet from [AF_INET]197.225.129.232:63151, sid=f903734c cd182fd0
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 VERIFY OK: depth=1, C=MU, ST=PL, L=City, O=Company Technologies Ltd., OU=Secure Connect, CN=Company-OpenVPN-CA, name=VPN Key, emailAddress=email@domain.com
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 VERIFY OK: depth=0, C=MU, ST=PL, L=City, O=Company Technologies Ltd., OU=Secure Connect, CN=CLIENT1-Admin, name=VPN Key, emailAddress=email@domain.com
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 14 15:55:06 2016 197.225.129.232:63151 [CLIENT1-Admin] Peer Connection Initiated with [AF_INET]197.225.129.232:63151
Thu Jan 14 15:55:06 2016 CLIENT1-Admin/197.225.129.232:63151 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Thu Jan 14 15:55:06 2016 CLIENT1-Admin/197.225.129.232:63151 MULTI: Learn: 10.8.0.6 -> CLIENT1-Admin/197.225.129.232:63151
Thu Jan 14 15:55:06 2016 CLIENT1-Admin/197.225.129.232:63151 MULTI: primary virtual IP for CLIENT1-Admin/197.225.129.232:63151: 10.8.0.6
Thu Jan 14 15:55:07 2016 CLIENT1-Admin/197.225.129.232:63151 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 14 15:55:07 2016 CLIENT1-Admin/197.225.129.232:63151 send_push_reply(): safe_cap=940
Thu Jan 14 15:55:07 2016 CLIENT1-Admin/197.225.129.232:63151 SENT CONTROL [CLIENT1-Admin]: 'PUSH_REPLY,route 172.20.0.0 255.255.0.0,route 172.16.0.0 255.240.0.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 TLS: Initial packet from [AF_INET]197.224.253.204:23963, sid=1296fac4 de309dc2
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 VERIFY OK: depth=1, C=MU, ST=PL, L=City, O=Company Technologies Ltd., OU=Secure Connect, CN=Company-OpenVPN-CA, name=VPN Key, emailAddress=email@domain.com
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 VERIFY OK: depth=0, C=MU, ST=PL, L=City, O=Company Technologies Ltd., OU=Secure Connect, CN=Client-2, name=VPN Key, emailAddress=email@domain.com
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 14 16:00:12 2016 197.224.253.204:23963 [Client-2] Peer Connection Initiated with [AF_INET]197.224.253.204:23963
Thu Jan 14 16:00:12 2016 MULTI: new connection by client 'Client-2' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Thu Jan 14 16:00:12 2016 MULTI_sva: pool returned IPv4=10.8.0.34, IPv6=(Not enabled)
Thu Jan 14 16:00:12 2016 MULTI: Learn: 10.8.0.34 -> Client-2/197.224.253.204:23963
Thu Jan 14 16:00:12 2016 MULTI: primary virtual IP for Client-2/197.224.253.204:23963: 10.8.0.34
Thu Jan 14 16:00:14 2016 Client-2/197.224.253.204:23963 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 14 16:00:14 2016 Client-2/197.224.253.204:23963 send_push_reply(): safe_cap=940
Thu Jan 14 16:00:14 2016 Client-2/197.224.253.204:23963 SENT CONTROL [Client-2]: 'PUSH_REPLY,route 172.20.0.0 255.255.0.0,route 172.16.0.0 255.240.0.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.34 10.8.0.33' (status=1)
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 TLS: Initial packet from [AF_INET]197.224.253.204:63997, sid=fa891ca5 4b6ffa2e
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 VERIFY OK: depth=1, C=MU, ST=PL, L=City, O=Company Technologies Ltd., OU=Secure Connect, CN=Company-OpenVPN-CA, name=VPN Key, emailAddress=email@domain.com
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 VERIFY OK: depth=0, C=MU, ST=PL, L=City, O=Company Technologies Ltd., OU=Secure Connect, CN=Client-2, name=VPN Key, emailAddress=email@domain.com
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 14 16:09:51 2016 197.224.253.204:63997 [Client-2] Peer Connection Initiated with [AF_INET]197.224.253.204:63997
Thu Jan 14 16:09:51 2016 MULTI: new connection by client 'Client-2' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Thu Jan 14 16:09:51 2016 MULTI_sva: pool returned IPv4=10.8.0.34, IPv6=(Not enabled)
Thu Jan 14 16:09:51 2016 MULTI: Learn: 10.8.0.34 -> Client-2/197.224.253.204:63997
Thu Jan 14 16:09:51 2016 MULTI: primary virtual IP for Client-2/197.224.253.204:63997: 10.8.0.34
Thu Jan 14 16:09:55 2016 Client-2/197.224.253.204:63997 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jan 14 16:09:55 2016 Client-2/197.224.253.204:63997 send_push_reply(): safe_cap=940
Thu Jan 14 16:09:55 2016 Client-2/197.224.253.204:63997 SENT CONTROL [Client-2]: 'PUSH_REPLY,route 172.20.0.0 255.255.0.0,route 172.16.0.0 255.240.0.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.34 10.8.0.33' (status=1)
Thu Jan 14 16:15:31 2016 CLIENT1-Admin/197.225.129.232:63151 write UDPv4: No buffer space available (WSAENOBUFS) (code=10055)
Thu Jan 14 16:15:31 2016 CLIENT1-Admin/197.225.129.232:63151 write UDPv4: No buffer space available (WSAENOBUFS) (code=10055)
Thu Jan 14 16:32:59 2016 CLIENT1-Admin/197.225.129.232:63151 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #282515 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

jatinkumar

guys any help plz