I'm running openVPN-GUI on Windows to connect to a pfsense box. The connection seems to establish and remain connected, but connectivity to services on the other side gets throttled or becomes inaccessible shortly after connecting. OpenVPN-GUI is being run as administrator and using a config that normally works for other users of the same VPN. Multiple remote networks have been tried to rule out client side infrastructure issues. Some posts I've found suggested that I add
fragment 1400
mssfix
To the OpenVPN config, which didn't help.
Config file looks like
dev tun
persist-tun
persist-key
cipher AES-128-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote 75.11.xx.xx 1194 udp
lport 0
auth-user-pass
ca edge-udp-1194-ca.crt
tls-auth edge-udp-1194-tls.key 1
comp-lzo
A log snippet that corresponds to the users connection looks like
Mar 8 14:53:40 openvpn[87352]: MANAGEMENT: Client disconnected
Mar 8 14:53:40 openvpn[87352]: MANAGEMENT: CMD 'quit'
Mar 8 14:53:39 openvpn[87352]: MANAGEMENT: CMD 'status 2'
Mar 8 14:53:39 openvpn[87352]: MANAGEMENT: Client connected from /var/etc/openvpn/server2.sock
Mar 8 14:53:23 openvpn[87352]: user.user/ip.ip.ip.ip:56593 MULTI: bad source address from client [::], packet dropped
Mar 8 14:53:22 openvpn[87352]: user.user/ip.ip.ip.ip:56593 SENT CONTROL [user.user]: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,dhcp-option DOMAIN hq.mycompany.com,dhcp-option DNS 192.168.0.200,dhcp-option DNS 192.168.0.201,route 192.168.50.0 255.255.255.0,route 192.168.12.0 255.255.255.0,route 192.168.125.0 255.255.255.0,route 52.7.66.11 255.255.255.255,route 192.168.10.0 255.255.255.0,topology net30,ping 10,ping-restart 60,ifconfig 192.168.10.6 192.168.10.5' (status=1)
Mar 8 14:53:22 openvpn[87352]: user.user/ip.ip.ip.ip:56593 send_push_reply(): safe_cap=940
Mar 8 14:53:22 openvpn[87352]: user.user/ip.ip.ip.ip:56593 PUSH: Received control message: 'PUSH_REQUEST'
Mar 8 14:53:21 openvpn[87352]: user.user/ip.ip.ip.ip:56593 MULTI: bad source address from client [192.168.10.14], packet dropped
Mar 8 14:53:20 openvpn[87352]: user.user/ip.ip.ip.ip:56593 MULTI: primary virtual IP for user.user/ip.ip.ip.ip:56593: 192.168.10.6
Mar 8 14:53:20 openvpn[87352]: user.user/ip.ip.ip.ip:56593 MULTI: Learn: 192.168.10.6 -> user.user/ip.ip.ip.ip:56593
Mar 8 14:53:20 openvpn[87352]: user.user/ip.ip.ip.ip:56593 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_d1ad32b68dc4d759476179b65f0772d2.tmp
Mar 8 14:53:20 openvpn[87352]: user.user/ip.ip.ip.ip:56593 MULTI_sva: pool returned IPv4=192.168.10.6, IPv6=(Not enabled)
Mar 8 14:53:20 openvpn[87352]: ip.ip.ip.ip:56593 [user.user] Peer Connection Initiated with [AF_INET]ip.ip.ip.ip:56593
Mar 8 14:53:20 openvpn[87352]: ip.ip.ip.ip:56593 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA
Mar 8 14:53:20 openvpn[87352]: ip.ip.ip.ip:56593 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 8 14:53:20 openvpn[87352]: ip.ip.ip.ip:56593 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mar 8 14:53:20 openvpn[87352]: ip.ip.ip.ip:56593 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 8 14:53:20 openvpn[87352]: ip.ip.ip.ip:56593 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mar 8 14:53:20 openvpn[87352]: ip.ip.ip.ip:56593 TLS: Username/Password authentication succeeded for username 'user.user' [CN SET]
Thanks
