Hi Guys,
I've established a vpn-connection between two Debian Systems, on the server-system-side runs openvpn 2.3.2 and on the client side openvpn 2.3.7.
If I do some ping from side to side everything looks fine, but if I connect to an HTTPs Server I can't see any content.
So I did some tests with the command "ping IP -s paketsize" and there I can see that the max paketsize is 1358.
If I do the same ping between the public IPs of the both systems everything works fine, also with bigger paketsizes.
I've also cheked all interfaces if there is a wrong MTU, but everything is ok.
Server-Config:
port 1194
proto udp
dev tun0
local .......
link-mtu 2000
fragment 1574
mtu-test
ca ......
cert .....
key .....
dh /etc/openvpn/easy-rsa/keys/dh4096.pem
server 10.49.0.0 255.255.255.0 # internal tun0 connection IP
ifconfig-pool-persist ipp.txt
#ifconfig 10.49.0.11 255.255.255.0
route 10.49.2.0 255.255.255.0
route 10.49.102.0 255.255.255.0
route 10.49.3.0 255.255.255.0
route 10.49.103.0 255.255.255.0
tls-auth static.key 0
cipher AES-256-CBC
#tls-version-min 1.2
#tls-version-max 1.2
#tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
auth SHA384
client-config-dir ccd
client-to-client
keepalive 10 120
comp-lzo no
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 11 # verbose mode
Client-Config:
client
dev tun0
port 1194
proto udp
link-mtu 1800
fragment 1574
mtu-test
local .......
remote ...... 1194 # VPN server IP : PORT
ca .....
cert .....
key ....
tls-auth static.key 1
cipher AES-256-CBC
auth SHA384
remote-cert-tls server
ns-cert-type server
comp-lzo no
persist-key
persist-tun
verb 11
