Openvpn server on QNAP NAS

gbhec

Hi there!

I have a new QNAP NAS which came pre installed with OpenVPN Server with limited user configurations through the GUI without drilling down into the device. It generates the Client file and CA which I have downloaded and installed onto both my windows laptop and Android App.

I have opened the port on the router and mapped it to the QNAP, when I run the VPN I see hits in the router log but i cannot establish a connection and get the following from the VPN log.

Can anyone give me some pointers please where to start looking for the problem?

Fri Feb 24 19:22:06 2017 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 31 2017
Fri Feb 24 19:22:06 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Feb 24 19:22:06 2017 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Enter Management Password:
Fri Feb 24 19:22:13 2017 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Feb 24 19:22:13 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xxxx:1194
Fri Feb 24 19:22:13 2017 UDP link local: (not bound)
Fri Feb 24 19:22:13 2017 UDP link remote: [AF_INET]xxxx:1194
Fri Feb 24 19:23:13 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Feb 24 19:23:13 2017 TLS Error: TLS handshake failed
Fri Feb 24 19:23:13 2017 SIGUSR1[soft,tls-error] received, process restarting
Fri Feb 24 19:23:18 2017 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Feb 24 19:23:18 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xxxx:1194
Fri Feb 24 19:23:18 2017 UDP link local: (not bound)
Fri Feb 24 19:23:18 2017 UDP link remote: [AF_INET]xxxx:1194
Fri Feb 24 19:23:26 2017 SIGTERM[hard,] received, process exiting

TinCanTech

gbhec wroteTLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Usually means you have not opened the port or a firewall is blocking you.

Please see:

gbhec

Thanks for your reply I'll look more into the port status. Just to clarify the server is set as UDP 1194, is this the only port needed to establish a connection?