Hello friends, Hope all in good health. I have problem with openvpn connect app on iphone, when I connect to the server it give me pausing ( network is unavailable) then disconnect and try connect again then the same message (every 2 seconds). I have tested the vpn connection on many android smartphones. no problem at all, this case just with iphone even i tested with another iphone, but with the same problem. My OpenVpn server is on Grandstream GWN7000. these configuration are used: Server mode: User Auth ( also I tried ssl , same problem) Protocol: udp Port: 1194 Encryption Algorithm:BF-CBC Digest Algorithm: SHA1 the ovpn config file like this : [code] client dev tun proto udp remote 213.6.48.90 1194 resolv-retry infinite nobind tun-mtu 1500 tun-mtu-extra 32 mssfix 1450 persist-key persist-tun auth-user-pass comp-lzo reneg-sec 0 verb 3 -----BEGIN CERTIFICATE----- * Removed * -----END CERTIFICATE----- [/code] The event log from the iphone: [img]https://preview.ibb.co/c4d3Zn/openvpn_log25_3.jpg[/img] *P.S. On wifi the connection hold 5 minutes then get down. but the main problem with 3G it disconnecting continuously once it connect. In attachment the logs. Please advise where is the problem. With all my respect,

You posted your server CA.crt and your public IP address .. so consider that your current CA is compromised. You should create a new one from scratch. To diagnose the problem take a look at your server logs for errors.

Hello TinaCanTech, Thank you for answering, Please note that the IP address and CA are in testing enviroment so don't worry. I need just to understand where is the problem with the attached logs above.

Have same issue. Running two instances of OpenVPN server. Identical configuration but for one using TCP transport, UDP for the other. TCP works flawlessly. UDP keeps connecting and disconnecting every 1-2 seconds while the app reports "Connecting", then "Connected" following immediately with "Pausing (network is unavailable)" just to start over again. This has to be an iOS issue with the OpenVPN Client app. Used to work great. Not sure when it broke, if either with an 11.x iOS upgrade or with an OpenVPN client upgrade. UDP is my backup in case TCP is blocked so I'd really appreciate if someone can shed some light into this. Client logs don't show anything useful: EVENT: CONNECTED NIP: iOS reported network status unavailable

[quote=TinCanTech post_id=77789 time=1522094907 user_id=37053] To diagnose the problem take a look at your server logs for errors [/quote][quote=apastor post_id=78606 time=1525277319 user_id=43987] Server logs show connects and drops [/quote]And what else ?

[quote=TinCanTech post_id=78607 time=1525279830 user_id=37053] And what else ? [/quote] Well... you piqued my interest. Nothing else. I set verb to 15 on the server. Restarted and tried to connect. On TCP it works, and it logs and entry per client as in: On UDP... nothing. Max bcast/mcast queue length,0 I can imagine the bloody thing is receiving UDP packages as if I kill the server process it never connects. So client and server are UDP-ing each other, but the server doesn't log a successful connection even though the client says it's connected. Will keep trying to get more out of this shy server of mine. In the meantime, any other suggestion? I have the same behaviour on several iOS clients. Can't imagine it's only two of us with this issue.

Yeah... misery loves company. [url]https://forum.lede-project.org/t/openvpn-udp-dont-work-with-iphone/2484[/url] Where would the iOS client code react to ReachableViaWWAN changes?

[quote=apastor post_id=78609 time=1525290624 user_id=43987] [quote=TinCanTech post_id=78607 time=1525279830 user_id=37053] And what else ? [/quote] Well... you piqued my interest. Nothing else. I set [b]verb to 15[/b] on the server. Restarted and tried to connect. On TCP it works, and it logs and entry per client as in: On UDP... nothing. [/quote]Please set --[b]verb 4[/b] in your server and try again .. then please post the complete log showing the client connecting and disconnecting. [quote=apastor post_id=78610 time=1525292498 user_id=43987] Yeah... misery loves company. [url]https://forum.lede-project.org/t/openvpn-udp-dont-work-with-iphone/2484[/url] Where would the iOS client code react to ReachableViaWWAN changes? [/quote]Maybe it is an [i]LEDE[/i] thing ..

[quote=TinCanTech post_id=78611 time=1525294968 user_id=37053] Maybe it is an [i]LEDE[/i] thing .. [/quote] Doubt it. It used to work. The OpenVPN server is running on an old OpenWRT installation that has not changed in a while. (I know... it probably has security holes a Mac truck can go through, TLS 1.0 to begin with... planning to rebuild it soon). Trying to find time to test and will post any additional details I can find. I don't know if I will get anything else out of the server which, as you mention, is an [i]LEDE[/i] thing so it is compiled to be minimal footprint and probably that meant taking logging out. However... since it used to work and the server hasn't changed in ages... I'm not convinced the server will put light on the subject. This smells like an issue w/the OpenVPN client on iOS, probably when using cellular networking (not WiFi).

[quote=TinCanTech post_id=78607 time=1525279830 user_id=37053] And what else ? [/quote] Alright. Got more details for you. This issue doesn't happen at all with TCP, regardless if iOS is using WiFi or cellular. UDP works if on WiFi (at home at least - have to find a friendly WiFi network out there that I trust and doesn't block UDP - guess I'll have to show up at a friend's with some beer). UDP does not work on cellular. It's not a port problem either. Created a new instance on a different port and have the same issue. I don't think its firewall or NAT related, as server sees the client and establishes the connection. The server is oblivious to the problem. Log excerpts (removed all information I'd consider personal... not thinking it too much so if some IP's don't make sense that's my editing fault, not the server or the config): STARTUP [code] Thu May 3 21:34:50 2018 us=175343 OpenVPN 2.3.6 mips-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 25 2015 Thu May 3 21:34:50 2018 us=184445 library versions: OpenSSL 1.0.2f 28 Jan 2016, LZO 2.08 Thu May 3 21:34:50 2018 us=222655 Diffie-Hellman initialized with 2048 bit key Thu May 3 21:34:50 2018 us=232857 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Thu May 3 21:34:50 2018 us=240772 Socket Buffers: R=[163840->131072] S=[163840->131072] Thu May 3 21:34:50 2018 us=248853 TUN/TAP device tun0 opened Thu May 3 21:34:50 2018 us=272664 TUN/TAP TX queue length set to 100 Thu May 3 21:34:50 2018 us=283027 do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=0 Thu May 3 21:34:50 2018 us=294908 /sbin/ifconfig tun0 netmask 255.255.255.128 mtu 1500 broadcast Thu May 3 21:34:50 2018 us=346935 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu May 3 21:34:50 2018 us=382127 GID set to nogroup Thu May 3 21:34:50 2018 us=396928 UID set to nobody Thu May 3 21:34:50 2018 us=416783 UDPv4 link local (bound): [undef] Thu May 3 21:34:50 2018 us=434152 UDPv4 link remote: [undef] Thu May 3 21:34:50 2018 us=448532 MULTI: multi_init called, r=256 v=256 Thu May 3 21:34:50 2018 us=456239 IFCONFIG POOL: base= size=124, ipv6=0 Thu May 3 21:34:50 2018 us=463754 Initialization Sequence Completed [/code] On WiFi, 1st connection (successful) [code] Thu May 3 22:03:24 2018 us=71422 MULTI: multi_create_instance called Thu May 3 22:03:24 2018 us=76937 :50214 Re-using SSL/TLS context Thu May 3 22:03:24 2018 us=81827 :50214 LZO compression initialized Thu May 3 22:03:24 2018 us=87549 :50214 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Thu May 3 22:03:24 2018 us=92395 :50214 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu May 3 22:03:24 2018 us=97327 :50214 TLS: Initial packet from [AF_INET]:50214, sid=843ed6 762d7b Thu May 3 22:03:25 2018 us=454797 :50214 VERIFY OK: Thu May 3 22:03:25 2018 us=464522 :50214 VERIFY OK: Thu May 3 22:03:26 2018 us=233030 :50214 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu May 3 22:03:26 2018 us=238433 :50214 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 3 22:03:26 2018 us=243482 :50214 NOTE: --mute triggered... Thu May 3 22:03:26 2018 us=254498 :50214 3 variation(s) on previous 5 message(s) suppressed by --mute Thu May 3 22:03:26 2018 us=259742 :50214 [iPhone] Peer Connection Initiated with [AF_INET]:50214 Thu May 3 22:03:26 2018 us=264720 iPhone/:50214 MULTI_sva: pool returned IPv4=, IPv6=(Not enabled) Thu May 3 22:03:26 2018 us=269984 iPhone/:50214 MULTI: Learn: -> iPhone/:50214 Thu May 3 22:03:26 2018 us=274800 iPhone/:50214 MULTI: primary virtual IP for iPhone/:50214: Thu May 3 22:03:26 2018 us=279931 iPhone/:50214 PUSH: Received control message: 'PUSH_REQUEST' Thu May 3 22:03:26 2018 us=284752 iPhone/:50214 send_push_reply(): safe_cap=940 Thu May 3 22:03:26 2018 us=290084 iPhone/:50214 SENT CONTROL [iPhone]: 'PUSH_REPLY,comp-lzo yes,persist-key,persist-tun,topology subnet,route-gateway dhcp,route 0.0.0.0 128.0.0.0,route 128.0.0.0 128.0.0.0,dhcp-option DNS ,route-gateway ,topology subnet,ping 10,ping-restart 120,ifconfig 255.255.255.128' (status=1) Thu May 3 22:04:06 2018 us=365857 iPhone/:50214 IP packet with unknown IP version=2 seen [/code] Disconnect client, disconnect from WiFi (go cellular), connect again [code] Thu May 3 22:04:16 2018 us=547680 MULTI: multi_create_instance called Thu May 3 22:04:16 2018 us=554946 :60634 Re-using SSL/TLS context Thu May 3 22:04:16 2018 us=559844 :60634 LZO compression initialized Thu May 3 22:04:16 2018 us=565404 :60634 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Thu May 3 22:04:16 2018 us=570201 :60634 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Thu May 3 22:04:16 2018 us=575106 :60634 TLS: Initial packet from [AF_INET]:60634, sid=695a6bfa 5019477d Thu May 3 22:04:17 2018 us=921674 :60634 VERIFY OK: Thu May 3 22:04:17 2018 us=931321 :60634 VERIFY OK: Thu May 3 22:04:18 2018 us=333886 :60634 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu May 3 22:04:18 2018 us=339095 :60634 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu May 3 22:04:18 2018 us=344279 :60634 NOTE: --mute triggered... Thu May 3 22:04:18 2018 us=382991 :60634 3 variation(s) on previous 5 message(s) suppressed by --mute Thu May 3 22:04:18 2018 us=388165 :60634 [iPhone] Peer Connection Initiated with [AF_INET]:60634 Thu May 3 22:04:18 2018 us=394527 MULTI: new connection by client 'iPhone' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect. Thu May 3 22:04:18 2018 us=399342 MULTI_sva: pool returned IPv4=, IPv6=(Not enabled) Thu May 3 22:04:18 2018 us=404558 MULTI: Learn: -> iPhone/:60634 Thu May 3 22:04:18 2018 us=409362 MULTI: primary virtual IP for iPhone/:60634: Thu May 3 22:04:18 2018 us=414489 iPhone/:60634 PUSH: Received control message: 'PUSH_REQUEST' Thu May 3 22:04:18 2018 us=419306 iPhone/:60634 send_push_reply(): safe_cap=940 Thu May 3 22:04:18 2018 us=424638 iPhone/:60634 SENT CONTROL [iPhone]: 'PUSH_REPLY,comp-lzo yes,persist-key,persist-tun,topology subnet,route-gateway dhcp,route 0.0.0.0 128.0.0.0,route 128.0.0.0 128.0.0.0,dhcp-option DNS ,route-gateway ,topology subnet,ping 10,ping-restart 120,ifconfig 255.255.255.128' (status=1) Thu May 3 22:04:19 2018 us=363700 iPhone/:60634 IP packet with unknown IP version=2 seen ------>>>> NOTE: HERE HAPPENS THE CLIENT DISCONNECT AND RECONNECTION ATTEMPT... NOTHING SHOWS IN LOG... NEW CONNECTION STARTS BELOW

Thanks for posting your server log. [quote=apastor post_id=78641 time=1525402558 user_id=43987] Thu May 3 22:03:26 2018 us=290084 iPhone/:50214 SENT CONTROL [iPhone]: 'PUSH_REPLY,comp-lzo yes,persist-key,persist-tun,topology subnet,route-gateway dhcp,route 0.0.0.0 128.0.0.0,route 128.0.0.0 128.0.0.0,dhcp-option DNS ,route-gateway ,topology subnet,ping 10,ping-restart 120,ifconfig 255.255.255.128' (status=1) Thu May 3 22:04:06 2018 us=365857 iPhone/:50214 [b]IP packet with unknown IP version=2 seen[/b] [/quote]I am not 100% sure but I believe this is caused when using upto date and really old openvpn versions at either end. Your server is quite old: [quote=apastor post_id=78641 time=1525402558 user_id=43987] OpenVPN 2.3.6 mips-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 25 2015 library versions: OpenSSL 1.0.2f 28 Jan 2016, LZO 2.08 [/quote] This is problem: [quote=apastor post_id=78606 time=1525277319 user_id=43987] Client logs don't show anything useful: EVENT: CONNECTED [b]NIP: iOS reported network status unavailable[/b]

OpenVPN Client on Iphone

TinCanTech

Monkeydo wrote have more details, just let me know which thread you want me to post to

Start a new thread and post a link to it from this thread and link to this thread from your new thread.

Monkeydo

Ok Thanks, will do.

Dorlie

I have OpenVPN on my phone that disconnects every 10 or 15 seconds. I am not sure what the problem is. It's a T-Mobile REVVL phone. Any ideas as to what's wrong and how to fix it?

« Previous Page