I've opened a ticket with Synology but I want to cover my bases here since they may not be able to fix or understand my ticket.
Issue: Basically whenever attempting to connect to the server using any of our mobile devices, the connection times out. BUT we are able to connect using the Windows OpenVPN client.
Client log:
2018-09-27 12:57:22 1
2018-09-27 12:57:22 ----- OpenVPN Start -----
OpenVPN core 3.2 ios arm64 64-bit PT_PROXY built on Sep 4 2018 09:41:09
2018-09-27 12:57:22 Frame=512/2048/512 mssfix-ctrl=1250
2018-09-27 12:57:22 UNUSED OPTIONS
1 [tls-client]
3 [pull]
4 [script-security] [2]
2018-09-27 12:57:22 EVENT: RESOLVE
2018-09-27 12:57:22 Contacting [x.x.x.x]:1194/UDP via UDP
2018-09-27 12:57:22 EVENT: WAIT
2018-09-27 12:57:22 Connecting to [x.x.x.x]:1194 (x.x.x.x) via UDPv4
2018-09-27 12:57:33 Server poll timeout, trying next remote entry...
2018-09-27 12:57:33 EVENT: RECONNECTING
2018-09-27 12:57:33 EVENT: RESOLVE
2018-09-27 12:57:33 Contacting [x.x.x.x]:1194/UDP via UDP
2018-09-27 12:57:33 EVENT: WAIT
2018-09-27 12:57:33 Connecting to [x.x.x.x]:1194 (x.x.x.x) via UDPv4
2018-09-27 12:57:44 Server poll timeout, trying next remote entry...
2018-09-27 12:57:44 EVENT: RECONNECTING
2018-09-27 12:57:44 EVENT: RESOLVE
2018-09-27 12:57:44 Contacting [x.x.x.x]:1194/UDP via UDP
2018-09-27 12:57:44 EVENT: WAIT
2018-09-27 12:57:44 Connecting to [x.x.x.x]:1194 (x.x.x.x) via UDPv4
2018-09-27 12:57:53 EVENT: CONNECTION_TIMEOUT [ERR]
2018-09-27 12:57:53 Raw stats on disconnect:
BYTES_OUT : 392
PACKETS_OUT : 28
CONNECTION_TIMEOUT : 1
N_RECONNECT : 2
2018-09-27 12:57:53 Performance stats on disconnect:
CPU usage (microseconds): 94946
Network bytes per CPU second: 4128
Tunnel bytes per CPU second: 0
2018-09-27 12:57:53 EVENT: DISCONNECTED
2018-09-27 12:57:53 Raw stats on disconnect:
BYTES_OUT : 392
PACKETS_OUT : 28
CONNECTION_TIMEOUT : 1
N_RECONNECT : 2
2018-09-27 12:57:53 Performance stats on disconnect:
CPU usage (microseconds): 94946
Network bytes per CPU second: 4128
Tunnel bytes per CPU second: 0
And here's the server config file:
dev tun
tls-client
remote YOUR_SERVER_IP 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway def1
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto udp
script-security 2
comp-lzo
reneg-sec 0
cipher AES-128-CBC
auth SHA512
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
Sorry, I know I left the comments in there and I don't know how to do the --verb 4. I'm just using the Synology GUI to set up the VPN server, I have no experience with command-line. I greatly appreciate any help you folks can offer.
