Connection from client to server fails

wp.rauchholz

I am trying to get openvpn accessible for the clients with the following setup:
Server:

CENTOS 7, latest update.

The server is modem/router, hence has two network interfaces; internal and external. The config is done and the openvpn server is up and running (checked with systemctl status and ifconfig. tun0 interface is up and running

firewalld up and running. For the external network interface I added added service openvpn and added interface tun0. I added also openvpn service to the internal network interface

/etc/sysconfig/iptables: -A POSTROUTING -s 10.37.76.0/24 -o ppp0 -j MASQUERADE / -A INPUT -p udp -m udp --dport 1194 -j ACCEPT / -A INPUT -i tun+ -j ACCEPT /-A FORWARD -i tun+ -j ACCEPT

Pilot client is a CENTOS 7 laptop. No modifications to the firewall after install

Thanks fo trying to help me and fix it.

Wolfgang

$ openvpn --config wpr_laptop.ovpn
Tue Nov 20 11:38:13 2018 OpenVPN 2.4.6 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 26 2018
Tue Nov 20 11:38:13 2018 library versions: OpenSSL 1.0.2k-fips 26 Jan 2017, LZO 2.06
Tue Nov 20 11:38:13 2018 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Nov 20 11:38:13 2018 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue Nov 20 11:38:13 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]88.9.142.122:1194
Tue Nov 20 11:38:13 2018 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Nov 20 11:38:13 2018 UDP link local: (not bound)
Tue Nov 20 11:38:13 2018 UDP link remote: [AF_INET]88.9.142.122:1194
Tue Nov 20 11:39:13 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Nov 20 11:39:13 2018 TLS Error: TLS handshake failed
Tue Nov 20 11:39:13 2018 SIGUSR1[soft,tls-error] received, process restarting
Tue Nov 20 11:39:13 2018 Restart pause, 5 second(s)
Tue Nov 20 11:39:18 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]88.9.142.122:1194
Tue Nov 20 11:39:18 2018 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Nov 20 11:39:18 2018 UDP link local: (not bound)
Tue Nov 20 11:39:18 2018 UDP link remote: [AF_INET]88.9.142.122:1194

andrew007

I was trying hard to connect to the server but every time the connection to the server fails. This was due to the server side backend issue which was later on fixed. You may also encounter with error code 43 mac which can be fixed by visiting the site.

wp.rauchholz

I forgot to add the following.
The client is an iphone with openvpn app.
Config DNC / resolv.conf
I run an authoritive DNS server. Initially I only had set nameserver 127.0.0.1 in /etc/resolv.conf, but added later the DNS server of my ISP (Telefónica España IP: 80.58.61.250). That did not help either.