tradic
Hi!
I have been using OVPN more than two years to connect to my plants all around world. I have app 30 clients and at the moment Im using few of them. Yesterday I tried to add a new plant in Indonesia in my configuration. I always perform the same action. I add the route in my firewall: local address of the plant 10.17.12.0/24 to 10.0.10.100. (Port UDP 1194 is already forwarded to 10.0.10.100.) After it I add txt file (with name client9) to ccd folder with command: iroute 10.17.12.0 255.255.255.0 and I add command route 10.17.12.0 255.255.255.0 and push "route 10.17.12.0 255.255.255.0" to my server file. Here is my server file:
/////////
port 1194
proto udp
dev tun OVPN
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.100.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
client-to-client
keepalive 10 120
push "route 10.0.0.0 255.255.255.0"
push "route 10.3.4.0 255.255.255.0"
push "route 10.12.1.0 255.255.255.0"
push "route 10.15.4.0 255.255.255.0"
push "route 10.15.7.0 255.255.255.0"
push "route 10.15.8.0 255.255.255.0"
push "route 10.14.6.0 255.255.255.0"
push "route 10.16.2.0 255.255.255.0"
push "route 10.16.25.0 255.255.255.0"
push "route 10.17.12.0 255.255.255.0"
route 10.3.4.0 255.255.255.0
route 10.12.1.0 255.255.255.0
route 10.15.4.0 255.255.255.0
route 10.15.7.0 255.255.255.0
route 10.15.8.0 255.255.255.0
route 10.14.6.0 255.255.255.0
route 10.16.2.0 255.255.255.0
route 10.16.25.0 255.255.255.0
route 10.17.12.0 255.255.255.0
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 5
////
On the client side I use Teltonika router RUT500. This is the configuration of the router OVPN client.
/////
TUN/TAP --- TUN
Protocol --- UDP
Port --- 1194
LZO ---- YES
Authentication ----Tls
Remote host/ip ---- XXXX
Resolve retry ---- Infintie
Keep alive ---- 10 120
Remote network IP add --- 10.100.0.0
Remote network IP mask --- 255.255.255.0
Ca --- uploaded file
Client certificate --- uploaded file
Client key --- uploaded file
////////
Router is connected to a modem with DHCP for accessing the internet, but I assume that this is not important? As I know that no firewall, configuration, antivirus can make a problem on client side.
//////////
So this is my OVPN status log
OpenVPN CLIENT LIST
Updated,Wed Dec 19 08:24:10 2018
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
UNDEF,5.175.66.167:41668,732,3730,Wed Dec 19 08:23:53 2018
UNDEF,103.111.58.242:36241,698,4528,Wed Dec 19 08:23:20 2018
client3,5.175.66.101:45204,443133,933936,Tue Dec 18 12:22:11 2018
UNDEF,5.175.66.167:39324,644,2362,Wed Dec 19 08:24:06 2018
newclient25,41.186.68.45:56556,437408,936637,Tue Dec 18 12:22:21 2018
UNDEF,103.111.58.242:39008,720,4438,Wed Dec 19 08:23:30 2018
UNDEF,5.175.66.167:59817,732,4642,Wed Dec 19 08:23:12 2018
UNDEF,103.111.58.242:38122,720,2932,Wed Dec 19 08:23:59 2018
UNDEF,103.111.58.242:48788,720,3730,Wed Dec 19 08:23:55 2018
UNDEF,5.175.66.167:44502,732,4642,Wed Dec 19 08:23:25 2018
UNDEF,103.111.58.242:54005,720,4756,Wed Dec 19 08:23:24 2018
UNDEF,5.175.66.167:37914,732,3274,Wed Dec 19 08:23:59 2018
client7,185.71.117.40:50869,342092,694897,Tue Dec 18 17:28:02 2018
UNDEF,5.175.66.167:43224,732,4186,Wed Dec 19 08:23:46 2018
client4,212.200.35.210:49835,461829,939035,Tue Dec 18 12:22:22 2018
UNDEF,103.111.58.242:50894,720,4756,Wed Dec 19 08:23:09 2018
UNDEF,5.175.66.167:36669,732,4642,Wed Dec 19 08:23:19 2018
UNDEF,5.175.66.167:58181,732,4414,Wed Dec 19 08:23:32 2018
UNDEF,103.111.58.242:39622,720,4642,Wed Dec 19 08:23:16 2018
UNDEF,5.175.66.167:51817,732,4186,Wed Dec 19 08:23:40 2018
newclient5,93.140.62.139:36533,164798,332481,Wed Dec 19 01:23:42 2018
UNDEF,103.111.58.242:38262,698,3616,Wed Dec 19 08:23:48 2018
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.100.0.22,newclient25,41.186.68.45:56556,Tue Dec 18 12:22:41 2018
10.100.0.18,client7,185.71.117.40:50869,Tue Dec 18 17:28:30 2018
10.100.0.14,client3,5.175.66.101:45204,Tue Dec 18 12:22:36 2018
10.100.0.10,client4,212.200.35.210:49835,Tue Dec 18 12:22:25 2018
10.100.0.26,newclient5,93.140.62.139:36533,Wed Dec 19 01:23:43 2018
GLOBAL STATS
Max bcast/mcast queue length,25
END
The IP address of this new client is 103.111.58.242. It is reaching my computer but not getting virtual address
In my OVPN log I get this:
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 Re-using SSL/TLS context
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 LZO compression initialized
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 Local Options hash (VER=V4): '530fdded'
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 Expected Remote Options hash (VER=V4): '41690919'
Tue Dec 18 12:23:36 2018 us=725649 103.111.58.242:49465 TLS: Initial packet from [AF_INET]103.111.58.242:49465, sid=08fa4998 4a04c3f1
Tue Dec 18 12:23:42 2018 us=145656 103.111.58.242:49256 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 18 12:23:42 2018 us=145656 103.111.58.242:49256 TLS Error: TLS handshake failed
Tue Dec 18 12:23:42 2018 us=145656 103.111.58.242:49256 SIGUSR1[soft,tls-error] received, client-instance restarting
Tue Dec 18 12:23:44 2018 us=360660 MULTI: multi_create_instance called
I thank you in advance for help.
