OpenvVPN with Synology - Stopped connecting

toolmaker2011

Good morning guys,

About 3 weeks I got OpenVPN up and running with my Synology with surprisingly little effort. I travel for work and love being able to log in and browse the synology as a network as if I'm sitting at home. But as of this morning I can no longer connect, as far as I can tell nothing has changed. My synology and router IP have not changed. See picture of the error. Any help will be greatly appreciated!

https://ibb.co/myT20Zt

Kevin

TinCanTech

See your server log

toolmaker2011

I'm sure this isn't what you are looking for, so please explain where to find the log you are looking for if it isn't.

Thanks in advance.

https://ibb.co/mXH38QX

toolmaker2011

The crazy thing is I can't even connect from my local network. When I was getting set up at first that was absolutely no problem, obviously didn't require router ports to be opened up, etc. I did see another forum with yesterday's date with a guy have the same "soft,tls-error", is it something on OpenVPN's end? Its just so bizarre because i have literally changed nothing from April 2nd to today and this has happened.

Kevin

Pippin

Activate SSH in DSM, login through SSH with admin account.

Then enter following:

echo log /var/log/openvpn.log > /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf

echo verb 4 > /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf

sh /var/packages/VPNCenter/target/scripts/openvpn.sh restart

To read the log:

cat /var/log/openvpn.log

toolmaker2011

Ok my SSH was already enabled. Where am I to copy / paste those 4 lines?

Kevin

Pippin

https://www.howtogeek.com/311287/how-to-connect-to-an-ssh-server-from-windows-macos-or-linux/

toolmaker2011

https://ibb.co/ZTThyXc

TinCanTech

"Permission denied" ..

toolmaker2011

Yeah I see that. There must be a logical explanation. Nothing has changed since Apr. 2nd???

Pippin

After logging in as admin try

sudo -i

and enter admin password again.
Synology probably changed something as I`m running older version of DSM...

Otherwise search for "login ssh root synology" or something similar.

toolmaker2011

https://ibb.co/YpqzwkC

toolmaker2011

Forgive me, I may need baby steps to get through PuTTY. I'm pretty tech savvy, but not so much with networks.

But not only do I love the fact that I can (could) log in remotely, I also have an upcoming job for a local small business setting up their network which I have on order a DS218+ along with 2 4TB Red's so I need to get this figured out 🙂

Kevin

Pippin

I see some strange output, I would advice to reinstall VPN Server package, configure new and reexport client configuration.

toolmaker2011

I just uninstalled then reinstalled the openvpn package, and exported the new files. I then went ahead and uninstalled openvpn on my laptop, and deleted the openvpn directory. Then reinstalled openvpn, moved over the files (I did update the IP) and I'm getting the identical soft, tls-error.

Kevin

Pippin

Did you check port forward on router?
Rule for OpenVPN added in DSM firewall?
Perhaps your ISP changed something on their network?

toolmaker2011

Yes I have port forwarding set up on my router, even though that really shouldn't matter right now since i'm connected to the router with my laptop (at least that was my experience during initial setup).
I hadn't added the exception to the firewall since reinstalling, but I just did and unfortunately didn't help
I had checked my IP and it is the same...

Pippin

Please try connecting from outside your network, phone hotspot or something...

toolmaker2011

That worked!!! WTF!

I guess I still need to be able to connect from within my network though, what gives?

Kevin

Pippin

Why connect to your own VPN when on your own network?
Search for "what is nat loopback"