Client doesnt reconnect after unknown internet issue

265

Hi!
Sometimes openvpn client got problem with reconnect (especially if LTE signal is weak or unstable). I cant catch this moment in client log because all clients are far away. There is watchdog on clientPC, that reboot PC after 15 min delay without connection.
Im attaching server logs with my remarks.

PREVIOUS CONNECTION DROPPED 10:50, RECONNECT 10:52 SUCCESS

Sep 28 10:52:06 gate4openvpn openvpn[1098]: MULTI: multi_create_instance called
Sep 28 10:52:06 gate4openvpn openvpn[1098]: 80.83.239.96:23715 Re-using SSL/TLS context
Sep 28 10:52:06 gate4openvpn openvpn[1098]: 80.83.239.96:23715 Control Channel MTU parms [ L:1621 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Sep 28 10:52:06 gate4openvpn openvpn[1098]: 80.83.239.96:23715 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Sep 28 10:52:06 gate4openvpn openvpn[1098]: 80.83.239.96:23715 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Sep 28 10:52:06 gate4openvpn openvpn[1098]: 80.83.239.96:23715 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Sep 28 10:52:06 gate4openvpn openvpn[1098]: 80.83.239.96:23715 TLS: Initial packet from [AF_INET]80.83.239.96:23715, sid=c7de2ce7 5ddb8baa
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 WARNING: Failed to stat CRL file, not (re)loading CRL.
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 VERIFY OK: depth=1, CN=ChangeMe
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 VERIFY OK: depth=0, CN=vpnuser07
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_VER=2.4.7
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_PLAT=win
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_PROTO=2
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_NCP=2
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_LZ4=1
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_LZ4v2=1
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_LZO=1
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_COMP_STUB=1
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_COMP_STUBv2=1
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 peer info: IV_TCPNL=1
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sep 28 10:52:07 gate4openvpn openvpn[1098]: 80.83.239.96:23715 [vpnuser07] Peer Connection Initiated with [AF_INET]80.83.239.96:23715
Sep 28 10:52:07 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 MULTI_sva: pool returned IPv4=10.8.0.12, IPv6=(Not enabled)
Sep 28 10:52:07 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 MULTI: Learn: 10.8.0.12 -> vpnuser07/80.83.239.96:23715
Sep 28 10:52:07 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 MULTI: primary virtual IP for vpnuser07/80.83.239.96:23715: 10.8.0.12
Sep 28 10:52:09 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 PUSH: Received control message: 'PUSH_REQUEST'
Sep 28 10:52:09 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 SENT CONTROL [vpnuser07]: 'PUSH_REPLY,sndbuf 524288,rcvbuf 524288,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,explicit-exit-notify 3,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.8 255.255.255.0,peer-id 11,cipher AES-256-GCM' (status=1)
Sep 28 10:52:09 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 Data Channel: using negotiated cipher 'AES-256-GCM'
Sep 28 10:52:09 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Sep 28 10:52:09 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 28 10:52:09 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 28 10:52:09 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 MULTI: bad source address from client [::], packet dropped
Sep 28 10:52:27 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.90:53910 [vpnuser07] Inactivity timeout (--ping-restart), restarting
Sep 28 10:52:27 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.90:53910 SIGUSR1[soft,ping-restart] received, client-instance restarting

QUESTION 1: why does :53910 peer send SIGUSR1 AFTER :23715 has already connected?
WORKS FINE UNTIL 11:34. Something happens here, internet since there was inaccessible, that causes auto REBOOT

Sep 28 11:49:58 gate4openvpn openvpn[1098]: MULTI: multi_create_instance called
Sep 28 11:49:58 gate4openvpn openvpn[1098]: 80.83.238.76:5561 Re-using SSL/TLS context
Sep 28 11:49:58 gate4openvpn openvpn[1098]: 80.83.238.76:5561 Control Channel MTU parms [ L:1621 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Sep 28 11:49:58 gate4openvpn openvpn[1098]: 80.83.238.76:5561 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Sep 28 11:49:58 gate4openvpn openvpn[1098]: 80.83.238.76:5561 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Sep 28 11:49:58 gate4openvpn openvpn[1098]: 80.83.238.76:5561 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Sep 28 11:49:58 gate4openvpn openvpn[1098]: 80.83.238.76:5561 TLS: Initial packet from [AF_INET]80.83.238.76:5561, sid=c8b0595f e64402b0
Sep 28 11:49:58 gate4openvpn openvpn[1098]: 80.83.238.76:5561 WARNING: Failed to stat CRL file, not (re)loading CRL.
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 VERIFY OK: depth=1, CN=ChangeMe
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 VERIFY OK: depth=0, CN=vpnuser07
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_VER=2.4.7
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_PLAT=win
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_PROTO=2
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_NCP=2
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_LZ4=1
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_LZ4v2=1
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_LZO=1
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_COMP_STUB=1
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_COMP_STUBv2=1
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 peer info: IV_TCPNL=1
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sep 28 11:49:59 gate4openvpn openvpn[1098]: 80.83.238.76:5561 [vpnuser07] Peer Connection Initiated with [AF_INET]80.83.238.76:5561
Sep 28 11:49:59 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 MULTI_sva: pool returned IPv4=10.8.0.9, IPv6=(Not enabled)
Sep 28 11:49:59 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 MULTI: Learn: 10.8.0.9 -> vpnuser07/80.83.238.76:5561
Sep 28 11:49:59 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 MULTI: primary virtual IP for vpnuser07/80.83.238.76:5561: 10.8.0.9
Sep 28 11:50:00 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 PUSH: Received control message: 'PUSH_REQUEST'
Sep 28 11:50:00 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 SENT CONTROL [vpnuser07]: 'PUSH_REPLY,sndbuf 524288,rcvbuf 524288,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,explicit-exit-notify 3,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.8 255.255.255.0,peer-id 7,cipher AES-256-GCM' (status=1)

Sep 28 11:50:00 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 Data Channel: using negotiated cipher 'AES-256-GCM'
Sep 28 11:50:00 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Sep 28 11:50:00 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 28 11:50:00 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 28 11:50:01 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 MULTI: bad source address from client [::], packet dropped
Sep 28 11:50:26 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 [vpnuser07] Inactivity timeout (--ping-restart), restarting
Sep 28 11:50:26 gate4openvpn openvpn[1098]: vpnuser07/80.83.239.96:23715 SIGUSR1[soft,ping-restart] received, client-instance restarting
Sep 28 11:58:02 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 [vpnuser07] Inactivity timeout (--ping-restart), restarting
Sep 28 11:58:02 gate4openvpn openvpn[1098]: vpnuser07/80.83.238.76:5561 SIGUSR1[soft,ping-restart] received, client-instance restarting

COULD NOT CONNECT SINCE THERE. When admin arrived to this PC internet was fine, problem is with OpenVPN exactly.

Client config

client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote myvpndomain.com 1194
resolv-retry infinite
nobind
persist-key
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
setenv opt block-outside-dns
key-direction 1
verb 4

Server config

port 1194
proto udp
dev tun
sndbuf 524288
rcvbuf 524288
push "sndbuf 524288"
push "rcvbuf 524288"
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
push "explicit-exit-notify 3"
keepalive 10 60
cipher AES-256-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 4
crl-verify crl.pem
duplicate-cn
management 127.0.0.1 7505

Very sad I cant get logs from client.

Any ideas guys? What should I try?
Network isnt super stable but never hangup more than 1 min.

TinCanTech

265 wrote SENT CONTROL [vpnuser07]: 'PUSH_REPLY,sndbuf 524288,rcvbuf 524288,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,explicit-exit-notify 3,route-gateway 10.8

You have truncated your server log, the line above is incomplete.

265 wrote Sometimes openvpn client got problem with reconnect (especially if LTE signal is weak or unstable).

Openvpn cannot fix your network.

265

TinCanTech wrote You have truncated your server log, the line above is incomplete.

Fixed, thats because of copying directly from terminal. Sorry.

TinCanTech wrote Openvpn cannot fix your network.

It is obvious.
Question is: why does OpenVPN cant reconnect before reboot? Network is fine, thats simple 4G modem, missing pings sometimes but not totally hangig up. Sometimes it reconnects like 10:50 in logs, but sometimes not.
Also posted Question #1 in server logs.
All thoughts and suggestions will be helpful!

Thanks in advance!