Negan
Hi. I am a basic OpenVPN user. The VPN server is running on the router with Tomato. Generally, the application works, but when viewing the logs, I see error messages. I don't know how to solve it. Maybe some user more advanced than me will explain to me how to solve the problem.
Interface type: TUN
Protocol: UDP
Port: xxxx
Firewall: Automatic
Authorization Mode: TLS
Extra HMAC authorization (tls-auth): Bi-directional
VPN subnet/mask 10.8.0.0 / 255.255.255.0
;
client
dev tun
proto udp
remote x.x.x.x x
nobind
auth-user-pass
auth-nocache
remote-cert-tls server
persist-key
persist-tun
cipher AES-256-CBC
keepalive 15 60
ping-timer-rem
verb 1
<ca>
-----BEGIN CERTIFICATE-----
here ca generated
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
here client cert generated
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
here client.key generated
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
here ta.key generated
-----END OpenVPN Static key V1-----
</tls-auth>
;
Feb 7 07:49:36 unknown daemon.notice openvpn[1972]: 31.60.247.52:18484 TLS: Initial packet from [AF_INET]31.60.247.52:18484, sid=59ce6312 d6d13a65
Feb 7 07:49:37 unknown daemon.err openvpn[1972]: 31.60.247.52:18484 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #2 / time = (1581058175) Fri Feb 7 07:49:35 2020 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Feb 7 07:49:37 unknown daemon.err openvpn[1972]: 31.60.247.52:18484 TLS Error: incoming packet authentication failed from [AF_INET]31.60.247.52:18484
Any idea what is wrong and how to repair this?
