Hi Guys,
I'm pulling my hair out here as I can't understand what's happening.
I have a few machines (out of approximately 80 total) that suddenly stopped connecting to the Azure gateway while the rest are connecting just fine with the same config. The connection is just being reset and the client keeps retrying infinitely. The issue manifests itself on different systems, so the OS is not the cause.
Client config:
client
remote azuregateway-xxx.vpn.azure.com 443
verify-x509-name 'xxx.vpn.azure.com' name
remote-cert-tls server
dev tun
proto tcp
resolv-retry infinite
nobind
auth SHA256
cipher AES-256-GCM
persist-key
persist-tun
tls-version-min 1.2
key-direction 1
route xxx 255.255.255.255
verb 3
# P2S CA root certificate
<ca>
...
</ca>
# Pre Shared Key
<tls-auth>
...
</tls-auth>
# P2S client certificate
# Please fill this field with a PEM formatted client certificate
# Alternatively, configure 'cert PATH_TO_CLIENT_CERT' to use input from a PEM certificate file.
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
# P2S client certificate private key
# Please fill this field with a PEM formatted private key of the client certificate.
# Alternatively, configure 'key PATH_TO_CLIENT_KEY' to use input from a PEM key file.
<key>
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
</key>
Client Log:
Wed Aug 26 09:42:12 2020 us=773597 Current Parameter Settings:
Wed Aug 26 09:42:12 2020 us=774595 config = 'xxxVPN.ovpn'
Wed Aug 26 09:42:12 2020 us=774595 mode = 0
Wed Aug 26 09:42:12 2020 us=774595 show_ciphers = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 show_digests = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 show_engines = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 genkey = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 key_pass_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 show_tls_ciphers = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 connect_retry_max = 0
Wed Aug 26 09:42:12 2020 us=774595 Connection profiles [0]:
Wed Aug 26 09:42:12 2020 us=774595 proto = tcp-client
Wed Aug 26 09:42:12 2020 us=774595 local = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 local_port = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 remote = 'azuregateway-f9467113-b34e-4741-8cc8-0294f10889fc-16119cbb8ad4.vpn.azure.com'
Wed Aug 26 09:42:12 2020 us=774595 remote_port = '443'
Wed Aug 26 09:42:12 2020 us=774595 remote_float = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 bind_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 bind_local = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 bind_ipv6_only = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 connect_retry_seconds = 5
Wed Aug 26 09:42:12 2020 us=774595 connect_timeout = 120
Wed Aug 26 09:42:12 2020 us=774595 socks_proxy_server = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 socks_proxy_port = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 tun_mtu = 1500
Wed Aug 26 09:42:12 2020 us=774595 tun_mtu_defined = ENABLED
Wed Aug 26 09:42:12 2020 us=774595 link_mtu = 1500
Wed Aug 26 09:42:12 2020 us=774595 link_mtu_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 tun_mtu_extra = 0
Wed Aug 26 09:42:12 2020 us=774595 tun_mtu_extra_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 mtu_discover_type = -1
Wed Aug 26 09:42:12 2020 us=774595 fragment = 0
Wed Aug 26 09:42:12 2020 us=774595 mssfix = 1450
Wed Aug 26 09:42:12 2020 us=774595 explicit_exit_notification = 0
Wed Aug 26 09:42:12 2020 us=774595 Connection profiles END
Wed Aug 26 09:42:12 2020 us=774595 remote_random = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 ipchange = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 dev = 'tun'
Wed Aug 26 09:42:12 2020 us=774595 dev_type = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 dev_node = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 lladdr = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 topology = 1
Wed Aug 26 09:42:12 2020 us=774595 ifconfig_local = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 ifconfig_remote_netmask = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 ifconfig_noexec = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 ifconfig_nowarn = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 ifconfig_ipv6_local = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 ifconfig_ipv6_netbits = 0
Wed Aug 26 09:42:12 2020 us=774595 ifconfig_ipv6_remote = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 shaper = 0
Wed Aug 26 09:42:12 2020 us=774595 mtu_test = 0
Wed Aug 26 09:42:12 2020 us=774595 mlock = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 keepalive_ping = 0
Wed Aug 26 09:42:12 2020 us=774595 keepalive_timeout = 0
Wed Aug 26 09:42:12 2020 us=774595 inactivity_timeout = 0
Wed Aug 26 09:42:12 2020 us=774595 ping_send_timeout = 0
Wed Aug 26 09:42:12 2020 us=774595 ping_rec_timeout = 0
Wed Aug 26 09:42:12 2020 us=774595 ping_rec_timeout_action = 0
Wed Aug 26 09:42:12 2020 us=774595 ping_timer_remote = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 remap_sigusr1 = 0
Wed Aug 26 09:42:12 2020 us=774595 persist_tun = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 persist_local_ip = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 persist_remote_ip = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 persist_key = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 passtos = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 resolve_retry_seconds = 1000000000
Wed Aug 26 09:42:12 2020 us=774595 resolve_in_advance = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 username = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 groupname = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 chroot_dir = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 cd_dir = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 writepid = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 up_script = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 down_script = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=774595 down_pre = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 up_restart = DISABLED
Wed Aug 26 09:42:12 2020 us=774595 up_delay = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 daemon = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 inetd = 0
Wed Aug 26 09:42:12 2020 us=775592 log = ENABLED
Wed Aug 26 09:42:12 2020 us=775592 suppress_timestamps = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 machine_readable_output = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 nice = 0
Wed Aug 26 09:42:12 2020 us=775592 verbosity = 5
Wed Aug 26 09:42:12 2020 us=775592 mute = 0
Wed Aug 26 09:42:12 2020 us=775592 gremlin = 0
Wed Aug 26 09:42:12 2020 us=775592 status_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 status_file_version = 1
Wed Aug 26 09:42:12 2020 us=775592 status_file_update_freq = 60
Wed Aug 26 09:42:12 2020 us=775592 occ = ENABLED
Wed Aug 26 09:42:12 2020 us=775592 rcvbuf = 0
Wed Aug 26 09:42:12 2020 us=775592 sndbuf = 0
Wed Aug 26 09:42:12 2020 us=775592 sockflags = 0
Wed Aug 26 09:42:12 2020 us=775592 fast_io = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 comp.alg = 0
Wed Aug 26 09:42:12 2020 us=775592 comp.flags = 0
Wed Aug 26 09:42:12 2020 us=775592 route_script = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 route_default_gateway = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 route_default_metric = 0
Wed Aug 26 09:42:12 2020 us=775592 route_noexec = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 route_delay = 5
Wed Aug 26 09:42:12 2020 us=775592 route_delay_window = 30
Wed Aug 26 09:42:12 2020 us=775592 route_delay_defined = ENABLED
Wed Aug 26 09:42:12 2020 us=775592 route_nopull = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 route_gateway_via_dhcp = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 allow_pull_fqdn = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 Pull filters:
Wed Aug 26 09:42:12 2020 us=775592 ignore "route-method"
Wed Aug 26 09:42:12 2020 us=775592 route xx/255.255.255.255/default (not set)/default (not set)
Wed Aug 26 09:42:12 2020 us=775592 management_addr = '127.0.0.1'
Wed Aug 26 09:42:12 2020 us=775592 management_port = '25340'
Wed Aug 26 09:42:12 2020 us=775592 management_user_pass = 'stdin'
Wed Aug 26 09:42:12 2020 us=775592 management_log_history_cache = 250
Wed Aug 26 09:42:12 2020 us=775592 management_echo_buffer_size = 100
Wed Aug 26 09:42:12 2020 us=775592 management_write_peer_info_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 management_client_user = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 management_client_group = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 management_flags = 6
Wed Aug 26 09:42:12 2020 us=775592 shared_secret_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 key_direction = 1
Wed Aug 26 09:42:12 2020 us=775592 ciphername = 'AES-256-GCM'
Wed Aug 26 09:42:12 2020 us=775592 ncp_enabled = ENABLED
Wed Aug 26 09:42:12 2020 us=775592 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Wed Aug 26 09:42:12 2020 us=775592 authname = 'SHA256'
Wed Aug 26 09:42:12 2020 us=775592 prng_hash = 'SHA1'
Wed Aug 26 09:42:12 2020 us=775592 prng_nonce_secret_len = 16
Wed Aug 26 09:42:12 2020 us=775592 keysize = 0
Wed Aug 26 09:42:12 2020 us=775592 engine = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 replay = ENABLED
Wed Aug 26 09:42:12 2020 us=775592 mute_replay_warnings = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 replay_window = 64
Wed Aug 26 09:42:12 2020 us=775592 replay_time = 15
Wed Aug 26 09:42:12 2020 us=775592 packet_id_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 use_iv = ENABLED
Wed Aug 26 09:42:12 2020 us=775592 test_crypto = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 tls_server = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 tls_client = ENABLED
Wed Aug 26 09:42:12 2020 us=775592 key_method = 2
Wed Aug 26 09:42:12 2020 us=775592 ca_file = '[[INLINE]]'
Wed Aug 26 09:42:12 2020 us=775592 ca_path = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 dh_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 cert_file = '[[INLINE]]'
Wed Aug 26 09:42:12 2020 us=775592 extra_certs_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 priv_key_file = '[[INLINE]]'
Wed Aug 26 09:42:12 2020 us=775592 pkcs12_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 cryptoapi_cert = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 cipher_list = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 cipher_list_tls13 = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 tls_cert_profile = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 tls_verify = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 tls_export_cert = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 verify_x509_type = 2
Wed Aug 26 09:42:12 2020 us=775592 verify_x509_name = 'f9467113-b34e-4741-8cc8-0294f10889fc.vpn.azure.com'
Wed Aug 26 09:42:12 2020 us=775592 crl_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 ns_cert_type = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 65535
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_ku[i] = 0
Wed Aug 26 09:42:12 2020 us=775592 remote_cert_eku = 'TLS Web Server Authentication'
Wed Aug 26 09:42:12 2020 us=775592 ssl_flags = 192
Wed Aug 26 09:42:12 2020 us=775592 tls_timeout = 2
Wed Aug 26 09:42:12 2020 us=775592 renegotiate_bytes = -1
Wed Aug 26 09:42:12 2020 us=775592 renegotiate_packets = 0
Wed Aug 26 09:42:12 2020 us=775592 renegotiate_seconds = 3600
Wed Aug 26 09:42:12 2020 us=775592 handshake_window = 60
Wed Aug 26 09:42:12 2020 us=775592 transition_window = 3600
Wed Aug 26 09:42:12 2020 us=775592 single_session = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 push_peer_info = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 tls_exit = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 tls_auth_file = '[[INLINE]]'
Wed Aug 26 09:42:12 2020 us=775592 tls_crypt_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=775592 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=775592 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_protected_authentication = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_private_mode = 00000000
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_cert_private = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_pin_cache_period = -1
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_id = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 pkcs11_id_management = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 server_network = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 server_netmask = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 server_network_ipv6 = ::
Wed Aug 26 09:42:12 2020 us=776588 server_netbits_ipv6 = 0
Wed Aug 26 09:42:12 2020 us=776588 server_bridge_ip = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 server_bridge_netmask = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 server_bridge_pool_start = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 server_bridge_pool_end = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_pool_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_pool_start = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_pool_end = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_pool_netmask = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_pool_persist_refresh_freq = 600
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_ipv6_pool_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_ipv6_pool_base = ::
Wed Aug 26 09:42:12 2020 us=776588 ifconfig_ipv6_pool_netbits = 0
Wed Aug 26 09:42:12 2020 us=776588 n_bcast_buf = 256
Wed Aug 26 09:42:12 2020 us=776588 tcp_queue_limit = 64
Wed Aug 26 09:42:12 2020 us=776588 real_hash_size = 256
Wed Aug 26 09:42:12 2020 us=776588 virtual_hash_size = 256
Wed Aug 26 09:42:12 2020 us=776588 client_connect_script = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 learn_address_script = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 client_disconnect_script = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 client_config_dir = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 ccd_exclusive = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 tmp_dir = 'C:\Users\lorra\AppData\Local\Temp\'
Wed Aug 26 09:42:12 2020 us=776588 push_ifconfig_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 push_ifconfig_local = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 push_ifconfig_remote_netmask = 0.0.0.0
Wed Aug 26 09:42:12 2020 us=776588 push_ifconfig_ipv6_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 push_ifconfig_ipv6_local = ::/0
Wed Aug 26 09:42:12 2020 us=776588 push_ifconfig_ipv6_remote = ::
Wed Aug 26 09:42:12 2020 us=776588 enable_c2c = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 duplicate_cn = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 cf_max = 0
Wed Aug 26 09:42:12 2020 us=776588 cf_per = 0
Wed Aug 26 09:42:12 2020 us=776588 max_clients = 1024
Wed Aug 26 09:42:12 2020 us=776588 max_routes_per_client = 256
Wed Aug 26 09:42:12 2020 us=776588 auth_user_pass_verify_script = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 auth_user_pass_verify_script_via_file = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 auth_token_generate = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 auth_token_lifetime = 0
Wed Aug 26 09:42:12 2020 us=776588 client = ENABLED
Wed Aug 26 09:42:12 2020 us=776588 pull = ENABLED
Wed Aug 26 09:42:12 2020 us=776588 auth_user_pass_file = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=776588 show_net_up = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 route_method = 3
Wed Aug 26 09:42:12 2020 us=776588 block_outside_dns = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 ip_win32_defined = DISABLED
Wed Aug 26 09:42:12 2020 us=776588 ip_win32_type = 3
Wed Aug 26 09:42:12 2020 us=777586 dhcp_masq_offset = 0
Wed Aug 26 09:42:12 2020 us=777586 dhcp_lease_time = 31536000
Wed Aug 26 09:42:12 2020 us=777586 tap_sleep = 0
Wed Aug 26 09:42:12 2020 us=777586 dhcp_options = DISABLED
Wed Aug 26 09:42:12 2020 us=777586 dhcp_renew = DISABLED
Wed Aug 26 09:42:12 2020 us=777586 dhcp_pre_release = DISABLED
Wed Aug 26 09:42:12 2020 us=777586 domain = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=777586 netbios_scope = '[UNDEF]'
Wed Aug 26 09:42:12 2020 us=777586 netbios_node_type = 0
Wed Aug 26 09:42:12 2020 us=777586 disable_nbt = DISABLED
Wed Aug 26 09:42:12 2020 us=777586 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Wed Aug 26 09:42:12 2020 us=777586 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Aug 26 09:42:12 2020 us=777586 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Enter Management Password:
Wed Aug 26 09:42:12 2020 us=778584 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Aug 26 09:42:12 2020 us=778584 Need hold release from management interface, waiting...
Wed Aug 26 09:42:13 2020 us=123775 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Aug 26 09:42:13 2020 us=225340 MANAGEMENT: CMD 'state on'
Wed Aug 26 09:42:13 2020 us=226303 MANAGEMENT: CMD 'log all on'
Wed Aug 26 09:42:13 2020 us=345973 MANAGEMENT: CMD 'echo all on'
Wed Aug 26 09:42:13 2020 us=346973 MANAGEMENT: CMD 'bytecount 5'
Wed Aug 26 09:42:13 2020 us=348966 MANAGEMENT: CMD 'hold off'
Wed Aug 26 09:42:13 2020 us=349965 MANAGEMENT: CMD 'hold release'
Wed Aug 26 09:42:13 2020 us=354984 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 26 09:42:13 2020 us=354984 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 26 09:42:13 2020 us=354984 Control Channel MTU parms [ L:1623 D:1170 EF:80 EB:0 ET:0 EL:3 ]
Wed Aug 26 09:42:13 2020 us=354984 MANAGEMENT: >STATE:1598431333,RESOLVE,,,,,,
Wed Aug 26 09:42:13 2020 us=361966 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Wed Aug 26 09:42:13 2020 us=361966 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_CLIENT,keydir 1,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-client'
Wed Aug 26 09:42:13 2020 us=361966 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_SERVER,keydir 0,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-server'
Wed Aug 26 09:42:13 2020 us=361966 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:443
Wed Aug 26 09:42:13 2020 us=361966 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Aug 26 09:42:13 2020 us=361966 Attempting to establish TCP connection with [AF_INET]xx.xx.xx.xx:443 [nonblock]
Wed Aug 26 09:42:13 2020 us=361966 MANAGEMENT: >STATE:1598431333,TCP_CONNECT,,,,,,
Wed Aug 26 09:42:14 2020 us=363081 TCP connection established with [AF_INET]xx.xx.xx.xx:443
Wed Aug 26 09:42:14 2020 us=363081 TCP_CLIENT link local: (not bound)
Wed Aug 26 09:42:14 2020 us=363081 TCP_CLIENT link remote: [AF_INET]xx.xx.xx.xx:443
Wed Aug 26 09:42:14 2020 us=363081 MANAGEMENT: >STATE:1598431334,WAIT,,,,,,
Wed Aug 26 09:42:14 2020 us=389010 Connection reset, restarting [0]
Wed Aug 26 09:42:14 2020 us=390009 TCP/UDP: Closing socket
Wed Aug 26 09:42:14 2020 us=390009 SIGUSR1[soft,connection-reset] received, process restarting
Wed Aug 26 09:42:14 2020 us=390009 MANAGEMENT: >STATE:1598431334,RECONNECTING,connection-reset,,,,,
Wed Aug 26 09:42:14 2020 us=390009 Restart pause, 5 second(s)
Wed Aug 26 09:42:19 2020 us=391629 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 26 09:42:19 2020 us=391629 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Aug 26 09:42:19 2020 us=391629 Control Channel MTU parms [ L:1623 D:1170 EF:80 EB:0 ET:0 EL:3 ]
Wed Aug 26 09:42:19 2020 us=392627 MANAGEMENT: >STATE:1598431339,RESOLVE,,,,,,
Wed Aug 26 09:42:19 2020 us=392627 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Wed Aug 26 09:42:19 2020 us=392627 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_CLIENT,keydir 1,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-client'
Wed Aug 26 09:42:19 2020 us=392627 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1551,tun-mtu 1500,proto TCPv4_SERVER,keydir 0,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-server'
Wed Aug 26 09:42:19 2020 us=392627 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:443
Wed Aug 26 09:42:19 2020 us=392627 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Aug 26 09:42:19 2020 us=392627 Attempting to establish TCP connection with [AF_INET]xx.xx.xx.xx:443 [nonblock]
Wed Aug 26 09:42:19 2020 us=392627 MANAGEMENT: >STATE:1598431339,TCP_CONNECT,,,,,,
Wed Aug 26 09:42:20 2020 us=394177 TCP connection established with [AF_INET]xx.xx.xx.xx:443
Wed Aug 26 09:42:20 2020 us=394177 TCP_CLIENT link local: (not bound)
Wed Aug 26 09:42:20 2020 us=394177 TCP_CLIENT link remote: [AF_INET]xx.xx.xx.xx:443
Wed Aug 26 09:42:20 2020 us=394177 MANAGEMENT: >STATE:1598431340,WAIT,,,,,,
Wed Aug 26 09:42:20 2020 us=418238 Connection reset, restarting [0]
Wed Aug 26 09:42:20 2020 us=418238 TCP/UDP: Closing socket
Wed Aug 26 09:42:20 2020 us=419247 SIGUSR1[soft,connection-reset] received, process restarting
Wed Aug 26 09:42:20 2020 us=419247 MANAGEMENT: >STATE:1598431340,RECONNECTING,connection-reset,,,,,
Wed Aug 26 09:42:20 2020 us=419247 Restart pause, 5 second(s)
Wed Aug 26 09:42:22 2020 us=419727 SIGTERM[hard,init_instance] received, process exiting
Wed Aug 26 09:42:22 2020 us=419727 MANAGEMENT: >STATE:1598431342,EXITING,init_instance,,,,,
I can't give you server log and config as I can't get them myself - Azure don't give you access to that.
I tried swithing to UDP, but the TLS handshake fails and I don't have any port/protocol options in Azure gateway settings - at least none that I can see.
I did search the forums for this issue, but haven't found the solution yet. Wiping the client and starting over doesn't seem to help at all. I would understand that the gateway is misconfigured if it didn't work at all, but I have ~75 machines that work and 5 that used to but stopped with no changes made.
