Netgear R7500 V2 & OpenVPN

spacemanspiff

Hi all. I had successfully used Netgear's built in OpenVPN server on my R7500 router for several years.

Just recently it stopped working and I now receive the following errors:

Wed Dec 23 09:39:38 2020 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Wed Dec 23 09:39:38 2020 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.

Here's the configuration file:

client
dev tap
proto udp
dev-node NETGEAR-VPN
remote x.x.x 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 0
sndbuf 393216
rcvbuf 393216
auth-nocache
remote-cert-tls server

I'm using OpenVPN 2.5.

I tried posting about this over on the Netgear community but got nothing.

Any thoughts?

Thanks!

denis8991

That's interesting - I started my setup today with v2.5 and these were a couple of the entries in my log. Look forward to seeing if anyone knows how to resolve this.

TinCanTech

Just ignore those messages.

spacemanspiff

TinCanTech wrote Just ignore those messages.

I would but it doesn't connect, haha!

TinCanTech

spacemanspiff wrote
TinCanTech wrote Just ignore those messages.
I would but it doesn't connect, haha!

Maybe so but not because of those messages.

spacemanspiff

TinCanTech wrote
spacemanspiff wrote
TinCanTech wrote Just ignore those messages.
I would but it doesn't connect, haha!
Maybe so but not because of those messages.

Any thoughts as to why it's not working then?

TinCanTech

Your logs will have the answer but not at --verb 0

spacemanspiff

Here's the log at verb 4

2020-12-24 08:57:27 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2020-12-24 08:57:27 us=96022 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
2020-12-24 08:57:27 us=97020 Current Parameter Settings:
2020-12-24 08:57:27 us=97020   config = 'client.ovpn'
2020-12-24 08:57:27 us=97020   mode = 0
2020-12-24 08:57:27 us=97020   show_ciphers = DISABLED
2020-12-24 08:57:27 us=97020   show_digests = DISABLED
2020-12-24 08:57:27 us=97020   show_engines = DISABLED
2020-12-24 08:57:27 us=97020   genkey = DISABLED
2020-12-24 08:57:27 us=97020   genkey_filename = '[UNDEF]'
2020-12-24 08:57:27 us=97020   key_pass_file = '[UNDEF]'
2020-12-24 08:57:27 us=97020   show_tls_ciphers = DISABLED
2020-12-24 08:57:27 us=97020   connect_retry_max = 0
2020-12-24 08:57:27 us=97020 Connection profiles [0]:
2020-12-24 08:57:27 us=97020   proto = udp
2020-12-24 08:57:27 us=97020   local = '[UNDEF]'
2020-12-24 08:57:27 us=97020   local_port = '[UNDEF]'
2020-12-24 08:57:27 us=97020   remote = 'x.x.x'
2020-12-24 08:57:27 us=97020   remote_port = '12974'
2020-12-24 08:57:27 us=97020   remote_float = DISABLED
2020-12-24 08:57:27 us=97020   bind_defined = DISABLED
2020-12-24 08:57:27 us=97020   bind_local = DISABLED
2020-12-24 08:57:27 us=97020   bind_ipv6_only = DISABLED
2020-12-24 08:57:27 us=97020   connect_retry_seconds = 5
2020-12-24 08:57:27 us=97020   connect_timeout = 120
2020-12-24 08:57:27 us=97020   socks_proxy_server = '[UNDEF]'
2020-12-24 08:57:27 us=97020   socks_proxy_port = '[UNDEF]'
2020-12-24 08:57:27 us=97020   tun_mtu = 1500
2020-12-24 08:57:27 us=97020   tun_mtu_defined = ENABLED
2020-12-24 08:57:27 us=97020   link_mtu = 1500
2020-12-24 08:57:27 us=97020   link_mtu_defined = DISABLED
2020-12-24 08:57:27 us=97020   tun_mtu_extra = 32
2020-12-24 08:57:27 us=97020   tun_mtu_extra_defined = ENABLED
2020-12-24 08:57:27 us=97020   mtu_discover_type = -1
2020-12-24 08:57:27 us=97020   fragment = 0
2020-12-24 08:57:27 us=97020   mssfix = 1450
2020-12-24 08:57:27 us=97020   explicit_exit_notification = 0
2020-12-24 08:57:27 us=97020   tls_auth_file = '[UNDEF]'
2020-12-24 08:57:27 us=97020   key_direction = not set
2020-12-24 08:57:27 us=97020   tls_crypt_file = '[UNDEF]'
2020-12-24 08:57:27 us=97020   tls_crypt_v2_file = '[UNDEF]'
2020-12-24 08:57:27 us=97020 Connection profiles END
2020-12-24 08:57:27 us=97020   remote_random = DISABLED
2020-12-24 08:57:27 us=97020   ipchange = '[UNDEF]'
2020-12-24 08:57:27 us=97020   dev = 'tap'
2020-12-24 08:57:27 us=97020   dev_type = '[UNDEF]'
2020-12-24 08:57:27 us=97020   dev_node = 'NETGEAR-VPN'
2020-12-24 08:57:27 us=97020   lladdr = '[UNDEF]'
2020-12-24 08:57:27 us=97020   topology = 1
2020-12-24 08:57:27 us=97020   ifconfig_local = '[UNDEF]'
2020-12-24 08:57:27 us=97020   ifconfig_remote_netmask = '[UNDEF]'
2020-12-24 08:57:27 us=97020   ifconfig_noexec = DISABLED
2020-12-24 08:57:27 us=97020   ifconfig_nowarn = DISABLED
2020-12-24 08:57:27 us=97020   ifconfig_ipv6_local = '[UNDEF]'
2020-12-24 08:57:27 us=97020   ifconfig_ipv6_netbits = 0
2020-12-24 08:57:27 us=97020   ifconfig_ipv6_remote = '[UNDEF]'
2020-12-24 08:57:27 us=97020   shaper = 0
2020-12-24 08:57:27 us=97020   mtu_test = 0
2020-12-24 08:57:27 us=97020   mlock = DISABLED
2020-12-24 08:57:27 us=97020   keepalive_ping = 0
2020-12-24 08:57:27 us=97020   keepalive_timeout = 0
2020-12-24 08:57:27 us=97020   inactivity_timeout = 0
2020-12-24 08:57:27 us=97020   ping_send_timeout = 0
2020-12-24 08:57:27 us=97020   ping_rec_timeout = 0
2020-12-24 08:57:27 us=97020   ping_rec_timeout_action = 0
2020-12-24 08:57:27 us=97020   ping_timer_remote = DISABLED
2020-12-24 08:57:27 us=97020   remap_sigusr1 = 0
2020-12-24 08:57:27 us=97020   persist_tun = ENABLED
2020-12-24 08:57:27 us=97020   persist_local_ip = DISABLED
2020-12-24 08:57:27 us=97020   persist_remote_ip = DISABLED
2020-12-24 08:57:27 us=97020   persist_key = ENABLED
2020-12-24 08:57:27 us=97020   passtos = DISABLED
2020-12-24 08:57:27 us=98020   resolve_retry_seconds = 1000000000
2020-12-24 08:57:27 us=98020   resolve_in_advance = DISABLED
2020-12-24 08:57:27 us=98020   username = '[UNDEF]'
2020-12-24 08:57:27 us=98020   groupname = '[UNDEF]'
2020-12-24 08:57:27 us=98020   chroot_dir = '[UNDEF]'
2020-12-24 08:57:27 us=98020   cd_dir = '[UNDEF]'
2020-12-24 08:57:27 us=98020   writepid = '[UNDEF]'
2020-12-24 08:57:27 us=98020   up_script = '[UNDEF]'
2020-12-24 08:57:27 us=98020   down_script = '[UNDEF]'
2020-12-24 08:57:27 us=98020   down_pre = DISABLED
2020-12-24 08:57:27 us=98020   up_restart = DISABLED
2020-12-24 08:57:27 us=98020   up_delay = DISABLED
2020-12-24 08:57:27 us=98020   daemon = DISABLED
2020-12-24 08:57:27 us=98020   inetd = 0
2020-12-24 08:57:27 us=98020   log = ENABLED
2020-12-24 08:57:27 us=98020   suppress_timestamps = DISABLED
2020-12-24 08:57:27 us=98020   machine_readable_output = DISABLED
2020-12-24 08:57:27 us=98020   nice = 0
2020-12-24 08:57:27 us=98020   verbosity = 4
2020-12-24 08:57:27 us=98020   mute = 0
2020-12-24 08:57:27 us=98020   gremlin = 0
2020-12-24 08:57:27 us=98020   status_file = '[UNDEF]'
2020-12-24 08:57:27 us=98020   status_file_version = 1
2020-12-24 08:57:27 us=98020   status_file_update_freq = 60
2020-12-24 08:57:27 us=98020   occ = ENABLED
2020-12-24 08:57:27 us=98020   rcvbuf = 393216
2020-12-24 08:57:27 us=98020   sndbuf = 393216
2020-12-24 08:57:27 us=98020   sockflags = 0
2020-12-24 08:57:27 us=98020   fast_io = DISABLED
2020-12-24 08:57:27 us=98020   comp.alg = 2
2020-12-24 08:57:27 us=98020   comp.flags = 1
2020-12-24 08:57:27 us=98020   route_script = '[UNDEF]'
2020-12-24 08:57:27 us=98020   route_default_gateway = '[UNDEF]'
2020-12-24 08:57:27 us=98020   route_default_metric = 0
2020-12-24 08:57:27 us=98020   route_noexec = DISABLED
2020-12-24 08:57:27 us=98020   route_delay = 5
2020-12-24 08:57:27 us=98020   route_delay_window = 30
2020-12-24 08:57:27 us=98020   route_delay_defined = ENABLED
2020-12-24 08:57:27 us=98020   route_nopull = DISABLED
2020-12-24 08:57:27 us=98020   route_gateway_via_dhcp = DISABLED
2020-12-24 08:57:27 us=98020   allow_pull_fqdn = DISABLED
2020-12-24 08:57:27 us=98020   Pull filters:
2020-12-24 08:57:27 us=98020     ignore "route-method"
2020-12-24 08:57:27 us=98020   management_addr = '127.0.0.1'
2020-12-24 08:57:27 us=98020   management_port = '25340'
2020-12-24 08:57:27 us=98020   management_user_pass = 'stdin'
2020-12-24 08:57:27 us=98020   management_log_history_cache = 250
2020-12-24 08:57:27 us=98020   management_echo_buffer_size = 100
2020-12-24 08:57:27 us=98020   management_write_peer_info_file = '[UNDEF]'
2020-12-24 08:57:27 us=98020   management_client_user = '[UNDEF]'
2020-12-24 08:57:27 us=98020   management_client_group = '[UNDEF]'
2020-12-24 08:57:27 us=98020   management_flags = 6
2020-12-24 08:57:27 us=98020   shared_secret_file = '[UNDEF]'
2020-12-24 08:57:27 us=98020   key_direction = not set
2020-12-24 08:57:27 us=98020   ciphername = 'AES-128-CBC'
2020-12-24 08:57:27 us=98020   ncp_enabled = ENABLED
2020-12-24 08:57:27 us=98020   ncp_ciphers = 'AES-256-GCM:AES-128-GCM:AES-128-CBC'
2020-12-24 08:57:27 us=98020   authname = 'SHA1'
2020-12-24 08:57:27 us=98020   prng_hash = 'SHA1'
2020-12-24 08:57:27 us=98020   prng_nonce_secret_len = 16
2020-12-24 08:57:27 us=98020   keysize = 0
2020-12-24 08:57:27 us=98020   engine = DISABLED
2020-12-24 08:57:27 us=98020   replay = ENABLED
2020-12-24 08:57:27 us=98020   mute_replay_warnings = DISABLED
2020-12-24 08:57:27 us=98020   replay_window = 64
2020-12-24 08:57:27 us=98020   replay_time = 15
2020-12-24 08:57:27 us=98020   packet_id_file = '[UNDEF]'
2020-12-24 08:57:27 us=98020   test_crypto = DISABLED
2020-12-24 08:57:27 us=98020   tls_server = DISABLED
2020-12-24 08:57:27 us=98020   tls_client = ENABLED
2020-12-24 08:57:27 us=98020   ca_file = 'ca.crt'
2020-12-24 08:57:27 us=98020   ca_path = '[UNDEF]'
2020-12-24 08:57:27 us=98020   dh_file = '[UNDEF]'
2020-12-24 08:57:27 us=98020   cert_file = 'client.crt'
2020-12-24 08:57:27 us=98020   extra_certs_file = '[UNDEF]'
2020-12-24 08:57:27 us=98020   priv_key_file = 'client.key'
2020-12-24 08:57:27 us=98020   pkcs12_file = '[UNDEF]'
2020-12-24 08:57:27 us=98020   cryptoapi_cert = '[UNDEF]'
2020-12-24 08:57:27 us=99020   cipher_list = '[UNDEF]'
2020-12-24 08:57:27 us=99020   cipher_list_tls13 = '[UNDEF]'
2020-12-24 08:57:27 us=99020   tls_cert_profile = '[UNDEF]'
2020-12-24 08:57:27 us=99020   tls_verify = '[UNDEF]'
2020-12-24 08:57:27 us=99020   tls_export_cert = '[UNDEF]'
2020-12-24 08:57:27 us=99020   verify_x509_type = 0
2020-12-24 08:57:27 us=99020   verify_x509_name = '[UNDEF]'
2020-12-24 08:57:27 us=99020   crl_file = '[UNDEF]'
2020-12-24 08:57:27 us=99020   ns_cert_type = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 65535
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_ku[i] = 0
2020-12-24 08:57:27 us=99020   remote_cert_eku = 'TLS Web Server Authentication'
2020-12-24 08:57:27 us=99020   ssl_flags = 0
2020-12-24 08:57:27 us=99020   tls_timeout = 2
2020-12-24 08:57:27 us=99020   renegotiate_bytes = -1
2020-12-24 08:57:27 us=99020   renegotiate_packets = 0
2020-12-24 08:57:27 us=99020   renegotiate_seconds = 3600
2020-12-24 08:57:27 us=99020   handshake_window = 60
2020-12-24 08:57:27 us=99020   transition_window = 3600
2020-12-24 08:57:27 us=99020   single_session = DISABLED
2020-12-24 08:57:27 us=99020   push_peer_info = DISABLED
2020-12-24 08:57:27 us=99020   tls_exit = DISABLED
2020-12-24 08:57:27 us=99020   tls_crypt_v2_metadata = '[UNDEF]'
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_protected_authentication = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_private_mode = 00000000
2020-12-24 08:57:27 us=99020   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=99020   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_cert_private = DISABLED
2020-12-24 08:57:27 us=100018   pkcs11_pin_cache_period = -1
2020-12-24 08:57:27 us=100018   pkcs11_id = '[UNDEF]'
2020-12-24 08:57:27 us=100018   pkcs11_id_management = DISABLED
2020-12-24 08:57:27 us=100018   server_network = 0.0.0.0
2020-12-24 08:57:27 us=100018   server_netmask = 0.0.0.0
2020-12-24 08:57:27 us=100018   server_network_ipv6 = ::
2020-12-24 08:57:27 us=100018   server_netbits_ipv6 = 0
2020-12-24 08:57:27 us=100018   server_bridge_ip = 0.0.0.0
2020-12-24 08:57:27 us=100018   server_bridge_netmask = 0.0.0.0
2020-12-24 08:57:27 us=100018   server_bridge_pool_start = 0.0.0.0
2020-12-24 08:57:27 us=100018   server_bridge_pool_end = 0.0.0.0
2020-12-24 08:57:27 us=100018   ifconfig_pool_defined = DISABLED
2020-12-24 08:57:27 us=100018   ifconfig_pool_start = 0.0.0.0
2020-12-24 08:57:27 us=100018   ifconfig_pool_end = 0.0.0.0
2020-12-24 08:57:27 us=100018   ifconfig_pool_netmask = 0.0.0.0
2020-12-24 08:57:27 us=100018   ifconfig_pool_persist_filename = '[UNDEF]'
2020-12-24 08:57:27 us=100018   ifconfig_pool_persist_refresh_freq = 600
2020-12-24 08:57:27 us=100018   ifconfig_ipv6_pool_defined = DISABLED
2020-12-24 08:57:27 us=100018   ifconfig_ipv6_pool_base = ::
2020-12-24 08:57:27 us=100018   ifconfig_ipv6_pool_netbits = 0
2020-12-24 08:57:27 us=100018   n_bcast_buf = 256
2020-12-24 08:57:27 us=100018   tcp_queue_limit = 64
2020-12-24 08:57:27 us=100018   real_hash_size = 256
2020-12-24 08:57:27 us=100018   virtual_hash_size = 256
2020-12-24 08:57:27 us=100018   client_connect_script = '[UNDEF]'
2020-12-24 08:57:27 us=100018   learn_address_script = '[UNDEF]'
2020-12-24 08:57:27 us=100018   client_disconnect_script = '[UNDEF]'
2020-12-24 08:57:27 us=100018   client_config_dir = '[UNDEF]'
2020-12-24 08:57:27 us=100018   ccd_exclusive = DISABLED
2020-12-24 08:57:27 us=100018   tmp_dir = 'C:\Users\oabbo\AppData\Local\Temp\'
2020-12-24 08:57:27 us=100018   push_ifconfig_defined = DISABLED
2020-12-24 08:57:27 us=100018   push_ifconfig_local = 0.0.0.0
2020-12-24 08:57:27 us=100018   push_ifconfig_remote_netmask = 0.0.0.0
2020-12-24 08:57:27 us=100018   push_ifconfig_ipv6_defined = DISABLED
2020-12-24 08:57:27 us=100018   push_ifconfig_ipv6_local = ::/0
2020-12-24 08:57:27 us=100018   push_ifconfig_ipv6_remote = ::
2020-12-24 08:57:27 us=100018   enable_c2c = DISABLED
2020-12-24 08:57:27 us=100018   duplicate_cn = DISABLED
2020-12-24 08:57:27 us=100018   cf_max = 0
2020-12-24 08:57:27 us=100018   cf_per = 0
2020-12-24 08:57:27 us=100018   max_clients = 1024
2020-12-24 08:57:27 us=100018   max_routes_per_client = 256
2020-12-24 08:57:27 us=100018   auth_user_pass_verify_script = '[UNDEF]'
2020-12-24 08:57:27 us=100018   auth_user_pass_verify_script_via_file = DISABLED
2020-12-24 08:57:27 us=100018   auth_token_generate = DISABLED
2020-12-24 08:57:27 us=100018   auth_token_lifetime = 0
2020-12-24 08:57:27 us=100018   auth_token_secret_file = '[UNDEF]'
2020-12-24 08:57:27 us=100018   vlan_tagging = DISABLED
2020-12-24 08:57:27 us=100018   vlan_accept = all
2020-12-24 08:57:27 us=100018   vlan_pvid = 1
2020-12-24 08:57:27 us=100018   client = ENABLED
2020-12-24 08:57:27 us=100018   pull = ENABLED
2020-12-24 08:57:27 us=100018   auth_user_pass_file = '[UNDEF]'
2020-12-24 08:57:27 us=100018   show_net_up = DISABLED
2020-12-24 08:57:27 us=100018   route_method = 3
2020-12-24 08:57:27 us=100018   block_outside_dns = DISABLED
2020-12-24 08:57:27 us=100018   ip_win32_defined = DISABLED
2020-12-24 08:57:27 us=100018   ip_win32_type = 3
2020-12-24 08:57:27 us=100018   dhcp_masq_offset = 0
2020-12-24 08:57:27 us=100018   dhcp_lease_time = 31536000
2020-12-24 08:57:27 us=100018   tap_sleep = 0
2020-12-24 08:57:27 us=100018   dhcp_options = DISABLED
2020-12-24 08:57:27 us=100018   dhcp_renew = DISABLED
2020-12-24 08:57:27 us=101019   dhcp_pre_release = DISABLED
2020-12-24 08:57:27 us=101019   domain = '[UNDEF]'
2020-12-24 08:57:27 us=101019   netbios_scope = '[UNDEF]'
2020-12-24 08:57:27 us=101019   netbios_node_type = 0
2020-12-24 08:57:27 us=101019   disable_nbt = DISABLED
2020-12-24 08:57:27 us=101019 OpenVPN 2.5.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 28 2020
2020-12-24 08:57:27 us=101019 Windows version 10.0 (Windows 10 or greater) 64bit
2020-12-24 08:57:27 us=101019 library versions: OpenSSL 1.1.1h  22 Sep 2020, LZO 2.10
Enter Management Password:
2020-12-24 08:57:27 us=102018 MANAGEMENT: TCP Socket listening on [AF_INET]xxx.x.x.x:xxxxx
2020-12-24 08:57:27 us=102018 Need hold release from management interface, waiting...
2020-12-24 08:57:27 us=493794 MANAGEMENT: Client connected from [AF_INET]xxx.x.x.x:xxxxx
2020-12-24 08:57:27 us=601731 MANAGEMENT: CMD 'state on'
2020-12-24 08:57:27 us=601731 MANAGEMENT: CMD 'log all on'
2020-12-24 08:57:27 us=908557 MANAGEMENT: CMD 'echo all on'
2020-12-24 08:57:27 us=911555 MANAGEMENT: CMD 'bytecount 5'
2020-12-24 08:57:27 us=913553 MANAGEMENT: CMD 'hold off'
2020-12-24 08:57:27 us=915552 MANAGEMENT: CMD 'hold release'
2020-12-24 08:57:27 us=919552 LZO compression initializing
2020-12-24 08:57:27 us=920552 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2020-12-24 08:57:27 us=920552 MANAGEMENT: >STATE:1608818247,RESOLVE,,,,,,
2020-12-24 08:57:27 us=958773 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
2020-12-24 08:57:27 us=958773 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2020-12-24 08:57:27 us=958773 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2020-12-24 08:57:27 us=958773 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 08:57:27 us=958773 Socket Buffers: R=[65536->393216] S=[65536->393216]
2020-12-24 08:57:27 us=958773 UDP link local: (not bound)
2020-12-24 08:57:27 us=958773 UDP link remote: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 08:57:27 us=958773 MANAGEMENT: >STATE:1608818247,WAIT,,,,,,
2020-12-24 08:58:27 us=659304 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2020-12-24 08:58:27 us=659304 TLS Error: TLS handshake failed
2020-12-24 08:58:27 us=659304 TCP/UDP: Closing socket
2020-12-24 08:58:27 us=659304 SIGUSR1[soft,tls-error] received, process restarting
2020-12-24 08:58:27 us=659304 MANAGEMENT: >STATE:1608818307,RECONNECTING,tls-error,,,,,
2020-12-24 08:58:27 us=659304 Restart pause, 5 second(s)
2020-12-24 08:58:32 us=699231 Re-using SSL/TLS context
2020-12-24 08:58:32 us=699231 LZO compression initializing
2020-12-24 08:58:32 us=699231 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2020-12-24 08:58:32 us=699231 MANAGEMENT: >STATE:1608818312,RESOLVE,,,,,,
2020-12-24 08:58:32 us=719007 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
2020-12-24 08:58:32 us=719007 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2020-12-24 08:58:32 us=719007 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2020-12-24 08:58:32 us=719007 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 08:58:32 us=719007 Socket Buffers: R=[65536->393216] S=[65536->393216]
2020-12-24 08:58:32 us=719007 UDP link local: (not bound)
2020-12-24 08:58:32 us=719007 UDP link remote: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 08:58:32 us=719007 MANAGEMENT: >STATE:1608818312,WAIT,,,,,,
2020-12-24 08:59:33 us=105825 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2020-12-24 08:59:33 us=105825 TLS Error: TLS handshake failed
2020-12-24 08:59:33 us=105825 TCP/UDP: Closing socket
2020-12-24 08:59:33 us=105825 SIGUSR1[soft,tls-error] received, process restarting
2020-12-24 08:59:33 us=105825 MANAGEMENT: >STATE:1608818373,RECONNECTING,tls-error,,,,,
2020-12-24 08:59:33 us=105825 Restart pause, 5 second(s)
2020-12-24 08:59:38 us=147255 Re-using SSL/TLS context
2020-12-24 08:59:38 us=147255 LZO compression initializing
2020-12-24 08:59:38 us=147255 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2020-12-24 08:59:38 us=147255 MANAGEMENT: >STATE:1608818378,RESOLVE,,,,,,
2020-12-24 08:59:38 us=167550 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
2020-12-24 08:59:38 us=167550 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2020-12-24 08:59:38 us=167550 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2020-12-24 08:59:38 us=167550 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 08:59:38 us=167550 Socket Buffers: R=[65536->393216] S=[65536->393216]
2020-12-24 08:59:38 us=167550 UDP link local: (not bound)
2020-12-24 08:59:38 us=167550 UDP link remote: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 08:59:38 us=167550 MANAGEMENT: >STATE:1608818378,WAIT,,,,,,
2020-12-24 09:00:38 us=225314 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2020-12-24 09:00:38 us=225314 TLS Error: TLS handshake failed
2020-12-24 09:00:38 us=225314 TCP/UDP: Closing socket
2020-12-24 09:00:38 us=225314 SIGUSR1[soft,tls-error] received, process restarting
2020-12-24 09:00:38 us=225314 MANAGEMENT: >STATE:1608818438,RECONNECTING,tls-error,,,,,
2020-12-24 09:00:38 us=225314 Restart pause, 5 second(s)
2020-12-24 09:00:43 us=260205 Re-using SSL/TLS context
2020-12-24 09:00:43 us=260205 LZO compression initializing
2020-12-24 09:00:43 us=260205 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2020-12-24 09:00:43 us=260205 MANAGEMENT: >STATE:1608818443,RESOLVE,,,,,,
2020-12-24 09:00:43 us=281583 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
2020-12-24 09:00:43 us=281583 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2020-12-24 09:00:43 us=281583 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2020-12-24 09:00:43 us=281583 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 09:00:43 us=281583 Socket Buffers: R=[65536->393216] S=[65536->393216]
2020-12-24 09:00:43 us=281583 UDP link local: (not bound)
2020-12-24 09:00:43 us=281583 UDP link remote: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 09:00:43 us=281583 MANAGEMENT: >STATE:1608818443,WAIT,,,,,,
2020-12-24 09:01:43 us=969990 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2020-12-24 09:01:43 us=969990 TLS Error: TLS handshake failed
2020-12-24 09:01:43 us=969990 TCP/UDP: Closing socket
2020-12-24 09:01:43 us=969990 SIGUSR1[soft,tls-error] received, process restarting
2020-12-24 09:01:43 us=969990 MANAGEMENT: >STATE:1608818503,RECONNECTING,tls-error,,,,,
2020-12-24 09:01:43 us=969990 Restart pause, 5 second(s)
2020-12-24 09:01:48 us=992823 Re-using SSL/TLS context
2020-12-24 09:01:48 us=992823 LZO compression initializing
2020-12-24 09:01:48 us=992823 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2020-12-24 09:01:48 us=992823 MANAGEMENT: >STATE:1608818508,RESOLVE,,,,,,
2020-12-24 09:01:49 us=14616 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
2020-12-24 09:01:49 us=14616 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2020-12-24 09:01:49 us=14616 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2020-12-24 09:01:49 us=14616 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 09:01:49 us=14616 Socket Buffers: R=[65536->393216] S=[65536->393216]
2020-12-24 09:01:49 us=14616 UDP link local: (not bound)
2020-12-24 09:01:49 us=14616 UDP link remote: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 09:01:49 us=14616 MANAGEMENT: >STATE:1608818509,WAIT,,,,,,
2020-12-24 09:02:50 us=5134 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2020-12-24 09:02:50 us=5134 TLS Error: TLS handshake failed
2020-12-24 09:02:50 us=5134 TCP/UDP: Closing socket
2020-12-24 09:02:50 us=5134 SIGUSR1[soft,tls-error] received, process restarting
2020-12-24 09:02:50 us=5134 MANAGEMENT: >STATE:1608818570,RECONNECTING,tls-error,,,,,
2020-12-24 09:02:50 us=5134 Restart pause, 10 second(s)
2020-12-24 09:03:00 us=102823 Re-using SSL/TLS context
2020-12-24 09:03:00 us=102823 LZO compression initializing
2020-12-24 09:03:00 us=102823 Control Channel MTU parms [ L:1654 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2020-12-24 09:03:00 us=102823 MANAGEMENT: >STATE:1608818580,RESOLVE,,,,,,
2020-12-24 09:03:00 us=124109 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
2020-12-24 09:03:00 us=124109 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2020-12-24 09:03:00 us=124109 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2020-12-24 09:03:00 us=124109 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 09:03:00 us=124109 Socket Buffers: R=[65536->393216] S=[65536->393216]
2020-12-24 09:03:00 us=124109 UDP link local: (not bound)
2020-12-24 09:03:00 us=124109 UDP link remote: [AF_INET]xxx.xx.x.xx:xxxxx
2020-12-24 09:03:00 us=124109 MANAGEMENT: >STATE:1608818580,WAIT,,,,,,
2020-12-24 09:03:02 us=87752 TCP/UDP: Closing socket
2020-12-24 09:03:02 us=87752 SIGTERM[hard,] received, process exiting
2020-12-24 09:03:02 us=87752 MANAGEMENT: >STATE:1608818582,EXITING,SIGTERM,,,,,

TinCanTech

And your server log ?

spacemanspiff

I'm not sure how to get that since the server is my router.

spacemanspiff

Found the server log:

[OpenVPN, connection fail] from remote IP address: 192.168.1.28, Thursday, December 24, 2020 09:01:43
[OpenVPN, connection fail] from remote IP address: 192.168.1.28, Thursday, December 24, 2020 09:00:38
[OpenVPN, connection fail] from remote IP address: 192.168.1.28, Thursday, December 24, 2020 08:59:32
[OpenVPN, connection fail] from remote IP address: 192.168.1.28, Thursday, December 24, 2020 08:58:28

TinCanTech

Again .. --verb on the server config .....

spacemanspiff

Any suggestion on how to get a netgear router to show detailed logs?

TinCanTech

Edit the server config .. add verb 4

spacemanspiff

I don't know how to get to that either, haha.

TinCanTech

Sorry, I can't help .. try reading the manual for your router ..

spacemanspiff

This isn't my router, but the options are the same.

You have to scroll down a little.

https://www.google.com/url?sa=i&url=https%3A%2F%2Fcommunity.netgear.com%2Ft5%2FNighthawk-WiFi-Routers%2FNighthawk-R8500-VPN-setup%2Ftd-p%2F1344275&psig=AOvVaw0I876kCrGGuxVci9CyKKUs&ust=1608911916081000&source=images&cd=vfe&ved=0CAIQjRxqFwoTCOCr74z-5u0CFQAAAAAdAAAAABAD

TinCanTech

I've done all I can do. Without the server log you are completely screwed.

spacemanspiff

Ok so I fixed it, I changed from UDP to TCP.

Are there any other implications to change I should be aware of?

TinCanTech

Find out where/how your router store the openvpn server config. Or ask Netgear .. I can't help you.