I have an Asus RT-AC85P VPN router (connected to my Home internet) and am hosting an OpenVPN server with the settings in the screenshot below and am trying to connect to this using a GL.inet VPN router (connected to public WiFi). However when I try to connect using the client file on the VPN router I get stuck in a loop of reconnection; looking at the system log, at the bottom of the page, I can pick out that the TLS handshake failed but unsure why this would be or if this is the issue. I've also tried adding 'route-gateway 192.168.50.1' to my client config (the gateway of my Asus router) to no avail (in fact the system log provided might be one using a client config with this in). Any ideas?
Asus VPN OpenVPN TAP server settings
My client configuration is exported from the router and is listed below
remote 81.106.249.77 1194
float
nobind
proto udp
dev tap
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap
sndbuf 0
rcvbuf 0
keepalive 10 30
comp-lzo adaptive
auth-user-pass
client
auth SHA1
cipher AES-128-CBC
remote-cert-tls server
Finally here is the System Log from my Asus VPN router:
Nov 11 23:52:15 vpnserver1[931]: client/185.69.145.6:32835 [client] Inactivity timeout (--ping-restart), restarting
Nov 11 23:52:15 vpnserver1[931]: client/185.69.145.6:32835 SIGUSR1[soft,ping-restart] received, client-instance restarting
Nov 11 23:52:16 vpnserver1[931]: 185.69.145.6:60445 TLS: Initial packet from [AF_INET]185.69.145.6:60445 (via [AF_INET]81.106.249.77%eth3), sid=5b50d12d 5f87ef28
Nov 11 23:52:46 vpnserver1[931]: client/185.69.145.6:61643 [client] Inactivity timeout (--ping-restart), restarting
Nov 11 23:52:46 vpnserver1[931]: client/185.69.145.6:61643 SIGUSR1[soft,ping-restart] received, client-instance restarting
Nov 11 23:52:46 vpnserver1[931]: 185.69.145.6:36744 TLS: Initial packet from [AF_INET]185.69.145.6:36744 (via [AF_INET]81.106.249.77%eth3), sid=ab0a70dc 8a80eb48
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC85P, emailAddress=me@myhost.mydomain
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=client, emailAddress=me@myhost.mydomain
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_VER=2.5.0
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_PLAT=linux
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_PROTO=6
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_NCP=2
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM:AES-128-CBC
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_LZ4=1
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_LZ4v2=1
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_LZO_STUB=1
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_COMP_STUB=1
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_COMP_STUBv2=1
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 peer info: IV_TCPNL=1
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 PLUGIN_CALL: POST /usr/lib/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 TLS: Username/Password authentication succeeded for username 'tom'
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Nov 11 23:52:47 vpnserver1[931]: 185.69.145.6:36744 [client] Peer Connection Initiated with [AF_INET]185.69.145.6:36744 (via [AF_INET]81.106.249.77%eth3)
Nov 11 23:52:47 vpnserver1[931]: client/185.69.145.6:36744 MULTI: no dynamic or static remote --ifconfig address is available for client/185.69.145.6:36744
Nov 11 23:52:48 vpnserver1[931]: client/185.69.145.6:36744 PUSH: Received control message: 'PUSH_REQUEST'
Nov 11 23:52:48 vpnserver1[931]: client/185.69.145.6:36744 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 192.168.50.1,route-gateway dhcp,ping 10,ping-restart 30,peer-id 1,cipher AES-256-GCM' (status=1)
Nov 11 23:52:48 vpnserver1[931]: client/185.69.145.6:36744 Data Channel: using negotiated cipher 'AES-256-GCM'
Nov 11 23:52:48 vpnserver1[931]: client/185.69.145.6:36744 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 11 23:52:48 vpnserver1[931]: client/185.69.145.6:36744 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Nov 11 23:53:16 vpnserver1[931]: 185.69.145.6:60445 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 11 23:53:16 vpnserver1[931]: 185.69.145.6:60445 TLS Error: TLS handshake failed
Nov 11 23:53:16 vpnserver1[931]: 185.69.145.6:60445 SIGUSR1[soft,tls-error] received, client-instance restarting
Nov 11 23:53:28 kernel: ASSOC - 1 receive DIS-ASSOC request
Nov 11 23:53:48 vpnserver1[931]: client/185.69.145.6:36744 [client] Inactivity timeout (--ping-restart), restarting
Nov 11 23:53:48 vpnserver1[931]: client/185.69.145.6:36744 SIGUSR1[soft,ping-restart] received, client-instance restarting
Nov 11 23:54:20 kernel: ASSOC - 1 receive DIS-ASSOC request
