cannot connect to access server

aminbaik

hello,
i have installed open vpn access server on centos vps the server is start aslo i tryied to run test and it's give me everythings are ok.
when i tried to access to server througe openvpn client it's give me always connection.
so what's the problem?
if i have to post a log from where i can get it ?
thanks.

aminbaik

hello,
please note that i just do this step to complete installation:
1- vefity tun tab driver
2- download the openvpn for centos
3- install it.
4- change openvpn usr password.
5- go to admin page and confirm that the server is runing
6- install openvpn client
7- try to conncect
i check the open vpn clinet log and i see this log:
Tue Feb 21 15:51:21 2012 OpenVPNAS 2.1.8OAS Win32-MSVC++ [SSL] [LZO2] built on Aug 4 2011
Tue Feb 21 15:51:21 2012 MANAGEMENT: Connected to management server at 127.0.0.1:36981
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'state on'
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'echo on'
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'bytecount 5'
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'hold off'
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'hold release'
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'username "Auth" "openvpn"'
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'password [...]'
Tue Feb 21 15:51:21 2012 MANAGEMENT: CMD 'remote ACCEPT'
Tue Feb 21 15:51:22 2012 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 21 15:51:23 2012 Control Channel Authentication: tls-auth using INLINE static key file
Tue Feb 21 15:51:23 2012 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:51:23 2012 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:51:23 2012 Socket Buffers: R=[8192->100000] S=[8192->100000]
Tue Feb 21 15:51:23 2012 UDPv4 link local: [undef]
Tue Feb 21 15:51:23 2012 UDPv4 link remote: 208.67.18.35:1194
Tue Feb 21 15:51:23 2012 MANAGEMENT: >STATE:1329832283,WAIT,,,
Tue Feb 21 15:51:23 2012 MANAGEMENT: >STATE:1329832283,AUTH,,,
Tue Feb 21 15:51:23 2012 TLS: Initial packet from 208.67.18.35:1194, sid=f0dd7fe9 8dc9f0df
Tue Feb 21 15:52:23 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 21 15:52:23 2012 TLS Error: TLS handshake failed
Tue Feb 21 15:52:23 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 21 15:52:23 2012 MANAGEMENT: >STATE:1329832343,RECONNECTING,tls-error,,
Tue Feb 21 15:52:23 2012 Restart pause, 2 second(s)
Tue Feb 21 15:52:25 2012 MANAGEMENT: CMD 'username "Auth" "openvpn"'
Tue Feb 21 15:52:25 2012 MANAGEMENT: CMD 'password [...]'
Tue Feb 21 15:52:25 2012 MANAGEMENT: CMD 'remote ACCEPT'
Tue Feb 21 15:52:26 2012 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 21 15:52:26 2012 Control Channel Authentication: tls-auth using INLINE static key file
Tue Feb 21 15:52:26 2012 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:52:26 2012 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:52:26 2012 Socket Buffers: R=[8192->100000] S=[8192->100000]
Tue Feb 21 15:52:26 2012 UDPv4 link local: [undef]
Tue Feb 21 15:52:26 2012 UDPv4 link remote: 208.67.18.35:1194
Tue Feb 21 15:52:26 2012 MANAGEMENT: >STATE:1329832346,WAIT,,,
Tue Feb 21 15:52:26 2012 MANAGEMENT: >STATE:1329832346,AUTH,,,
Tue Feb 21 15:52:26 2012 TLS: Initial packet from 208.67.18.35:1194, sid=38a690ba dc3e5627
Tue Feb 21 15:53:26 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 21 15:53:26 2012 TLS Error: TLS handshake failed
Tue Feb 21 15:53:26 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 21 15:53:26 2012 MANAGEMENT: >STATE:1329832406,RECONNECTING,tls-error,,
Tue Feb 21 15:53:26 2012 Restart pause, 2 second(s)
Tue Feb 21 15:53:28 2012 MANAGEMENT: CMD 'username "Auth" "openvpn"'
Tue Feb 21 15:53:28 2012 MANAGEMENT: CMD 'password [...]'
Tue Feb 21 15:53:28 2012 MANAGEMENT: CMD 'remote ACCEPT'
Tue Feb 21 15:53:29 2012 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 21 15:53:29 2012 Control Channel Authentication: tls-auth using INLINE static key file
Tue Feb 21 15:53:29 2012 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:53:29 2012 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:53:29 2012 Socket Buffers: R=[8192->100000] S=[8192->100000]
Tue Feb 21 15:53:29 2012 Attempting to establish TCP connection with 208.67.18.35:443
Tue Feb 21 15:53:29 2012 MANAGEMENT: >STATE:1329832409,TCP_CONNECT,,,
Tue Feb 21 15:53:29 2012 TCP connection established with 208.67.18.35:443
Tue Feb 21 15:53:29 2012 TCPv4_CLIENT link local: [undef]
Tue Feb 21 15:53:29 2012 TCPv4_CLIENT link remote: 208.67.18.35:443
Tue Feb 21 15:53:29 2012 MANAGEMENT: >STATE:1329832409,WAIT,,,
Tue Feb 21 15:53:29 2012 MANAGEMENT: >STATE:1329832409,AUTH,,,
Tue Feb 21 15:53:29 2012 TLS: Initial packet from 208.67.18.35:443, sid=a3f67d87 22e47db4
Tue Feb 21 15:54:18 2012 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)
Tue Feb 21 15:54:18 2012 Connection reset, restarting [-1]
Tue Feb 21 15:54:18 2012 SIGUSR1[soft,connection-reset] received, process restarting
Tue Feb 21 15:54:18 2012 MANAGEMENT: >STATE:1329832458,RECONNECTING,connection-reset,,
Tue Feb 21 15:54:18 2012 Restart pause, 5 second(s)
Tue Feb 21 15:54:23 2012 MANAGEMENT: CMD 'username "Auth" "openvpn"'
Tue Feb 21 15:54:23 2012 MANAGEMENT: CMD 'password [...]'
Tue Feb 21 15:54:23 2012 MANAGEMENT: CMD 'remote ACCEPT'
Tue Feb 21 15:54:24 2012 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 21 15:54:24 2012 Control Channel Authentication: tls-auth using INLINE static key file
Tue Feb 21 15:54:24 2012 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:54:24 2012 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:54:24 2012 Socket Buffers: R=[8192->100000] S=[8192->100000]
Tue Feb 21 15:54:24 2012 UDPv4 link local: [undef]
Tue Feb 21 15:54:24 2012 UDPv4 link remote: 208.67.18.35:1194
Tue Feb 21 15:54:24 2012 MANAGEMENT: >STATE:1329832464,WAIT,,,
Tue Feb 21 15:54:25 2012 MANAGEMENT: >STATE:1329832465,AUTH,,,
Tue Feb 21 15:54:25 2012 TLS: Initial packet from 208.67.18.35:1194, sid=5d7efec5 d86fdf83
Tue Feb 21 15:55:24 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 21 15:55:24 2012 TLS Error: TLS handshake failed
Tue Feb 21 15:55:24 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 21 15:55:24 2012 MANAGEMENT: >STATE:1329832524,RECONNECTING,tls-error,,
Tue Feb 21 15:55:24 2012 Restart pause, 2 second(s)
Tue Feb 21 15:55:26 2012 MANAGEMENT: CMD 'username "Auth" "openvpn"'
Tue Feb 21 15:55:26 2012 MANAGEMENT: CMD 'password [...]'
Tue Feb 21 15:55:26 2012 MANAGEMENT: CMD 'remote ACCEPT'
Tue Feb 21 15:55:27 2012 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 21 15:55:27 2012 Control Channel Authentication: tls-auth using INLINE static key file
Tue Feb 21 15:55:27 2012 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:55:27 2012 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 21 15:55:27 2012 Socket Buffers: R=[8192->100000] S=[8192->100000]
Tue Feb 21 15:55:27 2012 UDPv4 link local: [undef]
Tue Feb 21 15:55:27 2012 UDPv4 link remote: 208.67.18.35:1194
Tue Feb 21 15:55:27 2012 MANAGEMENT: >STATE:1329832527,WAIT,,,
Tue Feb 21 15:55:28 2012 MANAGEMENT: >STATE:1329832528,AUTH,,,
Tue Feb 21 15:55:28 2012 TLS: Initial packet from 208.67.18.35:1194, sid=a27753c0 fb1c2706

so what i have to do ?
thanks,

aminbaik

hello,
i tried to connect througe ssto and use openvpn over it its work fine.
so the isp is block somting how i can know it and bypass it regarding the log above?
i think the problem is with tls ! is there any way to bypass it ?
thanks,

aminbaik

hello,
i installed the community openvn and the same problem is happen !
thanks.

aminbaik

hello
i tried to install openvpn access server and also tried to install community version in both if i tried to connect from my local isp it give me this error:
TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS handshake failed
but when i tried to connect to server througe sstp or out of my country it's work fine
so the configration is correct and the server is work fine and the problem from my isp
i tried to use port 80 and 443 and 445 but noting changed.

the crazy thing that i can use openvpn from private tunnel company so the isp is not block the openvpn software.
so where do u think the problem ?
thanks.

mozart

Does OpenVPN Access use port 1194 as the command line version does? Probably need to NAT that port open?

aminbaik

sorry idont understand. what do u want me to do ?
in general its use only port 443 or 80 or 445 ....

AhAdComesIn

i have the same problem, i think TLS in blocked in our country ? is any way to bypass this TLS thing?

Mimiko

aminbaik, does your OpenVPN AS configured to leasten on port 1194, as the client is trying to connect? Is the port 1194 forwarded thru the firewall?