Connecting Iphone5 Session invalidated - No datatransmission

[ThorstenTrägenap]

Hi,

I am running IOS 6.1 on IPhone 5 and OpenVPN 1.0 build 47 (iOS).
I imported various (>50) configurations and always the same problem occurs.

Short time after

2013-02-19 17:35:18 Connected via tun
2013-02-19 17:33:12 EVENT: CONNECTED @88.79.121.43:1194 (88.79.121.43) via /UDPv4 on tun/10.83.0.29/

my session will be invalidated.

2013-02-19 17:35:12 Session invalidate

I can not transmit any data over the established connection. Unfortunately changeing verb-level does not have any effect.

Where is the mistake?

Thx, Thorsten



2013-02-19 17:33:12 EVENT: CONNECTED @88.79.121.43:1194 (88.79.121.43) via /UDPv4 on tun/10.83.0.29/

2013-02-19 17:35:12 Session invalidated

2013-02-19 16:45:53 ----- OpenVPN Start -----
2013-02-19 16:45:53 LZO-ASYM init swap=0 asym=0
2013-02-19 16:45:53 EVENT: RESOLVE
2013-02-19 16:45:53 EVENT: WAIT
2013-02-19 16:45:53 Connecting to 88.79.121.43:1194 (88.79.121.43) via UDPv4
2013-02-19 16:45:54 EVENT: CONNECTING
2013-02-19 16:45:54 Tunnel Options:V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client
2013-02-19 16:45:54 Peer Info:
IV_VER=1.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2013-02-19 16:45:56 VERIFY OK: depth=0
cert. version : 3
serial number : 01
issuer name : C=DE, ST=NRW, L=Witten, O=
subject name : C=DE, ST=NRW, O=
issued on : 2006-04-19 11:51:53
expires on : 2016-04-16 11:51:53
signed using : RSA+MD5
RSA key size : 1024 bits

2013-02-19 16:45:56 VERIFY OK: depth=1
cert. version : 3
serial number : C4:76:61:11:DC:C6:B9:F0
issuer name : C=DE, ST=NRW, L=Witten, O=
subject name : C=DE, ST=NRW, L=Witten, O=
issued on : 2006-04-19 11:50:56
expires on : 2016-04-16 11:50:56
signed using : RSA+MD5
RSA key size : 1024 bits

2013-02-19 17:33:11 SSL Handshake: TLSv1.0/SSL-EDH-RSA-AES-256-SHA
2013-02-19 17:33:11 Session is ACTIVE
2013-02-19 17:33:12 EVENT: GET_CONFIG
2013-02-19 17:33:12 Sending PUSH_REQUEST to server...
2013-02-19 17:33:12 OPTIONS:
0 [route] [192.168.83.0] [255.255.255.0]
1 [route] [192.168.84.0] [255.255.255.0]
2 [route] [192.168.85.0] [255.255.255.0]
3 [route] [10.83.0.0] [255.255.255.0]
4 [topology] [net30]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [10.83.0.29] [10.83.0.30]

2013-02-19 17:33:12 LZO-ASYM init swap=0 asym=0
2013-02-19 17:33:12 EVENT: ASSIGN_IP
2013-02-19 17:33:12 Connected via tun
2013-02-19 17:33:12 EVENT: CONNECTED @88.79.121.43:1194 (88.79.121.43) via /UDPv4 on tun/10.83.0.29/

2013-02-19 17:35:12 Session invalidated
2013-02-19 17:35:12 Client terminated, restarting in 2...
2013-02-19 17:35:14 EVENT: RECONNECTING
2013-02-19 17:35:14 LZO-ASYM init swap=0 asym=0
2013-02-19 17:35:14 EVENT: RESOLVE
2013-02-19 17:35:14 EVENT: WAIT
2013-02-19 17:35:14 Connecting to 88.79.121.43:1194 (88.79.121.43) via UDPv4
2013-02-19 17:35:15 EVENT: CONNECTING
2013-02-19 17:35:15 Tunnel Options:V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client
2013-02-19 17:35:15 Peer Info:
IV_VER=1.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1

2013-02-19 17:35:16 VERIFY OK: depth=0
cert. version : 3
serial number : 01
issuer name : C=DE, ST=NRW, L=Witten, O=
subject name : C=DE, ST=NRW, O=
issued on : 2006-04-19 11:51:53
expires on : 2016-04-16 11:51:53
signed using : RSA+MD5
RSA key size : 1024 bits

2013-02-19 17:35:16 VERIFY OK: depth=1
cert. version : 3
serial number : C4:76:61:11:DC:C6:B9:F0
issuer name : C=DE, ST=NRW, L=Witten, O=....
subject name : C=DE, ST=NRW, L=Witten, O=....
issued on : 2006-04-19 11:50:56
expires on : 2016-04-16 11:50:56
signed using : RSA+MD5
RSA key size : 1024 bits

2013-02-19 17:35:16 SSL Handshake: TLSv1.0/SSL-EDH-RSA-AES-256-SHA
2013-02-19 17:35:16 Session is ACTIVE
2013-02-19 17:35:17 EVENT: GET_CONFIG
2013-02-19 17:35:17 Sending PUSH_REQUEST to server...
2013-02-19 17:35:18 OPTIONS:
0 [route] [192.168.83.0] [255.255.255.0]
1 [route] [192.168.84.0] [255.255.255.0]
2 [route] [192.168.85.0] [255.255.255.0]
3 [route] [10.83.0.0] [255.255.255.0]
4 [topology] [net30]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [10.83.0.29] [10.83.0.30]

2013-02-19 17:35:18 LZO-ASYM init swap=0 asym=0
2013-02-19 17:35:18 EVENT: ASSIGN_IP
2013-02-19 17:35:18 Connected via tun
2013-02-19 17:35:18 EVENT: CONNECTED @88.79.121.43:1194 (88.79.121.43) via /UDPv4 on tun/10.83.0.29/

[antimaterie]

I'm accounting exactly the same problem and did not solve it yet. I've the same configuration and did try endless configurations...

[antimaterie]

Hi,

I've added the client option "ping-restart 3600" and the session does not invalidated anymore. If you check you log the session invalidated at 120 seconds after connected; the same as your ping-restart value.

But I've still no data through the vpn connection (maybe add server site routing?). Also the verb option levels don't make any differences for me..