No traffic over link

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
rom2017
OpenVpn Newbie
Posts: 1
Joined: Fri Dec 08, 2017 1:37 am

No traffic over link

Post by rom2017 » Fri Dec 08, 2017 1:52 am

Hi all,

I'm having a very weird issue.. I'm running OpenVPN server 2.1.3 and have about 25 clients connecting to this one particular server. The server has a real public IP (no NAT), and I run OpenVPN on port 443/tcp.

All of my clients are Linux clients, installed from the latest Debian 9.x repo. They all connect with no issues, except for 2 connections and I can't work out why. The clients will auto-connect with no issue (when killed from the server, they reconnect almost immediately), and there are no errors in the logs. However, I cannot SSH or ping over the link from the OpenVPN server.

At one point these clients worked, but now they don't - its the weirdest thing. I've tried passing different options, changing the subnets, etc, but nothing - not even one packet comes back (tcpdump, for example, shows the echo requests, but no traffic back from the client). Unfortunately I can't actually logon to the client itself (that's what the VPN is for), so I'm trying different things from the server to see if I can get it work. For example:

01:49:31.248132 Out ethertype IPv4 (0x0800), length 100: 10.255.255.1 > 10.255.255.12: ICMP echo request, id 32916, seq 1, length 64
01:49:32.247779 Out ethertype IPv4 (0x0800), length 100: 10.255.255.1 > 10.255.255.12: ICMP echo request, id 32916, seq 2, length 64
01:49:33.247373 Out ethertype IPv4 (0x0800), length 100: 10.255.255.1 > 10.255.255.12: ICMP echo request, id 32916, seq 3, length 64
01:49:34.247324 Out ethertype IPv4 (0x0800), length 100: 10.255.255.1 > 10.255.255.12: ICMP echo request, id 32916, seq 4, length 64

(no replies)

Anyone have any ideas?

Thanks!

S.

Post Reply