TLS ERROR

[kormoranos]

Hello all ,

Can you help me please with issue ? I tun Open vpn client from a pc behind TMG to a remote site . the error is the following :

Wed Mar 02 12:10:42 2011 OpenVPN 2.1_rc19 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Jul 16 2009
Wed Mar 02 12:10:42 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Mar 02 12:10:42 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Mar 02 12:10:53 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Mar 02 12:10:53 2011 LZO compression initialized
Wed Mar 02 12:10:53 2011 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Wed Mar 02 12:10:53 2011 Control Channel MTU parms [ L:1442 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Mar 02 12:10:53 2011 Data Channel MTU parms [ L:1442 D:1442 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 02 12:10:53 2011 Local Options hash (VER=V4): 'a6ae7d69'
Wed Mar 02 12:10:53 2011 Expected Remote Options hash (VER=V4): '006a55ce'
Wed Mar 02 12:10:53 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Mar 02 12:10:53 2011 UDPv4 link local (bound): [undef]:1194
Wed Mar 02 12:10:53 2011 UDPv4 link remote: xxxxxxxxx:1194
Wed Mar 02 12:11:54 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Mar 02 12:11:54 2011 TLS Error: TLS handshake failed
Wed Mar 02 12:11:54 2011 TCP/UDP: Closing socket
Wed Mar 02 12:11:54 2011 SIGUSR1[soft,tls-error] received, process restarting
Wed Mar 02 12:11:54 2011 Restart pause, 2 second(s)

-Open vpn Server is ok couse i can connect from another site
-I have already opened 1194 port on TMG
-no firewall on client
-TMG supports NAT not ROUTE
-traffic simulator on TMG seems fine
Allowed Traffic
Denied Traffic - destination URL host name could not be resolved
Rule Name: INTERNAL ALLCLIENTS ********VPN Access
Rule Order: 47

Additional information
From: Internal
To: External
Network Rule Name: Internet Access
Network Relationship: NAT
Protocol: OpenVPN

Can anyone advise please ??

[janjust]

this

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

almost always suggests that a router or firewall is dropping packets somewhere along the way; try switch to 'mode tcp' to see if that helps.

[kormoranos]

thank you for your reply!

that is from the configuration of the client or from the properties of the server ? Because i do not own the server side only the client side i can manage.

thanks in advance

[janjust]

you will need to change both the client and the server. talk to your server admin, perhaps {s}he's already running a tcp-based instance.