Debugging iOS requests timing out on Cellular data

[johnryan]

Hello!

I've been trying to get OpenVPN set up so I can access my home network from my phone. I've made a lot of progress but am stuck.

Currently I'm able to connect via the OpenVPN Connect app whether on wifi or cellular, but when on cellular the ip addresses don't connect. Safari just shows a spinner and the request just never resolves (though this seems to be the same behavior whether the vpn is connected or not).

I'm using the 172.16.x.x subnet - are there any recommendations for how I can debug this issue or suggestions for what may be wrong?

Edit: Adding more of the config

Code: Select all

dev tun
tls-client

remote xxxxxx 1194

# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)

#float

# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

#redirect-gateway def1

# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.

# dhcp-option DNS xxx

pull

# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto udp

script-security 2


comp-lzo

reneg-sec 0

cipher AES-256-CBC

auth SHA512

auth-user-pass
<ca>
//CERTIFICATE

</ca>

Thanks!

[elena56brown]

Hi there!
It sounds like you've made great progress with setting up OpenVPN on your phone. Let's see if we can figure out why it's not working over cellular.

Here are a few suggestions to help debug the issue:

Check Cellular Network Settings: Some cellular networks have restrictions or issues with maintaining a data connection during a voice call. Ensure that your phone isn't trying to handle a call while connected to the VPN.

Disable IPv6: Sometimes, IPv6 can cause connectivity issues. Try disabling IPv6 on your phone and see if that resolves the problem2.

Firewall and Ports: Ensure that the necessary ports (1194 for UDP) are open on your firewall and not being blocked. You might need to check with your carrier if they block certain ports.

Stealth or Obfuscation: Some cellular networks might block VPN traffic. Using stealth or obfuscation settings in your OpenVPN configuration might help bypass these restrictions.

Restart Devices: Sometimes, simply restarting both your phone and the VPN server can resolve connectivity issues.

Check DNS Settings: Ensure that your DNS settings are correctly configured in your OpenVPN client. Sometimes, incorrect DNS settings can cause connectivity issues.