OpenvVPN with Synology - Stopped connecting

[toolmaker2011]

Good morning guys,

About 3 weeks I got OpenVPN up and running with my Synology with surprisingly little effort. I travel for work and love being able to log in and browse the synology as a network as if I'm sitting at home. But as of this morning I can no longer connect, as far as I can tell nothing has changed. My synology and router IP have not changed. See picture of the error. Any help will be greatly appreciated!

https://ibb.co/myT20Zt

Kevin

[TinCanTech]

See your server log

[toolmaker2011]

I'm sure this isn't what you are looking for, so please explain where to find the log you are looking for if it isn't.

Thanks in advance.

https://ibb.co/mXH38QX

[toolmaker2011]

The crazy thing is I can't even connect from my local network. When I was getting set up at first that was absolutely no problem, obviously didn't require router ports to be opened up, etc. I did see another forum with yesterday's date with a guy have the same "soft,tls-error", is it something on OpenVPN's end? Its just so bizarre because i have literally changed nothing from April 2nd to today and this has happened.

Kevin

[Pippin]

Activate SSH in DSM, login through SSH with admin account.

Then enter following:

Code: Select all

echo log /var/log/openvpn.log > /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf

Code: Select all

echo verb 4 > /usr/syno/etc/packages/VPNCenter/openvpn/openvpn.conf

Code: Select all

sh /var/packages/VPNCenter/target/scripts/openvpn.sh restart

To read the log:

Code: Select all

cat /var/log/openvpn.log

[toolmaker2011]

Ok my SSH was already enabled. Where am I to copy / paste those 4 lines?

Kevin

[Pippin]

https://www.howtogeek.com/311287/how-to ... -or-linux/

[toolmaker2011]

https://ibb.co/ZTThyXc

[TinCanTech]

"Permission denied" ..

[toolmaker2011]

Yeah I see that. There must be a logical explanation. Nothing has changed since Apr. 2nd???

[Pippin]

After logging in as admin try

Code: Select all

sudo -i

and enter admin password again.
Synology probably changed something as I`m running older version of DSM...

Otherwise search for "login ssh root synology" or something similar.

[toolmaker2011]

https://ibb.co/YpqzwkC

[toolmaker2011]

Forgive me, I may need baby steps to get through PuTTY. I'm pretty tech savvy, but not so much with networks.

But not only do I love the fact that I can (could) log in remotely, I also have an upcoming job for a local small business setting up their network which I have on order a DS218+ along with 2 4TB Red's so I need to get this figured out

Kevin

[Pippin]

I see some strange output, I would advice to reinstall VPN Server package, configure new and reexport client configuration.

[toolmaker2011]

I just uninstalled then reinstalled the openvpn package, and exported the new files. I then went ahead and uninstalled openvpn on my laptop, and deleted the openvpn directory. Then reinstalled openvpn, moved over the files (I did update the IP) and I'm getting the identical soft, tls-error.

Kevin

[Pippin]

Did you check port forward on router?
Rule for OpenVPN added in DSM firewall?
Perhaps your ISP changed something on their network?

[toolmaker2011]

Yes I have port forwarding set up on my router, even though that really shouldn't matter right now since i'm connected to the router with my laptop (at least that was my experience during initial setup).
I hadn't added the exception to the firewall since reinstalling, but I just did and unfortunately didn't help
I had checked my IP and it is the same...

[Pippin]

Please try connecting from outside your network, phone hotspot or something...

[toolmaker2011]

That worked!!! WTF!

I guess I still need to be able to connect from within my network though, what gives?

Kevin

[Pippin]

Why connect to your own VPN when on your own network?
Search for "what is nat loopback"