OpenVPN Support Forum

Posted: **Wed May 16, 2012 9:15 pm**

Sorry if this is a real beginner question, but I wasn't sure who to ask.

I recently set up an OpenVPN server using a DD-WRT based router. Everything seemed to be good, but I don't think I am connecting to it correctly. I can access the router via it's web interface; but when I try to connect the VPN, it doesn't work (it was hard to tell, but I verified that my IP address was not from the location of the router). The icon also shows two yellow screens which I assume is another hint.

Here is the log in case someone can help me know what is not setup correctly (I tried initiating the connection a few times). Thanks for your help.

Wed May 16 11:24:19 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed May 16 11:24:19 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 11:24:20 2012 LZO compression initialized
Wed May 16 11:24:20 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 11:24:20 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 11:24:20 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 11:24:20 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 11:24:20 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 11:24:20 2012 UDPv4 link local: [undef]
Wed May 16 11:24:20 2012 UDPv4 link remote: 50.29.226.19:1194
Wed May 16 11:25:20 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed May 16 11:25:20 2012 TLS Error: TLS handshake failed
Wed May 16 11:25:20 2012 TCP/UDP: Closing socket
Wed May 16 11:25:20 2012 SIGUSR1[soft,tls-error] received, process restarting
Wed May 16 11:25:20 2012 Restart pause, 2 second(s)
Wed May 16 11:25:22 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 11:25:22 2012 Re-using SSL/TLS context
Wed May 16 11:25:22 2012 LZO compression initialized
Wed May 16 11:25:22 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 11:25:22 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 11:25:24 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 11:25:24 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 11:25:24 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 11:25:24 2012 UDPv4 link local: [undef]
Wed May 16 11:25:24 2012 UDPv4 link remote: 50.29.226.19:1194
Wed May 16 11:26:24 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed May 16 11:26:24 2012 TLS Error: TLS handshake failed
Wed May 16 11:26:24 2012 TCP/UDP: Closing socket
Wed May 16 11:26:24 2012 SIGUSR1[soft,tls-error] received, process restarting
Wed May 16 11:26:24 2012 Restart pause, 2 second(s)
Wed May 16 11:26:26 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 11:26:26 2012 Re-using SSL/TLS context
Wed May 16 11:26:26 2012 LZO compression initialized
Wed May 16 11:26:26 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 11:26:26 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 11:26:27 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 11:26:27 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 11:26:27 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 11:26:27 2012 UDPv4 link local: [undef]
Wed May 16 11:26:27 2012 UDPv4 link remote: 50.29.226.19:1194
Wed May 16 11:27:27 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed May 16 11:27:27 2012 TLS Error: TLS handshake failed
Wed May 16 11:27:27 2012 TCP/UDP: Closing socket
Wed May 16 11:27:27 2012 SIGUSR1[soft,tls-error] received, process restarting
Wed May 16 11:27:27 2012 Restart pause, 2 second(s)
Wed May 16 11:27:29 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 11:27:29 2012 Re-using SSL/TLS context
Wed May 16 11:27:29 2012 LZO compression initialized
Wed May 16 11:27:29 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 11:27:29 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 11:27:30 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 11:27:30 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 11:27:30 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 11:27:30 2012 UDPv4 link local: [undef]
Wed May 16 11:27:30 2012 UDPv4 link remote: 50.29.226.19:1194
Wed May 16 11:28:29 2012 TCP/UDP: Closing socket
Wed May 16 11:28:29 2012 SIGTERM[hard,] received, process exiting
Wed May 16 11:28:30 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed May 16 11:28:30 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 11:28:30 2012 LZO compression initialized
Wed May 16 11:28:30 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 11:28:30 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 11:28:30 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 11:28:30 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 11:28:30 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 11:28:30 2012 UDPv4 link local: [undef]
Wed May 16 11:28:30 2012 UDPv4 link remote: 50.29.226.19:1194
Wed May 16 11:29:30 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed May 16 11:29:30 2012 TLS Error: TLS handshake failed
Wed May 16 11:29:30 2012 TCP/UDP: Closing socket
Wed May 16 11:29:30 2012 SIGUSR1[soft,tls-error] received, process restarting
Wed May 16 11:29:30 2012 Restart pause, 2 second(s)
Wed May 16 11:29:32 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 11:29:32 2012 Re-using SSL/TLS context
Wed May 16 11:29:32 2012 LZO compression initialized
Wed May 16 11:29:32 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 11:29:32 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 11:29:33 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 11:29:33 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 11:29:33 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 11:29:33 2012 UDPv4 link local: [undef]
Wed May 16 11:29:33 2012 UDPv4 link remote: 50.29.226.19:1194
Wed May 16 11:30:33 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed May 16 11:30:33 2012 TLS Error: TLS handshake failed
Wed May 16 11:30:33 2012 TCP/UDP: Closing socket
Wed May 16 11:30:33 2012 SIGUSR1[soft,tls-error] received, process restarting
Wed May 16 11:30:33 2012 Restart pause, 2 second(s)
Wed May 16 11:30:35 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 16 11:30:35 2012 Re-using SSL/TLS context
Wed May 16 11:30:35 2012 LZO compression initialized
Wed May 16 11:30:35 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 16 11:30:35 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed May 16 11:30:36 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 16 11:30:36 2012 Local Options hash (VER=V4): '41690919'
Wed May 16 11:30:36 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 16 11:30:36 2012 UDPv4 link local: [undef]
Wed May 16 11:30:36 2012 UDPv4 link remote: 50.29.226.19:1194

Posted: **Thu May 17, 2012 5:12 am**

Repeated

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

shows that your router is not accesible. Look in the correct configuration of the router. DD-WRT usually opens the VPN port incomminc, when activating OpnVPN. To be sure, use "iptables -L -v". For now, your router by IP from the log is not accesible by anymeaning.

Posted: **Sat May 19, 2012 6:10 pm**

Hello, hope I don't come off as high jacking this thread... but I am having the same exact issue and have been unable to find a solution by searching the forums. I set up my VPN on my router as the server and the client software on my computer. I was able to successfully connect for about a month and then it randomly was unable too. I restarted router, checked everything. I even changed the port from 1194 on both client and server to 443 and still had issues.

I ran the iptables command and this is what prints out.

Code: Select all

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  tun0   any     anywhere             anywhere            
    8   336 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:1194 
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:1194 
 2527  204K ACCEPT     0    --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:1194 
    0     0 ACCEPT     0    --  tun0   any     anywhere             anywhere            
    0     0 DROP       udp  --  vlan2  any     anywhere             anywhere            udp dpt:route 
    0     0 DROP       udp  --  br0    any     anywhere             anywhere            udp dpt:route 
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:route 
    0     0 logaccept  tcp  --  any    any     anywhere             NehmiaWRT           tcp dpt:https 
    1    48 logaccept  tcp  --  any    any     anywhere             NehmiaWRT           tcp dpt:ssh 
    0     0 ACCEPT     icmp --  vlan2  any     anywhere             anywhere            
   27   864 ACCEPT     igmp --  any    any     anywhere             anywhere            
    0     0 ACCEPT     udp  --  vlan2  any     anywhere             anywhere            udp dpt:5060 
    0     0 ACCEPT     0    --  lo     any     anywhere             anywhere            state NEW 
  577 62503 logaccept  0    --  br0    any     anywhere             anywhere            state NEW 
  131 34510 DROP       0    --  any    any     anywhere             anywhere            
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    3   152 ACCEPT     tcp  --  any    any     anywhere             iPad.hsd1.va.comcast.net tcp dpt:25018 
    2   119 ACCEPT     udp  --  any    any     anywhere             iPad.hsd1.va.comcast.net udp dpt:25018 
    0     0 ACCEPT     0    --  any    tun0    anywhere             anywhere            
    0     0 ACCEPT     0    --  tun0   any     anywhere             anywhere            
    0     0 ACCEPT     0    --  tun0   br0     anywhere             anywhere            
    0     0 ACCEPT     0    --  br0    tun0    anywhere             anywhere            
    0     0 ACCEPT     0    --  any    any     172.16.66.0/24       anywhere            
    0     0 ACCEPT     gre  --  any    vlan2   10.0.1.0/24          anywhere            
    0     0 ACCEPT     tcp  --  any    vlan2   10.0.1.0/24          anywhere            tcp dpt:1723 
    0     0 ACCEPT     0    --  tun0   any     anywhere             anywhere            
    0     0 ACCEPT     0    --  any    tun0    anywhere             anywhere            
    0     0 ACCEPT     0    --  br0    br0     anywhere             anywhere            
  521 27268 TCPMSS     tcp  --  any    any     anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 
 134K  129M lan2wan    0    --  any    any     anywhere             anywhere            
 133K  129M ACCEPT     0    --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  vlan2  any     anywhere             base-address.mcast.net/4 udp 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.99           udp dpt:64409 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:64526 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:64047 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:58518 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:61780 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:54443 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:54488 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:55353 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:54518 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:64886 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:62976 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:56318 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:50981 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:58961 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:53082 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:64853 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:59807 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:53441 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:50242 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:54953 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:58232 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:63398 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:61506 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:62644 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:53380 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:56655 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:64042 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:62068 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:58128 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:57614 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:55725 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:56147 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:53591 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:50442 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:56840 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:62577 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:58544 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:64783 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:52698 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:57133 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:64743 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:53507 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:65068 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:59635 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:55516 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:55762 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:55385 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:53668 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.3            udp dpt:57516 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:65283 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:echo 
    0     0 ACCEPT     tcp  --  any    any     anywhere             10.0.1.2            tcp dpt:64738 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:64738 
    0     0 ACCEPT     tcp  --  any    any     anywhere             10.0.1.2            tcp dpt:7777 
    0     0 ACCEPT     udp  --  any    any     anywhere             10.0.1.2            udp dpt:7777 
    0     0 TRIGGER    0    --  vlan2  br0     anywhere             anywhere            TRIGGER type:in match:0 relate:0 
  726 52776 trigger_out  0    --  br0    any     anywhere             anywhere            
  662 49748 ACCEPT     0    --  br0    any     anywhere             anywhere            state NEW 
   64  3028 DROP       0    --  any    any     anywhere             anywhere            
Chain OUTPUT (policy ACCEPT 4463 packets, 3680K bytes)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_1 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_10 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_2 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_3 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_4 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_5 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_6 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_7 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_8 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_9 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_1 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_10 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_2 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_3 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_4 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_5 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_6 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_7 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_8 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_9 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain lan2wan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain logaccept (3 references)
 pkts bytes target     prot opt in     out     source               destination         
  578 62551 LOG        0    --  any    any     anywhere             anywhere            state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `ACCEPT ' 
  578 62551 ACCEPT     0    --  any    any     anywhere             anywhere            
Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  any    any     anywhere             anywhere            state NEW LOG level warning tcp-sequence tcp-options ip-options prefix `DROP ' 
    0     0 LOG        0    --  any    any     anywhere             anywhere            state INVALID LOG level warning tcp-sequence tcp-options ip-options prefix `DROP ' 
    0     0 DROP       0    --  any    any     anywhere             anywhere            
Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        0    --  any    any     anywhere             anywhere            LOG level warning tcp-sequence tcp-options ip-options prefix `WEBDROP ' 
    0     0 REJECT     tcp  --  any    any     anywhere             anywhere            tcp reject-with tcp-reset 
Chain trigger_out (1 references)
 pkts bytes target     prot opt in     out     source               destination

Please let me know if this is ok to post here, or if I should make a new thread.

OpenVPN Support Forum

Can't connect to VPN

Can't connect to VPN

Re: Can't connect to VPN

Re: Can't connect to VPN