Initial packet from

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
kosder1908
OpenVpn Newbie
Posts: 6
Joined: Fri Mar 20, 2015 6:45 pm

Initial packet from

Post by kosder1908 » Fri Mar 20, 2015 6:49 pm

Hello to all,

i set up openvpn server and client configuration files with ssl keys correctly (i think).
my connection on server is succesful but when i try to connect from android mobile phone i see on the status of server the following messages:

Fri Mar 20 20:46:10 2015 5.203.94.101:1194 TLS: Initial packet from [AF_INET]5.203.**.***:1194, sid=d6d3a282 79960bf3
Fri Mar 20 20:47:10 2015 5.203.94.101:1194 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

because the server side netword is complicated the above error is from server or client?
i think tha the packet arrives on server from client but not from server to client.

Could you please help?
I dont post the conf. files because i am sure tha the error is on network

thank u

Kostas

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Initial packet from

Post by maikcat » Sat Mar 21, 2015 4:31 pm

hello kostas, (greek?) :)

TLS errors usually reveal network filtering....
my connection on server is succesful but when i try to connect from android mobile phone i see on the status of server the following messages:
your connection on server from where?another pc?
if yes then i believe its android mobile phone side problem...

Michael.

kosder1908
OpenVpn Newbie
Posts: 6
Joined: Fri Mar 20, 2015 6:45 pm

Re: Initial packet from

Post by kosder1908 » Sat Mar 21, 2015 4:37 pm

yes i am greek.
να μιλησουμε ελληνικα;

kosder1908
OpenVpn Newbie
Posts: 6
Joined: Fri Mar 20, 2015 6:45 pm

Re: Initial packet from

Post by kosder1908 » Sat Mar 21, 2015 11:41 pm

hello again michali,

because i am from yesterday to this and it must be solved i post you the network

server side.

i connect to the loal intranet from work and the employments have set a proxy http server because we want to connect to the internet. the pc which is the proxy have been bridged with the interface of local intranet.
So:

the local intranet uses the following ip addresses 172.18.27.0/24, the proxy machine 172.18.27.28 with port 3389 and my workstation 172.18.27.89
the router which we use have an ip 192.168.1.1 and 192.168.1.132 for proxy server which bridged with 172.18.27.28

i opend the port 11194 udp/local ip 172.18.27.89 and i set a route on 192.168.1.1 "172.18.2.89 255.255.255.255 192.168.1.132"

Could you please help me?

i forgot to tell you that never i connected to server side but i think with above log file that the paccket arrives on server but it dont get back.
if you want and you know i post you config filos both server and client sides

thank u.

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Initial packet from

Post by maikcat » Sun Mar 22, 2015 5:21 pm

first, i would like to write greek here but since this a public forum i would
prefer to keep it in english in case another member wants to help...

due of the complexity of your network i would simply advise for start to switch
to tcp for easier troubleshoot,keep in mind that if you switch to tcp you can telnet
to openvpn port and see if you get a response back..

also you can always use tcpdump on both server/client fro troubleshooting..

Michael.

kosder1908
OpenVpn Newbie
Posts: 6
Joined: Fri Mar 20, 2015 6:45 pm

Re: Initial packet from

Post by kosder1908 » Mon Mar 23, 2015 12:56 pm

thank u,

i think tha the problem is on the server side. i want to connect from server through proxy but on the settings to gui write only the proxy address and port not username and password.

Do you know how to configure with username/password

kosder1908
OpenVpn Newbie
Posts: 6
Joined: Fri Mar 20, 2015 6:45 pm

Re: Initial packet from

Post by kosder1908 » Wed Mar 25, 2015 9:04 am

Hello,

I can ping from server to client but i cant from client to server

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Initial packet from

Post by maikcat » Wed Mar 25, 2015 10:34 am

I can ping from server to client but i cant from client to server
Good morning from rainy athens,

unless you NAT somewhere in your setup its possibly a firewall blocking
incoming traffic on your server...

again tcpdump is your friend ;)

Michael

kosder1908
OpenVpn Newbie
Posts: 6
Joined: Fri Mar 20, 2015 6:45 pm

Re: Initial packet from

Post by kosder1908 » Wed Mar 25, 2015 1:46 pm

Hello michalis,

I set it up by tcp protocol, i did trace route to server and was blocked from first step so the packets dont arrive to gateway..maybe the problem is on routing,,is it useful or necessary to add a static route.i post you results in ten minutes.
Thanks for advice, greek mind is always open and clever

Post Reply