CONNECTION_TIMEOUT [ERR] DISCONNECTED

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
saint_sal
OpenVpn Newbie
Posts: 2
Joined: Thu Aug 06, 2015 4:34 pm

CONNECTION_TIMEOUT [ERR] DISCONNECTED

Post by saint_sal » Thu Aug 06, 2015 5:28 pm

Hi,

I'm new to this, following the bbc-click VPN ( using a raspberry pi2) i decided to make my own.
So bought a PI2 and started following these steps
http://readwrite.com/2014/04/11/buildin ... lient-side

my Issue: unable to connect my IOS device to the VPN using openVPN.

Server conf:

Code: Select all

local 192.168.X.X # SWAP THIS NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/My_RaspBarry.crt # SWAP XX WITH YOUR SERVER NAME
key /etc/openvpn/easy-rsa/keys/My_RaspBarry.key # SWAP XX WITH YOUR SERVER NAME
dh /etc/openvpn/easy-rsa/keys/dh2048.pem # IF YOU CHANGED YOUR ENCRYPTION TO 2048, CHANGE THAT HERE
server 10.8.0.0 255.255.255.0
ifconfig 10.X.X.X 10.X.X.X
push "route 10.X.X.X 255.255.255.255"
push "route 10.X.X.X 255.255.255.0"
push "route 192.X.X.X 255.255.255.0" # SWAP THE IP NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
push "dhcp-option DNS 192.168X.X.X" # THIS SHOULD ALREADY MATCH YOUR OWN ROUTER ADDRESS AND SHOULD NOT NEED TO BE CHANGED
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1
Client conf:

Code: Select all

client
dev tun
proto udp
remote 192.168.X.X
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replace-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1
mute 20
<ca>
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIJALvoLN.......
-----END CERTIFICATE-----
<cert>
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIB......
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,....
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
9db8eab1d887....
-----END OpenVPN Static key V1-----
</tls-auth>
OPENVPN IOS log:

Code: Select all

2015-08-06 13:10:02 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2015-08-06 13:10:02 UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
8 [mute-replay-warnings]
13 [verb] [1]
14 [mute] [20]

2015-08-06 13:10:02 EVENT: RESOLVE
2015-08-06 13:10:02 LZO-ASYM init swap=0 asym=0
2015-08-06 13:10:02 Contacting 80.44.178.21:1194 via UDP
2015-08-06 13:10:02 EVENT: WAIT
2015-08-06 13:10:02 SetTunnelSocket returned 1
2015-08-06 13:10:02 Connecting to saliou.ddns.net:1194 (80.44.178.21) via UDPv4
2015-08-06 13:10:12 Server poll timeout, trying next remote entry...
2015-08-06 13:10:12 EVENT: RECONNECTING
2015-08-06 13:10:12 LZO-ASYM init swap=0 asym=0
2015-08-06 13:10:12 Contacting 80.44.178.21:1194 via UDP
2015-08-06 13:10:12 EVENT: WAIT
2015-08-06 13:10:12 SetTunnelSocket returned 1
2015-08-06 13:10:12 Connecting to saliou.ddns.net:1194 (80.44.178.21) via UDPv4
2015-08-06 13:10:22 Server poll timeout, trying next remote entry...
2015-08-06 13:10:22 EVENT: RECONNECTING
2015-08-06 13:10:22 LZO-ASYM init swap=0 asym=0
2015-08-06 13:10:22 Contacting 80.44.178.21:1194 via UDP
2015-08-06 13:10:22 EVENT: WAIT
2015-08-06 13:10:22 SetTunnelSocket returned 1
2015-08-06 13:10:22 Connecting to saliou.ddns.net:1194 (80.44.178.21) via UDPv4
2015-08-06 13:10:32 Server poll timeout, trying next remote entry...
2015-08-06 13:10:32 EVENT: RECONNECTING
2015-08-06 13:10:32 LZO-ASYM init swap=0 asym=0
2015-08-06 13:10:32 Contacting 80.44.178.21:1194 via UDP
2015-08-06 13:10:32 EVENT: WAIT
2015-08-06 13:10:32 SetTunnelSocket returned 1
2015-08-06 13:10:32 Connecting to saliou.ddns.net:1194 (80.44.178.21) via UDPv4
2015-08-06 13:10:42 Server poll timeout, trying next remote entry...
2015-08-06 13:10:42 EVENT: RECONNECTING
2015-08-06 13:10:42 LZO-ASYM init swap=0 asym=0
2015-08-06 13:10:42 Contacting 80.44.178.21:1194 via UDP
2015-08-06 13:10:42 EVENT: WAIT
2015-08-06 13:10:42 SetTunnelSocket returned 1
2015-08-06 13:10:42 Connecting to saliou.ddns.net:1194 (80.44.178.21) via UDPv4
2015-08-06 13:10:52 Server poll timeout, trying next remote entry...
2015-08-06 13:10:52 EVENT: RECONNECTING
2015-08-06 13:10:52 LZO-ASYM init swap=0 asym=0
2015-08-06 13:10:52 Contacting 80.44.178.21:1194 via UDP
2015-08-06 13:10:52 EVENT: WAIT
2015-08-06 13:10:52 SetTunnelSocket returned 1
2015-08-06 13:10:52 Connecting to saliou.ddns.net:1194 (80.44.178.21) via UDPv4
2015-08-06 13:11:02 EVENT: CONNECTION_TIMEOUT [ERR]
2015-08-06 13:11:02 EVENT: DISCONNECTED
2015-08-06 13:11:02 Raw stats on disconnect:
  BYTES_OUT : 420
  PACKETS_OUT : 30
  CONNECTION_TIMEOUT : 1
  N_RECONNECT : 5
2015-08-06 13:11:02 Performance stats on disconnect:
  CPU usage (microseconds): 34332
  Network bytes per CPU second: 12233
  Tunnel bytes per CPU second: 0
2015-08-06 13:11:02 EVENT: DISCONNECT_PENDING
2015-08-06 13:11:02 ----- OpenVPN Stop -----


Please can you guide as of, why i am not able to connect?

Thanks in advance for all your comments

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: CONNECTION_TIMEOUT [ERR] DISCONNECTED

Post by Traffic » Fri Aug 07, 2015 8:21 pm

saint_sal wrote:following the bbc-click VPN ( using a raspberry pi2) i decided to make my own.
So bought a PI2 and started following these steps
http://readwrite.com/2014/04/11/buildin ... lient-side
Did you try the official HOWTO: For OpenVPN Community Edition ?

Also, don't do this:
  • NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

saint_sal
OpenVpn Newbie
Posts: 2
Joined: Thu Aug 06, 2015 4:34 pm

Re: CONNECTION_TIMEOUT [ERR] DISCONNECTED

Post by saint_sal » Mon Aug 10, 2015 3:54 pm

Thanks for the reply, i will look to change my local IP to something more suitable, based on the config files and log provided above, is that the only hurdle noticed?

please bear in mind that i am learning networking with this personal project, so i might be clueless to some terminologies...
i have a maths background, IT was never my strongest suit...

Post Reply