Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
-
- OpenVpn Newbie
- Posts: 4
- Joined: Fri Aug 04, 2023 7:40 pm
Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
I've tried it on three diffferent Windows computers and one MacOS one.
Maybe the problem is in a conflict with the server. I'm connecting to an Untangle 16.6.2 NG Firewall (now Arista NG Firewall).
OpenVPN Connect v. 3.3.7 on Windows works fine (I can't find where to download the previous version for MacOS).
Please ask for any log files that may help. I don't even know where they are.
Maybe the problem is in a conflict with the server. I'm connecting to an Untangle 16.6.2 NG Firewall (now Arista NG Firewall).
OpenVPN Connect v. 3.3.7 on Windows works fine (I can't find where to download the previous version for MacOS).
Please ask for any log files that may help. I don't even know where they are.
-
- OpenVpn Newbie
- Posts: 1
- Joined: Mon Aug 07, 2023 7:08 am
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
for us its every 30 - 31 seconds.
Only windows, only as far as we can see the latest version, multiple sites, multiple users
Only windows, only as far as we can see the latest version, multiple sites, multiple users
- JosephS
- OpenVPN Inc.
- Posts: 54
- Joined: Fri Feb 17, 2023 5:15 pm
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
Hi,
Can you check the client logs and share the latest EVENT before the VPN disconnects?
It may provide some insight as to what may be causing the constant disconnect.
Can you check the client logs and share the latest EVENT before the VPN disconnects?
It may provide some insight as to what may be causing the constant disconnect.
-
- OpenVpn Newbie
- Posts: 1
- Joined: Mon Aug 07, 2023 12:21 pm
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
Hi,
Fixed this by adding the following custom options to the client configuration:
allow-compression asym
compress lz4
Then exclude the default compress option in the client configuration too.
Redeploy the openvpn config file to clients.
More details can be found here:
https://community.openvpn.net/openvpn/wiki/Compression
Hope this helps...
Fixed this by adding the following custom options to the client configuration:
allow-compression asym
compress lz4
Then exclude the default compress option in the client configuration too.
Redeploy the openvpn config file to clients.
More details can be found here:
https://community.openvpn.net/openvpn/wiki/Compression
Hope this helps...
-
- OpenVpn Newbie
- Posts: 4
- Joined: Fri Aug 04, 2023 7:40 pm
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
Here are the lines showing the disconnection (sensible information replaced with xxxxxx)
After that, it will connect again, and round and round it goes.
Oh, and you're right: it's mnore like every 30 seconds.
Code: Select all
⏎[Aug 11, 2023, 05:02:35] Connected via TUN_WIN
⏎[Aug 11, 2023, 05:02:35] LZO-ASYM init swap=0 asym=1
⏎[Aug 11, 2023, 05:02:35] Comp-stub init swap=0
⏎[Aug 11, 2023, 05:02:35] EVENT: CONNECTED xxxxxxxxxxxxxxxxxxxxx via /UDP on TUN_WIN/xxxxxxxxxx/ gw=[xxxxxxxxx/] mtu=(default)
⏎[Aug 11, 2023, 05:02:35] EVENT: COMPRESSION_ENABLED Asymmetric compression enabled. Server may send compressed data. This may be a potential security issue.
⏎[Aug 11, 2023, 05:03:04] Session invalidated: KEEPALIVE_TIMEOUT
⏎[Aug 11, 2023, 05:03:04] Client terminated, restarting in 2000 ms...
⏎[Aug 11, 2023, 05:03:04] SetupClient: signaling tun destroy event
⏎[Aug 11, 2023, 05:03:06] EVENT: RECONNECTING
⏎[Aug 11, 2023, 05:03:06] EVENT: RESOLVE
⏎[Aug 11, 2023, 05:03:06] Contacting xxxxxxxxxxx via UDP
⏎[Aug 11, 2023, 05:03:06] EVENT: WAIT
⏎[Aug 11, 2023, 05:03:06] WinCommandAgent: transmitting bypass route to xxxxxxxxxxxx
Oh, and you're right: it's mnore like every 30 seconds.
-
- OpenVpn Newbie
- Posts: 4
- Joined: Fri Aug 04, 2023 7:40 pm
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
Thanks for the suggestion.alb_73 wrote: ↑Mon Aug 07, 2023 12:25 pmHi,
Fixed this by adding the following custom options to the client configuration:
allow-compression asym
compress lz4
Then exclude the default compress option in the client configuration too.
Redeploy the openvpn config file to clients.
More details can be found here:
https://community.openvpn.net/openvpn/wiki/Compression
Hope this helps...
I hope the developers can find a better solution. I don't want to think of manually edit 50+ employees setup... I'd rather stay in 3.3.7, which works fine.
-
- OpenVpn Newbie
- Posts: 4
- Joined: Fri Aug 04, 2023 7:40 pm
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
OpenVPN support tells me we have to deal with Arista (Untangle).
-
- OpenVpn Newbie
- Posts: 1
- Joined: Sat Dec 16, 2023 6:00 am
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
Thank you man, this fixed my problem on iPhone.
alb_73 wrote: ↑Mon Aug 07, 2023 12:25 pmHi,
Fixed this by adding the following custom options to the client configuration:
allow-compression asym
compress lz4
Then exclude the default compress option in the client configuration too.
Redeploy the openvpn config file to clients.
More details can be found here:
https://community.openvpn.net/openvpn/wiki/Compression
Hope this helps...
-
- OpenVpn Newbie
- Posts: 1
- Joined: Wed Dec 20, 2023 6:45 pm
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
alb_73 wrote: ↑Mon Aug 07, 2023 12:25 pmHi,
Fixed this by adding the following custom options to the client configuration:
allow-compression asym
compress lz4
Then exclude the default compress option in the client configuration too.
Redeploy the openvpn config file to clients.
More details can be found here:
https://community.openvpn.net/openvpn/wiki/Compression
Hope this helps...
this fixed the issue with client 3.4 on both windows and mac.
- openvpn_inc
- OpenVPN Inc.
- Posts: 1332
- Joined: Tue Feb 16, 2021 10:41 am
Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds
Hello,
Just wanted to leave a message of caution. The solutions suggested here include re-enabling compression. At least to allow data from the server side to arrive encrypted. While in some cases you may not have control over the server side configuration, and this may help to at least get connected again, I want to point out the danger of using compression at all. The VORACLE vulnerability exists when compression and encryption are used at the same time. Therefore efforts are made to phase compression out of OpenVPN altogether. Just thought you should know so that, for those that are able to, they can look into making sure the server side does not do compression and cause this issue anymore.
Kind regards,
Johan
Just wanted to leave a message of caution. The solutions suggested here include re-enabling compression. At least to allow data from the server side to arrive encrypted. While in some cases you may not have control over the server side configuration, and this may help to at least get connected again, I want to point out the danger of using compression at all. The VORACLE vulnerability exists when compression and encryption are used at the same time. Therefore efforts are made to phase compression out of OpenVPN altogether. Just thought you should know so that, for those that are able to, they can look into making sure the server side does not do compression and cause this issue anymore.
Kind regards,
Johan
OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support