Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm using OpenVPN Client 1.5.6 and use Windows 8.1 64-bit. The switch and router is running in Gigabit speed. But the connection to the VPN server goes up and down all the time (TAP-Win32 Adapter OAS).

It worked great yesterday when I was working from home with a 100 Mbit/s switch.

I have tried the following:

  1. I tried to upgrade my Network drivers (Realtek PCIe GBE Family Controller) to the latest version (8.24.1218.2013) but the same problem still remains.
  2. I have also tried to lower the network speed on my NIC driver, first to 100 Mbps Full Duplex and then 10 Mbps Full Duplex, but it had no effect.

It seem as though the VPN Server sends a reconnect signal: "server-pushed-connection-reset" again and again.

Here is a part of the OpenVPN Log file:

Tue Feb 11 14:03:47 2014 MANAGEMENT: >STATE:1392123827,RECONNECTING,server-pushed-connection-reset,,
Tue Feb 11 14:03:47 2014 Restart pause, 1 second(s)
Tue Feb 11 14:03:48 2014 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Tue Feb 11 14:03:49 2014 MANAGEMENT: CMD 'username "Auth" "xxx"'
Tue Feb 11 14:03:49 2014 MANAGEMENT: CMD 'password [...]'
Tue Feb 11 14:03:49 2014 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 11 14:03:49 2014 Control Channel Authentication: tls-auth using INLINE static key file
Tue Feb 11 14:03:49 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:49 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:49 2014 LZO compression initialized
Tue Feb 11 14:03:49 2014 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Feb 11 14:03:49 2014 Socket Buffers: R=[65536->100000] S=[65536->100000]
Tue Feb 11 14:03:49 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Feb 11 14:03:49 2014 Local Options hash (VER=V4): '504e774e'
Tue Feb 11 14:03:49 2014 Expected Remote Options hash (VER=V4): '14168603'
Tue Feb 11 14:03:49 2014 NOTE: setsockopt TCP_NODELAY=1 failed
Tue Feb 11 14:03:49 2014 UDPv4 link local: [undef]
Tue Feb 11 14:03:49 2014 UDPv4 link remote: 212.181.120.117:1194
Tue Feb 11 14:03:49 2014 MANAGEMENT: >STATE:1392123829,WAIT,,,
Tue Feb 11 14:03:49 2014 MANAGEMENT: >STATE:1392123829,AUTH,,,
Tue Feb 11 14:03:49 2014 TLS: Initial packet from 212.181.120.117:1194, sid=b570b8f8 26241d4e
Tue Feb 11 14:03:49 2014 VERIFY OK: depth=1, /CN=OpenVPN_CA
Tue Feb 11 14:03:49 2014 VERIFY OK: nsCertType=SERVER
Tue Feb 11 14:03:49 2014 VERIFY OK: depth=0, /CN=OpenVPN_Server
Tue Feb 11 14:03:49 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 14:03:49 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:49 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 14:03:49 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:49 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Feb 11 14:03:49 2014 [OpenVPN_Server] Peer Connection Initiated with 212.181.120.117:1194
Tue Feb 11 14:03:50 2014 MANAGEMENT: >STATE:1392123830,GET_CONFIG,,,
Tue Feb 11 14:03:52 2014 SENT CONTROL [OpenVPN_Server]: 'PUSH_REQUEST' (status=1)
Tue Feb 11 14:03:52 2014 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 5,ping-restart 40,redirect-private local,redirect-private bypass-dhcp,route-gateway 5.5.15.1,route 5.5.3.0 255.255.255.0,route 10.201.36.95,route 10.201.36.168,route 10.201.36.169,route 5.5.14.0 255.255.255.0,route 5.5.0.0 255.255.255.0,route 10.200.129.21,route 10.200.129.22,route 5.5.2.0 255.255.255.0,route 192.168.210.44,route 5.5.13.0 255.255.255.0,route 5.5.11.0 255.255.255.0,route 5.5.4.0 255.255.255.0,route 5.5.10.0 255.255.255.0,route 212.28.194.162,route 212.28.194.163,route 212.28.194.183,route 212.28.194.144,route 5.5.8.0 255.255.255.0,route 5.5.12.0 255.255.255.0,route 5.5.9.0 255.255.255.0,route 5.5.7.0 255.255.255.0,route 5.5.6.0 255.255.255.0,route 5.5.5.0 255.255.255.0,route 212.28.216.10,route 212.28.216.39,route 5.5.1.0 255.255.255.0,dhcp-option DNS 10.200.129.21,dhcp-option DNS 10.200.129.22,push-continuation 2'
Tue Feb 11 14:03:52 2014 PUSH: Received control message: 'PUSH_REPLY,register-dns,comp-lzo yes,ifconfig 5.5.15.123 255.255.255.0,push-continuation 1'
Tue Feb 11 14:03:52 2014 OPTIONS IMPORT: LZO parms modified
Tue Feb 11 14:03:52 2014 OPTIONS IMPORT: --ifconfig/up options modified
Tue Feb 11 14:03:52 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Feb 11 14:03:52 2014 ROUTE default_gateway=10.80.20.1
Tue Feb 11 14:03:52 2014 ROUTE: bypass_host_route[0]=10.80.10.5
Tue Feb 11 14:03:52 2014 MANAGEMENT: >STATE:1392123832,ASSIGN_IP,,5.5.15.123,
Tue Feb 11 14:03:52 2014 TAP-WIN32 device [Anslutning till lokalt nätverk 3] opened: \\.\Global\{DFACB12B-3025-4010-80AC-23B7DEBB1C19}.tap
Tue Feb 11 14:03:52 2014 TAP-Win32 Driver Version 9.7 
Tue Feb 11 14:03:52 2014 TAP-Win32 MTU=1500
Tue Feb 11 14:03:52 2014 Set TAP-Win32 TUN subnet mode network/local/netmask = 5.5.15.0/5.5.15.123/255.255.255.0 [SUCCEEDED]
Tue Feb 11 14:03:52 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 5.5.15.123/255.255.255.0 on interface {DFACB12B-3025-4010-80AC-23B7DEBB1C19} [DHCP-serv: 5.5.15.254, lease-time: 31536000]
Tue Feb 11 14:03:52 2014 Successful ARP Flush on interface [33] {DFACB12B-3025-4010-80AC-23B7DEBB1C19}
Tue Feb 11 14:03:52 2014 TAP: DHCP address released
Tue Feb 11 14:03:58 2014 TAP: DHCP address renewal succeeded
Tue Feb 11 14:03:58 2014 Connection reset command was pushed by server
Tue Feb 11 14:03:58 2014 TCP/UDP: Closing socket
Tue Feb 11 14:03:58 2014 Closing TUN/TAP interface
Tue Feb 11 14:03:58 2014 TAP: DHCP address released
Tue Feb 11 14:03:58 2014 SIGUSR1[soft,server-pushed-connection-reset] received, process restarting
Tue Feb 11 14:03:58 2014 MANAGEMENT: >STATE:1392123838,RECONNECTING,server-pushed-connection-reset,,
Tue Feb 11 14:03:58 2014 Restart pause, 1 second(s)
Tue Feb 11 14:03:59 2014 MANAGEMENT: CMD 'username "Auth" "xxx"'
Tue Feb 11 14:03:59 2014 MANAGEMENT: CMD 'password [...]'
Tue Feb 11 14:03:59 2014 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 11 14:03:59 2014 Control Channel Authentication: tls-auth using INLINE static key file
Tue Feb 11 14:03:59 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:59 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:59 2014 LZO compression initialized
Tue Feb 11 14:03:59 2014 Control Channel MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Tue Feb 11 14:03:59 2014 Socket Buffers: R=[65536->100000] S=[65536->100000]
Tue Feb 11 14:03:59 2014 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Feb 11 14:03:59 2014 Local Options hash (VER=V4): 'ee93268d'
Tue Feb 11 14:03:59 2014 Expected Remote Options hash (VER=V4): 'bd577cd1'
Tue Feb 11 14:03:59 2014 Attempting to establish TCP connection with 212.181.120.117:700
Tue Feb 11 14:03:59 2014 MANAGEMENT: >STATE:1392123839,TCP_CONNECT,,,
Tue Feb 11 14:03:59 2014 TCP connection established with 212.181.120.117:700
Tue Feb 11 14:03:59 2014 Socket flags: TCP_NODELAY=1 succeeded
Tue Feb 11 14:03:59 2014 TCPv4_CLIENT link local: [undef]
Tue Feb 11 14:03:59 2014 TCPv4_CLIENT link remote: 212.181.120.117:700
Tue Feb 11 14:03:59 2014 MANAGEMENT: >STATE:1392123839,WAIT,,,
Tue Feb 11 14:03:59 2014 MANAGEMENT: >STATE:1392123839,AUTH,,,
Tue Feb 11 14:03:59 2014 TLS: Initial packet from 212.181.120.117:700, sid=87a8fb0d 6a418330
Tue Feb 11 14:03:59 2014 VERIFY OK: depth=1, /CN=OpenVPN_CA
Tue Feb 11 14:03:59 2014 VERIFY OK: nsCertType=SERVER
Tue Feb 11 14:03:59 2014 VERIFY OK: depth=0, /CN=OpenVPN_Server
Tue Feb 11 14:03:59 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 14:03:59 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:59 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 14:03:59 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 14:03:59 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Feb 11 14:03:59 2014 [OpenVPN_Server] Peer Connection Initiated with 212.181.120.117:700
Tue Feb 11 14:04:00 2014 MANAGEMENT: >STATE:1392123840,GET_CONFIG,,,
Tue Feb 11 14:04:01 2014 SENT CONTROL [OpenVPN_Server]: 'PUSH_REQUEST' (status=1)
Tue Feb 11 14:04:01 2014 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 5,ping-restart 40,socket-flags TCP_NODELAY,redirect-private local,redirect-private bypass-dhcp,route-gateway 5.5.0.1,route 5.5.3.0 255.255.255.0,route 10.201.36.95,route 10.201.36.168,route 10.201.36.169,route 5.5.14.0 255.255.255.0,route 10.200.129.21,route 10.200.129.22,route 5.5.2.0 255.255.255.0,route 192.168.210.44,route 5.5.12.0 255.255.255.0,route 5.5.13.0 255.255.255.0,route 5.5.11.0 255.255.255.0,route 5.5.4.0 255.255.255.0,route 5.5.10.0 255.255.255.0,route 212.28.194.162,route 212.28.194.163,route 212.28.194.183,route 212.28.194.144,route 5.5.15.0 255.255.255.0,route 5.5.8.0 255.255.255.0,route 5.5.9.0 255.255.255.0,route 5.5.7.0 255.255.255.0,route 5.5.6.0 255.255.255.0,route 5.5.5.0 255.255.255.0,route 212.28.216.10,route 212.28.216.39,route 5.5.1.0 255.255.255.0,dhcp-option DNS 10.200.129.21,push-continuation 2'
Tue Feb 11 14:04:01 2014 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.200.129.22,register-dns,comp-lzo yes,ifconfig 5.5.0.35 255.255.255.0,push-continuation 1'
Tue Feb 11 14:04:01 2014 OPTIONS IMPORT: LZO parms modified
Tue Feb 11 14:04:01 2014 OPTIONS IMPORT: --ifconfig/up options modified
Tue Feb 11 14:04:01 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Feb 11 14:04:01 2014 ROUTE default_gateway=10.80.20.1
Tue Feb 11 14:04:01 2014 ROUTE: bypass_host_route[0]=10.80.10.5
Tue Feb 11 14:04:01 2014 MANAGEMENT: >STATE:1392123841,ASSIGN_IP,,5.5.0.35,
Tue Feb 11 14:04:01 2014 TAP-WIN32 device [Anslutning till lokalt nätverk 3] opened: \\.\Global\{DFACB12B-3025-4010-80AC-23B7DEBB1C19}.tap
Tue Feb 11 14:04:01 2014 TAP-Win32 Driver Version 9.7 
Tue Feb 11 14:04:01 2014 TAP-Win32 MTU=1500
Tue Feb 11 14:04:01 2014 Set TAP-Win32 TUN subnet mode network/local/netmask = 5.5.0.0/5.5.0.35/255.255.255.0 [SUCCEEDED]
Tue Feb 11 14:04:01 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 5.5.0.35/255.255.255.0 on interface {DFACB12B-3025-4010-80AC-23B7DEBB1C19} [DHCP-serv: 5.5.0.254, lease-time: 31536000]
Tue Feb 11 14:04:01 2014 Successful ARP Flush on interface [33] {DFACB12B-3025-4010-80AC-23B7DEBB1C19}
Tue Feb 11 14:04:01 2014 TAP: DHCP address released
Tue Feb 11 14:04:08 2014 TAP: DHCP address renewal succeeded
Tue Feb 11 14:04:08 2014 Connection reset command was pushed by server
Tue Feb 11 14:04:08 2014 TCP/UDP: Closing socket
Tue Feb 11 14:04:08 2014 Closing TUN/TAP interface
Tue Feb 11 14:04:08 2014 TAP: DHCP address released
Tue Feb 11 14:04:08 2014 SIGUSR1[soft,server-pushed-connection-reset] received, process restarting
Tue Feb 11 14:04:08 2014 MANAGEMENT: >STATE:1392123848,RECONNECTING,server-pushed-connection-reset,,
Tue Feb 11 14:04:08 2014 Restart pause, 1 second(s)
Tue Feb 11 14:04:09 2014 MANAGEMENT: CMD 'http-proxy-fallback-disable'
Tue Feb 11 14:04:10 2014 MANAGEMENT: CMD 'username "Auth" "xxx"'
Tue Feb 11 14:04:10 2014 MANAGEMENT: CMD 'password [...]'
Tue Feb 11 14:04:10 2014 NOTE: OpenVPNAS 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

What is the best thing to do to resolve this?

share|improve this question
2  
What do your logs say? Both client and server logs. –  EEAA Feb 11 at 12:52
    
    
Ok, @EEAA, I've added some parts of the Logs from OpenVPN. Hope it gives some more information. –  mikeng Feb 11 at 13:25
    
Ok, @Iain, thanks for the advice, point taken. I have read the meta page about "How to ask a good question" and I have tried to complete my question. Do you still think that my question needs bettering, in that case please tell me. Kind regards. –  mikeng Feb 11 at 15:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.