3

I manage simple workgroup at work that uses openvpn gui for connecting to remote computers.

Accidently I discovered a very strange bug -- the openvpn connection works initially, and pings work, but after 30 seconds, pings and any other access stop working, without any discernable reason.

Openvpn client shows as still connected (no new logs, the icon is green), the openvpn server shows that the connection is still established (but cant ping the client either), windows logs doesn't show any clue. And from home i still connect through the VPN without problem.

I need clue for where to look on, any other logs or tests?

Edit:

womble suggested to check route table, simple script shows that there is no change in route table :(, thank you anyway womble.

8

Oh number one cause of this in our company is the same OpenVPN key being used simultaneously in two different places. The same IP gets allocated by the server to both clients, causing a dropout after a minute or two.

2

That smells like a client-side routing problem. Take a look at the routing table immediately after the OpenVPN tunnel establishes (while it's working), and then again after it stops working, and look for any differences. I've had a problem where a DHCP client was wiping out (overriding) routes from OpenVPN, which would make the connection to the OpenVPN server unavailable.

  • thankyou. i am checked the route table table by script. my script doesn't show any changes after connection. and doesn't show any changes after that connection fail – Avram May 1 '09 at 12:52
1

Can you post the openvpn config files? If so, be sure to conceal any private information like IP addresses or domain names.

1

See if you can ping the gateway host on its internal ip address. Also run a traceroute and see where those packets are going.

1

I was experiencing this exact same issue, with the connection working fine for a few seconds and then stalling without any information in the logs. Starting OpenVPN with --mssfix 1300 fixed the problem on my system.

From openvpn(8):

Both --fragment and --mssfix are designed to work around cases where Path MTU discovery is broken on the network path between OpenVPN peers.

The usual symptom of such a breakdown is an OpenVPN connection which successfully starts, but then stalls during active usage.

0

Most routers or cellular operation are using NAT with very short timeouts for UDP sessions. Solution is to reconfigure router or force OpenVPN to send ping packets more frequently (check keepalive config directive)

-3

The problem was on router, after reconfigure router, the vpn start to work again.

  • 2
    what was the fix? – gregmac Aug 14 '09 at 4:10
  • @gregmac reconfiguring the router. – Avram Oct 30 '09 at 0:41
  • 4
    Would be nice to know what was reconfigured. Not helpful! – Alfabravo May 9 '11 at 14:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.