ASUS RT-AC58U OpenVPN?_

[Kitharodos]

Γεια σας,
μετα απο 3 μηνες συνεχους λειτουργιας, την προηγουμενη βδομαδα η λειτουργια openVPN CLIENT δεν λειτουργει. Απο την Πεμπτη και εως σημερα εχω δοκιμασει τα παντα.
Ειμαι σε συνεχη επαφη με την εταιρεια παροχης vpn (surfshark) που μπορω να πω κανουν καλη δουλεια να με βοηθησουν.
Εχουμε πειραματιστει με ολα τα πιθανα σεναρια μη συνδεσης λογω DNS, ή μπλοκαρισμα Firewall, τα εχουμε ανοιξει και κλεισει ολα.
Εχω δοκιμασει ολους τους πιθανους open vpn client servers και παλι τιποτα.
Προβλημα εφαρμογης δεν ξερω αν ειναι παντως την κανονικη εφαρμογη στα widnows, συνδεεται κανονικα.
Η λειτουργεια του onboard opvn του router οχι ομως.
Αγορασα το ιδιο ρουτερ δευτερη φορά (ναι ειμαι τρελός) μπας και καηκε τιποτα μεσα του.
Να προσθεσω εδω οτι το ρουτερ συνδεεται κανονικα στο ιντερνετ, αλλα οχι στο vpn client.
Επισης πηρα το ρουτερ και το δοκιμασα με τις ιδιες ρυθμισες σε αλλο σπιτι και ειχα το ιδιο αποτελεσμα.
Δεν ξερω τι να πιστεψω και απο που να ξεκινησω.
Η βοηθεια σας ειναι πολυτιμη, επισης θα μπορουσα να ερθω σε επαφη με καποιον τεχνικο που να μπορουσε να μου δωσει μια πιο σαφη απαντηση επι πληρωμης.
Ειναι κατι το οποιο χρειαζομαι λογω της τηλεργασιας μου αμεσα.

- - - Updated - - -

Jun 26 14:01:39 openvpn[4180]: UDPv4 link remote: [AF_INET]193.176.86.171:1194
Jun 26 14:01:39 openvpn[4180]: TLS: Initial packet from [AF_INET]193.176.86.171:1194, sid=fd99c8de 09d7e922
Jun 26 14:01:39 openvpn[4180]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jun 26 14:02:22 rc_service: httpd 442:notify_rc restart_vpncall
Jun 26 14:02:24 openvpn[4180]: event_wait : Interrupted system call (code=4)
Jun 26 14:02:24 openvpn[4180]: SIGTERM[hard,] received, process exiting
Jun 26 14:27:35 rc_service: httpd 442:notify_rc restart_vpncall
Jun 26 14:27:38 openvpn[8212]: OpenVPN 2.3.2 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Oct 24 2017
Jun 26 14:27:38 openvpn[8212]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:27:38 openvpn[8212]: Control Channel Authentication: using 'static.key' as a OpenVPN static key file
Jun 26 14:27:38 openvpn[8212]: Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Jun 26 14:27:38 openvpn[8212]: Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Jun 26 14:27:38 openvpn[8212]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:27:38 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:27:38 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:27:39 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=83b3bb53 8ba8bab1
Jun 26 14:27:39 openvpn[8215]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jun 26 14:28:38 openvpn[8215]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 26 14:28:38 openvpn[8215]: TLS Error: TLS handshake failed
Jun 26 14:28:38 openvpn[8215]: SIGUSR1[soft,tls-error] received, process restarting
Jun 26 14:28:38 openvpn[8215]: Restart pause, 2 second(s)
Jun 26 14:28:40 openvpn[8215]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:28:40 openvpn[8215]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:28:40 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:28:40 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:28:40 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=6cd4f33b 26bee50e
Jun 26 14:29:41 openvpn[8215]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 26 14:29:41 openvpn[8215]: TLS Error: TLS handshake failed
Jun 26 14:29:41 openvpn[8215]: SIGUSR1[soft,tls-error] received, process restarting
Jun 26 14:29:41 openvpn[8215]: Restart pause, 2 second(s)
Jun 26 14:29:43 openvpn[8215]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:29:43 openvpn[8215]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:29:43 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:29:43 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:29:43 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=de1d7483 8d1577df
Jun 26 14:30:43 openvpn[8215]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 26 14:30:43 openvpn[8215]: TLS Error: TLS handshake failed
Jun 26 14:30:43 openvpn[8215]: SIGUSR1[soft,tls-error] received, process restarting
Jun 26 14:30:43 openvpn[8215]: Restart pause, 2 second(s)
Jun 26 14:30:45 openvpn[8215]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:30:45 openvpn[8215]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:30:45 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:30:45 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:30:45 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=0394b75e 1b8c4932
Jun 26 14:31:45 openvpn[8215]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 26 14:31:45 openvpn[8215]: TLS Error: TLS handshake failed
Jun 26 14:31:45 openvpn[8215]: SIGUSR1[soft,tls-error] received, process restarting
Jun 26 14:31:45 openvpn[8215]: Restart pause, 2 second(s)
Jun 26 14:31:47 openvpn[8215]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:31:47 openvpn[8215]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:31:47 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:31:47 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:31:47 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=cd6c0dd6 0b17b938
Jun 26 14:32:47 openvpn[8215]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 26 14:32:47 openvpn[8215]: TLS Error: TLS handshake failed
Jun 26 14:32:47 openvpn[8215]: SIGUSR1[soft,tls-error] received, process restarting
Jun 26 14:32:47 openvpn[8215]: Restart pause, 2 second(s)
Jun 26 14:32:49 openvpn[8215]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:32:49 openvpn[8215]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:32:49 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:32:49 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:32:49 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=7458e212 c53d6c2d
Jun 26 14:33:49 openvpn[8215]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 26 14:33:49 openvpn[8215]: TLS Error: TLS handshake failed
Jun 26 14:33:49 openvpn[8215]: SIGUSR1[soft,tls-error] received, process restarting
Jun 26 14:33:49 openvpn[8215]: Restart pause, 2 second(s)
Jun 26 14:33:51 openvpn[8215]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:33:51 openvpn[8215]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:33:51 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:33:51 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:33:51 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=8cb27973 929a9ad6
Jun 26 14:34:52 openvpn[8215]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 26 14:34:52 openvpn[8215]: TLS Error: TLS handshake failed
Jun 26 14:34:52 openvpn[8215]: SIGUSR1[soft,tls-error] received, process restarting
Jun 26 14:34:52 openvpn[8215]: Restart pause, 2 second(s)
Jun 26 14:34:54 openvpn[8215]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jun 26 14:34:54 openvpn[8215]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jun 26 14:34:54 openvpn[8215]: UDPv4 link local: [undef]
Jun 26 14:34:54 openvpn[8215]: UDPv4 link remote: [AF_INET]206.189.119.92:8080
Jun 26 14:34:54 openvpn[8215]: TLS: Initial packet from [AF_INET]206.189.119.92:8080, sid=91641cf9 19f7e7d3

παρτε μια γευση απο το log

[syllom]

Δοκίμασε να ριξεις το MTU σου.

Ειχα παρομοιο θεμα και εγω αλλα ειχα βρει οτι ο παροχος μου δεσμευει το MTU. εχω Nord και ζητησα αν μπορουσαν να το κανουν fixed στον client, αλλα δεν μπορουν.
Παιξε με pings στο google.com


Please perform the following instructions while being connected to one of our VPN servers:

Open the cmd as administrator (https://www.howtogeek.com/235101/10-...in-windows-10/)

Type in this command:

ping google.com -f -l 1500

If you will see this error message: "Packet needs to be fragmented but DF set", then please decrease the value of 1500 by 10 to 1490 , 1480 , etc.

Once you find the value which gets through and gives you reply from google.com - please increase the it by 1 till you find the maximum possible value. For me it is 1482 for example.

Then add +28 because 20 bytes are reserved for IP header and 8 bytes are reserved for ICMP Echo Request header. So in my case 1482+28=1510.

Once you have your MTU value, please perform the following command:
netsh interface ipv4 show interfaces

Please take a note what interfaces you have. They are listed under column "Name".

Afterwards please type in these commands for every interface that you are using while connected to VPN:

netsh interface ipv4 set subinterface "your_interface" mtu=your_max_mtu_value store=persistent

( For example in my case if I am connected via Wi-Fi: `netsh interface ipv4 set subinterface "Wi-Fi" mtu=1510 store=persistent` )

Now to make sure that you successfully have set your MTU values, please perform this command:

netsh interface ipv4 show subinterfaces

You should see your value at the appropriate interface.

Please try switching the connection protocol to TCP. It can be changed in the NordVPN application settings.

Within the Windows NordVPN application: click 'Auto Connect' on the left side of the Settings menu > disable "Choose a VPN protocol and server automatically" > VPN protocol > Select OpenVPN (TCP).

[Kitharodos]

Ευχαριστώ πολύ για την απάντηση.
Δεν ξερω τι είναι το MTU αλλά θα το ψάξω. Αλλά αν το Mtu είναι μια λειτουργία που αλλάζει στον υπολογιστή μου και μόνο τότε θα είναι άχρηστο διότι εγώ θέλω το router να δουλεύει αυτόνομα με ovpn client για να συνδέονται πάνω του συσκευές που δεν μπορούν να πάρουν OS.

[Kitharodos]

Δοκίμασε να ριξεις το MTU σου.

Ειχα παρομοιο θεμα και εγω αλλα ειχα βρει οτι ο παροχος μου δεσμευει το MTU. εχω Nord και ζητησα αν μπορουσαν να το κανουν fixed στον client, αλλα δεν μπορουν.
Παιξε με pings στο google.com


Please perform the following instructions while being connected to one of our VPN servers:

Open the cmd as administrator (https://www.howtogeek.com/235101/10-...in-windows-10/)

Type in this command:

ping google.com -f -l 1500

If you will see this error message: "Packet needs to be fragmented but DF set", then please decrease the value of 1500 by 10 to 1490 , 1480 , etc.

Once you find the value which gets through and gives you reply from google.com - please increase the it by 1 till you find the maximum possible value. For me it is 1482 for example.

Then add +28 because 20 bytes are reserved for IP header and 8 bytes are reserved for ICMP Echo Request header. So in my case 1482+28=1510.

Once you have your MTU value, please perform the following command:
netsh interface ipv4 show interfaces

Please take a note what interfaces you have. They are listed under column "Name".

Afterwards please type in these commands for every interface that you are using while connected to VPN:

netsh interface ipv4 set subinterface "your_interface" mtu=your_max_mtu_value store=persistent

( For example in my case if I am connected via Wi-Fi: `netsh interface ipv4 set subinterface "Wi-Fi" mtu=1510 store=persistent` )

Now to make sure that you successfully have set your MTU values, please perform this command:

netsh interface ipv4 show subinterfaces

You should see your value at the appropriate interface.

Please try switching the connection protocol to TCP. It can be changed in the NordVPN application settings.

Within the Windows NordVPN application: click 'Auto Connect' on the left side of the Settings menu > disable "Choose a VPN protocol and server automatically" > VPN protocol > Select OpenVPN (TCP).

Το δοκιμασα, η τιμη μου ηταν 1492
Δεν ειδα διαφορα.
Παρε το log και με UDP και με TCP server

Jul 6 20:18:34 openvpn[31731]: SIGUSR1[soft,tls-error] received, process restarting
Jul 6 20:18:34 openvpn[31731]: Restart pause, 2 second(s)
Jul 6 20:18:36 openvpn[31731]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jul 6 20:18:36 openvpn[31731]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jul 6 20:18:36 openvpn[31731]: UDPv4 link local: [undef]
Jul 6 20:18:36 openvpn[31731]: UDPv4 link remote: [AF_INET]152.89.163.21:1194
Jul 6 20:18:36 openvpn[31731]: TLS: Initial packet from [AF_INET]152.89.163.21:1194, sid=98267506 76f6f0ad
Jul 6 20:19:36 openvpn[31731]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jul 6 20:19:36 openvpn[31731]: TLS Error: TLS handshake failed
Jul 6 20:19:36 openvpn[31731]: SIGUSR1[soft,tls-error] received, process restarting
Jul 6 20:19:36 openvpn[31731]: Restart pause, 2 second(s)
Jul 6 20:19:38 openvpn[31731]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jul 6 20:19:38 openvpn[31731]: Socket Buffers: R=[180224->131072] S=[180224->131072]
Jul 6 20:19:38 openvpn[31731]: UDPv4 link local: [undef]
Jul 6 20:19:38 openvpn[31731]: UDPv4 link remote: [AF_INET]37.120.217.133:1194
Jul 6 20:19:38 openvpn[31731]: TLS: Initial packet from [AF_INET]37.120.217.133:1194, sid=65cdb7a1 cf143d79
Jul 6 20:19:39 rc_service: httpd 442:notify_rc restart_vpncall
Jul 6 20:19:42 openvpn[31731]: event_wait : Interrupted system call (code=4)
Jul 6 20:19:42 openvpn[31731]: SIGTERM[hard,] received, process exiting
Jul 6 20:19:43 rc_service: httpd 442:notify_rc restart_vpncall
Jul 6 20:19:43 rc_service: waitting "restart_vpncall" via httpd ...
Jul 6 20:19:44 openvpn[32085]: OpenVPN 2.3.2 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Oct 24 2017
Jul 6 20:19:44 openvpn[32085]: ERROR: username from Auth authfile 'up' is empty
Jul 6 20:19:44 openvpn[32085]: Exiting due to fatal error
Jul 6 20:19:48 openvpn[32092]: OpenVPN 2.3.2 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Oct 24 2017
Jul 6 20:19:48 openvpn[32092]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Jul 6 20:19:48 openvpn[32092]: NOTE: --fast-io is disabled since we are not using UDP
Jul 6 20:19:48 openvpn[32092]: Control Channel Authentication: using 'static.key' as a OpenVPN static key file
Jul 6 20:19:48 openvpn[32092]: Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Jul 6 20:19:48 openvpn[32092]: Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Jul 6 20:19:48 openvpn[32092]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Jul 6 20:19:48 openvpn[32095]: Attempting to establish TCP connection with [AF_INET]89.36.76.101:1443 [nonblock]
Jul 6 20:19:49 openvpn[32095]: TCP connection established with [AF_INET]89.36.76.101:1443
Jul 6 20:19:49 openvpn[32095]: TCPv4_CLIENT link local: [undef]
Jul 6 20:19:49 openvpn[32095]: TCPv4_CLIENT link remote: [AF_INET]89.36.76.101:1443
Jul 6 20:19:49 openvpn[32095]: TLS: Initial packet from [AF_INET]89.36.76.101:1443, sid=21b0fd66 8a03af87
Jul 6 20:19:49 openvpn[32095]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jul 6 20:19:50 openvpn[32095]: Connection reset, restarting [0]
Jul 6 20:19:50 openvpn[32095]: SIGUSR1[soft,connection-reset] received, process restarting
Jul 6 20:19:50 openvpn[32095]: Restart pause, 5 second(s)

[Kitharodos]

Φιλε τελικα ειχες απολυτο δικιο!!!!! Το MTU ηταν. Αλλαξα το MTU se 1492 στο δικτυο αλλα το MTU δεν ειχε αλλαξε το config του ovpn. Αυτό το ειδα σημερα που με παροτρινε αλλος φιλος να πειραξουμε τις ρυθμισεις στο config file του ovpn. ειχε απο default 1500. Μου κινησε την περιεργια , το αλλαξα σε 1492 και δουλεψε. Να εισαι καλα!!!!!!!!!!