Openvpn Server Client Abbruch

[zweitserver]

Hallo Zusammen,

dauernd habe ich Abbrüche


Inactivity timeout (--ping-restart), restartingWed Apr 6 07:54:18 2016 us=786336 TCP/UDP: Closing socket. An was kann das liegen ?


Client

Spoiler

Wed Apr  6 07:54:18 2016 us=779166 [server] I[B]nactivity timeout (--ping-restart), restarting[/B][B]Wed Apr  6 07:54:18 2016 us=786336 TCP/UDP: Closing socket[/B]
Wed Apr  6 07:54:18 2016 us=787202 SIGUSR1[soft,ping-restart] received, process restarting
Wed Apr  6 07:54:18 2016 us=788059 Restart pause, 5 second(s)
Wed Apr  6 07:54:23 2016 us=787640 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Wed Apr  6 07:54:23 2016 us=788374 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Apr  6 07:54:23 2016 us=788719 Re-using SSL/TLS context
Wed Apr  6 07:54:23 2016 us=789712 LZO compression initialized
Wed Apr  6 07:54:23 2016 us=790961 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Apr  6 07:54:23 2016 us=791376 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed Apr  6 07:54:23 2016 us=792526 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr  6 07:54:23 2016 us=792978 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Apr  6 07:54:23 2016 us=793363 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Apr  6 07:54:23 2016 us=793962 Local Options hash (VER=V4): '69109d17'
Wed Apr  6 07:54:23 2016 us=794326 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Apr  6 07:54:23 2016 us=794862 Attempting to establish TCP connection with [AF_INET]xxx.117.xx.93:6262 [nonblock]
Wed Apr  6 07:54:24 2016 us=796584 TCP connection established with [AF_INET]xxx.117.xx.93:6262
Wed Apr  6 07:54:24 2016 us=797233 TCPv4_CLIENT link local: [undef]
Wed Apr  6 07:54:24 2016 us=797510 TCPv4_CLIENT link remote: [AF_INET]xxx.117.xx.93:6262
Wed Apr  6 07:54:24 2016 us=843033 TLS: Initial packet from [AF_INET]xxx.117.xx.93:6262, sid=9ddbff11 2ef08c60
Wed Apr  6 07:54:25 2016 us=668651 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Wed Apr  6 07:54:25 2016 us=673282 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=server/name=changeme/emailAddress=mail@host.domain
Wed Apr  6 07:54:27 2016 us=307299 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr  6 07:54:27 2016 us=307751 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr  6 07:54:27 2016 us=308965 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr  6 07:54:27 2016 us=309640 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr  6 07:54:27 2016 us=311734 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Apr  6 07:54:27 2016 us=312416 [server] Peer Connection Initiated with [AF_INET]xxx.117.xx.93:6262
Wed Apr  6 07:54:29 2016 us=77147 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Apr  6 07:54:29 2016 us=193315 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,dhcp-option DNS 10.8.0.1,topology subnet,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.6 255.255.255.0'
Wed Apr  6 07:54:29 2016 us=195451 OPTIONS IMPORT: timers and/or timeouts modified
Wed Apr  6 07:54:29 2016 us=196072 OPTIONS IMPORT: --ifconfig/up options modified
Wed Apr  6 07:54:29 2016 us=196450 OPTIONS IMPORT: route options modified
Wed Apr  6 07:54:29 2016 us=196835 OPTIONS IMPORT: route-related options modified
Wed Apr  6 07:54:29 2016 us=197085 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Apr  6 07:54:29 2016 us=197554 Preserving previous TUN/TAP instance: tun0
Wed Apr  6 07:54:29 2016 us=198097 Initialization Sequence Completed

dev tun
client
proto tcp
remote xx.117.xx.93 6262
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
#auth-user-pass pass.txt
status /etc/openvpn/openvpn-status.log 
log-append /etc/openvpn/openvpn.log
cert client1.crt
key client1.key
comp-lzo
verb 4
reneg-sec 0
tun-mtu 1500

Server

Spoiler

Wed Apr  6 07:54:23 2016 Re-using SSL/TLS contextWed Apr  6 07:54:23 2016 LZO compression initialized
Wed Apr  6 07:54:23 2016 TCP connection established with [AF_INET]xxx.117.xx.93:44936
Wed Apr  6 07:54:23 2016 TCPv4_SERVER link local: [undef]
Wed Apr  6 07:54:23 2016 TCPv4_SERVER link remote: [AF_INET]xxx.117.xx.93:44936
Wed Apr  6 07:54:27 2016 xxx.117.xx.93:44936 [client1] Peer Connection Initiated with [AF_INET]xxx.117.xx.93:44936
Wed Apr  6 07:54:29 2016 client1/xxx.117.xx.93:44936 send_push_reply(): safe_cap=960

server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DNS 10.8.0.1"
push "topology subnet"
topology subnet
route 10.8.0.0 255.255.255.0
keepalive 10 120
client-to-client
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log
client-config-dir /etc/openvpn/ccd
log-append /var/log/openvpn
verb 4

 

[Bodo-1]

AW: Openvpn Server Client Abbruch

WLAN oder Dlan im Einsatz ?

gesendet von meinem
Oneplus Two

 

[zweitserver]

AW: Openvpn Server Client Abbruch

Hallo Bodo,

läuft über LAN mit direkter IP-Vergabe

 

[pidi]

AW: Openvpn Server Client Abbruch

entweder instabile leitung oder du kannst mal mit dem "keepalive" eintrag versuchen zu experimentieren:

dein eintrag
keepalive 10 120

d.h. wenn 10 sekunden kein datenpaket oder ping durch den tunnel kommt, wird ein ping an den partner abgesetzt. wird 120 sekunden kein ping oder datenpaket empfangen, wird der tunnel neu gestartet.

 

[zweitserver]

Hallo Pidi,

werde ich mal einwenig herumspielen gg

Thx

schaut besser aus nur einmal pro tag einen abbruch gg