1. Store
  2. Apps
  3. Hardware
  4. Support
  5. Solutions

ClearFoundation

Forums
Welcome, Guest
OpenVPN - ClearOS 5.2 problem
(1 viewing) 1 Guest
Go to bottomPage: 1
TOPIC: OpenVPN - ClearOS 5.2 problem
#43095
OpenVPN - ClearOS 5.2 problem 10 Months, 3 Weeks ago  
Hi

I have a problem to connect a client to my ClearOS 5.2 SP1.

I'm trying to connect to that server using Windows 7. I'm running OpenVPN client as admin.
But something is wrong. This is short error from connection log:

Code:


TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
TCP/UDP: Closing socket



I have got 2 internet connections(192.168.1.3. and 192.168.3.1) and 1 LAN (192.168.2.1).
Do I have to forward any ports to use OpenVPN?

Also [name].opvn file generated had my local domain name, which is not registered, so I had to edit it and change remote line from "remote server.local 1194" to "remote [name].poweredbyclear.com".

Code:


client
remote [name].poweredbyclear.com 1194
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca-cert.pem
cert client-[username]-cert.pem
key client[username]-key.pem
ns-cert-type server
comp-lzo
verb 3
auth-user-pass



Is this normal? What is that TLS error from connection log?

Thx
tomas
Expert Boarder
Posts: 127
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#43099
Re: OpenVPN - ClearOS 5.2 problem 10 Months, 3 Weeks ago  
You will need to forward UDP:1194 from your router to ClearOS. You have another problem in that which interface belongs to [name].poweredbyclear.com? As you have multi-WAN this can flip from one to the other which will break the VPN. From googling you need to set up some source based routing to force OpenVPN over one interface and make sure that interface is connected to a router with its own fixed WAN IP or FQDN - possibly by using a Dynamic DNS client in one of your routers.
Nick Howitt
Platinum Boarder
Posts: 4125
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
Go to topPage: 1
  get the latest posts directly to your desktop