I have two vtuns configured, one is udp on port 1194 and the other is tcp on 443. both config are identical except for the different port and protocol, inc the 'm having issues with CA, crt, and crl I guess they both have seperate diffie-heilman files
The TCP works fine, and has for over a year, it was also originally a udp configuration. now that I’m trying to host both protocols, I’m having a wierd issue with the UDP vtun. I copied the settings from the tcp vtun.
The firewall does allow the correct port, because I’m able to see the logs state the initial connection is received. I also see the reply sent in tcpdump, but no other traffic is exchanged other than the two packets back and forth.
I also know it is not a client network issue, because I connect to a nordvpn profile on the same device just fine to udp 1194.
Here is a sample dump of the config, I’ve also tried with lzo turned off (don’t lecture me on the security issue, this is for mobile ) and played with different linkmtu settings with no improvement.
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: MULTI: multi_create_instance called
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19522 Re-using SSL/TLS context
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19522 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1309)
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19522 Control Channel MTU parms [ L:1430 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19522 Data Channel MTU parms [ L:1430 D:1430 EF:121 EB:374 ET:0 EL:3 ]
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19522 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1430,tun-mtu 1309,proto UDPv4,cipher AES-128-GCM,auth [null-digest],keysize 128,key-method 2,tls-server'
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19522 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1430,tun-mtu 1309,proto UDPv4,cipher AES-128-GCM,auth [null-digest],keysize 128,key-method 2,tls-client'
Nov 21 22:46:58 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19522 TLS: Initial packet from [AF_INET]107.122.84.49:19522, sid=b48f56ed 587e349c
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: MULTI: multi_create_instance called
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19524 Re-using SSL/TLS context
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19524 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1309)
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19524 Control Channel MTU parms [ L:1430 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19524 Data Channel MTU parms [ L:1430 D:1430 EF:121 EB:374 ET:0 EL:3 ]
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19524 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1430,tun-mtu 1309,proto UDPv4,cipher AES-128-GCM,auth [null-digest],keysize 128,key-method 2,tls-server'
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19524 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1430,tun-mtu 1309,proto UDPv4,cipher AES-128-GCM,auth [null-digest],keysize 128,key-method 2,tls-client'
Nov 21 22:47:08 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19524 TLS: Initial packet from [AF_INET]107.122.84.49:19524, sid=22c58041 94ff6452
Nov 21 22:47:18 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19525 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 21 22:47:18 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19525 TLS Error: TLS handshake failed
Nov 21 22:47:18 nvcs1wangw01 openvpn-vtun0[11829]: 107.122.84.49:19525 SIGUSR1[soft,tls-error] received, client-instance restarting