This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN (vista x64) drops - no messages

I've been chasing this weird problem.

New install of OpenVPN connecting to my ASG at home.  Connects fine and then runs for about 5 minutes.

With warning, the connection is dropped.  I go from being able to ping the ASG from the internal 192.168.1.*** subnet to getting a general error.

Watching the OPENVPN log on the gateway still shows data moving (lots of TUN WRITEs/READS and UDPv4 Writes and reads.  In fact, it still thinks it is connected even though I can't ping the internal address.

Looking at the client long for openvpn, there are no new messages generated (the last message being logged at the successful completion of the client connecting to the ASG).

I'm not sure how to diagnose this further.  I can access the outside world, but now those packets are not traveling through the ASG.  This tells me the client is 100% not communicating with the ASG when it was for the first 5 minutes or so.

Clues on what I could chase after next?

Many thanks all!

This thread was automatically locked due to age.

Parents

0 BAlfson over 16 years ago

Versions? OS of client?

Also, what is indicated as the 'Local Networks' in the 'Remote Access' configuration?

Cheers - Bob
PS BruceK's suggestion might be helpful: https://community.sophos.com/products/unified-threat-management/astaroorg/f/58/t/53212
Cancel
Vote Up 0 Vote Down

Cancel
0 va3mw over 16 years ago in reply to BAlfson

the openvpn is v1.0.3
asg is 7.402

OS is vista - 64 bit (sorry, it was in the subject line)

Local networks is Any

thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to va3mw

In addition to BruceK's suggestion above, I found a post from William:

How to get OpenVPN GUI client and Windows Vista to play nicely with each other

OpenVPN GUI client and Windows Vista | Computer Tech Union

1.) Open your client.ovpn file and add the following two lines to the bottom of the file:
route-method exe
route-delay 2

2) Create a shortcut to your OpenVPN GUI file. Right click the shortcut and click properties.
Under the ‘Shortcut’ tab.
Click ‘advanced’.
Check the box that says ‘Run as administrator’ and
then Click ‘OK’ and ‘OK’ again.

3. *optional* turn off UAC and step two is not needed.

I think I remember someone reporting an issue with the standard setup downloaded from the End User Portal and 64-bit Vista, so if none of the above solves your problem, you might see if you need OpenVPN 2 with Vista-64.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 16 years ago in reply to BAlfson

Check this: http://portal.knowledgebase.net/article.asp?article=299973&p=5956
and this: http://portal.knowledgebase.net/article.asp?article=231875&p=5956
Cancel
Vote Up 0 Vote Down

Cancel
0 va3mw over 16 years ago in reply to BrucekConvergent

Thanks guys, but I have done all that.

If you don't run the gui as an admin, you will never get the routing in place. The routing does get created. (and, yes, I do run it as admin).

route-method exe
route-delay 2

Is already on the config file.

Mike
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to va3mw

What about the sequence of adapters?
Cancel
Vote Up 0 Vote Down

Cancel
0 va3mw over 16 years ago in reply to BAlfson

eth0 is internal
eth1 is external

This is a pretty vanilla setup. I followed the astaro-ssl config documents.

The fact that you don't get any messages on either the client or server side is not helping.

Remember, it works just perfectly for about 5 minutes, then the tunnel appears to drop and the routing returns to a normal non-vpn connection.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to va3mw

According to one of the above links, Vista won't work correctly with Astaro SSL VPN with OpenVPN 1, and you need OpenVPN 2.

According to another of the links above, the issue is the sequence of adapters in your PC, not the Astaro.
Cancel
Vote Up 0 Vote Down

Cancel
0 va3mw over 16 years ago in reply to BAlfson

Sorry for the confusion.  The openvpn is 2.09 (the GUI version is 1.03).

I need to check on the order of the adapters on the client.  What order should they be in, and how do I change the order if need be?

I checked the links above and searched in their knowledge base, but was unable to find the document that referenced adapter ordering.

The Astaro SSL client is not installed and I am using the Open VPN client.  I have copied the 4 key files into the openvpn config directory as well.  I know I am using the right config files or the client would not be able to connect at all.

thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 16 years ago in reply to va3mw

Emmanuel Computer Consulting, L.L.C. Blog Archive How to get OpenVPN GUI client and Windows Vista to play nicely with each other
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 William Warren over 16 years ago in reply to va3mw

Emmanuel Computer Consulting, L.L.C. Blog Archive How to get OpenVPN GUI client and Windows Vista to play nicely with each other
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 va3mw over 16 years ago in reply to William Warren

Thanks but I am way past that setup. If you don't run the GUI as an admin, then you don't get the route to the VPN established at all. If you watch the login, you can see that the add route command fails.

This is NOT the run as administrator problem.

Mike
Cancel
Vote Up 0 Vote Down

Cancel