Updating connection failed nm ifupdown connection c 82


29-Oct-2020 15:20

When the problem happens, can you check whether the static /32 route towards the VPN server still exists and points outside the tunnel. Please also check a couple of minutes before the ping timeout whether you see anything network related.

Example: VPN-Server at 10.1.1.1 routed network 10.0.0.0/8 A client has a wired connection with a default route to 1.1.1.1 default via 1.1.1.1 dev eth0 You can reach 10.1.1.1 through that default route. VPN2.250,dhcp-option DOMAIN domäne.intern,ifconfig 10.200.13.4 255.255.255.0' Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: timers and/or timeouts modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: --ifconfig/up options modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: route options modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: route-related options modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Jul 18 login ovpn-utm[8335]: Data Channel Encrypt: Cipher ' AES-256-CBC' initialized with 256 bit key Jul 18 login ovpn-utm[8335]: Data Channel Encrypt: Using 256 bit message hash ' SHA256' for HMAC authentication Jul 18 login ovpn-utm[8335]: Data Channel Decrypt: Cipher ' AES-256-CBC' initialized with 256 bit key Jul 18 login ovpn-utm[8335]: Data Channel Decrypt: Using 256 bit message hash ' SHA256' for HMAC authentication Jul 18 login ovpn-utm[8335]: Preserving previous TUN/TAP instance: tun0 Jul 18 login ovpn-utm[8335]: NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. VPN/32 Jul 18 login ovpn-utm[8335]: /sbin/ip route del INT. VPN2.0/24 Jul 18 login ovpn-utm[8335]: /sbin/ip route del INT. VPN1.0/24 Jul 18 login ovpn-utm[8335]: Closing TUN/TAP interface Jul 18 login ovpn-utm[8335]: /sbin/ip addr del dev tun0 10.200.13.2/24 Jul 18 login ovpn-utm[8335]: ROUTE_GATEWAY TWO.

This was the only message in the logs: May 25 $hostname nm-openvpn[26356]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1602', remote='link-mtu 1634' May 25 $hostname nm-openvpn[26356]: WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532' Regards, Prescott -------- Original Message -------- Subject: Re: Bug#863110: openvpn: VPN remains connected, but network is unreachable after 30-45 min and requires reconnect Local Time: May 25, 2017 AM UTC Time: May 25, 2017 AM From: [email protected]: Prescott Hidalgo-Monroy -- Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico mailto/sip: [email protected]| en GNU/Linux y software libre Encrypted mail preferred | fingerprint = 5347 CBD8 3E30 A9EB 4D7D 4BF2 009B 3375 6B9A AA55severity #863110 serious thanks Hi, we have got the same issue with all our VPNs upgraded to Stretch now. cipher AES-256-CBC auth SHA256 comp-lzo route-delay 4 verb 3 reneg-sec 0 The only thing I have got in my logs is e.g. VPN2.250,dhcp-option DOMAIN domäne.intern,ifconfig 10.200.13.5 255.255.255.0' Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: timers and/or timeouts modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: --ifconfig/up options modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: route options modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: route-related options modified Jul 18 login ovpn-utm[8335]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Jul 18 login ovpn-utm[8335]: Data Channel Encrypt: Cipher ' AES-256-CBC' initialized with 256 bit key Jul 18 login ovpn-utm[8335]: Data Channel Encrypt: Using 256 bit message hash ' SHA256' for HMAC authentication Jul 18 login ovpn-utm[8335]: Data Channel Decrypt: Cipher ' AES-256-CBC' initialized with 256 bit key Jul 18 login ovpn-utm[8335]: Data Channel Decrypt: Using 256 bit message hash ' SHA256' for HMAC authentication Jul 18 login ovpn-utm[8335]: Preserving previous TUN/TAP instance: tun0 Jul 18 login ovpn-utm[8335]: NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. VPN/32 Jul 18 login ovpn-utm[8335]: /sbin/ip route del INT. VPN2.0/24 Jul 18 login ovpn-utm[8335]: /sbin/ip route del INT. VPN1.0/24 Jul 18 login ovpn-utm[8335]: Closing TUN/TAP interface Jul 18 login ovpn-utm[8335]: /sbin/ip addr del dev tun0 10.200.13.4/24 Jul 18 login ovpn-utm[8335]: ROUTE_GATEWAY TWO. NETWORK.2.1 dev eth0 onlink 10.200.13.0/24 dev tun0 proto kernel scope link src 10.200.13.5 10.242.2.0/24 dev tun1 proto kernel scope link src 10.242.2.8 62.2 via TWO.

Most VPNs are connected about a 1 GBit/s datacenter connection with each other (also same LAN), the other ones are connected about a 100 MBit/s connection. this: Jul 12 HOST ovpn-ABC_network[20317]: [gateway01] Inactivity timeout (--ping-restart), restarting Jul 12 HOST ovpn-ABC_network[20317]: SIGUSR1[soft,ping-restart] received, process restarting Jul 12 HOST ovpn-ABC_network[20317]: Restart pause, 5 second(s) Jul 12 HOST ovpn-ABC_network[20317]: TCP/UDP: Preserving recently used remote address: [AF_INET].........:44443 Jul 12 HOST ovpn-ABC_network[20317]: Socket Buffers: R=[87380-16384] Jul 12 HOST ovpn-ABC_network[20317]: Attempting to establish TCP connection with [AF_INET]..........:44443 [nonblock] Jul 12 HOST ovpn-ABC_network[20317]: TCP: connect to [AF_INET]............:44443 failed: Connection timed out Jul 12 HOST ovpn-ABC_network[20317]: SIGUSR1[connection failed(soft),init_instance] received, process restarting Jul 12 HOST ovpn-ABC_network[20317]: Restart pause, 5 second(s) Jul 12 HOST ovpn-ABC_network[20317]: TCP/UDP: Preserving recently used remote address: [AF_INET]............:44443 Jul 12 HOST ovpn-ABC_network[20317]: Socket Buffers: R=[87380-16384] Jul 12 HOST ovpn-ABC_network[20317]: Attempting to establish TCP connection with [AF_INET]..........:44443 [nonblock] After this the connection was down, until we manualy restarted it. Jul 18 login ovpn-utm[8335]: /sbin/ip route del EXT. NETWORK.2.1/255.255.255.0 IFACE=eth0 HWADDR=00:0c:29:cd:45:cc Jul 18 login ovpn-utm[8335]: TUN/TAP device tun0 opened Jul 18 login ovpn-utm[8335]: TUN/TAP TX queue length set to 100 Jul 18 login ovpn-utm[8335]: do_ifconfig, tt-did_ifconfig_ipv6_setup=0 Jul 18 login ovpn-utm[8335]: /sbin/ip link set dev tun0 up mtu 1500 Jul 18 login ovpn-utm[8335]: /sbin/ip addr add dev tun0 10.200.13.5/24 broadcast 10.2 Jul 18 login ovpn-utm[8335]: /sbin/ip route add EXT.

Please note, that I replaced many IPs and hostnames with other stuff. VPN:1197 Jul 18 login ovpn-utm[8335]: Socket Buffers: R=[212992-212992] Jul 18 login ovpn-utm[8335]: UDP link local: (not bound) Jul 18 login ovpn-utm[8335]: UDP link remote: [AF_INET]EXT.

Working one (tun0 affected, tun1 is another VPN): Jul 18 login ovpn-utm[8335]: [utm.de] Inactivity timeout (--ping-restart), restarting Jul 18 login ovpn-utm[8335]: SIGUSR1[soft,ping-restart] received, process restarting Jul 18 login ovpn-utm[8335]: Restart pause, 5 second(s) Jul 18 login ovpn-utm[8335]: TCP/UDP: Preserving recently used remote address: [AF_INET]EXT.

The client with version openvpn_2.4.3-4~bpo9 1 still works, all 2.4.0-6 deb9u1 are dead. VPN:1197, sid=4030f3bf 8b41b71f Jul 18 login ovpn-utm[8335]: VERIFY OK: depth=1, C=de, L=Paderborn, O=company Internet Gmb H, CN=company Internet Gmb H VPN CA, email [email protected] 18 login ovpn-utm[8335]: VERIFY X509NAME OK: C=de, ST=Nordrhein-Westfalen, L=Paderborn, O=company Internet Gmb H, OU=Technik, CN=utm.de, email [email protected] 18 login ovpn-utm[8335]: VERIFY OK: depth=0, C=de, ST=Nordrhein-Westfalen, L=Paderborn, O=company Internet Gmb H, OU=Technik, CN=utm.de, email [email protected] 18 login ovpn-utm[8335]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Jul 18 login ovpn-utm[8335]: [utm.de] Peer Connection Initiated with [AF_INET]EXT.



He has two half-brothers, Jonathan (born September 12, 1993) and Stephen (born August 14, 1998), from Charles' second marriage to Lisa Perry.… continue reading »


Read more