Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 4496 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN won't connect

TJE
Hi,

I am trying to get an SSL client to connect but consistently get the following log:

Re-using SSL/TLS context
Fri Aug 07 12:40:29 2009 LZO compression initialized
Fri Aug 07 12:40:29 2009 Control Channel MTU parms [ L:1556 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Aug 07 12:40:29 2009 Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Aug 07 12:40:29 2009 Local Options hash (VER=V4): '30b70586'
Fri Aug 07 12:40:29 2009 Expected Remote Options hash (VER=V4): '28786345'
Fri Aug 07 12:40:29 2009 Attempting to establish TCP connection with 203.206.170.95:3000
Fri Aug 07 12:40:29 2009 TCP connection established with 203.206.170.95:3000
Fri Aug 07 12:40:29 2009 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Aug 07 12:40:29 2009 TCPv4_CLIENT link local: [undef]
Fri Aug 07 12:40:29 2009 TCPv4_CLIENT link remote: 203.206.170.95:3000
Fri Aug 07 12:40:29 2009 Connection reset, restarting [-1]
Fri Aug 07 12:40:29 2009 TCP/UDP: Closing socket
Fri Aug 07 12:40:29 2009 SIGUSR1[soft,connection-reset] received, process restarting
Fri Aug 07 12:40:29 2009 Restart pause, 5 second(s)

I've gone over the setup several times and can't find anything wrong - the hostname matches so it doesn't look like that is the issue.

I've attached screenshots of the config.

Any help anyone can offer is greatly appreciated.


This thread was automatically locked due to age.
  • 0
    What about the log in the Astaro?

    Is the domain behind the VPN login one that the VPN user is not allowed to login to?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hi, thanks for your reply.

    The Astaro Open VPN log remains blank (as is sometimes the case with Astaro logs...?). The user account in question was able to log in to the User Portal using their back-end AD account to download the client in the first place so I have to assume that, that is configured correctly.

    I will try the account with local authentication to see if that gets around it.

    Cheers,

    Tony.
  • 0 in reply to TJE
    Update:

    I've just changed the account to local authentication and tried again but still the same result. I even downloaded a new config for the VPN client but no luck.
  • 0
    The Open VPN logs in the Astaro are blank?  I've not experienced that.  Is the hostname of the Astaro a FQDN that is resolved by public name servers to the External IP of your Astaro?
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML