Hey All,
I have an issue with OpenVPN as long I use it on MT routers. It takes up to 20 seconds (until the client says it’s connected) to establish a connection from a Mac (tunnelblick or viscosity) or Windows client.
It doesn’t make a difference which MT model I use, no matter if it’s a hexLite or a CCR.
When using the official iOS client the connection is established in 1 second = instantly! Strange, isn’t it?
I’ve also a PFSense installation where the client on Win & Mac establishes in 1-2 seconds (UDP is used instead of TCP only on the Mikrotiks).
remote sstp.ontpg.com 8443 tcp-client
nobind
dev tun
persist-tun
persist-key
pull
auth-user-pass
tls-client
ca ca.crt
pkcs12 pkcs.p12
route 1.2.3.0 255.255.252.0
route 2.2.2.0 255.255.255.0
route 3.3.3.0 255.255.255.0
route 10.10.120.0 255.255.255.0 default default
dhcp-option DNS 1.2.3.4
dhcp-option DNS 1.2.3.5
dhcp-option DOMAIN domain.local
auth sha1
cipher AES-128-CBC
09:23:12 ovpn,info TCP connection established from 77.7.127.48
09:23:12 ovpn,debug,packet sent P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=867dbedb4fa4bdcb pid=0 DATA len=0
09:23:13 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=73872731422e75db pid=0 DATA len=0
09:23:13 ovpn,debug,packet sent P_ACK kid=0 sid=867dbedb4fa4bdcb [0 sid=73872731422e75db] DATA len=0
09:23:13 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=73872731422e75db [0 sid=867dbedb4fa4bdcb] pid=0 DATA len=0
09:23:13 ovpn,debug,error duplicate packet, dropping
09:23:14 ovpn,debug,packet rcvd P_CONTROL kid=0 sid=73872731422e75db pid=1 DATA len=173
09:23:14 ovpn,debug,packet sent P_ACK kid=0 sid=867dbedb4fa4bdcb [1 sid=73872731422e75db] DATA len=0
09:23:14 ovpn,debug,packet sent P_CONTROL kid=0 sid=867dbedb4fa4bdcb pid=1 DATA len=1400
09:23:14 ovpn,debug,packet sent P_CONTROL kid=0 sid=867dbedb4fa4bdcb pid=2 DATA len=1400
09:23:14 ovpn,debug,packet sent P_CONTROL kid=0 sid=867dbedb4fa4bdcb pid=3 DATA len=127
09:23:14 ovpn,debug,packet rcvd P_ACK kid=0 sid=73872731422e75db [1 sid=867dbedb4fa4bdcb] DATA len=0
09:23:14 ovpn,debug,packet rcvd P_ACK kid=0 sid=73872731422e75db [2 sid=867dbedb4fa4bdcb] DATA len=0
09:23:14 ovpn,debug,packet rcvd P_CONTROL kid=0 sid=73872731422e75db [3 sid=867dbedb4fa4bdcb] pid=2 DATA len=1170
09:23:14 ovpn,debug,packet sent P_ACK kid=0 sid=867dbedb4fa4bdcb [2 sid=73872731422e75db] DATA len=0
09:23:14 ovpn,debug,packet rcvd P_CONTROL kid=0 sid=73872731422e75db pid=3 DATA len=1170
09:23:14 ovpn,debug,packet sent P_ACK kid=0 sid=867dbedb4fa4bdcb [3 sid=73872731422e75db] DATA len=0
09:23:14 ovpn,debug,packet rcvd P_CONTROL kid=0 sid=73872731422e75db pid=4 DATA len=234
09:23:14 ovpn,debug,packet sent P_ACK kid=0 sid=867dbedb4fa4bdcb [4 sid=73872731422e75db] DATA len=0
09:23:14 ovpn,debug,packet sent P_CONTROL kid=0 sid=867dbedb4fa4bdcb pid=4 DATA len=51
09:23:14 ovpn,debug,packet rcvd P_CONTROL kid=0 sid=73872731422e75db [4 sid=867dbedb4fa4bdcb] pid=5 DATA len=452
09:23:14 ovpn,debug,packet sent P_ACK kid=0 sid=867dbedb4fa4bdcb [5 sid=73872731422e75db] DATA len=0
09:23:15 ovpn,info : using encoding - AES-128-CBC/SHA1
09:23:15 ovpn,info,account flo logged in, 10.10.100.251
09:23:15 ovpn,debug,packet sent P_CONTROL kid=0 sid=867dbedb4fa4bdcb pid=5 DATA len=227
09:23:15 ovpn,debug,packet rcvd P_ACK kid=0 sid=73872731422e75db [5 sid=867dbedb4fa4bdcb] DATA len=0
09:23:17 ovpn,info <ovpn-flo>: connected
09:23:18 ovpn,debug,packet rcvd P_CONTROL kid=0 sid=73872731422e75db pid=6 DATA len=42
Do you have any ideas how to speed it up? IKEv2 on iOS, Mac and Windows 10 establishes in 1 second.
The strange thing is how fast the OpenVPN client connects with the exact same config.
Best regards, Flo.
