Community discussions

MikroTik App
 
User avatar
marsark
Member Candidate
Member Candidate
Topic Author
Posts: 138
Joined: Mon Jul 20, 2009 4:02 pm
Location: Prague, Czech Republic

OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Tue Oct 05, 2010 2:04 am

I have noticed after the upgrade of my Linux server, that ovpn client fails to connect to openvpn server 2.1.2, version 2.1.0 is ok. RB411 fails to connect to server and RB433AH hangs partialy. It is unable to list interfaces in WinBox. Console says: Time Out, when tried to list interfaces.
 
dssmiktik
Forum Veteran
Forum Veteran
Posts: 732
Joined: Fri Aug 17, 2007 8:42 am

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Tue Oct 05, 2010 5:18 am

First, I would check the changelog of openvpn server between 2.1.0 -> 2.1.2. Also, in RouterOS, try to turn on debug logging (not sure the exact logging, but debug should work). Then compare the changelog with RouterOS debug messages and check where it's failing, or what might be causing the problem.

Also, it's worth noting that Mikrotik is not investing much time into OpenVPN (and may be removed, just my opinion), so you may wish to try another VPN solution with Mikrotik.
 
Rhapsody01
just joined
Posts: 13
Joined: Thu Mar 05, 2009 6:29 pm
Location: France

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Tue Oct 05, 2010 11:42 pm

Same here :

I recently updated OVPN server to 2.1.3, i'm no longer able to connect with RouterOS 4.11

OVPN Clients : 2 MT with ROS 4.11 and OVPN V2.1.1 on my laptop
OVPN Server : OVPN V2.1.3 (windows 2008 x64) tried 2.2Beta3 as well, no luck.

Both Mikrotik routers hang up on connection with 100% Cpu usage --> Reboot.
This cause the server side to hang up as well.

My laptop is able to connect with OVPN 2.1.1

I'd like to move to another VPN solution, but how make a L2TP server with Windows 2008 web edition ? :s


Edit : Rolled back to OVPN 2.1.1 for the server -> Working like a charme
 
User avatar
benesm1
just joined
Posts: 18
Joined: Fri Oct 08, 2010 11:37 am
Location: Europe/Prague

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Fri Oct 08, 2010 3:34 pm

I am experiencing this issue as well. ROS 4.12 should better be fixed :)
 
User avatar
marsark
Member Candidate
Member Candidate
Topic Author
Posts: 138
Joined: Mon Jul 20, 2009 4:02 pm
Location: Prague, Czech Republic

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Wed Oct 13, 2010 12:44 am

I noticed same issue on another site. Result is identical, RB locks and VPN crashes. It is caused by newer version of OpenVPN at server side.
 
User avatar
lordcoke
newbie
Posts: 29
Joined: Thu Jun 10, 2010 10:11 am
Location: Germany
Contact:

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Thu Nov 18, 2010 6:34 pm

Same here. The problem stil exists in ROS 4.13. RB hangs when ovpn-client tries to connect to a OpenVPN 2.1.x server with x.509-certs.
 
siugh
just joined
Posts: 8
Joined: Fri Dec 31, 2010 1:49 pm

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Fri Dec 31, 2010 1:59 pm

Same here. The problem stil exists in ROS 4.13. RB hangs when ovpn-client tries to connect to a OpenVPN 2.1.x server with x.509-certs.
Hi all,

same here with ROS 4.12 and 5.0rc5. There are news on this issue? Thankyou!
 
siugh
just joined
Posts: 8
Joined: Fri Dec 31, 2010 1:49 pm

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Sun Jan 02, 2011 7:29 pm

Hi all,

does anybody solved this issue?
I've the same problem with ROS 5.0rc5 and 3.30.
OpenVPN server version is 2.1.4
With the previous version all was fine..
Thankyou!
 
Rhapsody01
just joined
Posts: 13
Joined: Thu Mar 05, 2009 6:29 pm
Location: France

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Mon Jan 03, 2011 11:42 am

It is weird that problem still persist on 5.0rc5 since it should have been fixed in rc4 :
What's new in 5.0rc4 (2010-Nov-22 16:58):

[...]
*) ovpn - make ovpn client work with OpenVPN v2.1.3;
[...]
 
dssmiktik
Forum Veteran
Forum Veteran
Posts: 732
Joined: Fri Aug 17, 2007 8:42 am

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Wed Jan 05, 2011 11:09 am

It is weird that problem still persist on 5.0rc5 since it should have been fixed in rc4 :
What's new in 5.0rc4 (2010-Nov-22 16:58):

[...]
*) ovpn - make ovpn client work with OpenVPN v2.1.3;
[...]
It should work with v2.1.3, but as siugh mentioned:
I've the same problem with ROS 5.0rc5 and 3.30.
OpenVPN server version is 2.1.4
With the previous version all was fine..
Thankyou!
It probably won't work with OpenVPN 2.1.4 (yet), until Mikrotik releases a fix.
 
Rhapsody01
just joined
Posts: 13
Joined: Thu Mar 05, 2009 6:29 pm
Location: France

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Wed Jan 05, 2011 11:46 am

Yeah i saw that, but if Mikrotik have to provide a new Ros on each (minor) ovpn version then the problem is not really fixed :)
 
dssmiktik
Forum Veteran
Forum Veteran
Posts: 732
Joined: Fri Aug 17, 2007 8:42 am

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Thu Jan 06, 2011 12:21 am

Yeah i saw that, but if Mikrotik have to provide a new Ros on each (minor) ovpn version then the problem is not really fixed :)
I tend to disagree. Basically, the changelog states that it fixes issues with a specific OpenVPN version. If OpenVPN updates to a new release, how is Mikrotik to "magically" work with the new version? The only way is to test against the latest version (Mikrotik + OpenVPN) and for Mikrotik to fix their OS to work with the newer versions of OpenVPN.

Hope this all makes sense :)
 
User avatar
Cha0s
Forum Guru
Forum Guru
Posts: 1142
Joined: Tue Oct 11, 2005 4:53 pm

Re: OVPN client in ROS 4.11 fails with OpenVPN server 2.1.2

Wed Jan 19, 2011 4:56 pm

I tend to disagree. Basically, the changelog states that it fixes issues with a specific OpenVPN version. If OpenVPN updates to a new release, how is Mikrotik to "magically" work with the new version? The only way is to test against the latest version (Mikrotik + OpenVPN) and for Mikrotik to fix their OS to work with the newer versions of OpenVPN.
I also tend to disagree.

It is not normal to have a system that almost hangs just because the server side changed to a new version.

If there are changes in the server side that are not compatible with the client side of mikrotik then it just should not connect. Not give 100% load not being able to do practically nothing.

There is no excuse. period.

Who is online

Users browsing this forum: d513 and 129 guests