Community discussions

MikroTik App
 
neacel
just joined
Topic Author
Posts: 13
Joined: Fri Dec 20, 2019 9:01 am

OpenVPN Connection

Tue Dec 14, 2021 8:43 am

Greetings!

My OpenVPN GUI cannot connect when using a different IP address or outside the LAN network but when I'm connected to LAN network the OpenVPN GUI is connected.

See below logs.

Tue Dec 14 14:36:00 2021 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
Tue Dec 14 14:36:00 2021 Current Parameter Settings:
Tue Dec 14 14:36:00 2021 config = 'client.ovpn'
Tue Dec 14 14:36:00 2021 mode = 0
Tue Dec 14 14:36:00 2021 show_ciphers = DISABLED
Tue Dec 14 14:36:00 2021 show_digests = DISABLED
Tue Dec 14 14:36:00 2021 show_engines = DISABLED
Tue Dec 14 14:36:00 2021 genkey = DISABLED
Tue Dec 14 14:36:00 2021 genkey_filename = '[UNDEF]'
Tue Dec 14 14:36:00 2021 key_pass_file = '[UNDEF]'
Tue Dec 14 14:36:00 2021 show_tls_ciphers = DISABLED
Tue Dec 14 14:36:00 2021 NOTE: --mute triggered...
Tue Dec 14 14:36:00 2021 291 variation(s) on previous 10 message(s) suppressed by --mute
Tue Dec 14 14:36:00 2021 OpenVPN 2.5.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 28 2020
Tue Dec 14 14:36:00 2021 Windows version 10.0 (Windows 10 or greater) 64bit
Tue Dec 14 14:36:00 2021 library versions: OpenSSL 1.1.1h 22 Sep 2020, LZO 2.10
Tue Dec 14 14:36:00 2021 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Dec 14 14:36:00 2021 Need hold release from management interface, waiting...
Tue Dec 14 14:36:00 2021 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Dec 14 14:36:00 2021 MANAGEMENT: CMD 'state on'
Tue Dec 14 14:36:00 2021 MANAGEMENT: CMD 'log all on'
Tue Dec 14 14:36:01 2021 MANAGEMENT: CMD 'echo all on'
Tue Dec 14 14:36:01 2021 MANAGEMENT: CMD 'bytecount 5'
Tue Dec 14 14:36:01 2021 MANAGEMENT: CMD 'hold off'
Tue Dec 14 14:36:01 2021 MANAGEMENT: CMD 'hold release'
Tue Dec 14 14:36:01 2021 MANAGEMENT: CMD 'password [...]'
Tue Dec 14 14:36:01 2021 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Tue Dec 14 14:36:01 2021 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Tue Dec 14 14:36:01 2021 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Dec 14 14:36:01 2021 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Dec 14 14:36:01 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]222.127.90.187:1194
Tue Dec 14 14:36:01 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Dec 14 14:36:01 2021 Attempting to establish TCP connection with [AF_INET]222.127.90.187:1194 [nonblock]
Tue Dec 14 14:36:01 2021 MANAGEMENT: >STATE:1639463761,TCP_CONNECT,,,,,,
Tue Dec 14 14:38:01 2021 TCP: connect to [AF_INET]222.127.90.187:1194 failed: Unknown error
Tue Dec 14 14:38:01 2021 SIGUSR1[connection failed(soft),init_instance] received, process restarting
Tue Dec 14 14:38:01 2021 MANAGEMENT: >STATE:1639463881,RECONNECTING,init_instance,,,,,
Tue Dec 14 14:38:01 2021 Restart pause, 5 second(s)
Tue Dec 14 14:38:06 2021 Re-using SSL/TLS context
Tue Dec 14 14:38:06 2021 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Tue Dec 14 14:38:06 2021 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Tue Dec 14 14:38:06 2021 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Dec 14 14:38:06 2021 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Dec 14 14:38:06 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]222.127.90.187:1194
Tue Dec 14 14:38:06 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Dec 14 14:38:06 2021 Attempting to establish TCP connection with [AF_INET]222.127.90.187:1194 [nonblock]
Tue Dec 14 14:38:06 2021 MANAGEMENT: >STATE:1639463886,TCP_CONNECT,,,,,,
Tue Dec 14 14:40:07 2021 TCP: connect to [AF_INET]222.127.90.187:1194 failed: Unknown error
Tue Dec 14 14:40:07 2021 SIGUSR1[connection failed(soft),init_instance] received, process restarting
Tue Dec 14 14:40:07 2021 MANAGEMENT: >STATE:1639464007,RECONNECTING,init_instance,,,,,
Tue Dec 14 14:40:07 2021 Restart pause, 5 second(s)
Tue Dec 14 14:40:12 2021 Re-using SSL/TLS context
Tue Dec 14 14:40:12 2021 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Tue Dec 14 14:40:12 2021 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Tue Dec 14 14:40:12 2021 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Dec 14 14:40:12 2021 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Dec 14 14:40:12 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]222.127.90.187:1194
Tue Dec 14 14:40:12 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Dec 14 14:40:12 2021 Attempting to establish TCP connection with [AF_INET]222.127.90.187:1194 [nonblock]
Tue Dec 14 14:40:12 2021 MANAGEMENT: >STATE:1639464012,TCP_CONNECT,,,,,,
 
User avatar
smyers119
Member Candidate
Member Candidate
Posts: 232
Joined: Sat Feb 27, 2021 8:16 pm
Location: USA

Re: OpenVPN Connection

Tue Dec 14, 2021 8:50 am

do you have a firewall rule allowing the connection? post firewall config
 
neacel
just joined
Topic Author
Posts: 13
Joined: Fri Dec 20, 2019 9:01 am

Re: OpenVPN Connection

Tue Dec 14, 2021 9:11 am

do you have a firewall rule allowing the connection? post firewall config
None. May you provide firewall rule?
 
User avatar
MickeyT
Member Candidate
Member Candidate
Posts: 125
Joined: Tue Feb 18, 2020 7:06 am
Location: Australia

Re: OpenVPN Connection

Wed Dec 15, 2021 9:08 am

Assuming you haven't changed the port used by OpenVPN you need to add the following rule:

/ip firewall filter add chain=input dst-port=1194 protocol=tcp action=accept comment="OpenVPN VPN"

And move it to near the top of your firewall rules so that it isn't overridden by another rule.
 
User avatar
nichky
Forum Guru
Forum Guru
Posts: 1281
Joined: Tue Jun 23, 2015 2:35 pm

Re: OpenVPN Connection

Wed Dec 15, 2021 11:01 am

make sure your router is in proper time zone

Who is online

Users browsing this forum: Amazon [Bot], hasmidzul, Syn and 47 guests