openvpn问题

675845836

tcp能正常连接
换udp后 如下日志麻烦定位一下问题

Mon Jan 15 15:37:00 2018 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Mon Jan 15 15:37:00 2018 Windows version 6.1 (Windows 7) 64bit
Mon Jan 15 15:37:00 2018 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Mon Jan 15 15:37:00 2018 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jan 15 15:37:00 2018 Need hold release from management interface, waiting...
Mon Jan 15 15:37:00 2018 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jan 15 15:37:00 2018 MANAGEMENT: CMD 'state on'
Mon Jan 15 15:37:00 2018 MANAGEMENT: CMD 'log all on'
Mon Jan 15 15:37:00 2018 MANAGEMENT: CMD 'echo all on'
Mon Jan 15 15:37:00 2018 MANAGEMENT: CMD 'hold off'
Mon Jan 15 15:37:00 2018 MANAGEMENT: CMD 'hold release'
Mon Jan 15 15:37:03 2018 MANAGEMENT: CMD 'username "Auth" "liang"'
Mon Jan 15 15:37:03 2018 MANAGEMENT: CMD 'password [...]'
Mon Jan 15 15:37:03 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:37:03 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:37:03 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:37:03 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:37:03 2018 UDP link local: (not bound)
Mon Jan 15 15:37:03 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:37:03 2018 MANAGEMENT: >STATE:1516001823,WAIT,,,,,,
Mon Jan 15 15:38:03 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:38:03 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:38:03 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:38:03 2018 MANAGEMENT: >STATE:1516001883,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:38:03 2018 Restart pause, 5 second(s)
Mon Jan 15 15:38:08 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:38:08 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:38:08 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:38:08 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:38:08 2018 UDP link local: (not bound)
Mon Jan 15 15:38:08 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:38:08 2018 MANAGEMENT: >STATE:1516001888,WAIT,,,,,,
Mon Jan 15 15:39:09 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:39:09 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:39:09 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:39:09 2018 MANAGEMENT: >STATE:1516001949,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:39:09 2018 Restart pause, 5 second(s)
Mon Jan 15 15:39:14 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:39:14 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:39:14 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:39:14 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:39:14 2018 UDP link local: (not bound)
Mon Jan 15 15:39:14 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:39:14 2018 MANAGEMENT: >STATE:1516001954,WAIT,,,,,,
Mon Jan 15 15:40:14 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:40:14 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:40:14 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:40:14 2018 MANAGEMENT: >STATE:1516002014,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:40:14 2018 Restart pause, 5 second(s)
Mon Jan 15 15:40:19 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:40:19 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:40:19 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:40:19 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:40:19 2018 UDP link local: (not bound)
Mon Jan 15 15:40:19 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:40:19 2018 MANAGEMENT: >STATE:1516002019,WAIT,,,,,,
Mon Jan 15 15:41:19 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:41:19 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:41:19 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:41:19 2018 MANAGEMENT: >STATE:1516002079,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:41:19 2018 Restart pause, 5 second(s)
Mon Jan 15 15:41:24 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:41:24 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:41:24 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:41:24 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:41:24 2018 UDP link local: (not bound)
Mon Jan 15 15:41:24 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:41:24 2018 MANAGEMENT: >STATE:1516002084,WAIT,,,,,,
Mon Jan 15 15:42:24 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:42:24 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:42:24 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:42:24 2018 MANAGEMENT: >STATE:1516002144,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:42:24 2018 Restart pause, 10 second(s)
Mon Jan 15 15:42:34 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:42:34 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:42:34 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:42:34 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:42:34 2018 UDP link local: (not bound)
Mon Jan 15 15:42:34 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:42:34 2018 MANAGEMENT: >STATE:1516002154,WAIT,,,,,,
Mon Jan 15 15:43:34 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:43:34 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:43:34 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:43:34 2018 MANAGEMENT: >STATE:1516002214,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:43:34 2018 Restart pause, 20 second(s)
Mon Jan 15 15:43:54 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:43:54 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:43:54 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:43:54 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:43:54 2018 UDP link local: (not bound)
Mon Jan 15 15:43:54 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:43:54 2018 MANAGEMENT: >STATE:1516002234,WAIT,,,,,,
Mon Jan 15 15:44:54 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:44:54 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:44:54 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:44:54 2018 MANAGEMENT: >STATE:1516002294,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:44:54 2018 Restart pause, 40 second(s)
Mon Jan 15 15:45:34 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:45:34 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:45:34 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:45:34 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:45:34 2018 UDP link local: (not bound)
Mon Jan 15 15:45:34 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:45:34 2018 MANAGEMENT: >STATE:1516002334,WAIT,,,,,,
Mon Jan 15 15:46:34 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:46:34 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:46:34 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:46:34 2018 MANAGEMENT: >STATE:1516002394,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:46:34 2018 Restart pause, 80 second(s)
Mon Jan 15 15:47:54 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:47:54 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:47:54 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:47:54 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:47:54 2018 UDP link local: (not bound)
Mon Jan 15 15:47:54 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:47:54 2018 MANAGEMENT: >STATE:1516002474,WAIT,,,,,,
Mon Jan 15 15:48:54 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:48:54 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:48:54 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:48:54 2018 MANAGEMENT: >STATE:1516002534,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:48:54 2018 Restart pause, 160 second(s)
Mon Jan 15 15:51:34 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:51:34 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:51:34 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:51:34 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:51:34 2018 UDP link local: (not bound)
Mon Jan 15 15:51:34 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:51:34 2018 MANAGEMENT: >STATE:1516002694,WAIT,,,,,,
Mon Jan 15 15:52:34 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:52:34 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:52:34 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:52:34 2018 MANAGEMENT: >STATE:1516002754,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:52:34 2018 Restart pause, 300 second(s)
Mon Jan 15 15:57:34 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 15 15:57:34 2018 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Mon Jan 15 15:57:34 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:57:34 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 15 15:57:34 2018 UDP link local: (not bound)
Mon Jan 15 15:57:34 2018 UDP link remote: [AF_INET]122.226.181.101:11122
Mon Jan 15 15:57:34 2018 MANAGEMENT: >STATE:1516003054,WAIT,,,,,,
Mon Jan 15 15:58:34 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 15 15:58:34 2018 TLS Error: TLS handshake failed
Mon Jan 15 15:58:34 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 15 15:58:34 2018 MANAGEMENT: >STATE:1516003114,RECONNECTING,tls-error,,,,,
Mon Jan 15 15:58:34 2018 Restart pause, 300 second(s)

爱快技术支持08

楼主您好，通过日志来看，您出现了两个问题
1：两端的证书不匹配
2：设置的账号密码对应不上
您排查下这两个问题

675845836

http://www.rendoumi.com/openvpn- ... e-gu-zhang-pai-chu/
我的情况跟这个博主一样  同一个局域网正常
外网端口tcp转发拨号正常
外网端口转发udp就错误了

675845836

爱快技术支持08 发表于 2018-1-15 18:24
楼主您好，通过日志来看，您出现了两个问题
1：两端的证书不匹配
2：设置的账号密码对应不上

我的情况跟这个博主一样
http://www.rendoumi.com/openvpn- ... e-gu-zhang-pai-chu/
外网转发tcp端口正常
外网转发udp端口进来 连接产生上面的日志