Extra Autoryzacja HMAC (TLS -Auth) - what I do wrong?

[forum_dyskusyjne]

Hi,
I try to start this option: Extra Autoryzacja HMAC (TLS -Auth), but when I turn it on on the router, I can't connect.
When the option is turned off, the connection works properly.

I checked difference between config files.
File which has turn on options Extra Autoryzacja HMAC (TLS -Auth) contains:

</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-auth>

the other settings are the same.

I use OPENVPN for Android.
Router: TUF-AX5400 V1 - 3.0.0.4.388_24202.

File.ovpn

remote XXX.com 100XX
float
nobind
proto udp
dev tun
sndbuf 0
rcvbuf 0
keepalive 10 30

# for OpenVPN 2.4 or older
comp-lzo yes
# for OpenVPN 2.4 or newer
;compress lzo

auth-user-pass
client
auth SHA512
ignore-unknown-option cipher data-ciphers
cipher AES-256-GCM
data-ciphers AES-256-GCM
remote-cert-tls server

<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</ca>
<cert>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</cert>
<key>
-----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-auth>

 

[RMerlin]

Please post your question in English.

 

[forum_dyskusyjne]

I think...,
I found how to resolve problem....
1. Protokół: TCP (UDP not works)
2. HMAC Router (Incoming 0)
3. HMAC file setting (Incoming 1)
- key-direction 1 (New setting on the file connection)

And the most important.
Each changes setting VPN requires new connection file (Export).
Now connection works correctly, but is slower than without HMAC.