Help with Openvpn server

[beerglass007]

I'm trying to connect to a VPN server using Openvpn, I've uploaded the .ovpn file onto my router and when attempting to connect just keeps saying "connecting" and finally fails

I've attached the OVPN file below and my logs from the router

I'm running Merlin
Current Version : 384.13_0

Its a Asus RT-AC68U




aremote uk-lon1.privatevpn.com 1196 udp
nobind
dev tun

# Options
tun-ipv6
remote-cert-tls server
client
comp-lzo
persist-key
persist-tun
verb 3

# Crypto
cipher AES-128-CBC
auth SHA256
auth-user-pass

# Cert
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
f035a3acaeffb5aedb5bc920bca26ca7
ac701da88249008e03563eba6af6d262
5ac8ba1e5e0921f76be004c24ae4fd43
e42caf0f84269ad44d8d4c14ba45b138
6f251c7330d8cc56afd16d5168356456
51ef7e87a723ac78ae0d49da5b2f2d78
ceafcff7a6367d0712628a6547e5fc8f
ef93c87f7bcd6107c7b1ae68396e944a
adae50111d01a5d0c67223d667bdbf1b
f434bdef03644ecc5386e102724eef38
72f66547eb66dc0fea8286069cb082a4
1c89083b28fe9f4cec25d48017f26c4f
d85b25ddf2ae5448dd2bccf3eef2aacf
42ef1e88c3248c689423d0b05a641e9e
79dd6b9b5c40f0cc21ffdc891b9eee95
1477b537261cb56a958a4f490d961ecb
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction 1



Logs files below




Sep 5 07:49:21 ovpn-client2[24809]: auth_user_pass_file = 'up'

Sep 5 07:49:21 ovpn-client2[24809]: OpenVPN 2.4.7 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 31 2019

Sep 5 07:49:21 ovpn-client2[24809]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.08

Sep 5 07:49:21 ovpn-client2[24810]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

Sep 5 07:49:21 ovpn-client2[24810]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Sep 5 07:49:21 ovpn-client2[24810]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Sep 5 07:49:21 ovpn-client2[24810]: LZO compression initializing

Sep 5 07:49:21 ovpn-client2[24810]: Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]

Sep 5 07:49:21 ovpn-client2[24810]: Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]

Sep 5 07:49:21 ovpn-client2[24810]: Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-client'

Sep 5 07:49:21 ovpn-client2[24810]: Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-server'

Sep 5 07:49:21 ovpn-client2[24810]: TCP/UDP: Preserving recently used remote address: [AF_INET]194.132.121.4:1196

Sep 5 07:49:21 ovpn-client2[24810]: Socket Buffers: R=[122880->122880] S=[122880->122880]

Sep 5 07:49:21 ovpn-client2[24810]: UDP link local: (not bound)

Sep 5 07:49:21 ovpn-client2[24810]: UDP link remote: [AF_INET]194.132.121.4:1196

Sep 5 07:49:21 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 124675764 1324677786 3225337678 784975203 3204692224 349 1891500288 0 ]

Sep 5 07:49:23 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 225119318 1383720765 4284869201 2304594029 3545233920 605 1891500288 0 ]

Sep 5 07:49:27 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3570646156 3874322175 2704922003 1245264765 1996763904 861 1891500288 0 ]

Sep 5 07:49:35 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3409944027 2968804483 2956420332 1261537482 1265473024 1117 1891500288 0 ]

Sep 5 07:49:51 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3395022109 2752423819 4089464652 2426550363 2358706432 1373 1891500288 0 ]

Sep 5 07:50:21 ovpn-client2[24810]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Sep 5 07:50:21 ovpn-client2[24810]: TLS Error: TLS handshake failed

Sep 5 07:50:21 ovpn-client2[24810]: TCP/UDP: Closing socket

Sep 5 07:50:21 ovpn-client2[24810]: SIGUSR1[soft,tls-error] received, process restarting

Sep 5 07:50:21 ovpn-client2[24810]: Restart pause, 5 second(s)

Sep 5 07:50:26 ovpn-client2[24810]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

Sep 5 07:50:26 ovpn-client2[24810]: Re-using SSL/TLS context

Sep 5 07:50:26 ovpn-client2[24810]: LZO compression initializing

Sep 5 07:50:26 ovpn-client2[24810]: Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]

Sep 5 07:50:26 ovpn-client2[24810]: Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]

Sep 5 07:50:26 ovpn-client2[24810]: Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-client'

Sep 5 07:50:26 ovpn-client2[24810]: Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-server'

Sep 5 07:50:26 ovpn-client2[24810]: TCP/UDP: Preserving recently used remote address: [AF_INET]194.132.121.4:1196

Sep 5 07:50:26 ovpn-client2[24810]: Socket Buffers: R=[122880->122880] S=[122880->122880]

Sep 5 07:50:26 ovpn-client2[24810]: UDP link local: (not bound)

Sep 5 07:50:26 ovpn-client2[24810]: UDP link remote: [AF_INET]194.132.121.4:1196

Sep 5 07:50:26 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3919703865 1699211311 3450212339 3598202119 2542883072 349 1891516928 0 ]

Sep 5 07:50:28 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3885229323 3033493463 3639311160 4086899793 239896064 605 1891516928 0 ]

Sep 5 07:50:32 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 587389822 2681443657 2504413407 627017836 493323520 861 1891516928 0 ]

Sep 5 07:50:41 ovpn-client2[24810]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3377257729 269016127 2511666342 2815873563 1940156416 1117 1891516928 0 ]

 

[beerglass007]

 

[beerglass007]

 

[beerglass007]

Bump

 

[Jack Yaz]

You've set user and password auth only to yes, which doesn't look right to me

 

[beerglass007]

Changed and still getting these errors

Sep 5 18:31:22 ovpn-client2[4477]: OpenVPN 2.4.7 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 31 2019
Sep 5 18:31:22 ovpn-client2[4477]: library versions: OpenSSL 1.1.1c 28 May 2019, LZO 2.08
Sep 5 18:31:22 ovpn-client2[4478]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 5 18:31:22 ovpn-client2[4478]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 5 18:31:22 ovpn-client2[4478]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 5 18:31:22 ovpn-client2[4478]: LZO compression initializing
Sep 5 18:31:22 ovpn-client2[4478]: Control Channel MTU parms [ L:1654 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Sep 5 18:31:22 ovpn-client2[4478]: Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Sep 5 18:31:22 ovpn-client2[4478]: Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1582,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-client'
Sep 5 18:31:22 ovpn-client2[4478]: Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1582,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,tls-auth,key-method 2,tls-server'
Sep 5 18:31:22 ovpn-client2[4478]: TCP/UDP: Preserving recently used remote address: [AF_INET]194.132.121.4:1196
Sep 5 18:31:22 ovpn-client2[4478]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Sep 5 18:31:22 ovpn-client2[4478]: UDP link local: (not bound)
Sep 5 18:31:22 ovpn-client2[4478]: UDP link remote: [AF_INET]194.132.121.4:1196
Sep 5 18:31:22 ovpn-client2[4478]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 1921556504 3738315443 3839426986 66865050 702416384 349 1901361664 0 ]
Sep 5 18:31:24 ovpn-client2[4478]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3789427549 1995943902 4090030973 2971440797 4058582528 605 1901361664 0 ]
Sep 5 18:31:28 ovpn-client2[4478]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 2504445579 3828280129 4141305959 1542813019 1238614016 861 1901361664 0 ]
Sep 5 18:31:36 ovpn-client2[4478]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 3146078915 433539764 2638334599 2822910421 96225024 1117 1901361664 0 ]
Sep 5 18:31:52 ovpn-client2[4478]: UDP WRITE [42] to [AF_INET]194.132.121.4:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 4223885972 2551846752 1209859111 154811994 3441364480 1373 1901361664 0 ]

 

[SP2005]

Are you trying to connect from your router to a VPN server outside your own WAN, or are you trying til connect from outside, like from your phone to your router ?

 

[beerglass007]

Are you trying to connect from your router to a VPN server outside your own WAN, or are you trying til connect from outside, like from your phone to your router ?

Inside > outside via WAN

So my router is a client and the VPN server is outside

 

[SP2005]

Ok, I don't know anything about that.

I have only tried from outside > in to LAN

 

[miroco]

What does the support at PrivateVPN say?

https://privatevpn.com/support/getting-started/routers/asus-rt-models/openvpn