Project

General

Profile

Actions

Bug #5344

closed

OpenVPN Peer to Peer - wrong status after reconnection

Added by Grzegorz Sliwa over 8 years ago. Updated over 8 years ago.

Status:
Duplicate
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
10/26/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:

Description

I have created VPN tunnel. It is SiteToSite OpenVPN.
Both side have CARP Cluster with 2 ISP each.

ServerA1 (FW-AmuProd) VPN Tunnel ServerB1 (FW-AmuAT)
<------------->
ServerA2 ServerB2

I have few situation that Status: OpenVPN doesn't show established tunnel between two sites but it should. I can ping both sides. I have a routing to subnets SiteA and SiteB.

Right now I have this situation.
On Server side (I was reboot Master Server - ServerA1 , CARP switch to ServerB1, VPN tunnel was established again. When ServerA1 booted it was automatically switched as Master. Also I have successfully established VPN tunnel again)
after this I have a connection to ServerB1 / ServerB1 from ServerA1 , but in doesn't show in Status: OpenVPN - Peer to Peer Server Instance Statistics.
On client side I see Connection in Status: OpenVPN Client Instance Statistics.

I can ping from ServerB to ServerA , and from ServerA to ServerB.

OpenVPN on Server Side telling me that I don't have a VPN tunnel but it is. - ITs not OK.
OpenVPN on Client Side telling me that I have a VPN tunnel. - ITs OK

When on Server Side I will manually restart this tunnel, VPN tunnel will be establish again and I will have it on Status: OpenVPN


Files

pfsense_server1.jpg (105 KB) pfsense_server1.jpg Grzegorz Sliwa, 10/26/2015 02:18 AM
pfsense_client1.jpg (101 KB) pfsense_client1.jpg Grzegorz Sliwa, 10/26/2015 02:18 AM
Actions #1

Updated by Phillip Davis over 8 years ago

This sounds a lot like https://redmine.pfsense.org/issues/4642
The OpenVPN tunnel is actually running fine, passing user data... But the status screens have lost track of the PID of the relevant OpenVPN server or client process at one (or possibly even both) end and so from the status displays you cannot seee that the tunnel is up.

Have a read of that issue, then comment. If you have a way to reproduce this then it would be helpful.

Actions #2

Updated by Chris Buechler over 8 years ago

  • Status changed from New to Duplicate

duplicate of #4642

Actions

Also available in: Atom PDF