Bug #5344
closedOpenVPN Peer to Peer - wrong status after reconnection
0%
Description
I have created VPN tunnel. It is SiteToSite OpenVPN.
Both side have CARP Cluster with 2 ISP each.
ServerA1 (FW-AmuProd) VPN Tunnel ServerB1 (FW-AmuAT)
<------------->
ServerA2 ServerB2
I have few situation that Status: OpenVPN doesn't show established tunnel between two sites but it should. I can ping both sides. I have a routing to subnets SiteA and SiteB.
Right now I have this situation.
On Server side (I was reboot Master Server - ServerA1 , CARP switch to ServerB1, VPN tunnel was established again. When ServerA1 booted it was automatically switched as Master. Also I have successfully established VPN tunnel again)
after this I have a connection to ServerB1 / ServerB1 from ServerA1 , but in doesn't show in Status: OpenVPN - Peer to Peer Server Instance Statistics.
On client side I see Connection in Status: OpenVPN Client Instance Statistics.
I can ping from ServerB to ServerA , and from ServerA to ServerB.
OpenVPN on Server Side telling me that I don't have a VPN tunnel but it is. - ITs not OK.
OpenVPN on Client Side telling me that I have a VPN tunnel. - ITs OK
When on Server Side I will manually restart this tunnel, VPN tunnel will be establish again and I will have it on Status: OpenVPN
Files
Updated by Phillip Davis about 9 years ago
This sounds a lot like https://redmine.pfsense.org/issues/4642
The OpenVPN tunnel is actually running fine, passing user data... But the status screens have lost track of the PID of the relevant OpenVPN server or client process at one (or possibly even both) end and so from the status displays you cannot seee that the tunnel is up.
Have a read of that issue, then comment. If you have a way to reproduce this then it would be helpful.