VPN Not working

[sahrempire]

So I had the VPN working previously, but I downgraded my service, blah blah. They took the router that was doing all of my port forwarding, etc. So now I have a modem and a router behind it. when I try to connect the VPN Client it times out and never connects. The HDAGui is attempting to connect to a public IP owned by my ISP but is not the public IP for my HDA, is there anywhere I can go to specify my IP for the software to connect to?

[cpg]

First, the dynamic DNS should be working. That would be the root cause. Second, you can edit the configuration files (the location of which depend on the OS). I think the wiki had references for Linux clients, Mac OS X. Not sure if it has info on Windows, but I think you can get to edit them via Start > Programs > HdaConnect > ...

I think. It's been a long time.

[sahrempire]

Hi, thanks for your reply. How do I check/fix the DynDNS?

Secondly that config file doesnt specify an IP address. heres the config:

Code: Select all

client dev tun proto udp resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert homehda.crt key homehda.key comp-lzo verb 3 auth-user-pass route-method exe route-delay 2

heres the error I get when I try to connect:

Fri Feb 22 11:50:30 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Feb 22 11:50:30 2013 TLS Error: TLS handshake failed

I opened wireshark, what I see is a bunch or udp packets outgoing to the ISP IP, no replies, presumably because that ISP router filers that traffic.

[bigfoot65]

Could there be a firewall causing issues?

[sahrempire]

I dont think so, As I said, the biggest issue seems to be this IP address thing.. this is my latest info after applying the fix here: https://wiki.amahi.org/index.php/Preven ... In_OpenVPN

Sat Apr 06 23:47:58 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Apr 06 23:47:58 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Apr 06 23:47:58 2013 Re-using SSL/TLS context
Sat Apr 06 23:47:58 2013 LZO compression initialized
Sat Apr 06 23:47:58 2013 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Apr 06 23:47:58 2013 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Apr 06 23:47:58 2013 Local Options hash (VER=V4): '9e7066d2'
Sat Apr 06 23:47:58 2013 Expected Remote Options hash (VER=V4): '162b04de'
Sat Apr 06 23:47:58 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Apr 06 23:47:58 2013 UDPv4 link local: [undef]
Sat Apr 06 23:47:58 2013 UDPv4 link remote: 24.88.73.xx:1194
Sat Apr 06 23:48:59 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Apr 06 23:48:59 2013 TLS Error: TLS handshake failed
Sat Apr 06 23:48:59 2013 TCP/UDP: Closing socket

That IP address, 24.88.73.xx belongs to my ISP.

[bigfoot65]

Sorry I am not much help. I don't know what else to check.

Your HDA's network IP range is different than that of the remote network, right? (e.g. if your HDA's IP address is 192.168.1.X, you cannot connect to it on a remote network also using 192.168.1.X)

There are so many variables with VPN, it's hard to say what the issue might be. Have you tried looking around the internet for assistance? There might be something there that is similar to your situation.

[sahrempire]

Thanks very much, i'm going to contact the ISP, see if they have any ideas. This all started when I downgraded my internet service, I'm almost certain that they moved me to another public IP range, perhaps there is a FW on that network that drops certain traffic.

[bigfoot65]

No problem. Anything is possible and I would not be surprised if it was an ISP problem. I have seen this in the past with other users.

Hope you get it sorted out.