Re: [Openvpn-users] TCP vs. UDP in connection problem

[Frank Elsner <frank@xxxxxxxxxxxxxxxxxxxxx>]

On Wed, 01 Jun 2005 08:54:52 +0100 George Ross <gdmr@xxxxxxxxxxxx> wrote:
> > I've been spending the last few days troubleshooting an odd connection
> > problem to my OpenVPN 2 server, which I eventually narrowed down to a
> > problem with the local firewalls at the various client sites that I have
> > tested from.  In short without any kind of a firewall the connection goes
> > through like a champ, but with the firewall in place the connection would
> > fail on occation. ... NAT ...
> 
> One problem we hit with users behind NAT boxes was that their session 
> timeouts were set rather low.  If the link happened to be idle for a while 
> then the NAT box would drop the existing session.  Traffic from the server 
> end would then be thrown away until the client end did something which 
> caused a new NAT session and OpenVPN connection to be established.  We 
> didn't notice this happening when we were using shared-secret mode, but

I've exactly the same problem reported by Peter Bako <pbako@xxxxxxxxxx> 
*with* shared-secret mode and tun devices, even with *no* firewalls on both ends.

After "Peer Connection Initiated with ..." nothing happens, I can't 
ping the corresponding end.

Switching to TCP solved my problem.


--Frank Elsner

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users