Re: [Openvpn-users] TCP works UDP fails

[Giancarlo Razzolini <linux-fan@xxxxxxxxxxx>]

Francois Wautier wrote:
> Wait a tick... I have exactly the same problem.
> 
> I have a Cisco router and things used to work with an older version of OpenVPN 
> (1.6).
> 
> Since I moved to v 2,  UDP doesn't work. TCP works like a charm.
> 
> Looking at it, it seems that the server side is not responding, although it 
> says it is.
> 
> In my case, the Cisco router is doing DNAT for my server. It just looks as if 
> NAT had stopped working for UDP packets. 
> 
> My 2 cents,
> 	François
> 
> 
> 
>>On Tuesday 05 July 2005 22:01, col_mil@xxxxxxxxxx wrote:
>>
>>>Have been stumped by this for months.
>>>
>>>Both server + client running debian sarge + openvpn 2.0-3.
>>>
>>>server receives client data via wireless access point on
>>>eth1, (client is wireless)
>>
>>What is the manufacturer and model of access point? I had openvpn UDP
>>problems with my D-Link DI-614+. The openvpn peer was on the Ethernet
>>switch, not wireless, but I still suspect the router.
>>
>>Changing the router to DMZ mode (passing everything through to the
>>openvpn peer) got things working again.
>>
>>I'm going to switch to a Linksys WAP and see if the openvpn UDP is
>>NAT'ed properly. It always worked behind a Linux NAT firewall.
> 
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
> from IBM. Find simple to follow Roadmaps, straightforward articles,
> informative Webcasts and more! Get everything you need to get up to
> speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
> 
I had these kind of problem with some d-link so called "router"
(seriously, some of them are so confuse, that they doesn't deserve being
called router). But it might also be a timeout. Try increasing the
hand-window parameter to something more than 60 seconds and see what
happens. If you still cannot get a connection, then try doing some
traffic analisys with tcpdump or iptraf. If you don't see the packets
coming on your machine, then you can surelly blame the router.

-- 
Giancarlo Razzolini
Linux User 172199
Moleque Sem Conteudo Numero #002
Slackware Current
Snike Tecnologia em Informática
4386 2A6F FFD4 4D5F 5842  6EA0 7ABE BBAB 9C0E 6B85

Attachment: signature.asc
Description: OpenPGP digital signature