Dco connect error in OpenNPN connection

NETWORKING SOLUTIONS
1

Hello!
I Get this error in englich in my OpenVPN GUI in Windows:
dco connect error the semaphore timeout period has expired.
Wed Oct 9 12:00:07 2024 dco connect error: Das Zeitlimit für die Semaphore wurde erreicht. (errno=121)
When i disable dco in the config i get litterally an “unnown” connection error…
I created once the keys in ubuntu with easy rsa and a econd time in Windows with easy rsa shell:

vpn config

client
dev tun_c_ovpn
proto tcp
remote my.server.pub.ip 1194
resolv-retry infinite
keepalive 5 10
nobind
persist-key
persist-tun
verb 3
cipher AES-256-GCM
<ca>
-----BEGIN CERTIFICATE-----
ca from rut
-----END CERTIFICATE-----

</ca>

<cert>
-----BEGIN CERTIFICATE-----
user/clientcert
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----
private user/cientkey
-----END PRIVATE KEY-----


</key>

Its the first tie i had to create a .ovpn file manually. I had to change the cipher, because the default one is not compatiple with dco, but still get dco timeout

What i miss a little is a log where i can see if the vpn cient is connecting to the rut, i kknow at sophos i have to see the firewall traffic, but i dont know where i can see it in the RUT - i see something in connections, but my ip whith i trying to connect is not there.
The Wireguard VPN config+Connection was successfull.

Thank you for your input!

3

Hello,

Please check the logs on your Teltonika device, as they could help you determine the cause of the issue. You can do this on the WebUI by navigating to System → Maintenance → Troubleshoot and checking “System logs”.

Please let me know if you need any additional assistance with this.

Best regards,

4

There is nothing vpn related visible in this log

5

Hello,

Could you please try adding disable-dco to the client configuration and let me know if it helps?

Best regards,

6

I get this:

Tue Oct 15 16:14:10 2024 MANAGEMENT: CMD 'echo on all'
Tue Oct 15 16:14:10 2024 MANAGEMENT: CMD 'bytecount 5'
Tue Oct 15 16:14:10 2024 MANAGEMENT: CMD 'state'
Tue Oct 15 16:14:10 2024 MANAGEMENT: CMD 'hold off'
Tue Oct 15 16:14:10 2024 MANAGEMENT: CMD 'hold release'
Tue Oct 15 16:14:10 2024 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Oct 15 16:14:10 2024 TCP/UDP: Preserving recently used remote address: [AF_INET]62.112.81.213:1194
Tue Oct 15 16:14:10 2024 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Oct 15 16:14:10 2024 Attempting to establish TCP connection with [AF_INET]62.112.81.213:1194
Tue Oct 15 16:14:10 2024 MANAGEMENT: >STATE:1729001650,TCP_CONNECT,,,,,,
Tue Oct 15 16:16:11 2024 TCP: connect to [AF_INET]62.112.81.213:1194 failed: Unknown error
Tue Oct 15 16:16:11 2024 SIGUSR1[connection failed(soft),connection-failed] received, process restarting
Tue Oct 15 16:16:11 2024 MANAGEMENT: >STATE:1729001771,RECONNECTING,connection-failed,,,,,
Tue Oct 15 16:16:11 2024 Restart pause, 1 second(s)
Tue Oct 15 16:16:12 2024 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Oct 15 16:16:12 2024 TCP/UDP: Preserving recently used remote address: [AF_INET]62.112.81.213:1194
Tue Oct 15 16:16:12 2024 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Oct 15 16:16:12 2024 Attempting to establish TCP connection with [AF_INET]62.112.81.213:1194
Tue Oct 15 16:16:12 2024 MANAGEMENT: >STATE:1729001772,TCP_CONNECT,,,,,,
7

This topic was automatically closed after 15 days. New replies are no longer allowed.