VPN server Authenticate/decrypt errors

[Gravityz]

Lately it seems that my vpn is slow.
i can connect without problems but i notice these strange errors in the log
i get these errors when testing the vpn throughput with speedtest.net

download speed is 0.26Mbps(should be around 14Mbps)
upload speed is 10Mbps(should be limited to 4G speed)


Aug 30 12:53:20 vpnserver1[2596]: client/109.38.138.236:54421 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6535 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Aug 30 12:53:20 vpnserver1[2596]: client/109.38.138.236:54421 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6536 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Aug 30 12:53:20 vpnserver1[2596]: client/109.38.138.236:54421 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6537 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Aug 30 12:53:20 vpnserver1[2596]: client/109.38.138.236:54421 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6538 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Aug 30 12:53:20 vpnserver1[2596]: client/109.38.138.236:54421 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6539 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Aug 30 12:53:20 vpnserver1[2596]: client/109.38.138.236:54421 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #6540 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

 

[ColinTaylor]

It could be a slow or unreliable internet connection. Try using TCP as the VPN transport instead of UDP.

Or perhaps you could lower the MTU on the client side.

 

[Gravityz]

Hi Colin,
changed to TCP and that made a world of difference
download 14Mbps
upload 12Mbps

seems that solved he problem.

could this be related to a modem change?

i replaced a puma6 modem with a UBC1318 low latency modem.
looks like the connection is better with lower latency(except for the vpn problem)

all seems fine now

thanks again for your help

 

[ColinTaylor]

could this be related to a modem change?

i replaced a puma6 modem with a UBC1318 low latency modem.
looks like the connection is better with lower latency(except for the vpn problem)

I think it's unlikely. If it were I think it would be severely impacting your normal home internet use. You could check the log on the modem to see if there are problems with the connection. It's more likely to be a congested mobile network IMHO.

 

[Gravityz]

ok thanks.
modem log is looking fine and intranet is also working without any problems.
glad we could nule this out because the modem replacement was specifically to get rid of latency spikes

 

[Gravityz]

these are now in the log
Aug 30 14:08:32 vpnserver1[10881]: client/109.38.138.236:61577 Connection reset, restarting [0]
Aug 30 14:08:48 vpnserver1[10881]: client/109.38.138.236:61706 Connection reset, restarting [0]
Aug 30 14:09:01 vpnserver1[10881]: client/109.38.138.236:61707 Connection reset, restarting [0]
Aug 30 14:09:15 vpnserver1[10881]: client/109.38.138.236:61708 Connection reset, restarting [0]
Aug 30 14:09:30 vpnserver1[10881]: client/109.38.138.236:61709 Connection reset, restarting [0]
Aug 30 14:09:45 vpnserver1[10881]: client/109.38.138.236:61710 Connection reset, restarting [0]

 

[ColinTaylor]

How are you testing this? Are you using a VPN client on a mobile phone indoors? If so I would take the phone outside where it has a strong signal and run some speed tests over the VPN. Then go back to the router and see if you got the same errors.

 

[Gravityz]

Yes, VPN client on iphone.

i went outside, opened up the vpn from there, did a couple of speedtests, disabled the vpn and went inside

i only got one

Aug 30 14:34:03 vpnserver1[10881]: client/109.38.138.236:54210 Connection reset, restarting [0]

 

[bbunge]

Are you using the default port on Openvpn? If so change it as your log shows someone may be trying to hack in.

 

[Gravityz]

no i am not using the default port.
i noticed the increasing ports as well but thought it was a feature of speedtest.net which i am using

 

[ColinTaylor]

Yes, VPN client on iphone.

i went outside, opened up the vpn from there, did a couple of speedtests, disabled the vpn and went inside

i only got one

Aug 30 14:34:03 vpnserver1[10881]: client/109.38.138.236:54210 Connection reset, restarting [0]

So it does sound like a weak signal.

i noticed the increasing ports as well but thought it was a feature of speedtest.net which i am using

That's normal because the connection was dropping and each time it reconnects it uses another ephemeral port.