Skip to main content
Version: v25.07.31

VPN Troubleshooting

These guidelines provide a systematic approach to troubleshooting configuration inconsistencies for vpn issues. A mismatched configuration can result in vpn connection failure, intermittent disconnection, or even access to resources in a remote network. By following the steps outlined in this document, you should be able to identify and address configuration issues with VPN connections.

Troubleshooting Steps​

Issue: Configuration Mismatch​

Symptoms​

  • VPN connection fails to establish or frequently disconnects.
  • The client device is unable to access resources on the remote network.
  • Logs indicate error messages related to mismatched configurations.

Cloud Configuration Verification​

Access the CE Terminal​

  • Log in to the CE terminal with superuser privileges to perform diagnostic checks.
sudo su -

Check Configuration Files​

Check the OpenVPN configuration files for all correct settings. Start by reviewing the interface configuration of OpenVPN.

  • To review the OpenVPN configuration, execute the following command:
cat /tmp/last_config_response.json | jq '.interfacesConfig.openVpn'

This command will display the OpenVPN configuration, which can include various authentication methods.

Example OpenVPN Configuration (with Different Authentication Methods)​

Here are examples of what an OpenVPN configuration might look like, highlighting the different authentication methods: The given one is just an example output; when this command is run, it will show something like this.

1. Office365 Authentication​

The output shown here is an example of Office365 Authentication. When the command is executed and office365 Authentication is selected, an output similar to this is displayed.

{
  "vtun25": {
    "trafficPolicy": null,
    "trafficPolicyIn": false,
    "trafficPolicyOut": false,
    "caCertFile": "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",
    "certFile": "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",
    "keyFile": "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",
    "crlFiles": [],
    "dhFile": null,
    "pushRoutes": [],
    "subnet": "172.29.2.0/24",
    "replaceDefaultRoutes": true,
    "maxConnections": 20,
    "useLzoCompression": true,
    "nameServer": "172.29.2.1",
    "cipher": "default",
    "authentication": {
      "authenticationMethod": "OFFICE365",
      "office365": {
        "tenantId": "1010101-56e9-4621-9b8d-912f769c66f3",
        "clientId": "2020202-c805-4af9-ba35-12d3a4dea237",
        "clientSecret": "00000~c9jwdyhn3jzWccg-G5lKzj9b.Z2TNgHcCr",
        "scope": null
      },
      "ldap": null
    },
    "interfaceName": "vtun25",
    "bridgeGroup": null,
    "tunnelType": null,
    "localPort": 11940,
    "remotePort": null,
    "localHost": "172.20.10.3",
    "remoteHost": null,
    "remoteHosts": [],
    "openVpnOption": null,
    "persistentTunnel": true,
    "vpnSharedSecret": null,
    "splitTunnel": false,
    "socksProxy": false,
    "socksProxyType": null,
    "socksProxyPrivateKey": null,
    "socksProxyPublicKey": null,
    "description": "Vpn Server",
    "wanInterfaces": null,
    "mode": "server",
    "protocol": "udp",
    "ceDeviceId": null,
    "ceDeviceLabel": null,
    "customerEmail": null,
    "status": null,
    "peDeviceIds": [],
    "hubCEDeviceIds": [],
    "ceSpokeId": null,
    "remoteDeviceLabel": null,
    "ethInterface": "eth0"
  }
}

2. LDAP Authentication​

The output shown here is an example of LDAP Authentication. When the command is executed and LDAP Authentication is selected, an output similar to this is displayed.

{
  "vtun25": {
    "trafficPolicy": null,
    "trafficPolicyIn": false,
    "trafficPolicyOut": false,
    "caCertFile": "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2ekNDQWFlZ0F3SUJBZ0lHQVl6T0JIaHRNQTBHQ1NxR1NJYjNEUUVCQ3dVQU1CWXhGREFTQmdOVkJBTU1DMjFoYm5WaGJDMTBaWE4wTUI0WERUSTBNREV3TXpBMk16QTBPRm9YRFRNek1USXpNVEEyTXpBME9Gb3dGakVVTUJJR0ExVUVBd3dMYldGdWRXRnNMWFJsYzNRd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUUNpd2dNb1haWEMrZzd1YXNYbVVnZHI2cGxjc29RS1R4Qm43YUVJMWtvWVBZZDNZQloyOGtocmoxQ1p4ZVFHY2E2N2Z0VmZrQk5EMmlNem5pR1duZTlHT2lFOWRHZGN4Y2MxSm9iSzVEUFVsd2tKMHpGcXJMMmFBdVlJNHZOWWxteU45ejY1cWhhc3BoeEc2aC9YK3lHZE9HSW1qT1oxQ3R4eXJhOVhTTFMwS0Z5b0J2TXI4SzJJMitOcFdVSkdkWUJyb1ZDRjhPOXlQQUpvOFl4eFRVVEhmOWpxanlid0N0NGZYUVlmekpidEdOMHc5TVRhYzVoV0xuQnNmLzYvemtZd3JZNE9aWmREOXN5R3F2RnpuT013SXdsMEdua2VsdXZSbmFnNlBmbE1RaDlYWDhWTFo5U3dmcWMwdCs3OU54elpaSENIK09CTUNPaFFIa3VkeDk4eEFnTUJBQUdqRXpBUk1BOEdBMVVkRXdFQi93UUZNQU1CQWY4d0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFCWnhFSjdMRXptTjVURWZLUkYrMDd3SzlQelhFL0FGTnVRcU1BNmNLeHg2VDlDdTlsZjRGNUptMWZld1hubmJOSDVBcXZoQkhQYStvQi8xYmF6ZmZodzFMb09XaVdwVjhONnRER3dGaDlqOFJSNHJxUzFZVysrZ1hHZzlIZy9qVWlGdThmTG0zaG5Ib2E3U0JFQVNQUUhudVlGd2JxMU16Mlhrbjg3SWoxZktMNVZYN083TG1KOWRjQjhWTGdCWEY0Zm5QaGRIWjZnRzdsalB2UE5OVkEyY05VaEVqTVR0bGxBK0xjYTVOaVMrM2FvbE54YTBlTThHQWx6Q0tBR2FmOG9pZ2dwWFFGUno0Vit6eFpUZTdrU2NUaVRTT0pMbVlENmZNV0dzdFh5RzdaM3E5YkZuNWg2QTcrYUwxUWVsUThobVM3RXN6QzdFNFFDeHV6dlMrREU9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0=",
    "certFile": "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",
    "keyFile": "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",
    "crlFiles": [],
    "dhFile": null,
    "pushRoutes": [],
    "subnet": "172.29.2.0/24",
    "replaceDefaultRoutes": true,
    "maxConnections": 20,
    "useLzoCompression": true,
    "nameServer": "172.29.2.1",
    "cipher": "default",
    "authentication": {
      "authenticationMethod": "LDAP",
      "office365": null,
      "ldap": {
        "ldapServer": "ldap://100.100.01.1:40404",
        "ldapBaseDN": "cn=accounts,dc=google,dc=com",
        "ldapBindDN": "uid=binduser,cn=users,cn=accounts,dc=google,dc=com",
        "ldapBindPassword": "the.set-go-yard-percolate",
        "ldapFilter": "(memberof=CN=vpn_users,CN=groups,CN=accounts,dc=google,dc=com)"
      }
    },
    "interfaceName": "vtun25",
    "bridgeGroup": null,
    "tunnelType": null,
    "localPort": 11940,
    "remotePort": null,
    "localHost": "172.20.10.3",
    "remoteHost": null,
    "remoteHosts": [],
    "openVpnOption": null,
    "persistentTunnel": true,
    "vpnSharedSecret": null,
    "splitTunnel": false,
    "socksProxy": false,
    "socksProxyType": null,
    "socksProxyPrivateKey": null,
    "socksProxyPublicKey": null,
    "description": "Vpn Server",
    "wanInterfaces": null,
    "mode": "server",
    "protocol": "udp",
    "ceDeviceId": null,
    "ceDeviceLabel": null,
    "customerEmail": null,
    "status": null,
    "peDeviceIds": [],
    "hubCEDeviceIds": [],
    "ceSpokeId": null,
    "remoteDeviceLabel": null,
    "ethInterface": "eth0"
  }
}

3. Defualt Authentication​

The output shown here is an example of Default Authentication. When the command is executed and Default Authentication is selected, an output similar to this is displayed.

{
  "vtun25": {
    "trafficPolicy": null,
    "trafficPolicyIn": false,
    "trafficPolicyOut": false,
    "caCertFile": "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",
    "certFile": "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",
    "keyFile": "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",
    "crlFiles": [],
    "dhFile": null,
    "pushRoutes": [],
    "subnet": "172.29.2.0/24",
    "replaceDefaultRoutes": true,
    "maxConnections": 20,
    "useLzoCompression": true,
    "nameServer": "172.29.2.1",
    "cipher": "default",
    "authentication": {
      "authenticationMethod": "PLATFORM",
      "office365": null,
      "ldap": null
    },
    "interfaceName": "vtun25",
    "bridgeGroup": null,
    "tunnelType": null,
    "localPort": 11940,
    "remotePort": null,
    "localHost": "172.20.10.3",
    "remoteHost": null,
    "remoteHosts": [],
    "openVpnOption": null,
    "persistentTunnel": true,
    "vpnSharedSecret": null,
    "splitTunnel": false,
    "socksProxy": false,
    "socksProxyType": null,
    "socksProxyPrivateKey": null,
    "socksProxyPublicKey": null,
    "description": "Vpn Server",
    "wanInterfaces": null,
    "mode": "server",
    "protocol": "udp",
    "ceDeviceId": null,
    "ceDeviceLabel": null,
    "customerEmail": null,
    "status": null,
    "peDeviceIds": [],
    "hubCEDeviceIds": [],
    "ceSpokeId": null,
    "remoteDeviceLabel": null,
    "ethInterface": "eth0"
  }
}

Check OpenVPN Interface Configuration File​

  • To check the OpenVPN interface configuration for each authentication type, run the following command. This will display the OpenVPN interface configuration in its file.
cat /etc/config/openvpn

The given one is just an example output; when this command is run, it will show something like this.

Example Response​

config openvpn 'vtun25'
	option enabled '1'
	option verb '3'
	option nobind '0'
	option dev_type 'tun'
	option script_security '2'
	option persist_tun '1'
	option ping '10'
	option ping_restart '0'
	option dev 'vtun25'
	option topology 'subnet'
	option status '/var/run/vtun25.status 30'
	option status_version '2'
	option local '172.20.10.3'
	option server '172.29.2.0 255.255.255.0'
	list push 'dhcp-option DNS 172.29.2.1'
	list push 'comp-lzo yes'
	list push 'redirect-gateway def1'
	option lport '11940'
	option split_tunnel '0'
	option comp_lzo 'yes'
	option cipher 'AES-256-CBC'
	option ca '/etc/openvpn/vtun25.ca'
	option dh '/etc/openvpn/vtun25.dh'
	option cert '/etc/openvpn/vtun25.crt'
	option key '/etc/openvpn/vtun25.key'
	option auth_method 'ldap'
	option client_connect '/usr/bin/openvpn_connect.sh'
	option client_disconnect '/usr/bin/openvpn_disconnect.sh'
	option auth_user_pass_verify '/usr/bin/openvpn_login.sh via-file'
	option ldap_filter '(memberof=CN=vpn_users,CN=groups,CN=accounts,dc=google,dc=com)'
	option ldap_server 'ldap://100.100.01.1:40404'
	option ldap_base_dn 'cn=accounts,dc=google,dc=com'
	option ldap_bind_dn 'uid=binduser,cn=users,cn=accounts,dc=google,dc=com'
	option ldap_bind_password 'the.set-go-yard-percolate'