OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: penley on July 14, 2020, 08:10:14 PM

Title: OpenVPN road warrior error TLS handshake failed
Post by: penley on July 14, 2020, 08:10:14 PM
OPNsense version: 20.1.8_1

I'm trying to setup the OpenVPN road warrior. I've setup 3 different OpenVPN servers, two using the manual method https://docs.opnsense.org/manual/how-tos/sslvpn_client.html (https://docs.opnsense.org/manual/how-tos/sslvpn_client.html), and one using the OpenVPN wizard.

I have setup OpenVPN servers to use a different port than the defualt OpenVPN such as 11941 and the other two VPN servers use a different port as well. I've set this up before doing that same thing and never had an issue.
However, with this setup I am unable to VPN successfully when hitting the WAN, receive an error TLS Handshake failed. I've checked the TLS keys and they are correct. I also changed one of the VPN server ports to 1194 and when I did that I was able to VPN successfully.

I'll keep researching to try and solve this, but wanted to ask here if anyone had any ideas?

Kind regards,
penley
Title: Re: OpenVPN road warrior error TLS handshake failed
Post by: penley on July 14, 2020, 08:18:04 PM
Ok, I think I've figured this out.
I have a NAT rule that is port forwarding rtp 10000-20000 for the pbx. I need to change the openvpn ports because they are within that range.

Update:- changing server OpenVPN ports worked.