Ubuntu-fr

Mladen

OPENVPN: Bad encapsulated packet length from peer (18516)

Bonjour,

J’héberge mon propre serveur VPN (Debian 8), je l'ai installé en utilisant ce tutoriel:

https://debian-facile.org/doc:reseau:openvpn

Tout c'est bien déroulé mais quand je tente cette commande (Ubuntu 16.04) openvpn client.conf, j’obtiens cette erreur:

Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]

Je vous met le fichier complet également :

openvpn client.conf 
Tue Aug 30 21:18:21 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb  2 2016
Tue Aug 30 21:18:21 2016 library versions: OpenSSL 1.0.2g-fips  1 Mar 2016, LZO 2.08
Tue Aug 30 21:18:21 2016 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 30 21:18:21 2016 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Aug 30 21:18:21 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 30 21:18:21 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Aug 30 21:18:21 2016 Socket Buffers: R=[87380->87380] S=[16384->16384]
Tue Aug 30 21:18:21 2016 Attempting to establish TCP connection with [AF_INET]195.154.69.230:443 [nonblock]
Tue Aug 30 21:18:22 2016 TCP connection established with [AF_INET]195.154.69.230:443
Tue Aug 30 21:18:22 2016 TCPv4_CLIENT link local: [undef]
Tue Aug 30 21:18:22 2016 TCPv4_CLIENT link remote: [AF_INET]195.154.69.230:443
Tue Aug 30 21:18:22 2016 WARNING: Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Tue Aug 30 21:18:22 2016 Connection reset, restarting [0]
Tue Aug 30 21:18:22 2016 SIGUSR1[soft,connection-reset] received, process restarting
Tue Aug 30 21:18:22 2016 Restart pause, 5 second(s)
Tue Aug 30 21:18:27 2016 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 30 21:18:27 2016 Socket Buffers: R=[87380->87380] S=[16384->16384]
Tue Aug 30 21:18:27 2016 Attempting to establish TCP connection with [AF_INET]195.154.69.230:443 [nonblock]
Tue Aug 30 21:18:28 2016 TCP connection established with [AF_INET]195.154.69.230:443
Tue Aug 30 21:18:28 2016 TCPv4_CLIENT link local: [undef]
Tue Aug 30 21:18:28 2016 TCPv4_CLIENT link remote: [AF_INET]195.154.69.230:443
Tue Aug 30 21:18:28 2016 WARNING: Bad encapsulated packet length from peer (18516), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Tue Aug 30 21:18:28 2016 Connection reset, restarting [0]
Tue Aug 30 21:18:28 2016 SIGUSR1[soft,connection-reset] received, process restarting
Tue Aug 30 21:18:28 2016 Restart pause, 5 second(s)

Je voudrais savoir si vous aviez des piste à ce sujet.

Merci de votre attention,

cqfd93

Re : OPENVPN: Bad encapsulated packet length from peer (18516)

Bonjour,

Debian a 3 forums francophones : debian-fr, Debian-Facile ou debian-fr.xyz.

---

− cqfd93 −

Mladen

Re : OPENVPN: Bad encapsulated packet length from peer (18516)

Le client est sous Ubuntu.

droopy191

Re : OPENVPN: Bad encapsulated packet length from peer (18516)

Salut,

Essayez avec udp pour commencer

proto udp

sur le client et le serveur.