TunnelVPN restarting reason: missing?? what am I doing wrong?

[aristauser]

Hello,

I was running Untangle earlier last year with several Tunnel VPNs running, no problem. Now with two fresh Arista NG instances (16.6.1), I can’t get a single tunnel to work. I’ve tried OVPNs from 3 providers. No log shows within the Tunnel app, so I figured out that my app-6.log is for Tunnel VPN. Few clues there. All tunnels show the same errors:

Jan 1 20:05:41 localhost app-6: [TunnelVpnMonitor] <> WARN Restarting OpenVPN process for VPN1UDP (204) Reason: missing
Jan 1 20:05:41 localhost app-6: [TunnelVpnMonitor] <> WARN Failed to get status for VPN1UDP [Connection refused]

Thank you for any help with this.

[donhwyo]

Welcome to the forum. Just a wild guess. Try uninstalling "Tunnel VPN" and reinstalling. Seems to work for some.

[aristauser]

Uninstalling "Tunnel VPN" and reinstalling didn't fix anything, and I tried this on two separate Arista NG instances. The Tunnel VPN app's log tab remains empty of any events and the tunnel stays disconnected. Thanks for the idea.

I am getting “JSONRrpcClientException” errors almost any time I save a change, but that happened a lot with earlier versions of other installs and they never seemed to break anything.

[jcoffin]

I just tried using NordVPN without issue. Which VPN services are you using?

[aristauser]

I don't understand your question. I'm using a NordVPN OVPN file with the Tunnel VPN app. I've tried both UDP and TCP OVPNs.
Shouldn't there be at least some events under the Log tab of the Tunnel VPN app? There are no events there.
What other logs can I check to troubleshoot this?

Thank you.

[jcoffin]

According to the log, there is no OpenVPN process started with that config. I would post a more complete tunnel app log so we could review it. Also look at /var/log/openvpn.log

[aristauser]

I had tried creating a number of tunnels from 3 different providers (tunnels 200-207), only the two NordVPN being enabled here. This is the start of the log and I cut it off when it began to repeat. I will look for the /var/log/openvpn.log a bit later. Thanks.

Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Initializing Settings...
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Creating the default settings...
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-203
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-203
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-205
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-205
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-202
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-202
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-204
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-204
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-200
Jan 4 21:14:30 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-200
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-207
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-207
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-201
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-201
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-206
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Cleanup removing: /usr/share/untangle/settings/tunnel-vpn/tunnel-206
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO syncToSystem()...
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Syncing /usr/share/untangle/settings/tunnel-vpn/settings_9.js to system...
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Wrote /etc/untangle/iptables-rules.d/350-tunnel-vpn
Jan 4 21:14:31 localhost app-9: [TunnelVpnApp] <> INFO Loading Settings...
Jan 4 21:14:41 localhost app-9: [AppBase] <> INFO Starting tunnel-vpn [9] ...
Jan 4 21:14:41 localhost app-9: [TunnelVpnApp] <> INFO Adding tunnel-vpn iptables:
Jan 4 21:14:41 localhost app-9: [TunnelVpnManager] <> INFO Launching OpenVPN processes...
Jan 4 21:14:41 localhost app-9: [TunnelVpnManager] <> INFO /etc/untangle/iptables-rules.d/350-tunnel-vpn:
Jan 4 21:14:41 localhost app-9: [TunnelVpnManager] <> INFO /etc/untangle/iptables-rules.d/350-tunnel-vpn:
Jan 4 21:14:41 localhost app-9: [AppBase] <> INFO Started tunnel-vpn [9] ...
Jan 4 21:15:28 localhost app-9: [TunnelVpnApp] <> INFO Uploaded new tunnel config: us9340.nordvpn.com.udp.ovpn NordVPN
Jan 4 21:15:28 localhost app-9: [TunnelVpnManager] <> INFO /usr/share/untangle/bin/tunnel-vpn-validate:
Jan 4 21:15:28 localhost app-9: [TunnelVpnManager] <> INFO /usr/share/untangle/bin/tunnel-vpn-validate:
Jan 4 21:16:12 localhost app-9: [TunnelVpnApp] <> INFO Adding new virtual interface: 200 tunnel-NordVPN
Jan 4 21:16:12 localhost app-9: [TunnelVpnApp] <> INFO syncToSystem()...
Jan 4 21:16:12 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Syncing /usr/share/untangle/settings/tunnel-vpn/settings_9.js to system...
Jan 4 21:16:12 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Wrote /etc/untangle/iptables-rules.d/350-tunnel-vpn
Jan 4 21:16:12 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Wrote /usr/share/untangle/settings/tunnel-vpn/tunnel-200/auth.txt
Jan 4 21:16:12 localhost app-9: [TunnelVpnApp] <> INFO Adding tunnel-vpn iptables:
Jan 4 21:16:23 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:16:23 localhost app-9: [TunnelVpnMonitor] <> WARN Restarting OpenVPN process for tunnel-NordVPN (200) Reason: missing
Jan 4 21:16:23 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:16:35 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:16:44 localhost app-9: [TunnelVpnApp] <> INFO Network Settings have changed. Restarting tunnels...
Jan 4 21:16:44 localhost app-9: [TunnelVpnManager] <> INFO Killing OpenVPN processes...
Jan 4 21:16:44 localhost app-9: [TunnelVpnManager] <> INFO Launching OpenVPN processes...
Jan 4 21:16:45 localhost app-9: [TunnelVpnManager] <> INFO /etc/untangle/iptables-rules.d/350-tunnel-vpn:
Jan 4 21:16:45 localhost app-9: [TunnelVpnManager] <> INFO /etc/untangle/iptables-rules.d/350-tunnel-vpn:
Jan 4 21:16:47 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:16:59 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:17:11 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:17:23 localhost app-9: [TunnelVpnMonitor] <> WARN Restarting OpenVPN process for tunnel-NordVPN (200) Reason: missing
Jan 4 21:17:23 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:17:35 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:17:42 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:17:47 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]
Jan 4 21:17:57 localhost app-9: [TunnelVpnApp] <> INFO Cleanup checking: /usr/share/untangle/settings/tunnel-vpn/tunnel-200
Jan 4 21:17:57 localhost app-9: [TunnelVpnApp] <> INFO syncToSystem()...
Jan 4 21:17:58 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Syncing /usr/share/untangle/settings/tunnel-vpn/settings_9.js to system...
Jan 4 21:17:58 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Wrote /etc/untangle/iptables-rules.d/350-tunnel-vpn
Jan 4 21:17:58 localhost app-9: [TunnelVpnApp] <> INFO Sync Settings: Wrote /usr/share/untangle/settings/tunnel-vpn/tunnel-200/auth.txt

[aristauser]

Is the SSH password different than for the Web UI? This is fresh install of 16.6.1. I changed the password and that still didn't work.

[donhwyo]

It should be user root and the password you set at install. There are some threads about having to reset the password if that doesn't work.

[jcoffin]

In the log, it shows "Jan 4 21:16:23 localhost app-9: [TunnelVpnMonitor] <> WARN Failed to get status for tunnel-NordVPN [Connection refused]" This means NordVPN is rejecting the connection.

[ccdmnk]

I've had to remove the tunnel and adding it back before it would accept any new values - never worked editing an existing one. I also had problems with my VPN provider, the configs I used before flat out wouldn't load. After a bit of trial and error it was up again and I havent really bothered to look what the root cause might be.

[aristauser]

There doesn't seem to be an /var/log/openvpn.log file.

[root @ arista] /var/log # ls -l
total 6416
-rw-r--r-- 1 root root 0 Jan 1 00:00 alternatives.log
-rw-r--r-- 1 root root 25102 Feb 11 2012 alternatives.log.1
drwxr-x--- 2 root adm 4096 Jan 7 00:00 apache2
drwxr-xr-x 2 root root 4096 Jan 1 00:00 apt
-rw-r--r-- 1 root adm 43203 Jan 7 09:05 auth.log
-rw-r--r-- 1 root adm 17250 Dec 31 23:51 auth.log.1
-rw-r--r-- 1 bdamserver daemon 0 Feb 11 2012 bdamserver.log
-rw------- 1 root root 0 Jan 5 00:00 boot.log
-rw------- 1 root root 19165 Jan 5 00:00 boot.log.1
-rw------- 1 root root 4709 Jan 2 00:00 boot.log.2
-rw------- 1 root root 39676 Jan 1 00:00 boot.log.3
-rw-rw---- 1 root utmp 2304 Jan 5 22:57 btmp
-rw-rw---- 1 root utmp 0 Feb 11 2012 btmp.1
drwxr-xr-x 2 clamav clamav 4096 Jan 1 00:00 clamav
-rw-r--r-- 1 root adm 438704 Jan 7 09:05 daemon.log
-rw-r--r-- 1 root adm 454367 Jan 1 00:00 daemon.log.1
-rw-r--r-- 1 root adm 40429 Jan 7 08:56 debug
-rw-r--r-- 1 root adm 46323 Dec 31 19:28 debug.1
-rw-r--r-- 1 root adm 340524 Jan 5 10:18 dhcp.log
-rw-r--r-- 1 root root 0 Jan 1 00:00 dpkg.log
-rw-r--r-- 1 root root 507253 Feb 11 2012 dpkg.log.1
drwxr-s--- 2 Debian-exim adm 4096 Jan 7 00:01 exim4
-rw-r--r-- 1 root root 320064 Feb 11 2012 faillog
-rw-r--r-- 1 root root 2466 Feb 11 2012 fontconfig.log
drwxr-xr-x 2 freerad adm 4096 Feb 11 2012 freeradius
drwxr-xr-x 3 root root 4096 Feb 11 2012 installer
-rw-r--r-- 1 root adm 28750 Jan 5 10:18 ipsec.log
-rw-r--r-- 1 root adm 2519 Dec 31 19:28 ipsec.log.1.gz
drwxr-sr-x+ 3 root systemd-journal 4096 Aug 7 15:25 journal
-rw-r--r-- 1 root adm 376079 Jan 7 08:56 kern.log
-rw-r--r-- 1 root adm 470438 Dec 31 22:05 kern.log.1
-rw-r--r-- 1 root adm 3685 Jan 4 21:24 l2tpd.log
-rw-r--r-- 1 root adm 628 Dec 31 17:32 l2tpd.log.1.gz
-rw-rw-r-- 1 root utmp 2920584 Jan 7 09:05 lastlog
-rw-r--r-- 1 root adm 360570 Jan 7 08:56 messages
-rw-r--r-- 1 root adm 436128 Dec 31 22:05 messages.1
drwxr-xr-x 2 ntp ntp 4096 Sep 23 2020 ntpstats
drwxr-xr-x 2 root root 4096 May 14 2021 openvpn
drwxrwxr-t 2 root postgres 4096 Jan 1 00:00 postgresql
drwx------ 2 root root 4096 Aug 7 15:25 private
-rw-r--r-- 1 root root 9240 Jan 7 08:34 pyconnector.log
-rw-r--r-- 1 root root 56934 Jan 7 00:00 pyconnector.log.1
drwxr-xr-x 5 root root 4096 Feb 11 2012 runit
drwxr-x--- 3 root adm 4096 Jan 1 00:00 samba
drwxr-xr-x 2 proxy proxy 4096 Sep 25 15:13 squid
drwxr-xr-x 2 stunnel4 stunnel4 4096 Feb 11 2012 stunnel4
drwxr-xr-x 2 root root 4096 Dec 31 09:29 suricata
-rw-r--r-- 1 root root 215976 Jan 7 01:36 sync.log
-rw-r--r-- 1 root root 541354 Jan 2 00:00 sync.log.1
-rw-r--r-- 1 root adm 865548 Jan 7 09:05 syslog
-rw-r--r-- 1 root adm 947882 Jan 1 00:00 syslog.1
-rw-r--r-- 1 root adm 17980 Jan 7 01:36 user.log
-rw-r--r-- 1 root adm 282 Dec 31 17:25 user.log.1
drwxr-xr-x 2 root root 4096 Jan 7 00:00 uvm
-rw-rw-r-- 1 root utmp 25344 Jan 7 09:05 wtmp

[root @ arista] /var/log # cd /openvpn
cd: no such file or directory: /openvpn

[aristauser]

Looking for an openvpn.log, I can see there is an /openvpn directory.

drwxr-xr-x 2 root root 4096 May 14 2021 openvpn

However, my Linux-foo is weak and I can't navigate to that directory. I'm root, so I don't know why not.

[root @ arista] /var/log # cd /openvpn
cd: no such file or directory: /openvpn

[bluechris]

Lately in 2 different payed Home Installations with 16.6.2, when i enable tunnel vpn and click save, Arista is crashing. After the rst tunnel-vpn is enabled. If i disable it, again its crashing.

These are complete different installations but in both i did tests with nordvpn and some rules to pass some clients.
I did uninstall tunnel vpn and install again and still does the same. Offcourse its crashing in the reinstalling process. Once it ended up with a Ghost tunnel-vpn that i was unable to install/uninstall and restored a backup to fix it.

Both installations are on VM's in esxi and both are latest version 16.6.2

Generally whenever i touch and save anything in Tunnel its crashing...