OpenVPN Timeout connecting

[p2xt]

Hi,

I have a separate OpenVPN server which has been configred to work on the 10.7.0.0/16 class.

I am able to connect 2 T46 phones, but unfortunately only one client can register at one time. Ex: IF client1 is connected and registered, client2 cannot register (it timesout and i see no registration atempt on the asterisk server). If i disable client1, client2 automatically registers and if i re-enable client1 i will be able to see/ping it but it will not register.

Any suggestions would be greatly appreciated.

Regards,
Andrei

[jolouis]

When you say only 1 client can register, do you mean only 1 can connect to the VPN at a time? Or VPN works on both, but only 1 can register to SIP server at a time?

If only 1 at a time on VPN, are you using the same client certificate on both devices? If so, you need to make sure your openVPN SERVER has:
duplicate-cn

option present/enabled. This allows multiple devices to use the same certificate to connect at the same time. There are pitfalls/disadvantages to this so rather than just blindly turning it on you should do some research into it first.

[p2xt]

(07-04-2018 06:28 PM)jolouis Wrote:  When you say only 1 client can register, do you mean only 1 can connect to the VPN at a time? Or VPN works on both, but only 1 can register to SIP server at a time?

If only 1 at a time on VPN, are you using the same client certificate on both devices? If so, you need to make sure your openVPN SERVER has:
duplicate-cn

option present/enabled. This allows multiple devices to use the same certificate to connect at the same time. There are pitfalls/disadvantages to this so rather than just blindly turning it on you should do some research into it first.

hi jolouis,

thank you for your reply.

i am using 2 different clients (client1 and client2) on 2 different phones. If phone1-client1 is active phone2-client2 cannot connect and the other way around. It's funny as i can access the interface on both phones...

Is there anyway i can putty on the phones to check the routing?

Thanks,
Andrei

[jolouis]

(07-10-2018 01:11 PM)p2xt Wrote:  i am using 2 different clients (client1 and client2) on 2 different phones. If phone1-client1 is active phone2-client2 cannot connect and the other way around. It's funny as i can access the interface on both phones...

What do you mean you can access the interface on both phones? Over the VPN you mean?

I think you need to take a step back and break this up into two situations:
a) Forget SIP accounts/etc for a moment. Can you get both phones to connect to VPN server and be active on the VPN at the same time? i.e. on your server you see both, you can ping both, and you can log in to both web interfaces over the VPN addresses?

b) If the above is true, then there is something else beyond the VPN that is causing the problems? Without using VPN, can you have both extensions register to your PBX at the same time (i.e. from local network does it work)?