Question

When updating a RUT955 device from FW 7.1.4 to 7.2.6 with openvpn config from file the connection is broken after upgrade.

Wed Aug 31 08:34:27 2022 kern.info Connected to Tele2 Tele2 IoT operator (internal modem)
Wed Aug 31 08:34:28 2022 daemon.warn openvpn(EF)[9584]: Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
Wed Aug 31 08:34:28 2022 daemon.err openvpn(EF)[9584]: Options error: --proto tcp is ambiguous in this context. Please specify --proto tcp-server or --proto tcp-client
Wed Aug 31 08:34:28 2022 daemon.warn openvpn(EF)[9584]: Use --help for more information.
Wed Aug 31 08:34:34 2022 daemon.warn openvpn(EF)[9596]: Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
Wed Aug 31 08:34:34 2022 daemon.err openvpn(EF)[9596]: Options error: --proto tcp is ambiguous in this context. Please specify --proto tcp-server or --proto tcp-client
Wed Aug 31 08:34:34 2022 daemon.warn openvpn(EF)[9596]: Use --help for more information.
Wed Aug 31 08:34:39 2022 daemon.warn openvpn(EF)[9601]: Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
Wed Aug 31 08:34:39 2022 daemon.err openvpn(EF)[9601]: Options error: --proto tcp is ambiguous in this context. Please specify --proto tcp-server or --proto tcp-client
Wed Aug 31 08:34:39 2022 daemon.warn openvpn(EF)[9601]: Use --help for more information.
Wed Aug 31 08:34:39 2022 daemon.info procd: Instance openvpn::EF s in a crash loop 6 crashes, 0 seconds since last crash

If I delete the config and create a new config uploading the same file openvpn connection is back to normal.

This is a critical issue when doing remote FW updates on devices connected with openvpn.

Answer 1

Hello,

Could you provide the complete troubleshoot file after upgrade with the error messages either in a private message or attach it by editing the question? Files are private and visible only to Teltonika Moderators. I will consult about your issue with the development department.

Also, could you tell, how many devices are affected?

Best regards,

Answer 2

I had a similar issue with 3 RUT955 devices. It did not check error logs, but noticed that all certificate and key files had size 0kb after RUT9_R_00.07.02.6. File names were still correctly displayed. After uploading ca, user crt+key and hmac key again, openvpn connections worked again.

It happened on 3 out of approx 20 devices during updates.

The 1 of the 3 devices had previous version 6.9.2 and the 2 others had 7.1.4.

Updates of the other, almost identical 20 devices from same firmware versions went without any issues.

I suspect that the firmware update sometimes overwrites the memory space of the vpn files, or somehow messes up the file system.

I cannot provide you the toubleshoot files of these 3. If it happens again, I will try to remember.