Editing Troubleshooting:Openvpn Troubleshooting

This guide covers troubleshooting for OpenVPN server and client connection issues.

== Server Not Starting ==

=== '''Check logs''': ===
   <pre class="lang-bash">
   journalctl -u openvpn -n 50
</pre>

== '''Verify configuration''': ==
   <pre class="lang-bash">
   openvpn --config /etc/openvpn/server/server.conf --test-crypto
</pre>

== '''Check file permissions''': ==
   <pre class="lang-bash">
   ls -la /etc/openvpn/server/
=== Certificates should be readable by OpenVPN user ===
</pre>

== Client Cannot Connect ==

=== '''Check server is listening''': ===
   <pre class="lang-bash">
   ss -ulnp | grep 1194
</pre>

== '''Check firewall''': ==
   <pre class="lang-bash">
   iptables -L INPUT -n -v | grep 1194
</pre>

== '''Verify client certificate''': ==
   * Ensure certificate hasn't been revoked

   * Check certificate expiration date

   * Verify CA certificate matches server

== '''Check server logs''': ==
   <pre class="lang-bash">
   tail -f /var/log/syslog | grep openvpn
</pre>

== Connection Drops ==

=== '''Check keepalive settings''' in server.conf ===
== '''Verify network connectivity''': ==
   <pre class="lang-bash">
   ping 10.8.0.2
</pre>

== '''Check routing''': ==
   <pre class="lang-bash">
   ip route | grep 10.8.0.0
</pre>

== Performance Issues ==

=== '''Check server load''': ===
   <pre class="lang-bash">
   top
   htop
</pre>

== '''Monitor network traffic''': ==
   <pre class="lang-bash">
   iftop -i tun0
</pre>

== '''Check for connection limits''' in server configuration ==

== Related Documentation ==

* [OpenVPN Server](index.md) - Server configuration

* [User Management](user-management.md) - User management

[[Category:Documentation]]
[[Category:Documentation/Troubleshooting]]