The problem also occurs in the tunnel connection between two routers (ER605) Client - Server; the server stops working, both on OpenVPN and IPSEC/L2TP. Only the Wireguard connection works fine between the two devices (it has been stable for almost a week).

  @drac8029 

drac8029 wrote

  @Clive_A The only remedy is to restart the ER605 or disable/re-enable the OpenVPN service on the router itself.  I do not understand why you think this is a client side issue? 

You seem to know the issue and are willing to provide details.

The issue appeared recently without a sign. No major firmware update on the ER605. OVPN client updates more frequently than the router. That's an assumption. 

So, please provide your OVPN log from your OVPN client. 

Client OVPN version. 

If you are using the controller, is that possible to provide your cloud access?

If you can provide the information above, you can send an email to our support email.

Since the beginning of 2025, we no longer create the email tickets for the user. To assist and figure it out efficiently, we recommend submitting a support ticket via email.

Please include:

1. Your Forum ID;

2. Your community nickname;

3. A detailed description of the issue and result if I have suggested anything on the thread, and the troubleshooting steps you've taken in the subject line or body of your email.

  @alchemia 

alchemia wrote

It's not about a OVPN client update. We didn't update the client software on any of the client devices recently, nor the firmware on routers. Also, the whole thing is NOT about breaking the connection, the OVPN server ITSELF is breaking on the router side.

You seem to know the issue and are willing to provide details.

The issue appeared recently without a sign. No major firmware update on the ER605. OVPN client updates more frequently than the router. That's an assumption. 

So, please provide your OVPN log from your OVPN client. 

Client OVPN version. 

And what's your uptime of your router?

If you are using the controller, is it possible to provide your cloud access?

If you can provide the information above, you can send an email to our support email.

Since the beginning of 2025, we no longer create email tickets for the user. To assist and figure it out efficiently, we recommend submitting a support ticket via email.

Please include:

1. Your Forum ID;

2. Your community nickname;

3. A detailed description of the issue and result if I have suggested anything on the thread, and the troubleshooting steps you've taken in the subject line or body of your email.

You seem to know the issue and are willing to provide details.

The issue appeared recently without a sign. No major firmware update on the ER605. OVPN client updates more frequently than the router. That's an assumption. 

  @p3r3s 

p3r3s wrote

The problem also occurs in the tunnel connection between two routers (ER605) Client - Server; the server stops working, both on OpenVPN and IPSEC/L2TP. Only the Wireguard connection works fine between the two devices (it has been stable for almost a week).

I asked if you could provide details. I think I am not seeing your incoming emails regarding this. 

FYI, and to others:

If I do not have enough information, the progress of this case is stagnant. 

I have asked around five users to see if we could get a log or remote access to debug. 

  @Clive_A - I've just sent the e-mail to open the ticket. Provided the requested information. If anything else is needed, just reply to the ticket and I'll make sure you get everything that you might need (remote access, logs, etc)

Circling back with updates, will reply to the open ticket as well.

The situation is this:

ER605 v2.0 - 2.2.3 - OK 

ER605 v1.0 - 1.3.1 - OK

ER605 v2.20 - 2.2.6 - ISSUES

ER605 v1.0 - 1.3.1 - OK

ER605 v2.0 - 2.2.6 - ISSUES

ER605 v2.20 - 2.2.6 - ANALYSING, restarting daily because they critically need it. I'll keep you posted, but they restart in minutes once the issue arises because they have remote workers.

I have other Omada setups at hand, but I don't have OpenVPN set up there. Let me know and we can jump on it.

Let me know what else is needed. All of them are linked to the cloud, et cetera.

  @Clive_A 

Thank you Clive.

Escalating by opening a ticket was the way to go. They checked only one of the controllers, and eventually fixed it on all of them.

Thank you so much we can consider this fixed and closed.

  @Clive_A 

Moving the service to an alternate port was the solution here. The service has been up and running for 3 days now, what was certainly not possible the last weeks.

One thing, to my opinion it should not be possible that unknown sources can bring down a service permanently unless it is by design. It is a concern that they explore for instance buffer overflows 

Anyway, it works fine now. Thanks for the help.

  @Anton320 

Anton320 wrote

  @Clive_A 

Moving the service to an alternate port was the solution here. The service has been up and running for 3 days now, what was certainly not possible the last weeks.

 

One thing, to my opinion it should not be possible that unknown sources can bring down a service permanently unless it is by design. It is a concern that they explore for instance buffer overflows 

 

Anyway, it works fine now. Thanks for the help.

This is the misconception.

When you face a DDoS, you never have a better way to fix it. It's not a fault of you or any vendor who built the machine. Believe it or not, today, there is no better solution for any sort of DDoS or flood attack. 

To stay silent and stay away from the regular ports, that's how you stay away from the discovery and regular attacks.