TIPS Xlite over VPN Error 408

[Tom Jackson]

Users access Pbx with Xlite over Openvpn. The initial time we establish a connection, we have no issue, everything works fine. After that initial connection, subsequent attempts to connect fail with Xlite --we get error408. This scenario has recurred over various ISPs and locations.
Error 408 means a connection cannot be established. Is Pbiaf blocking the address? The confusing part is it always works after the initial install. I have verified that the VPN connection is there. Any guidance would be appreciated!

Thanks.

 

[atsak]

Try disabling fail2ban on your server for a little bit and see if the connection is made. Don't leave it off permanently; but it might give you a clue . . .

 

[TirsoJRP]

Add the OpenVPN subnet to the firewall.

 

[Tom Jackson]

Issue resolved! In the settings for the extension I had to set "qualify = no". The Xlite extensions can now reliably connect.

Thanks for the help.

 

[Tom Jackson]

Add the OpenVPN subnet to the firewall.

I'm a novice...so I am a bit skittish on doing this, however, I believe it need to be done. Can you tell me how?