Difficulties via VPN, ok with port forwarding

[KSaccullo]

I’m having difficulties getting Agave to work through my openvpn connection.

What I found that kind of works is opening “ISY Login Setting”, changing absolutely nothing, and saving the unchanged settings.

Primary URL is: 192.168.1.51:81, No SSL

Secondary URL is: 192.168.1.51:444, use SSL

 

Then have to Refresh Data.

 

I don’t see the 1 or 2 in the upper right but it will show the current status of my devices.

 

Changing a device status seems to have no effect. Status on the display is not updated, but the command was received (confirmed with a call to my wife). Going back to the “ISY Login Setting” and repeating the above steps now shows the updated status.

 

I tried auto forcing primary and secondary connections modes. All had the same result. Except secondary, with ssl was a little slower.

 

At home (no VPN) it works fine with any connection mode. I used the same internal network settings as noted above.

 

I also tried with port forwarding only, no VPN. I had no issues with it keeping up with status changes and being responsive to commands.

 

I don’t really care to open extra ports and prefer using a VPN.

 

Any suggestions on how to correct?

 

Version 1.6.001 Avocado, Version code: 302

 

Kevin

[James Peterson]

 

I’m having difficulties getting Agave to work through my openvpn connection.

What I found that kind of works is opening “ISY Login Setting”, changing absolutely nothing, and saving the unchanged settings.

Primary URL is: 192.168.1.51:81, No SSL

Secondary URL is: 192.168.1.51:444, use SSL

 

Then have to Refresh Data.

 

I don’t see the 1 or 2 in the upper right but it will show the current status of my devices.

 

Changing a device status seems to have no effect. Status on the display is not updated, but the command was received (confirmed with a call to my wife). Going back to the “ISY Login Setting” and repeating the above steps now shows the updated status.

 

I tried auto forcing primary and secondary connections modes. All had the same result. Except secondary, with ssl was a little slower.

 

At home (no VPN) it works fine with any connection mode. I used the same internal network settings as noted above.

 

I also tried with port forwarding only, no VPN. I had no issues with it keeping up with status changes and being responsive to commands.

 

I don’t really care to open extra ports and prefer using a VPN.

 

Any suggestions on how to correct?

 

Version 1.6.001 Avocado, Version code: 302

 

Kevin

 

What type of device and android version?

[KSaccullo]

Phone is an HTC 10 running 6.0.1. All the updates are installed.

 

Should also add the router (Asus RT-AC66) is running openvpn. I have no problem using telnet to get to the ISY, opensprinkler and FreeBSD server via the same VPN.

[James Peterson]

Phone is an HTC 10 running 6.0.1. All the updates are installed.

 

Should also add the router (Asus RT-AC66) is running openvpn. I have no problem using telnet to get to the ISY, opensprinkler and FreeBSD server via the same VPN.

Can you access the ISY web interface through the VPN on your device?  

[shannong]

I have this issue, too. Used to connect over VPN but doesn't anymore. Not sure when it started. I can access the web interface of ISY with Chrome on the phone while connected over VPN.

 

Samsung S6, Andriod 6.0.1, Agave 1.6001 v302

[G W]

I'm using Version Code 304 with VPN Unlimited and it's working fine on a Nexus 6P.

 

It's also working on my Samsung S7.

 

I'm Gary Funk and I approved this message.

[KSaccullo]

Yes, I can telnet into the ISY via the VPN with no problems. Tested using work wifi and cell service. All results the same.

 

Just updated to 1.6.101 code 304. Still seems to have same problem.

 

[James Peterson]

I am working on a new patch that will add the ability for Agave to produce and send me the debug details that I might need to solve issues like this.  I have one member testing right  now for a different issue.  If it produces what I need, I'll get this release pushed out to public.  

[shannong]

I have the ability to do a packet capture on the switch port of the ISY (sans TLS) to see what's happening with communications if you need it.

[James Peterson]

I have the ability to do a packet capture on the switch port of the ISY (sans TLS) to see what's happening with communications if you need it.

If you are experiencing the issue, that might help.

[KSaccullo]

I am working on a new patch that will add the ability for Agave to produce and send me the debug details that I might need to solve issues like this.  I have one member testing right  now for a different issue.  If it produces what I need, I'll get this release pushed out to public.  

 

I'd be ok testing this. I can do one session without the vpn (home wifi) and another with the the vpn via cellular. Then you do a direct comparison between the two.

[KSaccullo]

Gary,

 

Just out of curiosity what VPN are you using and any relevant setting?

[G W]

Gary,

 

Just out of curiosity what VPN are you using and any relevant setting?

As I stated in my message, VPN Unlimited.

 

I'm Gary Funk and I approved this message.

[shannong]

I updated Agave to v304 and I can now connect over VPN from my phone.

 

I can still get the packet capture if you want, although seems moot if the updated version resolves the issue.

[James Peterson]

 

I’m having difficulties getting Agave to work through my openvpn connection.

What I found that kind of works is opening “ISY Login Setting”, changing absolutely nothing, and saving the unchanged settings.

Primary URL is: 192.168.1.51:81, No SSL

Secondary URL is: 192.168.1.51:444, use SSL

 

Then have to Refresh Data.

 

I don’t see the 1 or 2 in the upper right but it will show the current status of my devices.

 

Changing a device status seems to have no effect. Status on the display is not updated, but the command was received (confirmed with a call to my wife). Going back to the “ISY Login Setting” and repeating the above steps now shows the updated status.

 

I tried auto forcing primary and secondary connections modes. All had the same result. Except secondary, with ssl was a little slower.

 

At home (no VPN) it works fine with any connection mode. I used the same internal network settings as noted above.

 

I also tried with port forwarding only, no VPN. I had no issues with it keeping up with status changes and being responsive to commands.

 

I don’t really care to open extra ports and prefer using a VPN.

 

Any suggestions on how to correct?

 

Version 1.6.001 Avocado, Version code: 302

 

Kevin

 

I pushed a new update today.  It included a bug reporting feature.  Can you download and enable this option, try to connect over your VPN and send me the report.  

[shannong]

I pushed a new update today.  It included a bug reporting feature.  Can you download and enable this option, try to connect over your VPN and send me the report.  

 

Did you see my report that it was resolved for me with v304? I also tested with v307 just now and it worked fine with it as well.

[KSaccullo]

I pushed a new update today.  It included a bug reporting feature.  Can you download and enable this option, try to connect over your VPN and send me the report.  

I sent you two log files.

• The first one I just tried to connect once the vpn was active (confirmed active by telnet into ISY). I tried the refresh data. Still no connection.
• The second one I went to setting and just saved my existing login (no changes made only hit have). Then I refreshed the data. After that a 1 (primary IP) showed. However the 1 went away as soon as I went home. then went to things change a light of off to on. The light went on the slider moved but the status did not up date. This is the same behavior I have been getting.

If you need a more specific test or control please let me know. I like the layout and functionality (as tested my the local wifi). This vpn problem is really the only thing holding me back from purchasing.

[James Peterson]

I believe that we have gotten this resolved.  I have added an option in the settings that will bypass a connection filter I have during connection startup.  This filter was preventing some vpn connections from being allowed.  

[G W]

James, do you have an Amazon wishlist?

 

 

I'm Gary Funk and I approved this message.

[KSaccullo]

Thank you James.

 

The latest APK you sent fixed the problem. I can vpn everywhere (including home wi-fi even though that makes no practical senses) to no vpn at home with a seamless experience.

 

I realize pretty much no one was aware, but James was sending me several versions (apk's) to try. I sent him the logs and my feed back only to get a new version to try hours later. Talk about service and wanting to understand the problem.

 

Thank You.

 

Kevin

[G W]

James is taking this very serious and is constantly improving the application. He's done remarkable work on the Elk.

 

I'm Gary Funk and I approved this message.

[shannong]

Unfortunately this is still an issue for me. The connection status box at the top shows no activity and I can't control devices.

 

I don't know if something new was introduced in v314 that recreated the issue or continuance of previous problem. I sent the log files to support@ but removed my IP from the log.

[James Peterson]

Unfortunately this is still an issue for me. The connection status box at the top shows no activity and I can't control devices.

 

I don't know if something new was introduced in v314 that recreated the issue or continuance of previous problem. I sent the log files to support@ but removed my IP from the log.

I just want to verify that you did enable the new option in settings to allow VPN?

 

Sent from my Nexus 5X using Tapatalk

[shannong]

Um... No.     Didn't see that post.

 

So I checked that option and it works over VPN now. Where would I expect to see the slower connect times with that option enabled?

[James Peterson]

Um... No.     Didn't see that post.

 

So I checked that option and it works over VPN now. Where would I expect to see the slower connect times with that option enabled?

Only on connection startup.  That option bypasses a IP check and will cause the app to do a full connection check even if the device is on a non-routable address and the ISY address is on a non-routable address not within the same subnet.  A VPN traverses things like this.