Open VPN and new ESXI host

We use a Ubuntu openVPN VM as a VPN server for 3CX - Yealink phone clients. I recently migrated the VM to a new ESXi 5.5 server. Now the clients won't register. All IP configs remained the same. I've re-enabled the original VM on the original host and we are back in operation. However I need to resolve this soon as the hardware on the old host is iffy. I acquired this installation and have limited knowledge of OpenVPN.
 
Is this a MAC address issue in OpenVPN? Do I need to recreate the tar file on the new host? Hoping it's a quick config edit not a re-deployment.
Member_2_7965582Asked:
Who is Participating?
 
Member_2_7965582Connect With a Mentor Author Commented:
Migrated successfully using the following the solution.

Removing the /etc/udev/rules.d/*-persistent-net.rules files in Open VPN VM.
And enabling ‘Promiscuous mode’ in the Networking section of the ESXi host.
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
Are you using bridging (VPN addresses are in the same network as the PBX) or routing (different VPN subnet)? If the latter, you need to change the routing information for the OpenVPN subnet used on either the PBX or your default router, wherever there is a route already (pointing to "old" OpenVPN box).
0
 
Member_2_7965582Author Commented:
Thanks but it is bridging.
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
Mr TorturSystem EngineerCommented:
Hi,
I know vmware but not openvpn...
I recently migrated the VM to a new ESXi 5.5 server
How did you do that, using which tool or option ?
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
Agree, the way how you migrated is important.

If it is an exact copy without any change, then you did not migrate but copy it over - and there should be no change in behaviour. The new VMware host's virtual switch config might be the culprit, though.

A migration changes the config.
0
 
Member_2_7965582Author Commented:
I used Veeam's quick migration option. I'll try to copy the VM manually and report back.
0
 
Mr TorturSystem EngineerCommented:
Hi,
I would advise using export/import option in ESXi. You got to shutdown the VM during this operation, but the VM will be exactly the same.
Or use a backup / restore..
0
 
Member_2_7965582Author Commented:
I ran a restore on the OpenVPN VM to the new ESXi server. Same results.
0
 
Mr TorturSystem EngineerCommented:
Hi,
is there a separated network or some particularity with this VM network, or is it in the same vswitch and LAN than other VM ?

Can you check if the MAC address has changed between the old and new one ?

You say you move the VM from some ESXi to another, is the new ESXi configured in the same way than the old one, e.g. about networking ?
0
 
Member_2_7965582Author Commented:
Both ESXi are in bridging mode and each use a non-vlan'd VM switch.
I checked the VM MAC and they are identical (thought this would be promising but no). Aside from a different hardware underneath the ESXi servers both VM's are identical in config, software and settings.
I'm not aware of a import/export function in the vSphere aside from turning the VM into a OVF template.

My gut tells me this has more to do with the OpenVPN VM not liking a UUID in VMware.
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
Do you have something to test the OpenVPN outside of the Yealink phones?
As I read it, you only can tell yet that SIP register does not work from the phones if using the new VM. But we do not see if anything is arriving at the OpenVPN server, and that should be the next check - does the OpenVPN connection itself work?
Then we can check for LAN access, and then for SIP.

OpenVPN usually keeps a log and a status file in the CONFIG or LOG folder. That should show something about connection attempts and current connections.

Also note that using the same MAC address on different switches might create issues for a short time, until the change has been learned thru all switches concerned.
0
 
Mr TorturSystem EngineerCommented:
Hi,
I'm not aware of a import/export function in the vSphere aside from turning the VM into a OVF template.
yes it is the same option, export to an ovf template, and then import  :-)

Both ESXi are in bridging mode and each use a non-vlan'd VM switch.
ok, but I don't know about a bridging mode in ESXi, this is in Vmware workstation AFAIK.
0
 
Member_2_7965582Author Commented:
We beleive we've found a solution. will post the results as soon as it's implemented.
0
 
Member_2_7965582Author Commented:
VM now functions as expected. None of the other proposed solutions were successful.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.