VPN stops working after 60 seconds.

Question

Hello Everyone
I am having problem with my vpn i am using Express vpn on windows 8.1 64 bit last week everything was working fine. Now i am being disconnected every 60 seconds then i have to reconnect it and again it works for 60 seconds. 
I am using 3g connection through hotspot of my cell phone. They have an android app that is working great in my cell phone. But it's not working on my computer. I contacted their support they said that is problem with my OS. 
My connection uses 3G connection through UDP from port 9200.
How is it possible to work on my cell phone but not on my PC ?
Any help would be really appreciated. Thank you
Here is my log:
ExpressVPN client version: 3.535
Operating System: Microsoft Windows NT 6.2.9200.0 (6.2.9200.0)
Timestamp: 6/9/2014 6:16:19 PM
Cluster list file version: 20140612|1|
Cluster list download date: 6/9/2014 6:15:42 PM
Mon Jun 09 18:16:21 2014 OpenVPN 2.2.2 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 21 2012
Mon Jun 09 18:16:21 2014 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Mon Jun 09 18:16:21 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jun 09 18:16:21 2014 NOTE: --fast-io is disabled since we are running on Windows
Mon Jun 09 18:16:22 2014 Control Channel Authentication: using 'ssl/ta.key' as a OpenVPN static key file
Mon Jun 09 18:16:22 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jun 09 18:16:22 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jun 09 18:16:22 2014 LZO compression initialized
Mon Jun 09 18:16:22 2014 Control Channel MTU parms [ L:1546 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Jun 09 18:16:22 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jun 09 18:16:22 2014 Data Channel MTU parms [ L:1546 D:1450 EF:46 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 09 18:16:22 2014 Fragmentation MTU parms [ L:1546 D:1300 EF:45 EB:135 ET:1 EL:0 AF:3/1 ]
Mon Jun 09 18:16:22 2014 Local Options hash (VER=V4): '551868c6'
Mon Jun 09 18:16:22 2014 Expected Remote Options hash (VER=V4): 'e34c1722'
Mon Jun 09 18:16:22 2014 UDPv4 link local: [undef]
Mon Jun 09 18:16:22 2014 UDPv4 link remote: 23.80.208.122:10189
Mon Jun 09 18:16:22 2014 TLS: Initial packet from 23.80.208.122:10189, sid=c5f85044 ce459db9
Mon Jun 09 18:16:23 2014 Replay-window backtrack occurred [1]
Mon Jun 09 18:16:24 2014 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/[email protected]
Mon Jun 09 18:16:24 2014 VERIFY OK: nsCertType=SERVER
Mon Jun 09 18:16:24 2014 VERIFY X509NAME OK: /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/[email protected]
Mon Jun 09 18:16:24 2014 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/[email protected]
Mon Jun 09 18:16:27 2014 Replay-window backtrack occurred [2]
Mon Jun 09 18:16:28 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jun 09 18:16:28 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jun 09 18:16:28 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jun 09 18:16:28 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jun 09 18:16:28 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Jun 09 18:16:28 2014 [server] Peer Connection Initiated with 23.80.208.122:10189
Mon Jun 09 18:16:30 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Jun 09 18:16:31 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.15.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.15.82.166 10.15.82.165'
Mon Jun 09 18:16:31 2014 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jun 09 18:16:31 2014 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jun 09 18:16:31 2014 OPTIONS IMPORT: route options modified
Mon Jun 09 18:16:31 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Jun 09 18:16:31 2014 ROUTE default_gateway=192.168.43.1
Mon Jun 09 18:16:31 2014 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{233B6BCA-2192-4956-A6BD-6CF31BC8EA98}.tap
Mon Jun 09 18:16:31 2014 TAP-Win32 Driver Version 9.9 
Mon Jun 09 18:16:31 2014 TAP-Win32 MTU=1500
Mon Jun 09 18:16:32 2014 NETSH: C:\Windows\system32\netsh.exe interface ip set address Local Area Connection dhcp
Mon Jun 09 18:16:32 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.15.82.166/255.255.255.252 on interface {233B6BCA-2192-4956-A6BD-6CF31BC8EA98} [DHCP-serv: 10.15.82.165, lease-time: 31536000]
Mon Jun 09 18:16:32 2014 Successful ARP Flush on interface [24] {233B6BCA-2192-4956-A6BD-6CF31BC8EA98}
Mon Jun 09 18:16:34 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Mon Jun 09 18:16:34 2014 C:\Windows\system32\route.exe ADD 23.80.208.122 MASK 255.255.255.255 192.168.43.1
 OK!
Mon Jun 09 18:16:34 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.15.82.165
 OK!
Mon Jun 09 18:16:34 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.15.82.165
 OK!
Mon Jun 09 18:16:34 2014 C:\Windows\system32\route.exe ADD 10.15.0.1 MASK 255.255.255.255 10.15.82.165
 OK!
Mon Jun 09 18:16:34 2014 Initialization Sequence Completed
"Prevent DNS leaks" feature: 1 NIC(s) with DNS server parameters found
"Prevent DNS leaks" feature: backup DNS server parameters NIC name: [00000002] Ralink RT5390 802.11b/g/n WiFi Adapter, Auto DNS enabled: True, IP addresses: {192.168.43.25, fe80::4989:439c:d7e1:4319 }, DNS addresses: { 192.168.43.1 }
"Prevent DNS leaks" feature: set DNS server for [00000002] Ralink RT5390 802.11b/g/n WiFi Adapter to ( 8.8.8.8, 8.8.4.4 )
"Prevent DNS leaks" feature is turned on
"Prevent Non-VPN connections" feature is turned on
Mon Jun 09 18:16:39 2014 Replay-window backtrack occurred [3]
Mon Jun 09 18:16:39 2014 Replay-window backtrack occurred [6]

Answer 1

Hi,
Since this VPN can worked well last week. I suspect it you have configured any group policy in this environment. You may using safe mode to ensure if the issue persists.
Moreover, we can gather the netmon trace and RRAS with event log to track this issue.
 Please help me collect RRAS traces and network traces on a problematic client and the NPS server. To do this,
a. Download Microsoft Network Monitor Tool from the following link and install it on the client and the server. 
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=983b941d-06cb-4658-b7f6-3088333d062f
b. Start Network Monitor at "Start" ->"Program"-> "Microsoft Network Monitor 3.4" -> "Microsoft Network Monitor 3.4" on the client and the server.
c. On the left-panel, select LAN connection on the server and select corresponding connection on the client. 
d. Click "Tools", click "Options", switch to the "Capture" tap, and set the "Temporary capture file size (MB)" to 200 on the client and the server.
e. On the NPS server and the wireless client, run the following command under the command prompt to enable RRAS tracing.
netsh ras set tracing * enabled
f. Click "New Capture", click "Start" on the Capture menu in the two Network Monitor windows.
g. Now from the client, try to establish the wireless connection to reproduce the problem.
h. Once the problem occurs, click "Stop" on the Capture menu on the client and the server, and click "File"->"Save as" to save the captured files. 
i. Run the following command under the command prompt on both the NPS server and the client to disable RRAS tracing.
netsh ras set tracing * disabled
j. The tracing files are saved at %systemroot%\tracing folder. On both the NPS server and the client, please compress the "tracing" folder to a zip file.
Thank you.
Best regards,  
Steven Song
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.