Hi John,

On 11/10/18 03:26, Johncy Bennette wrote:
Thanks Jan. But if it's about network issue or firewall I have a system running the same software and connected to the same network and it's working properly. The problem system has the issue for about 3 hours and recovered on it's own.


I am running the openvpn version

root@x:~# openvpn --version

OpenVPN 2.3.7 arm-mel-linux-gnueabi [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6]

library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.09



looks like an embedded device....
is the problem still there?  next time the connection drops, try logging in on the box to check for netstat statistics - are packets being dropped (e.g. by the interface). also, post the relevant openvpn log snippet during the misbehaviour/reconnects.
As another poster suggest, adding
  reneg-sec 86400
might "solve" the issue but all it does is make the key renegotiaton happen less often. This can potentially mask the problem but it also makes your connection (slightly) less secure, depending on which cipher you are using.

HTH,

JJK



On Wed, Oct 10, 2018, 2:25 PM Jan Just Keijser <janj...@nikhef.nl <mailto:janj...@nikhef.nl>> wrote:

    Hi,

    On 09/10/18 20:07, Johncy Bennette wrote:
    >   Hi,
    > In my Linux system, I am seeing my openvpn restarts many time due to
    > one of the following reasons
    >   The server configuration has ping 10, ping-restart 10 and same is
    > pushed to client.
    >
    > 1. [*.xxx.com <http://xxx.com>] Inactivity timeout
    (--ping-restart), restarting
    >
    > 2. [UNDEF] Inactivity timeout (--ping-restart), restarting
    >
    > 3. Connection reset, restarting [-1]
    >
    > One other system is connected to the same network and its
    working fine with no issues.

    In almost all such cases, the underlying network is the issue.
    Check for
    any network errors on the non-VPN traffic , comparing the
    "working" box
    to the "non working" box. Check for network cables, IP + routing
    addresses, firewalling rules, both on the box itself and in the core
    network.

    HTH,

    JJK


_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to