-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Tuesday, November 16th, 2021 at 19:55, mike tancsa <m...@sentex.net> wrote:

> Hi all,
>
>     I have a number of vpn endpoints where I push a set of routes
>
> through the server's config. I now need to make an exception for one
>
> such client.  As its in the field, I have no easy way of changing the
>
> remote config.  Is there a way where I can cancel a route push through
>
> the ccd file  ? e.g. in the server conf file I have
>
> push "route 192.168.68.0 255.255.255.0"
>
> I want to exclude that push for one site. Is there a way to "un push"
>
> that route in the ccd file ?
>
> The other option I found was that I can use push-reset.  However, after
>
> the client initially connects and everything works, the server which has
>
> "keepalive 5 30", thinks the connection has failed and it times out
>
> because I guess the client no longer sends keep alives
>
>  [x509testcert] Inactivity timeout (--ping-restart), restarting
>
> and the client never reconnects on its own :(
>
> I tried adding
>
> push-reset
>
> push "keepalive 5 30"
>
> to the ccd file, but that doesnt seem to work.  Any ideas ?
>

Try --push-remove (v2.5 server required)

More details here:
https://build.openvpn.net/man/openvpn-2.5/openvpn.8.html

WFM

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAGBQJhlBeIACEJEE+XnPZrkLidFiEECbw9RGejjXJ5xVVVT5ec
9muQuJ3R/wf/d4a+VGOSKZZfIu77eOv+2QplzMFKqxtHjYzUQP+rhkW0d0Hz
Bm0bJmeOdrxED9Gu4MiSMazAhe1PGu+4TgQscyp23lMhePM07NMirVQJcHsE
iWUnjwJb+F2Wr+pm04/ZTDCa6h1fgIs303H2jD3l9iP/P443KGzU5fpEoOHO
V6HW9C3uGZrUfJD9R68C84ov7qQFP7k3H9CNw1iHixdX5QG5dUec1VPdzjrZ
+CO2G2SSB4XlwYyCQ8NSgbzZIQDr+M0ZscljBW9GBAP2ccDYmN1PJoaOqbok
+9fnCmUsnRXtLrwmQPipTiySIBxOn+ibHWWArUjbJbl3ieJEAr6Fig==
=zgjm
-----END PGP SIGNATURE-----

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to