I have a problem concerning multiple clients trying to connect to an openvpn server: After the first client "client1" is successfully connected and disconnects, the other clients cannot connect directly after the initial client. The openvpn service on the server first has to be restarted to enable other clients to connect, where also only the first client connecting after a restart is able to disconnect and connect while the others have to wait for a restart.
While inspecting the server side logs I noticed the connection gets established ("Peer Connection Initiated") when I connect the client with the openVPN GUI but the connection apparently never gets terminated, only after some time, when the
keepalive 10 120 instruction kicks in a timeout is detected and a restarting of the client fails because it is obviously not connected anymore.
here is the relevant snippet from openvpn.log:
... [my-ip]:59006 [hajnVPN] Peer Connection Initiated with [client1-ip]:59006 client1/[client1-ip]:59006 MULTI: Learn: 10.240.43.2 -> client1/[client1-ip]:59006 client1/[client1-ip]:59006 MULTI: primary virtual IP for client1/[client1-ip]3:59006: 10.240.43.2 client1/[client1-ip]:59006 PUSH: Received control message: 'PUSH_REQUEST' client1/[client1-ip]:59006 SENT CONTROL [client1]: 'PUSH_REPLY,dhcp-option DNS 10.240.43.1,route-gateway 10.240.43.1,topology subnet,ping 10,ping-restart 120,ifconfig 10$ client1/[client1-ip]:59006 IPv6 in tun mode is not supported in OpenVPN 2.2
then, after a couple of minutes (5min in this case):
client1/[client1-ip]:59006 [client1] Inactivity timeout (--ping-restart), restarting client1/[client1-ip]:59006 SIGUSR1[soft,ping-restart] received, client-instance restarting
Can anyone of you confirm that kind of behaviour? Could some of you post their server logs? Thanks in Advance!
Below is my server.conf:
port 1194 proto udp dev tun1 topology subnet ifconfig-noexec route-noexec ca /etc/openvpn/ca.crt cert /etc/openvpn/server.crt key /etc/openvpn/server.key dh /etc/openvpn/dh1024.pem server 10.240.43.0 255.255.255.0 ;ifconfig-pool-persist ipp.txt push "dhcp-option DNS 10.240.43.1" keepalive 10 120 <-- comp-lzo max-clients 100 persist-key persist-tun status openvpn-status.log log /etc/openvpn/openvpn.log verb 6