"
Hi all,
I've recently had to rebuild my OPNsense machine from scratch and thought I'd try to get my head around the OpenVPN instances rather than the old server I used before thinking it will eventually disappear.
I am running 24.7.12 bare metal on a N100 box with 4 NICS; LAN (and VLANs) are on one and WAN on the other. I have a static IPv4 address and a working domain hosted on Cloudflare. We both run the VPN automatically on Android phones when leaving the home network so we are still under the influence of Piholes. Everything is working as expected on the network but thought I'd give some background as to how we use it.
Since moving over to the Instances, I've noticed some odd behaviour where my partner's phone (and to a lesser extent mine) keep disconnecting and reconnecting and OpenVPN treats this as a new connection. I recently increased the number of concurrent connections to account for this as there are only the two of us who have access to this server and it seemed to work, but recently it has started hitting 50 "concurrent" connections.
I have had a good search of the forum already for suggestions. I initially thought that the "renegotiate time" and "auth token lifetime" options were the problem. We authenticate only using the file containing certificates and username/password. I have TOTP but do not use it for VPN authentication.
I currently have both of those options set to 3600 as this seemed to be the issue - when I first set up the instance I had both set to 0 as ideally I wouldnt want clients to have to renegotiate. I have changed these a few times subsequently and it seems that these are also client side so I may need to reimport the file which is easy enough.
I am seeing quite a lot of things in the OpenVPN log file including "TLS handshake failed" and "key negotiation failed to occur within 60 seconds".
To summarise... The VPN seems to work exactly as intended when it is connected... but it is disconnecting frequently and hitting the max number of connections which then stops it being able to reconnect.
I'd be grateful for any pointers of where to look, happy to supply extra info as needed just wasn't completely sure what was relevant! Thanks in advance.
I've recently had to rebuild my OPNsense machine from scratch and thought I'd try to get my head around the OpenVPN instances rather than the old server I used before thinking it will eventually disappear.
I am running 24.7.12 bare metal on a N100 box with 4 NICS; LAN (and VLANs) are on one and WAN on the other. I have a static IPv4 address and a working domain hosted on Cloudflare. We both run the VPN automatically on Android phones when leaving the home network so we are still under the influence of Piholes. Everything is working as expected on the network but thought I'd give some background as to how we use it.
Since moving over to the Instances, I've noticed some odd behaviour where my partner's phone (and to a lesser extent mine) keep disconnecting and reconnecting and OpenVPN treats this as a new connection. I recently increased the number of concurrent connections to account for this as there are only the two of us who have access to this server and it seemed to work, but recently it has started hitting 50 "concurrent" connections.
I have had a good search of the forum already for suggestions. I initially thought that the "renegotiate time" and "auth token lifetime" options were the problem. We authenticate only using the file containing certificates and username/password. I have TOTP but do not use it for VPN authentication.
I currently have both of those options set to 3600 as this seemed to be the issue - when I first set up the instance I had both set to 0 as ideally I wouldnt want clients to have to renegotiate. I have changed these a few times subsequently and it seems that these are also client side so I may need to reimport the file which is easy enough.
I am seeing quite a lot of things in the OpenVPN log file including "TLS handshake failed" and "key negotiation failed to occur within 60 seconds".
To summarise... The VPN seems to work exactly as intended when it is connected... but it is disconnecting frequently and hitting the max number of connections which then stops it being able to reconnect.
I'd be grateful for any pointers of where to look, happy to supply extra info as needed just wasn't completely sure what was relevant! Thanks in advance.
