OpenVPN Client Management Port

[spider]

Hi

I would like to monitor the openvpn connections using openvpn monitor application. This application needs to access client management socket

AFAICS there is an option in the server configuration to allow the client management port to be set. However this does nothing.

So my questions are:
1) does this functionality work
2) am I doing something incorrectly

I asked a similar question for the 18.7 forum but got no replies and since then the firmware is updated to the latest version 19.1.1.

Thanks

Thanks.

[franco]

> AFAICS there is an option in the server configuration to allow the client management port to be set. However this does nothing.

Can you share the steps to reproduce?


Cheers,
Franco

[spider]

Can you share the steps to reproduce?

What I did is enable Client Management Port in the server configuration and select a port, the default is 166 so I entered 166.

Then in a shell I ran netstat -an and the port was not shown but /var/etc/openvpn/server6.sock is there.

So checking the config /var/etc/openvpn/server6.conf
management /var/etc/openvpn/server6.sock unix

What I'm expecting to see, or something like it (best if the socket was bound to the local lan address)
management 0.0.0.0 166

Thanks,

PS I'm not sure how to configure the forum to send a mail when a reply is posted.

[bartjsmit]

The OpenVPN server defaults to listening on a local socket for security. You need to add a line like:

management 127.0.0.1 166 /etc/vpncreds

Set the management password on the first line of the vpncreds file.

Bart...

[spider]

Thanks for your suggestion. Unfortunately it does not work.

If the line is added to the conf file it is removed on the next restart
If the line is added to the advanced configuration options then the line is there but so is the management line for the unix socket, it looks like the unix socket is used instead of the tcp socket.

Thanks,