Sync OpenVPN Connection Status Sessions on HA

[gabecz]

Hi
The question is if how to synchronize openvpn / connection status / sessions when on HA ot make failover seamless without openvpn client even knowing that master failed over to backup.
I already make radius duo proxy think that it's authenticating against the carp wan vip so i think if both master and backup would have the session information of the vpn connection clients would stay connected in case of failover without user interaction / per say connection interruption.
In addition i have to say our node1 won't sync settings on demand we need to explicitly ask node1 to sync. But when we do that, the information above (vpn sessions) will not show up on node2.
Perhaps it's a nat/firewall rule I'm missing here?
Thanks