OpenVPN Client disconnected, status 3

[JacquesH]

Hello,

We are trying to implement OpenVPN but are having some issues with disconnect messages appearing in the logfile.
When a connection is established, we see in the OPNsense OpenVPN log file once every minute these messages:

MANAGEMENT: CMD 'status 3'
MANAGEMENT: Client disconnected
Followed by a new connection message:
MANAGEMENT: Client connected from /var/etc/openvpn/instance-009b3cc4-aecf-43b8-9ab4-a76bed307854.sock

See image attached.

The connection is thus reestablished every minute, or so it seems, and it doesn't appear to affect the connection, but the log file is crammed with these messages.

We've already played around with the keepalive interval and timeout, but that didn't really help. The interval is currently 10 and the timeout 120 seconds, but the disconnect messages are appearing every minute on the dot.

I have tried with the OpenVPN client and the Viscosity client, both maintain the connection but the messages still appear with both.

Any suggestions or experience as to what to do to fix this?

Thanks,
J

[nero355]

once every minute

The connection is thus reestablished every minute

We've already played around with the keepalive interval and timeout, but that didn't really help.

The interval is currently 10 and the timeout 120 seconds, but the disconnect messages are appearing every minute on the dot.

A long time ago when I was maintaining some OpenVPN Servers we had similar issues when Clients were behind more than 1 NAT Router and the connection becomes instable.

If you don't want the connection to go down every minute then your 'Hello/Dead timers' need to be very short or in other words shorter than that minute.
Try 10 and 50 seconds and see how that works out ?