DarrenBarrick Hello! I have inherited a Vpn configuration using OpenVpn and we are seeing some ping times that might/might not indicate a wider issue. (The user is more generally complaining of slow Rdp access) Essentially I am seeing ping times when traversing through the Vpn at around 2-3 times greater than when the ping to the connection gateway. Version: OpenVpn Version: 2.0.9 i686-pc-linux [SSL] (on both sites) Site 1 ping 8.8.8.8 Average: 46 ms ping <Site 2 Connection Modem> Average: 85 ms ping <Site 2 Internal Resource #1> Average: 125 ms Site 2 ping 8.8.8.8 Average: 59 ms ping <Site 1 Connection Modem> Average: 73.6 ms ping <Site 2 Internal Resource #1> Average: 173 ms Settings from Server.Conf Proto tcp Dev tun Client-to-client Keepalive 10 120 Comp-lzo ;This setting was enabled. I have disabled it but I am waiting to reboot the device ;--tun-mtu 1300 Appreciate this post is a bit vague – any assistance would be appreciated! Thanks, Darren
maikcat hi there, please post the WHOLE config... keep in mind that using tcp for vpn is not the best practice... can you try to switch to udp? also if the speed bogs down when traffic is created you might have MTU issues as well.. Michael.
DarrenBarrick Michael, thank you for your reply. Please find below all of the settings in the server.conf file port 1194 proto tcp dev tun ca /openvpn-2.0.9/easy-rsa/ca/crt crt /openvpn-2.0.9/easy-rsa/keys/main1.crt key /openvpn-2.0.9/easy-rsa/keys/main1.key dh /openvpn-2.0.9/easy-rsa/keys/dh1024.pem server 11.0.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push “route 10.0.0.0 255.255.255.0” client-config-dir /openvpn-2.0.9/ccd route 10.200.251.0 255.255.255.0 client-to-client duplicate-cn keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 It is possible for me to try swtiching this over to Udp - I will try this. However there are some devices printing directly via Ip over the VPN connection - I would worry a little that might cause issues? Thanks again. Darren
maikcat However there are some devices printing directly via Ip over the VPN connection - I would worry a little that might cause issues? nope.... you must switch proto option to both server & clients.. Michael.
