lucas.robb Hello All, My apologies if this has come up previously, I was unable to find help anywhere on this. For some reason my OpenVPN server is acting strangely. 1. If I have not connected to it in a while then it will have no issues at all. 2. if I disconnect and reconnect it will fail 3. if I try to connect multiple users simultaneous it will fail 4. if I try to connect any user too soon after another has disconnected it will fail this is a problem, and I can't find out where my issues are, I will post the server.conf below: mode server #tls-server local 192.168.10.119 ## ip/hostname of server port 1194 ## default openvpn port proto udp #bridging directive dev tap0 ## If you need multiple tap devices, add them here up "/etc/openvpn/up.sh br0 tap0 1500" down "/etc/openvpn/down.sh br0 tap0" persist-key persist-tun #certificates and encryption ca /etc/openvpn/ca.crt cert /etc/openvpn/laptop-laz.crt key /etc/openvpn/laptop-laz.key # This file should be kept secret dh dh1024.pem #tls-auth ta.key 0 # This file is secret cipher BF-CBC # Blowfish (default) comp-lzo #DHCP Information ifconfig-pool-persist ipp.txt server-bridge 192.168.10.119 255.255.255.0 192.168.10.50 192.168.10.99 push "dhcp-option DNS 209.250.128.6" #push "dhcp-option DOMAIN yourdomain.com" max-clients 20 ## set this to the max number of clients that should be connected at a time #script security settings script-security 3 system #log and security user nobody group nogroup keepalive 10 120 status openvpn-status.log verb 7
lucas.robb Hi all, I also have another comment to make. when these won't connect the error that is given is: TLS Error: Unroutable control packet received from x.x.x.x It looks like I have a cert/config error, but how do I allow for multiple clients on the server in this way, I have issued separate certificates to all my devices and can't imagine why its not working. doing some research I found these possible issues which I don't agree with all of them because it does work sometimes 1. time sync issues between server and client 2. server thinks it an attack and refuses packets with this error. I could see #2 being true but I would imagine there is a directive I could add to the server to be able to say "allow multi" or "ignore attacks" or something like that. Than, you all in advance
lucas.robb note also I'm using the easy-rsa scripts as directed in this config guide: https://help.ubuntu.com/community/OpenVPN
