openvpn loses site-to-site connectivity

pilotget

I have a problem that is driving me crazy:

There are two networks: my home network and my work network. They are connected in a site-to-site, routed configuration with openvpn. The openvpn server is running on a pfsense router in both cases, so it is the gateway to the outside networks. The configuration has been working fine for years.

For the last few months, the two sites lose connectivity in a strange way:

Clients on my home network cannot ping anything on the work network
The home pfSense gateway can ping the work pfSense Gateway
the work pfSense Gateway cannot ping the home pfSense gateway
Clients on the work network cannot ping anything on the home network

If I restart OpenVPN either on the home or work gateway, then everything starts working again... until the next time I lose connectivity. I hesitate to think this is a configuration problem, because it has been working for years. (although it may have started after an upgrade to pfSense... I'm not sure.)

The weird thing is that the home pfSense Gateway can always ping the work pfSense gateway, but not the other way around.

Again, once I restart either openvpn, it starts working normally again. I'm not sure how long it works, but every day when I come home, I have no connectivity to work, and I have to restart openvpn, so it's definitely less than 24 hours.

Any ideas what could be causing the loss of connectivity?
Or perhaps any ideas about how to troubleshoot it once the connectivity is lost? What can I do on the gateway to figure out why it can ping the other end through the OpenVPN tunnel, but it won't route packets from the rest of the network through the tunnel until openvpn is restarted?

pilotget

Here is the server config. The server network is 10.170.2.0/24
The tunnel is 10.63.19.0/24.

dev ovpns1
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher BF-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
tls-server
server 10.63.19.0 255.255.255.0
client-config-dir /var/etc/openvpn-csc
tls-verify /var/etc/openvpn/server1.tls-verify.php
lport 51194
management /var/etc/openvpn/server1.sock unix
push "route 10.53.6.0 255.255.255.0"
client-to-client
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.2048
tls-auth /var/etc/openvpn/server1.tls-auth 0
comp-lzo
persist-remote-ip
float
route 10.170.2.0 255.255.255.0

pilotget

Here is the client config. The client network is 10.53.6.0/24.

dev ovpnc1
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_client1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher BF-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local 97.93.108.100
tls-client
client
lport 0
management /var/etc/openvpn/client1.sock unix
remote pgfs.pilotgetaways.com 51194
ifconfig 10.63.19.2 10.63.19.1
route 10.53.6.0 255.255.255.0
ca /var/etc/openvpn/client1.ca
cert /var/etc/openvpn/client1.cert
key /var/etc/openvpn/client1.key
tls-auth /var/etc/openvpn/client1.tls-auth 1
comp-lzo
resolv-retry infinite
remote-cert-tls server

pilotget

Here's the client log. I had to login at 0:44 to reboot the openvpn server. When I tried again at 18:28, it wasn't working, so I had to reboot it again to restore connectivity.

Sep 12 00:44:21 openvpn[37789]: SIGUSR1[soft,ping-restart] received, process restarting
Sep 12 00:44:21 openvpn[37789]: [pgfs] Inactivity timeout (--ping-restart), restarting
Sep 12 00:44:23 openvpn[37789]: LZO compression initialized
Sep 12 00:44:23 openvpn[37789]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 12 00:44:23 openvpn[37789]: Re-using SSL/TLS context
Sep 12 00:44:23 openvpn[37789]: UDPv4 link local (bound): 97.93.108.100
Sep 12 00:44:23 openvpn[37789]: UDPv4 link remote: 97.93.110.235:51194
Sep 12 00:44:24 openvpn[37789]: [pgfs] Peer Connection Initiated with 97.93.110.235:51194
Sep 12 00:44:26 openvpn[37789]: Initialization Sequence Completed
Sep 12 00:44:26 openvpn[37789]: Preserving previous TUN/TAP instance: ovpnc1
Sep 13 10:57:26 openvpn[43583]: Control Channel Authentication: using '/var/etc/openvpn/client1.tls-auth' as a OpenVPN static key file
Sep 13 10:57:26 openvpn[43583]: LZO compression initialized
Sep 13 10:57:26 openvpn[43583]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 13 10:57:26 openvpn[43583]: OpenVPN 2.2.2 i386-portbld-freebsd8.1 [SSL] [LZO2] [eurephia] built on Apr 2 2013
Sep 13 10:57:26 openvpn[43583]: WARNING: using --pull/--client and --ifconfig together is probably not what you want
Sep 13 10:57:26 openvpn[43596]: UDPv4 link local (bound): 97.93.108.100
Sep 13 10:57:26 openvpn[43596]: UDPv4 link remote: 97.93.110.235:51194
Sep 13 10:57:27 openvpn[43596]: [pgfs] Peer Connection Initiated with 97.93.110.235:51194
Sep 13 10:57:30 openvpn[43596]: Cannot open TUN/TAP dev /dev/tun1: Device busy (errno=16)
Sep 13 10:57:30 openvpn[43596]: Exiting
Sep 13 10:58:22 openvpn[37789]: SIGUSR1[soft,ping-restart] received, process restarting
Sep 13 10:58:22 openvpn[37789]: [pgfs] Inactivity timeout (--ping-restart), restarting
Sep 13 10:58:24 openvpn[37789]: LZO compression initialized
Sep 13 10:58:24 openvpn[37789]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 13 10:58:24 openvpn[37789]: Re-using SSL/TLS context
Sep 13 10:58:24 openvpn[37789]: UDPv4 link local (bound): 97.93.108.100
Sep 13 10:58:24 openvpn[37789]: UDPv4 link remote: 97.93.110.235:51194
Sep 13 10:58:25 openvpn[37789]: [pgfs] Peer Connection Initiated with 97.93.110.235:51194
Sep 13 10:58:27 openvpn[37789]: Initialization Sequence Completed
Sep 13 10:58:27 openvpn[37789]: Preserving previous TUN/TAP instance: ovpnc1
Sep 13 18:28:11 openvpn[60941]: Control Channel Authentication: using '/var/etc/openvpn/client1.tls-auth' as a OpenVPN static key file
Sep 13 18:28:11 openvpn[60941]: LZO compression initialized
Sep 13 18:28:11 openvpn[60941]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 13 18:28:11 openvpn[60941]: OpenVPN 2.2.2 i386-portbld-freebsd8.1 [SSL] [LZO2] [eurephia] built on Apr 2 2013
Sep 13 18:28:11 openvpn[60941]: WARNING: using --pull/--client and --ifconfig together is probably not what you want
Sep 13 18:28:11 openvpn[61098]: UDPv4 link local (bound): 97.93.108.100
Sep 13 18:28:11 openvpn[61098]: UDPv4 link remote: 97.93.110.235:51194
Sep 13 18:28:12 openvpn[61098]: [pgfs] Peer Connection Initiated with 97.93.110.235:51194
Sep 13 18:28:14 openvpn[61098]: Cannot open TUN/TAP dev /dev/tun1: Device busy (errno=16)
Sep 13 18:28:14 openvpn[61098]: Exiting
Sep 13 18:29:10 openvpn[37789]: SIGUSR1[soft,ping-restart] received, process restarting
Sep 13 18:29:10 openvpn[37789]: [pgfs] Inactivity timeout (--ping-restart), restarting
Sep 13 18:29:12 openvpn[37789]: LZO compression initialized
Sep 13 18:29:12 openvpn[37789]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sep 13 18:29:12 openvpn[37789]: Re-using SSL/TLS context
Sep 13 18:29:12 openvpn[37789]: UDPv4 link local (bound): 97.93.108.100
Sep 13 18:29:12 openvpn[37789]: UDPv4 link remote: 97.93.110.235:51194
Sep 13 18:29:13 openvpn[37789]: [pgfs] Peer Connection Initiated with 97.93.110.235:51194
Sep 13 18:29:15 openvpn[37789]: Initialization Sequence Completed
Sep 13 18:29:15 openvpn[37789]: Preserving previous TUN/TAP instance: ovpnc1

pilotget

Here are the server logs. The certificate Mel-MacBookPro-openvpn is used by a road warrior computer. The certificate homepc1 is used by the client to establish the site-to-site with the home network.

Sep 13 00:44:56	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 00:44:56	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 01:09:05	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 01:09:05	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 01:44:57	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 01:44:57	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 02:09:06	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 02:09:06	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 02:44:57	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 02:44:57	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 03:09:07	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 03:09:07	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 03:44:58	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 03:44:58	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 04:09:08	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 04:09:08	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 04:45:00	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 04:45:00	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 05:09:09	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 05:09:09	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 05:45:01	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 05:45:01	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 06:09:10	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 06:09:10	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 06:45:01	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 06:45:02	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 06:55:11	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:57650 [Mel-MacBookPro-openvpn] Inactivity timeout (--ping-restart), restarting
Sep 13 07:15:53	openvpn[29548]: 172.248.200.189:51021 Re-using SSL/TLS context
Sep 13 07:15:53	openvpn[29548]: 172.248.200.189:51021 LZO compression initialized
Sep 13 07:15:54	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 07:15:54	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 07:15:54	openvpn[29548]: 172.248.200.189:51021 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:51021
Sep 13 07:15:57	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:51021 send_push_reply(): safe_cap=960
Sep 13 07:28:06	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:51021 [Mel-MacBookPro-openvpn] Inactivity timeout (--ping-restart), restarting
Sep 13 07:29:00	openvpn[29548]: 172.248.200.189:51988 Re-using SSL/TLS context
Sep 13 07:29:00	openvpn[29548]: 172.248.200.189:51988 LZO compression initialized
Sep 13 07:29:12	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 07:29:12	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 07:29:16	openvpn[29548]: 172.248.200.189:51988 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:51988
Sep 13 07:29:18	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:51988 send_push_reply(): safe_cap=960
Sep 13 07:45:03	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 07:45:03	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 08:29:16	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 08:29:16	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 08:45:03	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 08:45:04	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 09:29:17	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 09:29:17	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 09:45:04	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 09:45:04	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 10:29:18	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 10:29:18	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 10:45:05	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 10:45:05	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 10:57:26	openvpn[29548]: 97.93.108.100:8163 Re-using SSL/TLS context
Sep 13 10:57:26	openvpn[29548]: 97.93.108.100:8163 LZO compression initialized
Sep 13 10:57:27	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 10:57:27	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 10:57:27	openvpn[29548]: 97.93.108.100:8163 [homepc1] Peer Connection Initiated with [AF_INET]97.93.108.100:8163
Sep 13 10:57:30	openvpn[29548]: homepc1/97.93.108.100:8163 send_push_reply(): safe_cap=960
Sep 13 10:58:24	openvpn[29548]: 97.93.108.100:13746 Re-using SSL/TLS context
Sep 13 10:58:24	openvpn[29548]: 97.93.108.100:13746 LZO compression initialized
Sep 13 10:58:25	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 10:58:25	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 10:58:25	openvpn[29548]: 97.93.108.100:13746 [homepc1] Peer Connection Initiated with [AF_INET]97.93.108.100:13746
Sep 13 10:58:27	openvpn[29548]: homepc1/97.93.108.100:13746 send_push_reply(): safe_cap=960
Sep 13 11:29:19	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 11:29:19	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 11:58:26	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 11:58:26	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 12:07:36	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:51988 [Mel-MacBookPro-openvpn] Inactivity timeout (--ping-restart), restarting
Sep 13 12:58:27	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 12:58:27	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 13:50:31	openvpn[29548]: 172.248.200.189:53822 Re-using SSL/TLS context
Sep 13 13:50:31	openvpn[29548]: 172.248.200.189:53822 LZO compression initialized
Sep 13 13:50:35	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 13:50:35	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 13:50:36	openvpn[29548]: 172.248.200.189:53822 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:53822
Sep 13 13:50:38	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:53822 send_push_reply(): safe_cap=960
Sep 13 13:58:28	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 13:58:28	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 14:28:15	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:53822 [Mel-MacBookPro-openvpn] Inactivity timeout (--ping-restart), restarting
Sep 13 14:40:57	openvpn[29548]: 172.248.200.189:58029 Re-using SSL/TLS context
Sep 13 14:40:57	openvpn[29548]: 172.248.200.189:58029 LZO compression initialized
Sep 13 14:40:58	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 14:40:58	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 14:40:58	openvpn[29548]: 172.248.200.189:58029 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:58029
Sep 13 14:41:01	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:58029 send_push_reply(): safe_cap=960
Sep 13 14:58:28	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 14:58:28	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 15:40:58	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 15:40:59	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 15:58:29	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 15:58:29	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 16:22:21	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:58029 [Mel-MacBookPro-openvpn] Inactivity timeout (--ping-restart), restarting
Sep 13 16:22:32	openvpn[29548]: 172.248.200.189:65419 Re-using SSL/TLS context
Sep 13 16:22:32	openvpn[29548]: 172.248.200.189:65419 LZO compression initialized
Sep 13 16:22:33	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 16:22:33	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 16:22:34	openvpn[29548]: 172.248.200.189:65419 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:65419
Sep 13 16:22:36	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:65419 send_push_reply(): safe_cap=960
Sep 13 16:40:52	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:65419 [Mel-MacBookPro-openvpn] Inactivity timeout (--ping-restart), restarting
Sep 13 16:58:38	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 16:58:38	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 17:58:38	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 17:58:39	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 18:28:11	openvpn[29548]: 97.93.108.100:35219 Re-using SSL/TLS context
Sep 13 18:28:11	openvpn[29548]: 97.93.108.100:35219 LZO compression initialized
Sep 13 18:28:12	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 18:28:12	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 18:28:12	openvpn[29548]: 97.93.108.100:35219 [homepc1] Peer Connection Initiated with [AF_INET]97.93.108.100:35219
Sep 13 18:28:14	openvpn[29548]: homepc1/97.93.108.100:35219 send_push_reply(): safe_cap=960
Sep 13 18:29:12	openvpn[29548]: 97.93.108.100:15195 Re-using SSL/TLS context
Sep 13 18:29:12	openvpn[29548]: 97.93.108.100:15195 LZO compression initialized
Sep 13 18:29:13	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 18:29:13	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 18:29:13	openvpn[29548]: 97.93.108.100:15195 [homepc1] Peer Connection Initiated with [AF_INET]97.93.108.100:15195
Sep 13 18:29:15	openvpn[29548]: homepc1/97.93.108.100:15195 send_push_reply(): safe_cap=960
Sep 13 19:29:14	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 19:29:14	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 19:45:40	openvpn[29548]: 172.248.200.189:62262 Re-using SSL/TLS context
Sep 13 19:45:40	openvpn[29548]: 172.248.200.189:62262 LZO compression initialized
Sep 13 19:45:45	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 19:45:45	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 19:45:46	openvpn[29548]: 172.248.200.189:62262 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:62262
Sep 13 19:45:49	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:62262 send_push_reply(): safe_cap=960
Sep 13 19:56:42	openvpn[29548]: 172.248.200.189:63838 Re-using SSL/TLS context
Sep 13 19:56:42	openvpn[29548]: 172.248.200.189:63838 LZO compression initialized
Sep 13 19:56:43	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 19:56:43	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 19:56:44	openvpn[29548]: 172.248.200.189:63838 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:63838
Sep 13 19:56:46	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:63838 send_push_reply(): safe_cap=960
Sep 13 20:00:50	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:63838 [Mel-MacBookPro-openvpn] Inactivity timeout (--ping-restart), restarting
Sep 13 20:08:47	openvpn[29548]: 172.248.200.189:51140 Re-using SSL/TLS context
Sep 13 20:08:47	openvpn[29548]: 172.248.200.189:51140 LZO compression initialized
Sep 13 20:08:48	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 20:08:48	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/emailAddress=mel@pilotgetaways.com/CN=Mel-MacBookPro-openvpn with depth 0
Sep 13 20:08:48	openvpn[29548]: 172.248.200.189:51140 [Mel-MacBookPro-openvpn] Peer Connection Initiated with [AF_INET]172.248.200.189:51140
Sep 13 20:08:50	openvpn[29548]: Mel-MacBookPro-openvpn/172.248.200.189:51140 send_push_reply(): safe_cap=960
Sep 13 20:12:16	openvpn[29548]: 97.93.108.100:64613 Re-using SSL/TLS context
Sep 13 20:12:16	openvpn[29548]: 97.93.108.100:64613 LZO compression initialized
Sep 13 20:12:17	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 20:12:17	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 20:12:17	openvpn[29548]: 97.93.108.100:64613 [homepc1] Peer Connection Initiated with [AF_INET]97.93.108.100:64613
Sep 13 20:12:19	openvpn[29548]: homepc1/97.93.108.100:64613 send_push_reply(): safe_cap=960
Sep 13 20:13:16	openvpn[29548]: 97.93.108.100:44818 Re-using SSL/TLS context
Sep 13 20:13:16	openvpn[29548]: 97.93.108.100:44818 LZO compression initialized
Sep 13 20:13:17	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=Pilot_Getaways_CA/emailAddress=webmaster@pilotgetaways.com with depth 1
Sep 13 20:13:17	openvpn: Found certificate /C=US/ST=CA/L=Glendale/O=Pilot_Getaways/CN=homepc1/emailAddress=webmaster@pilotgetaways.com with depth 0
Sep 13 20:13:17	openvpn[29548]: 97.93.108.100:44818 [homepc1] Peer Connection Initiated with [AF_INET]97.93.108.100:44818
Sep 13 20:13:20	openvpn[29548]: homepc1/97.93.108.100:44818 send_push_reply(): safe_cap=960

pilotget

Thank you debbie10t. I will try commenting those options out. The configuration files are created automatically by the pfSense router based on what options I select, but I think I can override them.

OpenVPN is running on a pfSense router, which runs FreeBSD 8.1. I'm not sure if the behavior is the same as on Ubuntu. I'm pretty sure that the openvpn process is running because the client gateway (where openvpn is running) can still ping the server after the failure. However, the server cannot ping the client gateway, and no machines on the rest of the client or server networks can ping the other network.

Anyway, I'll attempt it and report back what happens.

[deleted]

pilotget wroteThank you debbie10t. I will try commenting those options out. The configuration files are created automatically by the pfSense router based on what options I select, but I think I can override them.

OpenVPN is running on a pfSense router, which runs FreeBSD 8.1. I'm not sure if the behavior is the same as on Ubuntu. I'm pretty sure that the openvpn process is running because the client gateway (where openvpn is running) can still ping the server after the failure. However, the server cannot ping the client gateway, and no machines on the rest of the client or server networks can ping the other network.

Anyway, I'll attempt it and report back what happens.

Did you ever solve this?