Connection dies on high data transfer

KAT

Hello
I'm facing a weird problem configuring my openvpn network.
Client connects to the server, i can ping both ways (server-client and client-server), i can connect via ssh and do some simple communications.
But when I do something that generates higher data transfer, i.e. try to connect via vnc, rdp or transfer a file through smb, my connection dies and I can see in client log "[server] Inactivity timeout (--ping-restart), restarting". Please help!
In attach my config files and client log.

server.conf:

port 1194
proto tcp
dev tun
ca /etc/openvpn/rsa/keys/ca.crt
cert /etc/openvpn/rsa/keys/server.crt
key /etc/openvpn/rsa/keys/server.key  # This file should be kept secret
dh /etc/openvpn/rsa/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
duplicate-cn
keepalive 10 120
cipher BF-CBC        # Blowfish (default)
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log-append  /var/log/openvpn.log
verb 3

client.conf:

client
dev tun
proto tcp
ifconfig 10.8.0.2 10.8.0.1
remote xxx xxx
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert support.crt
key support.key
comp-lzo
verb 3

client log (please ignore tap instead of tun - i was just testing with same result):

Tue Oct 15 23:19:09 2013 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct  1 2006
Tue Oct 15 23:19:09 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Oct 15 23:19:09 2013 WARNING: using --pull/--client and --ifconfig together is probably not what you want
Tue Oct 15 23:19:09 2013 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Oct 15 23:19:09 2013 LZO compression initialized
Tue Oct 15 23:19:09 2013 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Oct 15 23:19:09 2013 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Oct 15 23:19:09 2013 Local Options hash (VER=V4): '31fdf004'
Tue Oct 15 23:19:09 2013 Expected Remote Options hash (VER=V4): '3e6d1056'
Tue Oct 15 23:19:09 2013 Attempting to establish TCP connection with xxx
Tue Oct 15 23:19:09 2013 TCP connection established with xxx
Tue Oct 15 23:19:09 2013 TCPv4_CLIENT link local: [undef]
Tue Oct 15 23:19:09 2013 TCPv4_CLIENT link remote: xxx
Tue Oct 15 23:19:09 2013 TLS: Initial packet from xxx, sid=186699ce 9c351482
Tue Oct 15 23:19:12 2013 VERIFY OK: depth=1, /...
Tue Oct 15 23:19:12 2013 VERIFY OK: depth=0, /...
Tue Oct 15 23:19:17 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Oct 15 23:19:17 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 15 23:19:17 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Oct 15 23:19:17 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Oct 15 23:19:17 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Oct 15 23:19:17 2013 [server] Peer Connection Initiated with xxx
Tue Oct 15 23:19:18 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Oct 15 23:19:18 2013 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.8.0.1,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Tue Oct 15 23:19:18 2013 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 15 23:19:18 2013 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 15 23:19:18 2013 OPTIONS IMPORT: route options modified
Tue Oct 15 23:19:18 2013 TAP-WIN32 device [vpn] opened: \\.\Global\{2E886A07-9B6A-46DB-92B5-17949A8B5F9D}.tap
Tue Oct 15 23:19:18 2013 TAP-Win32 Driver Version 8.4 
Tue Oct 15 23:19:18 2013 TAP-Win32 MTU=1500
Tue Oct 15 23:19:18 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {2E886A07-9B6A-46DB-92B5-17949A8B5F9D} [DHCP-serv: 10.8.0.0, lease-time: 31536000]
Tue Oct 15 23:19:18 2013 Successful ARP Flush on interface [4] {2E886A07-9B6A-46DB-92B5-17949A8B5F9D}
Tue Oct 15 23:19:18 2013 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Tue Oct 15 23:19:18 2013 Route: Waiting for TUN/TAP interface to come up...
Tue Oct 15 23:19:19 2013 TEST ROUTES: 0/0 succeeded len=-1 ret=0 a=0 u/d=down
Tue Oct 15 23:19:19 2013 Route: Waiting for TUN/TAP interface to come up...
Tue Oct 15 23:19:20 2013 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up
Tue Oct 15 23:19:20 2013 Initialization Sequence Completed
Tue Oct 15 23:22:44 2013 [server] Inactivity timeout (--ping-restart), restarting
Tue Oct 15 23:22:44 2013 TCP/UDP: Closing socket
Tue Oct 15 23:22:44 2013 SIGUSR1[soft,ping-restart] received, process restarting
Tue Oct 15 23:22:44 2013 Restart pause, 5 second(s)

KAT

Hi
Debbie, thank you very much.
I updated my openvpn client but it didn't help.
But finally i know what the problem is. My openvpn server is located behind router - D-link dir-100. I replaced the router with my friends one (linksys) and now it works like a charm! Now i'm wondering what do I have to change in my router setup to make it work. I tried enabling and disabling QOS, UPnP, multicast streams but nothing helps.

KAT

Hi Debbie
I mean the problem I described no longer persist after replacing my router. Router worked fine since I bought it, i think this issue was related with a bug in its firmware (maybe compression, error correction ot something like that). So this problem is now solved for me.
Thank You for your help