How to force client to re-authenticate at specified interval

someone1

EDIT: I meant to put this under the configuration forum, my apologies as I don't think I see a way to delete or move this...

I recently installed OpenVPN AS and upgraded it to 2.0.2. I have everything working the way I want except the re-authentication process. I have enabled Google Authenticator support and integrated with LDAP. In the "Advanced VPN" management page, I set the "Connection Security Refresh" setting to 120 minutes, I've added the following to the "Client Config Directives" under "Additional OpenVPN Config Directives":

auth-nocache
reneg-sec 7200

Yet here I am connected to the VPN even after 7 hours. I tried to browse the forums and Google the best I could, but maybe I'm not looking for the right thing. I'd like it so after 2 hours, the client is disconnected and asked for their credentials/Google Authenticator token to reconnect. Is this something I can do? I'd prefer not to write any custom scripts/cronjobs to achieve this if possible.

Any help/guidance would be much appreciated! Thank you.

someone1

Hmmm, I found a suggestion on a pfense forum that states using

--ping-exit

should be able to do the trick or maybe

--inactive

?

If I can't force the disconnect on a specific interval, how about terminating idle connections? If a connection is idle for more than 60 minutes then would adding

inactive 3600

to the Client configuration do the trick?