How to forcefully disconnect client from openvpn server

josh2

Hi,
I want to disconnect client from openvpn server who reach max limited MB (say 100 MB) in a single session.

I know I can monitor users data using management console and once it reaches to 100 MB I can issue KILL command.

Is there any better way for this.

there are problems in above method-
1- periodically I need to issue command to management server to check what amount of data used till now by each use.
2. need to issue KILL command to disconnect the user. The KILL command has many issues like - It crashes server sometime ..It increase CPU usage to 100%. I want to avoid using KILL command.

I want to set MAX data can be used in a single session per user.

Can you please advise.

thank you

josh2

Thanks. Really helpful. I will try now.

/Josh

josh2

Thanks debbie10t.

I just tested it . But I found it is not working for me.

Server Config
-------------------

proto udp
reneg-bytes 5000000
reneg-sec 0

Client Config
-------------------

proto udp
reneg-bytes 5000000
reneg-sec 0

Using above settings-
I can download more than 5 MB file like-10 MB 100 MB .. any size of file without any disconnection.
Am I missing anything.Can you please tell.

Thank you

josh2

Thank deb.

It works. I was verifying it with client-diconnect script and I was wrong. When I looked into LOG I found
reneg-sec and reneg-bytes both are working.

But there is small problem.

1> This RENEG procedure does not fire client-disconnect script. So used data in last session can not be saved.

and the main problem is ( For UDP )

2> if the idle timeout is 60 seconds.

a> If I disconnect VPN client gracefully , within 2-3 seconds I can see client-diconnect server script getting executed properly.
b> If I pull the wire or Modem suddenly and wait for 60+ seconds I can see client-diconnect server script getting executed properly.
c> If I pull the wire or Modem suddenly and Stop client VPN and then reconnect the client I can see client-diconnect server script NOT getting executed at all.

It means before the client-disconnect script executes another new session getting created and for that reason , client-disconnect script for old session not getting executed.

I have found various forum for this issue but no solution yet.

Can you please tell if any solution is available for this

Thank you

josh2

Thanks debbie..