spartan1833
Hi,
I have a site to site vpn set up which is working as expected. I'm attempting to use the --inactive option so that if the connection is inactive longer than 10 minutes with less than 100kb of real tunnel data passed the link is dropped. In testing, the client router does disconnect but then immediately reconnects....client log shows a "connection reset, restarting [0]" and "SIGUSR1 [soft,connection-reset] received, process restarting". This is not the desired behavior in this case; if this connection is idle then it needs to be torn down.
Config files:
Client:
------------------------------------------
client
dev tun
proto tcp
remote xxx.xxx.xxx.xxx 7000
resolv-retry 0
ping-restart 0
inactive 600 102400
nobind
persist-key
persist-tun
verb 3
cipher AES-256-CBC
ns-cert-type server
ca certs/ca.crt
cert certs/client1.crt
key certs/client1.key
tls-auth certs/ta.key 1
comp-lzo
http-proxy 192.168.1.1 3128
log client.log
Server:
------------------------------------
port 7000
proto tcp
dev tun0
ca certs/ca/crt
cert /certs/server.crt
key /certs/server.key
crl-verify certs/crl.pem
dh /certs/dh2048.pem
server 10.90.0.0 255.255.255.0
push "redirect-gateway def1"
inactive 600 102400
tls-auth certs/ta.key 0
cipher AES-256-CBC
comp-lzo
max-clients 5
user nobody
group nogroup
persist-key
persist-tun
log server.log
verb 6
Can anyone provide guidance on the best way to do ensure that the idle connection will be torn down and not just reset? Thanks in advance....
