Have a server hosting multiple clients. However, only one client is having issues...the one I use. When I connect from the client location, it adds the MAC address of my laptop to the ROUTING TABLE. However, when I shut down my computer and go where the server is located, the route doesn't get removed, which I verify by logging into the management interface on the server and typing "status" to see the routing table. This results in me being unable to connect to devices on the other side of the VPN tunnel from the server location/subnet. The only solution is to log in to the management on the server and kill the session. Once the connection is killed, it re-establishes without the MAC address.
The client device is a persistent, always on device, that keeps the tunnel up at all times (there are other devices that stay connected).
I have it configured to check for stale routes every 5 minutes from the server but this does not seem to work.
Server config:
port 1194
proto udp
dev tap
cipher aes-256-cbc
reneg-sec 3600
comp-lzo adaptive
persist-tun
up "/sbin/bridge-start vpn0 eth0"
down "/sbin/bridge-stop vpn0 eth0"
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-server
keepalive 10 60
passtos
mode server
client-to-client
duplicate-cn
script-security 2
server-bridge 10.10.10.20 255.255.255.0 10.10.10.21 10.10.10.29
management 127.0.0.1 12345
stale-routes-check 300
Client config:
client
nobind
proto udp
remote IP.ADDR.OF.SERVER 1194
dev tap
cipher aes-256-cbc
reneg-sec 3600
comp-lzo adaptive
persist-tun
up /etc/openvpn/route-up.sh
down /etc/openvpn/route-down.sh
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
tls-client
keepalive 10 60
writepid /var/run/openvpncl.pid
passtos
script-security 2
management 127.0.0.1 12345
OpenVPN Version 2.3.4 on both the client and server.
Any ideas on what I may be missing or otherwise doing wrong?
