OpenVPN Management API - CLIENT:DISCONNECT notification

zetedoduc

I'm using OpenVPN server on windows server and I would like to manage it's clients. I found documenation for Management API and I was able to run tcp listener and connect to it with telnet.

I would like to use notifications so I know which client is connected and which was disconnected. I found that I can turn on notifications by command state on and when I do i have client notifications as described in section The CLIENT notification (>CLIENT:).

So when I connect to my VPN server I see >CLIENT:CONNECT notification the problem is that when I disconnect myself from vpn server I never see >CLIENT:DISCONNECT,{CID} notification.

Does anyone know why?

Traffic

Please post your server and client configs.

zetedoduc

Server config http://pastebin.com/fXUXp0Zf

Client config http://pastebin.com/S2pTs1wL

I have to correct myself that I don't see >CLIENT:CONNECT notification but only >CLIENT:ESTABLISHED.

Traffic

Server (Comments removed):

port 1194
proto tcp
dev tun

ca "C:\\...\\ca.crt"
cert "C:\\...\\server.crt"
key "C:\\...\\server.key"  # This file should be kept secret
dh "C:\\...\\dh1024.pem"

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log

;log         openvpn.log
;log-append  openvpn.log
verb 3

management localhost 7505

Client (Comments removed):

client
dev tun
proto tcp
 
remote mydomain.net 1194
 
resolv-retry infinite
nobind
persist-key
persist-tun
 
ca "C:\\...\\ca.crt"
cert "C:\\...\\client.crt"
key "C:\\...\\client.key"
 
ns-cert-type server
comp-lzo
verb 3

I do not think the log is the right approach for what you want. Try using --client-connect and --client-disconnect scripts instead.

Something like this ..

--client-connect connect.bat
- del %common_name%.disconnect
  echo CONNECT %date% %time% > %common_name%.connect
--client-disconnect disconnect.bat
- del %common_name%.connect
  echo DISCONNECT %date% %time% > %common_name%.disconnect

See --client-connect and --client-disconnect in The Manual v23x