DD-WRT OpenVPN - Auto reconnect

jpny

Im been using OpenVPN on my DD-WRT router for a few days now and the connection has remained stable. Im using policy based routing to only route specific IPs over the VPN (https://charleswilkinson.co.uk/2016/05/14/selective-routing-using-ddwrt-and-openvpn). This morning I noticed that my VPN connection was closed (the VPN status page of the router also showed state - client (blank) and the log was completely empty).

A simple reboot fixed the connection, but I am looking for a way to automate the re-connect. I don't think I can use the routers built in watch dog as I think it monitors the "main" connection not the PBR VPN connection.

as per the VPN companies setup instructions my config file has the following

remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0

I think I can probably modify the ping-timer-rem command, or add one of the other ping commands, but I'm not really sure which one.

Can someone help me with this?
Also, any idea on how to test for the problem described above (unplugging just the modem doesn't simulate the problem, the router shows state - Client: RECONNECTING init_instance and when the modem come back online the VPN does re-establish itself)

TinCanTech

jpny wroteas per the VPN companies setup instructions

The company that runs the server can disconnect you and close your openvpn remotely.

If they do so (and it sounds like they are), there is no option in openvpn to over ride this.

jpny

is there no way to test if connection is closed and reboot?
or to have ping sent every x hours to keep alive?

jpny

I don't think it is the VPN company. in the past I have been connected for days at time, this morning I was disconnected when I woke up again and the router was rebooted just 7 hours ago.

TinCanTech

jpny wroteI don't think it is the VPN company

Your logs will offer information ..

OpenVPN cannot spawn itself so your DD-WRT OS will have to monitor it.

jpny

thanks. I just enabled the telnet log. the GUI log is empty after the disconnect. let me see what happens on the next disco

magellantx

I know this thread is few years old but I have the same issue and was wondering if there was a solution.

Whenever the underlying network gets interrupted (which happens frequently) the VPN will drop and the router always comes back with 'RECONNECTING init_instance' and It'll stay that way until I reboot it.

Rebooting has become a daily ritual and with 3 routers, it's a bit of a hassle so I'm hoping there's an easy way to either monitor the tunnel or otherwise detect when VPN has gone down and reboot the router automatically.

Here are the settings my provider gave me:

persist-key
persist-tun
fragment 1300
mssfix 1450
keysize 256

Thank you!!

TinCanTech

magellantx wrote Rebooting has become a daily ritual and with 3 routers, it's a bit of a hassle so I'm hoping there's an easy way to either monitor the tunnel or otherwise detect when VPN has gone down and reboot the router automatically

There is .. get a better router.

300000

you can add this on your dd wrt config . it will restart connect auto for you .

remap-usr1 SIGHUP
keepalive 90 190
ping 90

three of them will keep your ddwrt happy to connect . i am using openvpn ddwrt router over 10 years so get used to with that trouble so many times

Lagosazules

Same story, using NordVPN and I think I use a good router linksys wrt1900acs with ddwrt, so I think that is not the problem
Im using also policy based routing to only route specific IPs over the VPN
My nordvpn config file also is:

remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0

When I add the following lines the VPN stops working

remap-usr1 SIGHUP
keepalive 90 190
ping 90

Any suggestions to fix this? Thanks

To add a kill switch working on ath1,1 with policy based routing I already found a solution on:

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=317397

FurryPixie

Lagosazules wrote Same story, using NordVPN and I think I use a good router linksys wrt1900acs with ddwrt, so I think that is not the problem
Im using also policy based routing to only route specific IPs over the VPN
My nordvpn config file also is:

remote-cert-tls server
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping-timer-rem
reneg-sec 0 greatpeople.me

When I add the following lines the VPN stops working

remap-usr1 SIGHUP
keepalive 90 190
ping 90

Any suggestions to fix this? Thanks

To add a kill switch working on ath1,1 with policy based routing I already found a solution on:

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=317397

I have been connected for days at time, this morning I was disconnected when I woke up again and the router was rebooted just 7 hours ago.