Hi, I'm using Duo (MFA service) to send push notifications to user's mobile for approval. I have it set up to lock the users account after 10 failed connections.
The problem is sometimes people are away from their phones, and the VPN client on their Windows workstations are repeatedly trying (and failing) to connect to the VPN, and the legitimate users gets locked out.
I've tried several different config options trying to get the client to "give up" after one or a couple of failed attempts. I tried removing "persist-key" from my config and that seemed to work since I'd be prompted again for the key passphrase after a failure, but for some reason even this doesn't seem to work consistently.
Is there anything I can do on the client (or the server for that matter) to get the clients to "give up" after a failure or 2?
Client config below, let me know if there's any more info I can provide or anything I can clarify. Any hints or help with this would be MUCH APPRECIATED! =)
Thanks!
client
dev tap
proto udp
remote vpn.example.com 1194
resolv-retry infinite
nobind
persist-tun
#persist-key
ca ca.crt
cert cert.crt
key key.key
ns-cert-type server
cipher AES-256-CBC
comp-lzo
verb 3
reneg-sec 0
