RockNLol
Hello,
I tried to setup a site-to-site connection between two Windows-Servers with openvpn as follows:
dev tun
port 1194
remote site1.example.com 1194
ip-win32 ipapi
ifconfig 192.168.255.2 192.168.255.1
route-method exe
route 192.168.1.0 255.255.255.0
comp-lzo
keepalive 10 60
persist-key
persist-tun
cipher AES-256-CBC
secret static.key
The tunnel opens as intended, machines on the different subnets are pingable in both directions, Windows-SMB-Shares work. This is up and running for a week now, and I got the feedback, that the mailclients on one of the sites complain about the mailserver on the other site times out. I ran ping for some time and saw that the latency, usually around 20ms spikes to 2997ms-3002ms (odd as its almost exactly 3s?) for a couple of pings and then returns to normal again for some time. Rebooting the routers didn't help.
Any ideas what might be wrong here?
*edit: not using comp-lzo didn't change anything.
*edit2: using another cipher as well as using none didn't change anything either.