kia0
Hello
I have an OpenVPN 2.4.8 server acting as company VPN hub under Oracle Linux 6. Is it possible to disable client floating at server side?
I suspect a bug in OpenVPN code causing one client session kills another by a fake client floating and need to have a quick solution
Here is my server config, some push directives are skipped
local a.b.c.d
port 1194
proto udp
dev tun0
ca "/etc/openvpn/keys/ca.crt"
cert "/etc/openvpn/keys/SOLVO-VPN.crt"
key "/etc/openvpn/keys/SOLVO-VPN.key" # This file should be kept secret
dh "/etc/openvpn/keys/dh2048.pem"
mode server
topology subnet
push "topology subnet"
ifconfig 172.16.87.1 255.255.255.0
ifconfig-pool 172.16.87.32 172.16.87.255
route 172.16.87.0 255.255.255.0
route-gateway 172.16.87.1
push "route-gateway 172.16.87.1"
ifconfig-pool-persist "/var/run/openvpn/ipp.txt"
push "route 172.16.80.0 255.255.240.0 vpn_gateway"
client-config-dir "/etc/openvpn/ccd"
client-to-client
keepalive 10 60
tls-server
tls-auth "/etc/openvpn/keys/ta.key" 0
tls-timeout 2
auth SHA1
cipher BF-CBC # Blowfish
ncp-ciphers AES-256-GCM:AES-256-CBC:AES-128-GCM:AES-128-CBC
comp-lzo adaptive
max-clients 252
persist-key
persist-tun
status "/var/log/openvpn/openvpn-status.log" 10
log-append "/var/log/openvpn/openvpn.log"
verb 4
management 127.0.0.1 21194
crl-verify /etc/openvpn/keys/crl.pem
mlock
client-connect "/etc/openvpn/scripts/client-connect.sh"
client-disconnect "/etc/openvpn/scripts/client-disconnect.sh"
writepid /var/run/openvpn/server.pid
