Good afternoon.
Please help me solve the problem, there is an OpenVPN config raised on Pfsense with the settings:
dev ovpns1
verb 3
dev-type tun
tun-ipv6
dev-node / dev / tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-256-CBC
auth SHA1
up / usr / local / sbin / ovpn-linkup
down / usr / local / sbin / ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local IP
tls-server
server 10.0.1.0 255.255.255.0
client-config-dir / var / etc / openvpn-csc / server1
username-as-common-name
auth-user-pass-verify "/ usr / local / sbin / ovpn_auth_verify user TG9jYWwgRGF0YWJhc2U = false server1 port" via-env
tls-verify "/ usr / local / sbin / ovpn_auth_verify tls 'OpenVPN-server' 1"
lport port
management /var/etc/openvpn/server1.sock unix
max-clients 30
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway def1"
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.2048
tls-auth /var/etc/openvpn/server1.tls-auth 0
persist-remote-ip
float
topology subnet
client:
persist-tun
persist-key
cipher AES-256-CBC
auth SHA1
tls-client
client
remote IP port udp
verify-x509-name "OpenVPN-server" name
auth-user-pass
remote-cert-tls server
Now a description of the problem:
There are no problems with the connection, the pings are stable 20-160 ms for 5-10 minutes, but every minute the TCP connection is dropped and reconnected, while RDP: 3389 from Microsoft falls off and reconnects, it is extremely uncomfortable to see a black screen blinking every minute.
At the same time, an event falls into the logs every minute:
Oct 13 15:40:30 openvpn 36373 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Oct 13 15:40:31 openvpn 36373 MANAGEMENT: CMD 'status 2'
Oct 13 15:40:31 openvpn 36373 MANAGEMENT: CMD 'quit'
Oct 13 15:40:31 openvpn 36373 MANAGEMENT: Client disconnected
Oct 13 15:54:20 openvpn 36373 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Oct 13 15:54:20 openvpn 36373 MANAGEMENT: CMD 'status 2'
Oct 13 15:54:20 openvpn 36373 MANAGEMENT: Client disconnected
Oct 13 15:54:31 openvpn 36373 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Oct 13 15:54:31 openvpn 36373 MANAGEMENT: CMD 'status 2'
Oct 13 15:54:31 openvpn 36373 MANAGEMENT: Client disconnected
Oct 13 15:54:42 openvpn 36373 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Oct 13 15:54:42 openvpn 36373 MANAGEMENT: CMD 'status 2'
Oct 13 15:54:42 openvpn 36373 MANAGEMENT: Client disconnected
Oct 13 15:54:53 openvpn 36373 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Oct 13 15:54:53 openvpn 36373 MANAGEMENT: CMD 'status 2'
Oct 13 15:54:53 openvpn 36373 MANAGEMENT: CMD 'quit'
Oct 13 15:54:53 openvpn 36373 MANAGEMENT: Client disconnected
Here is the general connection log, Verb 3
Oct 13 15:39:45 openvpn user 'Riddli' authenticated
Oct 13 15:39:45 openvpn 36373 IP: 38885 TLS: Username / Password authentication succeeded for username 'User' [CN SET]
Oct 13 15:39:45 openvpn 36373 IP: 38885 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Oct 13 15:39:45 openvpn 36373 IP: 38885 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Oct 13 15:39:45 openvpn 36373 IP: 38885 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Oct 13 15:39:45 openvpn 36373 IP: 38885 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Oct 13 15:39:45 openvpn 36373 IP: 38885 Control Channel: TLSv1.2, cipher TLSv1 / SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Oct 13 15:39:45 openvpn 36373 IP: 38885 [User] Peer Connection Initiated with [AF_INET] IP: 38885
Oct 13 15:39:45 openvpn 36373 OPTIONS IMPORT: reading client specific options from: / var / etc / openvpn-csc / server1 / User
Oct 13 15:39:45 openvpn 36373 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_7f4d77f137c732a73ca0dbeb5b2ded3c.tmp
Oct 13 15:39:45 openvpn 36373 MULTI: Learn: 10.0.1.2 -> User / IP: 38885
Oct 13 15:39:45 openvpn 36373 MULTI: primary virtual IP for User / IP: 38885 10.0.1.2
Oct 13 15:39:45 openvpn 36373 User / IP: 38885 PUSH: Received control message: 'PUSH_REQUEST'
Oct 13 15:39:45 openvpn 36373 User / IP: 38885 send_push_reply (): safe_cap = 940
Oct 13 15:39:45 openvpn 36373 User / IP: 38885 SENT CONTROL [Riddli]: 'PUSH_REPLY, dhcp-option DNS 8.8.8.8, dhcp-option DNS 8.8.4.4, redirect-gateway def1, route-gateway 10.0.1.1 , topology subnet, ping 10, ping-restart 45, ifconfig 10.0.1.2 255.255.255.0 '(status = 1)
Oct 13 15:40:30 openvpn 36373 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Oct 13 15:40:31 openvpn 36373 MANAGEMENT: CMD 'status 2'
Oct 13 15:40:31 openvpn 36373 MANAGEMENT: CMD 'quit'
Oct 13 15:40:31 openvpn 36373 MANAGEMENT: Client disconnected
Help me please!!!
