Multiple clients behind same nat adsl router

perazim

Multiple clients behind same nat adsl router

I have had lingering openvpn problems where clients intermittently loose connectivity. The only common threads between those having these troubles is that they are sharing the same nat router and therefore the same public ip address. They do use different ports on the clients however. This is happening very infrequently when one client visits another's location and plugs their client into the same nat router. I have also seen this happen when two different clients are used sequentially on the same nat router over a short period of time, say 5 minutes.

Does anybody know if I could have some kind of conflict here with this configuration and how to fix it?

Thanks,

Perazim

Mimiko

Hello.

It will be very helpful if you will show the configuration of server and client. And log's from server.

Your server sees every connecting client after that dsl router as same client with same public IP but using different certificates. So may be problem lies in that one client at connecting, disconnects other.

Mimiko

Also for the server's config:

# Uncomment this directive if multiple clients
# might connect with the same certificate/key
# files or common names. This is recommended
# only for testing purposes. For production use,
# each client should have its own certificate/key
# pair.
#
# IF YOU HAVE NOT GENERATED INDIVIDUAL
# CERTIFICATE/KEY PAIRS FOR EACH CLIENT,
# EACH HAVING ITS OWN UNIQUE "COMMON NAME",
# UNCOMMENT THIS LINE OUT.
;duplicate-cn

janjust

it depends whether your openvpn setup is using 'proto udp' or 'proto tcp' : in UDP mode some NATting routers are not capable of sending back traffic to the right client; in TCP mode this problem does not occur. Either buy a better NATting router or offer a 'proto tcp' based setup as well.