Problems connection multiple times with same user

Montolio

Hi!

when connecting with the same user (same certificate) the VPN connection is extream unstable.

Is this normal or is it a configuration mistake?

server config


cd /etc/openvpn
dev tun0
port 1194
proto udp

tun-mtu 1500
fragment 1300
mssfix

mode server
server 192.168.25.0 255.255.255.0
keepalive 10 60

ifconfig-pool-persist ipp.txt

push "route 192.168.24.0 255.255.255.0"

tls-server
crl-verify certs/crl.pem
auth SHA1

ca certs/ca.crt
cert certs/sbc.crt
key certs/sbc.key

# Diffie Hellman Parameter
dh dh1024.pem

# Verschluesselungsmethode
cipher AES-256-CBC

comp-lzo yes

verb 3

auth-user-pass-verify /data/vpn/auth.php via-file

client:

remote remote.host.example.com

dev tun0

port 1194
proto udp

tun-mtu 1500
fragment 1300
mssfix

#Client
pull

tls-client
auth SHA1
tls-remote same.as.remote

#Verschluesselungsmehtode
cipher AES-256-CBC

pkcs12 user.p12
auth-user-pass 

auth-nocache

comp-lzo yes

verb 3

thx

dazo

I'm guessing this is related to ifconfig-pool-persist

From the man page:

--ifconfig-pool-persist file [seconds]
              Persist/unpersist  ifconfig-pool data to file, at seconds inter‐
              vals (default=600), as well as on program startup and shutdown.

              The goal of this option is to provide  a  long-term  association
              between  clients  (denoted by their common name) and the virtual
              IP address assigned to them from the ifconfig-pool.  Maintaining
              a  long-term  association  is good for clients because it allows
              them to effectively use the --persist-tun option.

Notice the first line in the second paragraph. I'm guessing you get the same VPN IP address on both VPN connections, and this will backfire.