MULTI: new incoming connection would exceed maximum number of clients (60)

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
Gutse
OpenVpn Newbie
Posts: 14
Joined: Mon Mar 30, 2020 2:59 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Gutse » Tue Mar 31, 2020 5:11 pm

Code: Select all

Tue Mar 31 19:49:29 2020 us=281384 Current Parameter Settings:
Tue Mar 31 19:49:29 2020 us=281384   config = 'C:\Program Files\OpenVPN\config\server.ovpn'
Tue Mar 31 19:49:29 2020 us=281384   mode = 1
Tue Mar 31 19:49:29 2020 us=281384   show_ciphers = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   show_digests = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   show_engines = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   genkey = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   key_pass_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   show_tls_ciphers = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   connect_retry_max = 0
Tue Mar 31 19:49:29 2020 us=281384 Connection profiles [0]:
Tue Mar 31 19:49:29 2020 us=281384   proto = tcp-server
Tue Mar 31 19:49:29 2020 us=281384   local = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   local_port = 'my_port'
Tue Mar 31 19:49:29 2020 us=281384   remote = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   remote_port = 'my_port'
Tue Mar 31 19:49:29 2020 us=281384   remote_float = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   bind_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   bind_local = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   bind_ipv6_only = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   connect_retry_seconds = 5
Tue Mar 31 19:49:29 2020 us=281384   connect_timeout = 120
Tue Mar 31 19:49:29 2020 us=281384   socks_proxy_server = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   socks_proxy_port = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   tun_mtu = 1500
Tue Mar 31 19:49:29 2020 us=281384   tun_mtu_defined = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   link_mtu = 1500
Tue Mar 31 19:49:29 2020 us=281384   link_mtu_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   tun_mtu_extra = 0
Tue Mar 31 19:49:29 2020 us=281384   tun_mtu_extra_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   mtu_discover_type = -1
Tue Mar 31 19:49:29 2020 us=281384   fragment = 0
Tue Mar 31 19:49:29 2020 us=281384   mssfix = 1450
Tue Mar 31 19:49:29 2020 us=281384   explicit_exit_notification = 0
Tue Mar 31 19:49:29 2020 us=281384 Connection profiles END
Tue Mar 31 19:49:29 2020 us=281384   remote_random = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   ipchange = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   dev = 'tun'
Tue Mar 31 19:49:29 2020 us=281384   dev_type = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   dev_node = 'vpn'
Tue Mar 31 19:49:29 2020 us=281384   lladdr = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   topology = 3
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_local = '10.195.121.1'
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_remote_netmask = '255.255.255.128'
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_noexec = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_nowarn = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_ipv6_local = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_ipv6_netbits = 0
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_ipv6_remote = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   shaper = 0
Tue Mar 31 19:49:29 2020 us=281384   mtu_test = 0
Tue Mar 31 19:49:29 2020 us=281384   mlock = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   keepalive_ping = 10
Tue Mar 31 19:49:29 2020 us=281384   keepalive_timeout = 120
Tue Mar 31 19:49:29 2020 us=281384   inactivity_timeout = 0
Tue Mar 31 19:49:29 2020 us=281384   ping_send_timeout = 10
Tue Mar 31 19:49:29 2020 us=281384   ping_rec_timeout = 240
Tue Mar 31 19:49:29 2020 us=281384   ping_rec_timeout_action = 2
Tue Mar 31 19:49:29 2020 us=281384   ping_timer_remote = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   remap_sigusr1 = 0
Tue Mar 31 19:49:29 2020 us=281384   persist_tun = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   persist_local_ip = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   persist_remote_ip = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   persist_key = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   passtos = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   resolve_retry_seconds = 1000000000
Tue Mar 31 19:49:29 2020 us=281384   resolve_in_advance = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   username = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   groupname = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   chroot_dir = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   cd_dir = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   writepid = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   up_script = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   down_script = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   down_pre = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   up_restart = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   up_delay = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   daemon = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   inetd = 0
Tue Mar 31 19:49:29 2020 us=281384   log = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   suppress_timestamps = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   machine_readable_output = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   nice = 0
Tue Mar 31 19:49:29 2020 us=281384   verbosity = 6
Tue Mar 31 19:49:29 2020 us=281384   mute = 0
Tue Mar 31 19:49:29 2020 us=281384   gremlin = 0
Tue Mar 31 19:49:29 2020 us=281384   status_file = 'c:\OpenVpn\logs\openvpn-status.log'
Tue Mar 31 19:49:29 2020 us=281384   status_file_version = 1
Tue Mar 31 19:49:29 2020 us=281384   status_file_update_freq = 60
Tue Mar 31 19:49:29 2020 us=281384   occ = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   rcvbuf = 0
Tue Mar 31 19:49:29 2020 us=281384   sndbuf = 0
Tue Mar 31 19:49:29 2020 us=281384   sockflags = 0
Tue Mar 31 19:49:29 2020 us=281384   fast_io = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   comp.alg = 2
Tue Mar 31 19:49:29 2020 us=281384   comp.flags = 1
Tue Mar 31 19:49:29 2020 us=281384   route_script = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   route_default_gateway = '10.195.121.2'
Tue Mar 31 19:49:29 2020 us=281384   route_default_metric = 0
Tue Mar 31 19:49:29 2020 us=281384   route_noexec = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   route_delay = 0
Tue Mar 31 19:49:29 2020 us=281384   route_delay_window = 30
Tue Mar 31 19:49:29 2020 us=281384   route_delay_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   route_nopull = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   route_gateway_via_dhcp = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   allow_pull_fqdn = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   management_addr = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   management_port = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   management_user_pass = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   management_log_history_cache = 250
Tue Mar 31 19:49:29 2020 us=281384   management_echo_buffer_size = 100
Tue Mar 31 19:49:29 2020 us=281384   management_write_peer_info_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   management_client_user = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   management_client_group = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   management_flags = 0
Tue Mar 31 19:49:29 2020 us=281384   shared_secret_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   key_direction = 0
Tue Mar 31 19:49:29 2020 us=281384   ciphername = 'AES-256-CBC'
Tue Mar 31 19:49:29 2020 us=281384   ncp_enabled = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Mar 31 19:49:29 2020 us=281384   authname = 'SHA1'
Tue Mar 31 19:49:29 2020 us=281384   prng_hash = 'SHA1'
Tue Mar 31 19:49:29 2020 us=281384   prng_nonce_secret_len = 16
Tue Mar 31 19:49:29 2020 us=281384   keysize = 0
Tue Mar 31 19:49:29 2020 us=281384   engine = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   replay = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   mute_replay_warnings = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   replay_window = 64
Tue Mar 31 19:49:29 2020 us=281384   replay_time = 15
Tue Mar 31 19:49:29 2020 us=281384   packet_id_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   use_iv = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   test_crypto = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   tls_server = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   tls_client = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   key_method = 2
Tue Mar 31 19:49:29 2020 us=281384   ca_file = 'c:\OpenVpn\Keys\ca.crt'
Tue Mar 31 19:49:29 2020 us=281384   ca_path = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   dh_file = 'c:\OpenVpn\Keys\dh2048.pem'
Tue Mar 31 19:49:29 2020 us=281384   cert_file = 'c:\OpenVpn\Keys\server.crt'
Tue Mar 31 19:49:29 2020 us=281384   extra_certs_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   priv_key_file = 'c:\OpenVpn\Keys\server.key'
Tue Mar 31 19:49:29 2020 us=281384   pkcs12_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   cryptoapi_cert = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   cipher_list = 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384'
Tue Mar 31 19:49:29 2020 us=281384   cipher_list_tls13 = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   tls_cert_profile = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   tls_verify = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   tls_export_cert = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   verify_x509_type = 0
Tue Mar 31 19:49:29 2020 us=281384   verify_x509_name = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   crl_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   ns_cert_type = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_ku[i] = 0
Tue Mar 31 19:49:29 2020 us=281384   remote_cert_eku = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   ssl_flags = 192
Tue Mar 31 19:49:29 2020 us=281384   tls_timeout = 2
Tue Mar 31 19:49:29 2020 us=281384   renegotiate_bytes = -1
Tue Mar 31 19:49:29 2020 us=281384   renegotiate_packets = 0
Tue Mar 31 19:49:29 2020 us=281384   renegotiate_seconds = 3600
Tue Mar 31 19:49:29 2020 us=281384   handshake_window = 60
Tue Mar 31 19:49:29 2020 us=281384   transition_window = 3600
Tue Mar 31 19:49:29 2020 us=281384   single_session = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   push_peer_info = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   tls_exit = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   tls_auth_file = 'c:\OpenVpn\keys\ta.key'
Tue Mar 31 19:49:29 2020 us=281384   tls_crypt_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_protected_authentication = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_private_mode = 00000000
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_cert_private = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_pin_cache_period = -1
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_id = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   pkcs11_id_management = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   server_network = 10.195.121.0
Tue Mar 31 19:49:29 2020 us=281384   server_netmask = 255.255.255.128
Tue Mar 31 19:49:29 2020 us=281384   server_network_ipv6 = ::
Tue Mar 31 19:49:29 2020 us=281384   server_netbits_ipv6 = 0
Tue Mar 31 19:49:29 2020 us=281384   server_bridge_ip = 0.0.0.0
Tue Mar 31 19:49:29 2020 us=281384   server_bridge_netmask = 0.0.0.0
Tue Mar 31 19:49:29 2020 us=281384   server_bridge_pool_start = 0.0.0.0
Tue Mar 31 19:49:29 2020 us=281384   server_bridge_pool_end = 0.0.0.0
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'route 10.195.120.0 255.255.248.0'
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'dhcp-option DNS 10.195.121.241'
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'dhcp-option DNS 10.195.121.241'
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'dhcp-option DOMAIN mydomain.lan'
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'route-gateway 10.195.121.1'
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'topology subnet'
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'ping 10'
Tue Mar 31 19:49:29 2020 us=281384   push_entry = 'ping-restart 120'
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_pool_defined = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_pool_start = 10.195.121.2
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_pool_end = 10.195.121.125
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_pool_netmask = 255.255.255.128
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_pool_persist_filename = 'ipp.txt'
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_pool_persist_refresh_freq = 600
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_ipv6_pool_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_ipv6_pool_base = ::
Tue Mar 31 19:49:29 2020 us=281384   ifconfig_ipv6_pool_netbits = 0
Tue Mar 31 19:49:29 2020 us=281384   n_bcast_buf = 256
Tue Mar 31 19:49:29 2020 us=281384   tcp_queue_limit = 512
Tue Mar 31 19:49:29 2020 us=281384   real_hash_size = 256
Tue Mar 31 19:49:29 2020 us=281384   virtual_hash_size = 256
Tue Mar 31 19:49:29 2020 us=281384   client_connect_script = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   learn_address_script = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   client_disconnect_script = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   client_config_dir = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   ccd_exclusive = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   tmp_dir = 'C:\Windows\TEMP\'
Tue Mar 31 19:49:29 2020 us=281384   push_ifconfig_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   push_ifconfig_local = 0.0.0.0
Tue Mar 31 19:49:29 2020 us=281384   push_ifconfig_remote_netmask = 0.0.0.0
Tue Mar 31 19:49:29 2020 us=281384   push_ifconfig_ipv6_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   push_ifconfig_ipv6_local = ::/0
Tue Mar 31 19:49:29 2020 us=281384   push_ifconfig_ipv6_remote = ::
Tue Mar 31 19:49:29 2020 us=281384   enable_c2c = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   duplicate_cn = ENABLED
Tue Mar 31 19:49:29 2020 us=281384   cf_max = 0
Tue Mar 31 19:49:29 2020 us=281384   cf_per = 0
Tue Mar 31 19:49:29 2020 us=281384   max_clients = 1024
Tue Mar 31 19:49:29 2020 us=281384   max_routes_per_client = 256
Tue Mar 31 19:49:29 2020 us=281384   auth_user_pass_verify_script = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   auth_user_pass_verify_script_via_file = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   auth_token_generate = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   auth_token_lifetime = 0
Tue Mar 31 19:49:29 2020 us=281384   client = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   pull = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   auth_user_pass_file = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   show_net_up = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   route_method = 0
Tue Mar 31 19:49:29 2020 us=281384   block_outside_dns = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   ip_win32_defined = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   ip_win32_type = 3
Tue Mar 31 19:49:29 2020 us=281384   dhcp_masq_offset = 0
Tue Mar 31 19:49:29 2020 us=281384   dhcp_lease_time = 31536000
Tue Mar 31 19:49:29 2020 us=281384   tap_sleep = 10
Tue Mar 31 19:49:29 2020 us=281384   dhcp_options = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   dhcp_renew = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   dhcp_pre_release = DISABLED
Tue Mar 31 19:49:29 2020 us=281384   domain = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   netbios_scope = '[UNDEF]'
Tue Mar 31 19:49:29 2020 us=281384   netbios_node_type = 0
Tue Mar 31 19:49:29 2020 us=281384   disable_nbt = DISABLED
Tue Mar 31 19:49:29 2020 us=281384 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Tue Mar 31 19:49:29 2020 us=281384 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Mar 31 19:49:29 2020 us=281384 library versions: OpenSSL 1.1.0l  10 Sep 2019, LZO 2.10
Tue Mar 31 19:49:29 2020 us=281384 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Tue Mar 31 19:49:29 2020 us=281384 Diffie-Hellman initialized with 2048 bit key
Tue Mar 31 19:49:29 2020 us=281384 Failed to extract curve from certificate (UNDEF), using secp384r1 instead.
Tue Mar 31 19:49:29 2020 us=281384 ECDH curve secp384r1 added
Tue Mar 31 19:49:29 2020 us=281384 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar 31 19:49:29 2020 us=281384 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar 31 19:49:29 2020 us=281384 TLS-Auth MTU parms [ L:1624 D:1182 EF:68 EB:0 ET:0 EL:3 ]
Tue Mar 31 19:49:29 2020 us=281384 interactive service msg_channel=0
Tue Mar 31 19:49:29 2020 us=281384 open_tun
Tue Mar 31 19:49:29 2020 us=281384 TAP-WIN32 device [vpn] opened: \\.\Global\{0F936916-F88F-47ED-B24B-CE65D3534FC5}.tap
Tue Mar 31 19:49:29 2020 us=281384 TAP-Windows Driver Version 9.24 
Tue Mar 31 19:49:29 2020 us=281384 TAP-Windows MTU=1500
Tue Mar 31 19:49:29 2020 us=281384 Set TAP-Windows TUN subnet mode network/local/netmask = 10.195.121.0/10.195.121.1/255.255.255.128 [SUCCEEDED]
Tue Mar 31 19:49:29 2020 us=281384 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.195.121.1/255.255.255.128 on interface {0F936916-F88F-47ED-B24B-CE65D3534FC5} [DHCP-serv: 10.195.121.126, lease-time: 31536000]
Tue Mar 31 19:49:29 2020 us=281384 Sleeping for 10 seconds...
Tue Mar 31 19:49:39 2020 us=297032 Successful ARP Flush on interface [15] {0F936916-F88F-47ED-B24B-CE65D3534FC5}
Tue Mar 31 19:49:39 2020 us=297032 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Mar 31 19:49:39 2020 us=297032 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Tue Mar 31 19:49:39 2020 us=297032 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Tue Mar 31 19:49:39 2020 us=297032 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Mar 31 19:49:39 2020 us=297032 setsockopt(IPV6_V6ONLY=0)
Tue Mar 31 19:49:39 2020 us=297032 Listening for incoming TCP connection on [AF_INET6][undef]:my_port
Tue Mar 31 19:49:39 2020 us=297032 TCPv6_SERVER link local (bound): [AF_INET6][undef]:my_port
Tue Mar 31 19:49:39 2020 us=297032 TCPv6_SERVER link remote: [AF_UNSPEC]
Tue Mar 31 19:49:39 2020 us=297032 MULTI: multi_init called, r=256 v=256
Tue Mar 31 19:49:39 2020 us=297032 IFCONFIG POOL: base=10.195.121.2 size=124, ipv6=0
Tue Mar 31 19:49:39 2020 us=297032 IFCONFIG POOL LIST
Tue Mar 31 19:49:39 2020 us=297032 MULTI: TCP INIT maxclients=60 maxevents=64
Tue Mar 31 19:49:39 2020 us=297032 Initialization Sequence Completed]
now I saw this:

Code: Select all

line 278 - Tue Mar 31 19:49:29 2020 us=281384   max_clients = 1024
and

Code: Select all

line 332 Tue Mar 31 19:49:39 2020 us=297032 MULTI: TCP INIT maxclients=60 maxevents=64
???
i can't do server

Code: Select all

10.195.128.0 255.255.255.128
because 10.195.121.2 - 10.195.121.125 is the only subnet i can give out to vpn clients, other subnets are already busy.
Last edited by Gutse on Tue Mar 31, 2020 5:17 pm, edited 1 time in total.
Top
User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Pippin » Tue Mar 31, 2020 5:16 pm

MULTI: TCP INIT maxclients=60 maxevents=64
Exactly that was what I was looking for.
Will ask another to take a look at that.
i can't do server 10.195.128.0 255.255.255.128
Then choose a subnet that is not in use but compliant with RFC1918
I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp
Top
Gutse
OpenVpn Newbie
Posts: 14
Joined: Mon Mar 30, 2020 2:59 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Gutse » Tue Mar 31, 2020 5:24 pm

Pippin wrote: ↑
Tue Mar 31, 2020 5:16 pm
MULTI: TCP INIT maxclients=60 maxevents=64
Exactly that was what I was looking for.
Will ask another to take a look at that.
i can't do server 10.195.128.0 255.255.255.128
Then choose a subnet that is not in use but compliant with RFC1918
like I'm already post here:
It looks like the 2000 max_clients setting is getting overridden in we_init and getting set to WSA_MAXIMUM_WAIT_EVENTS, which is 64, minus 4. My understanding is this is a hardcoded limit built into the windows kernel. The 60 client limit is determined by subtracting extra_events (set to BASE_N_EVENTS, or 4) from it.
Top
300000
OpenVPN Expert
Posts: 685
Joined: Tue May 01, 2012 9:30 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by 300000 » Tue Mar 31, 2020 5:27 pm

there is nothing to do with your config , it is working ok and you dont need to do anything to make it work. 60 is max client openvpn can connec to your server that is what it tell on the log so you only need to do is adding more openvpn network card and run multi instant openvpn server on your computer so there are more client can connec to it. just do everything people on here to help you untill you cant find solution so and can give you tutorial to help you connect 200 client openvpn run on your computer at the same time.
Top
User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Pippin » Tue Mar 31, 2020 5:30 pm

Gutse wrote: ↑
Tue Mar 31, 2020 5:24 pm
 like I'm already post here:
It looks like the 2000 max_clients setting is getting overridden in we_init and getting set to WSA_MAXIMUM_WAIT_EVENTS, which is 64, minus 4. My understanding is this is a hardcoded limit built into the windows kernel. The 60 client limit is determined by subtracting extra_events (set to BASE_N_EVENTS, or 4) from it.
You did not post that ??? Or I must overlook something ?
I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp
Top
TinCanTech
OpenVPN Protagonist
Posts: 11139
Joined: Fri Jun 03, 2016 1:17 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by TinCanTech » Tue Mar 31, 2020 5:31 pm

It is a hard coded limit in Windows.

https://serverfault.com/questions/21484 ... onnections

You probably have to pay M$ for more connections .. or use UDP.
Top
Gutse
OpenVpn Newbie
Posts: 14
Joined: Mon Mar 30, 2020 2:59 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Gutse » Tue Mar 31, 2020 5:39 pm

300000 wrote: ↑
Tue Mar 31, 2020 5:27 pm
 there is nothing to do with your config , it is working ok and you dont need to do anything to make it work. 60 is max client openvpn can connec to your server that is what it tell on the log so you only need to do is adding more openvpn network card and run multi instant openvpn server on your computer so there are more client can connec to it. just do everything people on here to help you untill you cant find solution so and can give you tutorial to help you connect 200 client openvpn run on your computer at the same time.
it is possible to config 3 openvpn instances to use pool 10.195.121.2 - 10.195.121.125?
I'm already try it, but I can't start second and third instances of openvpn because of invalid network/netmask configuration.
seems like "server" directive should always starts like X.X.X.0
Pippin wrote: ↑
Tue Mar 31, 2020 5:30 pm
Gutse wrote: ↑
Tue Mar 31, 2020 5:24 pm
 like I'm already post here:
It looks like the 2000 max_clients setting is getting overridden in we_init and getting set to WSA_MAXIMUM_WAIT_EVENTS, which is 64, minus 4. My understanding is this is a hardcoded limit built into the windows kernel. The 60 client limit is determined by subtracting extra_events (set to BASE_N_EVENTS, or 4) from it.
You did not post that ??? Or I must overlook something ?
- viewtopic.php?f=4&t=29995#p90640
and You said to me "Unrelated." on that.
TinCanTech wrote: ↑
Tue Mar 31, 2020 5:31 pm
 It is a hard coded limit in Windows.

https://serverfault.com/questions/21484 ... onnections

You probably have to pay M$ for more connections .. or use UDP.
yes, I saw that topic BEFORE i asket my question here, and I already post link to it here... my question was like - "this post is 9 years old, meaybe i can handle it now?"
Top
User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Pippin » Tue Mar 31, 2020 5:42 pm

You are right, the shame is on me ;)

I found it here, that why i asked for the log from startup.
https://translate.google.com/translate? ... 14%3A56078
http://forum.ixbt.com/post.cgi?id=print:14:56078

So, it seems to be a hard limit.

You can do as @300000 suggested.
If you encounter problems, we'll see you again.
I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp
Top
User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Pippin » Tue Mar 31, 2020 5:44 pm

it is possible to config 3 openvpn instances to use pool 10.195.121.2 - 10.195.121.125?
Again:
https://community.openvpn.net/openvpn/w ... gConflicts
And:
Then choose a subnet that is not in use but compliant with RFC1918
I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp
Top
Gutse
OpenVpn Newbie
Posts: 14
Joined: Mon Mar 30, 2020 2:59 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Gutse » Tue Mar 31, 2020 5:57 pm

I'm in hard restriction in subnets. We have single address plan in our distributed organisation, and 10.195.121.2 - 10.195.121.125 is the ONLY subnet i can use for vpn clients, and I can't just pick any subnet from private networks (like 192.168.40.0/24 for example), because all servers that not in my OU will be unable to reach them, and consequently vpn users will be unable to interact with them
Top
User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Pippin » Tue Mar 31, 2020 6:09 pm

Looks borked to me but i'm not an engineer ;)
Talk to layer 9 (your organization) they should change.

You could divide that into
10.195.121.0/26
10.195.121.64/26
which would give room for 2x60=120 clients maximum.
I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp
Top
300000
OpenVPN Expert
Posts: 685
Joined: Tue May 01, 2012 9:30 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by 300000 » Tue Mar 31, 2020 6:23 pm

as you see i can run 4 openvpn at the same time and it can connec 200 openvpn client.
https://pasteboard.co/J1FWoeZ.png
4 network cards at one
https://pasteboard.co/J1FXS0J.png

routing table
https://pasteboard.co/J1FYhvM.png

openvpn status page

https://pasteboard.co/J1FYIoz.png
Top
300000
OpenVPN Expert
Posts: 685
Joined: Tue May 01, 2012 9:30 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by 300000 » Wed Apr 01, 2020 1:46 am

"because 10.195.121.2 - 10.195.121.125 is the only subnet i can give out to vpn clients"


you have been stick with that kind ip so i would like to help you so let stat from something new , you only have over 100 ip address so you need two openvpn network card is ok , dont need anymore than that

going to program and TAP-Windows utilities and install addinng one openvpn network card

click start and search type "ncpa.cpl" and press enter

you will see two openvpn network card right click to rename become openvpn1 and do the same with second openvpn network card is openvpn2 . name is very importan we need it when we call it from openvpn GUI.

let say you have start ip address 10.195.121.2 and the last one is 10.195.121.126 so you need set static ip for the openvpn network card first , right on the "openvpn1" and chose properties and choose /TPC/IPV4 and enter this ip 10.195.121.1 and subnet is 255.255.255.192 and save it

you need do the same with openvpn2 network card you need set static ip , right on the "openvpn2" and chose properties and choose /TPC/IPV4 and enter this ip 10.195.121.64 and subnet is 255.255.255.192 and save it

going to C:\Program Files\OpenVPN\config and make the same copy of the your config server so you will got two config file to run two openvpn network card and it is better name it as openvpn1 and openvpn2 as the same network card so when we edit it is more easy.

let edit openvpn1 config file and add some into it
because we set static ip for the openvpn network card so we need add this in the config and charge the port and save it

server 10.195.121.0 255.255.255.192
ip-win32 manual
port 1195
dev tun
dev-node "openvpn1"


let edit openvpn2 config file and add some into it because we set static ip for the openvpn network card so we need add this in the config and charge the port and save it


server 10.195.121.0 255.255.255.192
ip-win32 manual
port 1194
dev tun
dev-node "openvpn2"

because we have two network card so the subnet must be 255.255.255.192 , on the first openvpn1 it give out ip from 10.195.121.2 to 10.195.121.62 and the openvpn2 give out from 10.195.121.65 to 10.195.121.126 so you are going to have over 100 openvpn client connect to your server.
Top
TinCanTech
OpenVPN Protagonist
Posts: 11139
Joined: Fri Jun 03, 2016 1:17 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by TinCanTech » Wed Apr 01, 2020 1:58 am

The TCP connections are bound to the external NIC not TAP.
Top
Gutse
OpenVpn Newbie
Posts: 14
Joined: Mon Mar 30, 2020 2:59 pm

Re: MULTI: new incoming connection would exceed maximum number of clients (60)

Post by Gutse » Wed Apr 01, 2020 3:09 pm

300000 - thank you!
Top
Post Reply

Return to “Server Administration”