This forum is for admins who are looking to build or expand their OpenVPN setup.
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
-
Scale
- OpenVpn Newbie
- Posts: 2
- Joined: Tue Apr 26, 2011 10:24 am
Post
by Scale » Tue Apr 26, 2011 10:29 am
Dear readers,
I have a problem and to be honest this goes above my head and i can't figure it out.
My friend connects to my VPN from scotland => Works perfectly
His girlfriend connects to my VPN (from the same house) => Both will start to disconnect and reconnect in infinite loop.
Anybody have an idea what might be causing this?
Client config:
Code: Select all
remote xxx.xxx.xxx.xxx 443
client
remote-cert-tls server
redirect-gateway def1
dev tun0
proto tcp
resolv-retry infinite
nobind
persist-key
persist-tun
float
ca ca.crt
cert client1.crt
key client1.key
Server config:
Code: Select all
push "route 192.168.1.0 255.255.255.0"
server 192.168.66.0 255.255.255.0
dev tun0
port 443
proto tcp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
# Only use crl-verify if you are using the revoke list - otherwise leave it commented out
# crl-verify /tmp/openvpn/ca.crl
# management parameter allows DD-WRT's OpenVPN Status web page to access the server's management port
# port must be 5001 for scripts embedded in firmware to work
management localhost 5001
Thanks for reading!
-
janjust
- Forum Team
- Posts: 2703
- Joined: Fri Aug 20, 2010 2:57 pm
- Location: Amsterdam
-
Contact:
Post
by janjust » Tue Apr 26, 2011 10:33 am
I hope they are not using the same client certificate, otherwise you'd get this behaviour.
If they *are* using the same client cert then you can overrule this using
on the server side. It's best to hand out an extra client certificate, however.
-
Scale
- OpenVpn Newbie
- Posts: 2
- Joined: Tue Apr 26, 2011 10:24 am
Post
by Scale » Tue Apr 26, 2011 10:55 am
janjust wrote:I hope they are not using the same client certificate, otherwise you'd get this behaviour.
If they *are* using the same client cert then you can overrule this using
on the server side. It's best to hand out an extra client certificate, however.
While that makes perfect sense, i would have never have thought of it.
Thanks allot!!