Is there some config I should change to keep the connection alive even when it is totally idle? The worst thing is not that the tunnel won't stay open by itself, but that the client still shows green as if the connection is running fine. If the client gui could indicate that the connection is down that would be much nicer.
That's the server conf. And client:port 8888
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
tls-auth ta.key 0
cipher AES-256-CBC
auth SHA512
chroot /var/run/openvpn
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 3
Thanks for any tips.client
dev tun
proto udp
remote xxx.xxx.xxx.xxx 8888
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cryptoapicert "THUMB:f47eeb682af0c7082efae060dbccb317ebdc1fae"
ns-cert-type server
tls-auth ta.key 1
cipher AES-256-CBC
auth SHA512
comp-lzo
verb 3