ovpn.conf failed on explicit-exit-notify

[albyva]

I've recently loaded [DD-WRT v24-sp2 (08/07/10) mega] and configured it to run OpenVPN via StrongVPN.
Now here is my problem. When the router loads and execute the OpenVPN tunnel, it encounters this error:

Code: Select all

Feb 27 19:48:48 earth daemon.err openvpn[18272]: Options error: Unrecognized option or missing parameter(s) in /tmp/ovpn/ovpn.conf:18: explicit-exit-notify (2.1.1)
Feb 27 19:48:48 earth daemon.warn openvpn[18272]: Use --help for more information.

When I look at the /tmp/ovpn/ovpn.conf file, line 18, it says:

explicit-exit-notify 2

So when I (vi) the ovpn.conf file and just comment out this entry it works:

Code: Select all

Feb 27 19:51:14 earth daemon.notice openvpn[18378]: Initialization Sequence Completed

So I'm wondering, is my DD-WRT code not able to understand (explicit-exit-notify)? And also,
when I reboot my router, why are my changes not saved? The field that I commented out is
now uncommented. Do I need to do something so save my changes to memory?


Thanks,

[maikcat]

--explicit-exit-notify [n]
In UDP client mode or point-to-point mode, send server/peer an exit notification if tunnel is restarted or OpenVPN process is exited. In client mode, on exit/restart, this option will tell the server to immediately close its client instance object rather than waiting for a timeout. The n parameter (default=1) controls the maximum number of retries that the client will attempt to resend the exit notification message.

can you post your config?

Michael.

[albyva]

--explicit-exit-notify [n]
In UDP client mode or point-to-point mode, send server/peer an exit notification if tunnel is restarted or OpenVPN process is exited. In client mode, on exit/restart, this option will tell the server to immediately close its client instance object rather than waiting for a timeout. The n parameter (default=1) controls the maximum number of retries that the client will attempt to resend the exit notification message.

can you post your config?

Michael.

Sure.. Here you go. This is my ovpn.conf (minus account data).


remote ...[omitted]... 4398 udp
remote ...[omitted]... 123 udp
remote ...[omitted]... 53 udp
key-direction 1
client
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
verb 4
reneg-sec 86400
echo vpn-XXXX ovpnXXX
tun-mtu 1500
redirect-gateway def1
comp-lzo adaptive
explicit-exit-notify 2
fragment 1390
mssfix 1390
hand-window 30
<ca>
-----BEGIN CERTIFICATE-----
...[omitted]...
-----END CERTIFICATE-----
</ca>
<key>
-----BEGIN PRIVATE KEY-----
...[omitted]...
-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----
...[omitted]...
-----END CERTIFICATE-----
</cert>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
...[omitted]...
-----END OpenVPN Static key V1-----
</tls-auth>

script-security 2
up "/tmp/ovpn/up"
down "/tmp/ovpn/dn"