replay options in connection profile
Posted: Wed Apr 18, 2012 1:40 pm
This is a follow-up to https://community.openvpn.net/openvpn/ticket/19, which is now closed but leaves a question unanswered.
Please comment on why the replay options (no-replay; replay-window) cannot be specified in the connection profile. I am presently running two OpenVPN instances on my VPN server: one for UDP and one for TCP. In my client-side configuration, I have a connection profile for each, with UDP being first since it's the preferred method. The trouble is, I have encountered situations where I need to tweak the replay options. I had first tried to push these from the server side but the client won't accept either of the replay options being pushed. When I tried to add replay options in my client-side configuration (under the UDP connection profile), the client failed to start and the following message:
Options error: option 'no-replay' cannot be used in this context
Predictably, when I specify a replay option outside the connection profiles, I see the following message:
Options error: --replay-window only makes sense with --proto udp
I believe my scenario demonstrates the value in making the replay options configurable within connection profiles. Alternatively, the ability to push replay options from a server instance would also achieve the desired result.
Please comment on why the replay options (no-replay; replay-window) cannot be specified in the connection profile. I am presently running two OpenVPN instances on my VPN server: one for UDP and one for TCP. In my client-side configuration, I have a connection profile for each, with UDP being first since it's the preferred method. The trouble is, I have encountered situations where I need to tweak the replay options. I had first tried to push these from the server side but the client won't accept either of the replay options being pushed. When I tried to add replay options in my client-side configuration (under the UDP connection profile), the client failed to start and the following message:
Options error: option 'no-replay' cannot be used in this context
Predictably, when I specify a replay option outside the connection profiles, I see the following message:
Options error: --replay-window only makes sense with --proto udp
I believe my scenario demonstrates the value in making the replay options configurable within connection profiles. Alternatively, the ability to push replay options from a server instance would also achieve the desired result.