OpenVPN Support Forum

Hello All,

My apologies if this has come up previously, I was unable to find help anywhere on this. For some reason my OpenVPN server is acting strangely.
1. If I have not connected to it in a while then it will have no issues at all.
2. if I disconnect and reconnect it will fail
3. if I try to connect multiple users simultaneous it will fail
4. if I try to connect any user too soon after another has disconnected it will fail

this is a problem, and I can't find out where my issues are, I will post the server.conf below:

mode server
#tls-server

local 192.168.10.119 ## ip/hostname of server
port 1194 ## default openvpn port
proto udp

#bridging directive
dev tap0 ## If you need multiple tap devices, add them here
up "/etc/openvpn/up.sh br0 tap0 1500"
down "/etc/openvpn/down.sh br0 tap0"

persist-key
persist-tun

#certificates and encryption
ca /etc/openvpn/ca.crt
cert /etc/openvpn/laptop-laz.crt
key /etc/openvpn/laptop-laz.key # This file should be kept secret
dh dh1024.pem
#tls-auth ta.key 0 # This file is secret

cipher BF-CBC # Blowfish (default)
comp-lzo

#DHCP Information
ifconfig-pool-persist ipp.txt
server-bridge 192.168.10.119 255.255.255.0 192.168.10.50 192.168.10.99
push "dhcp-option DNS 209.250.128.6"
#push "dhcp-option DOMAIN yourdomain.com"
max-clients 20 ## set this to the max number of clients that should be connected at a time

#script security settings
script-security 3 system

#log and security
user nobody
group nogroup
keepalive 10 120
status openvpn-status.log
verb 7

Hi all,

I also have another comment to make. when these won't connect the error that is given is:
TLS Error: Unroutable control packet received from x.x.x.x

It looks like I have a cert/config error, but how do I allow for multiple clients on the server in this way, I have issued separate certificates to all my devices and can't imagine why its not working. doing some research I found these possible issues which I don't agree with all of them because it does work sometimes 1. time sync issues between server and client 2. server thinks it an attack and refuses packets with this error. I could see #2 being true but I would imagine there is a directive I could add to the server to be able to say "allow multi" or "ignore attacks" or something like that.

Than, you all in advance

note also I'm using the easy-rsa scripts as directed in this config guide:
https://help.ubuntu.com/community/OpenVPN