Server Side Idle Time Out Configuration

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
oscar
OpenVpn Newbie
Posts: 1
Joined: Tue Nov 09, 2010 5:46 pm

Server Side Idle Time Out Configuration

Post by oscar » Wed Nov 10, 2010 7:23 pm

Folks,

After 30 minutes of idle client connection time, I need to have the connection dropped by the server. This would in effect implement a server side idle time out configuration. From the docs, I found --inactive, --ping-exit, and --ping, which as explained, "when used on both peers will cause OpenVPN to exit within 60 seconds if its peer disconnects, but will exit after one hour if no actual tunnel data is exchanged." Apparently 'inactive' is an experimental feature (as of 2.0.6), and may explain why it's not working. I have set in my .conf file as follows:

inactive 1800
ping 10
ping-exit 60
ping-restart 0

The problem I am seeing when adding these lines is that the connection actually disconnects after 60 minutes for Win32 TAP, and constant disconnects and reconnects for TUN users (TunnelBlick/MacOS users).

Thanks

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Server Side Idle Time Out Configuration

Post by krzee » Tue Nov 16, 2010 10:06 am

2.0.6 is super extra old, if you use this, go update now!

I don't fully understand your goal, but remember that you can override client settings by pushing the settings to them from the server.

Post Reply