On 07/17/2013 09:50 AM, Pol Hallen wrote: > Hi all :-) > > I'm not sure if "keepalive" is parameter to use, so I've: > > keepalive 10 600 > > If I restart openvpn server, clients does not reconnect to server. > > How can I investigate?
As noted in the manpage, there are 2 values for the --keepalive directive. The first is the frequency of keepalive packets, while the second is the timeout. With the settings you have, it will take 10 minutes for the client (and 20 minutes for the server) to notice a disconnected session. If you didn't wait 10 minutes, the client will continue trying to send a keepalive probe every 10 seconds until it has unsuccessfully tried for that long. The intent is to allow temporary network interruptions while eventually detecting a complete loss of connectivity (such as a server restart.) A low-enough value for the keepalive interval also keeps state and NAT entries active in statefull firewalls. So, try a lower timeout value if 10 minutes wasn't what you intended. -- Josh ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
