OpenVPN resets every 20 minutes

[DaReggie]

Hi,

I have a RT-AC68U router (currently firmware 380.65 beta1). I have an OpenVPN Server configured. I noticed that every 20 minutes i got a timeout and a reset with OpenVPN client 2.4. Doesn't matter if i use the VPN routing or not, so time-out can not be the reason.

How can i resolve this issue?


Regards
Reg


*********************************************************************************************
Config client :

remote 12.345.67.890:123
client
dev tap
proto tcp-client
float
ncp-ciphers AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC
cipher AES-256-CBC
auth RSA-SHA256
compress lz4
keepalive 15 60
ns-cert-type server

*********************************************************************************************

Logfile :

Wed Jan 18 11:03:11 2017 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 27 2016
Wed Jan 18 11:03:11 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Jan 18 11:03:11 2017 library versions: OpenSSL 1.0.2i 22 Sep 2016, LZO 2.09
Enter Management Password:
Wed Jan 18 11:03:11 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]12.345.67.890:123
Wed Jan 18 11:03:11 2017 Attempting to establish TCP connection with [AF_INET]12.345.67.890:123 [nonblock]
Wed Jan 18 11:03:12 2017 TCP connection established with [AF_INET]12.345.67.890:123
Wed Jan 18 11:03:12 2017 TCP_CLIENT link local: (not bound)
Wed Jan 18 11:03:12 2017 TCP_CLIENT link remote: [AF_INET]12.345.67.890:123
Wed Jan 18 11:03:13 2017 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1604', remote='link-mtu 1588'
Wed Jan 18 11:03:13 2017 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
Wed Jan 18 11:03:13 2017 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
Wed Jan 18 11:03:13 2017 [RT-AC68U] Peer Connection Initiated with [AF_INET]12.345.67.890:123
Wed Jan 18 11:03:14 2017 open_tun
Wed Jan 18 11:03:14 2017 TAP-WIN32 device [LAN- 2] opened: \\.\Global\{DDDDD666-EEFD-613A-8911-1EC8EDEEE8DC}.tap
Wed Jan 18 11:03:14 2017 Successful ARP Flush on interface [15] {DDDDD666-EEFD-613A-8911-1EC8EDEEE8DC}
Wed Jan 18 11:03:19 2017 Initialization Sequence Completed
Wed Jan 18 11:31:37 2017 [RT-AC68U] Inactivity timeout (--ping-restart), restarting
Wed Jan 18 11:31:37 2017 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jan 18 11:31:42 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]12.345.67.890:123
Wed Jan 18 11:31:42 2017 Attempting to establish TCP connection with [AF_INET]12.345.67.890:123 [nonblock]
Wed Jan 18 11:31:43 2017 TCP connection established with [AF_INET]12.345.67.890:123
Wed Jan 18 11:31:43 2017 TCP_CLIENT link local: (not bound)
Wed Jan 18 11:31:43 2017 TCP_CLIENT link remote: [AF_INET]12.345.67.890:123
Wed Jan 18 11:31:43 2017 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1584', remote='link-mtu 1588'
Wed Jan 18 11:31:43 2017 WARNING: 'cipher' is used inconsistently, local='cipher AES-128-GCM', remote='cipher BF-CBC'
Wed Jan 18 11:31:43 2017 WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA256'
Wed Jan 18 11:31:43 2017 [RT-AC68U] Peer Connection Initiated with [AF_INET]12.345.67.890:123
Wed Jan 18 11:31:44 2017 open_tun
Wed Jan 18 11:31:44 2017 TAP-WIN32 device [LAN- 2] opened: \\.\Global\{DDDDD666-EEFD-613A-8911-1EC8EDEEE8DC}.tap
Wed Jan 18 11:31:44 2017 Successful ARP Flush on interface [15] {DDDDD666-EEFD-613A-8911-1EC8EDEEE8DC}
Wed Jan 18 11:31:49 2017 Initialization Sequence Completed

~
Wed Jan 18 11:52:21 2017 [RT-AC68U] Inactivity timeout (--ping-restart), restarting
Wed Jan 18 11:52:21 2017 SIGUSR1[soft,ping-restart] received, process restarting
~
Wed Jan 18 12:13:11 2017 [RT-AC68U] Inactivity timeout (--ping-restart), restarting
Wed Jan 18 12:13:11 2017 SIGUSR1[soft,ping-restart] received, process restarting
~
Wed Jan 18 12:33:57 2017 [RT-AC68U] Inactivity timeout (--ping-restart), restarting
Wed Jan 18 12:33:57 2017 SIGUSR1[soft,ping-restart] received, process restarting
~
Wed Jan 18 12:54:41 2017 [RT-AC68U] Inactivity timeout (--ping-restart), restarting
Wed Jan 18 12:54:41 2017 SIGUSR1[soft,ping-restart] received, process restarting
~
Wed Jan 18 13:15:17 2017 [RT-AC68U] Inactivity timeout (--ping-restart), restarting
Wed Jan 18 13:15:17 2017 SIGUSR1[soft,ping-restart] received, process restarting
~

 

[john9527]

Try adding
inactive 0
to your custom config