[Openvpn-users] Re: Softphone Drops & Client re-authentication

[Charles Duffy <cduffy@xxxxxxxxxxx>]

A few comments from looking at your server-side configuration:

ping-timer-rem is not intended for (and not necessary in) client/server 
mode. I don't know that it's been tested not to have negative side 
effects in that case.

I notice you aren't really making use of some of the macros available to 
shorten your configuration -- for instance, you're using "mode server", 
an explicit ifconfig and ifconfig-pool, etc. in place of just a "server" 
directive.

Sharing client certificates really is a bad practice.

Likewise, ping/ping-timer is most typically done with just a "keepalive" 
directive on the server side.


Without seeing your client config (and in neither case where you 
apparently attached tedata.ovpn can I read it), I can't comment much more.


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users