Tutorial: Set the Threshold to Disconnect Inactive Clients⁠

You can set the disconnect threshold at the global, group, or user level. Determine which level you want to adjust your threshold settings and use the appropriate value:

1. To set the threshold globally, use __DEFAULT__ as the <USER_OR_GROUP> in the commands in step 2.

2. To set the threshold at a group level, use the group's name as the <USER_OR_GROUP> in the commands in step 2.

3. To set the threshold at a user level, use the user's name as the <USER_OR_GROUP> in the commands in step 2.

1. Sign in to the console.

2. Switch to the scripts directory:

   cd /usr/local/openvpn_as/scripts/

3. Set the disconnect threshold:

   ./sacli --user <USER_OR_GROUP> --key "prop_isec" --value <VALUE> UserPropPut
   ./sacli --user <USER_OR_GROUP> --key "prop_ibytes" --value <VALUE> UserPropPut
   ./sacli start

   1. 1

      <USER_OR_GROUP>: Use the value from step 1 for your preferred level (global, group, or user).

   2. 2

      prop_isec: Set the value to the number of seconds over which to send bytes in/out.

   3. 3

      prop_ibytes: Set the value to the minimum number of bytes over prop_isec to allow the connection to continue.

   • For example, suppose you want to disconnect users in the admin group (admin-group) when the transmit/receive is below 100000 bytes over a period of five minutes. You would run this command:

     ./sacli --user "admin-group" --key "prop_isec" --value 300 UserPropPut
     ./sacli --user "admin-group" --key "prop_ibytes" --value 100000 UserPropPut
     ./sacli start