OpenVPN tunnel restarting - set keepalive?



  • Hi,
    I am having an issue on a site to site OpenVPN connection between 2 PFSense firewalls.  It appears the OpenVPN tunnel is timing out due to inactivity and restarting.

    Dec 1 04:13:50 remote-office openvpn[15054]: Initialization Sequence Completed
    Dec 1 04:13:48 remote-office openvpn[15054]: Peer Connection Initiated with [AF_INET]RE.MO.TE.IP:1194
    Dec 1 04:13:18 remote-office openvpn[15054]: UDPv4 link remote: [AF_INET]RE.MO.TE.IP:1194
    Dec 1 04:13:18 remote-office openvpn[15054]: UDPv4 link local (bound): [AF_INET]LO.CA.L.IP
    Dec 1 04:13:18 remote-office openvpn[15054]: Preserving previous TUN/TAP instance: ovpnc2
    Dec 1 04:13:18 remote-office openvpn[15054]: Re-using pre-shared static key
    Dec 1 04:13:18 remote-office openvpn[15054]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
    Dec 1 04:13:16 remote-office openvpn[15054]: SIGUSR1[soft,ping-restart] received, process restarting
    Dec 1 04:13:16 remote-office openvpn[15054]: Inactivity timeout (–ping-restart), restarting

    I use OSPF over the VPN so that (I would hope) would be enough traffic to keep the tunnel up.

    I've seen some things in the forums and other OpenVPN threads about setting a ping keepalive of some kind.  One post also noted that the default in PFSense is 5 pings/60 seconds.  Is this a fact?  Is there a way to change this?  And last question - I am overlooking something?  Is there a way to just keep the tunnel up indefinitely?


  • Rebel Alliance Developer Netgate

    OpenVPN on pfSense will send more than enough keep alives to keep that up, and OSPF's hello packets would be more than enough as well. For what you show to happen it really would have to lose connectivity for 60+ continuous seconds between the sites.


Log in to reply