Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN tunnel restarting - set keepalive?

    Scheduled Pinned Locked Moved OpenVPN
    2 Posts 2 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jdp0418
      last edited by

      Hi,
      I am having an issue on a site to site OpenVPN connection between 2 PFSense firewalls.  It appears the OpenVPN tunnel is timing out due to inactivity and restarting.

      Dec 1 04:13:50 remote-office openvpn[15054]: Initialization Sequence Completed
      Dec 1 04:13:48 remote-office openvpn[15054]: Peer Connection Initiated with [AF_INET]RE.MO.TE.IP:1194
      Dec 1 04:13:18 remote-office openvpn[15054]: UDPv4 link remote: [AF_INET]RE.MO.TE.IP:1194
      Dec 1 04:13:18 remote-office openvpn[15054]: UDPv4 link local (bound): [AF_INET]LO.CA.L.IP
      Dec 1 04:13:18 remote-office openvpn[15054]: Preserving previous TUN/TAP instance: ovpnc2
      Dec 1 04:13:18 remote-office openvpn[15054]: Re-using pre-shared static key
      Dec 1 04:13:18 remote-office openvpn[15054]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
      Dec 1 04:13:16 remote-office openvpn[15054]: SIGUSR1[soft,ping-restart] received, process restarting
      Dec 1 04:13:16 remote-office openvpn[15054]: Inactivity timeout (–ping-restart), restarting

      I use OSPF over the VPN so that (I would hope) would be enough traffic to keep the tunnel up.

      I've seen some things in the forums and other OpenVPN threads about setting a ping keepalive of some kind.  One post also noted that the default in PFSense is 5 pings/60 seconds.  Is this a fact?  Is there a way to change this?  And last question - I am overlooking something?  Is there a way to just keep the tunnel up indefinitely?

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        OpenVPN on pfSense will send more than enough keep alives to keep that up, and OSPF's hello packets would be more than enough as well. For what you show to happen it really would have to lose connectivity for 60+ continuous seconds between the sites.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.