[foz111]

R7800 r44715 (44719) NordVPN Provider
My OpenVPN client is disconnecting pretty much on the dot every hour, over the last few days i have attempted a few commands to try and stop this from happening to no avail.
What verbosity level should see the cause of this?
or what other commands can i try?
Thanks guys

Current Additional config:
remote-random
tun-mtu-extra 32
mssfix 1450
ping-timer-rem
reneg-sec 0
pull-filter ignore "dhcp-option DNS"
pull-filter ignore "auth-token"
keepalive 10 60

[egc]

Unfortunately I do not have the magic formula for you.

Hourly disconnections are often due to the key renegotiation, which is default every 3600 sec, but you already have: reneg-sec 0

You are also keeping the conneciton alive wiht keepalive 10 60.

So the disconnections are probably triggered by Nord, wanting to divide traffic between servers, usually behind the URL there are multiple IP addresses, the remote random chooses another one when a disconnection is triggered.

If the disconnection is only briefly then nothing much you can do.

If the tunnel stays down i.e. does not reconnect then the first thing you cna try is add this to Addtitional config:
remap-usr1 SIGHUP

If that does not help use the watchdog script to restart the VPN or reboot the router

Of course sometime using another server does help or you can specify multiple servers in the additional config to try if one does no reconnect.
See page 10 of this guide if you do not know how to do that: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=326414

[foz111]

Hi EGC

Thanks again for your help, i removed multiple servers back to a single to try and fix this issue.
I have today set verb 6 to see what is going on as i have tried a lot before posting.
it connects straight back up no issue there but just annoying.
now verb 6 is set i see:
R7800 daemon.notice openvpn[30701]: TLS: tls_process: killed expiring key

[egc]

You are kicked of because the server let your key expire.

You can try with removing reneg-sec 0

Maybe if you still got the same notification set it under 3600 secs e.g. reneg-sec 3500 so that you renew your key before you are thrown out