[phrozen]

I'm running DD-WRT v23 SP2 (09/15/06) vpn (SVN revision 3932) on a Buffalo WHR-HP-G54. My client is a Windows XP machine running openVPN GUI, 1.0.3 with OpenVPN 2.0.9.

I'm running a retrospect backup over the VPN and the connection keeps dropping. The VPN connection dies, but the internet connection is fine. The router stays up, everything seems to be fine but the VPN server. After a few minutes, the VPN server comes back and the client reconnects. I can't figure it out. I suspect it might have something to do with Jumbo frames on the DD-WRT LAN side, but I have disabled them and it is still happening.

Here is my VPN config:

Startup:
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up
echo "
-----BEGIN OpenVPN Static key V1-----
(removed)
-----END OpenVPN Static key V1-----
" > /tmp/static.key
ln -s /usr/sbin/openvpn /tmp/myvpn
/tmp/myvpn --dev tap0 --secret /tmp/static.key --comp-lzo --port 1194 --proto tcp-server --verb 3 --daemon

Firewall:
iptables -I INPUT 1 -p tcp --dport 1194 -j ACCEPT

[Blackraven]

I added the following options to my router (server):
--ping-timer-rem --ping 10 --ping-restart 60
(somehow the --keepalive didn't work, so I had to use this...)
and the following to my client config:
keepalive 10 60
ping-timer-rem

That solved my problem for the loss of connection through the tunnel, hope it helps you, else you should check out www.openvpn.net for more/different options.

[phrozen]

Nope didn't work for me. It still drops all the time. Argh. It's completely useless for backups and other operations...

[ev1te]

What kind of speed do you have, for me the WRT54GL router uses 100% CPU when i transfer files in 400 KB/s using openvpn tunnel (after that the speed does't increase couse the router can not handle more throughput)?

Maybe openvpn can not send the packages to keep the connection up and running because of the high CPU load?

[phrozen]

I'm sending data over a 384 kbps uplink. It maxes out at 50 kb/s, so that shouldn't be a problem.

Maybe it's something that hasn't been fully tested with WinXP as a client?

[ev1te]

I have transfered files above 500 MB through my OpenVpn tunnel without problems. How long does it take for the connection to die? (minutes/hours/days)?

Altho I am using a certificate based configuration:

mode server
proto udp
port 1195
dev tap0
keepalive 15 60
push \"route-gateway 192.168.100.1\"
verb 1
comp-lzo
daemon
client-to-client
tls-server
ca ca.crt
dh dh1024.pem
cert server.crt
key server.key

[phrozen]

Ahhh! I think I fixed it. Its been up for 24 hours straight now transferring data with no problems. (knock on wood). I think the problem was with TCP. I changed to UDP and it works fine.

WinXP Client config:

[Syndil]

[jnjn]

try use "server-bridge" mode please.
in fact, i'm not running bridge mode openvpn on dd-wrt, i'm running it as a server and another dd-wrt as a client in routing mode.
it works just fine, nothing unstable so far (it's running for about 2 week now).

[bigfatlazydork]

I followed these steps below and OpenVPN on the WRT54GL worked great (UDP), thank you very much! However I think they're blocing UDP at work because the UDP config doesn't work at my workplace. It works flawlessly everywhere else, I've tried the same config except using "proto tcp-client" entry and it is not working!!!. Anyone else having problems configuring using TCP instead of UDP? Here's a portion of the log:

Thu Nov 29 00:26:02 2007 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Thu Nov 29 00:26:02 2007 LZO compression initialized
Thu Nov 29 00:26:02 2007 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{0DC8DBAD-70EA-4474-B458-159C31199218}.tap
Thu Nov 29 00:26:02 2007 Successful ARP Flush on interface [4] {0DC8DBAD-70EA-4474-B458-159C31199218}
Thu Nov 29 00:26:02 2007 Attempting to establish TCP connection with 68.183.xx.xxx:443
Thu Nov 29 00:26:02 2007 TCP connection established with 68.183.xx.xxx:443
Thu Nov 29 00:26:02 2007 TCPv4_CLIENT link local: [undef]
Thu Nov 29 00:26:02 2007 TCPv4_CLIENT link remote: 68.183.xx.xxx:443
Thu Nov 29 00:26:03 2007 Connection reset, restarting [0]
Thu Nov 29 00:26:03 2007 SIGUSR1[soft,connection-reset] received, process restarting

It then keeps recycling with the above text, any suggestions welcomed, thanks in advance.

[tbird2340]

Anyone know how I can use the script for DD-WRT to connect to a Cisco VPN Concentrator using vpnc with auto-reconnect along with the OpenVPN Server mode with Static Key?

I tried pasting the code from both scripts and saving it to the startup but that didn't work.

Thanks much.!

[seeingwhite]

[placebo]

Just to verify: you're using proto tcp-server on one end, proto tcp-client on the other end, and you modified the firewall command for TCP packets instead of UDP?

[seeingwhite]

[placebo]

I guess I should have asked if you were trying those settings. I just wanted to verify that you in fact made those three changes because if you don't make any one of them, it won't work.