Jail OpenVPN connection randomly doesn't work

[Craig321]

Hi,

I have an OpenVPN connection set up within a standard jail. I then have some firewall rules that mean the jail will only connect if the VPN is up.

When it connects, it's perfect - fast, no issues with the rules or connections.

However, it'll randomly decide it doesn't want to work anymore for a while, so I can't ping anything (have tried IPs and DNS names) or connect to anything.

In ifconfig, it'll still show tun0 as being up, with an address, so no issues there.

I'm not too sure where to start with this one. I have tried multiple different servers from my VPN provider, so I don't think it's their end.

Any ideas?

FreeNAS-9.10.1 (d989edd) on an HP N54L, stock network card.

OpenVPN config might help diagnose:

Code:

client
dev tun
proto tcp
remote fastest-ukserver.ptoserver.com 80
persist-key
persist-tun
ca /usr/local/etc/openvpn/keys/ca.crt
tls-auth /usr/local/etc/openvpn/keys/Wdc.key 1
cipher AES-256-CBC
comp-lzo
verb 1
mute 20
route-method exe
route-delay 2
route 0.0.0.0 0.0.0.0
float
auth-user-pass login.txt
auth-retry nointeract
ifconfig-nowarn

Thanks.

 

[colmconn]

Sounds like you may want to investigate adding the --ping-restart argument to the openvpn command line in /usr/local/etc/rc.d/openvpn or alternatively add an appropriate keep-alive directive to your config file above.

https://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html

 

[Craig321]

Thank you :)

I did some further research & forgot to post back here. keep-alive in the conf has worked perfectly.