OpenVPN connection stays dynamic

RouterOS General
1

I have OpenVPN server interface in Mikrotik with PPP username specified in it, so that when this user dials in, his connection automatically gets assigned to this interface.

The problem is that sometimes user dials in and his connection stays dynamic (i.e DR ), never gets assigned to OpenVPN server interface. Any suggestions?

Cheers,

Mir

update:
Just realised that this is happening because old connection to OpenVPN server Interface does not get reset after user loses connection and Mikrotik still thinks that user is connected to that interface, that’s why when user tries to re-connect he only gets dynamic interface.
So my question is why, even if you are disconnected, Mikrotik thinks that someone is still connected to that interface?
This is happening for both, Linux and Windows clients including Mikrotik to Mikrtoik tunnels.

2

If user is not disconnecting properly, unexpected reboot, killed ovpn client etc.
Then there is no way server would know that client is no longer available. To fix the problem adjust keepalive-timeout value and set only-one=yes in ppp profile used by ovpn server.

3

Thank you for your prompt reply,

I have done as you have suggested (enabled keep-alive feature in Ovpn server settings)
Straight after I did that, all VPNs have dropped.
I have disabled keepalive but VPN did not come back up.
Rebooted Mikrotik, works fine again.

I will try again this evening.

Thanks again for the answer.

M

update
Last night I have changed keepalive setting in winbox by going to: “PPP–>Interface–>Ovpn Server” this caused Ovpn server crash.
This time I have done it via command “ppp profile set only-one=yes seapoint_openvpn_ser
vers_profile” as suggested. Will keep my eye on the result, thanks again for suggestion.
update2
Also in profile settings enabled idle-timeout so that if connection is not active (ie ghost connection), Mikrotik will kill it. http://www.mikrotik.com/testdocs/ros/2.9/guide/aaa_ppp.php

4

still have the same problem. When I close openVPN client not properly, or I lose internet connection, I can not reconnect again as Mikrotik still thinks that I am connected.
Is there a way to tell Mikrotik to kick existing connection if the user is trying to connect with the same user name? It think its logical.

5

I know it has been quite a bit of time but did you ever get this resolved? I have the same problem with a station to station configuration. When the internet drops, the ovpn server does not drop and reset. I have to reboot the router each time.

6

ver 7.6

we alse see same problem.
It would be nice that there is something to check and clear problematic interfaces/active connections.

7

i get same problem, why mikrotik dont answer this question?

8

i need solve my problem please…

9

Ver 7.7
Same problem

10

And the same with 7.8…

11

still having this issue in version 7.8 and its causing hardware lock up and need to reboot the router to gain access.

12

You should remove “D” flags with script and schedule. It’s Mikrotik bug.

Add your script with name remove-useless-script


/system script add 
name=remove-useless-script owner=admin dont-require-permissions=yes policy=ftp,password,policy,read,reboot,romon,sensitive,sniff,test,write source={/interface/ovpn-server/remove [find where running=no and dynamic=yes]}



Add Scheduler to run your script with name remove-useless-scheduler.

change the start date on your own date

/system scheduler  add
name=remove-useless-scheduler interval=00:01:00 policy=api,local,policy,reboot,romon,sniff,telnet,web,write,ftp,password,read,rest-api,sensitive,ssh,test,winbox on-event=remove-useless-script start-date=Jan/18/2024
13

PPP Profile - Set profile to only one Connection at a time

About ghosting users…i didnt find a good way to solve this problem but i set a script that remove the ghosting session
You can find all ghosting session in /ppp/active
Look for session with no Encoding

So i create a script that check all time (OpenVPN)
/ppp/active remove [find service=ovpn encoding=“”]

And set up a Schedule to run this script every minute

Sorry for any mistake. My english is a work in progresss

14

hosi69

the script doesn’t work