Page 1 of 1

Howto blocked dynamic interfaces?

Posted: Fri Feb 21, 2014 2:27 pm
by makstex
Problem Description:
2 router, OVPN Server and OVPN Client - Mikrotiks.
Sometime between them lost connection to ~ 0.1-0.9 seconds, the client during this time manages to lose the connection, but the server is not, in the end the client reconnects to the server, and the server appears dynamic interference, after about 5 seconds (timeout in ppp-profile server), the server loses the primary connection and only the dynamics.
How can any deny the ability to disable dynamic server interface?

On the server, it looks like:
R ovpn-in-user-01
ovpn-in-user-02
R ovpn-in-user-03
R <ovpn-in-user-02>

Re: Howto blocked dynamic interfaces?

Posted: Tue Mar 11, 2014 7:15 am
by makstex
Any idea ?

Re: Howto blocked dynamic interfaces?

Posted: Tue Mar 11, 2014 8:54 am
by makstex
answer himself:
script on 1 minute.
/interface ovpn-server remove [/interface find dynamic ];

Re: Howto blocked dynamic interfaces?

Posted: Tue Mar 11, 2014 10:42 am
by joegoldman
answer himself:
script on 1 minute.
/interface ovpn-server remove [/interface find dynamic ];

Better solution is on the profile for the server set 'only-one' to yes, so each unique user can only login once. It would deny the dynamic user until the bound user disconnects, then it will try connect again and take the bound connection.

Re: Howto blocked dynamic interfaces?

Posted: Tue Mar 11, 2014 11:04 am
by makstex
Better solution is on the profile for the server set 'only-one' to yes, so each unique user can only login once. It would deny the dynamic user until the bound user disconnects, then it will try connect again and take the bound connection.
only-one option in my profile server is enabled, the problem is that sometimes the server does not have time to close the static interface, and the client is doing in this moment to connect. eventually the server disconnects the static interface timeout, and the dynamic is not going away. but I have static interfaces enabled OSPF, so for me this is critical.