Digi TransPort LR54 - Configure Renegotiation on the Openvpn Tunnels

Virtual Private Networks (VPN) OpenVPN
Digi TransPort WR Routers User Guide
214
By default, a keepalive message will be sent by the OpenVPN client every 30 seconds and by the
OpenVPN server every 60 seconds. The OpenVPN client will drop and renegotiate the tunnel if it does
not receive a keepalive message for 150 seconds. The OpenVPN server will drop and renegotiate after
300 seconds.
Web
1. On the menu, click Network > Networks > OpenVPN and select OpenVPN Server. The
OpenVPN Server page appears.
2. Click Edit. The OpenVPN server page displays the settings for the OpenVPN server.
3. Enter the Lifetime configuration:
n Keepalive Interval (Seconds): The interval at which keepalive messages are sent by
the OpenVPN client. Keepalive messages are sent by the OpenVPN server at twice the
interval.
n Keepalive Timeout (Seconds): The OpenVPN tunnel will be brought down and
renegotiated if no messages have been received for the configured timeout.
4. Click Apply.
Command line
1. Configure the keepalive interval.
digi.router> openvpn-server keepalive-interval 10
2. Configure the keepalive timeout.
digi.router> openvpn-server keepalive-timeout 60
3. Save the configuration.
digi.router> save config
Configure renegotiation on the OpenVPN tunnels
The OpenVPN server to be configured to automatically renegotiate the OpenVPN tunnel after a
specific amount of time or after a specific amount of data has been sent over the OpenVPN tunnel.
The purpose of this renegotiation is to reduce the risk of the negotiated keys from becoming
compromised from overuse.
Web
1. On the menu, click Network > Networks > OpenVPN and select OpenVPN Server. The
OpenVPN Server page appears.
2. Click Edit. The OpenVPN server page displays the settings for the OpenVPN server.