Hi all!

I was setting up a VPN connection from the office to my home where I
have dynamic IP. For this I am using the following settings:

-----------------------------------------------------------------------
1) On the client:

client
proto udp
dev tun
remote dynamicdomain.com 1194
float
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client2.crt
key client2.key
comp-lzo
verb 3
ns-cert-type server

-----------------------------------------------------------------------
2) On the server:

port 1194
proto udp
dev tun

ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
crl-verify /etc/openvpn/easy-rsa/2.0/keys/crl.pem
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key # This file should be
kept secret
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

keepalive 10 120

;client-to-client

comp-lzo

user nobody
group nogroup

persist-key
persist-tun

status /var/log/openvpn-status.log
log-append /var/log/openvpn.log

verb 3

push "route 10.1.0.0 255.255.255.0"
push "dhcp-option DNS 10.1.0.6"
push "dhcp-option DOMAIN freesoftware"
-----------------------------------------------------------------------

The OpenVPN server is in my firewall, which is behind a Zyxel 660R DSL
router. The client can connect, but to change the IP, despite the name
resolves to the new IP, the connection is lost. But if I reboot the
Zyxel router, OpenVPN client can connect again.

Is there any way to have avoided this in order to maintain the
connection?


Thanks in advance for your reply.

Regards,
Daniel
--
Fingerprint: BFB3 08D6 B4D1 31B2 72B9 29CE 6696 BF1B 14E6 1D37
Powered by Debian GNU/Linux Squeeze - Linux user #188.598

Daniel Bareiro wrote at 2012-03-12 21:21 -0500:
> The OpenVPN server is in my firewall, which is behind a Zyxel 660R DSL
> router. The client can connect, but to change the IP, despite the name
> resolves to the new IP, the connection is lost. But if I reboot the
> Zyxel router, OpenVPN client can connect again.

Sorry I can not help with this, but I can recommend tinc as an alternative to
OpenVPN if you are interested in trying it instead..