Need help diagnosing OpenVPN client instability

Interesting. I suppose this is a possibility, though these clients are scattered around the country, and more than one is experiencing wifi connectivity issues. Thought for a moment that I might have a bad actor on the VPN, but sounds like this would need to come in on the wifi interface, so I think I can rule that out.

I’m going to read up on wifi config options and see if there’s something about my wifi configuration (below) that might be causing conflicts or timeouts:

config wifi-device 'mt7628'
        option type 'mt7628'
        option vendor 'ralink'
        option band '2.4G'
        option autoch_skip '12;13;'
        option wifimode '9'
        option country 'US'
        option region '1'
        option ht_txstream '2'
        option ht_rxstream '2'
        option hwmode '11ng'
        option radio '1'
        option bgprotect '0'
        option beacon '100'
        option dtim '1'
        option fragthres '2346'
        option rtsthres '2347'
        option txpower '100'
        option txpreamble '1'
        option shortslot '1'
        option txburst '1'
        option pktaggre '1'
        option ieee80211h '1'
        option txbf '0'
        option igmpsnoop '1'
        option ht_opmode '0'
        option ht_gi '1'
        option ht_rdg '1'
        option ht_stbc '1'
        option ht_amsdu '1'
        option ht_autoba '1'
        option ht_badec '0'
        option ht_distkip '1'
        option ht_ldpc '0'
        option channel 'auto'
        option autoch '2'
        option bw '1'

config wifi-iface
        option device 'mt7628'
        option network 'lan'
        option mode 'ap'
        option ifname 'ra0'
        option wmm '1'
        option apsd '0'
        option key '[MASKED]'
        option encryption 'psk-mixed'
        option ssid '[MASKED]'

Any chance that by setting the WiFi channel to ‘auto’ the clients are getting confused after the router detects congestion on its original channel and switches to another one? Not even sure that’s how the auto channel option works, but its a thought.

Why the wireless configuration file so many options?

Does the firmware version is v2.271?

Yes, firmware is 2.271. Not sure why so many options are specified. Are there some that should be removed?

Could you backup all the configuration files on luci? Then PM me, let me check what happen.

Sure. Sent config backup as .zip file via PM. Thanks for your assistance.

Another confirmed instance from one of the clients where neither their WiFi-connected devices, nor their ethernet-connected devices could get out to the internet. This was true both for hostname resolution and when attempting to ping ip addresses. Weirdly, the device was still connected to the VPN, and I was able to access it both via SSH, the GL UI, and luci UI. I could even ping one of the local devices on the client-side subnet. But that same device could not get out to the internet. Wifi shows as connected without internet connectivity.

Any ideas? This has me completely stumped.

Kernel and system logs attached.

client7-logs.zip (24.7 KB)