openvpn how to disconnect client from server?

Question

linux

How to forcibly break the connection with the client and block the login without revoking the certificate?

Answer 1

if other methods of authorization except for the certificate are not configured, then only on the firewall block incoming from its IP address.
shooting a session is very simple if the management interface is enabled
, for example, in the config,
management localhost 7505
you can do this on the server like this
telnet localhost 7505
kill username

Answer 2

Give him a static IP and kill him on the firewall.

Answer 3

We write in the openvpn server config. Place a
client-config-dir ccd
text file in the ccd folder, the name of which should match the name of the client certificate, and the contents of the file should contain
disable
I don’t know if the openvpn server will immediately disconnect the client or not, but it won’t let you reconnect.
After deleting the file from ccd, the client will be able to connect again.