Trying to overcome OpenVPN Reneg-Seconds

[AB-19]

I've installed a Unifi Dream machine and used Duo as it's Radius, I use LDAP for primary auth and Duo Push as MFA. All is well...For an hour then OpenVPN forces it's hourly renegotiation and another push is sent out which must be approved. Not keen on home workers needing to approve numerous times a day.

Is there a way to have DUO auto-approve based on the request being within the hour and from the same IP?

Or some other mechanism to achieve this?

Thanks

[AB-19]

Sharyn,

You are right, the Unifi implementation of OpenVPN is restrictive!

I like your idea of the remembered devices. I could configure for 8 hours on the "without risk based protection" which would cover the working day. 

I'll give it a test.

[AB-19]

I cannot get it to stop asking to approve hourly, could you offer a guide to accomplish this?