[juneau-lug] OpenVPN = Success

  • From: "Kevin Elliott" <woolsherpahat@xxxxxxxxx>
  • To: juneau-lug@xxxxxxxxxxxxx
  • Date: Mon, 31 Jul 2006 15:32:18 -0800

James and all,

I was finally able to get my OpenVPN connection working last week,
although I'm not quite sure what I did that made it work.  I changed
my setup from a bridge to a regular tunnel and fiddled with my server
settings.  I had some problems understanding your email due to
formating issues but if I did understand it correctly, I agree that
for whatever reason the server was pushing routes to the client that
didn't allow it to route back to the server.  Interestingly enough it
still brings up the tunnel interface using the 255.255.255.255 netmask
but pushes the correct routes.  Here's the interesting bit:

PUSH: Received control message: 'PUSH_REPLY,redirect-gateway local
def1,route 10.8.0.0 255.255.255.0,ping 10,ping-restart 120,ifconfig
10.8.0.10 10.8.0.9'

Okay, looks fine to me but then we have this:

Mon Jul 31 15:27:56 2006 /sbin/ifconfig tun0 10.8.0.10 10.8.0.9 mtu
1500 netmask 255.255.255.255 up

There's that 255.255.255.255 netmask again but the routes look alright
(at least to me):

Mon Jul 31 15:27:56 2006 /sbin/route add -net 0.0.0.0 10.8.0.9 128.0.0.0
add net 0.0.0.0: gateway 10.8.0.9
Mon Jul 31 15:27:56 2006 /sbin/route add -net 128.0.0.0 10.8.0.9 128.0.0.0
add net 128.0.0.0: gateway 10.8.0.9
Mon Jul 31 15:27:56 2006 /sbin/route add -net 10.8.0.0 10.8.0.9 255.255.255.0
add net 10.8.0.0: gateway 10.8.0.9

Regardless, it seems to work quite well now and it's pretty flexible.
I have built multiple keys for multiple clients and they all seem to
be able to share the connection nicely.  Anyways, a big big thanks to
you and jake for all your help.

~Kevin
------------------------------------
The Juneau Linux Users Group -- http://www.juneau-lug.org
This is the Juneau-LUG mailing list.
To unsubscribe, send an e-mail to juneau-lug-request@xxxxxxxxxxxxx with the 
word unsubscribe in the subject header.

Other related posts:

  • » [juneau-lug] OpenVPN = Success