|
|
Hi folks, I've to create a vpn in bridging mode between my freebsd 4.9 server and windows XP SP2 client. My steps was like those: freebsd server --------------- installed openvpn port (1.6.0 stable) kldload if_tap sysctl net.link.ether.bridge.enable=1 sysctl net.link.ether.bridge_cfg=sis0,tap0 create the secret key and config file like that: local 192.168.1.17 (i've just one eth int, sis0, with 4-5 aliases; .17 is the alias for vpn) port 1194 dev tap0 proto tcp-server secret /path/to/mysecret.key ping 10 comp-lzo user nobody group nobody verb 6 disable-occ windows client --------------- installed http://www.nilings.se/openvpn/download.html (openvpn 2.0 rc10) copied the secret key via winscp and config file like that: remote xxx.xxx.xxx.xxx (public server ip) port 1194 proto tcp-client dev tap ifconfig 192.168.1.25 255.255.255.0 secret mysecret.key ping 10 comp-lzo verb 6 mute 10 disable-occ Well, when I try to start all, the tunnel goes up, the client put the right ip in the interface tap, but the ping doesn't work, and arp -a is nothing in the client (in the server I've all mac-addresses, but not this client). In the server's log I see nothing special, in the client: Thu Feb 17 17:49:07 2005 us=300710 WARNING: --ping should normally be used with --ping-restart or --ping-exit Thu Feb 17 17:49:07 2005 us=301332 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Feb 17 17:49:07 2005 us=301392 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Feb 17 17:49:07 2005 us=301538 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Thu Feb 17 17:49:07 2005 us=301571 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Feb 17 17:49:07 2005 us=301609 LZO compression initialized Thu Feb 17 17:49:07 2005 us=306027 TAP-WIN32 device [NULL] opened: \\.\Global\{DE3BC006-22E7-477F-9BE2-EA8BA95FD238}.tap Thu Feb 17 17:49:07 2005 us=306080 TAP-Win32 Driver Version 8.1 Thu Feb 17 17:49:07 2005 us=306107 TAP-Win32 MTU=1500 Thu Feb 17 17:49:07 2005 us=306145 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.1.25/255.255.255.0 on interface {DE3BC006-22E7-477F-9BE2-EA8BA95FD238} [DHCP-serv: 192.168.1.0, lease-time: 31536000] Thu Feb 17 17:49:07 2005 us=312671 Successful ARP Flush on interface [131075] {DE3BC006-22E7-477F-9BE2-EA8BA95FD238} Thu Feb 17 17:49:07 2005 us=327261 Data Channel MTU parms [ L:1579 D:1450 EF:47 EB:23 ET:32 EL:0 AF:3/1 ] Thu Feb 17 17:49:07 2005 us=327363 Local Options String: 'V4,dev-type tap,link-mtu 1579,tun-mtu 1532,proto TCPv4_CLIENT,ifconfig 192.168.1.0 255.255.255.0,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret' Thu Feb 17 17:49:07 2005 us=327392 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1579,tun-mtu 1532,proto TCPv4_SERVER,ifconfig 192.168.1.0 255.255.255.0,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret' Thu Feb 17 17:49:07 2005 us=327449 Local Options hash (VER=V4): '62518268' Thu Feb 17 17:49:07 2005 us=327491 Expected Remote Options hash (VER=V4): 'cef5322e' Thu Feb 17 17:49:07 2005 us=327545 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:1194 Thu Feb 17 17:49:10 2005 us=509022 TCP connection established with xxx.xxx.xxx.xxx:1194 Thu Feb 17 17:49:10 2005 us=509108 Socket Buffers: R=[8192->8192] S=[8192->8192] Thu Feb 17 17:49:10 2005 us=509390 TCPv4_CLIENT link local: [undef] Thu Feb 17 17:49:10 2005 us=509415 TCPv4_CLIENT link remote: xxx.xxx.xxx.xxx:1194 Thu Feb 17 17:49:10 2005 us=509582 TCPv4_CLIENT WRITE [60] to xxx.xxx.xxx.xxx:1194: DATA len=60 Thu Feb 17 17:49:10 2005 us=516780 TCPv4_CLIENT WRITE [84] to xxx.xxx.xxx.xxx:1194: DATA len=84 Thu Feb 17 17:49:10 2005 us=755146 TCPv4_CLIENT READ [60] from xxx.xxx.xxx.xxx:1194: DATA len=60 Thu Feb 17 17:49:10 2005 us=755278 Peer Connection Initiated with xxx.xxx.xxx.xxx:1194 Thu Feb 17 17:49:10 2005 us=863442 TCPv4_CLIENT WRITE [84] to xxx.xxx.xxx.xxx:1194: DATA len=84 Thu Feb 17 17:49:11 2005 us=866558 TEST ROUTES: 0/0 succeeded len=-1 ret=1 a=0 u/d=up Thu Feb 17 17:49:11 2005 us=866610 Initialization Sequence Completed Thu Feb 17 17:49:11 2005 us=892602 TCPv4_CLIENT WRITE [84] to xxx.xxx.xxx.xxx:1194: DATA len=84 Thu Feb 17 17:49:12 2005 us=884197 TCPv4_CLIENT WRITE [92] to xxx.xxx.xxx.xxx:1194: DATA len=92 Thu Feb 17 17:49:12 2005 us=885708 TCPv4_CLIENT WRITE [108] to xxx.xxx.xxx.xxx:1194: DATA len=108 Thu Feb 17 17:49:12 2005 us=886270 TCPv4_CLIENT WRITE [108] to xxx.xxx.xxx.xxx:1194: DATA len=108 Thu Feb 17 17:49:12 2005 us=905206 TCPv4_CLIENT WRITE [92] to xxx.xxx.xxx.xxx:1194: DATA len=92 Thu Feb 17 17:49:12 2005 us=946640 TCPv4_CLIENT WRITE [148] to xxx.xxx.xxx.xxx:1194: DATA len=148 Thu Feb 17 17:49:13 2005 us=407036 TCPv4_CLIENT WRITE [100] to xxx.xxx.xxx.xxx:1194: DATA len=100 Thu Feb 17 17:49:13 2005 us=697346 TCPv4_CLIENT WRITE [148] to xxx.xxx.xxx.xxx:1194: DATA len=148 Thu Feb 17 17:49:14 2005 us=448411 TCPv4_CLIENT WRITE [148] to xxx.xxx.xxx.xxx:1194: DATA len=148 Thu Feb 17 17:49:15 2005 us=199504 TCPv4_CLIENT WRITE [148] to xxx.xxx.xxx.xxx:1194: DATA len=148 Thu Feb 17 17:49:15 2005 us=950811 NOTE: --mute triggered... Could you help me to put my troubleshooting in the right way? Thanks for your support, and patience Regards Andrea ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |