Hi All,
I've set up a briged openvpn connection on two linux boxes, one at
home, one at work.
The server starts without complaining, and so does the client. I can
even see both exchanging keepalive packets.
However, when I try to ping home from work or work from home, I get a
not-so-nice "icmp_seq=2 Destination Host Unreachable".
This problem only occurs when I use a bridge; the routed connection
works fine.
Does one of you have an idea to get me out of this?
I try to include as much relevant information as possible bellow.
Both boxes run Ubuntu and OpenVPN 2.0_rc6 i386-pc-linux [SSL] [LZO]
[EPOLL] built on Jan 6 2005
Server:
server.conf
proto tcp
dev tap
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 172.19.3.2 255.255.255.0 172.19.3.220 172.19.3.230
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
#persist-tun
status openvpn-status.log
verb 6
Interfaces
br0 Link encap:Ethernet HWaddr 00:48:54:55:41:54
inet addr:172.19.3.2 Bcast:172.19.3.255 Mask:255.255.255.0
inet6 addr: fe80::248:54ff:fe55:4154/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1492 Metric:1
RX packets:10035 errors:0 dropped:0 overruns:0 frame:0
TX packets:7892 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:857028 (836.9 KiB) TX bytes:1225986 (1.1 MiB)
eth0 Link encap:Ethernet HWaddr 00:48:54:55:41:54
inet6 addr: fe80::248:54ff:fe55:4154/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1492 Metric:1
RX packets:1377935 errors:0 dropped:0 overruns:0 frame:0
TX packets:1469060 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:250458199 (238.8 MiB) TX bytes:233280089 (222.4 MiB)
Interrupt:11 Base address:0xe800
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:237160 errors:0 dropped:0 overruns:0 frame:0
TX packets:237160 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:157404653 (150.1 MiB) TX bytes:157404653 (150.1 MiB)
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
172.19.3.0 * 255.255.255.0 U 0 0 0
br0
default local.gateway 0.0.0.0 UG 0 0 0
br0
Bridge
bridge name bridge id STP enabled interfaces
br0 8000.004854554154 no eth0
tap0
Client:
client.conf:
client
dev tap
proto tcp
remote host.home.be 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
#persist-tun
ca ca.crt
cert dehayol.crt
key dehayol.key
comp-lzo
verb 6
Interfaces:
eth0 Link encap:Ethernet HWaddr 00:0D:56:B1:22:86
inet addr:192.168.208.221 Bcast:192.168.208.255
Mask:255.255.255.0
inet6 addr: fe80::20d:56ff:feb1:2286/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:38692 errors:0 dropped:0 overruns:0 frame:0
TX packets:33882 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:9693419 (9.2 MiB) TX bytes:3173023 (3.0 MiB)
Interrupt:17
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:1243001 errors:0 dropped:0 overruns:0 frame:0
TX packets:1243001 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:113879506 (108.6 MiB) TX bytes:113879506 (108.6 MiB)
tap0 Link encap:Ethernet HWaddr 00:FF:D7:3A:C4:AB
inet addr:172.19.3.220 Bcast:172.19.3.255 Mask:255.255.255.0
inet6 addr: fe80::2ff:d7ff:fe3a:c4ab/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:23 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 b) TX bytes:1134 (1.1 KiB)
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
192.168.208.0 * 255.255.255.0 U 0 0 0
eth0
172.19.3.0 * 255.255.255.0 U 0 0 0
tap0
default 192.168.208.1 0.0.0.0 UG 0 0 0
eth0
Thanks in advance,
Olivier Dehaybe
|