[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] pushing server network as route to client stops openvpn


  • Subject: Re: [Openvpn-users] pushing server network as route to client stops openvpn
  • From: Mathias Sundman <mathias@xxxxxxxxxx>
  • Date: Fri, 2 Dec 2005 14:01:35 +0100 (CET)

On Fri, 2 Dec 2005, Sascha Lucas wrote:

Hi List,

I have a server (tls-server) with dev tun and IP forwarding (without NAT).

The Servers IP is: 129.69.90.133/255.255.255.248

Every thing works fine if i push networks to clients that do not include the servers IP. I.e. push "route 129.69.1.0 255.255.255.0" works. push "redirect-gateway def1" wokrs also.

When ever I push a network route that includes the servers IP, the VPN connection stops working. I.e. push "route 129.69.90.128 255.255.255.248". On the client side it looks like this:

ehh... Think about it for a few more seconds.. You are pushing a route to the client that sais that is should route traffic for 129.69.90.128/29 via your OpenVPN tunnel! What about the OpenVPN traffic itself, how is it now supposed to find it´s way to your server 129.69.90.133?


You will have to either push a host route for 129.69.90.133 via your old default gateway, or split the subnet into smaller pieces that does not include .133 and push them all.

--
_____________________________________________________________
Mathias Sundman                  (^)   ASCII Ribbon Campaign
OpenVPN GUI for Windows           X    NO HTML/RTF in e-mail
http://openvpn.se/               / \   NO Word docs in e-mail

Warning: require_once(../../../archive_common.php) [function.require-once]: failed to open stream: No such file or directory in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2005-12/msg00029.html on line 192

Fatal error: require_once() [function.require]: Failed opening required '../../../archive_common.php' (include_path='/usr/local/lib/php') in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2005-12/msg00029.html on line 192