Re: [Openvpn-users] TUN and TAP on same server?

[Charles Duffy <cduffy@xxxxxxxxxxx>]

siegfried wrote:
> Can I not just say "port 1195" in my routing mode configuration file?

Yes. --port on the command line and "port" in the configuration file are 
the exact same thing.

> When I fire up this additional instance of openvpn on my linksys
> openwrt router and start the corresponding routing mode client on my
> notebook at a wireless cafe (where the router is at home) it looks
> good. On the notebook I see both tun and tap devices with good proper
> looking ip addresses. Specifically, I see a tun0 for 10.169.6.6.
> 
> I then abort the bridging instance of openvpn client on my notebook and (of
> course) the tap device disappears from the ifconfig display.  
> 
> I can ping myself (10.169.6.6) and the router (10.169.6.1) but I
> cannot ping any of the other lan on my lan at home. Why not? My
> desktop machine is at 10.169.1.8 and cannot be pinged in routing mode. Why
> not?

In routing mode, does your desktop machine have a reverse route telling 
it to communicate with addresses within the VPN's range via the VPN server?

In either mode -- are you sure the other systems on your network respond 
to ICMP? The Windows firewall blocks incoming ping packets by default 
(grr!), so this could be distorting what you see. If that's not the 
case, I'd advise use of Ethereal (err, Wireshark) to figure out what's 
going on; in bridged mode, it makes sense to be able to contact anything 
at all on the remote end other than the VPN server (which would indicate 
that the bridge isn't working) -- but being able to contact the router 
but nothing else is unusual.

______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users