[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] Simple bridged client - no arp


  • Subject: [Openvpn-users] Simple bridged client - no arp
  • From: Cliff Stanford <cliff@xxxxxx>
  • Date: Thu, 02 Nov 2006 21:56:48 +0100
  • Openpgp: url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x95B229FC

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am trying to set up a simple solution where XP clients are bridged
into my fully connected network.  The client is behind a NAT, the server
is not.  The client does not have Windows Firewall enabled.

The connection is happening happily.  Both sides are happy that the
connection is established.  However the client never responds to an arp
from the server's network.

The server IP address is 193.254.31.194, the client's is supposed to be
193.254.31.91.

[root@ih ~]# arp -an
? (193.254.31.254) at 00:08:7C:B7:DE:C0 [ether] on br0
? (193.254.31.65) at 00:02:B3:60:9B:34 [ether] on br0
? (193.254.31.91) at <incomplete> on br0
? (193.254.31.31) at 00:02:B3:60:9B:34 [ether] on br0
[root@ih ~]#

The client seems to be able to arp the remote network, occasionally
though not consistently.

I'm at a loss as to what to try next.  Any assistance would be greatly
appreciated.

Many thanks,

Cliff.

Here are the config files:

Server:

port 1194
proto udp
dev tap0
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 193.254.31.194 255.255.255.0 193.254.31.91 193.254.31.99
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

Client:

client
dev tap
dev-node TapConnection
proto udp
remote ih.may.be
resolv-retry infinite
persist-key
persist-tun
ca ca.crt
cert client2.crt
key client2.key
comp-lzo
verb 5

On the server, the bridge appears to be configured correctly:

[root@ih ~]# ifconfig
br0       Link encap:Ethernet  HWaddr 00:50:8B:64:7A:C3
          inet addr:193.254.31.194  Bcast:193.254.31.255  Mask:255.255.255.0
          inet6 addr: fe80::250:8bff:fe64:7ac3/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:32308 errors:0 dropped:0 overruns:0 frame:0
          TX packets:24495 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2442736 (2.3 MiB)  TX bytes:4922827 (4.6 MiB)

eth0      Link encap:Ethernet  HWaddr 00:50:8B:64:7A:C3
          inet addr:193.254.31.194  Bcast:193.254.31.255  Mask:255.255.255.0
          inet6 addr: fe80::250:8bff:fe64:7ac3/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:40122 errors:0 dropped:0 overruns:0 frame:0
          TX packets:25631 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3586038 (3.4 MiB)  TX bytes:5072665 (4.8 MiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:39028 errors:0 dropped:0 overruns:0 frame:0
          TX packets:39028 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:5027864 (4.7 MiB)  TX bytes:5027864 (4.7 MiB)

tap0      Link encap:Ethernet  HWaddr 36:64:AA:54:BA:41
          inet6 addr: fe80::3464:aaff:fe54:ba41/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:20589 errors:0 dropped:98 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 b)  TX bytes:1346845 (1.2 MiB)

[root@ih ~]#


- --
Cliff Stanford
Might Limited                           +44 845 0045 666 (Office)
Suite 67, Dorset House                  +44 7973 616 666 (Mobile)
Duke Street, Chelmsford, CM1 1TB
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFSluPfNTx9pWyKfwRArkLAKCfzTiUkB2l54pvD1MTK+gzlDb4UACdEBdx
DNbuRDrNgVnPpVfLnuZ7heM=
=BZCI
-----END PGP SIGNATURE-----

______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users