[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] route problem with macintosh


  • Subject: [Openvpn-users] route problem with macintosh
  • From: Erestor Elensar <erestor.elensar@xxxxxxxxx>
  • Date: Sun, 03 Jun 2007 21:10:24 +0200

I'm a Mac user and i use tunnelblick

I have a route problem an i can't find the problem:
When I'm connected to my lan with openVPN and I do a ping towards the
lan I don't get a response.


When I tcpdump the traffic I see this: echo request
my machine -> tunnel -> vpn server -> machine in lan
this is good !!!

echo reply
machine in lan -> vpn server
10.8.0.6 > wf-vm-06.woef.be: ICMP echo request
wf-vm-06.woef.be > 10.8.0.6: ICMP echo reply
nothing on the tunnel interface, the response end at eth0 it don't get
forwarded to the tun interface.

/etc/syscltl.conf
net.ipv4.ip_forward = 1

when i do a ping from the vpn server towards my connected laptop
64 bytes from 10.8.0.6.

I'm quite confused.
routes on vpn server
10.8.0.2        0.0.0.0         255.255.255.255 UH        tun0
192.168.124.96  0.0.0.0         255.255.255.224 U         eth0
10.8.0.0        10.8.0.2        255.255.255.0   UG        tun0
127.0.0.0       0.0.0.0         255.0.0.0       U         lo
0.0.0.0         192.168.124.97  0.0.0.0         UG        eth0

routes on the client
10.8.0.1/32        10.8.0.5           UGSc        0        3   tun0
10.8.0.5           10.8.0.6           UH          3        0   tun0
127.0.0.1          127.0.0.1          UH         12     9114    lo0
192.168.124.96/27  10.8.0.5           UGSc        1        7   tun0


server config
port 1194
proto udp
dev tun
ca /usr/share/openvpn/easy-rsa/keys/ca.crt
cert /usr/share/openvpn/easy-rsa/keys/server.crt
key /usr/share/openvpn/easy-rsa/keys/server.key
dh /usr/share/openvpn/easy-rsa/keys/dh1024.pem

server 10.8.0.0 255.255.255.0
push "route 192.168.124.96 255.255.255.224"
push "dhcp-option DNS 192.168.124.126"

comp-lzo
max-clients 20
keepalive 10 120
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log /var/log/openvpn/openvpn.log

client config
client
dev tun
remote x.x.x.x 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca /Users/xx/ca.crt
cert /Users/xx/mjn.crt
key /users/xx/mjn.key
comp-lzo


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users