Re: [Openvpn-users] dev tun/tap directive

[BlaaT 0. <bla...@gm...>]

Hello Pierre,


On 4/19/06, pierre <pie...@fr...> wrote:
> hy
>
> in my config file on the both side client / server i met a unbelieveable
> problem
>
> in tun mode i can specify "dev tun"  on client and server and all is
> successfully running.
>
> but in tap mode if i just specify "dev tap" the server push a correct
> ifconfig to the client. the tap0 interface from the client is correctly
> configured and the br0 interface from the server too but i don' t ping
> the server from the client i have always  a "destination  host
> unreachable" and i don't know why

You're using the IP 192.168.2.254 for the tap0 interface right?
Looking at the log files you posted earlier I could only tell your
connection to the OVPN server was succesfull, no errors were logged.

Are you using a firewall on the server?

What are the IP addresses of the OVPN server you speak of? I don't
quite follow you when you speak of "pinging the public IP of the OVPN
server". You should be able to succesfully ping 192.168.2.254 from the
client.

>
> if i want to use a tap interface i don't have to bridge tap0 + eth0 in
> br0 i have just to use "dev tap0" instead of "dev tap" on the server
> side (like the client side) which is configured manually with ifconfig
> command.
>
> naturally i cannot use a directive like "dev br0" because the server
> don't want to start

The OVPN clients only communicate with the tap0 interface. The bridge
kernel module loaded to enable bridging between your tap0 and eth0
interface takes care of forwarding frames (bridging) to the LAN and
from the LAN to the OVPN clients (tap0 > eth0 and eth0 > tap0).

On the client you don't need to bridge the interface.

>
> i don't understand this situation
>
> i'm using openvpn 2.0.6-1 on debian etch (testing)

Could you post the routing table of the client once it has connected
to the OVPN server?
On Windows do: "route print > c:\routetable.txt" and post the content
of the file c:\routetable.txt to the list.

Cheers,

>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting langua=
ge
> that extends applications into web and mobile media. Attend the live webc=
ast
> and join the prime developer group breaking into this new coding territor=
y!
> http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D110944&bid=3D241720&dat=
=3D121642
> _______________________________________________
> Openvpn-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>