LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   OpenVPN configuration problems (https://www.linuxquestions.org/questions/linux-software-2/openvpn-configuration-problems-683231/)

dmi 11-13-2008 03:11 PM

OpenVPN configuration problems
 
Hello,

I have some problem with my OpenVPN server.

My VPN network is 10.1.0.0/24.
The problem that I am having is that my client gets an /30 IP address, the address that it is getting is 10.1.0.6/30.

I can not ping the server or ping the client from the server.

The server is running gentoo with OpenVPN, and the client Windows XP

[ The tun0 interface on the server ]

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.1.0.1 P-t-P:10.1.0.2 Mask:255.255.255.255


[ Windows/Client OpenVPN config ]

client
dev tun
proto udp
remote server.xyz 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
cipher AES-128-CBC # AES
comp-lzo
verb 3


[ gentoo/server OpenVPN config ]

port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
server 10.1.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-128-CBC # AES
comp-lzo
persist-key
persist-tun
user nobody
group nobody
status openvpn-status.log
verb 3


VPN network = 10.1.0.0/24
Internal LAN = 192.168.1.0/24

This is the first time I am setting up a VPN server and I would be greatful if someone could help me and explain what I am doing wrong.

dmi 11-13-2008 03:44 PM

I fixed the problem, my firewall(iptables) was blocking the tun interface by default :p

This is what I had to do;

# Allow TUN interface connections to OpenVPN server
iptables -A INPUT -i tun+ -j ACCEPT

# Allow TUN interface connections to be forwarded through other interfaces
iptables -A FORWARD -i tun+ -j ACCEPT


All times are GMT -5. The time now is 04:05 PM.