[ale] OpenVPN Tun and Routing

Chris Fowler cfowler at outpostsentinel.com
Wed Oct 15 15:01:21 EDT 2008


I've solved it and it works great.  After digging more in the FAQ I read
about the /30 setup in regards to Windows and the fact that OpenVPN
does not respond to ping which is strange to me.

I've got TAP and TUN working.  I'm just trying to decide which one
fits what I'm trying to do.  I'm leaning toward TAP now.


Chris Fowler wrote:
> I've made tap work.   I'm now working on tun.  I have an issue where I can
> ping the server (192.168.101.1) from the client (192.168.101.6) but I can
> not ping the client from the server.  This does not make sense to me.
>
> *Routing entry
> 192.168.101.2   0.0.0.0         255.255.255.255 UH    0      0        
> 0 tun0
> 192.168.101.0   192.168.101.2   255.255.255.0   UG    0      0        
> 0 tun0
>
> tun0      Link encap:UNSPEC  HWaddr 
> 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 
>           inet addr:192.168.101.1  P-t-P:192.168.101.2  
> Mask:255.255.255.255
>           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
>           RX packets:4 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:100
>           RX bytes:240 (240.0 b)  TX bytes:408 (408.0 b)
>
> tcpdump
> [root at support openvpn]# tcpdump -i tun0
> tcpdump: WARNING: arptype 65534 not supported by libpcap - falling 
> back to cooked socket
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on tun0, link-type LINUX_SLL (Linux cooked), capture size 96 
> bytes
> 11:24:50.905395 IP 192.168.101.6 > 192.168.101.1: ICMP echo request, 
> id 768, seq 4864, length 40
> 11:24:50.905473 IP 192.168.101.1 > 192.168.101.6: ICMP echo reply, id 
> 768, seq 4864, length 40
> 11:24:52.484665 IP 192.168.101.6 > 192.168.101.1: ICMP echo request, 
> id 768, seq 5120, length 40
> 11:24:52.484733 IP 192.168.101.1 > 192.168.101.6: ICMP echo reply, id 
> 768, seq 5120, length 40
> 11:24:54.123712 IP 192.168.101.6 > 192.168.101.1: ICMP echo request, 
> id 768, seq 5376, length 40
> 11:24:54.123779 IP 192.168.101.1 > 192.168.101.6: ICMP echo reply, id 
> 768, seq 5376, length 40
> *
> What am I doing wrong?
> I see packet going back and forth between the kernel and the client
> via ICMP, but when I on the server and try to ping from there, I get no
> reply.
>
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
>   


-- 
Chris Fowler
OutPost Sentinel, LLC
Support @ SIP/support at pbx.opsdc.com
 or 678-804-8193
Email Support @ support at outpostsentinel.com




More information about the Ale mailing list