Hi,
bingo:
Mon Jul 7 10:52:42 2014 ROUTE_GATEWAY S.S.S.1/255.255.255.0
IFACE=eth0 HWADDR=f1:3d:82:ad:c4:9b
Mon Jul 7 10:52:42 2014 OpenVPN ROUTE: OpenVPN needs a gateway
parameter for a --route option and no default was specified by
either --route-gateway or --ifconfig options
Mon Jul 7 10:52:42 2014 OpenVPN ROUTE: failed to parse/resolve
route for host/network: 192.168.1.0
the problem with using 'topology subnet' is that openvpn sometimes gets
confused about the default gateway or router that is needed.
try adding
route-gateway 10.0.0.1
or
route 192.168.1.0 255.255.255.0 10.0.0.1
or
route 192.168.1.0 255.255.255.0 vpn_gateway
this problem does not occur when you're not using 'topology subnet' .
HTH,
JJK
On 07/07/14 20:41, [email protected] wrote:
> On Mon, Jul 7, 2014, at 10:50 AM, Gert Doering wrote:
>> This is too late. This is when the client already connects, which is
>> not interesting. "route" setup happens at server initialization, not
>> on client connect.
>>
>> "verb 3" is normally good enough.
>>
>> And please non-wrapped. If your mail client cannot do it, do an
>> attachment.
> Switching back to `verb 3`, @Server log on server START
>
> (not SUPPOSED to be wrapping, at least it doesn't in the web editor --
> just in case: http://pastebin.com/KmChijWX )
>
> Mon Jul 7 10:52:42 2014 OpenVPN 2.3_git
> [git:master/96b9538711789355] x86_64-suse-linux-gnu [SSL
> (OpenSSL)] [LZO] [SNAPPY] [LZ4] [EPOLL] [MH] [IPv6] built on Jun
> 28 2014
> Mon Jul 7 10:52:42 2014 library versions: OpenSSL 1.0.1h 5 Jun
> 2014, LZO 2.08
> Mon Jul 7 10:52:42 2014 MANAGEMENT: TCP Socket listening on
> [AF_INET]127.0.0.1:1195
> Mon Jul 7 10:52:42 2014 Diffie-Hellman initialized with 4096
> bit key
> Mon Jul 7 10:52:42 2014 WARNING: file
> '/usr/local/etc/openvpn/client.vpn.mydomain.com.key' is group or
> others accessible
> Mon Jul 7 10:52:42 2014 ECDH curve secp521r1 added
> Mon Jul 7 10:52:42 2014 WARNING: file
> '/usr/local/etc/openvpn/mydomain.ta.key' is group or others
> accessible
> Mon Jul 7 10:52:42 2014 Control Channel Authentication: using
> '/usr/local/etc/openvpn/mydomain.ta.key' as a OpenVPN static key
> file
> Mon Jul 7 10:52:42 2014 Outgoing Control Channel
> Authentication: Using 512 bit message hash 'SHA512' for HMAC
> authentication
> Mon Jul 7 10:52:42 2014 Incoming Control Channel
> Authentication: Using 512 bit message hash 'SHA512' for HMAC
> authentication
> Mon Jul 7 10:52:42 2014 ROUTE_GATEWAY S.S.S.1/255.255.255.0
> IFACE=eth0 HWADDR=f1:3d:82:ad:c4:9b
> Mon Jul 7 10:52:42 2014 OpenVPN ROUTE: OpenVPN needs a gateway
> parameter for a --route option and no default was specified by
> either --route-gateway or --ifconfig options
> Mon Jul 7 10:52:42 2014 OpenVPN ROUTE: failed to parse/resolve
> route for host/network: 192.168.1.0
> Mon Jul 7 10:52:42 2014 TUN/TAP device tun0 opened
> Mon Jul 7 10:52:42 2014 TUN/TAP TX queue length set to 100
> Mon Jul 7 10:52:42 2014 do_ifconfig, tt->ipv6=0,
> tt->did_ifconfig_ipv6_setup=0
> Mon Jul 7 10:52:42 2014 /usr/local/openvpn-unpriv/unpriv-ip
> link set dev tun0 up mtu 1500
> Mon Jul 7 10:52:42 2014 /usr/local/openvpn-unpriv/unpriv-ip
> addr add dev tun0 10.0.0.1/24 broadcast 10.0.0.255
> Mon Jul 7 10:52:42 2014 chroot to '/usr/local/etc/openvpn' and
> cd to '/' succeeded
> Mon Jul 7 10:52:42 2014 GID set to nobody
> Mon Jul 7 10:52:42 2014 UID set to nobody
> Mon Jul 7 10:52:42 2014 Socket Buffers: R=[256960->131072]
> S=[256960->131072]
> Mon Jul 7 10:52:42 2014 UDPv4 link local (bound):
> [AF_INET]S.S.S.S:1194
> Mon Jul 7 10:52:42 2014 UDPv4 link remote: [AF_UNSPEC]
> Mon Jul 7 10:52:42 2014 MULTI: multi_init called, r=256 v=256
> Mon Jul 7 10:52:42 2014 IFCONFIG POOL: base=10.0.0.2 size=252,
> ipv6=0
> Mon Jul 7 10:52:42 2014 IFCONFIG POOL LIST
> Mon Jul 7 10:52:42 2014 Initialization Sequence Completed
>
> there's a suspect problem
>
> Mon Jul 7 10:52:42 2014 OpenVPN ROUTE: OpenVPN needs a gateway
> parameter for a --route option and no default was specified by
> either --route-gateway or --ifconfig options
> Mon Jul 7 10:52:42 2014 OpenVPN ROUTE: failed to parse/resolve
> route for host/network: 192.168.1.0
>
> which looks like a possible culprit.
>
> If yes, what's missing in OpenVPN config, and where?
>
>
> ------------------------------------------------------------------------------
> Open source business process management suite built on Java and Eclipse
> Turn processes into business applications with Bonita BPM Community Edition
> Quickly connect people, data, and systems into organized workflows
> Winner of BOSSIE, CODIE, OW2 and Gartner awards
> http://p.sf.net/sfu/Bonitasoft
> _______________________________________________
> Openvpn-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
