pvm741
Hello,
i have problem with openvpn server. Client (windows xp) connect to server succefull. Client icon set to green color, and tap interfreise ip have ip adress 192.168.2.251 from server, but ping to server 192.168.2.254 don't work.
Configurations is:
server mashine: Fedora12 with two ethernet card eth0 and eth1, and openvpn tap0 device linked to mybridge
In linux firewall rules - iptables, i open into INPUT bransh 1194 port. I'm probe iptables -F but don't work ping.
#!/bin/sh
openvpn --mktun --dev tap0
ifconfig eth2 0.0.0.0
ifconfig eth3 0.0.0.0
ifconfig tap0 0.0.0.0
brctl addbr mybridge
brctl stp mybridge off
brctl addif mybridge eth2
brctl addif mybridge eth3
brctl addif mybridge tap0
ifconfig mybridge 192.168.2.254 netmask 255.255.255.0 up
echo 1 > /proc/sys/net/ipv4/ip_forward
route add default gw 192.168.2.1 dev mybridge
and openvpn server confi is
tls-server
port 1194
proto udp
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/srv.crt
key /etc/openvpn/keys/srv.key
dh /etc/openvpn/keys/dh1024.pem
dev tap
server-bridge 192.168.2.254 255.255.255.0 192.168.2.251 192.168.2.253
keepalive 10 120
comp-lzo
max-clients 10
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 9
mute 20
vpn service i run with this script:
/usr/sbin/openvpn --cd /etc/openvpn --config /etc/openvpn/server.conf --daemon
and client config is
client
port 1194
proto udp
remote myipadress
resolv-retry infinite
dev tap
nobind
ca "c:\\OpenVPN\\keys\\ca.crt"
cert "c:\\OpenVPN\\keys\\client1.crt"
key "c:\\OpenVPN\\keys\\client1.key"
ns-cert-type server