OpenVPN works unless ran with --daemon

sirber

Hi.

I have a working client/server setup. Everyone can ping everything unless I run the server with --daemon.
Server: OpenVPN 2.2.1 x86_64-linux-gnu
Client: OpenWRT with OpenVPN 2.1.4 mips-openwrt-linux

Server's config:

port 1194
#proto up
proto tcp-server
dev tun
mode server
tls-server
topology subnet

ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem

ifconfig 10.20.201.1 255.255.255.0

client-config-dir ccd
route 10.20.3.0 255.255.255.0 10.20.201.2

keepalive 10 60
resolv-retry infinite

comp-lzo
verb 3

client's config:

client
tls-client
topology subnet

dev tun
#proto udp
proto tcp-client
remote 24.37.xxx.xxx 1194
resolv-retry infinite
nobind

ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
dh /etc/openvpn/dh1024.pem

comp-lzo
verb 3

I had the same issue with the server running on another OpenWRT router.
http://serverfault.com/questions/388064/openvpn-configuration-works-standalone-but-not-as-daemon

Thanks!

sirber

..... :roll:

client-config-dir ccd --> client-config-dir /etc/openvpn/ccd

I added "log /tmp/openvpn.log" and I catch:

standalone: OPTIONS IMPORT: reading client specific options from: ccd/da....
daemon: MULTI: no dynamic or static remote --ifconfig address is available for da....

:oops:

Mimiko

Use daemon option in the server's config file, not as command line option.
Also compare iptables' rules registered when openvpn is running in interactive mode and as daemon.