linuxgae
I have been running openvpn in routing mode for several years now. The Setup was fairly straight forward. I need to change it from routing to bridging and am not having
much luck. At a high level here's the setup. Both server and client are OpenSuSE 11.4. The server is multi-homed. Eth0 is Lan facing Eth1 is internet facing. firewaling is only done on the internet side. The client is on a provate network behind a home firewall/Nat router (FIOS) The client successfully connects to the server but I can't from the server to the client or from the client to the server or beyond. Both Server and client can ping hosts on their own lan. I'm using the bridge-start script to setup the bridge.
The sequence is as follows
normal boot
run bridge-start
start openvpn
******************************** server config stripped of comments *****************************************************
local 199.44.xxx.yyy
port 1194
proto udp
dev tap
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
server-bridge 172.26.1.254 255.255.255.0 172.26.1.9 172.26.1.19
push "route 172.26.0.0 255.255.0.0"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
verb 3
************************************************************************************
******************************** client config stripped of comments *****************************************************
client
dev tap
proto udp
remote 199.44.xxx.yyy 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca /etc/openvpn/linux185/ca.crt
cert /etc/openvpn/linux185/tecra-linux.crt
key /etc/openvpn/linux185/tecra-linux.key
cipher BF-CBC
comp-lzo
verb 3
************************************************************************************
*****************************bridge-start script *******************************************************
br="br0"
tap="tap0"
eth="eth0"
eth_ip="172.26.1.254"
eth_netmask="255.255.255.0"
eth_broadcast="172.26.1.255"
for t in $tap; do
openvpn --mktun --dev $t
done
brctl addbr $br
brctl addif $br $eth
for t in $tap; do
brctl addif $br $t
done
for t in $tap; do
ifconfig $t 0.0.0.0 promisc up
done
ifconfig $eth 0.0.0.0 promisc up
ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast
