heyoh
I had a fully working tap setup in which I had two Windows client connecting to my OpenVPN Server running on Linux. I decided to change over to tun configuration so I can support android clients.
Here is my server configuration:
dev tun
server 10.23.23.0 255.255.255.0
port 1194
proto udp
dh /etc/openvpn/keys/dh1024.pem
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/heyohpi.crt
key /etc/openvpn/keys/heyohpi.key
client-to-client
ifconfig-pool-persist ipp.txt
keepalive 10 60
comp-lzo
cipher BF-CBC
persist-key
persist-tun
user nobody
group nogroup
status /var/log/openvpn.log
verb 5
client-config-dir ccd
route 192.168.2.0 255.255.255.0
My local subnet is 192.168.2.0/24. I see the following error in my logs:
MULTI: bad source address from client
With reference to an ipv6 address. Some solutions said to utilize ccd which did not help. I saw another post said to add 'route x.x.x.x x.x.x.x' to config in which gives me errors about subnet conflicts.
Any ideas?
heyoh
Here is the error I get on the server:
Mon Jan 28 22:16:48 2013 us=895041 client/XX.XX.XX.XX:58680 MULTI: bad source address from client [xxxx::xxxx:xxxx:xxxx:xxxx], packet dropped
Mon Jan 28 22:16:50 2013 us=907852 client/XX.XX.XX.XX:58680 UDPv4 WRITE [53] to [AF_INET]XX.XX.XX.XX:58680: P_DATA_V1 kid=0 DATA len=52
Client config looks like this:
client
dev tun
dev-node MyTap
proto udp
cipher BF-CBC
remote XX.XX.XX.XX 1194
nobind
persist-key
persist-tun
pull
ca "C:\\Program Files\\OpenVPN\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\keys\\client.crt"
key "C:\\Program Files\\OpenVPN\\keys\\client.key"
ns-cert-type server
comp-lzo
verb 6
