Hello,
I am fighting for almost 4 weeks now and cannot get my OpenVPn setup to run.
I want to setup a OpenVPN Site2Site connetction using tap for layer2 possibilities (I need the multicast for KNX telegrams)
My Setup in detail:
Server:
Fritzbox 7390 with Freetz installed (192.168.1.1)
Client WRT160NL with OpenWRT Backfire 10.03.1 (192.168.0.131)
Serverside network: 192.168.1.0 255.255.255.0 (Gateway = 192.168.1.1)
Clientside network: 192.168.0.0 255.255.255.0 (Gateway 192.168.0.130)
I want to reach from each point each host and get the multacst through the tunnel too.
Serverconfig:
# OpenVPN 2.1 Config, Thu Mar 28 15:19:39 CET 2013
proto udp
dev tap0
#Helperline for rc.openvpn to add tap0 to lan bridge
dev-node /dev/tun
ca /tmp/flash/openvpn/ca.crt
cert /tmp/flash/openvpn/box.crt
key /tmp/flash/openvpn/box.key
dh /tmp/flash/openvpn/dh.pem
tls-server
tls-auth /tmp/flash/openvpn/static.key 0
port 1194
ifconfig 192.168.1.1 255.255.255.0
push "route-gateway 192.168.1.1"
push "route 192.168.1.0 255.255.255.0"
max-clients 1
mode server
client-config-dir /clients_openvpn
route 192.168.0.0 255.255.255.0 192.168.1.61
tun-mtu 1500
mssfix
verb 3
cipher AES-256-CBC
comp-lzo
float
keepalive 10 120
chroot /tmp/openvpn
user openvpn
group openvpn
persist-tun
persist-key
Client config:
client
dev tap0
#udp/tcp je nachdem, was ausgewählt wurde
proto udp
#Port entsprechend der Konfiguration
remote my.ipadressis.correct 1194
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/luci.crt
key /etc/openvpn/luci.key
tls-remote fritzch
pull
tls-auth /etc/openvpn/static.key 1
auth SHA1
cipher AES-256-CBC
comp-lzo
verb 3
Currently I am able to start the tunnel and ping/access all Computer in all networks. I
do not get the multicast through the tunnel!
When I put the tap0 interface in the br-lan - I get the multicast through the tunnel and cannot ping and access any Computer. I guess the IP adress of the tap0 interface is lost as soon as attach the tap0 in the br-lan bridge on OpenWRT.
Has anyone an idea to solve my problem? - it is really hard work till now to get it as far as it is (4 weeks) but still I couldn't reach my goal!
PLEASE PLEASE help me!
I you need any further information let me know!
best regards
Markus
