Hello.
I spend a lot of time trying to force 802.1q-trunk to move via OpenVPN bridged tunnel and I can say "I failed".
I need a bridged VPN, and it works fine with untagged traffic. But after turning tags on I experience freezes on tunnel from time to time. I cant say if it's about MTU or some other settings, but tcpdump continue to show some traffic going via bridges, "verb 11" shows some traffic too, but none actual data make it through for nearly 20 seconds.
If anyone knows how to build an OpenVPN-bridge for 802.1q-trunk, any help is appreciated.
OS - Debian 6.0.7.
tap on both sides were tuned with
ifconfig tapX mtu 1600. NICs on both sides are 100 Mbit.
I tried lots of different tun-mtu, fragment, mss-fix etc. Current configs are below (problem still exists).
Server:
local 172.31.20.5
daemon
proto udp
port 1195
tun-mtu 1550
fragment 1400
mtu-disc no
dev tap1
secret /root/static.key
persist-key
persist-tun
cipher none
keepalive 10 120
script-security 2
verb 2
status /var/log/openvpn/bridge.status
log-append /var/log/openvpn/bridge.log
Client:
daemon
proto udp
port 1195
remote 172.31.20.5
tun-mtu 1550
fragment 1400
mtu-disc no
dev tap0
ping 10
secret /root/static.key
persist-key
persist-tun
cipher none
script-security 2
verb 2
status /var/log/openvpn/bridge.status
log-append /var/log/openvpn/bridge.log
