Problem with ping dosent work

bubi

Hello,

I have a problem with openvpn bridge, i cannot ping client ip, but arping its working,
according to http://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/site-to-site-layer-2-bridging-using-openvpn-access-server/
im addion only start-up and start-down script
clinet:

brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.0010a309dc6d       no              eth1
                                                        tap0

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 eth0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 br0

iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Forward =1

Client :
Eth0 network 192.168.0.0/24
Eth1 network 192.168.1.0/24
:?

192.168.1.201 its setup as static ip

bubi

icmp its enable , could You check my client config? :roll:

script-security 2
up "/etc/openvpn/bridge-up.sh br0"
down "/etc/openvpn/bridge-down.sh br0"
route-nopull
#up /etc/openvpn/update-resolv-conf
#down /etc/openvpn/update-resolv-conf
#auth-retry interact
#up /etc/openvpn/update-resolv-conf
#down /etc/openvpn/update-resolv-conf

# Automatically generated OpenVPN client config file
# Generated on Fri Oct 18 04:27:45 2013 by openvpnas
# Note: this config file contains inline private keys
#       and therefore should be kept confidential!
# Note: this configuration is user-locked to the username below
# OVPN_ACCESS_SERVER_USERNAME=raspi
# Define the profile name of this particular configuration file
# OVPN_ACCESS_SERVER_PROFILE=raspi@XXX/AUTOLOGIN
# OVPN_ACCESS_SERVER_AUTOLOGIN=1
# OVPN_ACCESS_SERVER_CLI_PREF_ALLOW_WEB_IMPORT=True
# OVPN_ACCESS_SERVER_CLI_PREF_BASIC_CLIENT=False
# OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_CONNECT=True
# OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_XD_PROXY=True
# OVPN_ACCESS_SERVER_WSHOST=XXX:443
# OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_START
# -----BEGIN CERTIFICATE-----

# -----END CERTIFICATE-----
# OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_STOP
# OVPN_ACCESS_SERVER_IS_OPENVPN_WEB_CA=1
# OVPN_ACCESS_SERVER_ORGANIZATION=OpenVPN Technologies, Inc.
setenv FORWARD_COMPATIBLE 1
client
server-poll-timeout 4
nobind
remote xxx 1194 udp
remote xxx 1194 udp
remote xxx 443 tcp
remote xxx 1194 udp
remote xxx 1194 udp
remote xxx 1194 udp
remote xxx 1194 udp
remote xxx 1194 udp
dev tap
dev-type tap
ns-cert-type server
reneg-sec 604800
sndbuf 100000
rcvbuf 100000
# NOTE: LZO commands are pushed by the Access Server at connect time.
# NOTE: The below line doesn't disable LZO.
comp-lzo no
verb 3
setenv PUSH_PEER_INFO
push "route 192.168.1.0 255.255.255.0"
push "route-gateway 192.168.1.1"
#push "redirect-gateway def1 bypass-dhcp"
push "redirect-gateway"
<ca>
-----BEGIN CERTIFICATE-----

J1qnflDDKQ==
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----
</key>

key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key (Server Agent)
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-auth>

## -----BEGIN RSA SIGNATURE-----

## -----END RSA SIGNATURE-----
## -----BEGIN CERTIFICATE-----
## -----END CERTIFICATE-----

bubi

Yes, mayby can check my log?

root@raspi:/etc/openvpn# openvpn --config client.conf
Mon Oct 28 11:09:24 2013 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Mon Oct 28 11:09:24 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mon Oct 28 11:09:24 2013 Control Channel Authentication: tls-auth using INLINE static key file
Mon Oct 28 11:09:24 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 28 11:09:24 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 28 11:09:24 2013 LZO compression initialized
Mon Oct 28 11:09:24 2013 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon Oct 28 11:09:24 2013 Socket Buffers: R=[163840->200000] S=[163840->200000]
Mon Oct 28 11:09:24 2013 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Oct 28 11:09:24 2013 Local Options hash (VER=V4): '13a273ba'
Mon Oct 28 11:09:24 2013 Expected Remote Options hash (VER=V4): '360696c5'
Mon Oct 28 11:09:24 2013 UDPv4 link local: [undef]
Mon Oct 28 11:09:24 2013 UDPv4 link remote: [AF_INET]XXX:1194
Mon Oct 28 11:09:24 2013 TLS: Initial packet from [AF_INET]XXX, sid=d02bb468 0180126c
Mon Oct 28 11:09:25 2013 VERIFY OK: depth=1, /CN=OpenVPN_CA
Mon Oct 28 11:09:25 2013 VERIFY OK: nsCertType=SERVER
Mon Oct 28 11:09:25 2013 VERIFY OK: depth=0, /CN=OpenVPN_Server
Mon Oct 28 11:09:25 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Oct 28 11:09:25 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 28 11:09:25 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Oct 28 11:09:25 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Oct 28 11:09:25 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Oct 28 11:09:25 2013 [OpenVPN_Server] Peer Connection Initiated with [AF_INET]XXX:1194
Mon Oct 28 11:09:27 2013 SENT CONTROL [OpenVPN_Server]: 'PUSH_REQUEST' (status=1)
Mon Oct 28 11:09:27 2013 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,route-gateway dhcp,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 12,ping-restart 50,redirect-private def1,redirect-private bypass-dhcp,redirect-private autolocal,comp-lzo no'
[b]Mon Oct 28 11:09:27 2013 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: dhcp-pre-release (2.2.1)
Mon Oct 28 11:09:27 2013 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:5: dhcp-renew (2.2.1)
Mon Oct 28 11:09:27 2013 Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:6: dhcp-release (2.2.1)[/b]
[b]Mon Oct 28 11:09:27 2013 Options error: option 'route-metric' cannot be used in this context
Mon Oct 28 11:09:27 2013 Options error: option 'redirect-private' cannot be used in this context
Mon Oct 28 11:09:27 2013 Options error: option 'redirect-private' cannot be used in this context
Mon Oct 28 11:09:27 2013 Options error: option 'redirect-private' cannot be used in this context[/b]
Mon Oct 28 11:09:27 2013 OPTIONS IMPORT: timers and/or timeouts modified
Mon Oct 28 11:09:27 2013 OPTIONS IMPORT: explicit notify parm(s) modified
Mon Oct 28 11:09:27 2013 OPTIONS IMPORT: LZO parms modified
Mon Oct 28 11:09:27 2013 OPTIONS IMPORT: route-related options modified
Mon Oct 28 11:09:27 2013 TUN/TAP device tap0 opened
Mon Oct 28 11:09:27 2013 TUN/TAP TX queue length set to 100
Mon Oct 28 11:09:27 2013 /etc/openvpn/bridge-up.sh br0 tap0 1500 1574   init
Mon Oct 28 11:09:27 2013 Exiting
Mon Oct 28 11:09:32 2013 Initialization Sequence Completed

bubi

It does not work at all