Hi
I've, I think succesfully, installed and configured OpenVPN in route mode (tun device) on a TP-Link router running openwrt. I can connect with OpenVPN for Android (the native Andriod 4.0 app, not Android Connect) and have traffic. But sometimes it's quite slow and the ping performances are very variable. Inspecting the logs got from the client connect I see this error:
OpenVPN ROUTE: failed to parse/resolve route for host/network: ::/0
Here my server configuration, in the form of UCI configuration file, it should be quite understandable, basically the option is converted to "--(option name) (option value)" append to the openvpn executable call
config 'openvpn' 'lan'
option 'enable' '1'
option 'port' '1081'
option 'proto' 'udp'
option 'dev' 'tun0'
option 'ca' '/etc/openvpn/ca.crt'
option 'cert' '/etc/openvpn/server.crt'
option 'key' '/etc/openvpn/server.key'
option 'dh' '/etc/openvpn/dh1024.pem'
option 'keepalive' '10 120'
option 'comp_lzo' '1'
option 'persist_key' '1'
option 'persist_tun' '1'
option 'status' '/tmp/openvpn-status.log'
option 'verb' '3'
option 'server' '10.8.0.0 255.255.255.0'
option 'push' 'route 192.168.0.0 255.255.255.0'
option 'push' 'redirect-gateway def1'
option 'push' 'dhcp-option DNS 10.8.0.1"
and the client config file
# Enables connection to GUI
management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold
setenv IV_OPENVPN_GUI_VERSION "de.blinkt.openvpn 0.6.3"
machine-readable-output
client
verb 4
connect-retry-max 5
connect-retry 5
resolv-retry 60
dev tun
remote CENSORED
<pkcs12>
......CENSORED......
</pkcs12>
comp-lzo
route-ipv6 ::/0
route 0.0.0.0 0.0.0.0
remote-cert-tls server
# Use system proxy setting
management-query-proxy
I think it maybe due to the route-ipv6 option. Apparently I cannot remove it from the GUI configuration fields, but maybe something I can add in the server?
Thanks, bye
