Though I did internet-searches I start this topic. I found a lot of information, actually too much. But no howto/doc covered exactly what I want to set up. Or they used tun and I need tap-devices.
(please look at the attached image)
The GOAL is to create a distance-hub/switch to extend the red network (which contains the vpn-server) via the internet with computers connected to eth1 of the vpn-client. All network-traffic should be accessible on these machines: I need tap not tun. The machines should 'think' that they are physically connected to the red router and even get their IP-adress from this router rather than the vpn-server!
My questions/problems:
(1) The vpn-connection gets established (see log-files) but ifconfig shows no tap0 device on vpn-client. There is also no ping possible. What is wrong?
(2) Would it suffice to bridge eth1 with tap0 and its established tunnel on the vpn-server to achieve the goal? If not: what would be the correct way for the required setup?
Files of vpn-server
=====================
/etc/network/interfaces
auto lo
iface lo inet loopback
auto br0
iface br0 inet static
address 192.168.2.16
network 192.168.2.0
gateway 192.168.2.1
netmask 255.255.255.0
broadcast 192.168.2.255
bridge_ports eth0 tap0
pre-up openvpn --mktun --dev tap0
post-down openvpn --rmtun --dev tap0
/etc/openvpn/server.conf
port 1194
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server-bridge
keepalive 10 120
comp-lzo
persist-key
persist-tun
status /var/log/openvpn-status.log
log openvpn.log
log-append openvpn.log
verb 3
openvpn.log
Sat Jan 18 15:29:34 2014 OpenVPN 2.1.3 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jun 4 2013
Sat Jan 18 15:29:34 2014 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Sat Jan 18 15:29:34 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Jan 18 15:29:34 2014 Diffie-Hellman initialized with 2048 bit key
Sat Jan 18 15:29:34 2014 /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Sat Jan 18 15:29:34 2014 TLS-Auth MTU parms [ L:1574 D:148 EF:38 EB:0 ET:0 EL:0 ]
Sat Jan 18 15:29:34 2014 Socket Buffers: R=[124928->131072] S=[124928->131072]
Sat Jan 18 15:29:34 2014 TUN/TAP device tap1 opened
Sat Jan 18 15:29:34 2014 TUN/TAP TX queue length set to 100
Sat Jan 18 15:29:34 2014 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:0 ET:32 EL:0 AF:3/1 ]
Sat Jan 18 15:29:34 2014 UDPv4 link local (bound): [undef]
Sat Jan 18 15:29:34 2014 UDPv4 link remote: [undef]
Sat Jan 18 15:29:34 2014 MULTI: multi_init called, r=256 v=256
Sat Jan 18 15:29:34 2014 Initialization Sequence Completed
ifconfig-output
br0 Link encap:Ethernet Hardware Adresse 52:54:00:aa:d2:f8
inet Adresse:192.168.2.16 Bcast:192.168.2.255 Maske:255.255.255.0
inet6-Adresse: 2003:50:ae52:1931:50f4:ff:feaa:d2f8/64 Gültigkeitsbereich:Global
inet6-Adresse: fe80::5054:ff:feaa:d2f8/64 Gültigkeitsbereich:Verbindung
UP BROADCAST RUNNING MULTICAST MTU:1500 Metrik:1
RX packets:1307982 errors:0 dropped:0 overruns:0 frame:0
TX packets:20159 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:0
RX bytes:155470166 (148.2 MiB) TX bytes:2035595 (1.9 MiB)
eth0 Link encap:Ethernet Hardware Adresse 52:54:00:aa:d2:f8
inet6-Adresse: fe80::5254:ff:f5aa:d2f8/64 Gültigkeitsbereich:Verbindung
UP BROADCAST RUNNING MULTICAST MTU:1500 Metrik:1
RX packets:1308291 errors:0 dropped:0 overruns:0 frame:0
TX packets:20159 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:1000
RX bytes:156612234 (149.3 MiB) TX bytes:2035595 (1.9 MiB)
Interrupt:10 Basisadresse:0x6000
lo Link encap:Lokale Schleife
inet Adresse:127.0.0.1 Maske:255.0.0.0
inet6-Adresse: ::1/128 Gültigkeitsbereich:Maschine
UP LOOPBACK RUNNING MTU:16436 Metrik:1
RX packets:8 errors:0 dropped:0 overruns:0 frame:0
TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:0
RX bytes:560 (560.0 B) TX bytes:560 (560.0 B)
tap0 Link encap:Ethernet Hardware Adresse 82:70:15:03:9e:da
inet6-Adresse: fe80::8270:15ff:fe83:9eda/64 Gültigkeitsbereich:Verbindung
UP BROADCAST RUNNING MULTICAST MTU:1500 Metrik:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:1301395 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Client-files
=============
/etc/network/interfaces
auto lo
iface lo inet loopback
allow-hotplug eth0
iface eth0 inet dhcp
iface eth0 inet6 auto
allow-hotplug eth1
iface eth1 inet dhcp
iface eth1 inet6 auto
/etc/openvpn/client.conf
client
dev tap
proto udp
remote server.no-ip.biz 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert cert.crt
key cert.key
ns-cert-type server
comp-lzo
verb 3
syslog-output:
Jan 18 14:30:49 Egon ovpn-client[10579]: TLS: Initial packet from [AF_INET]xxx.xxx.23.225:11943, sid=caf8347e 4f828d8c
Jan 18 14:30:50 Egon ovpn-client[10579]: VERIFY OK: depth=1,
Jan 18 14:30:50 Egon ovpn-client[10579]: VERIFY OK: nsCertType=SERVER
Jan 18 14:30:50 Egon ovpn-client[10579]: VERIFY OK: depth=0,
Jan 18 14:30:52 Egon ovpn-client[10579]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jan 18 14:30:52 Egon ovpn-client[10579]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan 18 14:30:52 Egon ovpn-client[10579]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jan 18 14:30:52 Egon ovpn-client[10579]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jan 18 14:30:52 Egon ovpn-client[10579]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jan 18 14:30:52 Egon ovpn-client[10579]: [server] Peer Connection Initiated with [AF_INET]xxx.xxx.23.225:11943
Jan 18 14:30:55 Egon ovpn-client[10579]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Jan 18 14:30:55 Egon ovpn-client[10579]: PUSH: Received control message: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 120'
Jan 18 14:30:55 Egon ovpn-client[10579]: OPTIONS IMPORT: timers and/or timeouts modified
Jan 18 14:30:55 Egon ovpn-client[10579]: OPTIONS IMPORT: route-related options modified
Jan 18 14:30:55 Egon ovpn-client[10579]: TUN/TAP device tap0 opened
Jan 18 14:30:55 Egon ovpn-client[10579]: TUN/TAP TX queue length set to 100
Jan 18 14:30:55 Egon ovpn-client[10579]: Initialization Sequence Completed
ifconfig-output after establishing the tunnel
eth0 Link encap:Ethernet Hardware Adresse 90:fb:a6:32:e4:23
inet Adresse:192.168.2.126 Bcast:192.168.2.255 Maske:255.255.255.0
inet6-Adresse: fe80::96fb:a6df:ff32:e423/64 Gültigkeitsbereich:Verbindung
UP BROADCAST RUNNING MULTICAST MTU:1500 Metrik:1
RX packets:188347 errors:0 dropped:0 overruns:0 frame:0
TX packets:62986 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:1000
RX bytes:15925107 (15.1 MiB) TX bytes:6801182 (6.4 MiB)
Interrupt:42
eth1 Link encap:Ethernet Hardware Adresse 00:50:ba:5b:5d:61
inet6-Adresse: fe80::250:baff:fe5b:5d61/64 Gültigkeitsbereich:Verbindung
UP BROADCAST RUNNING MULTICAST MTU:1500 Metrik:1
RX packets:80058 errors:0 dropped:0 overruns:0 frame:0
TX packets:5058 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:1000
RX bytes:27379836 (26.1 MiB) TX bytes:1728252 (1.6 MiB)
Interrupt:18 Basisadresse:0xde00
lo Link encap:Lokale Schleife
inet Adresse:127.0.0.1 Maske:255.0.0.0
inet6-Adresse: ::1/128 Gültigkeitsbereich:Maschine
UP LOOPBACK RUNNING MTU:16436 Metrik:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
Kollisionen:0 Sendewarteschlangenlänge:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
I would really appreciate any help possible!
Thank you in advance!
ToK
