vpn client can not get ip from server

tony.he

hi,everyone,

My VPN server run on OpenWrt router.The VPN client CAN work with vpn server normaly on Windows ,however the vpn client can NOT work normaly on Linux.
For testing purpose,my network enviroment is very simple.Here is the topology.
pc--------------- openvpn server --------------local network
(172.17.144.54) (172.17.144.41) (192.168.1.0/24)
pc and route are in same subnet.The netmask is 255.255.255.0.

server configure file

dh dh1024.pem
ca ca.crt
cert server.crt
key server.key
dev tap0
server-bridge
proto udp
port 12974
keepalive 10 120
verb 5
mute 5
log-append /tmp/openvpn_log
writepid /tmp/openvpnd.pid
mtu-disc yes
topology subnet
script-security 2
cipher AES-128-CBC
auth sha1
tls-server
client-to-client
duplicate-cn
comp-lzo
fast-io

client configure file

root@tony:/etc/openvpn# ls
ca.crt  client.conf  client.crt  client.key  easy-rsa  ipp.txt  keys  openvpn-status.log  server.conf
root@tony:/etc/openvpn# cat client.conf 
client
dev tap
proto udp
remote  172.17.144.41 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5

OS information about client

tony@tony:~$ uname -a
Linux tony 3.5.0-45-generic #68~precise1-Ubuntu SMP Wed Dec 4 16:18:46 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

log of client

root@tony:/etc/openvpn# openvpn client.conf 
Thu Feb 13 12:40:40 2014 us=895143 Current Parameter Settings:
Thu Feb 13 12:40:40 2014 us=895255   config = 'client.conf'
Thu Feb 13 12:40:40 2014 us=895274   mode = 0
Thu Feb 13 12:40:40 2014 us=895287   persist_config = DISABLED
Thu Feb 13 12:40:40 2014 us=895300   persist_mode = 1
Thu Feb 13 12:40:40 2014 us=895312   show_ciphers = DISABLED
Thu Feb 13 12:40:40 2014 us=895324   show_digests = DISABLED
Thu Feb 13 12:40:40 2014 us=895336   show_engines = DISABLED
Thu Feb 13 12:40:40 2014 us=895347   genkey = DISABLED
Thu Feb 13 12:40:40 2014 us=895359   key_pass_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895371   show_tls_ciphers = DISABLED
Thu Feb 13 12:40:40 2014 us=895385 Connection profiles [default]:
Thu Feb 13 12:40:40 2014 us=895398   proto = udp
Thu Feb 13 12:40:40 2014 us=895410   local = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895421   local_port = 0
Thu Feb 13 12:40:40 2014 us=895433   remote = '172.17.144.41'
Thu Feb 13 12:40:40 2014 us=895445   remote_port = 12974
Thu Feb 13 12:40:40 2014 us=895456   remote_float = DISABLED
Thu Feb 13 12:40:40 2014 us=895468   bind_defined = DISABLED
Thu Feb 13 12:40:40 2014 us=895479   bind_local = DISABLED
Thu Feb 13 12:40:40 2014 us=895491   connect_retry_seconds = 5
Thu Feb 13 12:40:40 2014 us=895503   connect_timeout = 10
Thu Feb 13 12:40:40 2014 us=895515   connect_retry_max = 0
Thu Feb 13 12:40:40 2014 us=895526   socks_proxy_server = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895538   socks_proxy_port = 0
Thu Feb 13 12:40:40 2014 us=895550   socks_proxy_retry = DISABLED
Thu Feb 13 12:40:40 2014 us=895561   tun_mtu = 1500
Thu Feb 13 12:40:40 2014 us=895572   tun_mtu_defined = ENABLED
Thu Feb 13 12:40:40 2014 us=895584   link_mtu = 1500
Thu Feb 13 12:40:40 2014 us=895595   link_mtu_defined = DISABLED
Thu Feb 13 12:40:40 2014 us=895607   tun_mtu_extra = 32
Thu Feb 13 12:40:40 2014 us=895674   tun_mtu_extra_defined = ENABLED
Thu Feb 13 12:40:40 2014 us=895687   mtu_discover_type = -1
Thu Feb 13 12:40:40 2014 us=895699   fragment = 0
Thu Feb 13 12:40:40 2014 us=895711   mssfix = 1450
Thu Feb 13 12:40:40 2014 us=895723   explicit_exit_notification = 0
Thu Feb 13 12:40:40 2014 us=895734 Connection profiles END
Thu Feb 13 12:40:40 2014 us=895746   remote_random = DISABLED
Thu Feb 13 12:40:40 2014 us=895758   ipchange = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895769   dev = 'tap'
Thu Feb 13 12:40:40 2014 us=895780   dev_type = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895792   dev_node = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895803   lladdr = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895815   topology = 1
Thu Feb 13 12:40:40 2014 us=895826   tun_ipv6 = DISABLED
Thu Feb 13 12:40:40 2014 us=895838   ifconfig_local = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895849   ifconfig_remote_netmask = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895861   ifconfig_noexec = DISABLED
Thu Feb 13 12:40:40 2014 us=895872   ifconfig_nowarn = DISABLED
Thu Feb 13 12:40:40 2014 us=895883   ifconfig_ipv6_local = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895895   ifconfig_ipv6_netbits = 0
Thu Feb 13 12:40:40 2014 us=895914   ifconfig_ipv6_remote = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=895928   shaper = 0
Thu Feb 13 12:40:40 2014 us=895940   mtu_test = 0
Thu Feb 13 12:40:40 2014 us=895951   mlock = DISABLED
Thu Feb 13 12:40:40 2014 us=895963   keepalive_ping = 0
Thu Feb 13 12:40:40 2014 us=895975   keepalive_timeout = 0
Thu Feb 13 12:40:40 2014 us=895986   inactivity_timeout = 0
Thu Feb 13 12:40:40 2014 us=896001   ping_send_timeout = 0
Thu Feb 13 12:40:40 2014 us=896020   ping_rec_timeout = 0
Thu Feb 13 12:40:40 2014 us=896037   ping_rec_timeout_action = 0
Thu Feb 13 12:40:40 2014 us=896056   ping_timer_remote = DISABLED
Thu Feb 13 12:40:40 2014 us=896074   remap_sigusr1 = 0
Thu Feb 13 12:40:40 2014 us=896102   persist_tun = ENABLED
Thu Feb 13 12:40:40 2014 us=896115   persist_local_ip = DISABLED
Thu Feb 13 12:40:40 2014 us=896133   persist_remote_ip = DISABLED
Thu Feb 13 12:40:40 2014 us=896151   persist_key = ENABLED
Thu Feb 13 12:40:40 2014 us=896164   passtos = DISABLED
Thu Feb 13 12:40:40 2014 us=896176   resolve_retry_seconds = 1000000000
Thu Feb 13 12:40:40 2014 us=896189   username = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896201   groupname = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896212   chroot_dir = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896224   cd_dir = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896235   writepid = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896246   up_script = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896257   down_script = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896272   down_pre = DISABLED
Thu Feb 13 12:40:40 2014 us=896284   up_restart = DISABLED
Thu Feb 13 12:40:40 2014 us=896296   up_delay = DISABLED
Thu Feb 13 12:40:40 2014 us=896307   daemon = DISABLED
Thu Feb 13 12:40:40 2014 us=896319   inetd = 0
Thu Feb 13 12:40:40 2014 us=896330   log = DISABLED
Thu Feb 13 12:40:40 2014 us=896342   suppress_timestamps = DISABLED
Thu Feb 13 12:40:40 2014 us=896354   nice = 0
Thu Feb 13 12:40:40 2014 us=896365   verbosity = 5
Thu Feb 13 12:40:40 2014 us=896377   mute = 0
Thu Feb 13 12:40:40 2014 us=896388   gremlin = 0
Thu Feb 13 12:40:40 2014 us=896399   status_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896411   status_file_version = 1
Thu Feb 13 12:40:40 2014 us=896422   status_file_update_freq = 60
Thu Feb 13 12:40:40 2014 us=896434   occ = ENABLED
Thu Feb 13 12:40:40 2014 us=896445   rcvbuf = 65536
Thu Feb 13 12:40:40 2014 us=896456   sndbuf = 65536
Thu Feb 13 12:40:40 2014 us=896468   mark = 0
Thu Feb 13 12:40:40 2014 us=896479   sockflags = 0
Thu Feb 13 12:40:40 2014 us=896490   fast_io = DISABLED
Thu Feb 13 12:40:40 2014 us=896502   lzo = 7
Thu Feb 13 12:40:40 2014 us=896513   route_script = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896525   route_default_gateway = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896536   route_default_metric = 0
Thu Feb 13 12:40:40 2014 us=896548   route_noexec = DISABLED
Thu Feb 13 12:40:40 2014 us=896560   route_delay = 0
Thu Feb 13 12:40:40 2014 us=896572   route_delay_window = 30
Thu Feb 13 12:40:40 2014 us=896584   route_delay_defined = DISABLED
Thu Feb 13 12:40:40 2014 us=896595   route_nopull = DISABLED
Thu Feb 13 12:40:40 2014 us=896607   route_gateway_via_dhcp = DISABLED
Thu Feb 13 12:40:40 2014 us=896618   max_routes = 100
Thu Feb 13 12:40:40 2014 us=896630   allow_pull_fqdn = DISABLED
Thu Feb 13 12:40:40 2014 us=896641   management_addr = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896653   management_port = 0
Thu Feb 13 12:40:40 2014 us=896664   management_user_pass = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896676   management_log_history_cache = 250
Thu Feb 13 12:40:40 2014 us=896688   management_echo_buffer_size = 100
Thu Feb 13 12:40:40 2014 us=896699   management_write_peer_info_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896711   management_client_user = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896723   management_client_group = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896734   management_flags = 0
Thu Feb 13 12:40:40 2014 us=896746   shared_secret_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896758   key_direction = 0
Thu Feb 13 12:40:40 2014 us=896769   ciphername_defined = ENABLED
Thu Feb 13 12:40:40 2014 us=896781   ciphername = 'AES-128-CBC'
Thu Feb 13 12:40:40 2014 us=896792   authname_defined = ENABLED
Thu Feb 13 12:40:40 2014 us=896804   authname = 'SHA1'
Thu Feb 13 12:40:40 2014 us=896815   prng_hash = 'SHA1'
Thu Feb 13 12:40:40 2014 us=896827   prng_nonce_secret_len = 16
Thu Feb 13 12:40:40 2014 us=896838   keysize = 0
Thu Feb 13 12:40:40 2014 us=896850   engine = DISABLED
Thu Feb 13 12:40:40 2014 us=896861   replay = ENABLED
Thu Feb 13 12:40:40 2014 us=896873   mute_replay_warnings = DISABLED
Thu Feb 13 12:40:40 2014 us=896885   replay_window = 64
Thu Feb 13 12:40:40 2014 us=896896   replay_time = 15
Thu Feb 13 12:40:40 2014 us=896908   packet_id_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=896920   use_iv = ENABLED
Thu Feb 13 12:40:40 2014 us=896931   test_crypto = DISABLED
Thu Feb 13 12:40:40 2014 us=896942   tls_server = DISABLED
Thu Feb 13 12:40:40 2014 us=896953   tls_client = ENABLED
Thu Feb 13 12:40:40 2014 us=896964   key_method = 2
Thu Feb 13 12:40:40 2014 us=896976   ca_file = 'ca.crt'
Thu Feb 13 12:40:40 2014 us=896988   ca_path = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897000   dh_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897011   cert_file = 'client.crt'
Thu Feb 13 12:40:40 2014 us=897023   priv_key_file = 'client.key'
Thu Feb 13 12:40:40 2014 us=897035   pkcs12_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897046   cipher_list = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897058   tls_verify = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897069   tls_export_cert = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897081   verify_x509_type = 0
Thu Feb 13 12:40:40 2014 us=897095   verify_x509_name = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897107   crl_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897118   ns_cert_type = 0
Thu Feb 13 12:40:40 2014 us=897130   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897142   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897153   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897165   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897176   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897187   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897198   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897210   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897221   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897232   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897243   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897255   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897266   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897277   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897288   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897299   remote_cert_ku[i] = 0
Thu Feb 13 12:40:40 2014 us=897310   remote_cert_eku = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897322   ssl_flags = 0
Thu Feb 13 12:40:40 2014 us=897333   tls_timeout = 2
Thu Feb 13 12:40:40 2014 us=897345   renegotiate_bytes = 0
Thu Feb 13 12:40:40 2014 us=897356   renegotiate_packets = 0
Thu Feb 13 12:40:40 2014 us=897368   renegotiate_seconds = 3600
Thu Feb 13 12:40:40 2014 us=897379   handshake_window = 60
Thu Feb 13 12:40:40 2014 us=897390   transition_window = 3600
Thu Feb 13 12:40:40 2014 us=897402   single_session = DISABLED
Thu Feb 13 12:40:40 2014 us=897414   push_peer_info = DISABLED
Thu Feb 13 12:40:40 2014 us=897425   tls_exit = DISABLED
Thu Feb 13 12:40:40 2014 us=897436   tls_auth_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897466   server_network = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897480   server_netmask = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897501   server_network_ipv6 = ::
Thu Feb 13 12:40:40 2014 us=897514   server_netbits_ipv6 = 0
Thu Feb 13 12:40:40 2014 us=897527   server_bridge_ip = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897540   server_bridge_netmask = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897553   server_bridge_pool_start = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897567   server_bridge_pool_end = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897579   ifconfig_pool_defined = DISABLED
Thu Feb 13 12:40:40 2014 us=897592   ifconfig_pool_start = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897605   ifconfig_pool_end = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897617   ifconfig_pool_netmask = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897629   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897641   ifconfig_pool_persist_refresh_freq = 600
Thu Feb 13 12:40:40 2014 us=897653   ifconfig_ipv6_pool_defined = DISABLED
Thu Feb 13 12:40:40 2014 us=897665   ifconfig_ipv6_pool_base = ::
Thu Feb 13 12:40:40 2014 us=897677   ifconfig_ipv6_pool_netbits = 0
Thu Feb 13 12:40:40 2014 us=897689   n_bcast_buf = 256
Thu Feb 13 12:40:40 2014 us=897700   tcp_queue_limit = 64
Thu Feb 13 12:40:40 2014 us=897712   real_hash_size = 256
Thu Feb 13 12:40:40 2014 us=897723   virtual_hash_size = 256
Thu Feb 13 12:40:40 2014 us=897734   client_connect_script = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897746   learn_address_script = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897758   client_disconnect_script = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897769   client_config_dir = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897781   ccd_exclusive = DISABLED
Thu Feb 13 12:40:40 2014 us=897793   tmp_dir = '/tmp'
Thu Feb 13 12:40:40 2014 us=897804   push_ifconfig_defined = DISABLED
Thu Feb 13 12:40:40 2014 us=897817   push_ifconfig_local = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897830   push_ifconfig_remote_netmask = 0.0.0.0
Thu Feb 13 12:40:40 2014 us=897842   push_ifconfig_ipv6_defined = DISABLED
Thu Feb 13 12:40:40 2014 us=897855   push_ifconfig_ipv6_local = ::/0
Thu Feb 13 12:40:40 2014 us=897868   push_ifconfig_ipv6_remote = ::
Thu Feb 13 12:40:40 2014 us=897879   enable_c2c = DISABLED
Thu Feb 13 12:40:40 2014 us=897891   duplicate_cn = DISABLED
Thu Feb 13 12:40:40 2014 us=897902   cf_max = 0
Thu Feb 13 12:40:40 2014 us=897913   cf_per = 0
Thu Feb 13 12:40:40 2014 us=897925   max_clients = 1024
Thu Feb 13 12:40:40 2014 us=897937   max_routes_per_client = 256
Thu Feb 13 12:40:40 2014 us=897949   auth_user_pass_verify_script = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897961   auth_user_pass_verify_script_via_file = DISABLED
Thu Feb 13 12:40:40 2014 us=897972   port_share_host = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=897984   port_share_port = 0
Thu Feb 13 12:40:40 2014 us=897995   client = ENABLED
Thu Feb 13 12:40:40 2014 us=898006   pull = ENABLED
Thu Feb 13 12:40:40 2014 us=898017   auth_user_pass_file = '[UNDEF]'
Thu Feb 13 12:40:40 2014 us=898035 OpenVPN 2.3.2 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Feb 12 2014
Thu Feb 13 12:40:40 2014 us=898130 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Feb 13 12:40:40 2014 us=898861 WARNING: file 'client.key' is group or others accessible
Thu Feb 13 12:40:40 2014 us=899149 LZO compression initialized
Thu Feb 13 12:40:40 2014 us=899285 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Feb 13 12:40:40 2014 us=899337 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Feb 13 12:40:40 2014 us=899375 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]

Thu Feb 13 12:40:40 2014 us=899455 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Feb 13 12:40:40 2014 us=899466 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Feb 13 12:40:40 2014 us=899503 Local Options hash (VER=V4): 'b498be7c'
Thu Feb 13 12:40:40 2014 us=899527 Expected Remote Options hash (VER=V4): '26e19fc0'
Thu Feb 13 12:40:40 2014 us=899550 UDPv4 link local: [undef]
Thu Feb 13 12:40:40 2014 us=899569 UDPv4 link remote: [AF_INET]172.17.144.41:12974
Thu Feb 13 12:40:40 2014 us=901856 TLS: Initial packet from [AF_INET]172.17.144.41:12974, sid=34592644 8ab46c77
Thu Feb 13 12:40:40 2014 us=980809 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
Thu Feb 13 12:40:40 2014 us=981164 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
Thu Feb 13 12:40:41 2014 us=62095 NOTE: Options consistency check may be skewed by version differences
Thu Feb 13 12:40:41 2014 us=62177 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Thu Feb 13 12:40:41 2014 us=62241 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tap'
Thu Feb 13 12:40:41 2014 us=62282 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1590'
Thu Feb 13 12:40:41 2014 us=62322 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1532'
Thu Feb 13 12:40:41 2014 us=62363 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Thu Feb 13 12:40:41 2014 us=62399 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher AES-128-CBC'
Thu Feb 13 12:40:41 2014 us=62436 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA1'
Thu Feb 13 12:40:41 2014 us=62472 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 128'
Thu Feb 13 12:40:41 2014 us=62507 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Thu Feb 13 12:40:41 2014 us=62542 WARNING: 'tls-server' is present in local config but missing in remote config, local='tls-server'
Thu Feb 13 12:40:41 2014 us=62736 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Feb 13 12:40:41 2014 us=62765 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 13 12:40:41 2014 us=62793 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Feb 13 12:40:41 2014 us=62823 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 13 12:40:41 2014 us=62909 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Feb 13 12:40:41 2014 us=62969 [netgear] Peer Connection Initiated with [AF_INET]172.17.144.41:12974
Thu Feb 13 12:40:43 2014 us=502036 SENT CONTROL [netgear]: 'PUSH_REQUEST' (status=1)
Thu Feb 13 12:40:43 2014 us=503715 PUSH: Received control message: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 120'
Thu Feb 13 12:40:43 2014 us=503864 OPTIONS IMPORT: timers and/or timeouts modified
Thu Feb 13 12:40:43 2014 us=503928 OPTIONS IMPORT: route-related options modified
Thu Feb 13 12:40:43 2014 us=504532 TUN/TAP device tap0 opened
Thu Feb 13 12:40:43 2014 us=504590 TUN/TAP TX queue length set to 100
Thu Feb 13 12:40:43 2014 us=504661 Initialization Sequence Completed

Edit:"OpenVPN read/write"

log of server

Thu Feb 13 12:33:55 2014 us=574773 OpenVPN 2.3.2 powerpc-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Feb 14 2014
Thu Feb 13 12:33:55 2014 us=575401 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Feb 13 12:33:55 2014 us=576210 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Feb 13 12:33:55 2014 us=626861 Diffie-Hellman initialized with 1024 bit key
Thu Feb 13 12:33:55 2014 us=629097 WARNING: file '/tmp/openvpn/server.key' is group or others accessible
Thu Feb 13 12:33:55 2014 us=631058 TLS-Auth MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Feb 13 12:33:55 2014 us=631299 Socket Buffers: R=[32767->65534] S=[32767->65534]
Thu Feb 13 12:33:55 2014 us=631475 TUN/TAP device tap0 opened
Thu Feb 13 12:33:55 2014 us=631601 TUN/TAP TX queue length set to 100
Thu Feb 13 12:33:55 2014 us=631886 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Thu Feb 13 12:33:55 2014 us=634121 UDPv4 link local (bound): [undef]
Thu Feb 13 12:33:55 2014 us=634279 UDPv4 link remote: [undef]
Thu Feb 13 12:33:55 2014 us=634407 MULTI: multi_init called, r=256 v=256
Thu Feb 13 12:33:55 2014 us=634758 Initialization Sequence Completed
Thu Feb 13 12:34:14 2014 us=722386 MULTI: multi_create_instance called
Thu Feb 13 12:34:14 2014 us=722642 172.17.144.54:43854 Re-using SSL/TLS context
Thu Feb 13 12:34:14 2014 us=722796 172.17.144.54:43854 LZO compression initialized
Thu Feb 13 12:34:14 2014 us=723356 172.17.144.54:43854 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Feb 13 12:34:14 2014 us=723442 172.17.144.54:43854 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
RThu Feb 13 12:34:14 2014 us=723623 172.17.144.54:43854 TLS: Initial packet from [AF_INET]172.17.144.54:43854, sid=290e9906 2e34289d

Edit:"OpenVPN read/write"

Thu Feb 13 12:34:14 2014 us=821552 172.17.144.54:43854 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
Thu Feb 13 12:34:14 2014 us=823326 172.17.144.54:43854 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com

Edit:"OpenVPN read/write"

Thu Feb 13 12:34:14 2014 us=885089 172.17.144.54:43854 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Feb 13 12:34:14 2014 us=885286 172.17.144.54:43854 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 13 12:34:14 2014 us=885389 172.17.144.54:43854 NOTE: --mute triggered...
WWRRThu Feb 13 12:34:14 2014 us=886699 172.17.144.54:43854 3 variation(s) on previous 5 message(s) suppressed by --mute
Thu Feb 13 12:34:14 2014 us=886824 172.17.144.54:43854 [netgear] Peer Connection Initiated with [AF_INET]172.17.144.54:43854
Thu Feb 13 12:34:14 2014 us=914390 netgear/172.17.144.54:43854 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_5428458863db437e117a1915b12ccfd3.tmp
Thu Feb 13 12:34:14 2014 us=914642 netgear/172.17.144.54:43854 MULTI: no dynamic or static remote --ifconfig address is available for netgear/172.17.144.54:43854
WRThu Feb 13 12:34:16 2014 us=548779 netgear/172.17.144.54:43854 PUSH: Received control message: 'PUSH_REQUEST'
Thu Feb 13 12:34:16 2014 us=548888 netgear/172.17.144.54:43854 send_push_reply(): safe_cap=940
Thu Feb 13 12:34:16 2014 us=549065 netgear/172.17.144.54:43854 SENT CONTROL [netgear]: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 120' (status=1)

Edit:"OpenVPN read/write"

Thu Feb 13 12:35:54 2014 us=593911 MULTI: multi_create_instance called
Thu Feb 13 12:35:54 2014 us=594099 172.17.144.169:51235 Re-using SSL/TLS context
Thu Feb 13 12:35:54 2014 us=594259 172.17.144.169:51235 LZO compression initialized
Thu Feb 13 12:35:54 2014 us=594609 172.17.144.169:51235 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Feb 13 12:35:54 2014 us=594686 172.17.144.169:51235 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
RThu Feb 13 12:35:54 2014 us=594834 172.17.144.169:51235 TLS: Initial packet from [AF_INET]172.17.144.169:51235, sid=767fa478 5491a3eb

Edit:"OpenVPN read/write"

Thu Feb 13 12:35:54 2014 us=732620 172.17.144.169:51235 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
Thu Feb 13 12:35:54 2014 us=734369 172.17.144.169:51235 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com

Edit:"OpenVPN read/write"

Thu Feb 13 12:35:54 2014 us=834306 172.17.144.169:51235 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Feb 13 12:35:54 2014 us=834423 172.17.144.169:51235 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 13 12:35:54 2014 us=834486 172.17.144.169:51235 NOTE: --mute triggered...
WWRRThu Feb 13 12:35:54 2014 us=836841 172.17.144.169:51235 3 variation(s) on previous 5 message(s) suppressed by --mute
Thu Feb 13 12:35:54 2014 us=836935 172.17.144.169:51235 [netgear] Peer Connection Initiated with [AF_INET]172.17.144.169:51235
Thu Feb 13 12:35:54 2014 us=864274 netgear/172.17.144.169:51235 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_8b01e4b485b090a22afc75d1eebfc429.tmp
Thu Feb 13 12:35:54 2014 us=864519 netgear/172.17.144.169:51235 MULTI: no dynamic or static remote --ifconfig address is available for netgear/172.17.144.169:51235
WWRThu Feb 13 12:35:56 2014 us=341792 netgear/172.17.144.169:51235 PUSH: Received control message: 'PUSH_REQUEST'
Thu Feb 13 12:35:56 2014 us=341897 netgear/172.17.144.169:51235 send_push_reply(): safe_cap=940
Thu Feb 13 12:35:56 2014 us=342073 netgear/172.17.144.169:51235 SENT CONTROL [netgear]: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 120' (status=1)

Edit:"OpenVPN read/write"

Thu Feb 13 12:36:23 2014 us=366100 netgear/172.17.144.169:51235 MULTI: Learn: 00:ff:51:1b:cb:fc -> netgear/172.17.144.169:51235

Edit:"OpenVPN read/write"

Thu Feb 13 12:40:33 2014 us=346257 event_wait : Interrupted system call (code=4)
Thu Feb 13 12:40:33 2014 us=348567 TCP/UDP: Closing socket
Thu Feb 13 12:40:33 2014 us=348835 Closing TUN/TAP interface
Thu Feb 13 12:40:33 2014 us=349078 SIGTERM[hard,] received, process exiting
Thu Feb 13 12:40:34 2014 us=872559 OpenVPN 2.3.2 powerpc-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Feb 14 2014
Thu Feb 13 12:40:34 2014 us=873058 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Feb 13 12:40:34 2014 us=873943 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Feb 13 12:40:34 2014 us=924806 Diffie-Hellman initialized with 1024 bit key
Thu Feb 13 12:40:34 2014 us=927047 WARNING: file '/tmp/openvpn/server.key' is group or others accessible
Thu Feb 13 12:40:34 2014 us=928994 TLS-Auth MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Feb 13 12:40:34 2014 us=929228 Socket Buffers: R=[32767->65534] S=[32767->65534]
Thu Feb 13 12:40:34 2014 us=929409 TUN/TAP device tap0 opened
Thu Feb 13 12:40:34 2014 us=929535 TUN/TAP TX queue length set to 100
Thu Feb 13 12:40:34 2014 us=929817 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Thu Feb 13 12:40:34 2014 us=932234 UDPv4 link local (bound): [undef]
Thu Feb 13 12:40:34 2014 us=932395 UDPv4 link remote: [undef]
Thu Feb 13 12:40:34 2014 us=932521 MULTI: multi_init called, r=256 v=256
Thu Feb 13 12:40:34 2014 us=932868 Initialization Sequence Completed
Thu Feb 13 12:40:57 2014 us=317616 MULTI: multi_create_instance called
Thu Feb 13 12:40:57 2014 us=317870 172.17.144.54:46602 Re-using SSL/TLS context
Thu Feb 13 12:40:57 2014 us=318031 172.17.144.54:46602 LZO compression initialized
Thu Feb 13 12:40:57 2014 us=318553 172.17.144.54:46602 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Feb 13 12:40:57 2014 us=318635 172.17.144.54:46602 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
RThu Feb 13 12:40:57 2014 us=318818 172.17.144.54:46602 TLS: Initial packet from [AF_INET]172.17.144.54:46602, sid=0396703a a9ecbbbf

Edit:"OpenVPN read/write"

Thu Feb 13 12:40:57 2014 us=413485 172.17.144.54:46602 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
Thu Feb 13 12:40:57 2014 us=415315 172.17.144.54:46602 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com

Edit:"OpenVPN read/write"

RThu Feb 13 12:40:57 2014 us=478450 172.17.144.54:46602 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Feb 13 12:40:57 2014 us=478643 172.17.144.54:46602 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 13 12:40:57 2014 us=478769 172.17.144.54:46602 NOTE: --mute triggered...
WWRRThu Feb 13 12:40:57 2014 us=480608 172.17.144.54:46602 3 variation(s) on previous 5 message(s) suppressed by --mute
Thu Feb 13 12:40:57 2014 us=480736 172.17.144.54:46602 [netgear] Peer Connection Initiated with [AF_INET]172.17.144.54:46602
Thu Feb 13 12:40:57 2014 us=507888 netgear/172.17.144.54:46602 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_51501c792665af881c63d49bc00d7202.tmp
Thu Feb 13 12:40:57 2014 us=508137 netgear/172.17.144.54:46602 MULTI: no dynamic or static remote --ifconfig address is available for netgear/172.17.144.54:46602
WRThu Feb 13 12:40:59 2014 us=920119 netgear/172.17.144.54:46602 PUSH: Received control message: 'PUSH_REQUEST'
Thu Feb 13 12:40:59 2014 us=920294 netgear/172.17.144.54:46602 send_push_reply(): safe_cap=940
Thu Feb 13 12:40:59 2014 us=920477 netgear/172.17.144.54:46602 SENT CONTROL [netgear]: 'PUSH_REPLY,route-gateway dhcp,ping 10,ping-restart 120' (status=1)

Edit:"OpenVPN read/write"

Thu Feb 13 12:42:33 2014 us=848853 MULTI: multi_create_instance called
Thu Feb 13 12:42:33 2014 us=849048 172.17.144.169:55436 Re-using SSL/TLS context
Thu Feb 13 12:42:33 2014 us=849201 172.17.144.169:55436 LZO compression initialized
Thu Feb 13 12:42:33 2014 us=849556 172.17.144.169:55436 Control Channel MTU parms [ L:1590 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Feb 13 12:42:33 2014 us=849634 172.17.144.169:55436 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
RThu Feb 13 12:42:33 2014 us=849782 172.17.144.169:55436 TLS: Initial packet from [AF_INET]172.17.144.169:55436, sid=b8a0c1d0 cdfd3622

Edit:"OpenVPN read/write"

Thu Feb 13 12:42:33 2014 us=954976 172.17.144.169:55436 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
Thu Feb 13 12:42:33 2014 us=956763 172.17.144.169:55436 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com

Edit:"OpenVPN read/write"

Thu Feb 13 12:42:34 2014 us=20830 172.17.144.169:55436 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Feb 13 12:42:34 2014 us=21019 172.17.144.169:55436 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Feb 13 12:42:34 2014 us=21140 172.17.144.169:55436 NOTE: --mute triggered...
WWRRThu Feb 13 12:42:34 2014 us=55603 172.17.144.169:55436 3 variation(s) on previous 5 message(s) suppressed by --mute
Thu Feb 13 12:42:34 2014 us=55682 172.17.144.169:55436 [netgear] Peer Connection Initiated with [AF_INET]172.17.144.169:55436

the status of client after connection

tony@tony:/etc/openvpn$ ifconfig tap0
tap0      Link encap:Ethernet  HWaddr 16:8b:c4:be:d3:3a  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:147 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:29721 (29.7 KB)  TX bytes:0 (0.0 B)

Tap0 can not ping router.It seems that tap0 doesn't get ip address from router. The output " RX bytes:29721 (29.7 KB) TX bytes:0 (0.0 B)" is very confusing for me.Can someone explain it?If you need other information,please let me know.Thank you in advance!

tony.he

debbie10t wrote
tony.he wroteserver configure file:
dev tap0
server-bridge
Do you require a bridge network and have you created a bridge with your server operating system ? See Help for more information on Bridge.

Yes,I have created a bridge . With same server configuration, the client run normally on Windows platform.

tony.he

debbie10t wroteTap0 does not get an address as it is supposed to be in the bridge.

Actully,I do not much quite understand what you said.Do you mean this is layer 2 packet?But if client need not get address from vpn server,how it can communcate with others in same local subnet ?

I change client configure file to this(add the last line)

client
dev tap
proto udp
remote  172.17.144.41 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5 
ifconfig  192.168.1.100  255.255.255.0

then

tony@tony:/tmp/openvpn$ ifconfig -a
eth0      Link encap:Ethernet  HWaddr 20:89:84:37:92:c3  
          inet addr:172.17.144.54  Bcast:172.17.144.255  Mask:255.255.255.0
          inet6 addr: 2018:1:3:0:2289:84ff:fe37:92c3/64 Scope:Global
          inet6 addr: fe80::2289:84ff:fe37:92c3/64 Scope:Link
          inet6 addr: 2018:1:3:0:99f6:503e:6f85:d80c/64 Scope:Global
          inet6 addr: 2018:1:3:0:c93c:61aa:c0a:5adf/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12087588 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6920119 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:7443807314 (7.4 GB)  TX bytes:700607932 (700.6 MB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:67661 errors:0 dropped:0 overruns:0 frame:0
          TX packets:67661 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:105387296 (105.3 MB)  TX bytes:105387296 (105.3 MB)

tap0      Link encap:Ethernet  HWaddr 9e:8d:41:07:ed:6a  
          inet addr:192.168.1.100  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::9c8d:41ff:fe07:ed6a/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:7 errors:0 dropped:0 overruns:0 frame:0
          TX packets:45 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:1505 (1.5 KB)  TX bytes:8195 (8.1 KB)
tony@tony:~$ ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_req=1 ttl=64 time=2.54 ms
64 bytes from 192.168.1.1: icmp_req=2 ttl=64 time=1.10 ms
64 bytes from 192.168.1.1: icmp_req=3 ttl=64 time=1.14 ms
64 bytes from 192.168.1.1: icmp_req=4 ttl=64 time=1.00 ms
64 bytes from 192.168.1.1: icmp_req=5 ttl=64 time=0.922 ms
64 bytes from 192.168.1.1: icmp_req=6 ttl=64 time=1.17 ms
64 bytes from 192.168.1.1: icmp_req=7 ttl=64 time=1.02 ms
64 bytes from 192.168.1.1: icmp_req=8 ttl=64 time=1.04 ms
64 bytes from 192.168.1.1: icmp_req=9 ttl=64 time=1.03 ms
64 bytes from 192.168.1.1: icmp_req=10 ttl=64 time=0.942 ms
64 bytes from 192.168.1.1: icmp_req=11 ttl=64 time=0.898 ms

and I tested the pc can communicate with other pc behind the router on which vpn server runs.
Do you have any comment?Thank you very much!

tony.he

The comment following in the Sample config file explain the reason.

# Configure server mode for ethernet bridging
# using a DHCP-proxy, where clients talk
# to the OpenVPN server-side DHCP server
# to receive their IP address allocation
# and DNS server addresses. You must first use
# your OS's bridging capability to bridge the TAP
# interface with the ethernet NIC interface.
# Note: this mode only works on clients (such as
# Windows), where the client-side TAP adapter is
# bound to a DHCP client.
;server-bridge

So would someone tell me how to make client-side TAP adapter bound to a DHCP client in Linux platform?

tony.he

debbie10t wrotePlease post ifconfig for both server and client.

server(before vpn is run)

[WNDR470]#ifconfig -a
ath0      Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2863 errors:0 dropped:2659 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1142337 (1.0 MiB)

ath1      Link encap:Ethernet  HWaddr 00:8E:F2:63:16:22
          inet6 addr: fe80::28e:f2ff:fe63:1622/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1094 errors:0 dropped:2659 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:412438 (402.7 KiB)

br0       Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:341 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2449 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:42615 (41.6 KiB)  TX bytes:537772 (525.1 KiB)

eth0      Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12311 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2782 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1852210 (1.7 MiB)  TX bytes:607191 (592.9 KiB)
          Interrupt:50

eth0.1    Link encap:Ethernet  HWaddr 00:8E:F2:63:16:21
          inet addr:172.17.144.41  Bcast:172.17.144.255  Mask:255.255.255.0
          inet6 addr: fe80::28e:f2ff:fe63:1621/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:11970 errors:0 dropped:0 overruns:0 frame:0
          TX packets:323 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1635877 (1.5 MiB)  TX bytes:58619 (57.2 KiB)

eth0.2    Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:341 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2453 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:43979 (42.9 KiB)  TX bytes:547992 (535.1 KiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:9813 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9813 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:557630 (544.5 KiB)  TX bytes:557630 (544.5 KiB)

sit0      Link encap:IPv6-in-IPv4
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wifi0     Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:777935 errors:0 dropped:0 overruns:0 frame:0
          TX packets:81092 errors:3554 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:19 Memory:d7340000-d7360000

wifi1     Link encap:Ethernet  HWaddr 00:8E:F2:63:16:22
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:294657 errors:0 dropped:0 overruns:0 frame:0
          TX packets:71162 errors:352 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:20 Memory:d7380000-d73a0000

client(before vpn is run)

root@tony:/etc/openvpn$ ifconfig -a
eth0      Link encap:Ethernet  HWaddr 20:89:84:37:92:c3  
          inet addr:172.17.144.54  Bcast:172.17.144.255  Mask:255.255.255.0
          inet6 addr: 2018:1:3:0:2289:84ff:fe37:92c3/64 Scope:Global
          inet6 addr: fe80::2289:84ff:fe37:92c3/64 Scope:Link
          inet6 addr: 2018:1:3:0:9489:acb4:4289:68ee/64 Scope:Global
          inet6 addr: 2018:1:3:0:38a1:1c88:187e:77eb/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:391237 errors:0 dropped:651 overruns:0 frame:0
          TX packets:297050 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:243583855 (243.5 MB)  TX bytes:36205337 (36.2 MB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:70323 errors:0 dropped:0 overruns:0 frame:0
          TX packets:70323 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:101263960 (101.2 MB)  TX bytes:101263960 (101.2 MB)

wlan0     Link encap:Ethernet  HWaddr 9c:2a:70:3e:d1:aa  
          inet6 addr: fe80::9e2a:70ff:fe3e:d1aa/64 Scope:Link
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:63 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:254 (254.0 B)  TX bytes:14894 (14.8 KB)

server(after vpn is run)

[WNDR470]#ifconfig -a
ath0      Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2744 errors:0 dropped:2533 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1094856 (1.0 MiB)

ath1      Link encap:Ethernet  HWaddr 00:8E:F2:63:16:22
          inet6 addr: fe80::28e:f2ff:fe63:1622/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1060 errors:0 dropped:2533 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:399620 (390.2 KiB)

br0       Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:322 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2342 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:40608 (39.6 KiB)  TX bytes:514767 (502.7 KiB)

eth0      Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:6682 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2530 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:984885 (961.8 KiB)  TX bytes:555384 (542.3 KiB)
          Interrupt:50

eth0.1    Link encap:Ethernet  HWaddr 00:8E:F2:63:16:21
          inet addr:172.17.144.41  Bcast:172.17.144.255  Mask:255.255.255.0
          inet6 addr: fe80::28e:f2ff:fe63:1621/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:6360 errors:0 dropped:0 overruns:0 frame:0
          TX packets:178 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:849441 (829.5 KiB)  TX bytes:30245 (29.5 KiB)

eth0.2    Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          inet6 addr: fe80::28e:f2ff:fe63:1620/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:322 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2346 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:41896 (40.9 KiB)  TX bytes:524559 (512.2 KiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:9099 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9099 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:524581 (512.2 KiB)  TX bytes:524581 (512.2 KiB)

sit0      Link encap:IPv6-in-IPv4
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

tap0      Link encap:Ethernet  HWaddr 6A:23:71:10:65:7B
          inet6 addr: fe80::6823:71ff:fe10:657b/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:106 errors:0 dropped:1 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:22533 (22.0 KiB)

wifi0     Link encap:Ethernet  HWaddr 00:8E:F2:63:16:20
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:743901 errors:0 dropped:0 overruns:0 frame:0
          TX packets:77438 errors:3427 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:19 Memory:d7340000-d7360000

wifi1     Link encap:Ethernet  HWaddr 00:8E:F2:63:16:22
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:281109 errors:0 dropped:0 overruns:0 frame:0
          TX packets:67915 errors:343 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:20 Memory:d7380000-d73a0000

client(after vpn is run)

root@tony:/etc/openvpn# ifconfig -a
eth0      Link encap:Ethernet  HWaddr 20:89:84:37:92:c3  
          inet addr:172.17.144.54  Bcast:172.17.144.255  Mask:255.255.255.0
          inet6 addr: 2018:1:3:0:2289:84ff:fe37:92c3/64 Scope:Global
          inet6 addr: fe80::2289:84ff:fe37:92c3/64 Scope:Link
          inet6 addr: 2018:1:3:0:9489:acb4:4289:68ee/64 Scope:Global
          inet6 addr: 2018:1:3:0:38a1:1c88:187e:77eb/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:448499 errors:0 dropped:756 overruns:0 frame:0
          TX packets:343242 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:275191107 (275.1 MB)  TX bytes:41192557 (41.1 MB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:70776 errors:0 dropped:0 overruns:0 frame:0
          TX packets:70776 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:101329461 (101.3 MB)  TX bytes:101329461 (101.3 MB)

tap0      Link encap:Ethernet  HWaddr 42:7e:b9:3d:e7:52  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:15 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:3225 (3.2 KB)  TX bytes:0 (0.0 B)

wlan0     Link encap:Ethernet  HWaddr 9c:2a:70:3e:d1:aa  
          inet6 addr: fe80::9e2a:70ff:fe3e:d1aa/64 Scope:Link
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:4 errors:0 dropped:0 overruns:0 frame:0
          TX packets:63 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:254 (254.0 B)  TX bytes:14894 (14.8 KB)

tony.he

debbie10t wrote
tony.he wroteServer config:
server-bridge
Using server-bridge without any parameters will cause OpenVPN to act as a DHCP proxy, which will cause your clients to retieve a DHCP address for their tap adapters from your server side DHCP server (If you have one).

If this is not what you were expecting then use the full command:
The Manual wrote--server-bridge gateway netmask pool-start-IP pool-end-IP
Note that in this way gateway is the default gateway for the server side LAN not the IP address of the bridge interface (unless the bridge interface is the LAN gateway).

Hi,debbie10t,

tony.he

debbie10t wrote
tony.he wroteServer config:
server-bridge
Using server-bridge without any parameters will cause OpenVPN to act as a DHCP proxy, which will cause your clients to retieve a DHCP address for their tap adapters from your server side DHCP server (If you have one).

If this is not what you were expecting then use the full command:
The Manual wrote--server-bridge gateway netmask pool-start-IP pool-end-IP
Note that in this way gateway is the default gateway for the server side LAN not the IP address of the bridge interface (unless the bridge interface is the LAN gateway).

sorry for last post unfinshed。
Hi，debbie10t,
Firstly,I really want to say thank you very much for your patience!!!

--server-bridge gateway netmask pool-start-IP pool-end-IP

,I have tested this can work.
It's ok if for personal purpose.However we are doing a project,our customer asked us to use

server-bridge

.I think vpn client on Windows can get ip address,so vpn client on Linux also can get ip address.Am
I right? Please consider what I posted bofore

So would someone tell me how to make client-side TAP adapter bound to a DHCP client on Linux platform?

.Thanks again.