kidboy
HI, i have a openvpn with bridge config for clients, every client has certificate different. But i was find in openvpn.log each client in the same IP valid use the same mac address. With this, my application duplicate packages. Someone know how to separate clients from different mac ?
Design: _____ Client 3
/
Server ----IP Valid ------ Client 1
\_____ Client 2
Every client logs this:
Fri Aug 22 08:56:20 2014 XXXXXXXXX27/XXX.XXX.23.170:49537 MULTI: Learn: 00:ff:70:bd:3d:5b -> XXXXXXXXX27/179.254.23.170:49537
Fri Aug 22 08:56:20 2014 XXXXXXXXX89/XXX.XXX.23.170:49652 MULTI: Learn: 00:ff:70:bd:3d:5b -> XXXXXXXXX89/179.254.23.170:49652
Fri Aug 22 08:56:21 2014 XXXXXXXXX27/XXX.XXX.23.170:49537 MULTI: Learn: 00:ff:70:bd:3d:5b -> XXXXXXXXX27/179.254.23.170:49537
My server config:
dev tap
daemon
port 1194
proto tcp-server
persist-tun
persist-key
verb 3
log-append /var/log/openvpn.log
status /var/log/openvpn-status.log
client-to-client
tls-server
tls-auth auth.key
mode server
#duplicate-cn
ifconfig-pool-persist ipp.txt
#ifconfig-pool 10.50.3.10 10.50.3.254 255.255.255.0
dh keys/dh1024.pem
ca keys/ca.crt
cert keys/Firewall.crt
key keys/Firewall.key
server-bridge 10.50.3.1 255.255.255.0 10.50.3.10 10.50.3.254
push "redirect-gateway def1"
push "dhcp-option DNS 10.50.2.6"
script-security 3 system
up "/etc/openvpn/start.sh"
down "/etc/openvpn/stop.sh"
push "route 10.50.1.0 255.255.255.0"
Client Config:
dev tap
proto tcp-client
client
tls-client
tls-auth auth.key
ns-cert-type server
persist-key
persist-tun
nobind
pull
redirect-gateway def1
route 10.50.0.0 255.255.0.0
nobind
remote XXX.XXX.XXX.XXX
script-security 3
verb 3
ca ca.crt
cert difcertXX.crt
key difcertXX.key
How to solve this ?
