Openvpn and sage

kazuma6666

Hello,

I've been trying to setup an openvpn for sage. Sage is our ERP program, and it's french, so I don't get much answers in english forums, but I'm gonna try anyway.

I've setup the openvpn, and it works. It's a bridge setup and I can connect to it and access the network. Sage works too, but it's slow. Like 10 seconds + when doing any request that should take less than a second in local. I suppose it shouldn't take as long. I heard about the setup working with a hardware VPN. But i have no access to the people that did it.

The server is on a windows XP machine.

Here is the server configuration :

port myport
proto udp
dev tap
ca "path\\ca.crt"
cert "path\\server.crt"
key "path\\server.key"
dh "path\\dh1024.pem"
ifconfig-pool-persist ipp.txt
server-bridge 10.0.0.103 255.255.255.0 10.0.0.110 10.0.0.130
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

For security reason I replaced my port by myport and my config path by path.

and the client :

client
dev tap
proto udp
remote serverip port
resolv-retry infinite
nobind
ca "PATH\\ca.crt"
cert "PATH\\01.crt"
key "PATH\\01.key"
ns-cert-type server
comp-lzo
verb 3

same as before, I replaced serverip, port, path for security reason.

As I said before I have no connection problem.
Any idea what could cause the slow transfer times?

kazuma6666

Thanks for the information.
I tried a lot of things to get a working config. I think at first I put the gateway there, as it is written in the tutorials. Then on some example I found someone putting the server IP address in the internat network. So that's what I used and it worked.

Anyway, I'll try changing to the gateway and see if it still works.

kazuma6666

My version is 2.3.4.

I still couldn't try my new config as I don't have time atm to test things too much other work to do. I'll post as soon as I can test for the server-bridge directive.

Thanks for your help!

kazuma6666

Well I tried putting the gateway instead of the serverIP and I could connect, but I couldn't get into my mailbox, or into the server. I think I could not identify myself to the server.

I've checked again in the information on the openvpn directives and I can see this :

Next you you must manually set the IP/netmask on the bridge interface. The gateway and netmask parameters to --server-bridge can be set to either the IP/netmask of the bridge interface, or the IP/netmask of the default gateway/router on the bridged subnet.

http://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html

So it is either the "IP/netmask of the bridge interface" (the openvpn server then) OR "the default gateway/router on the bridged subnet" (the gateway). So both options are correct, but when I try it with the gateway I get problems.

I tried sage with a laptop and my phone set up as a wifi hotspot and it seems to be ok performance wise. Maybe there is a problem with the network connection at the distant site. I'll update as I get more news.