bridging MULTI: bad source address from client, packet dropp

nroberto13

Hi,

I have the following environment:

openvpn server vers 2.2.2-2, on openwrt 12.09, running on netgear wndr3800
openvpn client A vers 2.2.2-2, on openwrt 12.09, running on netgear wndr3700v2
openvpn client B vers 2.3.4-1, on openwrt 14.07, running on netgear wndr3800

vpn is working fine between server and client A, can reach all the workstation on both networks. it doesn't work between server and client B. before migrating client B to vers 2.3.4-1, it was on the same vers 2.2.2-2 and was working fine.

client B has NO error messages, but server throws the following:

MULTI: bad source address from client [ff:88:53:2e:88:86], packet dropped

server conf:
option enabled 1
option tls_server 1
option port 1194
option proto udp
option dev tap
option ca /etc/config/vpn.srv/ca.crt
option cert /etc/config/vpn.srv/srv.crt
option key /etc/config/vpn.srv/srv.key
option dh /etc/config/vpn.srv/dh1024.pem
option ifconfig_pool_persist /tmp/openvpn_ipp.txt
option server_bridge "192.168.3.1 255.255.240.0 192.168.2.1 192.168.15.254"
option client_config_dir /etc/config/vpn.srv/ccd
option client_to_client 1
option keepalive "10 120"
option comp_lzo 0
option persist_key 1
option persist_tun 1
option status /tmp/openvpn-status.log
option verb 6
option mute 20
option log /tmp/openvpn.log

client conf:
option enabled 1
option client 1
option remote <openvpn_server>
option port 1194
option proto udp
option dev tap
option ca /etc/config/vpn.clnt/ca.crt
option cert /etc/config/vpn.clnt/clnt.crt
option key /etc/config/vpn.clnt/clnt.key
option comp_lzo no
option keepalive "10 120"
option status /tmp/openvpn.status
option persist-key 1
option persist-tun 1
option verb 7
option mute 20
option nobind 1
option tun-mtu 1500
option log /tmp/openvpn.log

what I found so far on the net is related to routing, but having eth bridge, don't think it could be in my case.

any advise is much appreciated.

Thanks

innogen

nroberto13 wrote any advise is much appreciated.

Any advice? OK, here's one. Please surf to https://lists.sourceforge.net/lists/listinfo/openvpn-users, subscribe to the mailing list and then re-post your question there. You will get a response from the OpenVPN experts in no time.

And here's my observation: you made a duplicate post. Please ask the moderator to delete the other one.