Weird Subnet Issue

chebbs

grep -vE '^#|^;|^$' server.con didn't work on my server, so I cannot give the config. Its on Centos 5 32 bit.

I made this server for a friend to connect to, and he is getting this error:

n 15 09:28:13 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 15 09:28:13 2015 [server] Peer Connection Initiated with [AF_INET](takenoutip):1194
Thu Jan 15 09:28:16 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Jan 15 09:28:16 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.14 255.255.255.0'
Thu Jan 15 09:28:16 2015 OPTIONS IMPORT: timers and/or timeouts modified
Thu Jan 15 09:28:16 2015 OPTIONS IMPORT: --ifconfig/up options modified
Thu Jan 15 09:28:16 2015 OPTIONS IMPORT: route options modified
Thu Jan 15 09:28:16 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Jan 15 09:28:16 2015 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Thu Jan 15 09:28:16 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jan 15 09:28:16 2015 There is a problem in your selection of --ifconfig endpoints [local=10.8.0.14, remote=255.255.255.0]. The local and remote VPN endpoints must exist within the same 255.255.255.252 subnet. This is a limitation of --dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.
Thu Jan 15 09:28:16 2015 Exiting due to fatal error

This is the config file for the server: client
dev tun
proto udp
remote IPHERE 1194
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
reneg-sec 0
verb 3

Any obvious answers?

maikcat

ok lets see...

grep -vE '^#|^;|^$' server.con didn't work on my server

its server.conf not server.con , always assuming that there is a config named server.conf.

This is the config file for the server: client
dev tun
proto udp
remote IPHERE 1194
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
reneg-sec 0
verb 3

the client in the first line is part of the config?
if yes then this is your SERVER config.

please clarify...

to your error now

hu Jan 15 09:28:16 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1, [b] topology net30 [/b] ,ping 5,ping-restart 30,ifconfig 10.8.0.14 255.255.255.0'

are you using topology ptp with subnet mode addresses?

Michael.

Traffic

chebbs wroteThu Jan 15 09:28:16 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.14 255.255.255.0'
...
Thu Jan 15 09:28:16 2015 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Thu Jan 15 09:28:16 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jan 15 09:28:16 2015 There is a problem in your selection of --ifconfig endpoints [local=10.8.0.14, remote=255.255.255.0]. The local and remote VPN endpoints must exist within the same 255.255.255.252 subnet. This is a limitation of --dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.

Probably your server side client-config-file is pushing the wrong IP address ..