I'm running a VPN on a Pi model B+, it runs fine, I can connect my windows machine to it without a problem. I have a Pi2 running Raspbian that I use as a media box, I am trying to connect to the VPN and am having a small issue. This is all on my home network, the Pi2 uses wifi to connect to the router, VPN Pi uses ethernet cable.
So, the problem is that I get this message
Thu Jun 18 23:21:08 2015 ERROR: Linux route add command failed: external program exited with error status: 4
SIOCADDRT: File exists
Thu Jun 18 23:21:08 2015 ERROR: Linux route add command failed: external program exited with error status: 7
Thu Jun 18 23:21:08 2015 Initialization Sequence Completed
What does it mean and how do I fix it?
So far I've seen that it's trying to initiate a point-to-point connection and my server is set to client-to-client but I can't find where to alter the Pi2Client so that it connects as client-to-client, as a possible solution.
Server config
local 192.168.1.144
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/Monochrome.crt
key /etc/openvpn/easy-rsa/keys/Monochrome.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# add route to Client routing table for OpenVPN server
push "route 10.8.0.1 255.255.255.255"
# add route to Client routing table for OpenVPN subnet
push "route 10.8.0.0 255.255.255.0"
# local subnet
push "route 192.168.1.144 255.255.255.0"
#set primary DNS to SOHO Router
push "dhcp-option DNS 8.8.8.8" #IP is DNS IP
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 2
Client config
client
dev tun
proto udp
remote 192.168.1.144 1194
auth-user-pass /etc/openvpn/vpnonline-password.txt
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1
mute 20
Command line chatter
[COMMAND LINE CHATTER]
Thu Jun 18 23:20:58 2015 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload
20110424-2 (2.2RC2)] built on Dec 1 2014
Thu Jun 18 23:20:58 2015 WARNING: file '/etc/openvpn/vpnonline-password.txt' is group or others accessible
Thu Jun 18 23:20:58 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Enter Private Key Password:
Thu Jun 18 23:21:05 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Jun 18 23:21:05 2015 Control Channel Authentication: tls-auth using INLINE static key file
Thu Jun 18 23:21:05 2015 LZO compression initialized
Thu Jun 18 23:21:05 2015 UDPv4 link local: [undef]
Thu Jun 18 23:21:05 2015 UDPv4 link remote: [AF_INET]192.168.1.144:1194
Thu Jun 18 23:21:06 2015 [Monochrome] Peer Connection Initiated with [AF_INET]192.168.1.144:1194
Thu Jun 18 23:21:08 2015 TUN/TAP device tun0 opened
Thu Jun 18 23:21:08 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jun 18 23:21:08 2015 /sbin/ifconfig tun0 10.8.0.14 pointopoint 10.8.0.13 mtu 1500
Thu Jun 18 23:21:08 2015 WARNING: potential route subnet conflict between local LAN [192.168.1.0/255.255.255.0] and remote VPN
[192.168.1.0/255.255.255.0]
route: netmask doesn't match route address
Usage: route [-nNvee] [-FC] [<AF>] List kernel routing tables
route [-v] [-FC] {add|del|flush} ... Modify routing table for AF.
route {-h|--help} [<AF>] Detailed usage syntax for specified AF.
route {-V|--version} Display version/author and exit.
-v, --verbose be verbose
-n, --numeric don't resolve names
-e, --extend display other/more information
-F, --fib display Forwarding Information Base (default)
-C, --cache display routing cache instead of FIB
<AF>=Use '-A <af>' or '--<af>'; default: inet
List of possible address families (which support routing):
inet (DARPA Internet) inet6 (IPv6) ax25 (AMPR AX.25)
netrom (AMPR NET/ROM) ipx (Novell IPX) ddp (Appletalk DDP)
x25 (CCITT X.25)
Thu Jun 18 23:21:08 2015 ERROR: Linux route add command failed: external program exited with error status: 4
SIOCADDRT: File exists
Thu Jun 18 23:21:08 2015 ERROR: Linux route add command failed: external program exited with error status: 7
Thu Jun 18 23:21:08 2015 Initialization Sequence Completed
Thu Jun 18 23:20:58 2015 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload
20110424-2 (2.2RC2)] built on Dec 1 2014
Thu Jun 18 23:20:58 2015 WARNING: file '/etc/openvpn/vpnonline-password.txt' is group or others accessible
Thu Jun 18 23:20:58 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Enter Private Key Password:
Thu Jun 18 23:21:05 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Jun 18 23:21:05 2015 Control Channel Authentication: tls-auth using INLINE static key file
Thu Jun 18 23:21:05 2015 LZO compression initialized
Thu Jun 18 23:21:05 2015 UDPv4 link local: [undef]
Thu Jun 18 23:21:05 2015 UDPv4 link remote: [AF_INET]192.168.1.144:1194
Thu Jun 18 23:21:06 2015 [Monochrome] Peer Connection Initiated with [AF_INET]192.168.1.144:1194
Thu Jun 18 23:21:08 2015 TUN/TAP device tun0 opened
Thu Jun 18 23:21:08 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jun 18 23:21:08 2015 /sbin/ifconfig tun0 10.8.0.14 pointopoint 10.8.0.13 mtu 1500
Thu Jun 18 23:21:08 2015 WARNING: potential route subnet conflict between local LAN [192.168.1.0/255.255.255.0] and remote VPN
[192.168.1.0/255.255.255.0]
route: netmask doesn't match route address
Usage: route [-nNvee] [-FC] [<AF>] List kernel routing tables
route [-v] [-FC] {add|del|flush} ... Modify routing table for AF.
route {-h|--help} [<AF>] Detailed usage syntax for specified AF.
route {-V|--version} Display version/author and exit.
-v, --verbose be verbose
-n, --numeric don't resolve names
-e, --extend display other/more information
-F, --fib display Forwarding Information Base (default)
-C, --cache display routing cache instead of FIB
<AF>=Use '-A <af>' or '--<af>'; default: inet
List of possible address families (which support routing):
inet (DARPA Internet) inet6 (IPv6) ax25 (AMPR AX.25)
netrom (AMPR NET/ROM) ipx (Novell IPX) ddp (Appletalk DDP)
x25 (CCITT X.25)
Thu Jun 18 23:21:08 2015 ERROR: Linux route add command failed: external program exited with error status: 4
SIOCADDRT: File exists
Thu Jun 18 23:21:08 2015 ERROR: Linux route add command failed: external program exited with error status: 7
Thu Jun 18 23:21:08 2015 Initialization Sequence Completed
Syslog
[SYSLOG]
Jun 18 23:21:08 Klein ifplugd(tun0)[2948]: ifplugd 0.28 initializing.
Jun 18 23:21:08 Klein ifplugd(tun0)[2948]: Using interface tun0/00:00:00:00:00:00 with driver <tun> (version: 1.6)
Jun 18 23:21:08 Klein ifplugd(tun0)[2948]: Using detection mode: SIOCETHTOOL
Jun 18 23:21:08 Klein ifplugd(tun0)[2948]: Initialization complete, link beat detected.
Jun 18 23:21:08 Klein ifplugd(tun0)[2948]: Executing '/etc/ifplugd/ifplugd.action tun0 up'.
Jun 18 23:21:08 Klein ifplugd(tun0)[2948]: client: Ignoring unknown interface tun0=tun0.
Jun 18 23:21:08 Klein ifplugd(tun0)[2948]: Program executed successfully.
Jun 18 23:21:09 Klein ntpd[2313]: Listen normally on 9 tun0 10.8.0.14 UDP 123
Jun 18 23:21:09 Klein ntpd[2313]: 208.53.158.34 interface 192.168.1.192 -> 10.8.0.14
Jun 18 23:21:09 Klein ntpd[2313]: 195.186.1.101 interface 192.168.1.192 -> 10.8.0.14
Jun 18 23:21:09 Klein ntpd[2313]: 143.210.16.201 interface 192.168.1.192 -> 10.8.0.14
Jun 18 23:21:09 Klein ntpd[2313]: 104.131.51.97 interface 192.168.1.192 -> 10.8.0.14
Jun 18 23:21:09 Klein ntpd[2313]: peers refreshed
Jun 18 23:21:55 Klein avahi-daemon[2385]: Withdrawing workstation service for tun0.
Jun 18 23:21:55 Klein ifplugd(tun0)[2948]: Link beat lost.
Jun 18 23:21:56 Klein ifplugd(tun0)[2948]: Exiting.
Jun 18 23:21:57 Klein ntpd[2313]: Deleting interface #9 tun0, 10.8.0.14#123, interface stats: received=1, sent=4, dropped=0,
active_time=48 secs
Jun 18 23:21:57 Klein ntpd[2313]: 104.131.51.97 interface 10.8.0.14 -> (none)
Jun 18 23:21:57 Klein ntpd[2313]: 143.210.16.201 interface 10.8.0.14 -> (none)
Jun 18 23:21:57 Klein ntpd[2313]: 195.186.1.101 interface 10.8.0.14 -> (none)
Jun 18 23:21:57 Klein ntpd[2313]: 208.53.158.34 interface 10.8.0.14 -> (none)
Jun 18 23:21:57 Klein ntpd[2313]: peers refreshed
Any help would be much appreciated!
