what does --ifconfig really do?

Skaperen

i set up a simple PSK tunnel and found that the tun0 interfaces on each end were not configured. maybe this is because i was using IPv6 and the ifconfig command has to be used in a different way for IPv6? as soon as i configured the interfaces the tunnel was working.

i made this script to start these test tunnels:

#!/bin/bash
n="${1}"
n0=$((n+0))
[[ "${n0}" = "${n}" ]] || exit 1
n1=$((n+1))
n3=$((n+3))
x="fc0${n}::"
screen-bg tun${n} logcmd -d /tmp -s tun${n} openvpn --proto udp6 --tun-ipv6 --verb 4 --local 2a02:348:61:5d75::${n1} --remote 2001:49f0:d002:1::${n3} --dev tun${n} --ifconfig-ipv6 ${x}2 ${x}1 --secret /root/tun.key

screen-bg runs a command in the background under screen and logcmd runs a command logged under script -c.

the log of doing "tun 3":

Script started on Fri Jun 19 11:50:59 2015
11:50:59 [2109] EXECUTING: 'openvpn' '--proto' 'udp6' '--tun-ipv6' '--verb' '4' '--local' '2a02:348:61:5d75::4' '--remote' '2001:49f0:d002:1::6' '--dev' 'tun3' '--ifconfig-ipv6' 'fc03::2' 'fc03::1' '--secret' '/root/tun.key'
Fri Jun 19 11:50:59 2015 us=734351 Current Parameter Settings:
Fri Jun 19 11:50:59 2015 us=734572   config = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=734654   mode = 0
Fri Jun 19 11:50:59 2015 us=734723   persist_config = DISABLED
Fri Jun 19 11:50:59 2015 us=734790   persist_mode = 1
Fri Jun 19 11:50:59 2015 us=734857   show_ciphers = DISABLED
Fri Jun 19 11:50:59 2015 us=734923   show_digests = DISABLED
Fri Jun 19 11:50:59 2015 us=734989   show_engines = DISABLED
Fri Jun 19 11:50:59 2015 us=735055   genkey = DISABLED
Fri Jun 19 11:50:59 2015 us=735122   key_pass_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=735189   show_tls_ciphers = DISABLED
Fri Jun 19 11:50:59 2015 us=735255 Connection profiles [default]:
Fri Jun 19 11:50:59 2015 us=735323   proto = udp6
Fri Jun 19 11:50:59 2015 us=735390   local = '2a02:348:61:5d75::4'
Fri Jun 19 11:50:59 2015 us=735456   local_port = 1194
Fri Jun 19 11:50:59 2015 us=735523   remote = '2001:49f0:d002:1::6'
Fri Jun 19 11:50:59 2015 us=735590   remote_port = 1194
Fri Jun 19 11:50:59 2015 us=735656   remote_float = DISABLED
Fri Jun 19 11:50:59 2015 us=735723   bind_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=735789   bind_local = ENABLED
Fri Jun 19 11:50:59 2015 us=735869   connect_retry_seconds = 5
Fri Jun 19 11:50:59 2015 us=735938   connect_timeout = 10
Fri Jun 19 11:50:59 2015 us=736006   connect_retry_max = 0
Fri Jun 19 11:50:59 2015 us=736073   socks_proxy_server = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=736140   socks_proxy_port = 0
Fri Jun 19 11:50:59 2015 us=736206   socks_proxy_retry = DISABLED
Fri Jun 19 11:50:59 2015 us=736274   tun_mtu = 1500
Fri Jun 19 11:50:59 2015 us=736341   tun_mtu_defined = ENABLED
Fri Jun 19 11:50:59 2015 us=736408   link_mtu = 1500
Fri Jun 19 11:50:59 2015 us=736475   link_mtu_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=736541   tun_mtu_extra = 0
Fri Jun 19 11:50:59 2015 us=736608   tun_mtu_extra_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=736676   mtu_discover_type = -1
Fri Jun 19 11:50:59 2015 us=736743   fragment = 0
Fri Jun 19 11:50:59 2015 us=736809   mssfix = 1450
Fri Jun 19 11:50:59 2015 us=736876   explicit_exit_notification = 0
Fri Jun 19 11:50:59 2015 us=736948 Connection profiles END
Fri Jun 19 11:50:59 2015 us=737017   remote_random = DISABLED
Fri Jun 19 11:50:59 2015 us=737084   ipchange = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=737151   dev = 'tun3'
Fri Jun 19 11:50:59 2015 us=737218   dev_type = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=737285   dev_node = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=737352   lladdr = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=737445   topology = 1
Fri Jun 19 11:50:59 2015 us=737512   tun_ipv6 = ENABLED
Fri Jun 19 11:50:59 2015 us=737580   ifconfig_local = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=737646   ifconfig_remote_netmask = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=737713   ifconfig_noexec = DISABLED
Fri Jun 19 11:50:59 2015 us=737781   ifconfig_nowarn = DISABLED
Fri Jun 19 11:50:59 2015 us=737848   ifconfig_ipv6_local = 'fc03::2'
Fri Jun 19 11:50:59 2015 us=737915   ifconfig_ipv6_netbits = 64
Fri Jun 19 11:50:59 2015 us=737982   ifconfig_ipv6_remote = 'fc03::1'
Fri Jun 19 11:50:59 2015 us=738049   shaper = 0
Fri Jun 19 11:50:59 2015 us=738115   mtu_test = 0
Fri Jun 19 11:50:59 2015 us=738182   mlock = DISABLED
Fri Jun 19 11:50:59 2015 us=738254   keepalive_ping = 0
Fri Jun 19 11:50:59 2015 us=738322   keepalive_timeout = 0
Fri Jun 19 11:50:59 2015 us=738390   inactivity_timeout = 0
Fri Jun 19 11:50:59 2015 us=738457   ping_send_timeout = 0
Fri Jun 19 11:50:59 2015 us=738525   ping_rec_timeout = 0
Fri Jun 19 11:50:59 2015 us=738645   ping_rec_timeout_action = 0
Fri Jun 19 11:50:59 2015 us=738738   ping_timer_remote = DISABLED
Fri Jun 19 11:50:59 2015 us=738807   remap_sigusr1 = 0
Fri Jun 19 11:50:59 2015 us=738874   persist_tun = DISABLED
Fri Jun 19 11:50:59 2015 us=738953   persist_local_ip = DISABLED
Fri Jun 19 11:50:59 2015 us=739020   persist_remote_ip = DISABLED
Fri Jun 19 11:50:59 2015 us=739088   persist_key = DISABLED
Fri Jun 19 11:50:59 2015 us=739155   passtos = DISABLED
Fri Jun 19 11:50:59 2015 us=739222   resolve_retry_seconds = 1000000000
Fri Jun 19 11:50:59 2015 us=739289   username = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=739356   groupname = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=739422   chroot_dir = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=739489   cd_dir = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=739555   writepid = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=739622   up_script = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=739689   down_script = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=739756   down_pre = DISABLED
Fri Jun 19 11:50:59 2015 us=739823   up_restart = DISABLED
Fri Jun 19 11:50:59 2015 us=739889   up_delay = DISABLED
Fri Jun 19 11:50:59 2015 us=739956   daemon = DISABLED
Fri Jun 19 11:50:59 2015 us=740022   inetd = 0
Fri Jun 19 11:50:59 2015 us=740089   log = DISABLED
Fri Jun 19 11:50:59 2015 us=740155   suppress_timestamps = DISABLED
Fri Jun 19 11:50:59 2015 us=740223   nice = 0
Fri Jun 19 11:50:59 2015 us=740295   verbosity = 4
Fri Jun 19 11:50:59 2015 us=740363   mute = 0
Fri Jun 19 11:50:59 2015 us=740430   gremlin = 0
Fri Jun 19 11:50:59 2015 us=740497   status_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=740564   status_file_version = 1
Fri Jun 19 11:50:59 2015 us=740631   status_file_update_freq = 60
Fri Jun 19 11:50:59 2015 us=740698   occ = ENABLED
Fri Jun 19 11:50:59 2015 us=740766   rcvbuf = 65536
Fri Jun 19 11:50:59 2015 us=740833   sndbuf = 65536
Fri Jun 19 11:50:59 2015 us=740899   mark = 0
Fri Jun 19 11:50:59 2015 us=740966   sockflags = 0
Fri Jun 19 11:50:59 2015 us=741033   fast_io = DISABLED
Fri Jun 19 11:50:59 2015 us=741100   lzo = 0
Fri Jun 19 11:50:59 2015 us=741167   route_script = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=741234   route_default_gateway = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=741301   route_default_metric = 0
Fri Jun 19 11:50:59 2015 us=741368   route_noexec = DISABLED
Fri Jun 19 11:50:59 2015 us=741458   route_delay = 0
Fri Jun 19 11:50:59 2015 us=741531   route_delay_window = 30
Fri Jun 19 11:50:59 2015 us=741599   route_delay_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=741666   route_nopull = DISABLED
Fri Jun 19 11:50:59 2015 us=741733   route_gateway_via_dhcp = DISABLED
Fri Jun 19 11:50:59 2015 us=741800   max_routes = 100
Fri Jun 19 11:50:59 2015 us=741867   allow_pull_fqdn = DISABLED
Fri Jun 19 11:50:59 2015 us=741947   management_addr = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=742036   management_port = 0
Fri Jun 19 11:50:59 2015 us=742105   management_user_pass = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=742172   management_log_history_cache = 250
Fri Jun 19 11:50:59 2015 us=742240   management_echo_buffer_size = 100
Fri Jun 19 11:50:59 2015 us=742307   management_write_peer_info_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=742395   management_client_user = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=742466   management_client_group = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=742534   management_flags = 0
Fri Jun 19 11:50:59 2015 us=742601   shared_secret_file = '/root/tun.key'
Fri Jun 19 11:50:59 2015 us=742669   key_direction = 0
Fri Jun 19 11:50:59 2015 us=742737   ciphername_defined = ENABLED
Fri Jun 19 11:50:59 2015 us=742804   ciphername = 'BF-CBC'
Fri Jun 19 11:50:59 2015 us=742871   authname_defined = ENABLED
Fri Jun 19 11:50:59 2015 us=742938   authname = 'SHA1'
Fri Jun 19 11:50:59 2015 us=743008   prng_hash = 'SHA1'
Fri Jun 19 11:50:59 2015 us=743076   prng_nonce_secret_len = 16
Fri Jun 19 11:50:59 2015 us=743143   keysize = 0
Fri Jun 19 11:50:59 2015 us=743210   engine = DISABLED
Fri Jun 19 11:50:59 2015 us=743279   replay = ENABLED
Fri Jun 19 11:50:59 2015 us=743347   mute_replay_warnings = DISABLED
Fri Jun 19 11:50:59 2015 us=743415   replay_window = 64
Fri Jun 19 11:50:59 2015 us=743482   replay_time = 15
Fri Jun 19 11:50:59 2015 us=743560   packet_id_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=743628   use_iv = ENABLED
Fri Jun 19 11:50:59 2015 us=743695   test_crypto = DISABLED
Fri Jun 19 11:50:59 2015 us=743762   tls_server = DISABLED
Fri Jun 19 11:50:59 2015 us=743830   tls_client = DISABLED
Fri Jun 19 11:50:59 2015 us=743897   key_method = 2
Fri Jun 19 11:50:59 2015 us=743964   ca_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744030   ca_path = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744097   dh_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744164   cert_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744232   priv_key_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744300   pkcs12_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744371   cipher_list = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744442   tls_verify = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744519   tls_export_cert = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744591   verify_x509_type = 0
Fri Jun 19 11:50:59 2015 us=744661   verify_x509_name = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744732   crl_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=744803   ns_cert_type = 0
Fri Jun 19 11:50:59 2015 us=744874   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=744944   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745015   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745086   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745160   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745240   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745312   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745393   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745466   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745537   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745608   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745679   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745750   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745821   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745891   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=745963   remote_cert_ku[i] = 0
Fri Jun 19 11:50:59 2015 us=746033   remote_cert_eku = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=746105   ssl_flags = 0
Fri Jun 19 11:50:59 2015 us=746175   tls_timeout = 2
Fri Jun 19 11:50:59 2015 us=746246   renegotiate_bytes = 0
Fri Jun 19 11:50:59 2015 us=746317   renegotiate_packets = 0
Fri Jun 19 11:50:59 2015 us=746388   renegotiate_seconds = 3600
Fri Jun 19 11:50:59 2015 us=746459   handshake_window = 60
Fri Jun 19 11:50:59 2015 us=746530   transition_window = 3600
Fri Jun 19 11:50:59 2015 us=746601   single_session = DISABLED
Fri Jun 19 11:50:59 2015 us=746672   push_peer_info = DISABLED
Fri Jun 19 11:50:59 2015 us=746743   tls_exit = DISABLED
Fri Jun 19 11:50:59 2015 us=746815   tls_auth_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=746886   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=746957   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747028   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747099   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747179   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747252   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747324   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747395   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747472   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747544   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747620   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747691   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747763   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747834   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747905   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=747976   pkcs11_protected_authentication = DISABLED
Fri Jun 19 11:50:59 2015 us=748056   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748127   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748198   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748269   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748340   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748411   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748482   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748553   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748624   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748696   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748767   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748837   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748908   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=748979   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=749049   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=749120   pkcs11_private_mode = 00000000
Fri Jun 19 11:50:59 2015 us=749201   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749273   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749344   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749426   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749498   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749569   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749640   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749711   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749783   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749854   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749925   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=749996   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=750067   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=750137   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=750208   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=750278   pkcs11_cert_private = DISABLED
Fri Jun 19 11:50:59 2015 us=750349   pkcs11_pin_cache_period = -1
Fri Jun 19 11:50:59 2015 us=750420   pkcs11_id = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=750492   pkcs11_id_management = DISABLED
Fri Jun 19 11:50:59 2015 us=750581   server_network = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=750660   server_netmask = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=750738   server_network_ipv6 = ::
Fri Jun 19 11:50:59 2015 us=750810   server_netbits_ipv6 = 0
Fri Jun 19 11:50:59 2015 us=750882   server_bridge_ip = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=750953   server_bridge_netmask = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=751025   server_bridge_pool_start = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=751097   server_bridge_pool_end = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=751168   ifconfig_pool_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=751240   ifconfig_pool_start = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=751312   ifconfig_pool_end = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=751384   ifconfig_pool_netmask = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=751455   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=751526   ifconfig_pool_persist_refresh_freq = 600
Fri Jun 19 11:50:59 2015 us=751598   ifconfig_ipv6_pool_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=751670   ifconfig_ipv6_pool_base = ::
Fri Jun 19 11:50:59 2015 us=751741   ifconfig_ipv6_pool_netbits = 0
Fri Jun 19 11:50:59 2015 us=751812   n_bcast_buf = 256
Fri Jun 19 11:50:59 2015 us=751882   tcp_queue_limit = 64
Fri Jun 19 11:50:59 2015 us=751962   real_hash_size = 256
Fri Jun 19 11:50:59 2015 us=752033   virtual_hash_size = 256
Fri Jun 19 11:50:59 2015 us=752104   client_connect_script = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=752176   learn_address_script = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=752247   client_disconnect_script = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=752318   client_config_dir = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=752397   ccd_exclusive = DISABLED
Fri Jun 19 11:50:59 2015 us=752468   tmp_dir = '/tmp'
Fri Jun 19 11:50:59 2015 us=752540   push_ifconfig_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=752612   push_ifconfig_local = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=752684   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jun 19 11:50:59 2015 us=752755   push_ifconfig_ipv6_defined = DISABLED
Fri Jun 19 11:50:59 2015 us=752828   push_ifconfig_ipv6_local = ::/0
Fri Jun 19 11:50:59 2015 us=752899   push_ifconfig_ipv6_remote = ::
Fri Jun 19 11:50:59 2015 us=752970   enable_c2c = DISABLED
Fri Jun 19 11:50:59 2015 us=753045   duplicate_cn = DISABLED
Fri Jun 19 11:50:59 2015 us=753116   cf_max = 0
Fri Jun 19 11:50:59 2015 us=753198   cf_per = 0
Fri Jun 19 11:50:59 2015 us=753272   max_clients = 1024
Fri Jun 19 11:50:59 2015 us=753343   max_routes_per_client = 256
Fri Jun 19 11:50:59 2015 us=753425   auth_user_pass_verify_script = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=753497   auth_user_pass_verify_script_via_file = DISABLED
Fri Jun 19 11:50:59 2015 us=753578   port_share_host = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=753650   port_share_port = 0
Fri Jun 19 11:50:59 2015 us=753727   client = DISABLED
Fri Jun 19 11:50:59 2015 us=753798   pull = DISABLED
Fri Jun 19 11:50:59 2015 us=753870   auth_user_pass_file = '[UNDEF]'
Fri Jun 19 11:50:59 2015 us=753974 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec  1 2014
Fri Jun 19 11:50:59 2015 us=761868 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Jun 19 11:50:59 2015 us=762014 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jun 19 11:50:59 2015 us=762142 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Jun 19 11:50:59 2015 us=762243 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jun 19 11:50:59 2015 us=762371 Socket Buffers: R=[212992->131072] S=[212992->131072]
Fri Jun 19 11:50:59 2015 us=772320 TUN/TAP device tun3 opened
Fri Jun 19 11:50:59 2015 us=772472 TUN/TAP TX queue length set to 100
Fri Jun 19 11:50:59 2015 us=772597 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Fri Jun 19 11:50:59 2015 us=772688 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,tun-ipv6,cipher BF-CBC,auth SHA1,keysize 128,secret'
Fri Jun 19 11:50:59 2015 us=772765 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,tun-ipv6,cipher BF-CBC,auth SHA1,keysize 128,secret'
Fri Jun 19 11:50:59 2015 us=772856 Local Options hash (VER=V4): 'a1a5141e'
Fri Jun 19 11:50:59 2015 us=772935 Expected Remote Options hash (VER=V4): 'a1a5141e'
Fri Jun 19 11:50:59 2015 us=773026 UDPv6 link local (bound): [AF_INET6]2a02:348:61:5d75::4:1194
Fri Jun 19 11:50:59 2015 us=773109 UDPv6 link remote: [AF_INET6]2001:49f0:d002:1::6:1194
Fri Jun 19 11:51:04 2015 us=573458 Peer Connection Initiated with [AF_INET6]2001:49f0:d002:1::6:1194
Fri Jun 19 11:51:04 2015 us=573521 Initialization Sequence Completed

tun3 state:

tun3      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          POINTOPOINT NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

then i did:

kepler/root /root 12# ifconfig tun3 add fc03::2/64
kepler/root /root 13# ifconfig tun3 up            
kepler/root /root 14# ifconfig tun3
tun3      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet6 addr: fc03::2/64 Scope:Global
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

kepler/root /root 15# ping6 -c 9 fc03::1
PING fc03::1(fc03::1) 56 data bytes
64 bytes from fc03::1: icmp_seq=1 ttl=64 time=1870 ms
64 bytes from fc03::1: icmp_seq=3 ttl=64 time=130 ms
64 bytes from fc03::1: icmp_seq=2 ttl=64 time=1448 ms
64 bytes from fc03::1: icmp_seq=4 ttl=64 time=133 ms
64 bytes from fc03::1: icmp_seq=5 ttl=64 time=130 ms
64 bytes from fc03::1: icmp_seq=6 ttl=64 time=130 ms
64 bytes from fc03::1: icmp_seq=7 ttl=64 time=130 ms
64 bytes from fc03::1: icmp_seq=8 ttl=64 time=130 ms
64 bytes from fc03::1: icmp_seq=9 ttl=64 time=130 ms

--- fc03::1 ping statistics ---
9 packets transmitted, 9 received, 0% packet loss, time 8013ms
rtt min/avg/max/mdev = 130.029/470.334/1870.471/643.451 ms, pipe 2
kepler/root /root 16#

do i need to add anything more? do i really need --ifconfig? maybe i should add interface config steps to the script.

Traffic

Skaperen wroteRe: what does --ifconfig really do?

See --ifconfig in The Manual v23x

Also:

Skaperen wroteFri Jun 19 11:50:59 2015 us=753974 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014

is this an upto date version for your distro ? A lot of work has gone into IPv6 for OpenVPN, it is possible you have a bugged version.

For example, I would expect to see this line (or similar) included in your log:

Fri Jun 19 00:02:49 2015 us=547750 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08

Skaperen

that is what i get in Ubuntu Server 14.04.2 LTS updated a day ago.

i expect --ifconfig to configure the interface it uses ... e.g. tun3 for the last test i ran. see the ifconfig commands i did to things working.

ifconfig tun3 add fc03::2/64
ifconfig tun3 up

Skaperen

do i need a higher --verb level to get the openssl version in the openvpn log? i read somewhere that level 4 was expected in the forum.

here are the versions i have:

kepler/root /root 1# dpkg -l | egrep 'openvpn|openssl|openssh'
ii  libgnutls-openssl27:amd64           2.12.23-12ubuntu2.2                  amd64        GNU TLS library - OpenSSL wrapper
ii  openssh-client                      1:6.6p1-2ubuntu2                     amd64        secure shell (SSH) client, for secure access to remote machines
ii  openssh-server                      1:6.6p1-2ubuntu2                     amd64        secure shell (SSH) server, for secure access from remote machines
ii  openssh-sftp-server                 1:6.6p1-2ubuntu2                     amd64        secure shell (SSH) sftp server module, for SFTP access from remote machines
ii  openssl                             1.0.1f-1ubuntu2.15                   amd64        Secure Sockets Layer toolkit - cryptographic utility
ii  openvpn                             2.3.2-7ubuntu3.1                     amd64        virtual private network daemon
ii  python-openssl                      0.13-2ubuntu6                        amd64        Python 2 wrapper around the OpenSSL library
kepler/root /root 2#

Traffic

Skaperen wrotethat is what i get in Ubuntu Server 14.04.2 LTS updated a day ago

Perhaps you should read this:
https://community.openvpn.net/openvpn/wiki/OpenvpnSoftwareRepos

r00t@ubsv-144:~$ date
Sat Jun 20 12:15:35 BST 2015

r00t@ubsv-144:~$ uname -a
Linux ubsv-144 3.13.0-32-generic #57-Ubuntu SMP Tue Jul 15 03:51:12 UTC 2014 i686 i686 i686 GNU/Linux

r00t@ubsv-144:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 14.04.2 LTS
Release:        14.04
Codename:       trusty

r00t@ubsv-144:~$ openvpn --version
OpenVPN 2.3.7 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun  8 2015
library versions: OpenSSL 1.0.1f 6 Jan 2014, LZO 2.06

Skaperen

so --ifconfig is buggy, at least for IPv6, in 2.3.2 :x

i now have a choice: upgrade as described in the given link or make a work-around by doing my own ifconfig or ip commands. 😉

Skaperen

even with 2.3.7 the tunnel interface does not get configured. but the man page does not literally say that it should so i don't plan to submit a bug report (since i don't know the intent for sure and i don't know if it is a user error). the tunnel works fine once i manually configure the interface on both ends. it is ipv6 all the way (ula v6 over public v6).

Skaperen

i made a script to configure the interface 4 seconds after it starts openvpn for my ipv6 case. it works.