openvpn 2.3.7(8) --topology subnet problem

hzdtony

I have FreeBsd 10.2 x64 system,and install openvpn 2.3.8 from port. I try running openvpn, find out as problem:
topology subnet option not enable.tun0 interface allocate two ip address 1 and 2. follow as my config file content:

proto udp
port 1194
dev tun
server 10.0.27.0 255.255.255.0
topology subnet
client-to-client
persist-key
persist-tun
keepalive 10 60
ca /usr/local/etc/openvpn/ca.crt
dh /usr/local/etc/openvpn/dh2048.pem
cert /usr/local/etc/openvpn/Server.crt
key /usr/local/etc/openvpn/Server.key
user nobody
group nobody
verb 3

Please expert help me solve this problem.thank a lot!

maikcat

use verb 4 and post complete log file.

hzdtony

root@gw:/usr/local/etc/openvpn # openvpn --config test.conf
Fri Sep 25 15:14:09 2015 us=807573 Current Parameter Settings:
Fri Sep 25 15:14:09 2015 us=808045 config = 'test.conf'
Fri Sep 25 15:14:09 2015 us=808076 mode = 1
Fri Sep 25 15:14:09 2015 us=808097 show_ciphers = DISABLED
Fri Sep 25 15:14:09 2015 us=808117 show_digests = DISABLED
Fri Sep 25 15:14:09 2015 us=808137 show_engines = DISABLED
Fri Sep 25 15:14:09 2015 us=808176 genkey = DISABLED
Fri Sep 25 15:14:09 2015 us=808198 key_pass_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808219 show_tls_ciphers = DISABLED
Fri Sep 25 15:14:09 2015 us=808239 Connection profiles [default]:
Fri Sep 25 15:14:09 2015 us=808260 proto = udp
Fri Sep 25 15:14:09 2015 us=808279 local = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808300 local_port = 1194
Fri Sep 25 15:14:09 2015 us=808320 remote = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808339 remote_port = 1194
Fri Sep 25 15:14:09 2015 us=808358 remote_float = DISABLED
Fri Sep 25 15:14:09 2015 us=808377 bind_defined = DISABLED
Fri Sep 25 15:14:09 2015 us=808396 bind_local = ENABLED
Fri Sep 25 15:14:09 2015 us=808415 connect_retry_seconds = 5
Fri Sep 25 15:14:09 2015 us=808434 connect_timeout = 10
Fri Sep 25 15:14:09 2015 us=808453 connect_retry_max = 0
Fri Sep 25 15:14:09 2015 us=808473 socks_proxy_server = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808493 socks_proxy_port = 0
Fri Sep 25 15:14:09 2015 us=808556 socks_proxy_retry = DISABLED
Fri Sep 25 15:14:09 2015 us=808577 tun_mtu = 1500
Fri Sep 25 15:14:09 2015 us=808596 tun_mtu_defined = ENABLED
Fri Sep 25 15:14:09 2015 us=808615 link_mtu = 1500
Fri Sep 25 15:14:09 2015 us=808633 link_mtu_defined = DISABLED
Fri Sep 25 15:14:09 2015 us=808652 tun_mtu_extra = 0
Fri Sep 25 15:14:09 2015 us=808671 tun_mtu_extra_defined = DISABLED
Fri Sep 25 15:14:09 2015 us=808690 mtu_discover_type = -1
Fri Sep 25 15:14:09 2015 us=808709 fragment = 0
Fri Sep 25 15:14:09 2015 us=808728 mssfix = 1450
Fri Sep 25 15:14:09 2015 us=808747 explicit_exit_notification = 0
Fri Sep 25 15:14:09 2015 us=808766 Connection profiles END
Fri Sep 25 15:14:09 2015 us=808785 remote_random = DISABLED
Fri Sep 25 15:14:09 2015 us=808806 ipchange = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808826 dev = 'tun'
Fri Sep 25 15:14:09 2015 us=808845 dev_type = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808876 dev_node = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808896 lladdr = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=808915 topology = 3
Fri Sep 25 15:14:09 2015 us=808934 tun_ipv6 = DISABLED
Fri Sep 25 15:14:09 2015 us=808953 ifconfig_local = '10.0.27.1'
Fri Sep 25 15:14:09 2015 us=808972 ifconfig_remote_netmask = '255.255.255.0'
Fri Sep 25 15:14:09 2015 us=808992 ifconfig_noexec = DISABLED
Fri Sep 25 15:14:09 2015 us=809011 ifconfig_nowarn = DISABLED
Fri Sep 25 15:14:09 2015 us=809030 ifconfig_ipv6_local = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809048 ifconfig_ipv6_netbits = 0
Fri Sep 25 15:14:09 2015 us=809067 ifconfig_ipv6_remote = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809086 shaper = 0
Fri Sep 25 15:14:09 2015 us=809105 mtu_test = 0
Fri Sep 25 15:14:09 2015 us=809124 mlock = DISABLED
Fri Sep 25 15:14:09 2015 us=809190 keepalive_ping = 10
Fri Sep 25 15:14:09 2015 us=809211 keepalive_timeout = 60
Fri Sep 25 15:14:09 2015 us=809243 inactivity_timeout = 0
Fri Sep 25 15:14:09 2015 us=809263 ping_send_timeout = 10
Fri Sep 25 15:14:09 2015 us=809282 ping_rec_timeout = 120
Fri Sep 25 15:14:09 2015 us=809300 ping_rec_timeout_action = 2
Fri Sep 25 15:14:09 2015 us=809319 ping_timer_remote = DISABLED
Fri Sep 25 15:14:09 2015 us=809338 remap_sigusr1 = 0
Fri Sep 25 15:14:09 2015 us=809357 persist_tun = ENABLED
Fri Sep 25 15:14:09 2015 us=809376 persist_local_ip = DISABLED
Fri Sep 25 15:14:09 2015 us=809395 persist_remote_ip = DISABLED
Fri Sep 25 15:14:09 2015 us=809414 persist_key = ENABLED
Fri Sep 25 15:14:09 2015 us=809433 passtos = DISABLED
Fri Sep 25 15:14:09 2015 us=809451 resolve_retry_seconds = 1000000000
Fri Sep 25 15:14:09 2015 us=809471 username = 'nobody'
Fri Sep 25 15:14:09 2015 us=809491 groupname = 'nobody'
Fri Sep 25 15:14:09 2015 us=809509 chroot_dir = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809528 cd_dir = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809560 writepid = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809580 up_script = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809599 down_script = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809618 down_pre = DISABLED
Fri Sep 25 15:14:09 2015 us=809637 up_restart = DISABLED
Fri Sep 25 15:14:09 2015 us=809655 up_delay = DISABLED
Fri Sep 25 15:14:09 2015 us=809674 daemon = DISABLED
Fri Sep 25 15:14:09 2015 us=809693 inetd = 0
Fri Sep 25 15:14:09 2015 us=809712 log = DISABLED
Fri Sep 25 15:14:09 2015 us=809731 suppress_timestamps = DISABLED
Fri Sep 25 15:14:09 2015 us=809750 nice = 0
Fri Sep 25 15:14:09 2015 us=809803 verbosity = 4
Fri Sep 25 15:14:09 2015 us=809828 mute = 0
Fri Sep 25 15:14:09 2015 us=809847 gremlin = 0
Fri Sep 25 15:14:09 2015 us=809866 status_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=809885 status_file_version = 1
Fri Sep 25 15:14:09 2015 us=809918 status_file_update_freq = 60
Fri Sep 25 15:14:09 2015 us=809939 occ = ENABLED
Fri Sep 25 15:14:09 2015 us=809958 rcvbuf = 65536
Fri Sep 25 15:14:09 2015 us=809977 sndbuf = 65536
Fri Sep 25 15:14:09 2015 us=809995 sockflags = 0
Fri Sep 25 15:14:09 2015 us=810014 fast_io = DISABLED
Fri Sep 25 15:14:09 2015 us=810033 lzo = 0
Fri Sep 25 15:14:09 2015 us=810052 route_script = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810071 route_default_gateway = '10.0.27.2'
Fri Sep 25 15:14:09 2015 us=810091 route_default_metric = 0
Fri Sep 25 15:14:09 2015 us=810110 route_noexec = DISABLED
Fri Sep 25 15:14:09 2015 us=810128 route_delay = 0
Fri Sep 25 15:14:09 2015 us=810147 route_delay_window = 30
Fri Sep 25 15:14:09 2015 us=810167 route_delay_defined = DISABLED
Fri Sep 25 15:14:09 2015 us=810186 route_nopull = DISABLED
Fri Sep 25 15:14:09 2015 us=810206 route_gateway_via_dhcp = DISABLED
Fri Sep 25 15:14:09 2015 us=810237 max_routes = 100
Fri Sep 25 15:14:09 2015 us=810257 allow_pull_fqdn = DISABLED
Fri Sep 25 15:14:09 2015 us=810276 management_addr = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810295 management_port = 0
Fri Sep 25 15:14:09 2015 us=810314 management_user_pass = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810333 management_log_history_cache = 250
Fri Sep 25 15:14:09 2015 us=810353 management_echo_buffer_size = 100
Fri Sep 25 15:14:09 2015 us=810372 management_write_peer_info_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810391 management_client_user = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810491 management_client_group = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810516 management_flags = 0
Fri Sep 25 15:14:09 2015 us=810536 shared_secret_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810556 key_direction = 0
Fri Sep 25 15:14:09 2015 us=810575 ciphername_defined = ENABLED
Fri Sep 25 15:14:09 2015 us=810595 ciphername = 'BF-CBC'
Fri Sep 25 15:14:09 2015 us=810613 authname_defined = ENABLED
Fri Sep 25 15:14:09 2015 us=810646 authname = 'SHA1'
Fri Sep 25 15:14:09 2015 us=810668 prng_hash = 'SHA1'
Fri Sep 25 15:14:09 2015 us=810687 prng_nonce_secret_len = 16
Fri Sep 25 15:14:09 2015 us=810707 keysize = 0
Fri Sep 25 15:14:09 2015 us=810725 engine = DISABLED
Fri Sep 25 15:14:09 2015 us=810744 replay = ENABLED
Fri Sep 25 15:14:09 2015 us=810763 mute_replay_warnings = DISABLED
Fri Sep 25 15:14:09 2015 us=810783 replay_window = 64
Fri Sep 25 15:14:09 2015 us=810802 replay_time = 15
Fri Sep 25 15:14:09 2015 us=810820 packet_id_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810839 use_iv = ENABLED
Fri Sep 25 15:14:09 2015 us=810859 test_crypto = DISABLED
Fri Sep 25 15:14:09 2015 us=810878 tls_server = ENABLED
Fri Sep 25 15:14:09 2015 us=810898 tls_client = DISABLED
Fri Sep 25 15:14:09 2015 us=810917 key_method = 2
Fri Sep 25 15:14:09 2015 us=810936 ca_file = '/usr/local/etc/openvpn/ca.crt'
Fri Sep 25 15:14:09 2015 us=810967 ca_path = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=810988 dh_file = '/usr/local/etc/openvpn/dh2048.pem'
Fri Sep 25 15:14:09 2015 us=811008 cert_file = '/usr/local/etc/openvpn/Server.crt'
Fri Sep 25 15:14:09 2015 us=811027 priv_key_file = '/usr/local/etc/openvpn/Server.key'
Fri Sep 25 15:14:09 2015 us=811095 pkcs12_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811119 cipher_list = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811138 tls_verify = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811157 tls_export_cert = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811177 verify_x509_type = 0
Fri Sep 25 15:14:09 2015 us=811196 verify_x509_name = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811215 crl_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811234 ns_cert_type = 0
Fri Sep 25 15:14:09 2015 us=811253 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811273 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811291 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811310 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811343 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811364 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811382 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811401 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811419 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811438 remote_cert_ku = 0
Fri Sep 25 15:14:09 2015 us=811457 remote_cert_ku[i] = 0
Fri Sep 25 15:14:09 2015 us=811475 remote_cert_ku[i] = 0
Fri Sep 25 15:14:09 2015 us=811494 remote_cert_ku[i] = 0
Fri Sep 25 15:14:09 2015 us=811513 remote_cert_ku[i] = 0
Fri Sep 25 15:14:09 2015 us=811531 remote_cert_ku[i] = 0
Fri Sep 25 15:14:09 2015 us=811550 remote_cert_ku[i] = 0
Fri Sep 25 15:14:09 2015 us=811569 remote_cert_eku = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811588 ssl_flags = 0
Fri Sep 25 15:14:09 2015 us=811607 tls_timeout = 2
Fri Sep 25 15:14:09 2015 us=811626 renegotiate_bytes = 0
Fri Sep 25 15:14:09 2015 us=811656 renegotiate_packets = 0
Fri Sep 25 15:14:09 2015 us=811704 renegotiate_seconds = 3600
Fri Sep 25 15:14:09 2015 us=811728 handshake_window = 60
Fri Sep 25 15:14:09 2015 us=811747 transition_window = 3600
Fri Sep 25 15:14:09 2015 us=811767 single_session = DISABLED
Fri Sep 25 15:14:09 2015 us=811785 push_peer_info = DISABLED
Fri Sep 25 15:14:09 2015 us=811804 tls_exit = DISABLED
Fri Sep 25 15:14:09 2015 us=811823 tls_auth_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=811846 server_network = 10.0.27.0
Fri Sep 25 15:14:09 2015 us=811868 server_netmask = 255.255.255.0
Fri Sep 25 15:14:09 2015 us=811895 server_network_ipv6 = ::
Fri Sep 25 15:14:09 2015 us=811914 server_netbits_ipv6 = 0
Fri Sep 25 15:14:09 2015 us=811937 server_bridge_ip = 0.0.0.0
Fri Sep 25 15:14:09 2015 us=811958 server_bridge_netmask = 0.0.0.0
Fri Sep 25 15:14:09 2015 us=811979 server_bridge_pool_start = 0.0.0.0
Fri Sep 25 15:14:09 2015 us=812000 server_bridge_pool_end = 0.0.0.0
Fri Sep 25 15:14:09 2015 us=812033 push_entry = 'route-gateway 10.0.27.1'
Fri Sep 25 15:14:09 2015 us=812054 push_entry = 'topology subnet'
Fri Sep 25 15:14:09 2015 us=812073 push_entry = 'ping 10'
Fri Sep 25 15:14:09 2015 us=812093 push_entry = 'ping-restart 60'
Fri Sep 25 15:14:09 2015 us=812112 ifconfig_pool_defined = ENABLED
Fri Sep 25 15:14:09 2015 us=812134 ifconfig_pool_start = 10.0.27.2
Fri Sep 25 15:14:09 2015 us=812155 ifconfig_pool_end = 10.0.27.253
Fri Sep 25 15:14:09 2015 us=812177 ifconfig_pool_netmask = 255.255.255.0
Fri Sep 25 15:14:09 2015 us=812196 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812215 ifconfig_pool_persist_refresh_freq = 600
Fri Sep 25 15:14:09 2015 us=812234 ifconfig_ipv6_pool_defined = DISABLED
Fri Sep 25 15:14:09 2015 us=812255 ifconfig_ipv6_pool_base = ::
Fri Sep 25 15:14:09 2015 us=812274 ifconfig_ipv6_pool_netbits = 0
Fri Sep 25 15:14:09 2015 us=812292 n_bcast_buf = 256
Fri Sep 25 15:14:09 2015 us=812336 tcp_queue_limit = 64
Fri Sep 25 15:14:09 2015 us=812387 real_hash_size = 256
Fri Sep 25 15:14:09 2015 us=812420 virtual_hash_size = 256
Fri Sep 25 15:14:09 2015 us=812440 client_connect_script = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812459 learn_address_script = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812479 client_disconnect_script = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812498 client_config_dir = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812517 ccd_exclusive = DISABLED
Fri Sep 25 15:14:09 2015 us=812536 tmp_dir = '/tmp'
Fri Sep 25 15:14:09 2015 us=812555 push_ifconfig_defined = DISABLED
Fri Sep 25 15:14:09 2015 us=812577 push_ifconfig_local = 0.0.0.0
Fri Sep 25 15:14:09 2015 us=812598 push_ifconfig_remote_netmask = 0.0.0.0
Fri Sep 25 15:14:09 2015 us=812617 push_ifconfig_ipv6_defined = DISABLED
Fri Sep 25 15:14:09 2015 us=812637 push_ifconfig_ipv6_local = ::/0
Fri Sep 25 15:14:09 2015 us=812657 push_ifconfig_ipv6_remote = ::
Fri Sep 25 15:14:09 2015 us=812677 enable_c2c = ENABLED
Fri Sep 25 15:14:09 2015 us=812696 duplicate_cn = DISABLED
Fri Sep 25 15:14:09 2015 us=812714 cf_max = 0
Fri Sep 25 15:14:09 2015 us=812746 cf_per = 0
Fri Sep 25 15:14:09 2015 us=812767 max_clients = 1024
Fri Sep 25 15:14:09 2015 us=812786 max_routes_per_client = 256
Fri Sep 25 15:14:09 2015 us=812805 auth_user_pass_verify_script = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812824 auth_user_pass_verify_script_via_file = DISABLED
Fri Sep 25 15:14:09 2015 us=812843 port_share_host = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812862 port_share_port = 0
Fri Sep 25 15:14:09 2015 us=812881 client = DISABLED
Fri Sep 25 15:14:09 2015 us=812900 pull = DISABLED
Fri Sep 25 15:14:09 2015 us=812919 auth_user_pass_file = '[UNDEF]'
Fri Sep 25 15:14:09 2015 us=812941 OpenVPN 2.3.7 amd64-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Sep 17 2015
Fri Sep 25 15:14:09 2015 us=813021 library versions: OpenSSL 1.0.1p-freebsd 9 Jul 2015, LZO 2.09
Fri Sep 25 15:14:09 2015 us=828790 Diffie-Hellman initialized with 2048 bit key
Enter Private Key Password:
Fri Sep 25 15:14:13 2015 us=616647 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Sep 25 15:14:13 2015 us=627934 WARNING: file '/usr/local/etc/openvpn/Server.key' is group or others accessible
Fri Sep 25 15:14:13 2015 us=628562 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:3 ]
Fri Sep 25 15:14:13 2015 us=628715 Socket Buffers: R=[42080->65536] S=[9216->65536]
Fri Sep 25 15:14:13 2015 us=628975 TUN/TAP device /dev/tun0 opened
Fri Sep 25 15:14:13 2015 us=629011 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Sep 25 15:14:13 2015 us=629071 /sbin/ifconfig tun0 10.0.27.1 10.0.27.2 mtu 1500 netmask 255.255.255.0 up
Fri Sep 25 15:14:13 2015 us=635893 /sbin/route add -net 10.0.27.0 10.0.27.1 255.255.255.0
add net 10.0.27.0: gateway 10.0.27.1
Fri Sep 25 15:14:13 2015 us=639618 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:12 ET:0 EL:3 ]
Fri Sep 25 15:14:13 2015 us=640863 GID set to nobody
Fri Sep 25 15:14:13 2015 us=640986 UID set to nobody
Fri Sep 25 15:14:13 2015 us=641027 UDPv4 link local (bound): [undef]
Fri Sep 25 15:14:13 2015 us=641055 UDPv4 link remote: [undef]
Fri Sep 25 15:14:13 2015 us=641093 MULTI: multi_init called, r=256 v=256
Fri Sep 25 15:14:13 2015 us=641153 IFCONFIG POOL: base=10.0.27.2 size=252, ipv6=0
Fri Sep 25 15:14:13 2015 us=641216 Initialization Sequence Completed

Traffic

hzdtony wroteFri Sep 25 15:14:09 2015 us=808915 topology = 3

Topology = 3 is --topology subnet.

hzdtony wroteFri Sep 25 15:14:13 2015 us=629071 /sbin/ifconfig tun0 10.0.27.1 10.0.27.2 mtu 1500 netmask 255.255.255.0 up

This is the correct ifconfig

hzdtony wroteFri Sep 25 15:14:13 2015 us=641216 Initialization Sequence Completed

Completed without error ..

hzdtony

I think this is a bug.I have freebsd 8.4 and openvpn 2.3.6,It is normal.

hzdtony

I use Ubuntu 14.04.3 test openvpn 2.3.8,topology subnet is normal.tun0 interface assign address is 1. I now doubt on the FreeBSD 10.2，OpenVPN 2.3.8 not normal operation.please expert confirm.thank a lot!

Traffic

Your log shows normal operation.

If you think you have found a bug then please document it clearly.

hzdtony

I have FreeBSD 8.4 from OpenVPN 2.3.6 update to 2.3.8, "topology subnet" same not normal operation.I try commit this problem,but I not confirm this is bug! thank a lot everyone!