Hi
I want to bridge two networks with the same subnet and gateway, but different DHCP-pools so there is no ip-conflict.
On the client I can ping the openvpn server 192.168.0.240 but when I try to ping anything else existing at the server network I get "Destination Host Unreachable".
From the server I can't ping anything at the clients network. Can't even ping the openvpn client ip. All I get is "Destination Host Unreachable".
All firewalls is disabled.
Pinging a known host at the server network
PING 192.168.0.5 (192.168.0.5) from 192.168.0.242 tap0: 56(84) bytes of data.
From 192.168.0.242 icmp_seq=1 Destination Host Unreachable
From 192.168.0.242 icmp_seq=2 Destination Host Unreachable
From 192.168.0.242 icmp_seq=3 Destination Host Unreachable
Tcpdump at server
18:39:33.449678 ARP, Request who-has 192.168.0.5 tell 192.168.0.242, length 28
18:39:34.466402 ARP, Request who-has 192.168.0.5 tell 192.168.0.242, length 28
18:39:35.450573 ARP, Request who-has 192.168.0.5 tell 192.168.0.242, length 28
/etc/network/interface at server
auto br0
iface br0 inet static
address 192.168.0.240
network 192.168.0.0
netmask 255.255.255.0
broadcast 192.168.0.255
gateway 192.168.0.1
bridge_ports eth0
bridge_fd 9
bridge_hello 2
bridge_maxage 12
bridge_stp on
bridge_prio 1000
Serverconfig
port 1194
proto udp
server-bridge 192.168.0.240 255.255.255.0 192.168.0.241 192.168.0.250
dev tap0
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0
ifconfig-pool-persist ipp.txt
keepalive 10 600
comp-lzo
persist-key
persist-tun
verb 30
mute 20
up "/etc/openvpn/up.sh br0"
down "/etc/openvpn/down.sh br0"
status openvpn-status.log
client-config-dir ccd
client-to-client
script-security 2
up.sh
#!/bin/sh
PATH=/sbin:/usr/sbin:/bin:/usr/bin
BR=$1
DEV=$2
MTU=$3
ip link set "$DEV" up promisc on mtu "$MTU"
if ! brctl show $BR | egrep -q "\W+$DEV$"; then
brctl addif $BR $DEV
fi
Clientconfig
client
dev tap0
proto udp
remote myhost.com 1194
nobind
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1_nokey.key
tls-auth /etc/openvpn/ta.key 1
comp-lzo
verb 3
mute 20
auth-nocache
script-security 2
Client
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
192.168.0.0 * 255.255.255.0 U 0 0 0 eth0
192.168.0.0 * 255.255.255.0 U 0 0 0 tap0
Server
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default unknown 0.0.0.0 UG 0 0 0 br0
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
bridge name bridge id STP enabled interfaces
br0 8000.00155d003404 yes eth0
tap0
