Hi All, i have the following (simple) infrastructure:
(internet)---(firewall with openvpn)---(wired and wireless lan)
i have several users that use android phones with openvpn connect, all works fine either from wired/wireless lan and from internet connection... the problem is if a mobile user connected from wireless lan (with a private address) come out from wireless range and automatically switch on 3g network, the openvpn connect client reconnect to access server (from internet), but i can't ping nor reach any other private server... on server logs i receive:
Feb 12 16:36:40 firewall openvpn[30404]: sfreddiomobile/151.18.134.74:42511 MULTI: bad source address from client [10.48.144.210], packet dropped
(ip address 10.48.144.210 is the dynamic ip address received from 3g network...)
The same test (switching from wireles lan to internet connection) works fine using openvpn client on a linux desktop.
server.conf:
port 9411
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/vpnserver.crt
key /etc/openvpn/keys/vpnserver.key # This file should be kept secret
dh /etc/openvpn/keys/dh2048.pem
server 192.168.100.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.30.0 255.255.255.0"
push "route 192.168.40.0 255.255.255.0"
push "route 192.168.50.0 255.255.255.0"
push "route 11.1.0.0 255.255.0.0"
client-config-dir ccd
route 192.168.101.0 255.255.255.252
keepalive 2 10
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
multihome
mobileclien ovpn file:
client
dev tun
proto udp
remote vpoffice.no-ip.org 9411
remote 192.168.30.1 9411
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert sfreddiomobile.crt
key sfreddiomobile.key
ns-cert-type server
comp-lzo
verb 3
float
linux desktop config file:
client
dev tun
proto udp
remote vpoffice.no-ip.org 9411
remote 192.168.60.1 9411
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert sfreddio.crt
key sfreddio.key
ns-cert-type server
comp-lzo
verb 3
