I'm using the bridge-start script to set up my interfaces, but the line that sets my eth0 ip address to 0.0.0.0 (null, I suppose) causes me to occasionally become locked out of my GCE instance. [code]# ifconfig $eth 0.0.0.0 promisc up[/code] ($eth is always eth0) So I took it out and my small VPN appears to be working. That said, the docs probably want me to do it the other way for a reason, and I was curious as to what that reason might be. Thanks in advance.

[quote="FuriousGeorge"]I'm using the bridge-start script[/quote]Post your script please ..

[quote="FuriousGeorge"]# expose client subnets by adding routees here ip route add 10.0.0.0/24 dev br0[/quote]You should use openvpn to add this route and the associated --[b]iroute[/b] [quote="FuriousGeorge"]m using the bridge-start script to set up my interfaces, but the line that sets my eth0 ip address to 0.0.0.0 (null, I suppose) causes me to occasionally become locked out of my GCE instance. [/quote]Perhaps GCE does not allow promiscuous mode ..

Potential problems with leaving ip address on eth0

FuriousGeorge

I'm using the bridge-start script to set up my interfaces, but the line that sets my eth0 ip address to 0.0.0.0 (null, I suppose) causes me to occasionally become locked out of my GCE instance.

# ifconfig $eth 0.0.0.0 promisc up

($eth is always eth0)

So I took it out and my small VPN appears to be working. That said, the docs probably want me to do it the other way for a reason, and I was curious as to what that reason might be.

Thanks in advance.

Traffic

FuriousGeorge wroteI'm using the bridge-start script

Post your script please ..

FuriousGeorge

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth0"
eth_ip="10.250.0.2"
eth_netmask="255.255.255.0"
eth_broadcast="10.250.0.255"

for t in $tap; do
openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
brctl addif $br $t
done

for t in $tap; do
ifconfig $t 0.0.0.0 promisc up
done

#ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast

# add a route to the GCE gateway or lock yourself out of instance
route add default gw 10.250.0.1 br0

# expose client subnets by adding routees here
ip route add 10.0.0.0/24 dev br0

Traffic

FuriousGeorge wrote# expose client subnets by adding routees here
ip route add 10.0.0.0/24 dev br0

You should use openvpn to add this route and the associated --iroute

FuriousGeorge wrotem using the bridge-start script to set up my interfaces, but the line that sets my eth0 ip address to 0.0.0.0 (null, I suppose) causes me to occasionally become locked out of my GCE instance.

Perhaps GCE does not allow promiscuous mode ..