soft,port-share-redirect when using Ethernet bridging

hashkent

Just wondering if anyone has seen this error before when using Ethernet bridging with OpenVPN:

SIGTERM[soft,port-share-redirect] received, client-instance exiting'

When I use NAT routing OpenVPN runs fine, however a particular application (Jabber voice) won't run behind NAT (it’s a managed telco service) so I need remote users to be bridged so they get an IP from the LAN side.

My OpenVPN server is corrected to the internet on a public IP on eth0 and eth1 is the LAN side (10.x.x.x) range.
Works fine with NAT routing.

My settings under Server Config Directives are:
server-bridge 10.100.1.81 255.255.0.0 10.100.255.100 10.100.255.200

Where 10.100.1.81 is my OpenVPN server on a /16 subnet.

I don't have Apache or anything else running on this box, I’m using the OpenVPN port defaults TCP 443 / UDP 1194

Any ideas?

TinCanTech

hashkent wroteMy settings under Server Config Directives are:
server-bridge 10.100.1.81 255.255.0.0 10.100.255.100 10.100.255.200

Where 10.100.1.81 is my OpenVPN server on a /16 subnet.

See --server-bridge gateway netmask pool-start-IP pool-end-IP in The Manual v23x
.. Read it carefully.

hashkent

I'ma afraid that didn't appear to fix it.

2016-10-10 08:55:29+1000 [HTTPChannel,366,] AuthLDAP: client username 'FirstName.Lastname' remapped to canonical form u'FirstName.Lastname' due to LDAP attribute u'sAMAccountName' in list ['FirstName.Lastname']
2016-10-10 08:55:29+1000 [-] OVPN 0 OUT: 'Sun Oct 9 22:55:29 2016 TCP connection established with [AF_INET]220.1.2.3:49756'
2016-10-10 08:55:29+1000 [-] OVPN 0 OUT: 'Sun Oct 9 22:55:29 2016 220.1.2.3:49756 SIGTERM[soft,port-share-redirect] received, client-instance exiting'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 TLS: Initial packet from [AF_INET]220.1.2.3:57201 (via [AF_INET]202.70.1.1%asbr0), sid=22efc300 89ca8afa'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 VERIFY OK: depth=1, /CN=OpenVPN CA'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 VERIFY OK: nsCertType=CLIENT'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 VERIFY OK: depth=0, /CN=FirstName.Lastname'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_GUI_VER=ovpnmi_1.0.0'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_VER=3.0.12'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_PLAT=win'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_NCP=2'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_TCPNL=1'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_PROTO=2'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_LZO=1'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_LZO_SWAP=1'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_LZ4=1'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_LZ4v2=1'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_COMP_STUB=1'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: IV_COMP_STUBv2=1'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: UV_ASCLI_VER=UV_ASCLI_VER'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 peer info: UV_PLAT_REL=UV_PLAT_REL'
2016-10-10 08:55:30+1000 [-] AUTH SUCCESS {'status': 0, 'session_id': '[redacted]', 'reason': 'SESSION_ID auth succeeded', 'serial_list': [], 'user': u'FirstName.Lastname', 'proplist': {u'pvt_google_auth_secret_locked': u'false', u'prop_autogenerate': u'true', u'prop_deny': u'false', u'prop_superuser': u'true', u'prop_lzo': u'false', u'pvt_google_auth_secret': '[redacted]', u'prop_autologin': u'false', u'type': u'user_compile'}, 'common_name': u'FirstName.Lastname', 'serial': '5'} cli=u'win'/u'3.0.12'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: "Sun Oct 9 22:55:30 2016 MANAGEMENT: CMD 'client-auth 0 0'"
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 Control Channel: TLSv1, cipher TLSv1/SSLv3 ECDHE-RSA-DES-CBC3-SHA, 2048 bit RSA'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:57201 [FirstName.Lastname] Peer Connection Initiated with [AF_INET]220.1.2.3:57201 (via [AF_INET]202.70.1.1%asbr0)'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 FirstName.Lastname/220.1.2.3:57201 MULTI_sva: pool returned IPv4=10.100.255.100, IPv6=(Not enabled)'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 FirstName.Lastname/220.1.2.3:57201 OPTIONS IMPORT: compression parms modified'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: 'Sun Oct 9 22:55:30 2016 FirstName.Lastname/220.1.2.3:57201 send_push_reply(): safe_cap=940'
2016-10-10 08:55:30+1000 [-] OVPN 1 OUT: "Sun Oct 9 22:55:30 2016 FirstName.Lastname/220.1.2.3:57201 SENT CONTROL [FirstName.Lastname]: 'PUSH_REPLY,explicit-exit-notify,route-gateway dhcp,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,route-gateway 10.100.254.254,ping 12,ping-restart 50,auth-token SESS_ID,compress stub,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,block-ipv6,ifconfig 10.100.255.100 255.255.0.0' (status=1)"
2016-10-10 08:55:30+1000 [-] OVPN 0 OUT: 'Sun Oct 9 22:55:30 2016 TCP connection established with [AF_INET]220.1.2.3:49769'
2016-10-10 08:55:30+1000 [-] OVPN 0 OUT: 'Sun Oct 9 22:55:30 2016 220.1.2.3:49769 SIGTERM[soft,port-share-redirect] received, client-instance exiting'

TinCanTech

hashkent wroteI'ma afraid that didn't appear to fix it

I'ma afraid you did not even get close to the details required to solve your problem.

hashkent

Are you referring to this:

To configure ethernet bridging, you must first use your OS's bridging capability to bridge the TAP interface with the ethernet NIC interface. For example, on Linux this is done with the brctl tool, and with Windows XP it is done in the Network Connections Panel by selecting the ethernet and TAP adapters and right-clicking on "Bridge Connections".

Its my understanding that OpenVPN does this for you in version 2.1.4

TinCanTech

:lol: Are you joking ? .. please show me the documentation :ugeek:

hashkent

I'll try and dig it up.

What are these used for then?

as0t0
as0t1
asbr0

TinCanTech

That would be Access-Server .. which means you are in the wrong Forum.