im trying to configure a openvpn server in a linux device without iptables.
I want the openvpn client to have access to everything that the wan0 from the openvpn server have access too.
the device have route and ip commands.
i compiled openvpn binary for the system:
# ./openvpn --config openvpn.conf
Tue Jul 18 18:20:35 2017 WARNING: file 'server.key' is group or others accessible
Tue Jul 18 18:20:35 2017 OpenVPN 2.4.3 armeb-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jul 18 2017
Tue Jul 18 18:20:35 2017 library versions: OpenSSL 1.1.0 25 Aug 2016, LZO 2.10
Tue Jul 18 18:20:35 2017 Diffie-Hellman initialized with 2048 bit key
Tue Jul 18 18:20:35 2017 ROUTE_GATEWAY 10.121.96.1/255.255.240.0 IFACE=wan0 HWADDR=d4:04:cd:24:ad:8d
Tue Jul 18 18:20:35 2017 TUN/TAP device tun0 opened
Tue Jul 18 18:20:35 2017 TUN/TAP TX queue length set to 100
Tue Jul 18 18:20:35 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Jul 18 18:20:35 2017 /sbin/ifconfig tun0 10.0.2.1 pointopoint 10.0.2.2 mtu 1500
Tue Jul 18 18:20:35 2017 /sbin/route add -net 10.0.2.0 netmask 255.255.255.0 gw 10.0.2.2
Tue Jul 18 18:20:35 2017 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Tue Jul 18 18:20:35 2017 Socket Buffers: R=[194560->194560] S=[194560->194560]
Tue Jul 18 18:20:35 2017 setsockopt(IPV6_V6ONLY=0)
Tue Jul 18 18:20:35 2017 UDPv6 link local (bound): [AF_INET6][undef]:1194
Tue Jul 18 18:20:35 2017 UDPv6 link remote: [AF_UNSPEC]
Tue Jul 18 18:20:35 2017 MULTI: multi_init called, r=256 v=256
Tue Jul 18 18:20:35 2017 IFCONFIG POOL: base=10.0.2.4 size=62, ipv6=0
Tue Jul 18 18:20:35 2017 Initialization Sequence Completed
server: configuration file
--mode server
--port 1194
--proto udp
--dev tun
--tls-server
--ca ca.crt
--dh dh2048.pem
--cert server.crt
--key server.key
--tmp-dir /var/tmp
--keepalive 10 120
--comp-lzo
--persist-key
--persist-tun
--ccd-exclusive
--client-config-dir clients
--server 10.0.2.0 255.255.255.0
--push "dhcp-option DNS 10.0.2.1"
--push "dhcp-option DNS 10.0.2.6"
--push "redirect-gateway"
--verb 3
route table:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 10.121.96.1 0.0.0.0 UG 0 0 0 wan0
10.0.2.0 10.0.2.2 255.255.255.0 UG 0 0 0 tun0
10.0.2.2 * 255.255.255.255 UH 0 0 0 tun0
10.121.96.0 * 255.255.240.0 U 0 0 0 wan0
192.168.100.0 * 255.255.255.0 U 0 0 0 lan0
192.168.199.0 * 255.255.255.0 U 0 0 0 l2sd0.400
192.168.254.0 * 255.255.255.0 U 0 0 0 l2sd0.4093
arp:
Address HWtype HWaddress Flags Mask Iface
10.121.113.10 ether 00:12:10:85:32:5e C * wan0
10.121.96.1 ether 00:12:10:85:32:5e C * wan0
192.168.100.20 ether e0:3f:49:9e:17:98 C * lan0
192.168.254.254 (incomplete) * l2sd0.409
server ping to client:
PING 10.0.2.5 (10.0.2.5): 56 data bytes
64 bytes from 10.0.2.5: seq=0 ttl=64 time=90.000 ms
64 bytes from 10.0.2.5: seq=1 ttl=64 time=90.000 ms
64 bytes from 10.0.2.5: seq=2 ttl=64 time=120.000 ms
64 bytes from 10.0.2.5: seq=3 ttl=64 time=120.000 ms
64 bytes from 10.0.2.5: seq=4 ttl=64 time=150.000 ms
client ping to tun0 of server
PING 10.0.2.1 (10.0.2.5): 56 data bytes
64 bytes from 10.0.2.1: seq=0 ttl=64 time=32.000 ms
64 bytes from 10.0.2.1: seq=1 ttl=64 time=57.000 ms
64 bytes from 10.0.2.1: seq=2 ttl=64 time=111.000 ms
64 bytes from 10.0.2.1: seq=3 ttl=64 time=141.000 ms
64 bytes from 10.0.2.1: seq=4 ttl=64 time=97.000 ms
client ping to server wan0
Pinging 10.121.96.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
