I'm trying to set up a VPN using a static key. Very simple server config from: http://www.openmaniak.com/openvpn_tutorial.php#static and the official docs - https://openvpn.net/community-resources/static-key-mini-howto/ Basically the Server Config is: [oconf=Server Config] dev tun topology subnet secret /etc/openvpn/keys/static.key ifconfig 10.8.0.1 10.8.0.2 [...][/oconf] But the server won't start, it's giving this error: [code] Error: ??? prefix is expected rather than "10.8.0.1/-1". [/code] No idea what that means and googling didn't help, I'll just comment it out. And it works! Except now the client side is warning: [code] Sat Sep 05 15:48:24 2020 WARNING: 'ifconfig' is present in local config but missing in remote config, local='ifconfig 10.8.0.2 10.8.0.1' [/code] Client has: [oconf=Server Config] ifconfig 10.8.0.2 10.8.0.1 [/oconf] But if I comment out that line on the client, the client fails at parsing the config. Any thoughts what's going on? Do I just leave the line in the client and ignore the clientside warning?

[quote=zinpin post_id=94268 time=1599317999 user_id=51346] Server Config topology subnet [/quote]You did not read the howto very carefully .. [quote=zinpin post_id=94268 time=1599317999 user_id=51346] Do I just leave the line in the client and ignore the clientside warning? [/quote]Ignoring warnings is the fastest way to fail.

[quote=TinCanTech post_id=94270 time=1599322938 user_id=37053] [quote=zinpin post_id=94268 time=1599317999 user_id=51346] Server Config topology subnet [/quote]You did not read the howto very carefully .. [/quote] Not helpful. For all you know I'm dyslexic and/or have some form of learning disorder. Your response isn't very inclusionary or helpful at all. Re-reading it I still can't see what the problem is. [quote] Ignoring warnings is the fastest way to fail. [/quote] There are a lot of rubbish developers out there who don't properly maintain their warnings so I've found that most warnings are spurious. However, given this is new software to me, I figured "I'll ask the experts" because hey, maybe the warning is important or I missed something obvious. Anyway, doesn't matter, I'm done with OpenVPN; solved my problem much more simply. Thanks anyway.

Please read [code]--topology mode[/code] in manual 2.4: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage

ifconfig and static key - error or warning

zinpin

I'm trying to set up a VPN using a static key. Very simple server config from: http://www.openmaniak.com/openvpn_tutorial.php#static and the official docs - https://openvpn.net/community-resources/static-key-mini-howto/

Basically the Server Config is:

dev tun
topology subnet
secret /etc/openvpn/keys/static.key
ifconfig 10.8.0.1 10.8.0.2
[...]

But the server won't start, it's giving this error:

	Error: ??? prefix is expected rather than "10.8.0.1/-1".

No idea what that means and googling didn't help, I'll just comment it out. And it works! Except now the client side is warning:

	Sat Sep 05 15:48:24 2020 WARNING: 'ifconfig' is present in local config but missing in remote config, local='ifconfig 10.8.0.2 10.8.0.1'

Client has:

ifconfig 10.8.0.2 10.8.0.1

But if I comment out that line on the client, the client fails at parsing the config.

Any thoughts what's going on? Do I just leave the line in the client and ignore the clientside warning?

TinCanTech

zinpin wrote Server Config
topology subnet

You did not read the howto very carefully ..

zinpin wrote Do I just leave the line in the client and ignore the clientside warning?

Ignoring warnings is the fastest way to fail.

zinpin

TinCanTech wrote
zinpin wrote Server Config
topology subnet
You did not read the howto very carefully ..

Not helpful. For all you know I'm dyslexic and/or have some form of learning disorder. Your response isn't very inclusionary or helpful at all.
Re-reading it I still can't see what the problem is.

Ignoring warnings is the fastest way to fail.

There are a lot of rubbish developers out there who don't properly maintain their warnings so I've found that most warnings are spurious.
However, given this is new software to me, I figured "I'll ask the experts" because hey, maybe the warning is important or I missed something obvious.

Anyway, doesn't matter, I'm done with OpenVPN; solved my problem much more simply. Thanks anyway.

Pippin

Please read

--topology mode

in manual 2.4:
https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage