I've been pulling my few remaining hairs out for the past week... The Set-up: Openvpn running as a bridge between My office and home office. Office is running as a Server and the LAN is 192.168.2.x Home is running as a Client and the Lan is 192.168.2.x. Both of the Linux boxes are functioning as Router/Firewall/VPN. In the office side of things, all works no issues. If the client isn't running all on the home network runs fine.If the client is running the vpn bridge works fine, but the Internet doesn't. However, upon investigation I find that some sites work and other don't. For example, G00gle and Utube load no problem, but duckduck connection fails. This isn't my first rodeo with Openvpn but for the life of me, I can't figure it out. Both sides are creating and bonding to the bridge (br0) interface with the LAN (eth0). Also, iptable is masqing the outgoing traffic. Each side of the bridge should not be routing internet traffic through the bridge. I have tried making the openvpn server-bridge both 192.168.2.x and also 192.168.22.x. What the fsck am I missing ?!? :? [oconf=Server Bridge Config] local XXX.XXX.XXX.XXX port 1294 proto udp dev tap0 ca /etc/openvpn/ca.crt cert /etc/openvpn/server.crt key /etc/openvpn/server.key dh /etc/openvpn/dh2048.pem topology subnet server-bridge 192.168.22.1 255.255.255.0 192.168.22.2 192.168.22.10 ifconfig-pool-persist /etc/openvpn/ipp-internal.txt keepalive 10 120 tls-auth /etc/openvpn/ta.key 0 cipher AES-256-GCM comp-lzo max-clients 10 user nobody group nogroup persist-key persist-tun status /etc/openvpn/openvpn-status-internal.log log-append /var/log/openvpn-internal.log verb 4 mute 20 explicit-exit-notify 1 [/oconf] [oconf=Client Bridge Config] daemon OPENVPN client dev tap0 proto udp nobind remote XXX.XXX.XXX.XXX 1294 resolv-retry infinite nobind user nobody group nobody persist-key persist-tun ca /etc/openvpn/ca.crt cert /etc/openvpn/client.crt key /etc/openvpn/client.key tls-client tls-auth /etc/openvpn/ta.key 1 tls-cipher TLS-RSA-WITH-AES-256-GCM-SHA384 cipher AES-256-GCM auth sha1 comp-lzo adaptive verb 2 mute 3 writepid /var/run/openvpn.pid log-append /var/log/openvpn.log fast-io tun-mtu 1200 script-security 2 up "/etc/openvpn/bridgeup.sh" [/oconf]

Bridge Killing Internet

wildthing0429

I've been pulling my few remaining hairs out for the past week...

The Set-up: Openvpn running as a bridge between My office and home office. Office is running as a Server and the LAN is 192.168.2.x Home is running as a Client and the Lan is 192.168.2.x. Both of the Linux boxes are functioning as Router/Firewall/VPN. In the office side of things, all works no issues. If the client isn't running all on the home network runs fine.If the client is running the vpn bridge works fine, but the Internet doesn't. However, upon investigation I find that some sites work and other don't. For example, G00gle and Utube load no problem, but duckduck connection fails. This isn't my first rodeo with Openvpn but for the life of me, I can't figure it out. Both sides are creating and bonding to the bridge (br0) interface with the LAN (eth0). Also, iptable is masqing the outgoing traffic. Each side of the bridge should not be routing internet traffic through the bridge. I have tried making the openvpn server-bridge both 192.168.2.x and also 192.168.22.x. What the fsck am I missing ?!? :?

local XXX.XXX.XXX.XXX
port 1294
proto udp
dev tap0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key

dh /etc/openvpn/dh2048.pem
topology subnet
server-bridge 192.168.22.1 255.255.255.0 192.168.22.2 192.168.22.10
ifconfig-pool-persist /etc/openvpn/ipp-internal.txt
keepalive 10 120
tls-auth /etc/openvpn/ta.key 0

cipher AES-256-GCM
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
status /etc/openvpn/openvpn-status-internal.log
log-append /var/log/openvpn-internal.log
verb 4
mute 20
explicit-exit-notify 1

daemon OPENVPN
client
dev tap0
proto udp

nobind
remote XXX.XXX.XXX.XXX 1294
resolv-retry infinite
nobind

user nobody
group nobody
persist-key
persist-tun

ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key

tls-client
tls-auth /etc/openvpn/ta.key 1
tls-cipher TLS-RSA-WITH-AES-256-GCM-SHA384

cipher AES-256-GCM
auth sha1

comp-lzo adaptive

verb 2
mute 3

writepid /var/run/openvpn.pid
log-append /var/log/openvpn.log

fast-io

tun-mtu 1200

script-security 2

up "/etc/openvpn/bridgeup.sh"

wildthing0429

Somehow this got posted to the wrong topic - Please move it to the right area.

wildthing0429

It's okay, I found the problem in the openvpn config. I'd like to thanks everyone for the help and support, but alas NOBODY did :oops: