virtual interfaces eth0:1

greg

hello,

I have openvpn on debian squeeze server with interface eth0. Everything works fine.
When I add the virtual interfaces (eth0:1, eth0:2 etc) with different IP's the client can't connect.... (The same configuration works on another server)

In log's I have:

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

What is wrong?

Thanks a lot!

greg

what it can be?

There is no error in any logs, no firewall runnig. The problem is in network/interfaces?

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth0
iface eth0 inet static
address 99.195.101.146
netmask 255.255.255.240
#network 99.195.101.144
#broadcast 99.195.101.159
gateway 99.195.101.145



auto eth0:1
iface eth0:1 inet static
address 90.195.101.147
netmask 255.255.255.240

The same config working fine on debian lenny..

Bebop

Why would it work on lenny and not squeeze? Problem could be specific to Debian.

So, you tried it on lenny, and on squeeze? On the same machine? Were there any other differences, such as hardware etc? (xen vs openvz etc) Are you on a VPS or dedicated pc....

Did you update from lenny to squeez via the apt-get dist-upgrade? that can break some things.

greg

you edited your reply....

So I have multiples dedicated servers (3 in fact). 2 on lenny, working fine. And another one on squeez how is not working with vitual interfaces.

Only differnece is on lenny servers I have grsec kernel and on squeez it is 2.6.32-5-686 (i can't install grsec) and it is the

janjust

post your server config file as well - to which IP are you connecting? it might very well be an assymmetric routing issue: packets come in on one i/f and leave another.

greg

I finally solved that , I am not sure how, but is working.

I think the problem was in the file /etc/network/run/ifstate, after rebooting the file was:

lo=lo
eth0:1=eth0:1
eth0:2=eth0:2
eth0:3=eth0:3
eth0:4=eth0:4
eth0:5=eth0:5
eth0:6=eth0:6
eth0:7=eth0:7
eth0:8=eth0:8
eth0:9=eth0:9
eth0:10=eth0:10
eth0:11=eth0:11
eth0:12=eth0:12
eth0=eth0

And it should be like this (eth0 on the top):

lo=lo
eth0=eth0
eth0:1=eth0:1
eth0:2=eth0:2
eth0:3=eth0:3
eth0:4=eth0:4
eth0:5=eth0:5
eth0:6=eth0:6
eth0:7=eth0:7
eth0:8=eth0:8
eth0:9=eth0:9
eth0:10=eth0:10
eth0:11=eth0:11
eth0:12=eth0:12

Thanks

[deleted]

greg wroteI finally solved that , I am not sure how, but is working.

I think the problem was in the file /etc/network/run/ifstate, after rebooting the file was:

lo=lo
eth0:1=eth0:1
eth0:2=eth0:2
eth0:3=eth0:3
eth0:4=eth0:4
eth0:5=eth0:5
eth0:6=eth0:6
eth0:7=eth0:7
eth0:8=eth0:8
eth0:9=eth0:9
eth0:10=eth0:10
eth0:11=eth0:11
eth0:12=eth0:12
eth0=eth0

And it should be like this (eth0 on the top):

lo=lo
eth0=eth0
eth0:1=eth0:1
eth0:2=eth0:2
eth0:3=eth0:3
eth0:4=eth0:4
eth0:5=eth0:5
eth0:6=eth0:6
eth0:7=eth0:7
eth0:8=eth0:8
eth0:9=eth0:9
eth0:10=eth0:10
eth0:11=eth0:11
eth0:12=eth0:12

Thanks

Have you confirmed that to be the issue?

greg

That was definitely the problem.

And after each reboot of server (or network) the eth0 appears in the end of /etc/network/run/ifstate so I modified the /etc/init.d/networking to ignore eth0 at reboot and now is working fine ;-)

greg

With another server (squeeze) the same probleme, after rebooting I have:

cat /etc/network/run/ifstate
lo=lo
eth0:1=eth0:1
eth0=eth0
eth0:2=eth0:2

I found another solution, modify allow-hotplug eth0 by auto eth0 in /etc/netwotk/interfaces.

Hope that will help someone.