Hi ALL.
I've make config openvpn on centos 5.5. I have some error like this.
When i run scrip openvpn server.conf, it's inform me suceed. But when i show interface tunnel by command ifconfig, it;s not show interface tun0????
server.conf
tls-server
dev tun
proto udp
port 1194
server 10.8.0.0 255.255.255.0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
status openvpn-status.log
;log /var/log/openvpn.log
;log-append openvpn.log
persist-tun
persist-key
comp-lzo
verb 3
Openvpn.log
Thu Jan 12 16:06:01 2012 OpenVPN 2.0.9 i686-pc-linux [SSL] [LZO] [EPOLL] built on Jan 12 2012
Thu Jan 12 16:06:01 2012 WARNING: --keepalive option is missing from server config
Thu Jan 12 16:06:01 2012 Diffie-Hellman initialized with 1024 bit key
Thu Jan 12 16:06:01 2012 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 12 16:06:01 2012 TUN/TAP device tun0 opened
Thu Jan 12 16:06:01 2012 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Thu Jan 12 16:06:01 2012 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Thu Jan 12 16:06:01 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Jan 12 16:06:01 2012 UDPv4 link local (bound): [undef]:1194
Thu Jan 12 16:06:01 2012 UDPv4 link remote: [undef]
Thu Jan 12 16:06:01 2012 MULTI: multi_init called, r=256 v=256
Thu Jan 12 16:06:01 2012 IFCONFIG POOL: base=10.8.0.4 size=62
Thu Jan 12 16:06:01 2012 Initialization Sequence Completed
Thu Jan 12 16:06:02 2012 event_wait : Interrupted system call (code=4)
Thu Jan 12 16:06:02 2012 TCP/UDP: Closing socket
Thu Jan 12 16:06:02 2012 /sbin/route del -net 10.8.0.0 netmask 255.255.255.0
Thu Jan 12 16:06:02 2012 Closing TUN/TAP interface
"/var/log/openvpn.log" 18L, 1263C
client.conf
tls-client
dev tun
proto udp
remote 172.22.0.17 1194
ifconfig 10.8.0.5 255.255.255.0
ca "C:\\Program Files\\OpenVPN\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\keys\\client.crt"
key "C:\\Program Files\\OpenVPN\\keys\\client.key"
dh "C:\\Program Files\\OpenVPN\\keys\\dh1024.pem"
persist-tun
persist-key
comp-lzo
verb 3
Log Client
Thu Jan 12 16:22:13 2012 OpenVPN 2.2.0 Win32-MSVC++ [SSL] [LZO2] built on Apr 26 2011
Thu Jan 12 16:22:13 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Jan 12 16:22:13 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 12 16:22:13 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 12 16:22:13 2012 LZO compression initialized
Thu Jan 12 16:22:13 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 12 16:22:13 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Jan 12 16:22:13 2012 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Thu Jan 12 16:22:13 2012 There is a problem in your selection of --ifconfig endpoints [local=10.8.0.5, remote=255.255.255.0]. The local and remote VPN endpoints must exist within the same 255.255.255.252 subnet. This is a limitation of --dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.
Thu Jan 12 16:22:13 2012 Exiting
