Add host route (/32 route) into kernel on client up

How to customize and extend your OpenVPN installation.
Post Reply
cbabs
OpenVpn Newbie
Posts: 3
Joined: Sun Nov 12, 2017 2:58 am

Add host route (/32 route) into kernel on client up

Post by cbabs » Sun Nov 12, 2017 3:04 am

Hi,

I'm trying to add /32 routes when a client comes up and remove them when they disconnect. Cisco might call it reverse route injection. Unfortunately it seems a bug is in my way. https://community.openvpn.net/openvpn/ticket/180

I use RADIUS for auth and this causes the -client-connect script to not work. Any ideas I can get the client IP into the route table? I mean please and thank you!

CB

User avatar
TinCanTech
OpenVPN Protagonist
Posts: 3245
Joined: Fri Jun 03, 2016 1:17 pm

Re: Add host route (/32 route) into kernel on client up

Post by TinCanTech » Mon Nov 13, 2017 2:21 am

Your problem may or may not have anything what-so-ever to do with #180

Please see:
HOWTO: Request Help ! {2}

cbabs
OpenVpn Newbie
Posts: 3
Joined: Sun Nov 12, 2017 2:58 am

Re: Add host route (/32 route) into kernel on client up

Post by cbabs » Tue Nov 14, 2017 4:06 am

That's why I said 'seems' not 'is'. Based off the error I was getting it seemed the same as 180. If I was sure I would have said 'is'. Sorry to insult anyone, I'm new to this forum.

User avatar
TinCanTech
OpenVPN Protagonist
Posts: 3245
Joined: Fri Jun 03, 2016 1:17 pm

Re: Add host route (/32 route) into kernel on client up

Post by TinCanTech » Tue Nov 14, 2017 12:13 pm

We cannot see your --client-connect script nor the openvpn log file ..

Please see:
HOWTO: Request Help ! {2}

Note: #180 is a very specific bug to do with the order of execution, if you are really hitting that barrier then you will probably have to change what you are doing because I don't think that bug is going to get fixed any time soon ..

cbabs
OpenVpn Newbie
Posts: 3
Joined: Sun Nov 12, 2017 2:58 am

Re: Add host route (/32 route) into kernel on client up

Post by cbabs » Tue Nov 14, 2017 3:26 pm

I read the guide. I will repost with more useful info shortly. Thank you.

Post Reply