topology subnet
Posted: Fri Sep 16, 2022 2:24 pm
Hi,
I have problems configuring topology subnet in a way that server and client have different IPs.
server.conf:
client.conf:
Server also pushes stuff to client:
Client can connect to server, but setting that route gives:
PUSH on the client side looks like this:
Is it even possible to have server on IP 172.30.10.1 and client on IP 172.30.20.10? If yes, how? Using topology subnet.
Best regards,
Kovi
I have problems configuring topology subnet in a way that server and client have different IPs.
server.conf:
Code: Select all
dev ovpns3
verb 1
dev-type tun
dev-node /dev/tun3
writepid /var/run/openvpn_server3.pid
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp4
auth SHA256
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local XXX.XXX.XXX.XXX
engine rdrand
tls-server
server 172.30.10.0 255.255.255.0
client-config-dir /var/etc/openvpn/server3/csc
ifconfig 172.30.10.1 172.30.10.2
lport 1196
management /var/etc/openvpn/server3/sock unix
capath /var/etc/openvpn/server3/ca
cert /var/etc/openvpn/server3/cert
key /var/etc/openvpn/server3/key
dh /etc/dh-parameters.2048
tls-auth /var/etc/openvpn/server3/tls-auth 0
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
data-ciphers-fallback AES-256-CBC
allow-compression no
persist-remote-ip
float
topology subnet
explicit-exit-notify 1
inactive 300Code: Select all
dev tun
persist-tun
persist-key
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
data-ciphers-fallback AES-256-CBC
auth SHA256
tls-client
client
resolv-retry infinite
remote XXX.XXX.XXX.XXX 1196 udp4
nobind
remote-cert-tls server
explicit-exit-notify
verb 4Code: Select all
ifconfig-push 172.30.20.10 255.255.255.0
push "route 172.20.11.0 255.255.0.0"Code: Select all
2022-09-16 16:19:15 us=228587 net_addr_v4_add: 172.30.20.10/24 dev tun1
2022-09-16 16:19:15 us=228922 net_route_v4_add: 172.20.11.0/16 via 172.30.10.1 dev [NULL] table 0 metric -1
2022-09-16 16:19:15 us=228976 sitnl_send: rtnl: generic error (-22): Invalid argument
2022-09-16 16:19:15 us=229033 ERROR: Linux route add command failedCode: Select all
PUSH: Received control message: 'PUSH_REPLY,route-gateway 172.30.10.1,topology subnet,ping 10,ping-restart 60,route 172.20.11.0 255.255.0.0,ifconfig 172.30.20.10 255.255.255.0,peer-id 0,cipher AES-256-GCM'Best regards,
Kovi