[resolved] Client routing and martian prob
Posted: Wed Dec 21, 2011 10:15 pm
My goal is configuration for roadwarriors to server's lan hosts. The client and server connection is successful BUT shortly after client connection is established the syslog fills with martian complaints. Although a newbie to openvpn and networking, I am reasonably sure the martians mean a configuration error. I am not sure where to start troubleshooting the martians.
Routing from server to client is pushed successfully yet client is unable to reach host 10.10.11.8 while host 10.10.11.1 is reachable. While ssh'd into 10.10.11.1 the host 10.10.11.8 is reachable.
Really would appreciate another set of eyes to spot where I've gone wrong.
Regards,
flash
server.conf
client:
Routing from server to client is pushed successfully yet client is unable to reach host 10.10.11.8 while host 10.10.11.1 is reachable. While ssh'd into 10.10.11.1 the host 10.10.11.8 is reachable.
Really would appreciate another set of eyes to spot where I've gone wrong.
Regards,
flash
server.conf
Code: Select all
port 2727
proto udp
dev tap0
ca keys/ca.crt
cert keys/captain.crt
key keys/captain.key
dh keys/dh2048.pem
ifconfig-pool-persist logs/ipp.txt
server-bridge 10.10.12.254 255.255.255.0 10.10.12.80 10.10.12.90
client-to-client
keepalive 10 120
cipher AES-128-CBC
push "route 10.10.10.0 255.255.255.0"
push "route 10.10.11.0 255.255.255.0"
tls-auth keys/ta.key 0
comp-lzo
max-clients 5
user nobody
group nobody
persist-key
persist-tun
persist-local-ip
persist-remote-ip
push "persist-key"
push "persist-tun"
log-append /var/log/openvpn.log
status logs/openvpn-status.log
verb 5
=== netstat====
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
zz.zzz.zz.96 0.0.0.0 255.255.255.240 U 0 0 0 br0
10.10.12.0 0.0.0.0 255.255.255.0 U 0 0 0 br1
10.10.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.10.11.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2
0.0.0.0 zz.zzz.zz.zz 0.0.0.0 UG 0 0 0 br0
===Shorewall zones, interfaces files
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
bri ipv4 #zone for public address
net:bri bport4
opv ipv4
vpn:opv bport4
loc ipv4
dmz ipv4
#
#ZONE INTERFACE BROADCAST OPTIONS
bri br0 detect routefilter,routeback,bridge,tcpflags,logmartians,blacklist,nosmurfs
net br0:eth1
opv br1 detect bridge,routefilter,tcpflags,logmartians,routeback,nosmurfs
vpn br1:tap0 detect
loc eth0 detect routeback
dmz eth2 detect routeback
Code: Select all
conf:
client
dev tap0
port 2727
proto udp
remote xx.xxx.xx.101
ping 10
resolv-retry infinite
user nobody
group nobody
persist-key
persist-tun
ca client/ca.crt
cert client/client1.crt
key client/client1.key
ns-cert-type server
tls-auth client/ta.key 1
cipher AES-128-CBC
comp-lzo
pull
verb 5
log-append /var/log/openvpn.log
==netstat==
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 xx.1x.208.1 0.0.0.0 UG 0 0 0 br0
10.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 eth0
10.0.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.0.8.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2
10.10.10.0 10.10.12.254 255.255.255.0 UG 0 0 0 tap0
10.10.11.0 10.10.12.254 255.255.255.0 UG 0 0 0 tap0
10.10.12.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
xx.1x.208.0 0.0.0.0 255.255.248.0 U 0 0 0 br0
==shorewall interfaces and zones files==
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
bri ipv4 #zone for public address
dmz:bri bport4
vpn:bri bport4
wr0 ipv4
loc ipv4
#
#ZONE INTERFACE BROADCAST OPTIONS
bri br0 detect bridge,nosmurfs,blacklist,tcpflags,routeback,dhcp,routefilter
dmz br0:eth1 detect
vpn br0:tap0 detect
loc eth2 detect dhcp,tcpflags,routefilter
wr0 eth0 detect dhcp,tcpflags,routefilter