OpenVPN: Can't "push route"

jsteel · 2011-04-19 07:51:00

Hi,

I followed https://wiki.archlinux.org/index.php/OpenVPN and have OpenVPN working well, but I can't figure out how to add an additional route for my clients.

I've tried adding (for example) push "route 192.168.0.0 255.255.255.0" to my /etc/openvpn/openvpn.conf on the VPN server but that has not helped.

Thanks

Last edited by jsteel (2011-04-19 10:03:11)

fukawi2 · 2011-04-19 10:31:50

jsteel wrote:

I've tried adding (for example) push "route 192.168.0.0 255.255.255.0" to my /etc/openvpn/openvpn.conf on the VPN server but that has not helped.

That should work... You restarted the server and client right? You might need to dig into the debug output to confirm that the server is sending it, and see what the client has to say about it.

jsteel · 2011-04-19 21:10:22

I've found the following from my client "Cannot allocate TUN/TAP dev dynamically".

As a workaround, I've tried specifying the address pool range but I'm having trouble with that too:

Options error: --server already defines an ifconfig-pool, so you can't also specify --ifconfig-pool explicitly

... but I can't see where the pool is set other than in the openvpn.conf file which I have tried to set myself. I wonder if this issue is easier to fix? And it is probably preferable over the push route option.

Thanks

fukawi2 · 2011-04-19 23:04:46

Are you configuring a bridged or routed VPN? Can you post your .conf files?

jsteel · 2011-04-20 07:50:19

The push route option just decided to work (maybe it was a typo on my behalf, or something else simple I overlooked) and I got the address pool working by using:

server-bridge 192.168.8.4 255.255.255.0 192.168.8.128 192.168.8.254

... instead of the "server" line. I don't know too much about OpenVPN (I only just started looking at it a few day ago). I assume this server-bridge option is suitable to provide a specific address pool? It appears to work without any issues.

Thanks

fukawi2 · 2011-04-20 08:38:02

I've never done bridged configurations with OpenVPN, only routed, so I'm not sure. Never had to use the 'server-bridge' directive.

jsteel · 2011-04-20 09:33:46

What's the main difference between bridged and routed? I just followed the wiki which I assume recommends the bridged approach?

fukawi2 · 2011-04-20 12:34:29

Think of a bridge like a switch -- it just connects 2 networks together like they were all one big LAN. Routed keeps them separate, but still able to talk to each other.

From a technical perspective, Bridging is joining multiple Layer 2 networks (the same broadcast domain), while Routing is connecting multiple Layer 3 networks.

This might help: http://www.ibh.de/netglossary/net_02.htm

Personally, I prefer routed VPN's since I don't like introducing high latency links into a Layer 2.... But that's just my preference.

Arch Linux

#1 2011-04-19 07:51:00

OpenVPN: Can't "push route"

#2 2011-04-19 10:31:50

Re: OpenVPN: Can't "push route"

#3 2011-04-19 21:10:22

Re: OpenVPN: Can't "push route"

#4 2011-04-19 23:04:46

Re: OpenVPN: Can't "push route"

#5 2011-04-20 07:50:19

Re: OpenVPN: Can't "push route"

#6 2011-04-20 08:38:02

Re: OpenVPN: Can't "push route"

#7 2011-04-20 09:33:46

Re: OpenVPN: Can't "push route"

#8 2011-04-20 12:34:29

Re: OpenVPN: Can't "push route"

Board footer