D
D
Denis Sechin2017-01-11 12:51:11
openvpn
Denis Sechin, 2017-01-11 12:51:11

Issues with openvpn routes?

I also received new keys from the openvpn 14.04 server, with them the tunnel rises, the routes also rise, but the remotes do not ping, where did I mess up?
vpn client log

Wed Jan 11 11:45:36 2017 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb 2 2016
Wed Jan 11 11 :45:36 2017 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Wed Jan 11 11:45:36 2017 WARNING: file 'tac.key' is group or others accessible
Wed Jan 11 11:45:36 2017 Control Channel Authentication : using
' tac.key' as a OpenVPN static key file
.xxx.6:55xxx
Wed Jan 11 11:45:36 2017 [cerberus] Peer Connection Initiated with [AF_INET]xx.xx.xxx.6:55xxx
Wed Jan 11 11:45:38 2017 TUN/TAP device tun1 opened
Wed Jan 11 11:45:38 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun1 up mtu 1500
Wed Jan 11 11:45:38 2017 /sbin/ip addr add dev tun1 10.13.0.3/20 broadcast 10.13.15.255
RTNETLINK answers: File exists
Wed Jan 11 11:45:38 2017 ERROR: Linux route add command failed: external program exited with error status: 2
RTNETLINK answers: File exists
Wed Jan 11 11:45:38 2017 Initialization Sequence Completed

route-n

0.0.0.0 10.10.1.254 0.0.0.0 UG 100 0 0 ENP5S0
10.10.1.0 0.0.0.0 255.255.255.0 U 100 0.0 ENP5S0
10.13.0.0 0.0.0.0 255.255.240.0 U 0 0 0 Tun0
10.20.22.0 10.13.0.1 255.22.0 10.13.0.1 255.255. 255.0 Ug 0 0 0 0 Tun0
10.20.24.0 10.13.0.1 255.255.255.0 UG 0 0 0 0 TUN0
10.20.25.0 10.13.0.1 255.255.255.0 UG 0 0 0 TUN0
10.20.30.0 10.13.0.1 255.255.255.0 UG 0 0 0 TUN0
10.40. 0.0 10.13.0.1 255.248.0.0 UG 0 0 0 tun0
10.45.0.0 10.13.0.1 255.255.0.0 UG 0 0 0 tun0
10.49.0.0 10.13.0.1 255.255.0.0 Ug 0 0 0 Tun0
10.50.0.0 10.13.0.1 255.255.0.0 UG 0 0 0 TUN0
10.200.201.0 10.13.0.1 255.255.255.0 UG 20 0 0 TUN0
10.200.202.0 10.13.0.1 255.255. 255.0 UG 20 0 0 0 Tun0
10.200.203.0 10.13.0.1 255.255.255.0 UG 20 0 0 TUN0
10.200.204.0 10.13.0.1 255.255.255.0 UG 20 0.0 0.0.0 255.25.0.0
0.0.0.0 255.255.0.0 U 1000 0 0 ENP5S0
192.168. 1.0 10.13.0.1 255.255.255.0 UG 0 0 0 tun0
192.168.37.0 10.13.0.1 255.255.255.0 UG 0 0 0 tun0
192.168.38.0 10.13.0.1 255.255.255.0 Ug 0 0 0 0 Tun0
192.168.39.0 10.13.0.1 255.255.255.0 Ug 0 0 0 0 Tun0
192.168.40.0 10.13.0.1 255.255.255.0 UG 0 0 0 TUN0
192.168.41.0 10.13.0.1 255.255. 255.0 Ug 0 0 0 Tun0
192.168.42.0 10.13.0.1 255.255.255.0 Ug 0 0 0 0 Tun0
192.168.43.0 10.13.0.1 255.255.255.0 UG 0 0 0 TUN0
192.168.44.0 10.13.0.1 255.255.255.0 UG 0 0 0 TUN0
192.168. 45.0 10.13.0.1 255.255.255.0 UG 0 0 0 tun0
192.168.46.0 10.13.0.1 255.255.255.0 UG 0 0 0 tun0
192.168.47.0 10.13.0.1 255.255.255.0 Ug 0 0 0 Tun0
192.168.48.0 10.13.0.1 255.255.255.0 UG 0 0 0 0 Tun0
192.168.49.0 10.13.0.1 255.255.255.0 Ug 0 0 0 Tun0
192.168.50.0 10.13.0.1 255.255. 255.0 UG 0 0 0 0 Tun0
192.168.51.0 10.13.0.1 255.255.255.0 Ug 0 0 0 0 Tun0
192.168.52.0 10.13.0.1 255.255.255.0 UG 0 0 0 TUN0
192.168.53.0 10.13.0.1 255.255.255.0 UG 0 0 0 TUN0
192.168. 54.0 10.13.0.1 255.255.255.0 UG 0 0 0 tun0
192.168.55.0 10.13.0.1 255.255.255.0 UG 0 0 0 tun0
192.168.101.0 10.13.0.1 255.255.255.0 UG
0
0 0 tun0

traceroute to the network I need

traceroute to 10.49.1.254 (10.49.1.254), 30 hops max, 60 byte packets
1

Answer the question

In order to leave comments, you need to log in

2 answer(s)
W
Wexter, 2017-01-11
@Wexter

on the host in the network you need, the route to the network is registered, where are you pinging from?
is the openvpn server registered as the default gateway on the remote host?
or raise NAT on the openvpn server towards all clients.

Y
younghacker, 2017-02-03
@younghacker

Root cause:
client log says tun1
and in the route to the target host, which then responds, it says tun0
Ugly:
Routes added by hand?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question