|
|
Hello, I'm quite new to openvpn and to this list. I have problems to get openvpn working. I could not find any related info in the list archives so I hope to gather some hints here. I compiled and installed openvpn on two linux boxes (SuSE 7.3, Kernel 2.4.18 with tap/tun modules). No probs so far. I went through the given example without encryption. No problem, but I could not ping the 'other' machine. This is on 'june' (192.168.100.7) ws-gt:~#openvpn --remote may --dev tun7 --verb 8 0: Current Parameter Settings: 1: local = '(null)' 2: remote = 'may' 3: local_port = 5000 4: remote_port = 5000 5: remote_float = DISABLED 6: ipchange = '(null)' 7: bind_local = ENABLED 8: dev = 'tun7' 9: shaper = 0 10: tun_mtu = 1450 11: tun_mtu_defined = ENABLED 12: udp_mtu = 0 13: udp_mtu_defined = DISABLED 14: tun_af_inet = DISABLED 15: mlock = DISABLED 16: username = '(null)' 17: chroot_dir = '(null)' 18: up_script = '(null)' 19: down_script = '(null)' 20: daemon = DISABLED 21: nice = 0 22: verbosity = 8 23: gremlin = DISABLED 24: comp_lzo = DISABLED 25: comp_lzo_adaptive = ENABLED 26: shared_secret_file = '(null)' 27: ciphername_defined = ENABLED 28: ciphername = 'BF-CBC' 29: authname_defined = ENABLED 30: authname = 'SHA1' 31: keysize = 0 32: packet_id = ENABLED 33: iv = ENABLED 34: tls_server = DISABLED 35: tls_client = DISABLED 36: ca_file = '(null)' 37: dh_file = '(null)' 38: cert_file = '(null)' 39: priv_key_file = '(null)' 40: cipher_list = '(null)' 41: tls_verify = '(null)' 42: tls_timeout = 5 43: renegotiate_bytes = 0 44: renegotiate_packets = 0 45: renegotiate_seconds = 3600 46: handshake_window = 60 47: transition_window = 3600 48: tls_auth_file = '(null)' 49: OpenVPN 1.1.0 Built On Apr 10 2002 50: UDP link local (bound): [undef]:5000 51: UDP link remote: 192.168.100.7:5000 52: TUN/TAP device tun7 opened 53: ******* WARNING *******: all encryption and authentication features disabled -- all data will be tunnelled as cleartext 54: Data Channel MTU parms: mtu=1450 extra_frame=0 extra_buffer=0 extra_tun=0 55: INTERVAL TRIGGER Now I did a 'ping may' on june and openvpn on june went crazy: 56: select returned 1 57: read from tun returned 84 58: select returned 1 59: write to udp returned 84 60: UDP WRITE to 192.168.100.7:5000: DATA 45000054 00004000 4001f148 c0a86408 c0a86407 0800d200 ea130000 3cb3ce6[more...] 61: select returned 1 62: read from tun returned 112 63: select returned 1 64: write to udp returned 112 65: UDP WRITE to 192.168.100.7:5000: DATA 45000070 00004000 4011f11c c0a86408 c0a86407 13881388 005c8ec5 4500005[more...] 66: select returned 1 67: read from tun returned 140 68: select returned 1 69: write to udp returned 140 70: UDP WRITE to 192.168.100.7:5000: DATA 4500008c 00004000 4011f100 c0a86408 c0a86407 13881388 0078d85b 4500007[more...] 71: select returned 1 72: read from tun returned 168 73: select returned 1 74: write to udp returned 168 75: UDP WRITE to 192.168.100.7:5000: DATA 450000a8 00004000 4011f0e4 c0a86408 c0a86407 13881388 0094d83f 4500008[more...] more and more and more ... endless This behaviour is symetrical, i.e. not matter on which box I did the ping, the local openvpn went crazy. BTW a tcpdump on the local tunnel interface gave these results : 07:42:36.978406 192.168.100.8.5000 > 192.168.100.7.5000 : udp 132 (DF) 07:42:36.984440 192.168.100.8.5000 > 192.168.100.7.5000 : udp 1196 (DF) 07:42:36.986391 192.168.100.8.5000 > 192.168.100.7.5000 : udp 1444 (frag 2227:1424@0+) 07:42:36.992436 192.168.100.8 > 192.168.100.7: (frag2 227:28@1424) 07:42:36.993621 192.168.100.8.5000 > 192.168.100.7.5000 : udp 1444 (frag 2228:1424@0+) 07:42:36.998021 192.168.100.8 > 192.168.100.7: (frag 2228:28@1424) 07:42:37.004172 192.168.100.8.5000 > 192.168.100.7.5000 : udp 1444 (frag 2229:1424@0+) 07:42:37.006295 192.168.100.8 > 192.168.100.7: (frag 2229:28@1424) Do fragmentation cause my problems ? Are there any hints ?? I think I've made some basic mistakes or understood somethink completely wrong so I would apreciate any help!!! TIA Juergen _______________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |