[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] TAP multiple connection issued (replay attack error)


  • Subject: Re: [Openvpn-users] TAP multiple connection issued (replay attack error)
  • From: "James Yonan" <jim@xxxxxxxxx>
  • Date: Sun, 24 Aug 2003 03:46:03 -0000

Alexandre Dulaunoy <adulau@xxxxxx> said:

> Dear All,
> 
> I have  a simple  configuration with multiple  tap tunnel but  I can't
> activate all the  tunnel in the same mesh. (with  tun, this is working
> quite well)
> 
> I got  multiple errors about the  replay id issue. Is  it a well-known
> issue  with  tap  ?  I  can't   switch  to  tun  because  of  a  mixed
> environnement of OS. 

Alexandre,

Replay ID errors can happen for a number of reasons.  I have seen cases where
a UDP link over the internet resulted in packets getting duplicated by an
errant router somewhere in the path.  OpenVPN will still function in a
situation like this, filtering out the duplicates.  --mute can be used to
suppress the stream of warnings which will result.

Replay ID errors might also occur if you have incompatible OpenVPN options on
either end of the connection.  The FAQ now contains more information on
options compatibility, specifically which options need to be compatible on
both ends of the connection.  If you use TLS mode, OpenVPN will check for
options compatibility automatically if you are using the same OpenVPN version
on either end of the connection.  In static key mode, there is no automatic
check for options compatibility because static key mode uses a stateless,
handshake-free protocol.

James


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users