|
|
On Wed, 01 Oct 2003 12:36:21 +0200, I wrote: > This tunnel just won't stay up, and it looks like it's the TAP driver > that keeps going down. OpenVPN is set to auto-restart when the tunnel > goes away: it restarts, but it fails to re-establish the tunnel. > Restarting the OpenVPN service doesn't help. It happened again with beta 8 -- but by examining the routing table while the tunnel was still down, I think I found it: it's my own stupid fault, for entering a default gateway in the TAP device settings. I hope it isn't documented that you should never do that (in that case I either overlooked it or forgot that I read it). This was the routing table: | Network Destination Netmask Gateway Interface Metric | 0.0.0.0 0.0.0.0 10.13.9.1 10.13.9.10 1 | 0.0.0.0 0.0.0.0 10.254.254.5 10.254.254.6 1 | 10.13.9.0 255.255.255.0 10.13.9.10 10.13.9.10 1 | 10.13.9.10 255.255.255.255 127.0.0.1 127.0.0.1 1 | 10.254.254.4 255.255.255.252 10.254.254.6 10.254.254.6 1 | 10.254.254.6 255.255.255.255 127.0.0.1 127.0.0.1 1 | 10.255.255.255 255.255.255.255 10.13.9.10 10.13.9.10 1 | 10.255.255.255 255.255.255.255 10.254.254.6 10.254.254.6 1 | 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 | 192.168.0.0 255.255.255.0 10.254.254.5 10.254.254.6 1 | 224.0.0.0 224.0.0.0 10.13.9.10 10.13.9.10 1 | 224.0.0.0 224.0.0.0 10.254.254.6 10.254.254.6 1 | 255.255.255.255 255.255.255.255 10.254.254.6 10.254.254.6 1 | Default Gateway: 10.254.254.5 10.254.254.5 is the tunnel's remote side, but it was down. IMO the default gateway should always be 10.13.9.1 (the firewall), and the second line in this table shouldn't exist at all (the other lines going through the tunnel are static routes in RRAS). The remote machine's address is on the internet, so it only matches 0.0.0.0 in this table. It wouldn't surprise me if OpenVPN was trying to re-establish the tunnel through the tunnel - like a snake eating its own tail. In the other setup where the tunnel always worked, there's a more specific route to the other machine because both are on the same LAN, so it always takes the correct path. I fixed it, I'll let you know if the problem would still return. ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |