[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] unstable routes/tunnel + solution


  • Subject: Re: [Openvpn-users] unstable routes/tunnel + solution
  • From: Florin Andrei <florin@xxxxxxxxxxxxxxx>
  • Date: 04 Feb 2004 23:04:01 -0800

It is fixed in 1.6beta5 with this configuration:

port 5000
secret florin.key
ifconfig 192.168.1.252 255.255.255.0
remote X.Y.Z.189
route X.Y.Z.192 255.255.255.192 192.168.1.253
route-delay 10
dev tap
fragment 1400
mssfix
ifconfig-nowarn
ip-win32 dynamic
ping 10
comp-lzo
verb 3

On Thu, 2004-01-29 at 01:32, Florin Andrei wrote:
> Using openvpn-1.6beta1 on a Win2K Professional (fully updated) road
> warrior.
> The server is running same openvpn version on Linux.
> Config file for road warrior:
> 
> #################################
> remote X.Y.Z.189
> port 5000
> dev tap
> fragment 1400
> mssfix
> secret florin.key
> ifconfig 192.168.1.252 255.255.255.0
> ifconfig-nowarn
> route X.Y.Z.192 255.255.255.192 192.168.1.253
> ping 10
> comp-lzo
> verb 3
> #################################
> 
> Problem is, that static route simply disappears from the routing table
> after a few minutes. I think there is at least a temporal correlation
> between that and some entries in the Event Viewer which go along the
> lines "the TAP interface cannot renew its DHCP lease, will try again
> blah-blah".
> It seems to me like Windows tries to renew the DHCP release, but it
> doesn't get anything except the first answer. After a while, it probably
> tries to get clever and does something which makes the route vanish.
> After some more time, even the tunnel goes down (i actually think it's
> only the main tunnel route that disappears, because the interface seems
> to be up).
> 
> I was able to work around this problem by editing the TAP interface in
> Windows and statically assign it the desired address (instead of letting
> it slurp in the DHCP info); then i added this in the config file:
> 
> ip-win32 manual
> route-delay 10
> 
> Now it's rock solid. The static route does not disappear, the tunnel
> keeps on working indefinitely.
> However, the method is cumbersome; it's really the VPN software's job to
> assign addresses to VPN interfaces.
> 
> I suggest either finding another method to assign the address to the TAP
> interface, or maybe keep on answering the DHCP requests?
-- 
Florin Andrei

http://florin.myip.org/



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users