[lug] OpenVPN second instance on a server not working

David L. Anselmi anselmi at anselmi.us
Wed Sep 8 20:08:47 MDT 2010


Carl Wagner wrote:
> Hi,
>
> I have having problems getting a second instance of OpenVPN working.
[...]
> tun1      Link encap:UNSPEC  HWaddr
> 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00          inet
> addr:10.0.12.1  P-t-P:10.0.12.2  Mask:255.255.255.255
>           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
>           RX packets:159 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:100
>           RX bytes:8100 (7.9 KiB)  TX bytes:0 (0.0 b)

I'm guessing a routing problem, because tun1 isn't transmitting.  The server is getting your echo 
requests but isn't trying to send the replies through tun1.

What's the source IP of the echo requests?  It has to be 10.0.12.x or the replies won't come back 
through the tunnel.

If you can see the requests on the server then the client routing is probably correct.  The server 
routing seems to be also (I assume the default gateway uses the eth device).  So client source 
address seems most likely to me.

> Destination     Gateway         Genmask         Flags Metric Ref    Use  Iface
> 10.0.12.2       *               255.255.255.255 UH    0      0        0  tun1
> 10.0.12.0       10.0.12.2       255.255.255.0   UG    0      0        0  tun1

This matches what my VPN server uses.

Why do you want two instances?  One instance can manage multiple connections.

Dave



More information about the LUG mailing list