Have a look at this

http://bugs.endian.it/view.php?id=210

Thomas

>>> "Gregory Machin" <[EMAIL PROTECTED]> 5.7.2007 18:18 >>>
Hi
I have configured openvpn on endian firewall, using the interface, and
on my windows xp laptop, i installed openvpn for www.openvpn.net and
openvpn gui..
from my laptop i can ping the private (green) interface of the efw
openvpn box,
from my laptop via the vpn (i using 3g connection/dialup) but i cant
ping any of the other machines on the network that are connected
network on the same ip range ..
By my understanding it's a bridged vpn so my laptop should be treated
as part of the local lan... so what have i missed ? ?



client config (as suggested by efw manual)

client
dev tap
proto tcp
remote proxy.vpn.example.com << edited
resolv-retry infinite
nobind
persist-key
persist-tun
ca proxy-vpn-ct-net-org.cer
auth-user-pass
comp-lzo

server

; daemon configuration
daemon
mode server
tls-server
proto tcp
port 1194
user openvpn
group openvpn

cd /var/openvpn
client-config-dir clients


; tunnel configuration

dev tap1
server-bridge 192.168.2.196 255.255.255.0 192.168.2.90 192.168.2.94
push "route-gateway 192.168.2.196"

client-to-client

passtos
comp-lzo
management 127.0.0.1 5555
keepalive 10 120

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

persist-key
persist-tun
persist-local-ip
persist-remote-ip


; logging and status

writepid /var/run/openvpn.pid
ifconfig-pool-persist openvpn.leases
status /var/log/openvpn/openvpn-status.log
verb 1


; certificates and authentication

dh /var/efw/openvpn/dh1024.pem
ca /var/efw/openvpn/cacert.pem
cert /var/efw/openvpn/hostcert.pem
key /var/efw/openvpn/hostkey.pem

auth-user-pass-verify "/usr/bin/openvpn-auth" via-file
username-as-common-name

client-cert-not-required

client-connect "/usr/local/bin/dir.d-exec
/etc/openvpn/client-connect.d/"
client-disconnect "/usr/local/bin/dir.d-exec
/etc/openvpn/client-disconnect.d/"





-- 
Gregory Machin
[EMAIL PROTECTED] 
www.linuxpro.co.za 

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/ 
_______________________________________________
Efw-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/efw-user

SHS-Concept GbR
Dirk Schäfers
Dipl.-Ing Thomas Heimann
Dipl.-Ing Kai Schäfers 
Hagener Str.57
D-58642 Iserlohn
Germany

Tel.:   +49 +2374 9209776
Mobil: 0160 94773968
Fax:   +49 +2374 9209778

Ust-ID:DE813360908

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to