openvpn client with tap device

2008-02-19 Thread thomas
Hi misc,

I have the parameters below, in openvpn config. OpenBSD is the client,
the server is already working with non OpenBSD clients.

dev tun0
dev-type tap

When I start openvpn, the system creates the interface tun0, ifconfig
shows it like a real interface not a point to point, like I saw without
the dev-type tap parameter. When the connection is setup I can ping
the local IP address but not the server one.

I played with route a bit, and I am not convinced with my settings yet.

Before going further, I wanted to be sure that tap devices worked Ok
with openvpn as there are not much information on it on google.

Thanks in advance.



Re: openvpn client with tap device

2008-02-19 Thread Giancarlo Razzolini
thomas escreveu:
 Hi misc,

 I have the parameters below, in openvpn config. OpenBSD is the client,
 the server is already working with non OpenBSD clients.

 dev tun0
 dev-type tap

 When I start openvpn, the system creates the interface tun0, ifconfig
 shows it like a real interface not a point to point, like I saw without
 the dev-type tap parameter. When the connection is setup I can ping
 the local IP address but not the server one.

 I played with route a bit, and I am not convinced with my settings yet.

 Before going further, I wanted to be sure that tap devices worked Ok
 with openvpn as there are not much information on it on google.

 Thanks in advance.


From the openbsd tun(4) man page:
.
.
.
 Both layer 3 and layer 2 tunneling is supported.  Layer 3 tunneling is
 the default mode; to enable layer 2 tunneling mode the link0 flag needs
 to be set with ifconfig(8), or by setting up a hostname.if(5)
configura-
 tion file for netstart(8).  In layer 2 mode the tun interface is
simulat-
 ing an Ethernet network interface.
.
.
.

So you need to set the link0 flag on the tun0 if. You do this by
creating a /etc/hostname.tun0 containing the following statement:

link0 up

This should solve your problem. But, why use tap instead of tun? Routing
is way more efficient than bridging.

My regards,

--
Giancarlo Razzolini
Linux User 172199
Red Hat Certified Engineer no:804006389722501
Moleque Sem Conteudo Numero #002
Slackware Current
OpenBSD Stable
Ubuntu 7.04 Feisty Fawn
Snike Tecnologia em Informatica
4386 2A6F FFD4 4D5F 5842  6EA0 7ABE BBAB 9C0E 6B85

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]