1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Odd VPN problem

Discussion in 'Tomato Firmware' started by lanmtl, Oct 17, 2010.

  1. lanmtl

    lanmtl Addicted to LI Member

    Hi all,

    I thought all was finally well but out of the blue this started happening:
    Code:
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 30,ifconfig 10.8.0.14 255.255.255.0'
    Oct 17 10:15:06 routage daemon.err openvpn[754]: Options error: option 'redirect-gateway' cannot be used in this context
    Oct 17 10:15:06 routage daemon.err openvpn[754]: Options error: option 'route' cannot be used in this context
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: OPTIONS IMPORT: timers and/or timeouts modified
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: OPTIONS IMPORT: --ifconfig/up options modified
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
    Oct 17 10:15:06 routage daemon.warn openvpn[754]: WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address.  You are using something (255.255.255.0) that looks more like a netmask. (silence this warnin
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: TUN/TAP device tun11 opened
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: TUN/TAP TX queue length set to 100
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: /sbin/ifconfig tun11 10.8.0.14 pointopoint 255.255.255.0 mtu 1500
    Oct 17 10:15:06 routage daemon.err openvpn[754]: Linux ifconfig failed: external program exited with error status: 1
    Oct 17 10:15:06 routage daemon.notice openvpn[754]: Exiting
    
    The strangest of all is that when I connect with Viscosity (Mac VPN client), all works fine... How do I fix that?

    Thanks!
     
  2. lanmtl

    lanmtl Addicted to LI Member

    Viscosity's logs say this:
    Code:
    Sun Oct 17 10:40:11 2010: Options error: option 'redirect-gateway' cannot be used in this context
    Sun Oct 17 10:40:11 2010: Options error: option 'route' cannot be used in this context
    Sun Oct 17 10:40:11 2010: WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address.  You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
    Sun Oct 17 10:40:11 2010: TUN/TAP device /dev/tun0 opened
    Sun Oct 17 10:40:11 2010: /sbin/ifconfig tun0 delete
    Sun Oct 17 10:40:11 2010: NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
    Sun Oct 17 10:40:11 2010: /sbin/ifconfig tun0 10.8.0.14 255.255.255.0 mtu 1500 netmask 255.255.255.255 up
    Sun Oct 17 10:40:11 2010: Initialization Sequence Completed
    
     
  3. SgtPepperKSU

    SgtPepperKSU Network Guru Member

    This is a problem with the VPN server (which, if I'm remembering correctly, is a commercial provider - thus, not set up by you). They're pushing out an ifconfig directive that is only valid for TAP connections, but you're using a TUN connection. Either they've screwed up with the ifconfig directive (most likely) or they've switched to using TAP without updating any of their documentation (I just checked and it all still says TUN).

    As you can see, the Viscosity client also ran into the same error ("Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask."). However, that client didn't consider that error fatal for some reason. I wouldn't be surprised if the connection didn't actually work, though.

    You should either contact them to fix their problem or assume it's being taken care of and wait.
     
  4. lanmtl

    lanmtl Addicted to LI Member

    Indeed, Viscosity connects but it doesn't pass any traffic.

    I contacted the people in charge of the server, wait and see... Thanks!
     

Share This Page