localhost routing issue with new OpenVPN install

paul paul at subsignal.org
Sat Jul 14 01:56:02 PDT 2007


Fabian Peters schrieb:
> Hi all,
> 
> I'm facing a strange issue here, after having decommissioned an old
> OpenVPN setup and replaced it with a new one. The old one was at home
> in the 10.100.100.x range, the new one is in 10.10.10.x. My machine
> (running OS X 10.4.10) is placed in a small LAN using 10.0.0.x, with
> its primary IP being 10.0.0.6 and the router placed at 10.0.0.1.
> 
> While OpenVPN is not running, everything's fine. "netstat -rn" shows:
> 
> Destination Gateway            Flags   Refs   Use  Netif   Expire
> default     10.0.0.1           UGSc      40     8    en0
> 10/24       link#4             UCS        3     0    en0
> 10.0.0.1    XX:XX:XX:XX:X:X    UHLW      38    33    en0   1154
> 10.0.0.6    127.0.0.1          UHS        0     0    lo0
> 10.0.0.7    XX:XX:XX:XX:X:X    UHLW       1  5001    en0    507
> 10.0.0.255  ff:ff:ff:ff:ff:ff  UHLWb      0     3    en0
> 127         127.0.0.1          UCS        0     0    lo0
> 127.0.0.1   127.0.0.1          UH        10  5865    lo0
> 169.254     link#7             UC         0     0    fw0
> 
> Internet6:
> Destination     Gateway            Flags      Netif Expire
> ::1             link#1             UHL         lo0
> fe80::%lo0/64   fe80::1%lo0        Uc          lo0
> fe80::1%lo0     link#1             UHL         lo0
> fe80::%en1/64   link#5             UC          en1
> ff01::/32       ::1                U           lo0
> ff02::/32       ::1                UC          lo0
> ff02::/32       link#5             UC          en1
> 
> On connecting, OpenVPN issues the following commands:
> 
> ifconfig tun0 10.10.10.10 127.0.0.1 mtu 1500 netmask 255.255.255.255 up
> route add -net 10.10.10.0 127.0.0.1 255.255.255.0
> 
> Which look fine to me and do succeed. "netstat -rn" then shows:
Why is the gateway for your VPN route (presumably the VPN server) 
127.0.0.1? I'm assuming you're the VPN client so the route command 
should be something like:
route add -net 10.10.10.0 <IP of VPN server> 255.255.255.0

cheers
  Paul




More information about the MacOSX-admin mailing list