[quagga-users 8305] Re: OSPF, OpenVPN and TAP interface

Radek Hladik rhladik at tfc.cz
Tue Apr 17 15:07:15 IST 2007


Hello Sascha,
	my problem is exactly the same as described in 
http://openvpn.net/archive/openvpn-devel/2004-04/msg00032.html

multicast packets from VPN  client are delivered to VPN server but 
client does not see multicast packets from vpn server. Quagga on VPN 
server sees the other router in "Init/DROther" state but Quagga on 
client sees no neighbour.
Everything works ok with TUN adapter.
There may be problem that my server has rather old versions (RedHat9, 
Kernel 2.4.24 and OpenVPN 2.0_beta7). What version of openvpn do you 
use? As there are many clients on this server I am little afraid of 
upgrading it but if there would be a reason..... :-)

But I still do not know if OSPF needs multicasts to work. My network is 
so simple that I could easily specify both peers on the ends of the link 
manually and use unicast (if OSPF supports it).


Radek


Sascha Herrmann napsal(a):
> Hello Radek,
>>     I've just discovered the well known problem with mutlicast routing 
>> over OpenVPN TAP interface. Please correct me if I am wrong: openvpn 
>> can not handle multicast packets when configured in client/server mode 
>> in the direction server->client.
> for me ospf (using quagga) on top of openvpn with tap devices is working
> without any problems. We have connect about 9 Routers with OpenVPN/tap 
> on 2 Tunnels and run ospf on this. For me there was no need for any 
> special configuration with quagga using the default broadcast 
> configuration.
> 
> What are exactly your problems?
> 
> Gruss,
> Sascha


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5066 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.quagga.net/pipermail/quagga-users/attachments/20070417/1e7079b2/smime.bin


More information about the Quagga-users mailing list