OVPN wrong netmask

Edoras · Mon Jan 18, 2021 8:07 pm

I have trouble with OVPN server. When ovpn user connects to the server, in routing table appears:

ADS  192.0.0.0/8                        <ovpn-jmarek>             1

Why is there prefix /8 ???
I use ROS 6.48 .

interface ovpn-server server print

enabled: yes
port: 1194
mode: ip
netmask: 24
mac-address: FE:F2:63:8D:BE:4B
...
default-profile: default
...

ppp secret export:

/ppp secret add local-address=192.168.101.1 name=xxx password=xxx profile=profile-OVPN remote-address=192.168.101.103 routes=192.168.101.1 service=ovpn

ppp profile print

 0 * name="default" bridge-learning=default use-mpls=default use-compression=default use-encryption=default only-one=default change-tcp-mss=yes use-upnp=default address-list="" on-up="" 
     on-down="" 
 1   name="profile-OVPN" local-address=192.168.101.1 bridge=bridge-OVPN-AMAR bridge-learning=default use-mpls=no use-compression=default use-encryption=default only-one=default 
     change-tcp-mss=default use-upnp=default address-list="" on-up="" on-down=""

ip address print

 #   ADDRESS            NETWORK         INTERFACE                                                                                            
 0   192.168.10.1/24    192.168.10.0    ether1_olda_lan                                                                                                                                                                   
 7   192.168.10.3/24    192.168.10.0    ether1_olda_lan                                                                                                                                                                  
10 D 192.168.101.1/32   192.168.101.101 <ovpn-omarek>

Sob · Tue Jan 19, 2021 2:09 am

The "routes=192.168.101.1" in PPP secret is nonsense, that field is for adding routes to remote subnets behind connected client, so 192.168.101.1 doesn't belong there when it's local address. I wouldn't expect it to add /8 route, but remove it and you'll see if it helps or not.

OVPN wrong netmask

OVPN wrong netmask

Re: OVPN wrong netmask

Who is online