Project

General

Profile

Actions
Copy link

New Content #13270

closed

OpenVPN client gateway is incorrect when the server does not push routes

Added by Marcos M almost 2 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Marcos M
Category:
OpenVPN
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:

Description

If IPv4 Local network(s) is empty on the server (and no custom options exist to push routes), the client ovpn-linkup script does not get passed a gateway which leads to pfSense creating a gateway with the same IP address as the interface. This results in dpinger pinging to/from the same address, and breaks things like policy routing rules for the tunnel.

A workaround could be to have the server always push a route for the tunnel network itself, or modify ovpn-linkup to somehow get the `route-gateway` value from the PUSH message rather than relying on the route_vpn_gateway environment variable.

Actions
Copy link

Also available in: Atom PDF