RC-3 openvpn bridge

[sebastian]

Hello,

sorry for my poor english, I hope you understand me.

I runing pfsense 2.0 RC1 as an openvpn bridge (add manually the ovpnc interface to the bridge). After the upgrade to RC3, pfsense create a gateway for openvpn interface with ip 255.255.255.0 and write "kernel: arpresolve: can't allocate llinfo for 255.255.255.0" into system.log. How can I disable the creation of this gateway?

kind regards,
sebastian

[eri--]

I put a fix on this, please test next snapshot.

[sebastian]

fix work, thanks

sebastian

[sebastian]

hi,

system log is full with:
"kernel: arpresolve: can't allocate llinfo for 255.255.255.0"
again.

My current Version:
2.0-RC3 (i386)
built on Thu Aug 18 19:17:45 EDT 2011

[eri--]

You are sure that you are on the latest snapshot and the warning is from openvpn?
Can you show me a screenshot of the System->Routing screen?
Also a ls /tmp/*_router?

[sebastian]

okay today, I've not make an update .. so dashboard show update

[2.0-RC3][admin@vpn01]/root(1): ls /tmp/*_router
/tmp/ovpnc1_router

[2.0-RC3][admin@vpn01]/root(2): cat /tmp/ovpnc1_router
255.255.255.0

ovpnc1 is interface for openvpn?

I know is was fix before but after latest update is comes again …

sebastian

[eri--]

Even the openvpn config please.

[sebastian]

hope config is better than a screeshot …

[2.0-RC3][root@vpn01]/root(1): cat /var/etc/openvpn/client1.conf
dev ovpnc1
dev-type tap
dev-node /dev/tap1
writepid /var/run/openvpn_client1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local 192.168.4.252
engine cryptodev
tls-client
client
lport 1194
management /var/etc/openvpn/client1.sock unix
remote vpngw 1194
ca /var/etc/openvpn/client1.ca
cert /var/etc/openvpn/client1.cert
key /var/etc/openvpn/client1.key
comp-lzo
resolv-retry infinite

I muste create the bridge manual after every restart, with

ifconfig bridge0 addm ovpnc1

Nobody will fix it for me :(

you need more, tell me. only remote access is not possible ::)