Open VPN Tunnel Up - Cannot Pass Traffic

[SMuD]

OK, I have tried to set up an Open VPN Site-to-Site Shared Key tunnel using the instructions here:

http://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_(Shared_Key,_2.0)

The tunnel shows up on the server and the client.  The server settings and client settings are set to use port 1195 (1194 is in use by a bridged tunnel to another site).  The firewall rules for OVPN allow all traffic.

Despite this, I cannot ping the other end of the tunnel, let alone a device on the subnets specified in the configuration.  No routes to those subnets show up on the server or the client.

What am I doing wrong?

Thank you!

[phil.davis]

Your configs look OK.
Are there some settings in the other server on 1194 that might conflict (e.g. same tunnel network used or?)
What exactly does end up in the routing table at each end?
What pfSense version at each end?

[SMuD]

All the systems are 2.01 or better.  I have another system that I have tried adding as a server on the other end that currently has no other tunnels running.  I noticed this in the log on the client (release 2.03):

openvpn[41521]: ERROR: FreeBSD route add command failed: external program exited with error status: 1

The rest of the client log:

Aug 26 13:21:55 openvpn[25624]: event_wait : Interrupted system call (code=4)
Aug 26 13:21:55 openvpn[25624]: /usr/local/sbin/ovpn-linkdown ovpnc1 1500 1560 192.168.200.2 192.168.200.1 init
Aug 26 13:21:55 openvpn[25624]: SIGTERM[hard,] received, process exiting
Aug 26 13:21:55 openvpn[41521]: OpenVPN 2.2.2 i386-portbld-freebsd8.1 [SSL] [LZO2] [eurephia] built on Apr 2 2013
Aug 26 13:21:55 openvpn[41521]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
Aug 26 13:21:55 openvpn[41521]: TUN/TAP device /dev/tun1 opened
Aug 26 13:21:55 openvpn[41521]: /sbin/ifconfig ovpnc1 192.168.200.2 192.168.200.1 mtu 1500 netmask 255.255.255.255 up
Aug 26 13:21:55 openvpn[41521]: /usr/local/sbin/ovpn-linkup ovpnc1 1500 1560 192.168.200.2 192.168.200.1 init
Aug 26 13:21:56 openvpn[41521]: ERROR: FreeBSD route add command failed: external program exited with error status: 1
Aug 26 13:21:56 openvpn[43123]: UDPv4 link local (bound): yyy.yyy.yyy.yyy
Aug 26 13:21:56 openvpn[43123]: UDPv4 link remote: xxx.xxx.xxx.xxx:1194
Aug 26 13:22:00 openvpn[43123]: Peer Connection Initiated with xxx.xxx.xxx.xxx:1194
Aug 26 13:22:00 openvpn[43123]: Initialization Sequence Completed

On the server logs (release 2.03):

Aug 26 12:13:44 openvpn[57264]: OpenVPN 2.2.2 i386-portbld-freebsd8.1 [SSL] [LZO2] [eurephia] built on Apr 2 2013
Aug 26 12:13:44 openvpn[57264]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
Aug 26 12:13:44 openvpn[57264]: TUN/TAP device /dev/tun1 opened
Aug 26 12:13:44 openvpn[57264]: /sbin/ifconfig ovpns1 192.168.200.1 192.168.200.2 mtu 1500 netmask 255.255.255.255 up
Aug 26 12:13:44 openvpn[57264]: /usr/local/sbin/ovpn-linkup ovpns1 1500 1560 192.168.200.1 192.168.200.2 init
Aug 26 12:13:44 openvpn[58724]: UDPv4 link local (bound): xxx.xxx.xxx.xxx:1194
Aug 26 12:13:44 openvpn[58724]: UDPv4 link remote: [undef]
Aug 26 12:21:56 openvpn[58724]: Peer Connection Initiated with yyy.yyy.yyy.yyy:22124
Aug 26 12:21:56 openvpn[58724]: Initialization Sequence Completed

[SMuD]

Also, I never see the local networks entered in the Open VPN settings in the routing table.

[SMuD]

I have no ideas at this point.  I have tried a few different pfSense systems and on each one, even though it shows the tunnel up, there is no route to the client or server networks in the routing table.

Can anyone else think of something I am doing wrong? :o

[marvosa]

Post your server1.conf and client1.conf.