PfSense OpenVPN as a client is not persistent and complains of "route add" fail
I have just setup pfSense 1.2.3 to connect to a CentOS OpenVPN server. It connects and both sides clients have access to each other. However, in System Log > OpenVPN I see this which worries me:
Apr 17 22:43:03 openvpn: LZO compression initialized Apr 17 22:43:03 openvpn: UDPv4 link local (bound): [undef]:1194 Apr 17 22:43:03 openvpn: UDPv4 link remote: 184.108.40.206:11194 Apr 17 22:43:03 openvpn: SIGTERM[hard,] received, process exiting Apr 17 22:43:04 openvpn: [192-168-20-50] Peer Connection Initiated with 220.127.116.11:11194 Apr 17 22:43:05 openvpn: Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: topology (2.0.6) Apr 17 22:43:05 openvpn: gw 10.10.9.1 Apr 17 22:43:05 openvpn: TUN/TAP device /dev/tun0 opened Apr 17 22:43:05 openvpn: /sbin/ifconfig tun0 172.16.14.6 172.16.14.5 mtu 1500 netmask 255.255.255.255 up Apr 17 22:43:05 openvpn: /etc/rc.filter_configure tun0 1500 1558 172.16.14.6 172.16.14.5 init Apr 17 22:43:08 openvpn: ERROR: FreeBSD route add command failed: shell command exited with error status: Apr 17 22:43:08 openvpn: Initialization Sequence Completed
1- Notice second last line how pfSense complains of not being able to do a "route add"? I have seen that happening before on Windows Vista where there is no administration privilege. Is this a bug?
2- Despite putting this line in the "Custom Options" setting section of the client my tunnel is not presistent:
This works fine when using OpenVPN client from windows and reconnect happens if OpenVPN server is down for a second or so but it doesn't seem to give me that presistency when putting it as an option on pfSense client side.
Is there anything I can do to fix this?
What does the server config look like?
I don't think that matters as I have tested this on Windows with OpenVPN client and adding presistent tunnel actually gives me retries if connection drops without any changes to server config. But here it is:
server 172.16.14.0 255.255.255.0
push "route 172.16.14.0 255.255.255.0"
route 10.200.200.0 255.255.255.0
keepalive 10 120
By the way do you know why this is:
Apr 17 22:43:08 openvpn: ERROR: FreeBSD route add command failed: shell command exited with error status:
The route error generally only happens if you already have a route to the network that you're trying to get pushed from the server side.
Thank you very much for the input.
Okay, that makes sense as I have a perfectly fine connection. Maybe I should restart the router to confirm this 100% because the once restarted all routes will be lost.
So, what are you thoughts about: