Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN tap bridge works with 1st site, not 2nd.

    Scheduled Pinned Locked Moved OpenVPN
    3 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hardware_failure
      last edited by

      I have a server and a client site bridged and it works great.

      I went to add a 2nd client site to the same server and cant get it to work. I made a new server entry (with a new shared key), used a different port and used a new tunnel network, and the reset of the settings I cloned exactly.  A new open vpn interface was created called OPT2.  For testing I have any/any/any rules on all interfaces on all sites.  Ive tried making both 1 and 2 separate bridges [LAN + OPT1 + OP2] vs [LAN + OPT1] + [LAN + OPT2] (under interfaces, assign, bridges) but I dont think thats where the problem is.

      I noticed that once openvpn is setup and the OPT1 interface is created, some sort of virtual MAC is created…

      This is whats really throwing me off - on the server, OPT2 has all 0's for a MAC and a subnet of 255.255.255.255.  I have gone over everything many times and I cant see anything I missed with setting up client 2 the same as client1.  Why could there be this discrepancy between OPT1 and OPT2 on the server?

      1 Reply Last reply Reply Quote 0
      • R
        robi
        last edited by

        Check the OpenVPN logs. There must be some error overthere.
        Put "verb=10" in extra config, to see more info in the logs.

        1 Reply Last reply Reply Quote 0
        • C
          cmb
          last edited by

          Site to site VPNs should never be bridged, that's a bad network design that's begging for problems. Not related to the problem, but I'd stop trying to fix something that shouldn't be done, and put a proper routed setup in place.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.