OpenVPN tap bridge works with 1st site, not 2nd.



  • I have a server and a client site bridged and it works great.

    I went to add a 2nd client site to the same server and cant get it to work. I made a new server entry (with a new shared key), used a different port and used a new tunnel network, and the reset of the settings I cloned exactly.  A new open vpn interface was created called OPT2.  For testing I have any/any/any rules on all interfaces on all sites.  Ive tried making both 1 and 2 separate bridges [LAN + OPT1 + OP2] vs [LAN + OPT1] + [LAN + OPT2] (under interfaces, assign, bridges) but I dont think thats where the problem is.

    I noticed that once openvpn is setup and the OPT1 interface is created, some sort of virtual MAC is created…

    This is whats really throwing me off - on the server, OPT2 has all 0's for a MAC and a subnet of 255.255.255.255.  I have gone over everything many times and I cant see anything I missed with setting up client 2 the same as client1.  Why could there be this discrepancy between OPT1 and OPT2 on the server?



  • Check the OpenVPN logs. There must be some error overthere.
    Put "verb=10" in extra config, to see more info in the logs.



  • Site to site VPNs should never be bridged, that's a bad network design that's begging for problems. Not related to the problem, but I'd stop trying to fix something that shouldn't be done, and put a proper routed setup in place.


Locked