<div dir="ltr">Hi Chris,<div><br></div><div>Thank you for your advice, I got a little bit forward.</div><div><br></div><div>I expended my topology with another pc - another vpn client - and I got these two vpn clients working, but somehow I cannot get the server to work properly. The server remains always in state Init/Other.</div><div><br></div><div>I can see with tcpdump, that every pc is sending the hello-message, but the server is missing the neighbor list:</div><div><br></div><div><br></div><div><div>08:48:55.791063 IP (tos 0xc0, ttl 1, id 15221, offset 0, flags [none], proto OSPF (89), length 64)</div><div>server > <a href="http://ospf-all.mcast.net">ospf-all.mcast.net</a>: OSPFv2, Hello, length 44</div><div> Router-ID 10.29.0.1, Backbone Area, Authentication Type: none (0)</div><div> Options [External]</div><div> Hello Timer 10s, Dead Timer 40s, Mask 255.255.252.0, Priority 1</div><div> Designated Router 10.29.0.1</div><div>08:49:02.449351 IP (tos 0xc0, ttl 1, id 6717, offset 0, flags [none], proto OSPF (89), length 72)</div><div> 10.29.0.8 > <a href="http://ospf-all.mcast.net">ospf-all.mcast.net</a>: OSPFv2, Hello, length 52</div><div> Router-ID 192.168.21.1, Backbone Area, Authentication Type: none (0)</div><div> Options [External]</div><div> Hello Timer 10s, Dead Timer 40s, Mask 255.255.252.0, Priority 1</div><div> Designated Router 10.29.0.4, Backup Designated Router 10.29.0.8</div><div> Neighbor List:</div><div> 192.168.21.17</div><div> 10.29.0.1</div><div>08:49:02.854749 IP (tos 0xc0, ttl 1, id 9690, offset 0, flags [none], proto OSPF (89), length 72)</div><div> 10.29.0.4 > <a href="http://ospf-all.mcast.net">ospf-all.mcast.net</a>: OSPFv2, Hello, length 52</div><div> Router-ID 192.168.21.17, Backbone Area, Authentication Type: none (0)</div><div> Options [External]</div><div> Hello Timer 10s, Dead Timer 40s, Mask 255.255.252.0, Priority 1</div><div> Designated Router 10.29.0.4, Backup Designated Router 10.29.0.8</div><div> Neighbor List:</div><div> 192.168.21.1</div><div> 10.29.0.1</div></div><div><br></div><div>Here the output from birdc show ospf neighbors on client:</div><div><br></div><div><div>Router ID Pri State DTime Interface Router IP</div><div>192.168.21.17 1 Full/DR 00:35 tun0 10.29.0.4</div><div>10.29.0.1 1 Init/Other 00:38 tun0 10.29.0.1</div></div><div><br></div><div>and finally my ospf-setup for every device:</div><div><br></div><div><br></div><div><div>protocol ospf myOSPFX { # X depending on device (1,2,3)</div><div> debug all;</div><div> import filter importAll;</div><div> export filter onlyLocalExport;</div><div> area 0.0.0.0 {</div><div> interface "tun0" {<br></div><div> cost 10;</div><div> type bcast;</div><div> stub no;<br></div><div> hello 10;</div><div> transmit delay 5;</div><div> wait 10;</div><div> dead 40;</div><div> };<br></div><div> };<br></div><div>}</div></div><div><br></div><div>Do you have any idea, what I'm missing? </div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2018-04-03 16:52 GMT+02:00 Chris Boot <span dir="ltr"><<a href="mailto:lists@bootc.boo.tc" target="_blank">lists@bootc.boo.tc</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">[re-sending to the list with the correct From address]<br>
<span class=""><br>
Hi,<br>
<br>
You should be able to do this with 'topology subnet' on your server end.<br>
It doesn't work with net30 (the default) or p2p, but I can confirm that<br>
OSPFv2 for IPv4 works in broadcast mode with 'topology subnet'.<br>
<br>
I think there are issues with IPv6 on tun links with respect to<br>
multicast, so you may struggle to get OSPFv3 working, but I haven't had<br>
to do that yet.<br>
<br>
HTH,<br>
Chris<br>
<br>
On 03/04/18 15:34, dawid k wrote:<br>
</span><span class="">> Therefore I tried running ospf in broadcast mode as well, but then it<br>
> changed automatically: <br>
><br>
> <WARN> myOSPF3: Cannot use interface tun0 as broadcast, forcing ptp<br>
><br>
> I tried the tap-Interface and it's working (or at least the neighbours<br>
> were detected) but as said, my system has to use tun and I cannot change<br>
> it. So there is propably no solution for such settings. I will try bgp<br>
> instead. Thank you for your help.<br>
><br>
> 2018-04-03 16:18 GMT+02:00 Ondrej Zajicek <<a href="mailto:santiago@crfreenet.org">santiago@crfreenet.org</a><br>
</span>> <mailto:<a href="mailto:santiago@crfreenet.org">santiago@crfreenet.org</a><wbr>>>:<br>
<span class="">><br>
> On Tue, Apr 03, 2018 at 08:05:41AM -0600, Michael McConnell wrote:<br>
> > OpenVPN won’t do multicast over TUN, only TAP.<br>
><br>
> Well, that would be silly from OpenVPN. But tcpdump output from Dawid K<br>
> shows that multicast packets are propagated throught TUN:<br>
><br>
> > 06:59:00.439738 IP (tos 0xc0, ttl 1, id 15270, offset 0, flags [none], proto OSPF (89), length 64)<br>
</span>> > server > 224.0.0.5 <<a href="http://224.0.0.5" rel="noreferrer" target="_blank">http://224.0.0.5</a>>: OSPFv2, Hello, length 44<br>
<span class="">> > Router-ID repo.traffic.local, Backbone Area, Authentication Type: none (0)<br>
> > Options [External]<br>
> > Hello Timer 10s, Dead Timer 40s, Mask 0.0.0.0, Priority 1<br>
> > 06:59:02.449363 IP (tos 0xc0, ttl 1, id 18875, offset 0, flags [none], proto OSPF (89), length 64)<br>
</span>> > 10.29.0.6 > 224.0.0.5 <<a href="http://224.0.0.5" rel="noreferrer" target="_blank">http://224.0.0.5</a>>: OSPFv2, Hello, length 44<br>
<span class="">> > Router-ID 192.168.21.17, Backbone Area, Authentication Type: none (0)<br>
> > Options [External]<br>
> > Hello Timer 10s, Dead Timer 40s, Mask 0.0.0.0, Priority 1<br>
><br>
> --<br>
> Elen sila lumenn' omentielvo<br>
><br>
> Ondrej 'Santiago' Zajicek (email: <a href="mailto:santiago@crfreenet.org">santiago@crfreenet.org</a><br>
</span>> <mailto:<a href="mailto:santiago@crfreenet.org">santiago@crfreenet.org</a><wbr>>)<br>
<span class="">> OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3,<br>
</span>> <a href="http://wwwkeys.pgp.net" rel="noreferrer" target="_blank">wwwkeys.pgp.net</a> <<a href="http://wwwkeys.pgp.net" rel="noreferrer" target="_blank">http://wwwkeys.pgp.net</a>>)<br>
<div class="HOEnZb"><div class="h5">> "To err is human -- to blame it on a computer is even more so."<br>
><br>
><br>
<br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
Chris Boot<br>
<a href="mailto:bootc@boo.tc">bootc@boo.tc</a><br>
<br>
--<br>
Chris Boot<br>
<a href="mailto:bootc@boo.tc">bootc@boo.tc</a><br>
</font></span></blockquote></div><br></div>