Client works on Linux & Mac with Tunnelblick, fails on OpenVPN Connect iOS & macOS

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • sebashb
    Junior Member
    • Oct 2024
    • 2

    Client works on Linux & Mac with Tunnelblick, fails on OpenVPN Connect iOS & macOS

    EDIT:
    I don't know why this post was moved to here, but I'm using the community edition, so I'm not sure if it was moved to the right place.

    Server:
    • Server is running OpenVPN 2.6.9 x86_64-pc-linux-gnu on a Ubuntu Server 24.04.1 LTS
    • Server uses Freeradius 3.2.5 for authentication and to send "Framed-IP-Address" attribute to each client
    • client-connect.sh is used to provide additional client configurations
    • The server is configured this way in order to provide client-to-client isolation
    Server.conf:
    Code:
    port 443
    proto tcp-server
    dev-type tun
    tun-mtu 1500
    topology p2p
    mode server
    tls-server
    ifconfig 100.64.0.1 100.64.0.2
    route 100.64.0.0 255.255.0.0
    push "route 100.64.0.0 255.255.0.0 vpn_gateway"
    ca ca.crt
    cert server.crt
    key server.key
    dh dh.pem
    tls-auth ta.key 0
    script-security 3
    verify-client-cert none
    username-as-common-name
    auth SHA256
    auth-nocache
    cipher AES-256-GCM
    plugin /usr/lib/openvpn/radiusplugin.so radiusplugin.cnf
    client-config-dir /etc/openvpn/server/ccd
    client-connect /etc/openvpn/server/client-connect.sh
    client-disconnect /etc/openvpn/server/client-disconnect.sh
    keepalive 10 120
    persist-key
    persist-tun
    verb 3
    client-connect.sh:
    Code:
    #!/bin/bash
    echo "ifconfig-push ${ifconfig_pool_remote_ip} ${route_vpn_gateway}" > "$1"
    echo "push \"route 100.64.0.0 255.255.0.0 ${route_vpn_gateway}\"" >> "$1"
    Client:
    Code:
    client
    remote server.ip.com
    proto tcp
    port 443
    dev-type tun
    tun-mtu 1500
    nobind
    auth SHA256
    auth-nocache
    resolv-retry infinite
    connect-retry 5 60
    user nobody
    group nogroup
    persist-key
    persist-tun
    auth-user-pass
    remote-cert-tls server
    cipher AES-256-GCM
    verb 3
    <ca>
    -----BEGIN CERTIFICATE-----
    -----END CERTIFICATE-----
    </ca>
    key-direction 1
    <tls-auth>
    -----BEGIN OpenVPN Static key V1-----
    -----END OpenVPN Static key V1-----
    </tls-auth>
    Problem:
    When I try to connect to my server either with the iOS OpenVPN Connect App (3.5.0) or macOS OpenVPN Connect App (3.8.2) I get the following error message:
    tun_prop_error: ifconfig addresses are not in the same /30 subnet (topology net30)
    which is strange since I'm not using a net30 topology.
    If I use the exact same client configuration file on Tunnelblick (4.0.1) the client is able to connect without any issue or warning.
    Last edited by sebashb; 2024-10-27, 08:11 AM.
Working...
😀
😂
🥰
😘
🤢
😎
😞
😡
👍
👎