TAP/Bridge mode not possible on AR-150 3.x

juanjo_vlc · 2019-10-28T11:17:05.000Z

I’m unable to set up openvpn on bridge mode after updating to 3.x using the same openvpn config file I was using on 2.271.

I’ve located a change on the /etc/init.d/startvpn script that makes setting up the vpn impossible.

image1450×90 4.46 KB

That script restarts openvpn in case of not finding new routes, and in tap mode no routes are added, so it tries to restart, but the tap0 device is busy, and the openvpn tunnel dies.

After removing that parameter from the startup call, it works as before.

wellnw · 2019-10-29T01:50:34.661Z

Hi
Thanks for the feedback, we will verify this bug after verification, thanks again

dzwghx · 2019-10-29T03:59:39.329Z

Hi
After verification testing, we have not been able to reproduce your problem.
What is your firmware version?

juanjo_vlc · 2019-10-29T07:46:43.157Z

I have this problem with 3.017, but the 3.026 works fine, and the startup command and the ip route check script look the same.
When I remove the --route-up param from the startup command it works, so I’m pretty sure is because of that param, but I don’t know why yet, maybe some component is faster on 3.026 and the check succeeds and it fails on 3.017.

dzwghx · 2019-10-30T01:12:51.556Z

ok，I will use the 3.017 version test to verify this problem.

juanjo_vlc · 2020-04-17T10:09:56.837Z

Hi again, as now we are working from home, I’ve experienced the same issue on 3.026 firmware. I’ve narrowed it down to the file /usr/bin/ovpn_check_route, if I insert a sleep command before the check of the routing table at line 14, I’m able to connect.

The minimal amount of delay with I was able to connect with is 3 seconds, so I’m pretty sure it’s related to the network latency.
Is there any way to delay that check without altering system files? For instance, with some directive on the openvpn configuration file.