next »

[tomas1@list.ru]

Hello - i have such scheme:
SITE A  LAN --- PFSENSE --- WAN/OPVN1.A  ------------------------ WAN/OVPN1.B --- PFSENSE --- LAN SITE B
                                  |--- WAN/OPVN2.A  ------------------------WAN/OVPN2.B  ---|

I'm trying to set up failover using openvpn and quagga.
I picked up 2 channels openvpn between 2 offices.
In the settings Openvpn not recorded local or remote Networks (they are blank) - routing makes quagga
But occasionally VPN tunnels drops and in the services I see the following picture - attachment 1
In the service i see that one of two openvpn tunnel is stopped, I try to run it - but it does not run. In logs i see error - attachment 2
The i stop the second tunnel - and after that i am able to start both tunnels.

Whats wrong? (i tried on clear new install of pfsense 2.0.1 - had same problem) 

[Reiner030]

Hi

I guess you have also a CARP IP for public routing/failover?

=> use this IP as OpenVPN Server/Client Interface - so you need only one OpenVPN Server on both sides
OpenVPN Server/Client is then automatically only started on the master firewall on each side...

In newest Quagga package there is also a  - I think/hope not final - solution to bind /start Quagga only on CARP master ...

EDIT: Here the Post with Failover found: http://forum.pfsense.org/index.php/topic,58776.0.html

(I found this thread search for a solution why my Quagga won't bind on my OpenVPN server side interface )


Bests


Reiner

[tomas1@list.ru]

Hello,
I don't use CARP. The problem is why openvpn fails to in such configuration start? see attached errors

[Reiner030]

your log is not very helpful... Because of

kernel: ifa_add_loopback_route:insertion failed

I guess you also run into this problem/bug: http://forum.pfsense.org/index.php/topic,60231.0.html
where this fix could help - if he is made correctly... actually he has problems on server side (but you can test it on client side)
http://forum.pfsense.org/index.php/topic,60231.msg330670.html#msg330670