Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a somewhat tricky proble to solve.

We have a wireless link between 2 building. One of them has an mikrotik and below there are some vlans. Some machines of one vlan need to use openvpn to connect to a remote private lan. I put a TP-Link WR1043ND (which those machines connect to) with openwrt with ebtables just in case I need it.

I've configured openwrt in such a way that all ports belongs to the same vlan. My idea was to make things as transparent as I can.

It has a bridge as follows:

usr/sbin/brctl-full show br-lan 
bridge name     bridge id               STP enabled     interfaces
br-lan          8000.f8d111565716       no              eth0.1

Also I've added an ebtables rule:

ebtables -t broute -A BROUTING -p ipv4  -j DROP

So "bridge" has only one IP address. I've installed openvpn and I'm trying to bring up the tunnel but I can't still get working.

Sure, someone can says why don't you use the vpn on the mikrotik, there are some reasons, the first one is I have little experience with mikrotik and I'd want to have the vpn at hand :)

The problem is that openvpn is not working, because it is complaining that I have only one Ip Address on the server side. So I set up and alias interface with another IP address but is not working either:

: Rejected connection attempt from IP-Client-Side:37801 due to --remote setting

Is there a way to make it work?

share|improve this question
Perhaps it looks easier I thought I've found the following article: "Using routing and OpenVPN not running on the default gateway" surely I'll take a look tomorrow – sebelk Oct 23 '12 at 22:37

Finaley I've found a way so this to work

I had to add some rule by hand after launch openvpn. I don't know why, but now it's working :)


/sbin/ip link set dev tun0 up mtu 1500

/sbin/ip addr add dev tun0 local peer

/sbin/ip route add via

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.