OpenVPN client warning when using network bridging (TAP)

When the OpenVPN client is set up to create a TAP bridge with remote server, an unnecessary config line is added to the client config:

ifconfig <network> <mask>

Which results in a warning generated in the logs.

The values above are taken from vpn_clientX_remote and vpn_clientX_nm nvram variables. Those values relate to the TUN setup and have no meaning in the TAP one.

They persist even if the config is set to TAP and cannot be removed via the interface. They cannot be left empty in TUN configuration.

The bug is that the config generator is adding them to the config file when a LAN bridge is created -- such ifconfig statement makes no sense in this context as both lans are the same subnet.

Additionally for TUN setups, the netmask is a /24 bit one; for point-to-point links with only two addresses that could be a too wide. Perhaps a /31 bit netmask would be more appropriate.

Tested with 2018.5.

Comments (1)