OpenVPN VRF not working in VyOS 1.5-stream-2025-Q2

1

set int openvpn vtun0 vrf my_vrf does nothing:

  1. the openvpn process itself listen on 0.0.0.0 (without vrf)

  2. connected clients has access to main routing table, not a vrf.

How to verify:

  1. ss -tulip shows 0.0.0.0:1194 instead of 0.0.0.0%my_vrf:1194
  2. do a ping an ip in a vrf and an ip not in vrf through the openvpn:

  • have preconfigured openvpn server on vtun0

  • set vrf name my_vrf table 1000

  • set interfaces openvpn vtun0 vrf my_vrf

  • set interfaces openvpn dum0 address description "no vrf"

  • set interfaces openvpn dum0 address 10.0.0.100/32

  • set interfaces openvpn dum1 address description "vrf"

  • set interfaces openvpn dum1 address 10.0.0.101/32

  • set interfaces openvpn dum1 vrf my_vrf

Then connect to the openvpn server and ping

  • 10.0.0.100 - ping ok

  • 10.0.0.101 - ping failed

2

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.