wiki:PlatformNotes

Version 4 (modified by Gert Döring, 12 years ago) (diff)

--

Platform Notes

FreeBSD

  • If you use IPv6 on a tun/tap interface and use pf(4) for firewalling, pf(4) will silently drop all fragmented IPv6 packets. To amend, add a "pass in on tun1 fragment" rule to pf.conf
  • to use tap devices, you need to load the tap driver with "kldload if_tap"
  • if you want to run an OpenVPN Server that listens on IPv4 and IPv6, run the server with "--proto udp6" or "--proto tcp6-server" and run "sysctl -w net.inet6.ip6.v6only=0" beforehand (this will hopefully be fixed in OpenVPN 2.4)

NetBSD

  • Using "named" tap interfaces (--dev tap3) does not work unless you create the interfaces beforehand with "ifconfig tap3 create". This is due to the way tap interfaces are created, see "man tap(4)".

OpenBSD

  • Using TAP interfaces with "--dev tap" or "--dev tap3" does not work - this is due to the way tap devices are implemented on OpenBSD, as a configuration variant of tun(4). To use TAP devices, call "--dev tun --dev-type tap" or "--dev tun3 --dev-type tap"

DragonFlyBSD

  • there currently is no OpenVPN developer that has access to a DragonFlyBSD system, so changes to the code are not tested. We assume that it's "like FreeBSD" as far as tun(4)/tap(4) handling and ifconfig goes - so it should work. If not, send a report, please.

MacOS X

  • MacOS X does not have built-in tun or tap drivers. I found the easiest way to get working tun/tap kernel extentions by installing the Tunnelblick OpenVPN gui bundle, which contains both.