Nie jesteś zalogowany.
Jeśli nie posiadasz konta, zarejestruj je już teraz! Pozwoli Ci ono w pełni korzystać z naszego serwisu. Spamerom dziękujemy!
Prosimy o pomoc dla małej Julki — przekaż 1% podatku na Fundacji Dzieciom zdazyć z Pomocą.
Więcej informacji na dug.net.pl/pomagamy/.
Strony: 1
Witam, walcze z postawieniem OpenVpn na moim testowym serwerku, sprawa wyglada tak:
1 karta sieciowa daje mi wyjscie na swiat i ma adres 182.168.1.1 brama 192.168.1.265 maska 255.255.255.0
2 karta sieciowa daje mi siec lokalna na adresie 192.168.2.1 bramka 192.168.2.1 maska 255.255.255.0
kolega kozysta tez z sieci a karty 1 (jest wpiety bezposrednio do modemu)
i teraz tak postawile (wlasciwie zainstalowalem openvpna) skonfigurowalem i niesty ale nie moge sie polaczyc, ani zdalnie (na modemie mam przekierowania na 192.168.1.1) ani lokalnie nie widze drugiej sieci.
oto moje konfigi:
serwer
#OkreĹamy rodzaj tunelu: dev tun #OkreĹamy koĹ ifconfig 192.168.1.1 192.168.1.2Ä server 192.168.1.1 255.255.255.0 #ĹcieĹźka do pliku klucza wspĂłĹdzielonego: secret /etc/openvpn/shared.key #OkreĹamy protokĂłĹ: proto tcp-server #PoniĹźej sÄ daemon dotyczÄ verb 4Ăłw, czasu nawiÄ log-append /var/log/openvpn.log keepalive 10 900 inactive 3600 kombinu$ comp-lzo push "route 192.168.1.0 255.255.255.0"
klient
#Jak wyżej dev tap #IP komputera z którym się łączymy i port #remote +++tutaj wbijam moje stale ip kiedy jestem poza praca +++ remote 192.168.1.2 1194 #Określamy protokół proto tcp-client #Końce tunelu odwrotnie niż w pliku serwera ifconfig 192.168.1.2 192.168.1.1 #Wiadomo secret c:\\openvpn\\shared.key #To również wiadmo keepalive 10 60 route 192.168.1.2 255.255.255.0 #route 192.168.2.243 255.255.255.0 comp-lzo
Oto log z openvpna
Tue Nov 10 15:04:52 2009 us=221509 daemon = ENABLED Tue Nov 10 15:04:52 2009 us=221526 inetd = 0 Tue Nov 10 15:04:52 2009 us=221543 log = ENABLED Tue Nov 10 15:04:52 2009 us=221559 suppress_timestamps = DISABLED Tue Nov 10 15:04:52 2009 us=221577 nice = 0 Tue Nov 10 15:04:52 2009 us=221594 verbosity = 4 Tue Nov 10 15:04:52 2009 us=221611 mute = 0 Tue Nov 10 15:04:52 2009 us=221628 gremlin = 0 Tue Nov 10 15:04:52 2009 us=221645 status_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=221661 status_file_version = 1 Tue Nov 10 15:04:52 2009 us=221678 status_file_update_freq = 60 Tue Nov 10 15:04:52 2009 us=221695 occ = ENABLED Tue Nov 10 15:04:52 2009 us=221712 rcvbuf = 65536 Tue Nov 10 15:04:52 2009 us=221729 sndbuf = 65536 Tue Nov 10 15:04:52 2009 us=221746 sockflags = 0 Tue Nov 10 15:04:52 2009 us=221763 fast_io = DISABLED Tue Nov 10 15:04:52 2009 us=221780 lzo = 7 Tue Nov 10 15:04:52 2009 us=221797 route_script = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=221814 route_default_gateway = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=221831 route_default_metric = 0 Tue Nov 10 15:04:52 2009 us=221848 route_noexec = DISABLED Tue Nov 10 15:04:52 2009 us=221865 route_delay = 0 Tue Nov 10 15:04:52 2009 us=221883 route_delay_window = 30 Tue Nov 10 15:04:52 2009 us=221900 route_delay_defined = DISABLED Tue Nov 10 15:04:52 2009 us=221917 route_nopull = DISABLED Tue Nov 10 15:04:52 2009 us=221934 route_gateway_via_dhcp = DISABLED Tue Nov 10 15:04:52 2009 us=221951 allow_pull_fqdn = DISABLED Tue Nov 10 15:04:52 2009 us=221972 management_addr = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=221990 management_port = 0 Tue Nov 10 15:04:52 2009 us=222008 management_user_pass = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222032 management_log_history_cache = 250 Tue Nov 10 15:04:52 2009 us=222051 management_echo_buffer_size = 100 Tue Nov 10 15:04:52 2009 us=222069 management_write_peer_info_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222087 management_flags = 0 Tue Nov 10 15:04:52 2009 us=222105 shared_secret_file = '/etc/openvpn/shared.k ey' Tue Nov 10 15:04:52 2009 us=222123 key_direction = 0 Tue Nov 10 15:04:52 2009 us=222140 ciphername_defined = ENABLED Tue Nov 10 15:04:52 2009 us=222157 ciphername = 'BF-CBC' Tue Nov 10 15:04:52 2009 us=222174 authname_defined = ENABLED Tue Nov 10 15:04:52 2009 us=222191 authname = 'SHA1' Tue Nov 10 15:04:52 2009 us=222208 keysize = 0 Tue Nov 10 15:04:52 2009 us=222226 engine = DISABLED Tue Nov 10 15:04:52 2009 us=222243 replay = ENABLED Tue Nov 10 15:04:52 2009 us=222260 mute_replay_warnings = DISABLED Tue Nov 10 15:04:52 2009 us=222278 replay_window = 64 Tue Nov 10 15:04:52 2009 us=222295 replay_time = 15 Tue Nov 10 15:04:52 2009 us=222312 packet_id_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222329 use_iv = ENABLED Tue Nov 10 15:04:52 2009 us=222346 test_crypto = DISABLED Tue Nov 10 15:04:52 2009 us=222363 tls_server = DISABLED Tue Nov 10 15:04:52 2009 us=222381 tls_client = DISABLED Tue Nov 10 15:04:52 2009 us=222398 key_method = 2 Tue Nov 10 15:04:52 2009 us=222414 ca_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222431 ca_path = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222448 dh_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222465 cert_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222481 priv_key_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222498 pkcs12_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222515 cipher_list = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222532 tls_verify = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222549 tls_remote = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222566 crl_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222596 ns_cert_type = 0 Tue Nov 10 15:04:52 2009 us=222615 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222632 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222649 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222666 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222683 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222700 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222718 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222735 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222752 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222769 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222786 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222803 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222820 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222837 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222855 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222872 remote_cert_ku[i] = 0 Tue Nov 10 15:04:52 2009 us=222889 remote_cert_eku = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=222906 tls_timeout = 2 Tue Nov 10 15:04:52 2009 us=222923 renegotiate_bytes = 0 Tue Nov 10 15:04:52 2009 us=222940 renegotiate_packets = 0 Tue Nov 10 15:04:52 2009 us=222958 renegotiate_seconds = 3600 Tue Nov 10 15:04:52 2009 us=222975 handshake_window = 60 Tue Nov 10 15:04:52 2009 us=222992 transition_window = 3600 Tue Nov 10 15:04:52 2009 us=223009 single_session = DISABLED Tue Nov 10 15:04:52 2009 us=223026 tls_exit = DISABLED Tue Nov 10 15:04:52 2009 us=223043 tls_auth_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=223060 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223077 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223095 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223112 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223129 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223147 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223164 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223181 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223199 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223216 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223233 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223251 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223268 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223307 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223327 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223344 pkcs11_protected_authentication = DISABLED Tue Nov 10 15:04:52 2009 us=223362 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223380 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223398 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223415 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223433 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223451 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223468 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223486 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223503 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223520 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223537 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223555 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223573 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223591 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223608 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223625 pkcs11_private_mode = 00000000 Tue Nov 10 15:04:52 2009 us=223643 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223660 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223690 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223708 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223725 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223742 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223759 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223777 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223794 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223812 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223829 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223846 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223863 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223881 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223899 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223916 pkcs11_cert_private = DISABLED Tue Nov 10 15:04:52 2009 us=223933 pkcs11_pin_cache_period = -1 Tue Nov 10 15:04:52 2009 us=223951 pkcs11_id = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=223968 pkcs11_id_management = DISABLED Tue Nov 10 15:04:52 2009 us=224000 server_network = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224019 server_netmask = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224039 server_bridge_ip = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224057 server_bridge_netmask = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224076 server_bridge_pool_start = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224095 server_bridge_pool_end = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224112 push_list = 'route 192.168.1.0 255.255.255. 0,route 192.168.2.0 255.255.255.0' Tue Nov 10 15:04:52 2009 us=224130 ifconfig_pool_defined = DISABLED Tue Nov 10 15:04:52 2009 us=224150 ifconfig_pool_start = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224169 ifconfig_pool_end = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224188 ifconfig_pool_netmask = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224205 ifconfig_pool_persist_filename = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224223 ifconfig_pool_persist_refresh_freq = 600 Tue Nov 10 15:04:52 2009 us=224240 n_bcast_buf = 256 Tue Nov 10 15:04:52 2009 us=224258 tcp_queue_limit = 64 Tue Nov 10 15:04:52 2009 us=224275 real_hash_size = 256 Tue Nov 10 15:04:52 2009 us=224293 virtual_hash_size = 256 Tue Nov 10 15:04:52 2009 us=224309 client_connect_script = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224327 learn_address_script = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224344 client_disconnect_script = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224362 client_config_dir = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224379 ccd_exclusive = DISABLED Tue Nov 10 15:04:52 2009 us=224396 tmp_dir = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224413 push_ifconfig_defined = DISABLED Tue Nov 10 15:04:52 2009 us=224432 push_ifconfig_local = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224451 push_ifconfig_remote_netmask = 0.0.0.0 Tue Nov 10 15:04:52 2009 us=224469 enable_c2c = DISABLED Tue Nov 10 15:04:52 2009 us=224486 duplicate_cn = DISABLED Tue Nov 10 15:04:52 2009 us=224503 cf_max = 0 Tue Nov 10 15:04:52 2009 us=224520 cf_per = 0 Tue Nov 10 15:04:52 2009 us=224537 max_clients = 1024 Tue Nov 10 15:04:52 2009 us=224555 max_routes_per_client = 256 Tue Nov 10 15:04:52 2009 us=224573 client_cert_not_required = DISABLED Tue Nov 10 15:04:52 2009 us=224590 username_as_common_name = DISABLED Tue Nov 10 15:04:52 2009 us=224607 auth_user_pass_verify_script = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224625 auth_user_pass_verify_script_via_file = DIS ABLED Tue Nov 10 15:04:52 2009 us=224642 port_share_host = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224659 port_share_port = 0 Tue Nov 10 15:04:52 2009 us=224676 client = DISABLED Tue Nov 10 15:04:52 2009 us=224693 pull = DISABLED Tue Nov 10 15:04:52 2009 us=224710 auth_user_pass_file = '[UNDEF]' Tue Nov 10 15:04:52 2009 us=224732 OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO 2] [EPOLL] [PKCS11] built on Mar 9 2009 Tue Nov 10 15:04:52 2009 us=224894 IMPORTANT: OpenVPN's default port number is n ow 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta1 6 and earlier used 5000 as the default port. Tue Nov 10 15:04:52 2009 us=224958 /usr/sbin/openvpn-vulnkey -q /etc/openvpn/sha red.key /usr/sbin/openvpn-vulnkey:22: DeprecationWarning: the md5 module is deprecated; use hashlib instead import md5 Tue Nov 10 15:04:52 2009 us=441636 Static Encrypt: Cipher 'BF-CBC' initialized w ith 128 bit key Tue Nov 10 15:04:52 2009 us=441752 Static Encrypt: Using 160 bit message hash 'S HA1' for HMAC authentication Tue Nov 10 15:04:52 2009 us=441827 Static Decrypt: Cipher 'BF-CBC' initialized w ith 128 bit key Tue Nov 10 15:04:52 2009 us=441850 Static Decrypt: Using 160 bit message hash 'S HA1' for HMAC authentication Tue Nov 10 15:04:52 2009 us=441899 LZO compression initialized Tue Nov 10 15:04:52 2009 us=442006 WARNING: Since you are using --dev tap, the s econd argument to --ifconfig must be a netmask, for example something like 255.2 55.255.0. (silence this warning with --ifconfig-nowarn) Tue Nov 10 15:04:52 2009 us=442236 WARNING: potential TUN/TAP adapter subnet con flict between local LAN [192.168.1.0/255.255.255.0] and remote VPN [192.168.1.0/ 192.168.1.2] Tue Nov 10 15:04:52 2009 us=443580 TUN/TAP device tap0 opened Tue Nov 10 15:04:52 2009 us=443648 TUN/TAP TX queue length set to 100 Tue Nov 10 15:04:52 2009 us=443702 /sbin/ifconfig tap0 192.168.1.1 netmask 192.1 68.1.2 mtu 1500 broadcast 255.255.255.253 SIOCSIFNETMASK: Invalid argument Tue Nov 10 15:04:52 2009 us=449103 Linux ifconfig failed: external program exite d with error status: 1 Tue Nov 10 15:04:52 2009 us=449201 Exiting Options error: --server and --secret cannot be used together (you must use SSL/T LS keys) Use --help for more information. Options error: --server and --secret cannot be used together (you must use SSL/T LS keys)
Uprzejmie prosze o pomoc, moze mam cos z tablica routingu nie wiem, po prostu ucze sie linucha...
Dziekuje
Moze jest cos z routingiem ?? Troche czytalem na ten temat, ale nadal bez pozytywnego rezultatu..
Ostatnio edytowany przez miastek (2009-11-11 16:49:19)
Offline
Napisał ci ładnie:
--server and --secret cannot be used together
skasuj:
server 192.168.1.1 255.255.255.0
i powinno działać :)
Polecam przeczytanie tego:
http://mediawiki.ilab.pl/images/6/60/Bsi_11_lab.pdf
Miłe proste i w ojczystym języku :D
Ostatnio edytowany przez qlemik (2009-11-12 10:20:05)
Offline
Poza tym w kliencie masz błąd
Tue Nov 10 15:04:52 2009 us=443702 /sbin/ifconfig tap0 192.168.1.1 netmask 192.1 68.1.2 mtu 1500 broadcast 255.255.255.253 SIOCSIFNETMASK: Invalid argument
Offline
Strony: 1
Time (s) | Query |
---|---|
0.00015 | SET CHARSET latin2 |
0.00007 | SET NAMES latin2 |
0.00147 | SELECT u.*, g.*, o.logged FROM punbb_users AS u INNER JOIN punbb_groups AS g ON u.group_id=g.g_id LEFT JOIN punbb_online AS o ON o.ident='18.191.189.124' WHERE u.id=1 |
0.00108 | REPLACE INTO punbb_online (user_id, ident, logged) VALUES(1, '18.191.189.124', 1732903348) |
0.00060 | SELECT * FROM punbb_online WHERE logged<1732903048 |
0.00119 | SELECT topic_id FROM punbb_posts WHERE id=132995 |
0.00138 | SELECT id FROM punbb_posts WHERE topic_id=15443 ORDER BY posted |
0.00124 | SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, 0 FROM punbb_topics AS t INNER JOIN punbb_forums AS f ON f.id=t.forum_id LEFT JOIN punbb_forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id=3) WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id=15443 AND t.moved_to IS NULL |
0.00006 | SELECT search_for, replace_with FROM punbb_censoring |
0.00166 | SELECT u.email, u.title, u.url, u.location, u.use_avatar, u.signature, u.email_setting, u.num_posts, u.registered, u.admin_note, p.id, p.poster AS username, p.poster_id, p.poster_ip, p.poster_email, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by, g.g_id, g.g_user_title, o.user_id AS is_online FROM punbb_posts AS p INNER JOIN punbb_users AS u ON u.id=p.poster_id INNER JOIN punbb_groups AS g ON g.g_id=u.group_id LEFT JOIN punbb_online AS o ON (o.user_id=u.id AND o.user_id!=1 AND o.idle=0) WHERE p.topic_id=15443 ORDER BY p.id LIMIT 0,25 |
0.00103 | UPDATE punbb_topics SET num_views=num_views+1 WHERE id=15443 |
Total query time: 0.00993 s |