Administrace komentářů

Dobrý den,
prosím o radu, jak správně nastavit OpenVPN 2.0

Server: Gentoo Linux
VPN: OpenVPN 2.0

Klient: Windows XP Professional, SP2
VPN: OpenVPN GUI for Windows


O co mi jde ? Jde mi o to, abych byl schopen se z venku dostat do své vnitřní sítě a využívat tak sdílených prostředků ze svého Samba serveru.

V současné chvíli, když si dám ping z Windows XP na 10.100.100.1 tak nemám odezvy, když si dám ping z Linuxu na 10.100.100.10 tak také nemám odezvy. Už opravdu nevím, co mám kde špatně. Konfigurační soubor /etc/openvpn/openvpn.conf

# cat /etc/openvpn/openvpn.conf
ifconfig 10.100.100.1  255.255.255.0
port 5010
proto udp
dev tap0
secret /etc/openvpn/static.key
ping 10
comp-lzo
verb 5
mute 10
user root
group root

Konfigurační soubor C:\Program Files\OpenVPN\config\test.ovpn

remote MOJE.VEREJNA.IP.ADRESA
--float
no-replay
ifconfig 10.100.100.10  255.255.255.0
port 5010
proto udp
dev tap0
secret C:/static.key
ping 10
comp-lzo
verb 5
mute 10
user root
group root

Sobour static.key byl vygenerovan na Linuxu a nachází se v adresářích uvedených v konfiguračních souborech.

Výpis z logu na Windows XP v OpenVPN GUI
Tue Jan 24 14:23:55 2006 NOTE: --user option is not implemented on Windows
Tue Jan 24 14:23:55 2006 NOTE: --group option is not implemented on Windows
Tue Jan 24 14:23:55 2006 us=204981 Current Parameter Settings:
Tue Jan 24 14:23:55 2006 us=204993   config = 'test.ovpn'
Tue Jan 24 14:23:55 2006 us=205002   mode = 0
Tue Jan 24 14:23:55 2006 us=205010   show_ciphers = DISABLED
Tue Jan 24 14:23:55 2006 us=205019   show_digests = DISABLED
Tue Jan 24 14:23:55 2006 us=205029   show_engines = DISABLED
Tue Jan 24 14:23:55 2006 us=205039   genkey = DISABLED
Tue Jan 24 14:23:55 2006 us=205047   key_pass_file = '[UNDEF]'
Tue Jan 24 14:23:55 2006 us=205057   show_tls_ciphers = DISABLED
Tue Jan 24 14:23:55 2006 us=205066   proto = 0
Tue Jan 24 14:23:55 2006 us=205075 NOTE: --mute triggered...
Tue Jan 24 14:23:55 2006 us=205109 178 variation(s) on previous 10 message(s) suppressed by --mute
Tue Jan 24 14:23:55 2006 us=205122 OpenVPN 2.0.5 Win32-MinGW [SSL] [LZO] built on Nov  2 2005
Tue Jan 24 14:23:55 2006 us=205209 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Tue Jan 24 14:23:55 2006 us=205221 WARNING: You have disabled Replay Protection (--no-replay) which may make OpenVPN less secure
Tue Jan 24 14:23:55 2006 us=205863 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 24 14:23:55 2006 us=205961 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 24 14:23:55 2006 us=206054 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Jan 24 14:23:55 2006 us=206070 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 24 14:23:55 2006 us=206094 LZO compression initialized
Tue Jan 24 14:23:55 2006 us=210691 TAP-WIN32 device [Připojení k místní síti 3] opened: \\.\Global\{F7C3F169-F134-4571-BCD2-7F5932E8D6D9}.tap
Tue Jan 24 14:23:55 2006 us=210716 TAP-Win32 Driver Version 8.1 
Tue Jan 24 14:23:55 2006 us=210729 TAP-Win32 MTU=1500
Tue Jan 24 14:23:55 2006 us=210749 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.100.100.2/255.255.255.0 on interface {F7C3F169-F134-4571-BCD2-7F5932E8D6D9} [DHCP-serv: 10.100.100.0, lease-time: 31536000]
Tue Jan 24 14:23:55 2006 us=214847 Successful ARP Flush on interface [65541] {F7C3F169-F134-4571-BCD2-7F5932E8D6D9}
Tue Jan 24 14:23:55 2006 us=218699 Data Channel MTU parms [ L:1569 D:1450 EF:37 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Jan 24 14:23:55 2006 us=218742 Local Options String: 'V4,dev-type tap,link-mtu 1569,tun-mtu 1532,proto UDPv4,ifconfig 10.100.100.0 255.255.255.0,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret,no-replay'
Tue Jan 24 14:23:55 2006 us=218757 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1569,tun-mtu 1532,proto UDPv4,ifconfig 10.100.100.0 255.255.255.0,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret,no-replay'
Tue Jan 24 14:23:55 2006 us=218791 Local Options hash (VER=V4): 'ef7ef4f2'
Tue Jan 24 14:23:55 2006 us=218809 Expected Remote Options hash (VER=V4): 'ef7ef4f2'
Tue Jan 24 14:23:55 2006 us=218848 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jan 24 14:23:55 2006 us=218870 UDPv4 link local (bound): [undef]:5010
Tue Jan 24 14:23:55 2006 us=218881 UDPv4 link remote: MOJE.VEREJNA.IP.ADRESA:5010

Děkuji za každou radu.