Administrace komentářů

Dobry den,

mam v openbsd (4.4) nasledujici problem s openvpn - ve zkratce: server nastartuje, zarizeni tun nakonfiguruje, ale nedopingnu se na nej.

Nejzajimavejsi je, ze jsem openvpn provozoval taktez na obsd 4.4 na stejnem stroji pred nucenym reinstalem a nikdy jsem takovy problem nemel. Takze:
Konfigurak od openVPN  

 port 1194
 proto udp
 dev tun0
 ca yetti/ca.crt
 cert yetti/yetti.crt
 key yetti/yetti.key 
 dh yetti/dh1024.pem
 server 10.18.0.0 255.255.255.0
 ifconfig-pool-persist ipp.txt
 push "route 147.AA.BB.0 255.255.254.0"
 push "dhcp-option DNS 147.AA.BB.1"
 push "redirect-gateway"
 keepalive 10 120
 comp-lzo
 persist-key
 persist-tun
 status openvpn-status.log
 verb 3

# /usr/local/sbin/openvpn --cd /etc/openvpn/ --config server.conf
Tue Dec 16 22:41:40 2008 OpenVPN 2.1_rc7 i386-unknown-openbsd4.4 [SSL] [LZO1] built on Dec 16 2008
Tue Dec 16 22:41:40 2008 Diffie-Hellman initialized with 1024 bit key
Tue Dec 16 22:41:40 2008 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Dec 16 22:41:40 2008 gw 147.AA.BB.1
Tue Dec 16 22:41:40 2008 /sbin/ifconfig tun0 destroy
Tue Dec 16 22:41:40 2008 /sbin/ifconfig tun0 create
Tue Dec 16 22:41:40 2008 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Tue Dec 16 22:41:40 2008 /sbin/ifconfig tun0 10.18.0.1 10.18.0.2 mtu 1500 netmask 255.255.255.255 up
Tue Dec 16 22:41:40 2008 TUN/TAP device /dev/tun0 opened
Tue Dec 16 22:41:40 2008 /sbin/route add -net 10.18.0.0 10.18.0.2 -netmask 255.255.255.0
add net 10.18.0.0: gateway 10.18.0.2
Tue Dec 16 22:41:40 2008 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Dec 16 22:41:40 2008 Socket Buffers: R=[41600->65536] S=[9216->65536]
Tue Dec 16 22:41:40 2008 UDPv4 link local (bound): [undef]:1194
Tue Dec 16 22:41:40 2008 UDPv4 link remote: [undef]
Tue Dec 16 22:41:40 2008 MULTI: multi_init called, r=256 v=256
Tue Dec 16 22:41:40 2008 IFCONFIG POOL: base=10.18.0.4 size=62
Tue Dec 16 22:41:40 2008 IFCONFIG POOL LIST
Tue Dec 16 22:41:40 2008 Initialization Sequence Completed

ifconfig rekne:

# ifconfig tun0    
tun0: flags=8011<UP,POINTOPOINT,MULTICAST> mtu 1500
        groups: tun
        inet 10.18.0.1 --> 10.18.0.2 netmask 0xffffffff

A konecne, kdyz se pokosim pingnout ip toho TUNu tak...

[ttyp1]milan@yetti~ [7] $ ping 10.18.0.1
PING 10.18.0.1 (10.18.0.1): 56 data bytes