Administrace komentářů

Tak jsem to upravil podle tve rady:

mode server
tls-server
dev tun0
proto udp
port 1194
ifconfig 192.168.1.2 255.255.255.0
ifconfig-pool 192.168.1.110 192.168.1.120 255.255.255.0
duplicate-cn
max-clients 5
client-to-client
push "dhcp-option DNS 192.168.1.1"
push "redirect-gateway def1"
push "redirect-gateway local def1"
keepalive 10 30
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh2048.pem
log-append /var/log/openvpn
status /var/run/openvpn/vpn.status 10
user nobody
group nogroup
comp-lzo
verb 3
persist-key
persist-tun

ale porad to nejde - ani se nespusti VPN server:

Wed Aug 26 17:05:06 2009 OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Sep 18 2008
Wed Aug 26 17:05:06 2009 Note: cannot open /var/run/openvpn/vpn.status for WRITE
Wed Aug 26 17:05:07 2009 Diffie-Hellman initialized with 2048 bit key
Wed Aug 26 17:05:07 2009 /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Wed Aug 26 17:05:10 2009 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Aug 26 17:05:10 2009 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Wed Aug 26 17:05:10 2009 TUN/TAP device tun0 opened
Wed Aug 26 17:05:10 2009 TUN/TAP TX queue length set to 100
Wed Aug 26 17:05:10 2009 /sbin/ifconfig tun0 192.168.1.2 pointopoint 255.255.255.0 mtu 1500
SIOCSIFDSTADDR: Invalid argument
Wed Aug 26 17:05:10 2009 Linux ifconfig failed: external program exited with error status: 1
Wed Aug 26 17:05:10 2009 Exiting
Options error: The third parameter to --ifconfig-pool (netmask) is only valid in --dev tap mode
Use --help for more information.