Administrace komentářů

Zdravim,

snazim se propojit 2 site v ruznych lokacich pomoci Wireguard VPN a k tomu jeste dalsi Wireguard RoadWarriory.

Na obou lokacich (rikejme jim A a B) je na routerech Opnsense s Wireguard pluginem, oba jsou propojeny Site2site svoji instanci wireguardu. To funguje, vsechny pocitace v jedne siti mohou pristupovat na vsechny pocitace v druhe siti a naopak.

Na routeru A je navic druha instance wireguardu ke ktere se pripojuji dalsi klienti. To se zda byt take v poradku. Klient bez problemu komunikuje se vsemi pocitaci v siti A

Divny problem nastava, kdyz se chce klient pripojit na pocitac v siti B. A ten problem je ten ze to funguje,nefunguje, funguje, nefunguje......

Router A: 172.17.130.0/24, VPN IP site2site 12.1.1.1, VPN pro clienty 13.1.1.1
Router B: 172.17.128.0/23, VPN IP 12.1.1.2
Klienti VPN 13.1.1.0/24 

Napriklad ping z klienta (13.1.1.5) na pocitac v siti B:

zsman@YOGA-LP:~$ ping 172.17.128.19
PING 172.17.128.19 (172.17.128.19) 56(84) bytes of data.
64 bytes from 172.17.128.19: icmp_seq=1 ttl=62 time=39.1 ms
64 bytes from 172.17.128.19: icmp_seq=2 ttl=62 time=39.1 ms
64 bytes from 172.17.128.19: icmp_seq=3 ttl=62 time=39.2 ms
64 bytes from 172.17.128.19: icmp_seq=4 ttl=62 time=38.6 ms
^C
--- 172.17.128.19 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3004ms
rtt min/avg/max/mdev = 38.629/39.005/39.155/0.218 ms
zsman@YOGA-LP:~$ ping 172.17.128.19
PING 172.17.128.19 (172.17.128.19) 56(84) bytes of data.
^C
--- 172.17.128.19 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2055ms

zsman@YOGA-LP:~$ ping 172.17.128.19
PING 172.17.128.19 (172.17.128.19) 56(84) bytes of data.
64 bytes from 172.17.128.19: icmp_seq=1 ttl=62 time=38.7 ms
64 bytes from 172.17.128.19: icmp_seq=2 ttl=62 time=39.1 ms
64 bytes from 172.17.128.19: icmp_seq=3 ttl=62 time=38.6 ms
^C
--- 172.17.128.19 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 38.583/38.803/39.084/0.209 ms
zsman@YOGA-LP:~$ ping 172.17.128.19
PING 172.17.128.19 (172.17.128.19) 56(84) bytes of data.
^C
--- 172.17.128.19 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3058ms

zsman@YOGA-LP:~$ ping 172.17.128.19
PING 172.17.128.19 (172.17.128.19) 56(84) bytes of data.
64 bytes from 172.17.128.19: icmp_seq=1 ttl=62 time=37.9 ms
64 bytes from 172.17.128.19: icmp_seq=2 ttl=62 time=38.9 ms
64 bytes from 172.17.128.19: icmp_seq=3 ttl=62 time=38.5 ms
64 bytes from 172.17.128.19: icmp_seq=4 ttl=62 time=39.1 ms
64 bytes from 172.17.128.19: icmp_seq=5 ttl=62 time=38.0 ms
^C
--- 172.17.128.19 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4007ms
rtt min/avg/max/mdev = 37.863/38.460/39.051/0.466 ms

Proste: ping nejde Ctrl+C ping OK Ctrl+C ping nejde Ctrl+C ping OK

A opakuje se to presne takto stale dokola.

Stejne tak v pripade SSH, nejdriv nedostanu ani moznost zadat heslo, hned pri dalsim pokusu se mi uz prihlaseni objevi, pri dalsim zase nic, a pri dalsim zase ano. Kdyz uz se prihlasim, tak spojeni se zda bez problemu a drzi.

Pres ty VPN tunely jde jenom vnitrni komunikace, pristup do internetu jde z obou routetu i z klientu naprimo.

Takze mate nekdo tuseni cim by toto chovani mohlo byt zpusobeno? Nejake podrobnejsi info dodam, ale nevim co je potreba.

Dekuji