LINUX.ORG.RU
ФорумAdmin

OpenVPN проблемы с маршрутизацией.

 , , ,


0

1

Доброе утро форумчане.Проблема у меня такая,вчера соеденил два сервера один на freebsd,второй на windows sever 2008r2.Все прошло удачно два сервака друг друга видеть,и пингуються прекрасно,но сетки друг друга не видят.Хотя маршруты прописаны вроде верно.

Вот конфиг openvpn сервера: # Specify device dev tun1 # Server and client IP and Pool server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt # Certificates for VPN Authentication ca ca.crt cert RSN.crt key RSN.key dh dh1024.pem #proto udp proto tcp-server port 5000

#mlock #nice -19 #fast-io #tun-mtu 1000 #mssfix #tcp-nodelay

# Routes to push to the client push "route 10.8.0.0 255.255.255.0" push "route 192.168.0.0 255.255.255.128" push "route 192.168.2.0 255.255.255.0" route 10.8.0.0 255.255.255.0 route 192.168.2.0 255.255.255.0

# Use compression on the VPN link comp-lzo adaptive

# Make the link more resistant to connection failures keepalive 30 120 ping-timer-rem persist-tun persist-key

log /var/log/openvpn.log log-append /var/log/openvpn.log

client-to-client client-config-dir /usr/local/etc/openvpn/ccd crl-verify /openvpn/easy-rsa/keys/crl.pem

Вот созданный для клиента маршрутизация /usr/local/etc/openvpn/ccd

iroute 192.168.2.0 255.255.255.0 route 192.168.0.0 255.255.255.0

Вот что пишет openvpn.log

Fri Mar 21 23:16:17 2014 Initialization Sequence Completed Fri Mar 21 23:16:22 2014 TCP connection established with [AF_INET]77.72.128.175:57050 Fri Mar 21 23:16:23 2014 77.72.128.175:57050 [azina] Peer Connection Initiated with [AF_INET]77.72.128.175:57050 Fri Mar 21 23:16:23 2014 azina/77.72.128.175:57050 Options error: option 'route' cannot be used in this context (/usr/local/etc/openvpn/ccd/azina) Fri Mar 21 23:16:23 2014 azina/77.72.128.190:57050 MULTI_sva: pool returned IPv4=10.8.0.110, IPv6=(Not enabled) Fri Mar 21 23:16:25 2014 azina/77.72.128.175:57050 send_push_reply(): safe_cap=940 Sat Mar 22 03:15:56 2014 TCP connection established with [AF_INET]186.14.200.122:34611 Sat Mar 22 03:15:56 2014 186.14.200.122:34611 TCP connection established with [AF_INET]186.14.200.122:59106 Sat Mar 22 03:15:56 2014 186.14.200.122:34611 Connection reset, restarting [0] Sat Mar 22 03:15:56 2014 186.14.200.122:59106 Connection reset, restarting [0] Sat Mar 22 03:22:21 2014 TCP connection established with [AF_INET]186.14.200.122:49314 Sat Mar 22 03:22:21 2014 186.14.200.122:49314 TCP connection established with [AF_INET]186.14.200.122:47163 Sat Mar 22 03:22:21 2014 186.14.200.122:49314 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1544 -- please ensure that Sat Mar 22 03:22:21 2014 186.14.200.122:49314 Connection reset, restarting [0] Sat Mar 22 03:22:21 2014 186.14.200.122:47163 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1544 -- please ensure that Sat Mar 22 03:22:21 2014 186.14.200.122:47163 Connection reset, restarting [0] Sat Mar 22 06:24:48 2014 TCP connection established with [AF_INET]14.49.166.15:47373 Sat Mar 22 06:24:51 2014 14.49.166.15:47373 Connection reset, restarting [0] Sat Mar 22 06:24:51 2014 TCP connection established with [AF_INET]14.49.166.15:36933 Sat Mar 22 06:24:51 2014 14.49.166.15:36933 Connection reset, restarting [0] Sat Mar 22 06:31:11 2014 TCP connection established with [AF_INET]14.49.166.15:45301 Sat Mar 22 06:31:14 2014 14.49.166.15:45301 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1544 -- please ensure that -- Sat Mar 22 06:31:14 2014 14.49.166.15:45301 Connection reset, restarting [0]

Куда копать? Спасибо:)


Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.