Пытаюсь поднять банальный vpn сервер на ноутбуке.
Демон сразу фейлится.
/etc/init.d/openvpn start
Starting virtual private network daemon: server vpn failed!
Хотя процесс висит:
#pgrep openvpn
12241
# ifconfig | grep tap
tap0 Link encap:Ethernet HWaddr 7a:74:b4:00:e7:bf
В логах никаких ошибок, кроме предупреждения мол какой я такой-сякой хочу поднять впн из-за NAT'а роутера.
#cat /var/log/openvpn.log
Wed Apr 17 18:44:10 2013 OpenVPN 2.1.3 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Feb 20 2012
Wed Apr 17 18:44:10 2013 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this mi$
Wed Apr 17 18:44:10 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Apr 17 18:44:10 2013 Diffie-Hellman initialized with 1024 bit key
Wed Apr 17 18:44:10 2013 /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
Wed Apr 17 18:44:11 2013 Control Channel Authentication: using '/etc/openvpn/ta.key' as a OpenVPN static key file
Wed Apr 17 18:44:11 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 17 18:44:11 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 17 18:44:11 2013 TLS-Auth MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Apr 17 18:44:11 2013 Socket Buffers: R=[112640->131072] S=[112640->131072]
Wed Apr 17 18:44:11 2013 TUN/TAP device tap0 opened
Wed Apr 17 18:44:11 2013 TUN/TAP TX queue length set to 100
Wed Apr 17 18:44:11 2013 /sbin/ifconfig tap0 10.122.0.1 netmask 255.255.255.0 mtu 1500 broadcast 10.122.0.255
Wed Apr 17 18:44:11 2013 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Apr 17 18:44:11 2013 GID set to root
Wed Apr 17 18:44:11 2013 UID set to root
Wed Apr 17 18:44:11 2013 UDPv4 link local (bound): [AF_INET]192.168.0.101:5278
Wed Apr 17 18:44:11 2013 UDPv4 link remote: [undef]
Wed Apr 17 18:44:11 2013 MULTI: multi_init called, r=256 v=256
Wed Apr 17 18:44:11 2013 IFCONFIG POOL: base=10.122.0.2 size=253
Wed Apr 17 18:44:11 2013 Initialization Sequence Completed
Вот конфиг:
#cat /etc/openvpn/server.conf
daemon
proto udp
local 192.168.0.101
dev tap
port 5278
tls-server
tls-auth /etc/openvpn/ta.key 0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
mode server
server 10.122.0.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
duplicate-cn
cipher DES-EDE3-CBC
user root
group root
persist-tun
persist-key
comp-lzo
keepalive 10 120
client-to-client
log /var/log/openvpn.log
status /var/log/openvpn-status.log
verb 3
ЧЯДНТ? Обгуглился весь уже.
