РЕШЕНО: OpenVPN server linux (Winmobile клиенты)

Обсуждение настройки и работы сервисов, резервирования, сетевых настроек и вопросов безопасности ОС.

Модераторы: SLEDopit, Модераторы разделов

leksstav
Сообщения: 331

РЕШЕНО: OpenVPN server linux

Сообщение leksstav »

Всех, приветствую !

Имеется OpenVPN сервер к которому подключаются и прекрасно работают как виндовые так и линуксовые клиенты.
Возник затык с подключением клиентов Winmobile

#######################
Конфиг клиента
#######################

Код: Выделить всё

remote XX.XX.XX.XX
dev tap
port 1194
tun-mtu 1500
client
proto tcp
nobind
comp-lzo
verb 3
resolv-retry infinite
persist-key
persist-tun
<ca>
-----BEGIN CERTIFICATE-----
ЗДЕСЬ СОДЕРЖИМОЕ CA.CRT
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
ЗДЕСЬ СОДЕРЖИМОЕ ADMIN.CRT
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
ЗДЕСЬ СОДЕРЖИМОЕ ADMIN.KEY
-----END RSA PRIVATE KEY-----
</key>";

################
Логи клиента
###############

Код: Выделить всё

Mon Mar 26 21:53:33 2012 OpenVPN 2.1_rc1a Win32-MSVC++ [SSL] [LZO2] built on Dec  4 2006
Mon Mar 26 21:53:33 2012 MANAGEMENT: TCP Socket listening on 127.0.0.1:10000
Mon Mar 26 21:53:33 2012 Need hold release from management interface, waiting...
Mon Mar 26 21:53:33 2012 MANAGEMENT: Client connected from 127.0.0.1:10000
Mon Mar 26 21:53:33 2012 Using Windows Connection Manager with destination '{0DAEA92E-2917-4C6C-9E23-F2BCAA13DA07}' resolving to provider guid {0DAEA92E-2917-4C6C-9E23-F2BCAA13DA07} (exclusive)
Mon Mar 26 21:53:33 2012 Acquisition of Windows Connection Manager provider succeeded...
Mon Mar 26 21:53:33 2012 WARNING: No server certificate verification method has been enabled.  See [url="http://openvpn.net/howto.html#mitm"]http://openvpn.net/howto.html#mitm[/url] for more info.
Mon Mar 26 21:53:33 2012 LZO compression initialized
Mon Mar 26 21:53:33 2012 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Mar 26 21:53:33 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Mar 26 21:53:33 2012 Local Options hash (VER=V4): '31fdf004'
Mon Mar 26 21:53:33 2012 Expected Remote Options hash (VER=V4): '3e6d1056'
Mon Mar 26 21:53:33 2012 Attempting to establish TCP connection with XX.XX.XX.XX:1194
Mon Mar 26 21:53:33 2012 MANAGEMENT: >STATE:1332784413,TCP_CONNECT,,,
Mon Mar 26 21:53:34 2012 TCP connection established with XX.XX.XX.XX:1194
Mon Mar 26 21:53:34 2012 Socket Buffers: R=[32768->32768] S=[16384->16384]
Mon Mar 26 21:53:34 2012 TCPv4_CLIENT link local (bound): [undef]
Mon Mar 26 21:53:34 2012 TCPv4_CLIENT link remote: XX.XX.XX.XX:1194
Mon Mar 26 21:53:34 2012 MANAGEMENT: >STATE:1332784414,WAIT,,,
Mon Mar 26 21:53:34 2012 MANAGEMENT: >STATE:1332784414,AUTH,,,
Mon Mar 26 21:53:34 2012 TLS: Initial packet from XX.XX.XX.XX:1194, sid=7cab9b45 0ec941dd
Mon Mar 26 21:53:39 2012 VERIFY OK: depth=1, /C=RU/ST=NA/L=Stavropol/O=trust/CN=stranicy/emailAddress=root@localhost
Mon Mar 26 21:53:39 2012 VERIFY OK: depth=0, /C=RU/ST=NA/O=trust/CN=trust/emailAddress=root@localhost
Mon Mar 26 21:53:49 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Mar 26 21:53:49 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 26 21:53:49 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Mar 26 21:53:49 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 26 21:53:49 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Mar 26 21:53:49 2012 [trust] Peer Connection Initiated with XX.XX.XX.XX:1194
Mon Mar 26 21:53:50 2012 MANAGEMENT: >STATE:1332784430,GET_CONFIG,,,
Mon Mar 26 21:53:50 2012 SENT CONTROL [trust]: 'PUSH_REQUEST' (status=1)
Mon Mar 26 21:53:50 2012 PUSH: Received control message: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,dhcp-option DNS 192.168.99.1,dhcp-option WINS 192.168.99.1,route-gateway 192.168.99.1,ping 10,ping-restart 120,ifconfig 192.168.99.5 255.255.255.0'
Mon Mar 26 21:53:50 2012 OPTIONS IMPORT: timers and/or timeouts modified
Mon Mar 26 21:53:50 2012 OPTIONS IMPORT: --ifconfig/up options modified
Mon Mar 26 21:53:50 2012 OPTIONS IMPORT: route options modified
Mon Mar 26 21:53:50 2012 OPTIONS IMPORT: route-related options modified
Mon Mar 26 21:53:50 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Mar 26 21:53:50 2012 MANAGEMENT: >STATE:1332784430,ASSIGN_IP,,192.168.99.5,
Mon Mar 26 21:53:50 2012 TAP-WIN32 device [TAP1:] opened: TAP1:
Mon Mar 26 21:53:50 2012 TAP-Win32 Driver Version 8.4
Mon Mar 26 21:53:50 2012 TAP-Win32 MTU=1500
Mon Mar 26 21:53:50 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.99.5/255.255.255.0 on interface TAP1: [DHCP-serv: 192.168.99.0, lease-time: 31536000]
Mon Mar 26 21:53:50 2012 Successful ARP Flush on interface [65540] TAP DEVICE 1
Mon Mar 26 21:53:50 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon Mar 26 21:53:50 2012 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 21:53:51 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon Mar 26 21:53:51 2012 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 21:53:52 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon Mar 26 21:53:52 2012 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 21:53:53 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon Mar 26 21:53:53 2012 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 21:53:54 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon Mar 26 21:53:54 2012 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 21:53:55 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon Mar 26 21:53:55 2012 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 21:53:56 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Mon Mar 26 21:53:56 2012 Route: Waiting for TUN/TAP interface to come up...
Mon Mar 26 21:53:57 2012 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Mon Mar 26 21:53:57 2012 MANAGEMENT: >STATE:1332784437,ADD_ROUTES,,,
Mon Mar 26 21:53:57 2012 route ADD 192.168.100.0 MASK 255.255.255.0 192.168.99.1
Mon Mar 26 21:53:57 2012 Route addition via IPAPI succeeded [adaptive]
Mon Mar 26 21:53:57 2012 Initialization Sequence Completed
Mon Mar 26 21:53:57 2012 MANAGEMENT: >STATE:1332784437,CONNECTED,SUCCESS,192.168.99.5,XX.XX.XX.XX
Mon Mar 26 21:59:09 2012 MANAGEMENT: Client disconnected
Mon Mar 26 22:02:01 2012 [trust] Inactivity timeout (--ping-restart), restarting
Mon Mar 26 22:02:01 2012 TCP/UDP: Closing socket
Mon Mar 26 22:02:01 2012 SIGUSR1[soft,ping-restart] received, process restarting
Mon Mar 26 22:02:01 2012 MANAGEMENT: >STATE:1332784921,RECONNECTING,ping-restart,,
Mon Mar 26 22:02:01 2012 Restart pause, 5 second(s)
Mon Mar 26 22:02:06 2012 WARNING: No server certificate verification method has been enabled.  See [url="http://openvpn.net/howto.html#mitm"]http://openvpn.net/howto.html#mitm[/url] for more info.
Mon Mar 26 22:02:06 2012 Re-using SSL/TLS context
Mon Mar 26 22:02:06 2012 LZO compression initialized
Mon Mar 26 22:02:06 2012 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Mar 26 22:02:06 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Mar 26 22:02:06 2012 Local Options hash (VER=V4): '31fdf004'
Mon Mar 26 22:02:06 2012 Expected Remote Options hash (VER=V4): '3e6d1056'
Mon Mar 26 22:02:06 2012 Attempting to establish TCP connection with XX.XX.XX.XX:1194
Mon Mar 26 22:02:06 2012 MANAGEMENT: >STATE:1332784926,TCP_CONNECT,,,
Mon Mar 26 22:02:06 2012 TCP: connect to XX.XX.XX.XX:1194 failed, will try again in 5 seconds: No Route to Host (WSAEHOSTUNREACH)
Спасибо сказали:
Вернуться к началу
gesigor
Сообщения: 410
ОС: Fedora 30

Re: РЕШЕНО: OpenVPN server linux

Сообщение gesigor »

А ключи нельзя положить в виде отдельных файлов? Потому как вроде и ругается на ключи...
OC Centos, FC21
https://gesigor.ru
Спасибо сказали:
Вернуться к началу
leksstav
Сообщения: 331

Re: РЕШЕНО: OpenVPN server linux

Сообщение leksstav »

gesigor писал(а): ↑
27.03.2012 11:23
А ключи нельзя положить в виде отдельных файлов? Потому как вроде и ругается на ключи...


Тот же эффект
######################################################
remote XX.XX.XX.XX
dev tap
port 1194
tun-mtu 1500
client
proto tcp
nobind
comp-lzo
verb 3
resolv-retry infinite
persist-key
persist-tun
ca "\\Program Files\\OpenVPN\\config\\ca.crt"
cert "\\Program Files\\OpenVPN\\config\\admin.crt"
key "\\Program Files\\OpenVPN\\config\\admin.key"
#################################################################
Tue Mar 27 15:16:14 2012 OpenVPN 2.1_rc1a Win32-MSVC++ [SSL] [LZO2] built on Dec 4 2006
Tue Mar 27 15:16:14 2012 MANAGEMENT: TCP Socket listening on 127.0.0.1:10000
Tue Mar 27 15:16:14 2012 Need hold release from management interface, waiting...
Tue Mar 27 15:16:15 2012 MANAGEMENT: Client connected from 127.0.0.1:10000
Tue Mar 27 15:16:15 2012 Using Windows Connection Manager with destination '{0DAEA92E-2917-4C6C-9E23-F2BCAA13DA07}' resolving to provider guid {0DAEA92E-2917-4C6C-9E23-F2BCAA13DA07} (exclusive)
Tue Mar 27 15:16:22 2012 Acquisition of Windows Connection Manager provider succeeded...
Tue Mar 27 15:16:22 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Mar 27 15:16:22 2012 LZO compression initialized
Tue Mar 27 15:16:22 2012 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Mar 27 15:16:22 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Mar 27 15:16:22 2012 Local Options hash (VER=V4): '31fdf004'
Tue Mar 27 15:16:22 2012 Expected Remote Options hash (VER=V4): '3e6d1056'
Tue Mar 27 15:16:22 2012 Attempting to establish TCP connection with XX.XX.XX.XX:1194
Tue Mar 27 15:16:22 2012 MANAGEMENT: >STATE:1332846982,TCP_CONNECT,,,
Tue Mar 27 15:16:22 2012 TCP connection established with XX.XX.XX.XX:1194
Tue Mar 27 15:16:22 2012 Socket Buffers: R=[32768->32768] S=[16384->16384]
Tue Mar 27 15:16:22 2012 TCPv4_CLIENT link local (bound): [undef]
Tue Mar 27 15:16:22 2012 TCPv4_CLIENT link remote: XX.XX.XX.XX:1194
Tue Mar 27 15:16:22 2012 MANAGEMENT: >STATE:1332846982,WAIT,,,
Tue Mar 27 15:16:23 2012 MANAGEMENT: >STATE:1332846983,AUTH,,,
Tue Mar 27 15:16:23 2012 TLS: Initial packet from XX.XX.XX.XX:1194, sid=7ac52be3 363f735d
Tue Mar 27 15:16:36 2012 VERIFY OK: depth=1, /C=RU/ST=NA/L=Stavropol/O=trust/CN=stranicy/emailAddress=root@localhost
Tue Mar 27 15:16:36 2012 VERIFY OK: depth=0, /C=RU/ST=NA/O=trust/CN=trust/emailAddress=root@localhost
Tue Mar 27 15:16:48 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Mar 27 15:16:48 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar 27 15:16:48 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Mar 27 15:16:48 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar 27 15:16:48 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Mar 27 15:16:48 2012 [trust] Peer Connection Initiated with XX.XX.XX.XX:1194
Tue Mar 27 15:16:49 2012 MANAGEMENT: >STATE:1332847009,GET_CONFIG,,,
Tue Mar 27 15:16:49 2012 SENT CONTROL [trust]: 'PUSH_REQUEST' (status=1)
Tue Mar 27 15:16:50 2012 PUSH: Received control message: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,dhcp-option DNS 192.168.99.1,dhcp-option WINS 192.168.99.1,route-gateway 192.168.99.1,ping 10,ping-restart 120,ifconfig 192.168.99.5 255.255.255.0'
Tue Mar 27 15:16:50 2012 OPTIONS IMPORT: timers and/or timeouts modified
Tue Mar 27 15:16:50 2012 OPTIONS IMPORT: --ifconfig/up options modified
Tue Mar 27 15:16:50 2012 OPTIONS IMPORT: route options modified
Tue Mar 27 15:16:50 2012 OPTIONS IMPORT: route-related options modified
Tue Mar 27 15:16:50 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Mar 27 15:16:50 2012 MANAGEMENT: >STATE:1332847010,ASSIGN_IP,,192.168.99.5,
Tue Mar 27 15:16:50 2012 TAP-WIN32 device [TAP1:] opened: TAP1:
Tue Mar 27 15:16:50 2012 TAP-Win32 Driver Version 8.4
Tue Mar 27 15:16:50 2012 TAP-Win32 MTU=1500
Tue Mar 27 15:16:50 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.99.5/255.255.255.0 on interface TAP1: [DHCP-serv: 192.168.99.0, lease-time: 31536000]
Tue Mar 27 15:16:50 2012 Successful ARP Flush on interface [3] TAP DEVICE 1
Tue Mar 27 15:16:50 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:50 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:51 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:51 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:53 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:53 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:54 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:54 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:55 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:55 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:56 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:56 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:57 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:57 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:58 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:58 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:16:59 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Tue Mar 27 15:16:59 2012 Route: Waiting for TUN/TAP interface to come up...
Tue Mar 27 15:17:00 2012 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Tue Mar 27 15:17:00 2012 MANAGEMENT: >STATE:1332847020,ADD_ROUTES,,,
Tue Mar 27 15:17:00 2012 route ADD 192.168.100.0 MASK 255.255.255.0 192.168.99.1
Tue Mar 27 15:17:00 2012 Route addition via IPAPI succeeded [adaptive]
Tue Mar 27 15:17:00 2012 Initialization Sequence Completed
Tue Mar 27 15:17:00 2012 MANAGEMENT: >STATE:1332847020,CONNECTED,SUCCESS,192.168.99.5,XX.XX.XX.XX
Спасибо сказали:
Вернуться к началу
gesigor
Сообщения: 410
ОС: Fedora 30

Re: РЕШЕНО: OpenVPN server linux

Сообщение gesigor »

http://forums.openvpn.net/topic7969.html
посмотреть логи на сервере, может действительно банально связи нет? То есть проверить файервол.
Смущает еще эта строка...

Код: Выделить всё

TCP: connect to XX.XX.XX.XX:1194 failed, will try again in 5 seconds: No Route to Host
OC Centos, FC21
https://gesigor.ru
Спасибо сказали:
Вернуться к началу
leksstav
Сообщения: 331

Re: РЕШЕНО: OpenVPN server linux

Сообщение leksstav »

gesigor писал(а): ↑
27.03.2012 15:48
http://forums.openvpn.net/topic7969.html
посмотреть логи на сервере, может действительно банально связи нет? То есть проверить файервол.
Смущает еще эта строка...

Код: Выделить всё

TCP: connect to XX.XX.XX.XX:1194 failed, will try again in 5 seconds: No Route to Host



Межсетевыой экран пропускает тут проблем нет.
Логи сервера


Tue Mar 27 16:54:41 2012 MULTI: multi_create_instance called
Tue Mar 27 16:54:41 2012 Re-using SSL/TLS context
Tue Mar 27 16:54:41 2012 LZO compression initialized
Tue Mar 27 16:54:41 2012 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Mar 27 16:54:41 2012 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Mar 27 16:54:41 2012 Local Options hash (VER=V4): '3e6d1056'
Tue Mar 27 16:54:41 2012 Expected Remote Options hash (VER=V4): '31fdf004'
Tue Mar 27 16:54:41 2012 TCP connection established with 85.26.183.37:37397
Tue Mar 27 16:54:41 2012 TCPv4_SERVER link local: [undef]
Tue Mar 27 16:54:41 2012 TCPv4_SERVER link remote: 85.26.183.37:37397
Tue Mar 27 16:54:41 2012 85.26.183.37:37397 TLS: Initial packet from 85.26.183.37:37397, sid=36e4ee88 421a34b4
Tue Mar 27 16:55:03 2012 85.26.183.37:37397 VERIFY OK: depth=1, /C=RU/ST=NA/L=Stavropol/O=trust/CN=stranicy/emailAddress=root@localhost
Tue Mar 27 16:55:03 2012 85.26.183.37:37397 VERIFY OK: depth=0, /C=RU/ST=NA/O=trust/CN=admin/emailAddress=root@localhost
Tue Mar 27 16:55:06 2012 85.26.183.37:37397 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Mar 27 16:55:06 2012 85.26.183.37:37397 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar 27 16:55:06 2012 85.26.183.37:37397 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Mar 27 16:55:06 2012 85.26.183.37:37397 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Mar 27 16:55:07 2012 85.26.183.37:37397 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Mar 27 16:55:07 2012 85.26.183.37:37397 [admin] Peer Connection Initiated with 85.26.183.37:37397
Tue Mar 27 16:55:09 2012 admin/85.26.183.37:37397 PUSH: Received control message: 'PUSH_REQUEST'
Tue Mar 27 16:55:09 2012 admin/85.26.183.37:37397 SENT CONTROL [admin]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,dhcp-option DNS 192.168.99.1,dhcp-option WINS 192.168.99.1,route-gateway 192.168.99.1,ping 10,ping-restart 120,ifconfig 192.168.99.5 255.255.255.0' (status=1)
Tue Mar 27 16:55:11 2012 admin/85.26.183.37:37397 MULTI: Learn: 00:ff:27:85:99:e3 -> admin/85.26.183.37:37397
Спасибо сказали:
Вернуться к началу
Аватара пользователя
serzh-z
Бывший модератор
Сообщения: 8259
Статус: Маньяк
ОС: Arch, Fedora, Ubuntu

Re: РЕШЕНО: OpenVPN server linux

Сообщение serzh-z »

leksstav
leksstav писал(а): ↑
27.03.2012 16:13
Межсетевыой экран пропускает тут проблем нет.
Как раз тут проблемы, похоже, и есть. Что говорит "ping XX.XX.XX.XX"?
Спасибо сказали:
Вернуться к началу
leksstav
Сообщения: 331

Re: РЕШЕНО: OpenVPN server linux

Сообщение leksstav »

serzh-z писал(а): ↑
27.03.2012 18:17
leksstav
leksstav писал(а): ↑
27.03.2012 16:13
Межсетевыой экран пропускает тут проблем нет.
Как раз тут проблемы, похоже, и есть. Что говорит "ping XX.XX.XX.XX"?



Всем спасибо :drinks:
Совсем забыл что именно для этого ip адреса из подсети VPN точнее для 192.168.99.5 я внутрь локальной сети не открыл доступ.
В общем подправил iptables и все работает.
Спасибо сказали:
Вернуться к началу

Вернуться в «Администрирование»