Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Dmurr · Сообщение **Dmurr** » 10.07.2013 14:10

Подтягиваю филиал:
Клиент Mikrotik (192.168.3.0/24)получает статический ip(93.x.x.x) - канал 7мб/с, пролезает в openvpn туннель к 192.168.0.0/24 и клиенты филиала могут работать с ресурсами нашей сетки (25 мб/с).
При подключении к win2k3 R2 SP2 Терминальному серверу с 1с появился ступор.
Клиент не каждый раз отрисовывает картинку, например: Открыли папку, закрыли папку, но пол окна папки висит перед пользователем. Подскажите куда копать?
Гугл и яндекс ответов не дали, mtu и mss менял толку нет.
Ping стабильный 30-50 мс, как внутри туннеля, так и снаружи.
В планах подтянуть еще филиал(192.168.4.0/24)

Openvpn сервер:

Код:

mode server
tls-server
daemon

ifconfig 192.168.254.1 255.255.255.0

port 1194
proto tcp-server
dev tap
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/office-0.crt
key /etc/openvpn/keys/office-0.key
dh /etc/openvpn/keys/dh1024.pem
client-config-dir /etc/openvpn/ccd
push "route 192.168.254.0 255.255.255.0 192.168.254.1"
user nobody
group nogroup
#keepalive 10 120
client-to-client
persist-key
persist-tun
verb 4

tun-mtu 1500
tun-mtu-extra 32
mssfix 1200
keepalive 15 120
#fragment 1200

log-append /var/log/openvpn.log
status /var/log/openvpn/openvpn-status.log

Лог коннекта к vpn:

Код:

Wed Jul 10 01:36:12 2013 us=740354 TCP/UDP: Closing socket
Wed Jul 10 01:36:12 2013 us=740410 Closing TUN/TAP interface
Wed Jul 10 01:36:12 2013 us=740435 /sbin/ifconfig tap0 0.0.0.0
Wed Jul 10 01:36:12 2013 us=741686 Linux ip addr del failed: external program exited with error status: 255
Wed Jul 10 01:36:12 2013 us=756433 SIGTERM[hard,] received, process exiting
Wed Jul 10 01:36:13 2013 us=763120 Current Parameter Settings:
Wed Jul 10 01:36:13 2013 us=763248   config = '/etc/openvpn/server.conf'
Wed Jul 10 01:36:13 2013 us=763278   mode = 1
Wed Jul 10 01:36:13 2013 us=763304   persist_config = DISABLED
Wed Jul 10 01:36:13 2013 us=763329   persist_mode = 1
Wed Jul 10 01:36:13 2013 us=763353   show_ciphers = DISABLED
Wed Jul 10 01:36:13 2013 us=763377   show_digests = DISABLED
Wed Jul 10 01:36:13 2013 us=763400   show_engines = DISABLED
Wed Jul 10 01:36:13 2013 us=763425   genkey = DISABLED
Wed Jul 10 01:36:13 2013 us=763449   key_pass_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=763473   show_tls_ciphers = DISABLED
Wed Jul 10 01:36:13 2013 us=763497 Connection profiles [default]:
Wed Jul 10 01:36:13 2013 us=763521   proto = tcp-server
Wed Jul 10 01:36:13 2013 us=763545   local = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=763569   local_port = 1194
Wed Jul 10 01:36:13 2013 us=763592   remote = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=763616   remote_port = 1194
Wed Jul 10 01:36:13 2013 us=763640   remote_float = DISABLED
Wed Jul 10 01:36:13 2013 us=763663   bind_defined = DISABLED
Wed Jul 10 01:36:13 2013 us=763687   bind_local = ENABLED
Wed Jul 10 01:36:13 2013 us=763711   connect_retry_seconds = 5
Wed Jul 10 01:36:13 2013 us=763735   connect_timeout = 10
Wed Jul 10 01:36:13 2013 us=763758   connect_retry_max = 0
Wed Jul 10 01:36:13 2013 us=763804   socks_proxy_server = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=763828   socks_proxy_port = 0
Wed Jul 10 01:36:13 2013 us=763850   socks_proxy_retry = DISABLED
Wed Jul 10 01:36:13 2013 us=763876 Connection profiles END
Wed Jul 10 01:36:13 2013 us=763898   remote_random = DISABLED
Wed Jul 10 01:36:13 2013 us=763921   ipchange = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=763943   dev = 'tap'
Wed Jul 10 01:36:13 2013 us=763965   dev_type = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=763988   dev_node = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=764010   lladdr = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=764032   topology = 1
Wed Jul 10 01:36:13 2013 us=764055   tun_ipv6 = DISABLED
Wed Jul 10 01:36:13 2013 us=764077   ifconfig_local = '192.168.254.1'
Wed Jul 10 01:36:13 2013 us=764100   ifconfig_remote_netmask = '255.255.255.0'
Wed Jul 10 01:36:13 2013 us=764122   ifconfig_noexec = DISABLED
Wed Jul 10 01:36:13 2013 us=764144   ifconfig_nowarn = DISABLED
Wed Jul 10 01:36:13 2013 us=764166   shaper = 0
Wed Jul 10 01:36:13 2013 us=764188   tun_mtu = 1500
Wed Jul 10 01:36:13 2013 us=764210   tun_mtu_defined = ENABLED
Wed Jul 10 01:36:13 2013 us=764233   link_mtu = 1500
Wed Jul 10 01:36:13 2013 us=764276   link_mtu_defined = DISABLED
Wed Jul 10 01:36:13 2013 us=764302   tun_mtu_extra = 32
Wed Jul 10 01:36:13 2013 us=764324   tun_mtu_extra_defined = ENABLED
Wed Jul 10 01:36:13 2013 us=764346   fragment = 0
Wed Jul 10 01:36:13 2013 us=764368   mtu_discover_type = -1
Wed Jul 10 01:36:13 2013 us=764390   mtu_test = 0
Wed Jul 10 01:36:13 2013 us=764411   mlock = DISABLED
Wed Jul 10 01:36:13 2013 us=764434   keepalive_ping = 15
Wed Jul 10 01:36:13 2013 us=764456   keepalive_timeout = 120
Wed Jul 10 01:36:13 2013 us=764478   inactivity_timeout = 0
Wed Jul 10 01:36:13 2013 us=764500   ping_send_timeout = 15
Wed Jul 10 01:36:13 2013 us=764521   ping_rec_timeout = 240
Wed Jul 10 01:36:13 2013 us=764543   ping_rec_timeout_action = 2
Wed Jul 10 01:36:13 2013 us=764565   ping_timer_remote = DISABLED
Wed Jul 10 01:36:13 2013 us=764587   remap_sigusr1 = 0
Wed Jul 10 01:36:13 2013 us=764609   explicit_exit_notification = 0
Wed Jul 10 01:36:13 2013 us=764631   persist_tun = ENABLED
Wed Jul 10 01:36:13 2013 us=764653   persist_local_ip = DISABLED
Wed Jul 10 01:36:13 2013 us=764675   persist_remote_ip = DISABLED
Wed Jul 10 01:36:13 2013 us=764696   persist_key = ENABLED
Wed Jul 10 01:36:13 2013 us=764718   mssfix = 1200
Wed Jul 10 01:36:13 2013 us=764740   passtos = DISABLED
Wed Jul 10 01:36:13 2013 us=764767   resolve_retry_seconds = 1000000000
Wed Jul 10 01:36:13 2013 us=764789   username = 'nobody'
Wed Jul 10 01:36:13 2013 us=764812   groupname = 'nogroup'
Wed Jul 10 01:36:13 2013 us=764834   chroot_dir = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=764856   cd_dir = '/etc/openvpn'
Wed Jul 10 01:36:13 2013 us=764878   writepid = '/var/run/openvpn.server.pid'
Wed Jul 10 01:36:13 2013 us=764900   up_script = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=764922   down_script = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=764943   down_pre = DISABLED
Wed Jul 10 01:36:13 2013 us=764965   up_restart = DISABLED
Wed Jul 10 01:36:13 2013 us=764987   up_delay = DISABLED
Wed Jul 10 01:36:13 2013 us=765008   daemon = ENABLED
Wed Jul 10 01:36:13 2013 us=765031   inetd = 0
Wed Jul 10 01:36:13 2013 us=765053   log = ENABLED
Wed Jul 10 01:36:13 2013 us=765074   suppress_timestamps = DISABLED
Wed Jul 10 01:36:13 2013 us=765096   nice = 0
Wed Jul 10 01:36:13 2013 us=765118   verbosity = 4
Wed Jul 10 01:36:13 2013 us=765140   mute = 0
Wed Jul 10 01:36:13 2013 us=765162   gremlin = 0
Wed Jul 10 01:36:13 2013 us=765184   status_file = '/var/log/openvpn/openvpn-status.log'
Wed Jul 10 01:36:13 2013 us=765206   status_file_version = 1
Wed Jul 10 01:36:13 2013 us=765228   status_file_update_freq = 60
Wed Jul 10 01:36:13 2013 us=765250   occ = ENABLED
Wed Jul 10 01:36:13 2013 us=765272   rcvbuf = 65536
Wed Jul 10 01:36:13 2013 us=765294   sndbuf = 65536
Wed Jul 10 01:36:13 2013 us=765315   sockflags = 0
Wed Jul 10 01:36:13 2013 us=765337   fast_io = DISABLED
Wed Jul 10 01:36:13 2013 us=765359   lzo = 0
Wed Jul 10 01:36:13 2013 us=765393   route_script = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765416   route_default_gateway = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765438   route_default_metric = 0
Wed Jul 10 01:36:13 2013 us=765460   route_noexec = DISABLED
Wed Jul 10 01:36:13 2013 us=765482   route_delay = 0
Wed Jul 10 01:36:13 2013 us=765504   route_delay_window = 30
Wed Jul 10 01:36:13 2013 us=765526   route_delay_defined = DISABLED
Wed Jul 10 01:36:13 2013 us=765548   route_nopull = DISABLED
Wed Jul 10 01:36:13 2013 us=765570   route_gateway_via_dhcp = DISABLED
Wed Jul 10 01:36:13 2013 us=765593   max_routes = 100
Wed Jul 10 01:36:13 2013 us=765616   allow_pull_fqdn = DISABLED
Wed Jul 10 01:36:13 2013 us=765639   management_addr = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765661   management_port = 0
Wed Jul 10 01:36:13 2013 us=765683   management_user_pass = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765706   management_log_history_cache = 250
Wed Jul 10 01:36:13 2013 us=765728   management_echo_buffer_size = 100
Wed Jul 10 01:36:13 2013 us=765750   management_write_peer_info_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765773   management_client_user = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765795   management_client_group = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765818   management_flags = 0
Wed Jul 10 01:36:13 2013 us=765840   shared_secret_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=765863   key_direction = 0
Wed Jul 10 01:36:13 2013 us=765885   ciphername_defined = ENABLED
Wed Jul 10 01:36:13 2013 us=765907   ciphername = 'BF-CBC'
Wed Jul 10 01:36:13 2013 us=765929   authname_defined = ENABLED
Wed Jul 10 01:36:13 2013 us=765951   authname = 'SHA1'
Wed Jul 10 01:36:13 2013 us=765974   prng_hash = 'SHA1'
Wed Jul 10 01:36:13 2013 us=765996   prng_nonce_secret_len = 16
Wed Jul 10 01:36:13 2013 us=766019   keysize = 0
Wed Jul 10 01:36:13 2013 us=766041   engine = DISABLED
Wed Jul 10 01:36:13 2013 us=766063   replay = ENABLED
Wed Jul 10 01:36:13 2013 us=766086   mute_replay_warnings = DISABLED
Wed Jul 10 01:36:13 2013 us=766108   replay_window = 64
Wed Jul 10 01:36:13 2013 us=766131   replay_time = 15
Wed Jul 10 01:36:13 2013 us=766153   packet_id_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766175   use_iv = ENABLED
Wed Jul 10 01:36:13 2013 us=766198   test_crypto = DISABLED
Wed Jul 10 01:36:13 2013 us=766220   tls_server = ENABLED
Wed Jul 10 01:36:13 2013 us=766242   tls_client = DISABLED
Wed Jul 10 01:36:13 2013 us=766264   key_method = 2
Wed Jul 10 01:36:13 2013 us=766287   ca_file = '/etc/openvpn/keys/ca.crt'
Wed Jul 10 01:36:13 2013 us=766310   ca_path = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766332   dh_file = '/etc/openvpn/keys/dh1024.pem'
Wed Jul 10 01:36:13 2013 us=766355   cert_file = '/etc/openvpn/keys/office-0.crt'
Wed Jul 10 01:36:13 2013 us=766377   priv_key_file = '/etc/openvpn/keys/office-0.key'
Wed Jul 10 01:36:13 2013 us=766400   pkcs12_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766422   cipher_list = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766444   tls_verify = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766466   tls_remote = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766488   crl_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766510   ns_cert_type = 0
Wed Jul 10 01:36:13 2013 us=766533   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766555   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766577   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766599   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766621   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766643   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766665   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766687   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766708   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766730   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766752   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766774   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766796   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766818   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766840   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766873   remote_cert_ku[i] = 0
Wed Jul 10 01:36:13 2013 us=766896   remote_cert_eku = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=766919   tls_timeout = 2
Wed Jul 10 01:36:13 2013 us=766940   renegotiate_bytes = 0
Wed Jul 10 01:36:13 2013 us=766962   renegotiate_packets = 0
Wed Jul 10 01:36:13 2013 us=766985   renegotiate_seconds = 3600
Wed Jul 10 01:36:13 2013 us=767007   handshake_window = 60
Wed Jul 10 01:36:13 2013 us=767029   transition_window = 3600
Wed Jul 10 01:36:13 2013 us=767051   single_session = DISABLED
Wed Jul 10 01:36:13 2013 us=767073   push_peer_info = DISABLED
Wed Jul 10 01:36:13 2013 us=767094   tls_exit = DISABLED
Wed Jul 10 01:36:13 2013 us=767116   tls_auth_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=767139   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767161   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767183   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767205   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767227   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767248   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767270   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767292   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767314   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767336   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767358   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767380   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767401   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767423   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767445   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767467   pkcs11_protected_authentication = DISABLED
Wed Jul 10 01:36:13 2013 us=767490   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767513   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767535   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767557   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767579   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767602   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767624   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767646   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767668   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767690   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767712   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767734   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767756   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767778   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767800   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767822   pkcs11_private_mode = 00000000
Wed Jul 10 01:36:13 2013 us=767844   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=767866   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=767889   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=767911   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=767932   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=767954   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=767976   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=767998   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768019   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768041   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768063   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768085   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768106   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768128   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768150   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768182   pkcs11_cert_private = DISABLED
Wed Jul 10 01:36:13 2013 us=768205   pkcs11_pin_cache_period = -1
Wed Jul 10 01:36:13 2013 us=768228   pkcs11_id = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=768307   pkcs11_id_management = DISABLED
Wed Jul 10 01:36:13 2013 us=768353   server_network = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768380   server_netmask = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768405   server_bridge_ip = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768430   server_bridge_netmask = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768456   server_bridge_pool_start = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768481   server_bridge_pool_end = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768504   push_entry = 'route 192.168.254.0 255.255.255.0 192.168.254.1'
Wed Jul 10 01:36:13 2013 us=768526   push_entry = 'ping 15'
Wed Jul 10 01:36:13 2013 us=768549   push_entry = 'ping-restart 120'
Wed Jul 10 01:36:13 2013 us=768571   ifconfig_pool_defined = DISABLED
Wed Jul 10 01:36:13 2013 us=768596   ifconfig_pool_start = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768621   ifconfig_pool_end = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768645   ifconfig_pool_netmask = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768668   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=768691   ifconfig_pool_persist_refresh_freq = 600
Wed Jul 10 01:36:13 2013 us=768713   n_bcast_buf = 256
Wed Jul 10 01:36:13 2013 us=768736   tcp_queue_limit = 64
Wed Jul 10 01:36:13 2013 us=768758   real_hash_size = 256
Wed Jul 10 01:36:13 2013 us=768780   virtual_hash_size = 256
Wed Jul 10 01:36:13 2013 us=768802   client_connect_script = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=768825   learn_address_script = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=768847   client_disconnect_script = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=768870   client_config_dir = '/etc/openvpn/ccd'
Wed Jul 10 01:36:13 2013 us=768892   ccd_exclusive = DISABLED
Wed Jul 10 01:36:13 2013 us=768914   tmp_dir = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=768937   push_ifconfig_defined = DISABLED
Wed Jul 10 01:36:13 2013 us=768961   push_ifconfig_local = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=768986   push_ifconfig_remote_netmask = 0.0.0.0
Wed Jul 10 01:36:13 2013 us=769008   enable_c2c = ENABLED
Wed Jul 10 01:36:13 2013 us=769031   duplicate_cn = DISABLED
Wed Jul 10 01:36:13 2013 us=769053   cf_max = 0
Wed Jul 10 01:36:13 2013 us=769075   cf_per = 0
Wed Jul 10 01:36:13 2013 us=769097   max_clients = 1024
Wed Jul 10 01:36:13 2013 us=769120   max_routes_per_client = 256
Wed Jul 10 01:36:13 2013 us=769142   auth_user_pass_verify_script = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=769165   auth_user_pass_verify_script_via_file = DISABLED
Wed Jul 10 01:36:13 2013 us=769188   ssl_flags = 0
Wed Jul 10 01:36:13 2013 us=769210   port_share_host = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=769232   port_share_port = 0
Wed Jul 10 01:36:13 2013 us=769254   client = DISABLED
Wed Jul 10 01:36:13 2013 us=769276   pull = DISABLED
Wed Jul 10 01:36:13 2013 us=769298   auth_user_pass_file = '[UNDEF]'
Wed Jul 10 01:36:13 2013 us=769326 OpenVPN 2.1.3 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Feb 20 2012
Wed Jul 10 01:36:13 2013 us=769626 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 10 01:36:13 2013 us=769674 Note: cannot open /var/log/openvpn/openvpn-status.log for WRITE
Wed Jul 10 01:36:13 2013 us=780972 Diffie-Hellman initialized with 1024 bit key
Wed Jul 10 01:36:13 2013 us=781687 /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
Wed Jul 10 01:36:13 2013 us=882432 TLS-Auth MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jul 10 01:36:13 2013 us=882537 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed Jul 10 01:36:13 2013 us=883416 TUN/TAP device tap0 opened
Wed Jul 10 01:36:13 2013 us=883487 TUN/TAP TX queue length set to 100
Wed Jul 10 01:36:13 2013 us=883540 /sbin/ifconfig tap0 192.168.254.1 netmask 255.255.255.0 mtu 1500 broadcast 192.168.254.255
Wed Jul 10 01:36:13 2013 us=884983 Data Channel MTU parms [ L:1575 D:1200 EF:43 EB:4 ET:32 EL:0 ]
Wed Jul 10 01:36:13 2013 us=887235 GID set to nogroup
Wed Jul 10 01:36:13 2013 us=887312 UID set to nobody
Wed Jul 10 01:36:13 2013 us=887345 Listening for incoming TCP connection on [undef]
Wed Jul 10 01:36:13 2013 us=887384 TCPv4_SERVER link local (bound): [undef]
Wed Jul 10 01:36:13 2013 us=887400 TCPv4_SERVER link remote: [undef]
Wed Jul 10 01:36:13 2013 us=887424 MULTI: multi_init called, r=256 v=256
Wed Jul 10 01:36:13 2013 us=887534 MULTI: TCP INIT maxclients=1024 maxevents=1028
Wed Jul 10 01:36:13 2013 us=887576 Initialization Sequence Completed
Wed Jul 10 01:36:15 2013 us=203217 MULTI: multi_create_instance called
Wed Jul 10 01:36:15 2013 us=203324 Re-using SSL/TLS context
Wed Jul 10 01:36:15 2013 us=203668 Control Channel MTU parms [ L:1575 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jul 10 01:36:15 2013 us=203721 Data Channel MTU parms [ L:1575 D:1200 EF:43 EB:4 ET:32 EL:0 ]
Wed Jul 10 01:36:15 2013 us=203815 Local Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_SERVER,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 10 01:36:15 2013 us=203843 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1575,tun-mtu 1532,proto TCPv4_CLIENT,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 10 01:36:15 2013 us=203905 Local Options hash (VER=V4): 'a917298a'
Wed Jul 10 01:36:15 2013 us=203941 Expected Remote Options hash (VER=V4): '10f35004'
Wed Jul 10 01:36:15 2013 us=203996 TCP connection established with [AF_INET]46.160.211.148:33868
Wed Jul 10 01:36:15 2013 us=204024 TCPv4_SERVER link local: [undef]
Wed Jul 10 01:36:15 2013 us=204051 TCPv4_SERVER link remote: [AF_INET]46.160.211.148:33868
Wed Jul 10 01:36:15 2013 us=206545 46.160.211.148:33868 TLS: Initial packet from [AF_INET]46.160.211.148:33868, sid=bd4d9476 6ae39ece
Wed Jul 10 01:36:15 2013 us=482437 46.160.211.148:33868 VERIFY OK: depth=1, /C=RU/ST=MOSCOW/L=MOSCOW/O=UTSTRUCK/CN=srv-vpn/name=srv-vpn/emailAddress=DMURRDJ@GMAIL.COM
Wed Jul 10 01:36:15 2013 us=482887 46.160.211.148:33868 VERIFY OK: depth=0, /C=RU/ST=MOSCOW/L=MOSCOW/O=UTSTRUCK/CN=office-1/name=office-1/emailAddress=DMURRDJ@GMAIL.COM
Wed Jul 10 01:36:15 2013 us=574500 46.160.211.148:33868 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1575', remote='link-mtu 1559'
Wed Jul 10 01:36:15 2013 us=574580 46.160.211.148:33868 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher [null-cipher]'
Wed Jul 10 01:36:15 2013 us=574625 46.160.211.148:33868 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 0'
Wed Jul 10 01:36:15 2013 us=575050 46.160.211.148:33868 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 10 01:36:15 2013 us=575084 46.160.211.148:33868 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 10 01:36:15 2013 us=575200 46.160.211.148:33868 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 10 01:36:15 2013 us=575228 46.160.211.148:33868 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 10 01:36:15 2013 us=622223 46.160.211.148:33868 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jul 10 01:36:15 2013 us=622294 46.160.211.148:33868 [office-1] Peer Connection Initiated with [AF_INET]46.160.211.148:33868
Wed Jul 10 01:36:15 2013 us=622373 office-1/46.160.211.148:33868 OPTIONS IMPORT: reading client specific options from: /etc/openvpn/ccd/office-1
Wed Jul 10 01:36:15 2013 us=622652 office-1/46.160.211.148:33868 PUSH: Received control message: 'PUSH_REQUEST'
Wed Jul 10 01:36:15 2013 us=622726 office-1/46.160.211.148:33868 SENT CONTROL [office-1]: 'PUSH_REPLY,route 192.168.254.0 255.255.255.0 192.168.254.1,ping 15,ping-restart 120,route 192.168.0.0 255.255.255.0 192.168.254.1,route 192.168.1.0 255.255.255.0 192.168.254.1,route 192.168.4.0 255.255.255.0 192.168.10.102,ifconfig 192.168.254.101 255.255.255.0' (status=1)
Wed Jul 10 01:36:46 2013 us=659100 office-1/46.160.211.148:33868 MULTI: Learn: 02:41:a8:a1:6c:a8 -> office-1/46.160.211.148:33868

DaemonTux · Сообщение **DaemonTux** » 10.07.2013 19:07

В качестве клиента rdp что?
iperf запустите через тунель может скорость не 7мб а значительно меньше?
и размер mtu нужно уменьшить. У вас как инет соединение поднимается (статика,ppoe,pptp,l2tp,etc)?

Dmurr · Сообщение **Dmurr** » 10.07.2013 21:30

На стороне сервера приходит по оптике в dlink и с от него ко мне приходит чистый ip
На стороне клиента тестил стоит радио infiband за ним провайдерский! zyxel с настроенным VLANом, а за ним уже наш mikrotik, которому отдается тоже чистый ip.
P.s. тестил дома глюки аналогичные. Дома канал грязные 25мб\с и получаю серый ip с привязкой по маку. Сегодня протестирую из дома и выложу iperf.

Dmurr · Сообщение **Dmurr** » 11.07.2013 03:37

iperf на стороне mikrotika поставить не удалось...
rdp клиент - remmina
если mtu и mss уменьшать, то на сколько?

Визуальная фотка

DaemonTux · Сообщение **DaemonTux** » 11.07.2013 08:39

Скорее всего это проблема remmina.

У мне на хосте с debian Wheezy 64 ремина ведет себя похоже. Причем в 32 битной сборке глюков не было замечено.

Dmurr · Сообщение **Dmurr** » 11.07.2013 09:43

Если подключаться к серверу из сети 192.168.0.0/24 то глюков нет. Проверю сеодня с клиента mstsc

Dmurr · Сообщение **Dmurr** » 12.07.2013 13:06

Действительно при подключении с Remmina такие глюки, если цепляться через виндовый клиент все нормально.! Спасибо, Осталось продавить роуты и настроить iptables для хождения из 0,0/24 в 3.0/24.

unixforum.org

Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Re: Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Re: Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Re: Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Re: Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Re: Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки

Re: Mikrotik client -> Openvpn -> rdp win2k3 R2 SP2 статические картинки