POPTOP install (óñòàíîâêà â îñíîâíóþ ïàìÿòü)

**OlegaVB** · 01-10-2009, 15:59

Originally Posted by joohny

Wolfgun, íå çàáûâàéòå ïðî êëèåíòñêèå ïîäêëþ÷åíèÿ, òàì(íà êëèåíòñêîé ñòîðîíå) òîæå íóæíî ïðîïèñûâàòü ìàðøðóòû!

Íó îíè ïðè ïîäêëþ÷åíèè êëèåíòà áåðóòñÿ èç ôàéëà êîíôèãóðàöèè.

**joohny** · 01-10-2009, 16:09

Originally Posted by OlegaVB

Íó îíè ïðè ïîäêëþ÷åíèè êëèåíòà áåðóòñÿ èç ôàéëà êîíôèãóðàöèè.

÷òî-òî ìíå íà ìîè âîïðîñû íà ýòîé ñòðàíèöå ïî ïîâîäó ìàðøðóòîâ íå îñîáî îòâåòèëè, êàê èõ äàâàòü íà êëèåíòñêóþ ñòîðîíó!
OlegaVB, à êóäà è â êàêîì ôîðìàòå âû èõ ïðîïèñûâàåòå?

**Wolfgun** · 01-10-2009, 21:40

Originally Posted by joohny

Wolfgun, íå çàáûâàéòå ïðî êëèåíòñêèå ïîäêëþ÷åíèÿ, òàì(íà êëèåíòñêîé ñòîðîíå) òîæå íóæíî ïðîïèñûâàòü ìàðøðóòû!

Ó Âàñ VPN ñåðâåð ÿâëÿåòñÿ øëþçîì çà÷åì ÷òî ïðîïèñûâàòü ó êëèåíòà ???
ß íå ïðîáîâàë îòïðàâëÿòü ìàðøåðóòû êëèåíòó íî ýòî äåàëàåòñÿ ñ peer-up ñêðèïòû ïîèèùèòå â èíåòå

Åñëè âîùå õîòèòå ÷òîá áûëî â øîêîëàäå ñòàâüòå ðàäèóñ

**OlegaVB** · 02-10-2009, 04:06

Originally Posted by joohny

÷òî-òî ìíå íà ìîè âîïðîñû íà ýòîé ñòðàíèöå ïî ïîâîäó ìàðøðóòîâ íå îñîáî îòâåòèëè, êàê èõ äàâàòü íà êëèåíòñêóþ ñòîðîíó!
OlegaVB, à êóäà è â êàêîì ôîðìàòå âû èõ ïðîïèñûâàåòå?

Âîò ÷àñòü êîíôèãà OpenVPN ñåðâåðà

#çàäàåì IP-àäðåñ ñåðâåðà è ìàñêó ïîäñåòè
# (âèðòóàëüíîé ñåòè)
server 10.8.0.0 255.255.255.0
#çàäàåì ÌÀÐØÐÓÒ êîòîðûé ïåðåäà¸ì êëèåíòòó
# è ìàñêó ïîäñåòè äëÿ òîãî ÷òîáû îí "âèäåë"
# ñåòü çà îïåíâïí ñåðâåðîì (ñåòè 192.168.1.0/24 è 192.168.2.0/24)
push "route 192.168.1.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"
#ýòîé ñòðîêîé îïèñûâàåì ìàðøðóòû ê ñåòÿì ê êîòîðûì õîäèòü ÷åðåç òóíåëü
route 192.168.1.0 255.255.255.0
route 192.168.2.0 255.255.255.0

Â äàííîì ñëó÷àå àäðåñ ñåðâåðà 10.8.0.1
Ñåòè çà ñåðâåðîì, êóäà áóäóò õîäèòü êëèåíòû 192.168.1.0/255.255.255.0 è 192.168.2.0/255.255.255.0
Ïðè ïîäêëþ÷åíèè êëèåíò ïîëó÷àåò àäðåñ 10.8.0.6

Ïðè ïîäêëþ÷åíèè ó êëèåíòà âûïîëíÿåòñÿ

Oct 2 08:42:32 openvpn[1117]: /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.8.0.5
Oct 2 08:42:32 openvpn[1117]: /sbin/route add -net 192.168.2.0 netmask 255.255.255.0 gw 10.8.0.5
Oct 2 08:42:32 openvpn[1117]: /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5

Äëÿ âèíäû áóäóò âûïîëíÿòñÿ åå êîìàíäû, íî ñìûñë òîò æå.
Â ëþáîì ðóêîâîäñòâå ïî OpenVPN ýòî íàïèñàíî.

**joohny** · 02-10-2009, 05:17

Âîò ÷àñòü êîíôèãà OpenVPN ñåðâåðà

À òåìà ïðî POPTOP, áóäó ðàä, åñëè âû è äëÿ POPTOP ïîäðîáíî âñå íàïèøèòå!

Ó Âàñ VPN ñåðâåð ÿâëÿåòñÿ øëþçîì çà÷åì ÷òî ïðîïèñûâàòü ó êëèåíòà ???

øëþçîì îí ÿâëÿåòñÿ òîëüêî äëÿ ìàøèí ñâîåé ëîêàëüíîé ñåòè, äëÿ óäàëåííûõ ìû æå ñíèìàåì ãàëî÷êó ïðî îñíîâíîé øëþç â íàñòðîéêàõ, ïîýòîìó

... âîïðîñ òàêîé âîçìîæíî èñïîëüçîâàòü â í¸ì ïîäñåòü îòëè÷íóþ îò ñåòè ñàìîãî ðîóòåðà ?
...
êàêèå èçìåíåíèÿ è äîïîëíåíèÿ ïðèä¸òñÿ ñäåëàòü ?

åñëè ïîäñåòè áóäóò ðàçíûìè, òî óäàëåííàÿ ìàøèíà(åñëè áóäóò îòñóòñòâîâàòü ìàðøðóòû) äàæå íå áóäåò çíàòü ïðî ïîäñåòü ëîêàëüíîé ñåòè ðîóòåðà, îíè âñå çàïðîñû ê ýòèì ip àäðåñàì áóäóò îòïðàâëÿòü ÷åðåç ñâîé øëþç ïî-óìîë÷àíèþ!

ß íå ïðîáîâàë îòïðàâëÿòü ìàðøåðóòû êëèåíòó íî ýòî äåàëàåòñÿ ñ peer-up ñêðèïòû ïîèèùèòå â èíåòå

Ñïàñèáî çà íàâîäêó, ïîèñ÷ó, ïîòîìó êàê èíòåðåñíî óíèâåðñàëüíîå ðåøåíèå!))

**Wolfgun** · 02-10-2009, 07:00

Originally Posted by joohny

øëþçîì îí ÿâëÿåòñÿ òîëüêî äëÿ ìàøèí ñâîåé ëîêàëüíîé ñåòè, äëÿ óäàëåííûõ ìû æå ñíèìàåì ãàëî÷êó ïðî îñíîâíîé øëþç â íàñòðîéêàõ, ïîýòîìó

åñëè ïîäñåòè áóäóò ðàçíûìè, òî óäàëåííàÿ ìàøèíà(åñëè áóäóò îòñóòñòâîâàòü ìàðøðóòû) äàæå íå áóäåò çíàòü ïðî ïîäñåòü ëîêàëüíîé ñåòè ðîóòåðà, îíè âñå çàïðîñû ê ýòèì ip àäðåñàì áóäóò îòïðàâëÿòü ÷åðåç ñâîé øëþç ïî-óìîë÷àíèþ!

Ïîñòàâòå ãàëêó äëÿ îñíîâíîãî øëþçà è ïðîïèøèòå âòîðîé ïàðàìåòð ms-dns DNS-ñåðâåð Âàøåãî ïðîâàéäåðà

**Kugel** · 05-10-2009, 10:15

ëîêàëêà ðîóòåð 172.16.20.1\24
ïîïòîï 10.16.253.49 ,10.16.253.50 êëèåíòó
íå õîäèò ñ êëèåíòà äàëüøå 10.16.253.49
îáúÿñíèòå êàê èñïðàâèòü ?

è åù¸ , ïðîïèñûâàþþ ñòàòèê ÷åðåç âýáìîðäó , ñîõðàíÿåòñÿ, íî â êîíñîëè route íå âûäà¸ò ýòèõ ìàðøðóòîâ (ñ ýòèì ïîíÿë, ÷åðåç âýá íåðàáîòàåò, ñòðàííî ïî÷åìó ïðî ýòî íåò â ôàêå)

ïðîøèâêà wl500g-1.9.2.7-d

**Wolfgun** · 05-10-2009, 11:39

ëîêàëêà ðîóòåð 172.16.20.1\24
ïîïòîï 10.16.253.49 ,10.16.253.50 êëèåíòó
íå õîäèò ñ êëèåíòà äàëüøå 10.16.253.49
îáúÿñíèòå êàê èñïðàâèòü ?

1) Ïðàâèëüíî ñîçäàéòå ïðàâèëà iptables
2) Êàê ïèñàëîñü âûøå ïðîïèøèòå â ñêðèïòàõ ip-up ip-down ïîäíÿòèå ðîóòîâ íà VPN êëåíòà

ïðàâèëà firewall

Code:

iptables -I FORWARD -i ppp+ -s 10.16.253.49/28 -d 172.16.20.1/24 -j ACCETP
iptables -I INPUT -i ppp+ -s 10.16.253.49/28 -d 172.16.20.1/24 -j ACCETP

÷òî-òî â ýòîì ðîäå
ip-up

Code:

route add 10.16.253.50 mask 255.255.255.255 gw 10.16.253.49

**Kugel** · 05-10-2009, 13:43

Originally Posted by Wolfgun

1) Ïðàâèëüíî ñîçäàéòå ïðàâèëà iptables
2) Êàê ïèñàëîñü âûøå ïðîïèøèòå â ñêðèïòàõ ip-up ip-down ïîäíÿòèå ðîóòîâ íà VPN êëåíòà

ïðàâèëà firewall

Code:

iptables -I FORWARD -i ppp+ -s 10.16.253.49/28 -d 172.16.20.1/24 -j ACCETP
iptables -I INPUT -i ppp+ -s 10.16.253.49/28 -d 172.16.20.1/24 -j ACCETP

÷òî-òî â ýòîì ðîäå
ip-up

Code:

route add 10.16.253.50 mask 255.255.255.255 gw 10.16.253.49

ôàéðâîë ïîêà îòêëþ÷¸í, ìíå ïîêà âàæíî íàñòðîèòü ðîóòèíã, è ÿ íåçíàþ êàê íàïèñàòü ìàðøðóòû íà ðîóòåðå, ñ êëèåíòà äîõîäèò äî 10.16.253.49 (òàêæå âèäèò èíòåðôåéñ 172.16.20.1) íî äàëüøå çàòûê

**joohny** · 05-10-2009, 13:49

Ìîæåò ÷åì-òî ïîìîæåò.... Ïî÷èòàéòå ìîè ïîñòû íà÷èíàÿ ñ ýòîãî
ß èç-çà îòñóòñòâèÿ âðåìåíè ïîêà îòêàçàëñÿ îò çàòåè ñ ìàðøðóòàìè, ïðîñòî ñäåëàë òó ïîäñåòü, ÷òî è LAN

**atomsk** · 06-10-2009, 09:17

çàïóòàëñÿ ñ ìàðøðóòàìè..

êàê ñäåëàòü òàê, ÷òîáû íàðîäó äàâàòü äîñòóï â èíåò ÷åðåç ðîóòåð, òîëüêî ïîñëå ïîäíÿòèÿ âïí?

WAN - 192.168.2.226
WL 500gpv2 - 172.16.0.1
DHCP - 172.16.0.235-245
VPN server 172.16.0.2
VPN client 172.16.246-253

**Wolfgun** · 06-10-2009, 10:08

1) Ðàçäåëè ñåòè
2) Åñëè ñåòè íå ðàçäåëèòü òî â iptablec ñîçäàé ïðàâèëà áëîêèðîâêè ê WAN îò ëîêàëüíûìè ip êëèåíòîâ è ïðàâèëî íà äîñòóï ê Wan îò VPN-ip-êëèåíòîâ .

**atomsk** · 07-10-2009, 09:04

èäåþ ÿ ïîíÿë, à âîò ðåàëèçàöèþ )
êàê ðàç çàòðóäíåíèÿ â iptables

**Wolfgun** · 07-10-2009, 09:42

Originally Posted by atomsk

èäåþ ÿ ïîíÿë, à âîò ðåàëèçàöèþ )
êàê ðàç çàòðóäíåíèÿ â iptables

÷òî â òàêîì äóõå

Code:

iptables -I FORWARD -s 172.16.0.235 -o WAN -j DROP
iptables -I INTUP  -s 172.16.0.235 -o WAN -j DROP

iptables -I FORWARD -s 172.16.246 -o WAN -j ACCEPT
iptables -I INTUP  -s 172.16.0.235 -o WAN -j ACCETP

ïîïèñûâàåòå äëÿ êàæäîãî àäðåñà
ãäå WAN íàçâàíèå âíåøíåãî èíòåðôåéñà äëÿ PPPoE PPTP L2TP ýòî ppp0 äëÿ ethernet vlan1

èëè åùå ÷òî íèáóòü â òàêîì ïëàíå

iptables -I IOUTPUT -i WAN -d 172.16.0.235 -j DROP

ìîæíî ñäåëàòü äëÿ ïîäñåòè óêàçàâ ìàñêó íî çäåñü ñâîè íî â ipables âûñòàâëåí broadcast àäðåñ äëÿ òîé ñåòè è åñëè ñåòè ïåðåñåêóòñÿ áóäóò êîíôëèêòû
òàêæå ìîæíî äîáàâèòü åùå ôèëüòàöèþ ïî MAC ïîñìîòðè ïî ôîðóìó. ß íå äåëàë

**Capture** · 07-10-2009, 15:33

Òîâàðèùè , âûëîæèòå ïëèç ôàéë /usr/lib/pptpd/pptpd-logwtmp.so
à òî ó ìåíÿ îí îòñóñòâóåò , ïîïòîï ïåðåóñòàíàâëèâàë ...
Oct 7 18:07:55 pptpd[196]: CTRL: Starting call (launching pppd, opening GRE)
Oct 7 18:07:55 pppd[197]: File not found
Oct 7 18:07:55 pppd[197]: Couldn't load plugin /usr/lib/pptpd/pptpd-logwtmp.so
Oct 7 18:07:55 pptpd[196]: GRE: read(fd=7,buffer=4205cc,len=8196) from PTY fail
ed: status = -1 error = Input/output error, usually caused by unexpected termina
tion of pppd, check option syntax and pppd logs
Oct 7 18:07:55 pptpd[196]: CTRL: PTY read or GRE write failed (pty,gre)=(7,8)

Thread: POPTOP install (óñòàíîâêà â îñíîâíóþ ïàìÿòü)

Thread Tools

Rate This Thread

Display

iptables

Similar Threads

Óñòàíîâêà VLC íà ðîóòåð ?

Ïðîáëåìû ñ óñòàíîâêîé è íàñòðîéêîé VPN ñåðâåðà poptop

Óñòàíîâêà OpenVPN â îñíîâíóþ ïàìÿòü äëÿ ÍÎÂÈ×ÊÎÂ

lighttp and php tutorial

Tags for this Thread

Posting Permissions