Ïðîáëåìû ñ OpenVPN. Ïðîøó ïîìîùè!

**bvv** · 16-02-2010, 10:37

Äîáðûé äåíü.

ïîìîãèòå ðàçîáðàòüñÿ ñ ïðè÷èíîé: openvpn ïðè çàïóñêå íå èíèöèàëèçèðóåò èíòåðôåéñ tun0, â ñèñòåìíûé ëîã ïèøåòñÿ ñîîáùåíèå â ìîìåíò çàãðóçêè ìîäóëÿ tun.o èç ñòàðòîâîãî ñêðèïòà âèäà:

kernel: Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
kernel: devfs_register(net/tun): could not append to parent, err: -17

Ðîóòåð: Asus WL-500gP V2
Ïðîøèâêà: WL500gpv2-1.9.2.7-d-r1087.trx

mkdir /dev/net
mknod /dev/net/tun c 10 200
- äåëàë...

**OlegaVB** · 16-02-2010, 10:47

Ó ìåíÿ â post-boot çàãðóæàåòñÿ

Code:

if ( [ ! -c /dev/net/tun ] ) then
    # Make /dev/net directory if needed
    if ( [ ! -d /dev/net ] ) then
        mkdir -m 755 /dev/net
    fi
    mknod /dev/net/tun c 10 200
fi

# Make sure the tunnel driver is loaded
if ( !(lsmod | grep -q "^tun") ); then
    insmod tun.o
fi

Ïîñìîòðåë â ëîãè, òà æå îøèáêà, íî ðàáîòàåò

Code:

Jan  1 05:00:22 kernel: Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
Jan  1 05:00:22 kernel: devfs_register(net/tun): could not append to parent, err: -17

**hungry** · 26-03-2010, 22:08

ìíå òîæå èíòåðåñíî êàê åòî ñäåëàòü

**SkyDevil** · 26-03-2010, 22:43

ïîñìîòðèòå, âðîäå òî http://wl500g.info/showpost.php?p=51624&postcount=1

**yuraz** · 20-03-2011, 13:02

Äîáðûé äåíü ïîäñêàæèòå ïîæàëóéñòà

åñòü äâà ðàóòåðà â ðàçíûõ ãîðîäàõ
ó êàæäîãî ðàóòåðà ñâîé èíòåðíåò
íóæíî ñîåäèíèòü äâå ñåòêè â îäíó !

òîëüêî äëÿ òîãî ÷òî áû ìàøèíû äâóõ ñåòåé âèäåëè äðóã äðóãà

à òàêæå ÷òî áû ðàóòåð áåç áåëîãî IP ( èìååòñÿ ââèäó 10.10.96.59 )
ìîã ÷åðåç dyndns âèäåòüñÿ èç èíòåðíåòà

âèäèìî íóæíî íà îäíîì ðàóòåðå ïîäíÿòü OpenVPN ñåðâåð íà äðóãîì
êëèåíòà

åñòü ëè ïîøàãîâîå ðóêîâîäñòâî äëÿ ìîåãî ñëó÷àÿ

**FilimoniC** · 21-03-2011, 07:47

Ñìîòðåòü ñþäà http://www.sergeysl.ru/freebsd-openvpn-x509/

**yuraz** · 21-03-2011, 09:04

Originally Posted by FilimoniC

Ñìîòðåòü ñþäà http://www.sergeysl.ru/freebsd-openvpn-x509/

Ñïàñèáî!

ïðî÷èòàë - ñãåíåðèðîâàë êëþ÷è ïîñòàâèë OpenVPN
êàê server è client
ïîìîãèòå ïëèç åùå
âðîäå ñîôò âñòàë - ÍÎ ÍÅ ÇÀÐÀÁÎÒÀËÎ

íà îáà äåâàéñà ïîñòàâèë OpenVPN

1- Client - ( êîòîðûé ïîëó÷àåò ñåðûé IP 10.10.96.59 )

ïåðåâåë àäðåñ íà 192.168.2.1

2- òóò ïðîñòî ïîñòàâèë OpenVPN êàê ñåðâåð

---

ëîã ñ ðàóòåðà Server
\opt\var\log\syslog-ng.log

11:19:05 21-03-2011 (notice|user|rc.unslung) rc.unslung: start service /opt/etc/init.d/S20openvpn
11:19:05 21-03-2011 (debug|daemon|xinetd) xinetd[181]: Reading included configuration file: /opt/etc/xinetd.d/openvpn [file=/opt/etc/xinetd.conf] [line=15]
11:19:05 21-03-2011 (debug|daemon|xinetd) xinetd[181]: Reading included configuration file: /opt/etc/xinetd.d/swat [file=/opt/etc/xinetd.d/swat] [line=26]
11:19:05 21-03-2011 (notice|daemon|xinetd) xinetd[181]: xinetd Version 2.3.14 started with no options compiled in.
11:19:05 21-03-2011 (notice|daemon|xinetd) xinetd[181]: Started working: 2 available services
11:19:05 21-03-2011 (info|kern|kernel) Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
11:19:05 21-03-2011 (err|kern|kernel) devfs_register(net/tun): could not append to parent, err: -17

âîò òàêîé îòâåò ïðè ïóñêå íà êëèåíòå íå î÷åíü ïîíðàâèëñÿ!

11:19:05 21-03-2011 (err|kern|kernel) devfs_register(net/tun): could not append to parent, err: -17

ëîã c êëèåíòà ( ðåàüíûé àäðåñ çàìåíèë xxx.xxx.xxx.xxx:2194 )

ïîðò íà ñåðâåðå êàê 2194 ñäåëàë

iptables íà êëèåíòå ïðîïèñàë

iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I INPUT -i tun0 -p tcp --dport 80 -j ACCEPT

íà ñåðâåðå òîæå ïðîïèñàë

iptables -I INPUT -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I INPUT -i tun0 -p tcp --dport 80 -j ACCEPT

\opt\var\log\openvpn openvpn.log

Mon Mar 21 11:54:33 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Mar 21 11:54:33 2011 Re-using SSL/TLS context
Mon Mar 21 11:54:33 2011 LZO compression initialized
Mon Mar 21 11:54:33 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 21 11:54:33 2011 Socket Buffers: R=[108544->131072] S=[108544->131072]
Mon Mar 21 11:54:33 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 21 11:54:33 2011 Local Options hash (VER=V4): '41690919'
Mon Mar 21 11:54:33 2011 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 21 11:54:33 2011 UDPv4 link local: [undef]
Mon Mar 21 11:54:33 2011 UDPv4 link remote: xxx.xxx.xxx.xxx:2194
Mon Mar 21 11:55:33 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 21 11:55:33 2011 TLS Error: TLS handshake failed
Mon Mar 21 11:55:33 2011 TCP/UDP: Closing socket
Mon Mar 21 11:55:33 2011 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 21 11:55:33 2011 Restart pause, 2 second(s)
Mon Mar 21 11:55:35 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Mar 21 11:55:35 2011 Re-using SSL/TLS context
Mon Mar 21 11:55:35 2011 LZO compression initialized
Mon Mar 21 11:55:35 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 21 11:55:35 2011 Socket Buffers: R=[108544->131072] S=[108544->131072]
Mon Mar 21 11:55:36 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 21 11:55:36 2011 Local Options hash (VER=V4): '41690919'
Mon Mar 21 11:55:36 2011 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 21 11:55:36 2011 UDPv4 link local: [undef]
Mon Mar 21 11:55:36 2011 UDPv4 link remote: xxx.xxx.xxx.xxx:2194
Mon Mar 21 11:56:36 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 21 11:56:36 2011 TLS Error: TLS handshake failed
Mon Mar 21 11:56:36 2011 TCP/UDP: Closing socket
Mon Mar 21 11:56:36 2011 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 21 11:56:36 2011 Restart pause, 2 second(s)

Mon Mar 21 11:56:38 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Mar 21 11:56:38 2011 Re-using SSL/TLS context
Mon Mar 21 11:56:38 2011 LZO compression initialized
Mon Mar 21 11:56:38 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 21 11:56:38 2011 Socket Buffers: R=[108544->131072] S=[108544->131072]
Mon Mar 21 11:56:38 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 21 11:56:38 2011 Local Options hash (VER=V4): '41690919'
Mon Mar 21 11:56:38 2011 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 21 11:56:38 2011 UDPv4 link local: [undef]
Mon Mar 21 11:56:38 2011 UDPv4 link remote: xxx.xxx.xxx.xxx:2194
Mon Mar 21 11:57:38 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 21 11:57:38 2011 TLS Error: TLS handshake failed
Mon Mar 21 11:57:38 2011 TCP/UDP: Closing socket
Mon Mar 21 11:57:38 2011 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 21 11:57:38 2011 Restart pause, 2 second(s)
Mon Mar 21 11:57:40 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Mar 21 11:57:40 2011 Re-using SSL/TLS context
Mon Mar 21 11:57:40 2011 LZO compression initialized
Mon Mar 21 11:57:40 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 21 11:57:40 2011 Socket Buffers: R=[108544->131072] S=[108544->131072]
Mon Mar 21 11:57:40 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 21 11:57:40 2011 Local Options hash (VER=V4): '41690919'
Mon Mar 21 11:57:40 2011 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 21 11:57:40 2011 UDPv4 link local: [undef]
Mon Mar 21 11:57:40 2011 UDPv4 link remote: xxx.xxx.xxx.xxx:2194

êëþ÷è ÿ ãåíåðèðîâàë ïî ìàíóàëó â ññûëêå
âîçìîæíî ÷òî òî íå òàê

âîò êîíôèã íà êëèåíòå, ÿ ñåë íà äåâàéñàõ íà ïîðò 2194

xxxxx - ìíåìîíèêà dyndns

client
dev tun
proto udp
remote xxxxx.dyndns.org 2194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /opt/etc/openvpn/keys/ca.crt
cert /opt/etc/openvpn/keys/homepc.crt
key /opt/etc/openvpn/keys/homepc.key
ns-cert-type server
comp-lzo
verb 3
log-append /opt/var/log/openvpn/openvpn.log
status /opt/var/log/openvpn/status.log

--
êàêèå ëîãè èëè êîíôèãè ïðèâåñòè åùå ?

Ñïàñèáî!

**Rung** · 21-03-2011, 09:25

ÿ íàñòðàèâàë ïî ýòîé ðåêîìåíäàöèè http://habrahabr.ru/blogs/linux/56652/
íàäî òîëüêî ó÷èòûâàòü, äëÿ RT-16 íåìíîãî äðóãèå íàñòðîéêè çàïóñêà

íà äàííûé ìîìåíò ïî ýòîé ðåêîìåíäàöèè ó ìåíÿ âñå ðàáîòàåò ïðåêðàñíî, â ñåòè 1 ñåðâåð (RT-N16) è 3 êëèåíòà (RT-N16, wl500gp).

**vectorm** · 21-03-2011, 09:48

Originally Posted by yuraz

client
dev tun
proto udp
remote xxxxx.dyndns.org 2194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /opt/etc/openvpn/keys/ca.crt
cert /opt/etc/openvpn/keys/homepc.crt
key /opt/etc/openvpn/keys/homepc.key
ns-cert-type server
comp-lzo
verb 3
log-append /opt/var/log/openvpn/openvpn.log
status /opt/var/log/openvpn/status.log

Ïîïðîáóéòå äëÿ íà÷àëà íàñòðîèòü íà tcp ïðîòîêîëå, âåðîÿòíîñòü ðàáîòû âûøå. Ïîòîì áóäåòå "òþíèòü".

**FilimoniC** · 21-03-2011, 10:17

Originally Posted by yuraz

.. ìíîãàáóêàô

Code:

Mon Mar 21 11:56:36 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 21 11:56:36 2011 TLS Error: TLS handshake failed
Mon Mar 21 11:56:36 2011 TCP/UDP: Closing socket

1. Ïðîáóéòå ïî TCP ñíà÷àëà

Code:

proto tcp

Ñåé÷àñ îíî ãîâîðèò "íå ìîãó ñîåäèíèòüñÿ". Òàê êàê ïðè èñïîëüçîâàíèè UDP ñîåäèíåíèÿ ôàêòè÷åñêè íå ïðîèñõîäèò, òî îí ýòî ÿâíî íå ïèøåò.

2.

Code:

11:19:05 21-03-2011 (err|kern|kernel) devfs_register(net/tun): could not append to parent, err: -17

Çàïóñêàéòå åãî èç ïîä admin\root, ÷åðåç êîìàíäíóþ ñòðîêó (à íå ÷åðåç ñêðèïò S20openvpn)

**yuraz** · 21-03-2011, 21:05

ïîêà îñòàâèë upd

óäàëîñü çàïóñòèòü OpenVPN

Âðîäå ìíå òåïåðü íàäî ðàçáèðàòüñÿ ñ ìàðøðóòèçàöèåé

ÇÀÄÀ×À:

êàæäûé ðàóòåð èìååò ñâîé èíòåðíåò,
ïî òóíåëþ äîëæíû ïðîñòî õîäèòü ïàêåòû ...
ìåæäó ñåòêàìè 192.168.1.0 192.168.2.0
ìàøèíû îäíîãî îôèñà-äîìà äîëæíû âèäåòü ìàøèíû äðóãîãî îôèñà

âîò ðèñóíîê ïðèìåðíî òîãî ÷òî íóæíî ðåàëèçîâàòü

VPN ïîäíÿë , ðàçîáðàëñÿ ñ ìàðøðóòèçàöèåé
âñå çàðàáîòàëî êàê õîòåë

Âñåì îòêëèêíóâøèìñÿ ñïàñèáî çà ïîìîùü

**ANVIL** · 21-07-2011, 08:06

Âñåì äîáðîãî äíÿ.
Èìååì: wl500gP + 2GB USB flash
Åñòü çàäà÷à ðàçäàâàòü è-íåò ÷åðåç OpenVPN â ëîêàëêó. Ïîëüçóÿñü ìàíóàëîì Ññûëêà ïîñòàâèë OpenVPN íà ðîóòåð, ïîäêëþ÷èëñÿ ê ñåðâåðó. Íà ñàìîì ðîóòåðå è-íåò ïîÿâèëñÿ. Ïðîïèñàë ïðàâèëà äëÿ Firewall'à â post-firewall, âñå ñîõðàíèë â ïàìÿòü. Ïðè ïåðåçàãðóçêå ðîóòåðà OpenVPN ñòàðòóåò, íà íåì ïîÿâëÿåòñÿ è-íåò. Íî âîò èç ëîêàëêè â èíòåðíåò âûéòè íèêàê íå ïîëó÷àåòñÿ. ×òî íóæíî åùå äîáàâèòü? Ìîæåò áûòü åùå êàêèå-òî ïðàâèëà íóæíî äîáàâëÿòü? Â îáùåì íàäî ñäåëàòü ÷òîáû openVPN áûë wan ïîðòîì? Óæå íå ïåðâûé ðàç óïèðàþñü â ýòî.

**FilimoniC** · 21-07-2011, 12:54

Originally Posted by ANVIL

Åñòü çàäà÷à ðàçäàâàòü è-íåò ÷åðåç OpenVPN â ëîêàëêó.

À çà÷åì âàì OpenVPN? Âû è òàê ìîæåòå ñî ñâîåãî áóêà âûéòè â èíåò...
Çàäà÷à íå ïîíÿòíà. Ëîêàëêà ýòî ÷òî â âàøåì ñëó÷àå? Â ìîåì - ýòî LAN-ïîðòû. Íî çà÷åì òîãäà OpenVPN?

**ANVIL** · 21-07-2011, 14:28

Originally Posted by FilimoniC

À çà÷åì âàì OpenVPN? Âû è òàê ìîæåòå ñî ñâîåãî áóêà âûéòè â èíåò...
Çàäà÷à íå ïîíÿòíà. Ëîêàëêà ýòî ÷òî â âàøåì ñëó÷àå? Â ìîåì - ýòî LAN-ïîðòû. Íî çà÷åì òîãäà OpenVPN?

Åñòü ñåòü ïðîâàéäåðà - WAN ðîóòåðà.
Åñòü ëîêàëêà, ïîðòû íà ðîóòåðå - LAN
Â ñåòè ïðîâàéäåðà ñòîèò ñåðâåð OpenVPN.
Â ñåòè ïðîâàéäåðà âûäåëåííûå Ip àäðåñà (èëè DHCP, íå âàæíî).
Â ñåòè LAN íåò èíòåðíåòà, åñòü òîëüêî ñåòü ïðîâàéäåðà.
Íà ñåðâåðå OpenVPN åñòü èíòåðíåò.
Çàäà÷à ïîäêëþ÷èòüñÿ ê ñåðâåðó ñ OpenVPN è ðàçäàâàòü ðîóòåðîì èíòåðíåò â ñåòü LAN. Ñòðóêòóðà êàê ïðè PPPT + static.
Ñåé÷àñ ó ìåíÿ ðîóòåð ïîäêëþ÷àåòñÿ ê ñåòè OpenVPN íî èç LAN ïîïàñòü â èíòåðíåò íå óäàåòñÿ. Ïðè ýòîì ñ ðîóòåðà èíòåðíåò åñòü. Åñòü ïîäîçðåíèå, ÷òî íàäî ïðîïèñàòü ëèáî NAT, ëèáî ìàðøðóò.
Íå ìîãó ïîíÿòü òî÷íî ÷òî èç ýòîãî. Ïîýòîìó ïðîøó ïîìîùè.

Ñ áóêà ÿ è òàê ìîãó ïîäêëþ÷èòüñÿ ê ñåðâåðó OpenVPN äëÿ ýòîãî ìíå íå íàäî íà ðîóòåðå ïîäíèìàòü OpenVPN. Õîòåëîñü áû ÷òîáû ðîóòåð ñàì ðàçäàâàë è-íåò.

**tempik** · 21-07-2011, 18:47

Originally Posted by ANVIL

Åñòü ñåòü ïðîâàéäåðà - WAN ðîóòåðà.
Åñòü ëîêàëêà, ïîðòû íà ðîóòåðå - LAN
Â ñåòè ïðîâàéäåðà ñòîèò ñåðâåð OpenVPN.
Â ñåòè ïðîâàéäåðà âûäåëåííûå Ip àäðåñà (èëè DHCP, íå âàæíî).
Â ñåòè LAN íåò èíòåðíåòà, åñòü òîëüêî ñåòü ïðîâàéäåðà.
Íà ñåðâåðå OpenVPN åñòü èíòåðíåò.
Çàäà÷à ïîäêëþ÷èòüñÿ ê ñåðâåðó ñ OpenVPN è ðàçäàâàòü ðîóòåðîì èíòåðíåò â ñåòü LAN. Ñòðóêòóðà êàê ïðè PPPT + static.
Ñåé÷àñ ó ìåíÿ ðîóòåð ïîäêëþ÷àåòñÿ ê ñåòè OpenVPN íî èç LAN ïîïàñòü â èíòåðíåò íå óäàåòñÿ. Ïðè ýòîì ñ ðîóòåðà èíòåðíåò åñòü. Åñòü ïîäîçðåíèå, ÷òî íàäî ïðîïèñàòü ëèáî NAT, ëèáî ìàðøðóò.
Íå ìîãó ïîíÿòü òî÷íî ÷òî èç ýòîãî. Ïîýòîìó ïðîøó ïîìîùè.

Ñ áóêà ÿ è òàê ìîãó ïîäêëþ÷èòüñÿ ê ñåðâåðó OpenVPN äëÿ ýòîãî ìíå íå íàäî íà ðîóòåðå ïîäíèìàòü OpenVPN. Õîòåëîñü áû ÷òîáû ðîóòåð ñàì ðàçäàâàë è-íåò.

man iptables ... ìîæåò íàâåäåò íà ìûñëè âûâîä êîìàíäû

Code:

iptables-save

Òàì â òàáëèöå "*nat" åñòü èíòåðåñíûå ñòðîêè ....

Thread: Ïðîáëåìû ñ OpenVPN. Ïðîøó ïîìîùè!

Thread Tools

Rate This Thread

Display

ïðîáëåìà ñ openvpn

openvpn

Íàñòðîéêà OpenVPN

Similar Threads

Óïðàâëåíèå UPS ïðè ïîìîùè apcupsd è nut

Îòïðàâêà SMS-îïîâåùåíèé ïðè ïîìîùè Google

OpenVPN â ñîñòàâå ïðîøèâêè îò ýíòóçèàñòîâ

HowTo install OpenVPN server

Tags for this Thread

Posting Permissions