Óñòàíîâêà è íàñòðîéêà VPN/OpenVPN ÷åðåç 3G/4G (Yota) ìîäåì

**starter** · 29-03-2016, 04:27

Originally Posted by evilseed

Ñîçäàþ ïàïêè:
mkdir /tmp/local/lib
mkdir /tmp/local/lib/modules
mkdir /tmp/local/sbin/
mkdir /tmp/local/sbin/post-boot/

Óñòàíîâêà ïðîõîäèò áåç îøèáîê.
Ôëåøêà ñàìà íå ìîíòèðóåòñÿ, åñëè âûòàùèòü è âñòàâèòü, âñå îê.

Ìîíòèðóåòñÿ ïî fstab.
Îáðàòè âíèìàíèå, â ìî¸ì fstab ìîíòèðóþòñÿ 2 ðàçäåëà ôëåøêè:
/opt - äëÿ entware, /mnt - ïðîñòî ñâàëêà ôàéëîâ - ïîïðàâü fstab êàê òåáå íàäî.
pre-boot - â passwd äîáàâëÿåòñÿ íîâûé ïîëüçîâàòåëü nologin - áåç äîñòóïà ê shell è ìåíÿþòñÿ àòðèáóòû /var/run, ÷òîáû äåìîíû çàïóùåííûå îò nologin/nobody èìåëè òóäà äîñòóï.
post-boot - insmod ext2.ko
pre-mount - ïðîâåðêà ôàéëîâîé ñèñòåìû ôëåøêè.
post-mount - çàïóñê èíèöèàëèçàöèè rc.unslung start
pre-shutdown - ïîäãîòîâêà ê ïåðåçàãðóçêå: rc.unslung stop è ïåðåìîíòèðîâàíèå ôëåøêè â readonly, õîòÿ, êîíå÷íî, ýòîò ñêðèïò íå ñðàáîòàåò, åñëè ïèòàíèå âûäåðíóòü

Ñèå ðàáîòàåò íà WL-500GPv1 ñ ïðîøèâêîé r7426M-g8fe7384.

**maluga** · 25-05-2016, 15:22

Çäðàâñòâóéòå!
Ñóòü òàêîâà: Èìååòñÿ asus rt-n10u, ìîäåì yota, openvpn-ñåðâåð hideme.ru.
Îñòàíîâèë ñâîé âûáîð íà ïðîøèâêå ðîóòåðà RT-N10U-1.9.2.7-rtn-r7458M-g6bd2635
Yota ðàáîòàåò, ñìîíòèðîâàë ôëåøêó, óñòàíîâèë openvpn êëèåíò. Ñòàðòóþ...
ïèøåò - done, íî íà ñàìîì äåëå ýôôåêòà íåò. Çàãâîçäêà âûíåñåíà â çàãîëîâîê.
Óï¸ðñÿ â ñòåíó, êàê óñòàíîâèòü îêàÿííûé âèðòóàëüíûé tap àäàïòåð?
Ñïàñèáî.

Ñîäåðæèìîå ôàéëà openvpn.conf:

Code:

client

#connect to VPN server
remote 91.105.239.11 1194
proto udp

#DNS server to use
dhcp-option DNS 8.8.8.8

#remove to use your ISP's gateway
redirect-gateway def1

#your access keys
ca in_ca.crt
cert in_XXX.crt
key in_XXX.key
ns-cert-type server

#use virtual interface 'tap'
dev tap

#keep trying indefinitely to resolve the host name of the OpenVPN server.
resolv-retry infinite

#most clients don't need to bind to a specific local port number.
nobind

#try to preserve some state across restarts
persist-key
persist-tun

#enable compression on the VPN link
comp-lzo

#set log file verbosity.
verb 4

#silence repeating messages
mute 20

#tell the server to immediately close its client instance object rather than waiting for a timeout
explicit-exit-notify

Ëîã ðîóòåðà:

Code:

May 25 13:32:35 openvpn[507]: OpenVPN 2.3.10 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6]
May 25 13:32:35 openvpn[507]: library versions: OpenSSL 1.0.2h  3 May 2016, LZO 2.09
May 25 13:32:35 openvpn[508]: LZO compression initialized
May 25 13:32:35 openvpn[508]: Control Channel MTU parms [ L:1574 D:1212 EF:38 EB:0 ET:0 EL:3 ]
May 25 13:32:35 openvpn[508]: Socket Buffers: R=[110592->110592] S=[110592->110592]
May 25 13:32:35 openvpn[508]: Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:143 ET:32 EL:3 AF:3/1 ]
May 25 13:32:35 openvpn[508]: Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
May 25 13:32:35 openvpn[508]: Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
May 25 13:32:35 openvpn[508]: Local Options hash (VER=V4): 'd79ca330'
May 25 13:32:35 openvpn[508]: Expected Remote Options hash (VER=V4): 'f7df56b8'
May 25 13:32:35 openvpn[508]: UDPv4 link local: [undef]
May 25 13:32:35 openvpn[508]: UDPv4 link remote: [AF_INET]91.105.239.11:1194
May 25 16:32:35 admin: Started openvpn from .
May 25 13:32:35 openvpn[508]: TLS: Initial packet from [AF_INET]91.105.239.11:1194, sid=3777d6b1 fc0493b3
May 25 13:32:40 openvpn[508]: VERIFY OK: depth=1, C=DE, ST=Bayern, L=Gunzenhausen, O=HideME, CN=HideME CA, emailAddress=feedback@hideme.ru
May 25 13:32:40 openvpn[508]: VERIFY OK: nsCertType=SERVER
May 25 13:32:40 openvpn[508]: VERIFY OK: depth=0, C=DE, ST=Bayern, L=Gunzenhausen, O=HideME, CN=server, emailAddress=feedback@hideme.ru
May 25 13:32:43 openvpn[508]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
May 25 13:32:43 openvpn[508]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 25 13:32:43 openvpn[508]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
May 25 13:32:43 openvpn[508]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 25 13:32:43 openvpn[508]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
May 25 13:32:43 openvpn[508]: [server] Peer Connection Initiated with [AF_INET]91.105.239.11:1194
May 25 13:32:45 openvpn[508]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
May 25 13:32:45 openvpn[508]: PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.121.128.1,ping 10,ping-restart 30,ifconfig 10.121.140.165 255.224.0.0'
May 25 13:32:45 openvpn[508]: OPTIONS IMPORT: timers and/or timeouts modified
May 25 13:32:45 openvpn[508]: OPTIONS IMPORT: --ifconfig/up options modified
May 25 13:32:45 openvpn[508]: OPTIONS IMPORT: route-related options modified
May 25 13:32:45 openvpn[508]: ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)
May 25 13:32:45 openvpn[508]: Exiting due to fatal error

**ryzhov_al** · 25-05-2016, 15:24

Originally Posted by maluga

May 25 13:32:45 openvpn[508]: ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)

Code:

insmod tun

**maluga** · 25-05-2016, 18:23

Originally Posted by ryzhov_al

Code:

insmod tun

Îãðîìíîå ñïàñèáî! Ïðîäâèíóëñÿ äàëüøå...
Ïîõîæå, íà ýòîì ïðåïîíû íå çàêîí÷èëèñü.

**maluga** · 27-05-2016, 14:14

Îòáðîñèëî ìåíÿ íàçàä. Áåñïðè÷èííî. Äîñòèãíóòûå ïîçàâ÷åðà óñïåõè îñòàëèñü â ïðîøëîì. OpenVPN ïåðåñòàë ñòàðòîâàòü, õîòü ðàñøèáèñü...
Çàãðóçêà ðîóòåðà çàêàí÷èâàåòñÿ ìîíòèðîâàíèåì ôëåøêè êàê ðàç íà ñòàðòå ñêðèïòà. È âñ¸. Ïîïûòêà çàïóñêà âðó÷íóþ òîæå áåçóñïåøíà. Êîìàíäíàÿ ñòðîêà ïîñëå íàáîðà êîìàíäû âíîâü ñòàíîâèòñÿ ïóñòîé, ñëîâíî íè÷åãî íå íàáèðàëîñü. Íèêàêèõ ñîîáùåíèé, ëîãîâ - íè÷åãî íå ïèøåò... Íà÷àë ñûçíîâà ñ íóëÿ, ñ ïåðåóñòàíîâêè ïðîøèâêè. Âíèìàòåëüíî ïðîø¸ë âåñü ðàíåå ïðîéäåííûé ïóòü. È åù¸ ðàç... Êîðî÷å, ïîïà... Âûðó÷àéòå! Íè ñêðèïòû, íè êîíôèãè íå òðîãàë, âñ¸ êàê áûëî. Ñåðòèôèêàòû è êëþ÷ íà ìåñòå... Name: screen_putty.jpg
Views: 768
Size: 24.9 KB

Name: screen_putty.jpg
Views: 768
Size: 24.9 KB

Ëîã ðîóòåðà ïîñëå âêë:

Code:

.....
Jan  1 02:00:07 kernel: usb 1-1: configuration #1 chosen from 1 choice
Jan  1 02:00:07 kernel: hub 1-1:1.0: USB hub found
Jan  1 02:00:07 kernel: hub 1-1:1.0: 4 ports detected
Jan  1 02:00:08 kernel: usb 1-1.1: new high speed USB device using ehci_hcd and address 3
Jan  1 02:00:08 kernel: SCSI subsystem initialized
Jan  1 02:00:08 kernel: usb 1-1.1: configuration #1 chosen from 1 choice
Jan  1 02:00:08 kernel: usb 1-1.2: new high speed USB device using ehci_hcd and address 4
Jan  1 02:00:08 kernel: usb 1-1.2: configuration #1 chosen from 1 choice
Jan  1 02:00:09 kernel: Initializing USB Mass Storage driver...
Jan  1 02:00:09 kernel: scsi0 : SCSI emulation for USB Mass Storage devices
Jan  1 02:00:09 kernel: usbcore: registered new interface driver usb-storage
Jan  1 02:00:09 kernel: USB Mass Storage support registered.
Jan  1 02:00:09 kernel: NTFS driver 2.1.30 [Flags: R/O MODULE].
Jan  1 02:00:09 dnsmasq-dhcp[220]: DHCPREQUEST(br0) 192.168.1.242 74:d4:35:e7:c6:cd 
Jan  1 02:00:09 dnsmasq-dhcp[220]: DHCPACK(br0) 192.168.1.242 74:d4:35:e7:c6:cd silentpapa
Jan  1 02:00:09 dnsmasq[220]: read /etc/hosts - 2 addresses
Jan  1 02:00:09 dhcp client: deconfig: lease is lost
Jan  1 02:00:10 dnsmasq[220]: read /etc/hosts - 2 addresses
Jan  1 02:00:10 dnsmasq[220]: using nameserver 192.168.40.1#53
Jan  1 02:00:10 kernel: vlan1: dev_set_allmulti(master, 1)
Jan  1 02:00:10 miniupnpd[222]: shutting down MiniUPnPd
Jan  1 02:00:11 kernel: scsi 0:0:0:0: Direct-Access     JetFlash TS1GJFV30        8.07 PQ: 0 ANSI: 2
Jan  1 02:00:11 kernel: sd 0:0:0:0: [sda] 1986558 512-byte hardware sectors (1017 MB)
Jan  1 02:00:11 kernel: sd 0:0:0:0: [sda] Write Protect is off
Jan  1 02:00:11 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through
Jan  1 02:00:11 kernel:  sda: sda1 sda2
Jan  1 02:00:11 kernel: sd 0:0:0:0: [sda] Attached SCSI removable disk
Jan  1 02:00:11 miniupnpd[387]: HTTP listening on port 54050
Jan  1 02:00:11 miniupnpd[387]: Listening for NAT-PMP/PCP traffic on port 5351
Jan  1 02:00:11 dhcp client: bound IP : 192.168.40.103 from 192.168.40.1
May 27 16:00:47 ntp client: Synchronizing time with ntp3.stratum2.ru...
May 27 16:00:47 kernel: Adding 124888k swap on /dev/sda1.  Priority:-1 extents:1 across:124888k
May 27 16:00:47 kernel: kjournald starting.  Commit interval 5 seconds
May 27 16:00:47 kernel: EXT3 FS on sda2, internal journal
May 27 16:00:47 kernel: EXT3-fs: recovery complete.
May 27 16:00:47 kernel: EXT3-fs: mounted filesystem with ordered data mode.
May 27 16:00:47 rc.unslung: start service /opt/etc/init.d/S20openvpn

Ñêðèïò S20openvpn:

Code:

#!/bin/sh
#
# Startup script for openvpn server
#

# Make sure IP forwarding is enabled
echo 1 > /proc/sys/net/ipv4/ip_forward

# Make device if not present (not devfs)
if ( [ ! -c /dev/net/tun ] ) then
  # Make /dev/net directory if needed
  if ( [ ! -d /dev/net ] ) then
        mkdir -m 755 /dev/net
  fi
  mknod /dev/net/tun c 10 200
fi

# Make sure the tunnel driver is loaded
#if ( !(lsmod | grep -q "^tun") ); then
#       insmod /opt/lib/modules/tun.ko
#fi

ENABLED=yes
PROCS=openvpn
ARGS="--daemon --cd /opt/etc/openvpn --config openvpn.conf"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

. /opt/etc/init.d/rc.func

**maluga** · 29-05-2016, 08:22

Originally Posted by maluga

Îòáðîñèëî ìåíÿ íàçàä. Áåñïðè÷èííî. Äîñòèãíóòûå ïîçàâ÷åðà óñïåõè îñòàëèñü â ïðîøëîì. OpenVPN ïåðåñòàë ñòàðòîâàòü, õîòü ðàñøèáèñü...

Ïðåîäîëåë ïðåïÿòñòâèå. Îòêëþ÷èë usb hub ñ ìîäåìîì, âîòêíóë ôëåøêó íàïðÿìóþ â ïîðò ðîóòåðà, ïðîø¸ë âñå íàñòðîéêè çàíîâî è âó-à-ëÿ... êëèåíò çàïóñòèëñÿ. Çàòåì ñîáðàë êîíñòðóêöèþ îáðàòíî, ðàáîòîñïîñîáíîñòü ñîõðàíèëàñü.
Îäíàêî, öåëü íå äîñòèãíóòà... Ñîåäèíåíèå ñ ñåðâåðîì êàê áû óñòàíàâëèâàåòñÿ, íî ñâÿçè íåò. Êóìåêàþ äàëüøå...

Code:

 
May 29 10:04:20 rc.unslung: start service /opt/etc/init.d/S20openvpn
May 29 10:04:20 openvpn[433]: OpenVPN 2.3.10 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6]
May 29 10:04:20 openvpn[433]: library versions: OpenSSL 1.0.2h  3 May 2016, LZO 2.09
May 29 10:04:20 openvpn[436]: WARNING: file 'in_66819286374375.key' is group or others accessible
May 29 10:04:20 openvpn[436]: LZO compression initialized
May 29 10:04:20 openvpn[436]: Control Channel MTU parms [ L:1574 D:1212 EF:38 EB:0 ET:0 EL:3 ]
May 29 10:04:20 openvpn[436]: Socket Buffers: R=[110592->110592] S=[110592->110592]
May 29 10:04:20 openvpn[436]: Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:143 ET:32 EL:3 AF:3/1 ]
May 29 10:04:20 openvpn[436]: Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
May 29 10:04:20 openvpn[436]: Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
May 29 10:04:20 openvpn[436]: Local Options hash (VER=V4): 'd79ca330'
May 29 10:04:20 openvpn[436]: Expected Remote Options hash (VER=V4): 'f7df56b8'
May 29 10:04:20 openvpn[436]: UDPv4 link local: [undef]
May 29 10:04:20 openvpn[436]: UDPv4 link remote: [AF_INET]188.64.174.63:1194
May 29 10:04:20 openvpn[436]: TLS: Initial packet from [AF_INET]188.64.174.63:1194, sid=72d846ff cba58d2a
May 29 10:04:20 openvpn[436]: VERIFY OK: depth=1, C=DE, ST=Bayern, L=Gunzenhausen, O=HideME, CN=HideME CA, emailAddress=feedback@hideme.ru
May 29 10:04:20 openvpn[436]: VERIFY OK: nsCertType=SERVER
May 29 10:04:20 openvpn[436]: VERIFY OK: depth=0, C=DE, ST=Bayern, L=Gunzenhausen, O=HideME, CN=server, emailAddress=feedback@hideme.ru
May 29 10:04:21 admin: Started openvpn from .
May 29 10:04:21 kernel: tun: Universal TUN/TAP device driver, 1.6
May 29 10:04:21 kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
May 29 10:04:22 openvpn[436]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
May 29 10:04:22 openvpn[436]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 29 10:04:22 openvpn[436]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
May 29 10:04:22 openvpn[436]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 29 10:04:22 openvpn[436]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
May 29 10:04:22 openvpn[436]: [server] Peer Connection Initiated with [AF_INET]188.64.174.63:1194
May 29 10:04:24 openvpn[436]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
May 29 10:04:24 openvpn[436]: PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.122.0.1,ping 10,ping-restart 30,ifconfig 10.122.17.116 255.224.0.0'
May 29 10:04:24 openvpn[436]: OPTIONS IMPORT: timers and/or timeouts modified
May 29 10:04:24 openvpn[436]: OPTIONS IMPORT: --ifconfig/up options modified
May 29 10:04:24 openvpn[436]: OPTIONS IMPORT: route-related options modified
May 29 10:04:24 openvpn[436]: TUN/TAP device tap0 opened
May 29 10:04:24 openvpn[436]: TUN/TAP TX queue length set to 100
May 29 10:04:24 openvpn[436]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
May 29 10:04:24 openvpn[436]: /sbin/ifconfig tap0 10.122.17.116 netmask 255.224.0.0 mtu 1500 broadcast 10.127.255.255
May 29 10:04:24 openvpn[436]: /sbin/route add -net 188.64.174.63 netmask 255.255.255.255 gw 192.168.40.1
May 29 10:04:24 openvpn[436]: /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.122.0.1
May 29 10:04:24 openvpn[436]: /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.122.0.1
May 29 10:04:24 openvpn[436]: Initialization Sequence Completed

**_DD_** · 02-06-2016, 03:36

Originally Posted by evilseed

Òåïåðü æå ìíå çàõîòåëîñü ïîñòàâèòü IP êàìåðó, è èç äîìà ÷åðåç OpenVPN òóííåëü çàõîäèòü íà ìàðøðóòèçàòîð è ïðîñìàòðèâàòü àðõèâ çàïèñåé.

IMHO, îíî òàê ðàáîòàòü íå áóäåò. Ó ñîâðåìåííûõ ïðîøèâîê åñòü íþàíñ, íåñòàáèëüíî ðàáîòàåò tap äðàéâåð, ïðè ýòîì îíî íå äà¸ò ïîäêëþ÷àòüñÿ (õîòÿ ïèíãè ïðîõîäÿò) ÷åðåç vpn òóííåëü ê ñàìîìó ðîóòåðó (õîòü êëèåíòó, õîòü ñåðâåðó) èìåþùåìó tap èíòåðôåéñ. Ñâÿçü ñî ñòîðîííèìè óñòðîéñòâàìè â ýòîé ñåòè íîðìàëüíàÿ. Âîò ïîäðîáíåå î ïðîáëåìå:
https://github.com/wl500g/wl500g/issues/451
http://wl500g.info/showthread.php?19...524#post269524
http://wl500g.info/showthread.php?30...469#post267469
http://wl500g.info/showthread.php?30...768#post266768
è ò.ä.

Ò.å. âàì íàäî ñòàâèòü äâà ðîóòåðà, íà îäíîì äåëàòü çàïèñè, à âòîðîé äëÿ ñâÿçíîñòè (OpenVPN). Èëè åñëè êàìåðà àâòîíîìíà, òî ïèñàòü äîìà íà êîìïå/2ì ðîóòåðå ÷åðåç òóííåëü...

Â êàêîé òî ñòåïåíè ýòî ïðèêîëüíàÿ ôè÷à, ïîïàâ â òóííåëü íåò ñâÿçè ñ òóííåëåîáðàçóþùèìè ðîóòåðàìè, àòàêîâàòü èçíóðè èõ íåëüçÿ

. Íî óæ áîëüíî íåñòàáèëüíî îíî ïðè ýòîì ðàáîòàåò. Ïðè ïîïûòêàõ îáðàùåíèÿ ñâÿçü ÷åðåç òóííåëü íà âðåìÿ òåðÿåòñÿ è äëÿ îñòàëüíûõ. À åù¸ ÿ çàìåòèë, ÷òî ïðè ïåðåõîäå ñî còàðûõ ïðîøèâîê, ãäå ýòîé ïðîáëåìû íå áûëî, ñòàë ìåíåå ñòàáèëüíî ðàáîòàòü òóííåëü. Åñëè ñåðâåð ïîñòîÿííî ïåðåçàãðóæàòü èëè ÷óäèò Èíòåðíåò, òî êëèåíòû ñ ñîâðåìåííûìè ïðîøèâêàìè áûâàåò òåðÿþòñÿ. Íà êëèåíòå ïðîèñõîäèò ÷òî òî ñòðàííîå, OpenVPN çàïóùåí íî â ñèñòåìíûõ ëîãàõ âûäà¸ò ïîñòîÿííî (êàæäûå 10 ñåê) îøèáêó äîñòóïà (êàê ÿ ïîíÿë ê tap: kernel: unregister_netdevice: waiting for tap0 to become free. Usage count = 1). Â ëîãàõ OpenVPN ïîñëåäíèå çàïèñè: Closing TUN/TAP interface è /sbin/ifconfig tap0 0.0.0.0. Ïðè ýòîì, åñëè ñòàðòàíóòü OpenVPN âðó÷íóþ ïîâòîðíî, íå óáèâàÿ ïîâèñøèé, íîâàÿ êîïèÿ íîðìàëüíî ïàøåò.

Originally Posted by maluga

Ïðåîäîëåë ïðåïÿòñòâèå. Îòêëþ÷èë usb hub ñ ìîäåìîì, âîòêíóë ôëåøêó íàïðÿìóþ â ïîðò ðîóòåðà, ïðîø¸ë âñå íàñòðîéêè çàíîâî è âó-à-ëÿ... êëèåíò çàïóñòèëñÿ. Çàòåì ñîáðàë êîíñòðóêöèþ îáðàòíî, ðàáîòîñïîñîáíîñòü ñîõðàíèëàñü.
Îäíàêî, öåëü íå äîñòèãíóòà... Ñîåäèíåíèå ñ ñåðâåðîì êàê áû óñòàíàâëèâàåòñÿ, íî ñâÿçè íåò. Êóìåêàþ äàëüøå...

×òî îçíà÷àåò "íî ñâÿçè íåò"? Ñ ñåðâåðîì èëè ïî ñåòêå? Ìîæåò äåëî â òîì æå ñàìîì, ÷òî âûøå?

Ðàçðàáîò÷èêè ïîøèâêè, ïîäñêàæèòå, ïîæàëóéñòà, IMHO, ýòî ÿâíî ÷òî òî ñèñòåìíîå, êàê ìîæíî âàì ïîìî÷ü íàéòè ïðè÷èíó? Ìîæåò ïîèñêàòü ñ êàêîé ïðîøèâêè ýòî ÿâíî íà÷àëîñü è ïîñìîòðåòü, ÷òî òàì ïîìåíÿëîñü? Îíî 100% ïðîÿâëÿåòñÿ ëèáî åñòü ñîåäèíåíèå, ëèáî íåò. Íî ãäå âçÿòü íî÷íóøêè çà 2013 ãîä? È ãäå âçÿòü îïèñàíèå ïî íèì? http://code.google.com/p/wl500g/source/list æå íå ïàøåò.

**maluga** · 02-06-2016, 09:42

Originally Posted by _DD_

×òî îçíà÷àåò "íî ñâÿçè íåò"? Ñ ñåðâåðîì èëè ïî ñåòêå? Ìîæåò äåëî â òîì æå ñàìîì, ÷òî âûøå?

À òî è îçíà÷àåò. Òóííåëü, ÿêîáû, ïîäíèìàåòñÿ, ëîêàëüíàÿ ñåòü â ïîðÿäêå, OpenVPN ñåðâåð ïèíãóåòñÿ, à çà íèì òèøèíà... Îäèíàêîâî õðåíîâóþ êàðòèíó ÿ ïîëó÷èë íà Asus rt-n10u, zyxel keenetic è ìàøèíå ñ ubuntu. Ïðè ýòîì íà windows-ìàøèíå òóííåëü âçëåòàåò â íîëü ñåêóíä è åãî ëîã ïðè ýòîì, ïîâåðüòå, êàê áëèçíåö ïîõîæ íà âñå îñòàëüíûå. Ïîääåðæêà HideMe "çàïóñòèëà äóðî÷êó" è ÿ íà ÷åòâ¸ðòûå ñóòêè ïåðåñòàë ñ íåé îáùàòüñÿ. Ñàìîðàçâèòèå â êóñòàðíîì äåëå, èçãîòîâëåíèå êîòëåòû èç ã, êîíå÷íî, çàìå÷àòåëüíî, íî ñåé÷àñ ìíå íóæåí áûñòðûé êà÷åñòâåííûé ðåçóëüòàò, à íå ÷åìîäàí îïûòà. Öåëü ìîåãî ìåðîïðèÿòèÿ ñîñòîèò âñåãî ëèøü â ïîëó÷åíèè âíåøíåãî ñòàòè÷åñêîãî IP íà Yota íå âòðèäîðîãà. Çíà÷èò íàì äîðîãà ê Áèëëó. Ðàçî÷àðîâàí...

**_DD_** · 02-06-2016, 12:57

Originally Posted by maluga

À òî è îçíà÷àåò. Òóííåëü, ÿêîáû, ïîäíèìàåòñÿ, ëîêàëüíàÿ ñåòü â ïîðÿäêå, OpenVPN ñåðâåð ïèíãóåòñÿ, à çà íèì òèøèíà... Îäèíàêîâî õðåíîâóþ êàðòèíó ÿ ïîëó÷èë íà Asus rt-n10u, zyxel keenetic è ìàøèíå ñ ubuntu. Ïðè ýòîì íà windows-ìàøèíå òóííåëü âçëåòàåò â íîëü ñåêóíä è åãî ëîã ïðè ýòîì, ïîâåðüòå, êàê áëèçíåö ïîõîæ íà âñå îñòàëüíûå.

À ñ ðîóòåðà îíî ñëó÷àéíî íå ðàáîòàåò? Íó òàì ïèíãè è òðàññèðîâêè. Íó ïî ëîãèêå âû ïîäêëþ÷àåòåñü, ïîëó÷àåòå àäðåñ, ïðàâèòå ìàðøðóòû, âêëþ÷àÿ äåôîëòíûé, ÷òîáû ïîéòè ïî èõ òóííåëþ, äíñ óêàçûâàåòå íà ãóãëþ. Íî ê âàøåé æå ïîäñåòè îáðàòíûõ ìàðøðóòîâ ó ñåðâåðà ìîæåò íå áûòü. Òîãäà, ïî àíàëîãèè ñ îáû÷íûì èíòåðíåòîì, IMHO, NAT íàäî ïîäíèìàòü. À ñ Windows ó âàñ ip ñðàçó íà èíòåðôåéñ ïîëó÷àåòñÿ è íàò íå íóæåí. Íå ìîæåò áûòü äåëî â ýòîì?

**a.matrosoff** · 19-06-2016, 17:47

Çäðàâñòâóéòå!

Èìåþòñÿ äâà ìàðøðóòèçàòîðà (zyxel keenetic, wl500gpv2), keenetic èìååò ïîäêëþ÷åíèå ê èíòåðíåò ñ ïóáëè÷íûì ip, wl500gpv2 ïîäêëþ÷åí ê èíòåðíåòó ÷åðåç 3g ìîäåì (ppp0), ïóáëè÷íîãî ip íå èìååò. Ñåòè ïîñòðîåíû ïî ñëåäóþùåé ñõåìå:

Name: routing_lanlan2.png
Views: 624
Size: 9.8 KB

Name: routing_lanlan2.png
Views: 624
Size: 9.8 KB

Íà wl500gpv2 òóííåëü ïîäíèìàåòñÿ èç post-boot:

insmod pppox
insmod pptp
pppd file /tmp/local/sbin/options_vpn_pppd

Ñîäåðæèìîå post-firewall:

ip route add 192.168.0.0/24 dev ppp3
iptables --insert OUTPUT 1 --source 0.0.0.0/0.0.0.0 --destination 192.168.0.0/24 --jump ACCEPT --out-interface ppp3
iptables --insert INPUT 1 --source 192.168.0.0/24 --destination 0.0.0.0/0.0.0.0 --jump ACCEPT --in-interface ppp3
iptables --insert FORWARD 1 --source 0.0.0.0/0.0.0.0 --destination 192.168.0.0/24 --jump ACCEPT --out-interface ppp3
iptables --insert FORWARD 1 --source 192.168.0.0/24 --destination 0.0.0.0/0.0.0.0 --jump ACCEPT
iptables --table nat --append POSTROUTING --out-interface ppp3 --jump MASQUERADE
iptables --append FORWARD --protocol tcp --tcp-flags SYN,RST SYN --jump TCPMSS --clamp-mss-to-pmtu

Ñî ñòîðîíû êëèåíòà â ñåòü ñåðâåðà ïèíã ïðîõîäèò íà àäðåñ ñåðâåðà (192.168.0.1) è íà A2 (192.168.0.100), traceroute òîæå îòðàáàòûâàåò.
À ñî ñòîðîíû ñåðâåðà â ñåòü êëèåíòà - ïèíã ïðîõîäèò òîëüêî íà 10.0.0.1, à íà A1 èëè B1 íå ïðîõîäèò, traceroute íå ðàáîòàåò, îñòàíàâëèâàåòñÿ íà 10.0.0.1.

×òî çàáûë èëè ñäåëàë íåâåðíî? Çàðàíåå îãðîìíîå ñïàñèáî.

**dvg_lab** · 27-07-2016, 11:29

Íàñòóïèë íà òå-æå ãðàáëè ñ openvpn, à ó ìåíÿ âñÿ ðàáîòà çàâÿçàíà íà ïîäêëþ÷åíèè êëèåíòñêîãî ðîóòåðà ê ñåðâåðíîìó openvpn IP, âñå ñåðâèñû íà íåì êðóòÿòñÿ, òàêæå ïîéìàë ãëþê ñ kernel: unregister_netdevice: waiting for tun0 to become free. Usage count = 1
Áóäó ïûòàòüñÿ íàéòè ïîñëåäíèé ðàáî÷èé ñðåç ñûðöîâ è âûëîâèòü ðåãðåññèþ. Åñòü çàèíòåðåñîâàííûå â ïî÷èíêå ýòîãî áàãà?

**6apakyda** · 28-07-2016, 12:42

Íå ïîéìó êàê ó Âàñ ïîëó÷èëîñü ïîñòàâèòü openvpn))
Ïèøó ipkg.sh install openvpn-openssl
Âñ¸ ñêà÷èâàåòñÿ, íî â èòîãå íè êàêèõ êîíôèãîâ íàéòè íå ìîãó, ïîäñêàæèòå, ÷òî ÿ íå òàê äåëàþ?

Thread: Óñòàíîâêà è íàñòðîéêà VPN/OpenVPN ÷åðåç 3G/4G (Yota) ìîäåì

Thread Tools

Rate This Thread

Display

Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)

Ñêðèïò S20openvpn íå ñòàðòóåò

Âîïðîñ èç ïðåäûäóùåãî ïîñòà ðåø¸í

OpenVPN

PPTP Server (Zyxel Keenetic) <--> PPTP Client (wl500gpv2)

Similar Threads

Äâà ïðîâàéäåðà (3G/CDMA/YOTA USB-ìîäåì è WAN)

Íàñòðîéêà êëèåíòà è ñåðâåðà OpenVPN íà ðîóòåðå

[QoS] Óñòàíîâêà è íàñòðîéêà nShaper

Íàñòðîéêà (óñòàíîâêà) Samba3

Óñòàíîâêà OpenVPN â îñíîâíóþ ïàìÿòü äëÿ ÍÎÂÈ×ÊÎÂ

Tags for this Thread

Posting Permissions