Óñòàíîâêà OpenVPN â îñíîâíóþ ïàìÿòü äëÿ ÍÎÂÈ×ÊÎÂ

Quote:

---

Originally Posted by Basile

À ýòî ñäåëàë? ÷òî âûäàë ifcofig?

---

åñëè âñòàâèòü ïðîñòî ifconfig ïîëó÷àåòñÿ ñëåäóþùèå:

Code:

---

...
Sat May  9 21:13:13 2009 TUN/TAP device tap0 opened
Sat May  9 21:13:13 2009 /opt/etc/openvpn/mz-openvpn.up tap0 1500 1557  init
0=/opt/etc/openvpn/mz-openvpn.up 1=tap0 2=1500 3=1557 4= 5=
br0      Link encap:Ethernet  HWaddr 00:1F:C6:82:22:22
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::21f:c6ff:fe82:2222/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:869 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1054 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:95652 (93.4 KiB)  TX bytes:382396 (373.4 KiB)

eth0      Link encap:Ethernet  HWaddr 00:1F:C6:82:22:22
          inet6 addr: fe80::21f:c6ff:fe82:2222/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:48727 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2644 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:7688856 (7.3 MiB)  TX bytes:609537 (595.2 KiB)
          Interrupt:4 Base address:0x1000

eth1      Link encap:Ethernet  HWaddr 00:1F:C6:82:22:22
          inet6 addr: fe80::21f:c6ff:fe82:2222/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:12 Base address:0x2000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING MULTICAST  MTU:16436  Metric:1
          RX packets:786 errors:0 dropped:0 overruns:0 frame:0
          TX packets:786 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:66840 (65.2 KiB)  TX bytes:66840 (65.2 KiB)

ppp0      Link encap:Point-Point Protocol
          inet addr:172.19.78.162  P-t-P:172.19.64.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING MULTICAST  MTU:1492  Metric:1
          RX packets:228 errors:0 dropped:0 overruns:0 frame:0
          TX packets:256 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:82937 (80.9 KiB)  TX bytes:44171 (43.1 KiB)

vlan0    Link encap:Ethernet  HWaddr 00:1F:C6:82:22:22
          inet6 addr: fe80::21f:c6ff:fe82:2222/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:869 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1402 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:99128 (96.8 KiB)  TX bytes:408912 (399.3 KiB)

vlan1    Link encap:Ethernet  HWaddr 00:1F:C6:82:22:22
          inet addr:10.254.0.146  Bcast:10.254.0.255  Mask:255.255.255.0
          inet6 addr: fe80::21f:c6ff:fe82:2222/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:47846 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1240 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:6710120 (6.3 MiB)  TX bytes:200477 (195.7 KiB)

0=/opt/etc/openvpn/mz-route-up 1= 2= 3= 4= 5=
Sat May  9 21:13:13 2009 Initialization Sequence Completed

---

à âîò åñëè óêàçàòü èíòåðôåéñ, ò.å. âñòàâèòü ifconfig tap0
òî ðåçóëüòàò òàêîé:

Code:

---

...
Sat May  9 21:16:06 2009 TUN/TAP device tap0 opened
Sat May  9 21:16:06 2009 /opt/etc/openvpn/mz-openvpn.up tap0 1500 1557  init
0=/opt/etc/openvpn/mz-openvpn.up 1=tap0 2=1500 3=1557 4= 5=
tap0      Link encap:Ethernet  HWaddr 00:FF:26:34:B8:C8
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

0=/opt/etc/openvpn/mz-route-up 1= 2= 3= 4= 5=
Sat May  9 21:16:06 2009 Initialization Sequence Completed

---

Èäåþ ïðî "íå çàâèñèìûé" çàïóñê openvpn è udhcpc ÿ ïîíÿë.
ß â îáëàñòè ñåòåâûõ òåõíîëîãèé è linux - íå ÿâëÿþñü ñïåöèàëèñòîì.
Òî ÷òî ÿ ïûòàþñü äåëàòü, ñêîðåå îñíîâàíî íà äîãàäêàõ, è ìîèõ "ïðåäïîëîæåíèÿõ". :-(

Âîò ÿ õî÷ó óòî÷íèòü, ñ êàêîé ÷àñòîòîé udhcpc áóäåò ïûòàòüñÿ ïîëó÷èòü IP?
Ìîæíî-ëè åãî ïðèíóäèòåëüíî "ïîïðîñèòü" ïîëó÷èòü IP?

Quote:

---

Originally Posted by Basile

À ÿ òåáå âñ¸ ïûòàþñü ïðîäâèíóòü äðóãóþ èäåþ.
Íà ñêîëüêî ÿ ïîíÿë, udhcpc ìîæíî ïîâåñèòü êàê ñåðâèñ, îí ñàì ïðè íåîáõîäèìîñòè áóäåò çàïðàøèâàòü ó DHCP-ñåðâåðà íóæíûå ïàðàìåòðû.
Äëÿ ýòîãî ñíà÷àëà ñîçäàåì èíòåðôåéñ tun0 è äåëàåì òàê, ÷òîáû îí âèäåí áûë â ifconfig http://wl500g.info/showpost.php?p=144773&postcount=135
Çàïóñêàåì íà íåì udhcpc http://wl500g.info/showpost.php?p=144692&postcount=130
Çàïóñêàåì OpenVPN. Íà ýòîì ýòàïå udhcpc äîëæåí ñàì ïîäõâàòèòü âñå íàñòðîéêè

---

Ñïàñèáî!
Îãðîìíîå ñïàñèáî!
Ñóäÿ ïî âñåìó, òâîÿ èäåÿ ñ çàïóñêîì ñíà÷àëà udhcpc, à ïîòîì openvpn - ðàáîòàåò!

Ñäåëàë ñëåäóþùåå:
â post-mount âñòàâèë ñëåäóþùåå:

Code:

---

/opt/sbin/openvpn --mktun --dev tap0
ifconfig tap0 0.0.0.0 promisc up
/sbin/udhcpc -i tap0 -p /var/run/udhcpc1.pid -s /tmp/udhcpc -b

---

è åù¸ íàïèñàë òàêîé ñêðèïòèê S20openvpn:

Code:

---

#!/bin/sh

NAME="OpenVPN Client"

start() {
  echo "Starting $NAME... "
  /opt/sbin/openvpn --config /opt/etc/openvpn/mz.ovpn --script-security 3 &
}

stop() {
  echo "Shutting down $NAME... "
  killall -9 openvpn
}

case "$1" in
    start)
        start
        ;;
    stop)
        stop
        ;;
    restart)
        stop
        sleep 1
        start
        ;;
    *)
        echo "Usage: $0 (start|stop|restart)"
        exit 1
        ;;
esac
exit 0

---

è ïîëîæèë åãî â /opt/etc/init.d

Âðîäå ðàáîòàåò.
Ïðè çàãðóçêå ðîóòåðà, âñå ïîäíèìàåòñÿ.

igor77777, î÷åíü ðàä, ÷òî âñå çàðàáîòàëî. ß òîæå, ê ñòàòè, íå ñïåöèàëèñò :)
Âîò ìíå áû êòî ïîìîã. Êàê çàñòàâèòü openvpn ïðîïèñûâàòü DNS ñåðâåðà ñàìîñòîÿòåëüíî, âûáèðàÿ èç ñòðîêè èíèöèàëèçàöèè, è ïîòîì, ïðè ðàçðûâå ñîåäèíåíèÿ, èõ óáèðàòü?

Quote:

---

Originally Posted by igor77777

åñëè âñòàâèòü ïðîñòî ifconfig ïîëó÷àåòñÿ ñëåäóþùèå:

---

ß òàê è ïîäóìàë, ÷òî âî âðåìÿ âûïîëíåíèÿ up-ñêðèïòà èíòåðôåéñ tap0 íàõîäèòñÿ â êàêîì-òî "ñòðàííîì" ñîñòîÿíèè.

Quote:

---

Originally Posted by igor77777

Âîò ÿ õî÷ó óòî÷íèòü, ñ êàêîé ÷àñòîòîé udhcpc áóäåò ïûòàòüñÿ ïîëó÷èòü IP?

---

Íå çíàþ

Quote:

---

Originally Posted by igor77777

Ìîæíî-ëè åãî ïðèíóäèòåëüíî "ïîïðîñèòü" ïîëó÷èòü IP?

---

Ïîñìîòðè ìî ìàíóàëó, ó udhcpc åñòü ïàðàìåòð --now http://www.digipedia.pl/man/udhcpc.8.html

Íå ìîãëè áû âû ðàñïèñàòü ÷òî â èòîãå íóæíî ñäåëàòü äëÿ óñòàíîâêè OpenVPN êàê êëèåíòà. À òî óæå ïî ÷àñòÿì åñòü âñå, ìîæíî ïî ïîäðîáíåå ðàñïèñàòü ÷òî äà êàê. Êàê â ïåðâîì ïîñòå. :rolleyes:

Quote:

---

Originally Posted by ANVIL

Íå ìîãëè áû âû ðàñïèñàòü ÷òî â èòîãå íóæíî ñäåëàòü äëÿ óñòàíîâêè OpenVPN êàê êëèåíòà. À òî óæå ïî ÷àñòÿì åñòü âñå, ìîæíî ïî ïîäðîáíåå ðàñïèñàòü ÷òî äà êàê. Êàê â ïåðâîì ïîñòå. :rolleyes:

---

0. Ðåêîìåíäóþ íà÷àòü íàñòðîéêó OpenVPN ïîä Windows ;) Òàê âû ïîëó÷èòå áàçîâûå çíàíèÿ ïî íàñòðîéêå êëèåíòà è íè÷åãî íå ñëîìàåòå íà ðîóòåðå. Ðåêîìåíäóþ íàó÷èòüñÿ çàïóñêàòü openvpn ÷åðåç êîíñîëü, à íå ÷åðåç çíà÷îê â òðåå.
1. Ñòàâèì OpenVPN íà ðîóòåðå ipkg install openvpn
2. Èíèöèàëèçèðóåì ðîóòåð ïåðåä çàïóñêîì OpenVPN (äîáàâëÿåì ñòðîêè â post-boot)

Code:

---

#!/bin/sh

# Make device if not present (not devfs)
if ( [ ! -c /dev/net/tun ] ) then
    # Make /dev/net directory if needed
    if ( [ ! -d /dev/net ] ) then
        mkdir -m 755 /dev/net
    fi
    mknod /dev/net/tun c 10 200
fi

# Make sure the tunnel driver is loaded
if ( !(lsmod | grep -q "^tun") ); then
    insmod tun.o
fi

---

3. Ïðèìåíÿåì çíàíèÿ, ïîëó÷åííûå ïðè íàñòðîéêå êëèåíòà ïîä Windows, òîëüêî êëþ÷è è êîíôèã íàäî ïîëîæèòü â /opt/etc/openvpn
4. Äàëüøå ïî ñèòóàöèè. Íàïðèìåð, ó ÷åëîâåêà (âûøå íà ïàðó ïîñòîâ) ip-àäðåñ âûäàâàë DHCP-ñåðâåð, ó ìåíÿ ñàì ñåðâåð.

Quote:

---

Originally Posted by Basile

0. Ðåêîìåíäóþ íà÷àòü íàñòðîéêó OpenVPN ïîä Windows ;) Òàê âû ïîëó÷èòå áàçîâûå çíàíèÿ ïî íàñòðîéêå êëèåíòà è íè÷åãî íå ñëîìàåòå íà ðîóòåðå. Ðåêîìåíäóþ íàó÷èòüñÿ çàïóñêàòü openvpn ÷åðåç êîíñîëü, à íå ÷åðåç çíà÷îê â òðåå.
1. Ñòàâèì OpenVPN íà ðîóòåðå ipkg install openvpn
2. Èíèöèàëèçèðóåì ðîóòåð ïåðåä çàïóñêîì OpenVPN (äîáàâëÿåì ñòðîêè â post-boot)

Code:

---

#!/bin/sh

# Make device if not present (not devfs)
if ( [ ! -c /dev/net/tun ] ) then
    # Make /dev/net directory if needed
    if ( [ ! -d /dev/net ] ) then
        mkdir -m 755 /dev/net
    fi
    mknod /dev/net/tun c 10 200
fi

# Make sure the tunnel driver is loaded
if ( !(lsmod | grep -q "^tun") ); then
    insmod tun.o
fi

---

3. Ïðèìåíÿåì çíàíèÿ, ïîëó÷åííûå ïðè íàñòðîéêå êëèåíòà ïîä Windows, òîëüêî êëþ÷è è êîíôèã íàäî ïîëîæèòü â /opt/etc/openvpn
4. Äàëüøå ïî ñèòóàöèè. Íàïðèìåð, ó ÷åëîâåêà (âûøå íà ïàðó ïîñòîâ) ip-àäðåñ âûäàâàë DHCP-ñåðâåð, ó ìåíÿ ñàì ñåðâåð.

---

0. Îïûò ðàáîòû ñ OpenVPN èìååòñÿ.  ÷àñòíîñòè ïîäíÿò ñåðâåð íà FreeBSD äëÿ OpenVPN, íî òàì âñå ÷åðåç Âåá èíòåðôåéñ óïðàâëÿåòñÿ, ïîýòîìó íèêàêèõ ñëîæíîñòåé íå âîçíèêàëî, ÷èñòî òåîðåòè÷åñêèå. È ê íåìó ïîäêëþ÷àþòñÿ ìàøèíû ñ Win êëèåíòàìè.

Ïî óñòàíîâêå â îñíîâíóþ ïàìÿòü OpenVPN è ïîñëåäóþùåé çàãðóçêè, òîæå ïðîáëåì íåò, à âîò ïðîáëåìû íà÷àëèñü äàëüøå. Ò.ê. êëèåíòîì ñòàíîâèòñÿ ðîóòåð, òî ïîëó÷àåòñÿ, ÷òî îí ñòàíîâèòñÿ ðÿäîâîé ìàøèíîé â ñåòè OpenVPN. À åñëè îòïðàâëÿòü çàïðîñû ñ êîìïîâ çà ðîóòåðîì â ñåòü çà ñåðâåðîì OpenVPN, òî îíè íå ïðîõîäÿò, ïîëó÷àåòñÿ, ÷òî ðîóòåð ïîäêëþ÷åí ê ñåòè, íî åå íå ðàçäàåò. Êàê ÿ ïîíÿë íóæíà íàñòðîéêà òàáëèöû NAT. ×òîáû çàïðîñû ñ âíóòðåííåé ñåòè ðîóòåðà îòïðàâëÿëèñü ÷åðåç òóííåëü OpenVPN è ïðèõîäèëè îáðàòíî íà IP ðîóòåðà. Ó ìåíÿ ip ðàçäàåò ñåðâåð OpenVPN è â PUSH ïåðåäàåò êîíôèãóðàöèþ ROUTE. Ïðàâäà êàê-òî ñòðàííî âñå ýòî ïðîïèñûâàåòñÿ. Òàê âîò òåïåðü âîïðîñ, êàê ýòî âñå íàñòðîèòü? Ïðè÷åì õîòåëîñü áû ïîíÿòü, êàê ìîæíî ðàçâåñòè òðàôèê ïî ðàçíûì òóííåëÿì, ò. ê. ïëàíèðóåòñÿ ïîäêëþ÷åíèå ê íåñêîëüêèì ñåðâåðàì OpenVPN è òðàôèê áóäåò èäòè â ðàçíûå ìåñòà. Íà Win ìàøèíàõ âñå ïðîñòî ðåøàåòñÿ, ñòàâèòñÿ åùå îäèí èíòåðôåéñ è âñå. 2 êëèåíòà ê 2 ñåðâåðàì è âñå òàì ñàìî ðóëèòñÿ. À âîò êàê íà ðîóòåðå âñå ýòî ïðîâåðíóòü??? :rolleyes:
Åñëè ïîëó÷èòñÿ âñå ýòî ñäåëàòü, ïîñòàðàþñü íàïèñàòü äîêóìåíòàøêó.

NAT íà èíòåðôåéñå tap0 ñ ïðèñâîèâøèìñÿ àäðåñîì 192.168.24.149 âêëþ÷àåòñÿ ïðèìåðíî òàê

Code:

---

iptables -t nat -A POSTROUTING -o tap0 ! -s 192.168.24.149 -j MASQUERADE

---

Åñëè ó âàñ ìàðøðóòû íà âñå ñåòè ïðîïèñàíû, òî âñå ñðàçó æå çàðàáîòàåò

Ïîäñìîòðåòü, êàê íàñòðàèâàþòñÿ îñòàëüíûå ïàðàìåòðû íà iptables, ìîæíî, íàïðèìåð, çäåñü
http://wl500g.info/showthread.php?p=144136
http://wl500g.info/showthread.php?t=7824

Quote:

---

Originally Posted by ANVIL

Ó ìåíÿ ip ðàçäàåò ñåðâåð OpenVPN è â PUSH ïåðåäàåò êîíôèãóðàöèþ ROUTE. Ïðàâäà êàê-òî ñòðàííî âñå ýòî ïðîïèñûâàåòñÿ. Òàê âîò òåïåðü âîïðîñ, êàê ýòî âñå íàñòðîèòü?

---

Çàïóñòèòå OpenVPN ñ êëþ÷îì "--verb 4" è ïîñìîòðèòå, ÷òî îí äåëàåò http://wl500g.info/showpost.php?p=144076&postcount=122

Quote:

---

Originally Posted by Basile

NAT íà èíòåðôåéñå tap0 ñ ïðèñâîèâøèìñÿ àäðåñîì 192.168.24.149 âêëþ÷àåòñÿ ïðèìåðíî òàê

Code:

---

iptables -t nat -A POSTROUTING -o tap0 ! -s 192.168.24.149 -j MASQUERADE

---

Åñëè ó âàñ ìàðøðóòû íà âñå ñåòè ïðîïèñàíû, òî âñå ñðàçó æå çàðàáîòàåò

---

Ó ìåíÿ òîæå åñòü ïî ýòîìó ïîâîäó âîïðîñ.
Åñëè ïîìíèòå, ó ìåíÿ ip âûäàåò dhcp-ñåðâåð.
Äîáàâëÿòü ïðàâèëî äëÿ ýòîãî ip ïðè åãî ïîëó÷åíèè - íå ïðîáëåìà.

À âîò êàê óäàëÿòü ïðàâèëî äëÿ "ñòàðîãî IP", ïðè ïåðåíàçíà÷åíèè åãî ñåðâåðîì?

âîò åñòü ó ìåíÿ .....
äîìà.... dir-320 ïåðåøèòûé â asus....
íà íåì íàäî vpn ïîäíÿòü.... åñòü: ôëåøêà âîòêíóòà â íåãî è äàæå ðàáîòàåò... ïîíàñòàâèë êó÷ó ïðèëîæåíèé......
íà ðàáîòå ïàðê âèíäîâûõ ìàøèí..... ó íèõ ó âñåõ àâòîìàòîì èäåò ïîëó÷åíèå ip ìàñîê è dns îò ñåðâàêà - debian.....
âîò õî÷åòñÿ ïîíÿòü êàê áû ñäåëàòü ÷òîá äåáèàí ñàì èíåò ñ äîìàùíåãî êîìïà òàùèë... òîåñòü ñ dir-320 ñàì áðàë?
÷òî íàäî òàì è òàì íàñòðîèòü? :)
ïîêà ÿ ëàìåð.. íî ÿ ó÷óñü.... íî íóæíà ïîìîùü.... åñëè ïîìîæåòå êîíôèãàìè áóäó áëàãîäàðåí.... :)
îáà íàõîäÿòñÿ â ñåòêàõ: 10.246.*.* ip ñòàòè÷åñêèå....

Èìååòñÿ ðîóòåð ASUS WL-500G Premium. Èìåþòñÿ äâà ïîìåùåíèÿ íà òåððèòîðèè êðóïíîãî ïðåäïðèÿòèÿ.
 îáîèõ ïîìåùåíèÿõ íàõîäÿòñÿ ñðåäñòâà âû÷èñëèòåëüíîé òåõíèêè (êîìïüþòåðû è ïåðèôåðèéíûå óñòðîéñòâà), îáúåäèíåííûå â ñâîè ëîêàëüíûå âû÷èñëèòåëüíûå ñåòè (ËÂÑ1 è ËÂÑ2).
Èç îáîèõ ïîìåùåíèé èìååòñÿ äîñòóï ê ðåñóðñàì êîîïîðàòèâíîé ñåòè (ÊÑ) ïðåäïðèÿòèÿ - âèòàÿ ïàðà UTP.
Äîñòóï â Èíòåðíåò ïðåäîñòàâëÿåòñÿ ÷åðåç ÊÑ, óïðàâëÿåìóþ âû÷èñëèòåëüíûì öåíòðîì (ÂÖ) äàííîãî ïðåäïðèÿòèÿ.
Äîñòóï ïðåäîñòàâëÿåòñÿ ïî ñòàòè÷åñêîìó IP-àäðåñó (ñòàíäàðòíàÿ èíôîðìàöèÿ ÂÖ äëÿ îðãàíèçàöèè äîñòóïà: IP-àäðåñ, ìàñêà, øëþç, DNS ñåðâåðà).
Íàøà ïðîáëåìà çàêëþ÷àåòñÿ â òîì, ÷òî IP-àäðåñ äëÿ äîñòóïà â Èíòåðíåò ó íàñ îäèí, à Èíòåðíåò íóæåí â äâóõ ïîìåùåíèÿõ.
Âòîðîé IP-àäðåñ ó ïðîâàéäåðà ïîëó÷èòü íåëüçÿ.
Ïîýòîìó ïðèõîäèòüñÿ èñêàòü òàêîå ðåøåíèå, êîòðîå ïîçâîëèëî áû ñîåäèíèòü ñåòè â îáîèõ ïîìåùåíèÿõ è ïîëó÷èòü äîñòóï â Èíòåðíåò äëÿ ËÂÑ2 ÷åðåç ðîóòåð ASUS WL-500G Premium, èíñòàëëèðîâàííûé â ËÂÑ1.
Íàñòðîéêè è ðåñóðñû ÊÑ ðàçðåøàþò ñîåäèíåíèå îáåèõ ñåòåé (ËÂÑ1 è ËÂÑ2).

Ïîêà ðåàëèçîâàíî òàêîå ðåøåíèå.
Ðîóòåð ASUS WL-500G Premium èíñòàëèðîâàí â ËÂÑ1 (192.168.2.X). Õâîñò îò ÊÑ ïîäêëþ÷åí â WAN ïîðò íà ðîóòåðå. Íà WAN ïîðòå íàñòðîåí ñòàòè÷åñêèé IP-àäðåñ (193.233.XXX.XXX), ïðåäîñòàâëåííûé ïðîâàéäåðîì.
Âñå ðàáîòàåò îòëè÷íî. Äîñòóï â Èíòåðíåò â ËÂÑ1 èìååòñÿ. Íî ËÂÑ2 â òàêîì ñëó÷àå ïîëó÷àåòñÿ îòðåçàííîé, êàê îò Èíòåðíåòà, òàê è îò ðåñóðñîâ îðãàíèçàöèè, ðàçìåùåííûõ â ËÂÑ1, ïîñêîëüêó
ðîòóåð íàäåæíî çàùèùàåò ëîêàëüíóþ ñåòü ËÂÑ1 îò WAN äîñòóïà ñíàðóæè, êàê èç Èíòåðíåòà, òàê è èç ÊÑ.

Ïîýòîìó äëÿ ïîëíîöåííîãî ôóíêöèîíèðîâàíèÿ îðãàíèçàöèè íóæíî ïîïûòàòüñÿ âûïîëíèòü ñëåäóþùèå çàäà÷è:

1. Ñðåäñòâàìè ðîóòåðà îðãàíèçîâàòü äîñòóï èç ËÂÑ2 (192.168.5.X) ê óñòðîéñòâàì ËÂÑ1 (192.168.2.X) (ïðèíòåðàì, ñåòåâûì àðõèâàì è ò.ä.).
2. Ñðåäñòâàìè ðîóòåðà îðãàíèçîâàòü äîñòóï èç ËÂÑ1 (192.168.2.X) ê óñòðîéñòâàì ËÂÑ2 (192.168.5.X) (ïðèíòåðàì, ñåòåâûì àðõèâàì è ò.ä.).
3. Ïîëó÷èòü äîñòóï â Èíòåðíåò èç ËÂÑ2 (192.168.5.X) ÷åðåç ðîóòåð, èíñòàëëèðîâàííûé â ËÂÑ1 (192.168.2.X).

Õî÷ó îòìåòèòü òî îáñòîÿòåëüñòâî ÷òî ÊÑ î÷åíü áîëüøàÿ. Îíà îáúåäèíÿåò íåñêîëüêî ìíîãîýòàæíûõ çàäíèé.  ýòîé ñåòè áðîäèò ñòîëüêî ðàçëè÷íûõ ëþäåé, æåëàíèé è ïàêåòîâ, ÷òî õîòåëîñü áû ìàêèñìàëüíî çàùèòèòü êàê ËÂÑ1, òàê è ËÂÑ2 îò íåñàíêöèîíèðîâàííîãî äîñòóïà.
Íàïðèìåð, ïî MAC àäðåñó. Èëè êàê-òî åùå...

Ê ñîæàëåíèþ, èçìåíåíèåì ñòðàíäàðòíûõ íàñòðîåê ðîóòåðà ASUS WL-500G Premium ÷åðåç WEB èíòåðôåéñ ðåøèòü âûøåïåðå÷èñëåííûå çàäà÷è íåâîçìîæíî.
Ïðåäïîëàãàþ, ÷òî ÷åðåç telnet ìîæíî òàê íàñòðîèòü ðîóòåð, ÷òî âñå çàðàáîòàåò.

Ïðîøó ñïåöèàëèñòîâ ïîìî÷ü ñ íàñòðîéêîé ðîóòåðà...
Çàðàíåå áëàãîäàðåí...

Ïîïðîáóþ áîëåå ÿñíî ñôîðìóëèðîâàòü âîçíèêàþùèå âîïðîñû.
Ìû èìååì ñëåäóþùèå ñåãìåíòû ñåòè:
ËÂÑ1 (192.168.2.X), øëþç 192.168.2.1, DNS 192.168.2.1 (LAN ïîðòû ASUS WL-500G)
ËÂÑ2 (192.168.5.X)
Èìååì ñòàòè÷åñêèé àäðåñ ïðîâàéäåðà, íàïðèìåð 193.233.X.PRV (WAN ïîðò ASUS WL-500G).
Èìååì øëþç ïðîâàéäåðà, íàïðèìåð 193.233.X.GAT (WAN ïîðò ASUS WL-500G)
Èìååì DNS ñåðâåðà ïðîâàéäåðà, íàïðèìåð 193.233.X.DN1 è 193.233.X.DN2 (WAN ïîðò ASUS WL-500G).
Ðîóòåð ASUS WL-500G èíñòàëèðîâàí â ËÂÑ1.
Íà ôèçè÷åñêîì óðîâíå ïàêåòû èç ËÂÑ2 ïîñòóïàþò ïî åäèíñòâåííîìó êàáåëþ UTP íà WAN ïîðò ðîóòåðà ASUS WL-500G.

Åñòü ïîíèìàíèå, ÷òî WAN ïîðòó ðîóòåðà ASUS WL-500G Premium ìîæíî ïðèñâîèòü âòîðîé IP-àäðåñ, íàïðèìåð 192.168.5.1, ñëåäóþùèìè êîìàíäàìè:

mkdir -p /usr/local/sbin
echo "#!/bin/sh" >> /usr/local/sbin/post-boot
chmod +x /usr/local/sbin/post-boot
echo ifconfig vlan1:0 192.168.5.1 netmask 255.255.255.0 up >> /usr/local/sbin/post-boot
flashfs save && flashfs commit && flashfs enable
reboot

Ïîñëå ýòèõ ìàíèïóëÿöèé IP-àäðåñ 192.168.5.1 ïîÿâëÿåòñÿ è ïèíãóåòñÿ.
À âîò äàëåå ñîâñåì íå ïîíÿòíî...
Êàêèìè êîìàíäàìè ìîæíî íàñòðîèòü ðîóòåð, ÷òîáû ýòîò âòîðîé IP-àäðåñ (192.168.5.1) íà WAN ïîðòå ñòàë øëþçîì è DNS ñåðâåðîì äëÿ ïîäñåòè 192.168.5.X, ò.å. ôàêòè÷åñêè LAN ïîðòîì ïîäñåòè 192.168.5.X?
Êàêèìè êîìàíäàìè ìîæíî çàäàòü ìàðøðóòèçàöèþ, ÷òîáû êîìïüþòåðû èç ïîäñåòè 192.168.5.X èìåëè äîñòóï â Èíòåðíåò ÷åðåç òîò æå ñàìûé ôèçè÷åñêèé WAN ïîðò, òîëüêî ÷åðåç ïåðâûé IP-àäðåñ 193.233.X.PRV (øëþç 193.233.X.GAT è DNS ñåðâåðà 193.233.X.DN1 è 193.233.X.DN2).
Êàêèìè êîìàíäàìè ìîæíî çàäàòü ìàðøðóòèçàöèþ, ÷òîáû êîìïüþòåðû èç ïîäñåòè 192.168.5.X èìåëè äîñòóï ê ðåñóðñàì ïîäñåòè 192.168.2.x (ñåòåâûì ïðèòåðàì è ýëåêòðîííûì àðõèâàì).

È, âîîáùå, âîçìîæíî ëè íàñòðîèòü ðîóòåð ASUS WL-500G Premium òàêèì îáðàçîì?

Ïîíèìàþ, ÷òî çàäà÷à ñëîæíàÿ, íî íàäåþñü, ÷òî âûñîêèé ïðîôåññèîíàëüíûé óðîâåíü, ïðèñóòñòâóþùèõ íà ôîðóìå ñïåöèàëèñòîâ, ïîçâîëèò åå ðåøèòü...
Çàðàíåå áëàãîäàðåí çà ïîìîùü...

ß äóìàþ, ÷òî áóäåò ïðàâèëüíåå ËÂÑ1 è ËÂÑ2 ïîäêëþ÷èòü ê LAN-ïîðòàì ðîóòåðà, òîëüêî âûäåëèòü äëÿ íèõ îòäåëüíûå vlan'û (êñòàòè, à wi-fi âû êàê èñïîëüçóåòå?). Çàòåì íàñòðîèòü iptables íà ïðîïóñê íîâûõ ïàêåòîâ ïî íàïðàâëåíèÿì vlan(ËÂÑ1) <-> vlan(ËÂÑ2), vlan(ËÂÑ1) -> wan, vlan(ËÂÑ2) -> wan. Íó, ÿñíîå äåëî, íàçíà÷èòü àäðåñ íà vlan(ËÂÑ2), ïîäíÿòü íà í¸ì (èëè ïåðåíàñòðîèòü) dnsmasq, íàñòðîèòü ìàðøðóòû. Äëÿ âçàèìîäåéñòâèÿ êîìïîâ èç ðàçíûõ ñåòåé (åñëè èìååòñÿ â âèäó samba/netbios), íàâåðíîå, ïîíàäîáèòñÿ ïîäíÿòü ñåðâåð WINS íà ðîóòåðå (ò.ê. broadcast íå ïðîéä¸ò ìåæäó ñåòÿìè).
È íå ôàêò, ÷òî òàêàÿ æåëåçêà ïîòÿíåò ìàðøðóòèçàöèþ ìåæäó âàøèìè ñåòÿìè íà íóæíîé ñêîðîñòè.