Tema: VPN klausimas
Autorius: Ingodas Vytrastas
Data: 2010-01-22 13:14:57
# route -n
Kernel IP routing table
Destination  Gateway         Genmask         Flags  Iface
10.8.0.2       10.8.0.1        255.255.255.255 UGH  tun0
10.8.0.2       0.0.0.0         255.255.255.255 UH   tun0
192.168.3.0    10.8.0.1        255.255.255.0   UG   tun0
192.168.232.0  0.0.0.0         255.255.255.0   U    eth1
76.60.64.0     0.0.0.0         255.255.192.0   U    eth0
192.168.15.0   10.8.0.1        255.255.255.0   UG   tun0
0.0.0.0        76.60.127.254   0.0.0.0         UG   eth0

gw:~# ping 10.8.0.2
PING 10.8.0.2 (10.8.0.2) 56(84) bytes of data.
^C
--- 10.8.0.2 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2016ms

gw daemon.log:

Jan 22 13:07:25 gw openvpn[11958]: Data Channel MTU parms [ L:1545 
D:1450 EF:45 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 22 13:07:25 gw openvpn[11958]: Local Options String: 'V4,dev-type 
tun,link-mtu 1545,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 
10.8.0.1,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Jan 22 13:07:25 gw openvpn[11958]: Expected Remote Options String: 
'V4,dev-type tun,link-mtu 1545,tun-mtu 1500,proto UDPv4,ifconfig 
10.8.0.1 10.8.0.2,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Jan 22 13:07:25 gw openvpn[11958]: Local Options hash (VER=V4): '4b91e501'
Jan 22 13:07:25 gw openvpn[11958]: Expected Remote Options hash 
(VER=V4): '48593abd'
Jan 22 13:07:25 gw openvpn[11965]: Socket Buffers: R=[112640->131072] 
S=[112640->131072]
Jan 22 13:07:25 gw openvpn[11965]: UDPv4 link local (bound): [undef]
Jan 22 13:07:25 gw openvpn[11965]: UDPv4 link remote: 
[AF_INET]212.59.24.10:1194

kitame gale:

Jan 22 13:13:08 cd openvpn[31829]: LZO compression initialized
Jan 22 13:13:08 cd openvpn[31829]: TUN/TAP device tun0 opened
Jan 22 13:13:08 cd openvpn[31829]: /sbin/ifconfig tun0 10.8.0.2 
pointopoint 10.8.0.1 mtu 1500
Jan 22 13:13:08 cd openvpn[31834]: UDPv4 link local (bound): [undef]
Jan 22 13:13:08 cd openvpn[31834]: UDPv4 link remote: [undef]


Kodėl?
/proc/sys/net/ipv4/ip_forward - 1

mano iplentos INPUT, FORWARD, OUTPUT -j ACCEPT

gali būt kad pakeliui yra firewall'as, į kažkurią pusę blokuojantis VPN'ą?

-- 
  ejs