• Zarejestrowany: 2010-02-04
  • Posty: 204

Temat: Dziwny problem z openvpn

Serwer - LuCI - OpenWrt Attitude Adjustment 12.09.1 (r39408) - podstawowa konfiguracja
Klient
1.  linux
2.  openwrt - LuCI OpenWrt Attitude Adjustment 12.09.1 (r41503)

Jakiś podstawowy konfig klienta

client
remote host 1195
ca /etc/openvpn/ca.crt
cert /etc/openvpn/router.crt
key /etc/openvpn/router.key
dev tun
proto udp
nobind
auth-nocache
script-security 2
persist-key
persist-tun
comp-lzo
verb 3

Na linuxie nie ma problemów wszystko jest ok.
Jeśli łącze się z rutera (z tym samym konfigiem) to dzieją się dziwne rzeczy.
- połączenie się zestawia, wszystko wygląda ok

Jul 24 22:02:58 OpenWrt daemon.notice openvpn(client_tun)[2823]: LZO compression initialized
Jul 24 22:02:58 OpenWrt daemon.notice openvpn(client_tun)[2823]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jul 24 22:02:58 OpenWrt daemon.notice openvpn(client_tun)[2823]: Socket Buffers: R=[163840->131072] S=[163840->131072]
Jul 24 22:02:58 OpenWrt daemon.notice openvpn(client_tun)[2823]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Jul 24 22:02:58 OpenWrt daemon.notice openvpn(client_tun)[2823]: UDPv4 link local: [undef]
Jul 24 22:02:58 OpenWrt daemon.notice openvpn(client_tun)[2823]: UDPv4 link remote: y.y.y.y:1195
Jul 24 22:02:59 OpenWrt daemon.notice openvpn(client_tun)[2823]: TLS: Initial packet from y.y.y.y:1195, sid=3368db2a 7c8d1b3b
Jul 24 22:03:00 OpenWrt daemon.notice openvpn(client_tun)[2823]: VERIFY OK: depth=1, /C=PL/xxxx
Jul 24 22:03:00 OpenWrt daemon.notice openvpn(client_tun)[2823]: VERIFY OK: depth=0, /C=PL/yyyy
Jul 24 22:03:05 OpenWrt daemon.notice openvpn(client_tun)[2823]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jul 24 22:03:05 OpenWrt daemon.notice openvpn(client_tun)[2823]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 24 22:03:05 OpenWrt daemon.notice openvpn(client_tun)[2823]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Jul 24 22:03:05 OpenWrt daemon.notice openvpn(client_tun)[2823]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 24 22:03:05 OpenWrt daemon.notice openvpn(client_tun)[2823]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 24 22:03:05 OpenWrt daemon.notice openvpn(client_tun)[2823]: [server] Peer Connection Initiated with 89.71.107.102:1195
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13'
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: OPTIONS IMPORT: timers and/or timeouts modified
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: OPTIONS IMPORT: --ifconfig/up options modified
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: OPTIONS IMPORT: route options modified
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: TUN/TAP device tun0 opened
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: TUN/TAP TX queue length set to 100
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: /sbin/ifconfig tun0 10.8.0.14 pointopoint 10.8.0.13 mtu 1500
Jul 24 22:03:07 OpenWrt daemon.notice openvpn(client_tun)[2823]: /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.13
Jul 24 22:03:08 OpenWrt daemon.notice openvpn(client_tun)[2823]: Initialization Sequence Completed
root@OpenWrt:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         10.64.64.64     0.0.0.0         UG    0      0        0 3g-wan
10.8.0.0        10.8.0.13       255.255.255.0   UG    0      0        0 tun0
10.8.0.13       *               255.255.255.255 UH    0      0        0 tun0
10.64.64.64     *               255.255.255.255 UH    0      0        0 3g-wan
192.168.1.0     *               255.255.255.0   U     0      0        0 br-lan

ale dalej już jest dziwnie

root@OpenWrt:~# traceroute 10.8.0.1
traceroute to 10.8.0.1 (10.8.0.1), 30 hops max, 38 byte packets
 1  10.31.241.178 (10.31.241.178)  99.011 ms  65.360 ms  59.697 ms
 2  10.31.241.181 (10.31.241.181)  69.833 ms  78.073 ms  79.468 ms
 3  194.176.51.197 (194.176.51.197)  90.269 ms  88.894 ms  69.243 ms
 4  194.176.51.145 (194.176.51.145)  79.930 ms  77.995 ms  79.667 ms

Ma ktoś pomysł dlaczego nie wchodzi to na tun0 ?