Pierwsze podejscie moje do openVPN wiec za głupie pytania z góry przepraszam;
Generalnie zależy mi aby chociaż podpiąć się lokalnie.
Przy prubie połączenia client wywala mi.
Mon Sep 26 16:47:56 2011 OpenVPN 2.2.1 Win32-MSVC++ [SSL] [LZO2] built on Jul 1 2011
Mon Sep 26 16:47:56 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Sep 26 16:47:56 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Sep 26 16:47:56 2011 LZO compression initialized
Mon Sep 26 16:47:56 2011 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Mon Sep 26 16:47:56 2011 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Sep 26 16:47:56 2011 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Sep 26 16:47:56 2011 Local Options hash (VER=V4): '69109d17'
Mon Sep 26 16:47:56 2011 Expected Remote Options hash (VER=V4): 'c0103fa8'
Mon Sep 26 16:47:56 2011 Attempting to establish TCP connection with xxx.xxx.xxx.xxx:1194
Mon Sep 26 16:47:57 2011 TCP: connect to xxx.xxx.xxx.xxx:1194 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Mon Sep 26 16:48:03 2011 TCP: connect to xxx.xxx.xxx.xxx:1194 failed, will try again in 5 seconds: Connection refused (WSAECONNREFUSED)
Mon Sep 26 16:48:08 2011 SIGTERM[hard,init_instance] received, process exiting
Config klienta:
client
dev tun
proto tcp
remote xxx.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "c:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "c:\\Program Files\\OpenVPN\\config\\tomekk.crt"
key "c:\\Program Files\\OpenVPN\\config\\tomekk.key"
comp-lzo
verb 3
Server Config:
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 4
mute 5
log-append /var/log/openvpn
tls-server
management 127.0.0.1 5002
management-log-cache 50
mtu-disc yes
topology subnet
client-config-dir /tmp/openvpn/peers
script-security 2
port 1194
proto udp
cipher bf-cbc
auth sha1
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
client-to-client
fast-io
tun-mtu 1500
server 10.10.10.1 255.255.255.0
dev tun0
została dodana reguła IP-Tables:
iptables -I INPUT 1 -p udp R11;dport 1194 -j ACCEPT
dodatkowo została dopisana regółka w powłoce
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 0.0.0.0 promisc up
sleep 3
/usr/sbin/iptables -I INPUT -p udp --dport 1194 -j ACCEPT
ntpclient 150.254.183.15
cd /tmp/openvpn
openvpn --config openvpn.conf --daemon
|
' target='_blank'>Link
