[FUG-BR] OpenVPN - Não pinga o servidor
Bruno Oliveira
brnolvr84 em gmail.com
Segunda Agosto 24 09:30:11 BRT 2009
Bruno Weck,
Sempre que é forçada a configuração do IP no cliente Windows OpenVPN,
a conexão não é mais realizada.
Atenciosamente,
Bruno Henrique de Oliveira.
2009/8/22 Bruno Weck <ike.weck em gmail.com>:
> posso estar falando besteira, mas experimenta colocar a mascara na
> mesma classe, 255.255.255.0, só pra teste.. manda o resultado pra
> gente..
>
> 2009/8/21 Matheus Weber da Conceição <matheuswcon em gmail.com>:
>> Tenta usar uma rede diferente para os clientes VPN..
>>
>> por exemplo, o servidor está na 192.168.1.0 e rede da VPN usa 192.168.5.0..
>>
>> Outra coisa.. verifica em que rede está o cliente.. se tiver igual a
>> rede da VPN vai dar conflito e não vai pingar mesmo...
>>
>> 2009/8/21 Bruno Oliveira <brnolvr84 em gmail.com>:
>>> Coloque, porém não resolveu, continua sem pingar.
>>>
>>> 2009/8/21 mantunes <mantunes.listas em gmail.com>:
>>>> coloque no server.conf
>>>>
>>>>
>>>> dev tun
>>>>> port 1194
>>>>> proto udp
>>>>> server 10.0.0.0 255.255.255.0
>>>> push "route <sua rede>"
>>>>> ifconfig-pool-persist ipp.txt
>>>>> ca /usr/local/etc/openvpn/easy-rsa/keys/ca.crt
>>>>> cert /usr/local/etc/openvpn/easy-rsa/keys/probhcdp01.crt
>>>>> key /usr/local/etc/openvpn/easy-rsa/keys/probhcdp01.key
>>>>> dh /usr/local/etc/openvpn/easy-rsa/keys/dh1024.pem
>>>>> comp-lzo
>>>>> ping-timer-rem
>>>>> persist-tun
>>>>> persist-key
>>>>> group nobody
>>>>> daemon
>>>>> mute 5
>>>>
>>>>
>>>> exemplo :
>>>> push "route 172.31.1.48 255.255.255.248"
>>>> é minha rede local.
>>>>
>>>> 2009/8/21 Bruno Oliveira <brnolvr84 em gmail.com>:
>>>>> Informações sobre a configuração
>>>>>
>>>>> Saída do comando "route print" no cliente VPN:
>>>>>
>>>>> Tabela de rotas IPv4
>>>>> ===========================================================================
>>>>> Lista de interfaces
>>>>> 0x1 ........................... MS TCP Loopback interface
>>>>> 0x150005 ...00 0c 29 b4 81 70 ...... Intel(R) PRO/1000 MT Network Connection
>>>>> 0x170003 ...00 ff 00 ab a7 21 ...... TAP-Win32 Adapter V9
>>>>> 0x1e0004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
>>>>> ===========================================================================
>>>>> ===========================================================================
>>>>> Rotas ativas:
>>>>> Endere‡o de rede M scara Ender. gateway Interface Custo
>>>>> 0.0.0.0 0.0.0.0 187.42.24.46 187.42.24.46 1
>>>>> 10.0.0.1 255.255.255.255 10.0.0.5 10.0.0.6 1
>>>>> 10.0.0.4 255.255.255.252 10.0.0.6 10.0.0.6 30
>>>>> 10.0.0.6 255.255.255.255 127.0.0.1 127.0.0.1 30
>>>>> 10.255.255.255 255.255.255.255 10.0.0.6 10.0.0.6 30
>>>>> 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
>>>>> 187.42.24.46 255.255.255.255 127.0.0.1 127.0.0.1 50
>>>>> 187.42.255.255 255.255.255.255 187.42.24.46 187.42.24.46 50
>>>>> 192.168.7.0 255.255.255.0 192.168.7.100 192.168.7.100 10
>>>>> 192.168.7.100 255.255.255.255 127.0.0.1 127.0.0.1 10
>>>>> 192.168.7.255 255.255.255.255 192.168.7.100 192.168.7.100 10
>>>>> 224.0.0.0 240.0.0.0 10.0.0.6 10.0.0.6 30
>>>>> 224.0.0.0 240.0.0.0 192.168.7.100 192.168.7.100 10
>>>>> 224.0.0.0 240.0.0.0 187.42.24.46 187.42.24.46 1
>>>>> 255.255.255.255 255.255.255.255 10.0.0.6 10.0.0.6 1
>>>>> 255.255.255.255 255.255.255.255 187.42.24.46 187.42.24.46 1
>>>>> 255.255.255.255 255.255.255.255 192.168.7.100 192.168.7.100 1
>>>>> Gateway padrÆo: 187.42.24.46
>>>>> ===========================================================================
>>>>> Rotas persistentes:
>>>>> Nenhuma
>>>>>
>>>>> Configuração VPN do cliente:
>>>>>
>>>>> client
>>>>> remote nomedoservidor 1194
>>>>> dev tun
>>>>> comp-lzo
>>>>> ca ca.crt
>>>>> cert probhcdp02.crt
>>>>> key probhcdp02.key
>>>>> group nobody
>>>>> verb 3
>>>>> mute-replay-warnings
>>>>> mute 20
>>>>>
>>>>> Configuração do servidor:
>>>>>
>>>>> dev tun
>>>>> port 1194
>>>>> proto udp
>>>>> server 10.0.0.0 255.255.255.0
>>>>> ifconfig-pool-persist ipp.txt
>>>>> ca /usr/local/etc/openvpn/easy-rsa/keys/ca.crt
>>>>> cert /usr/local/etc/openvpn/easy-rsa/keys/probhcdp01.crt
>>>>> key /usr/local/etc/openvpn/easy-rsa/keys/probhcdp01.key
>>>>> dh /usr/local/etc/openvpn/easy-rsa/keys/dh1024.pem
>>>>> comp-lzo
>>>>> ping-timer-rem
>>>>> persist-tun
>>>>> persist-key
>>>>> group nobody
>>>>> daemon
>>>>> mute 5
>>>>>
>>>>> Desde já agradeço.
>>>>>
>>>>> Atenciosamente,
>>>>> Bruno Henrique de Oliveira
>>>>>
>>>>> 2009/8/21 mantunes <mantunes.listas em gmail.com>
>>>>>
>>>>>>
>>>>>> Não..
>>>>>> ele pega mesmo a mascara 255.255.255.252
>>>>>> manda o seu .conf aqui para lista.. veja se no windows
>>>>>> 2003 ele pegou as rotas (comando route print)
>>>>>>
>>>>>>
>>>>>> 2009/8/21 Bruno Oliveira <brnolvr84 em gmail.com>:
>>>>>>
>>>>>> > Boa tarde,
>>>>>> >
>>>>>> > Seguindo o tutorial¹ coloquei um servidor OpenVPN no FreeBSD 7.1 e
>>>>>> > configurei um cliente no Windows Server 2003, ambos com os firewalls
>>>>>> > desativados. O gateway redireciona a porta do OpenVPN via nat.
>>>>>> > A situação atual é:
>>>>>> > - Cliente Windows Server 2003 conectando no servidor FreeBSD;
>>>>>> > - O IP do servidor VPN é 10.0.0.1/255.255.255.0;
>>>>>> > - O IP que o cliente VPN está adquirindo é 10.0.0.6/255.255.255.252.
>>>>>> >
>>>>>> > O cliente VPN não pinga o servidor VPN e se não estou errado o cliente
>>>>>> > deveria pegar a máscara 255.255.255.255. O que poderia ser?
>>>>>> >
>>>>>> > Desde já agradeço.
>>>>>> >
>>>>>> > Atenciosamente,
>>>>>> > Bruno Henrique de Oliveira.
>>>>>> >
>>>>>> > ¹http://www.fug.com.br/content/view/173/60/
>>>>>>
>>>>>> > -------------------------
>>>>>> > Histórico: http://www.fug.com.br/historico/html/freebsd/
>>>>>> > Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>>>>>> >
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Marcio Antunes
>>>>>> Powered by FreeBSD
>>>>>> ==================================
>>>>>> * Windows: "Where do you want to go tomorrow?"
>>>>>> * Linux: "Where do you want to go today?"
>>>>>> * FreeBSD: "Are you, guys, comming or what?"
>>>>>> -------------------------
>>>>>> Histórico: http://www.fug.com.br/historico/html/freebsd/
>>>>>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>>>>>>
>>>>> -------------------------
>>>>> Histórico: http://www.fug.com.br/historico/html/freebsd/
>>>>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Marcio Antunes
>>>> Powered by FreeBSD
>>>> ==================================
>>>> * Windows: "Where do you want to go tomorrow?"
>>>> * Linux: "Where do you want to go today?"
>>>> * FreeBSD: "Are you, guys, comming or what?"
>>>> -------------------------
>>>> Histórico: http://www.fug.com.br/historico/html/freebsd/
>>>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>>>>
>>> -------------------------
>>> Histórico: http://www.fug.com.br/historico/html/freebsd/
>>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>>>
>>
>>
>>
>> --
>> ============================
>> Matheus Weber da Conceição
>> -------------------------
>> Histórico: http://www.fug.com.br/historico/html/freebsd/
>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>>
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>
Mais detalhes sobre a lista de discussão freebsd