VPN pomoci vtun

[Hanz]

Ahoj vsichni,
snazim se rozjet VPN mezi dvema servery (192.168.1.1 a 192.168.1.2) ,
ktery jsou na stejnem ethernetovem segmentu. Vybral jsem
si reseni pres vtun http://vtun.sourceforge.net/ ,protoze
umi navic omezovat a komprimovat .

Nize popsane konfigurace startuji prikazem:

vtund -s  ... pro server s IP 192.168.1.1 a na TAP rozhrani 192.168.1.3
vtund test 192.168.1.1  ... pro server s IP 192.168.1.2 a na TAP rozhrani
192.168.1.4

Na obou serverech korektne naskoci TAP rozhrani ,upravi se spravne routovani
(viz nize),
ale kdyz se snazim pingnout z jedne masiny na druhou ,tak dostanu hlasku
"Destination Host Unreachable" ,myslim si ,ze problem je nekde v routovani
...
..ale kde?

Nebo vite nekdo lepsi reseni pro transparentni sifrovani,komprimaci dat mezi
dvema servery?

Uz si s tim hraju 3 den a nevim jak dal.... dik za kazdou radu.
HANZ



###-----SERVER (1) -192.168.1.1
###--------------------------------
options {
  port 5000;
  syslog        daemon;
  ppp           /usr/sbin/pppd;
  ifconfig      /sbin/ifconfig;
  route         /sbin/route;
  firewall      /sbin/iptables;
  ip            /sbin/ip;
}

default {
  type ether;
  proto udp;
  persist yes;
  encr  yes;
}

test {
  pass test;

up{
ifconfig "%% 192.168.1.3 netmask 255.255.255.0";
route "add -host 192.168.1.4 dev %%";
    };

down{
ifconfig "%% down";
    };
}

## ROUTOVACI TABULKA PO STARTU VTUND
192.168.1.4       *               255.255.255.255  UH    0      0      0
tap0
192.168.1.0       *               255.255.255.0  U     0      0        0
eth0
127.0.0.0           *               255.0.0.0         U     0      0
0 lo
default         192.168.1.22    0.0.0.0         UG    0      0        0 eth0



###
###-----SERVER (2) -192.168.1.2
###--------------------------------
options {
  port 5000;
  syslog        daemon;
  ppp           /usr/sbin/pppd;
  ifconfig      /sbin/ifconfig;
  route         /sbin/route;
  firewall      /sbin/iptables;
  ip            /sbin/ip;
}

default {
  type ether;
  proto udp;
  persist yes;
  encr  yes;
}

test {
  pass test;

up{
ifconfig "%% 192.168.1.4 netmask 255.255.255.0";
route "add -host 192.168.1.3 dev %%";
    };

down{
ifconfig "%% down";
    };
}

## ROUTOVACI TABULKA PO STARTU VTUND
192.168.1.3       *               255.255.255.255  UH    0      0      0
tap0
192.168.1.0       *               255.255.255.0  U     0      0        0
eth0
127.0.0.0           *               255.0.0.0         U     0      0
0 lo
default         192.168.1.22    0.0.0.0         UG    0      0        0 eth0