openvpn a problem s routovanim (delsi)
Lukas Kocourek
lkocourek na gmail.com
Čtvrtek Duben 7 02:30:53 CEST 2005
Dobry den,
mam 2 pracoviste s gentoo firewally, navzajem propojene openvpn tunelem.
pracoviste A (openvpn jako server) ma lokalni subnet 192.168.2.0/24
pracoviste B (openvpn jako client) ma lokalni subnet 192.168.3.0/24
jako spojovaci subnet mam 172.16.1.0/29
Na obou stranach spustim openvpn, tunel se vytvori a servery se vidi:
server A
------------
tun0 Link encap:UNSPEC HWaddr
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.1.1 P-t-P:172.16.1.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:9 errors:0 dropped:0 overruns:0 frame:0
TX packets:94 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:756 (756.0 b) TX bytes:7896 (7.7 Kb)
ping 172.16.1.6
PING 172.16.1.6 (172.16.1.6) 56(84) bytes of data.
64 bytes from 172.16.1.6: icmp_seq=1 ttl=64 time=34.1 ms
64 bytes from 172.16.1.6: icmp_seq=2 ttl=64 time=33.1 ms
64 bytes from 172.16.1.6: icmp_seq=3 ttl=64 time=31.5 ms
64 bytes from 172.16.1.6: icmp_seq=4 ttl=64 time=33.7 ms
server B
------------
tun0 Link encap:UNSPEC HWaddr
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.1.6 P-t-P:172.16.1.5 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:9 errors:0 dropped:0 overruns:0 frame:0
TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:756 (756.0 b) TX bytes:756 (756.0 b)
ping 172.16.1.1
PING 172.16.1.1 (172.16.1.1) 56(84) bytes of data.
64 bytes from 172.16.1.1: icmp_seq=1 ttl=64 time=64.4 ms
64 bytes from 172.16.1.1: icmp_seq=2 ttl=64 time=30.2 ms
64 bytes from 172.16.1.1: icmp_seq=3 ttl=64 time=33.1 ms
64 bytes from 172.16.1.1: icmp_seq=4 ttl=64 time=33.5 ms
vzajemne staticke routy na vdalene site mam nastaveny...
server A
192.168.3.0 172.16.1.2 255.255.255.0 UG 0 0 0 tun0
server B
192.168.2.0 172.16.1.5 255.255.255.0 UG 0 0 0 tun0
kdyz pingnu ze serveru B na stroj v siti A.. napr
ping 192.168.2.11
PING 192.168.2.11 (192.168.2.11) 56(84) bytes of data.
64 bytes from 192.168.2.11: icmp_seq=1 ttl=127 time=51.0 ms
64 bytes from 192.168.2.11: icmp_seq=2 ttl=127 time=31.1 ms
64 bytes from 192.168.2.11: icmp_seq=3 ttl=127 time=33.1 ms
bez problemu to projde, kdyz chci pingnout ze serveru A na stroj v siti
B.. napr
ping 192.168.3.100
PING 192.168.3.100 (192.168.3.100) 56(84) bytes of data.
--- 192.168.3.100 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 3999ms
packety neprojdou... nechapu proc ?
Zkousel jsem tcpdumpem poslouchat na obou tun0 a zajimave je, ze na
serveru A jeste ten echo request vidim odchazet, ale na B uz mi
neprijde. Po nekolikahodinovem laborovani me uz opravdu nenapada v cem
by to mohlo byt (firewall, ip_forward i rp_filter jsou mimo hru, to jsem
vse zkousel vypnout/zapnout). Poradi nekdo prosim ?
diky
--
Lukas Kocourek
Další informace o konferenci Linux