beginner admin
Зарегистрирован: 06.05.2007 Сообщения: 69
|
Добавлено: Сб Окт 13 2007 21:31 Заголовок сообщения: Vista и OpenVPN |
|
|
Вообщем такое дело.
Поставил Vista Ultimate x64. Есть два варианта подключения по OpenVPN. Конфиг, котрый коннектится без проблем:
;dev-node OpenVPN-SAT
dev tun
ifconfig 172.27.242.97 172.27.242.98
remote 82.211.176.2
port 52882
comp-lzo
secret ascjpt.key
;up /etc/openvpn/ascjpt.up
;user nobody
auth none
;inactive 600
tun-mtu 1500
replay-window 640 15
redirect-gateway
dhcp-option DNS 82.211.176.5
;dhcp-option DNS 213.138.110.132
dhcp-option DNS 91.144.150.1
dhcp-option DNS 91.144.148.1
verb 3
Лог для него:
Sat Oct 13 22:24:20 2007 OpenVPN 2.1_rc4 Win32-MinGW [SSL] [LZO2] built on Apr 25 2007
Sat Oct 13 22:24:20 2007 ******* WARNING *******: null MAC specified, no authentication will be used
Sat Oct 13 22:24:20 2007 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Oct 13 22:24:20 2007 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Oct 13 22:24:20 2007 LZO compression initialized
Sat Oct 13 22:24:20 2007 TAP-WIN32 device [OpenVPN-OPS] opened: \\.\Global\{FDB70A2C-D53E-410F-9441-1DA9152FF48F}.tap
Sat Oct 13 22:24:20 2007 TAP-Win32 Driver Version 9.3
Sat Oct 13 22:24:20 2007 TAP-Win32 MTU=1500
Sat Oct 13 22:24:20 2007 Notified TAP-Win32 driver to set a DHCP IP/netmask of 172.27.242.97/255.255.255.252 on interface {FDB70A2C-D53E-410F-9441-1DA9152FF48F} [DHCP-serv: 172.27.242.98, lease-time: 31536000]
Sat Oct 13 22:24:20 2007 Successful ARP Flush on interface [11] {FDB70A2C-D53E-410F-9441-1DA9152FF48F}
Sat Oct 13 22:24:20 2007 Data Channel MTU parms [ L:1525 D:1450 EF:25 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Oct 13 22:24:20 2007 Local Options hash (VER=V4): '10145cb4'
Sat Oct 13 22:24:20 2007 Expected Remote Options hash (VER=V4): 'a12200a5'
Sat Oct 13 22:24:20 2007 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Oct 13 22:24:20 2007 UDPv4 link local (bound): [undef]:52882
Sat Oct 13 22:24:20 2007 UDPv4 link remote: 82.211.176.2:52882
Sat Oct 13 22:24:30 2007 Peer Connection Initiated with 82.211.176.2:52882
Sat Oct 13 22:24:37 2007 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Sat Oct 13 22:24:37 2007 route ADD 82.211.176.2 MASK 255.255.255.255 10.10.14.65
Sat Oct 13 22:24:37 2007 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sat Oct 13 22:24:37 2007 Route addition via IPAPI succeeded [adaptive]
Sat Oct 13 22:24:37 2007 route DELETE 0.0.0.0 MASK 0.0.0.0 10.10.14.65
Sat Oct 13 22:24:37 2007 Route deletion via IPAPI succeeded [adaptive]
Sat Oct 13 22:24:37 2007 route ADD 0.0.0.0 MASK 0.0.0.0 172.27.242.98
Sat Oct 13 22:24:37 2007 ROUTE: route addition failed using CreateIpForwardEntry: Неверны один или несколько аргументов. [status=160 if_index=11]
Sat Oct 13 22:24:37 2007 Route addition via IPAPI failed [adaptive]
Sat Oct 13 22:24:37 2007 Route addition fallback to route.exe
‘Ў®© ¤®Ў ў«ҐЁп ¬ аиагв : ќв®в ®ЎкҐЄв 㦥 бгйҐбвўгҐв.
Sat Oct 13 22:24:37 2007 Initialization Sequence Completed
Конфига, которая не хочет коннектиться:
;dev-node OpenVPN
tls-client
tls-auth "c:\\Program Files (x86)\\openvpn\\config\\ta.key"
dev tun
client
comp-lzo
remote xxxx
port 1194
proto udp
tun-mtu 1500
mssfix 1450
fragment 1450
verb 5
mute 10
;route-method exe
;route-delay 10
pkcs12 "c:\\Program Files (x86)\\openVPN\\config\\dima.p12"
cipher AES-256-CBC 256
Лог для него:
Sat Oct 13 22:27:23 2007 us=984000 Current Parameter Settings:
Sat Oct 13 22:27:23 2007 us=984000 config = 'client.ovpn'
Sat Oct 13 22:27:23 2007 us=984000 mode = 0
Sat Oct 13 22:27:23 2007 us=984000 show_ciphers = DISABLED
Sat Oct 13 22:27:23 2007 us=984000 show_digests = DISABLED
Sat Oct 13 22:27:24 2007 show_engines = DISABLED
Sat Oct 13 22:27:24 2007 genkey = DISABLED
Sat Oct 13 22:27:24 2007 key_pass_file = '[UNDEF]'
Sat Oct 13 22:27:24 2007 show_tls_ciphers = DISABLED
Sat Oct 13 22:27:24 2007 proto = 0
Sat Oct 13 22:27:24 2007 NOTE: --mute triggered...
Sat Oct 13 22:27:24 2007 241 variation(s) on previous 10 message(s) suppressed by --mute
Sat Oct 13 22:27:24 2007 OpenVPN 2.1_rc4 Win32-MinGW [SSL] [LZO2] built on Apr 25 2007
Sat Oct 13 22:27:24 2007 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Oct 13 22:27:24 2007 us=31000 Control Channel Authentication: using 'c:\Program Files (x86)\openvpn\config\ta.key' as a OpenVPN static key file
Sat Oct 13 22:27:24 2007 us=46000 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Oct 13 22:27:24 2007 us=46000 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Oct 13 22:27:24 2007 us=46000 LZO compression initialized
Sat Oct 13 22:27:24 2007 us=46000 Control Channel MTU parms [ L:1562 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Oct 13 22:27:24 2007 us=265000 Data Channel MTU parms [ L:1562 D:1450 EF:62 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Oct 13 22:27:24 2007 us=265000 Fragmentation MTU parms [ L:1562 D:1450 EF:61 EB:135 ET:1 EL:0 AF:3/1 ]
Sat Oct 13 22:27:24 2007 us=265000 Local Options String: 'V4,dev-type tun,link-mtu 1562,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Sat Oct 13 22:27:24 2007 us=265000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1562,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Sat Oct 13 22:27:24 2007 us=281000 Local Options hash (VER=V4): 'cbcea534'
Sat Oct 13 22:27:24 2007 us=281000 Expected Remote Options hash (VER=V4): 'e9ad447f'
Sat Oct 13 22:27:24 2007 us=281000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Oct 13 22:27:24 2007 us=281000 UDPv4 link local (bound): [undef]:1194
Sat Oct 13 22:27:24 2007 us=281000 UDPv4 link remote: x.x.x.x
И дальше не идёт.
Где грабли? Служба маршрутизации и удалённого доступа запущена. |
|