Persist-key persist-tun # If you are connecting through an # HTTP proxy to reach the actual OpenVPN # server, put the. # # 2048 bit OpenVPN static. Unique VPN we bring to your attention access to the most private servers, we guarantee 100% anonymity, high degree of encryption of these services.
Доброго времени суток!
Не могу последний месяц подключиться ни к одному вашему серверу. До этого все было нормально.
Ниже прикладываю лог.
Tue May 24 00:23:53 2016 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan 4 2016
Tue May 24 00:23:53 2016 Windows version 6.2 (Windows 8 or greater)
Tue May 24 00:23:53 2016 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Enter Management Password:
Tue May 24 00:24:34 2016 Control Channel Authentication: tls-auth using INLINE static key file
Tue May 24 00:24:34 2016 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue May 24 00:24:34 2016 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue May 24 00:24:34 2016 UDPv4 link local: [undef]
Tue May 24 00:24:34 2016 UDPv4 link remote: [AF_INET]46.30.45.178:19135
Tue May 24 00:24:36 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue May 24 00:25:36 2016 [UNDEF] Inactivity timeout (--ping-restart), restarting
Tue May 24 00:25:36 2016 SIGUSR1[soft,ping-restart] received, process restarting
Tue May 24 00:25:38 2016 Control Channel Authentication: tls-auth using INLINE static key file
Tue May 24 00:25:38 2016 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue May 24 00:25:38 2016 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue May 24 00:25:38 2016 UDPv4 link local: [undef]
Tue May 24 00:25:38 2016 UDPv4 link remote: [AF_INET]46.30.45.178:19135
Èçíà÷àëüíî - ïîñòàíîâêà çàäà÷è:
- åñòü Ôîëèî-Ñêëàä è Ôîëèî-Êëèåíò (ðàáîòàþò ïîä SQL)
- áàçà ñêëàäà óñòàíîâëåíà íà ñåðâåðå â ëîêàëüíîé ñåòè
- êëèåíò íàõîäèòñÿ â äðóãîì ãîðîäå
- ìàøèíà ñ áàçîé ñòîèò â ñåòè, ãäå åñòü DSL-äîñòóï â Èíòåðíåò, ñåòü çàùèùåíà UserGate (firewall)
Òðåáóåòñÿ óñòàíîâèòü ñâÿçü ïî DSL ìåæäó ìàøèíîé-êëèåíòîì è ñåðâåðîì SQL. IP-àäðåñà ìàøèí ñòàòè÷åñêèå.
Ïîñòàâèëè openVPN(ñåðâåð) íà ëîêàëüíûé ñåðâåð, êëèåíòñêóþ ÷àñòü - íà ìàøèíó êëèåíòà.
Êàê íàì íàñòðîèòü êîíôèãóðàöèþ openVPN?
Èçâèíÿþñü, åñëè îøèáñÿ òåìîé. Ñïàñèáî.
Âîîáùå-òî íà ñàéòå OpenVPN åñòü íåïëîõàÿ ïîäáîðêà òóòîðèàëîâ íà âñå ñëó÷àè æèçíè.
ß ïîíèìàþ âàì íóæíî ïðîñòîå ïîäêëþ÷åíèå òî÷êà-òî÷êà, äëÿ åäèíñòâåííîãî êëèåíòà.
http://openvpn.net/static.html
åñëè êëèåíòîâ íåñêîëüêî - íóæíî ïîëüçîâàòüñÿ äðóãèì òóòîðèàëîì, êîòîðûé òîæå ëåæèò íà ñàéòå.
Åñëè ìîæíî, Âàø íîìåð ICQ èëè òåëåôîí íà design[at]yandex.ru
Î÷åíü íóæíà êîíñóëüòàöèÿ. Îïëàòà çà ýòî áóäåò.
Ìîé íîìåð ICQ UIN 249755113
Êòî-íèáóäü ìîæåò ìíå ïîìî÷ü?
Ïîìîãèòå íàñòðîèòü OpenVPN.
Èìååòñÿ ìîÿ ñåòü â îôèñå îò îáû÷íîãî ðîóòåðà. Ïðîâàéäåð áåñïðîâîäíîé. Âíóòðåííÿÿ ñåòü íà ðîóòåðå çàäàåòñÿ âðó÷íóþ ó ìåíÿ 192.168.3.1
Èìååòñÿ ñåòü èç Ãåðìàíèè. 172.18.7.254 mask 255.255.254.0. Çàéòè íà îïðåäåëåííûé ñåðâåð â íåìåöêîé ñåòè ìû ìîæåì òîëüêî ÷åðåç ïðîìåæóòî÷íûé ñåðâåð. ÂÏÍ íóæåí êàê ðàç äëÿ òîãî ÷òîáû îáîãíóòü ýòîò ñåðâàê è âûéòè ñðàçó íàïðÿìóþ.
Generate 2048 Bit Openvpn Static Key Cipher
Êîíôèãè:
Generate 2048 Bit Openvpn Static Key Word
client
dev tun0
proto udp
remote 195.30.97.228 1194
resolv-retry infinite
nobind
persist-key
persist-tun
pkcs12 'C:Program FilesOpenVPNconfigprivateemartynov.p12'
tls-auth 'C:Program FilesOpenVPNconfigprivateta.key' 1
cipher AES-256-CBC
comp-lzo
verb 3
Ëîã êîííåêòà:
Tue Jun 15 17:01:14 2010 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 11 2009
Tue Jun 15 17:01:14 2010 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jun 15 17:01:14 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Jun 15 17:05:20 2010 WARNING: this configuration may cache passwords in memory — use the auth-nocache option to prevent this
Tue Jun 15 17:05:20 2010 Control Channel Authentication: using 'C:Program FilesOpenVPNconfigprivateta.key' as a OpenVPN static key file
Tue Jun 15 17:05:20 2010 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 15 17:05:20 2010 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 15 17:05:20 2010 LZO compression initialized
Tue Jun 15 17:05:20 2010 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Jun 15 17:05:20 2010 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jun 15 17:05:20 2010 Local Options hash (VER=V4): '9e7066d2'
Tue Jun 15 17:05:20 2010 Expected Remote Options hash (VER=V4): '162b04de'
Tue Jun 15 17:05:20 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jun 15 17:05:20 2010 UDPv4 link local: [undef]
Tue Jun 15 17:05:20 2010 UDPv4 link remote: 195.30.97.228:1194
Tue Jun 15 17:05:20 2010 TLS: Initial packet from 195.30.97.228:1194, sid=6eb5183b 4633c1a0
Tue Jun 15 17:05:22 2010 VERIFY OK: depth=1, /C=DE/O=matrix_technology_AG/OU=Trustcenter/CN=matrix_AG_Root_CA/emailAddress=Trustcenter@matrix.AG
Tue Jun 15 17:05:22 2010 VERIFY OK: depth=0, /C=DE/O=matrix_technology_AG/OU=VPN_Server/CN=dat-mtx-vpn.matrix.AG
Tue Jun 15 17:05:25 2010 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 15 17:05:25 2010 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 15 17:05:25 2010 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 15 17:05:25 2010 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 15 17:05:25 2010 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Jun 15 17:05:25 2010 [dat-mtx-vpn.matrix.AG] Peer Connection Initiated with 195.30.97.228:1194
Tue Jun 15 17:05:28 2010 SENT CONTROL [dat-mtx-vpn.matrix.AG]: 'PUSH_REQUEST' (status=1)
Tue Jun 15 17:05:28 2010 PUSH: Received control message: 'PUSH_REPLY,route 10.26.0.0 255.255.240.0,dhcp-option DNS 10.26.4.11,dhcp-option DNS 10.26.2.10,dhcp-option DOMAIN dat.int,route 172.17.1.1,ping 10,ping-restart 120,ifconfig 172.18.0.3 172.18.0.4'
Tue Jun 15 17:05:28 2010 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jun 15 17:05:28 2010 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jun 15 17:05:28 2010 OPTIONS IMPORT: route options modified
Tue Jun 15 17:05:28 2010 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Jun 15 17:05:28 2010 ROUTE default_gateway=10.128.232.1
Tue Jun 15 17:05:28 2010 There is a problem in your selection of --ifconfig endpoints [local=172.18.0.3, remote=172.18.0.4]. The local and remote VPN endpoints must exist within the same 255.255.255.252 subnet. This is a limitation of --dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.
Tue Jun 15 17:05:28 2010 Exiting
×òî òî ñ äðàéâåðîì TAP-WIN32 êîòîðûé OpenVPN ñîçäàåò ñàì. ×òî èìåííî íå ïîéìó. Ïðè ýòîì:
[local=172.18.0.3, remote=172.18.0.4]. The local and remote VPN endpoints must exist within the same 255.255.255.252 subnet.
Êàê ëîêàë òàê è óäàëåííûé íå ëåæàò â 252 ìàñêå. Â êîíôèãàõ ïðîãè èõ íåò.
Ïîìîãèòå ðåøèòü ïðîáëåìó. Mac os x roomba app.
Òàê ïîêîðî÷å :)
Ìàñêà ñåðâåðà 255.255.255.0 â êëàññå Ñ. Êëèåíò æä¸ò 255.255.252.0