vpn-tunnel funktioniert noch nicht.

Einrichten des lokalen Netzes, Verbindung zu anderen Computern und Diensten.
Antworten
nixdorf
Beiträge: 450
Registriert: 12.11.2004 09:38:34

vpn-tunnel funktioniert noch nicht.

Beitrag von nixdorf » 10.10.2010 18:53:55

Hallo,

ich bin immer noch dabei eine VPN im Routing-Modus zwischen einem VPN-Server und einem VPN-Client aufzubauen. Der Server hängt hinter einem Speedport-Router und einer Firewall. Auf dem Speedport habe ich eine Weiterleitung für den VPN-Port eingerichtet. Auf der Firewall habe ich ebenfalls eine DNAT-Regel eingerichtet und alle Paketfilterreglen deaktiviert.

Ich kann die OpenVPN-Verbindung mit openvpn --remote 84.131.186.120 --dev tun0 --ifconfig 10.8.0.2 10.8.0.1 --verb 5 aufbauen.

hier ist der Output vom Log:

Code: Alles auswählen

Sun Oct 10 18:49:09 2010 us=561519 Current Parameter Settings:
Sun Oct 10 18:49:09 2010 us=561791   config = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=561851   mode = 0
Sun Oct 10 18:49:09 2010 us=561898   persist_config = DISABLED
Sun Oct 10 18:49:09 2010 us=561942   persist_mode = 1
Sun Oct 10 18:49:09 2010 us=561986   show_ciphers = DISABLED
Sun Oct 10 18:49:09 2010 us=562030   show_digests = DISABLED
Sun Oct 10 18:49:09 2010 us=562073   show_engines = DISABLED
Sun Oct 10 18:49:09 2010 us=562116   genkey = DISABLED
Sun Oct 10 18:49:09 2010 us=562159   key_pass_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=562202   show_tls_ciphers = DISABLED
Sun Oct 10 18:49:09 2010 us=562246 Connection profiles [default]:
Sun Oct 10 18:49:09 2010 us=562296   proto = udp
Sun Oct 10 18:49:09 2010 us=562340   local = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=562383   local_port = 1194
Sun Oct 10 18:49:09 2010 us=562426   remote = '84.131.186.120'
Sun Oct 10 18:49:09 2010 us=562469   remote_port = 1194
Sun Oct 10 18:49:09 2010 us=562512   remote_float = DISABLED
Sun Oct 10 18:49:09 2010 us=562554   bind_defined = DISABLED
Sun Oct 10 18:49:09 2010 us=562596   bind_local = ENABLED
Sun Oct 10 18:49:09 2010 us=562639   connect_retry_seconds = 5
Sun Oct 10 18:49:09 2010 us=562682   connect_timeout = 10
Sun Oct 10 18:49:09 2010 us=562724   connect_retry_max = 0
Sun Oct 10 18:49:09 2010 us=562767   socks_proxy_server = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=562809   socks_proxy_port = 0
Sun Oct 10 18:49:09 2010 us=562852   socks_proxy_retry = DISABLED
Sun Oct 10 18:49:09 2010 us=562899 Connection profiles END
Sun Oct 10 18:49:09 2010 us=562943   remote_random = DISABLED
Sun Oct 10 18:49:09 2010 us=562985   ipchange = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=563047   dev = 'tun0'
Sun Oct 10 18:49:09 2010 us=563095   dev_type = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=563137   dev_node = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=563179   lladdr = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=563221   topology = 1
Sun Oct 10 18:49:09 2010 us=563264   tun_ipv6 = DISABLED
Sun Oct 10 18:49:09 2010 us=563306   ifconfig_local = '10.8.0.2'
Sun Oct 10 18:49:09 2010 us=563349   ifconfig_remote_netmask = '10.8.0.1'
Sun Oct 10 18:49:09 2010 us=563392   ifconfig_noexec = DISABLED
Sun Oct 10 18:49:09 2010 us=563434   ifconfig_nowarn = DISABLED
Sun Oct 10 18:49:09 2010 us=563477   shaper = 0
Sun Oct 10 18:49:09 2010 us=563519   tun_mtu = 1500
Sun Oct 10 18:49:09 2010 us=563561   tun_mtu_defined = ENABLED
Sun Oct 10 18:49:09 2010 us=563604   link_mtu = 1500
Sun Oct 10 18:49:09 2010 us=563646   link_mtu_defined = DISABLED
Sun Oct 10 18:49:09 2010 us=563689   tun_mtu_extra = 0
Sun Oct 10 18:49:09 2010 us=563732   tun_mtu_extra_defined = DISABLED
Sun Oct 10 18:49:09 2010 us=563774   fragment = 0
Sun Oct 10 18:49:09 2010 us=563817   mtu_discover_type = -1
Sun Oct 10 18:49:09 2010 us=563859   mtu_test = 0
Sun Oct 10 18:49:09 2010 us=563902   mlock = DISABLED
Sun Oct 10 18:49:09 2010 us=563944   keepalive_ping = 0
Sun Oct 10 18:49:09 2010 us=563987   keepalive_timeout = 0
Sun Oct 10 18:49:09 2010 us=564029   inactivity_timeout = 0
Sun Oct 10 18:49:09 2010 us=564071   ping_send_timeout = 0
Sun Oct 10 18:49:09 2010 us=564113   ping_rec_timeout = 0
Sun Oct 10 18:49:09 2010 us=564155   ping_rec_timeout_action = 0
Sun Oct 10 18:49:09 2010 us=564198   ping_timer_remote = DISABLED
Sun Oct 10 18:49:09 2010 us=564241   remap_sigusr1 = 0
Sun Oct 10 18:49:09 2010 us=564284   explicit_exit_notification = 0
Sun Oct 10 18:49:09 2010 us=564326   persist_tun = DISABLED
Sun Oct 10 18:49:09 2010 us=564369   persist_local_ip = DISABLED
Sun Oct 10 18:49:09 2010 us=564411   persist_remote_ip = DISABLED
Sun Oct 10 18:49:09 2010 us=564454   persist_key = DISABLED
Sun Oct 10 18:49:09 2010 us=564496   mssfix = 1450
Sun Oct 10 18:49:09 2010 us=564538   passtos = DISABLED
Sun Oct 10 18:49:09 2010 us=564581   resolve_retry_seconds = 1000000000
Sun Oct 10 18:49:09 2010 us=564624   username = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=564666   groupname = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=564708   chroot_dir = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=564751   cd_dir = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=564811   writepid = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=564855   up_script = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=564897   down_script = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=564939   down_pre = DISABLED
Sun Oct 10 18:49:09 2010 us=564981   up_restart = DISABLED
Sun Oct 10 18:49:09 2010 us=565023   up_delay = DISABLED
Sun Oct 10 18:49:09 2010 us=565065   daemon = DISABLED
Sun Oct 10 18:49:09 2010 us=565108   inetd = 0
Sun Oct 10 18:49:09 2010 us=565150   log = DISABLED
Sun Oct 10 18:49:09 2010 us=565193   suppress_timestamps = DISABLED
Sun Oct 10 18:49:09 2010 us=565235   nice = 0
Sun Oct 10 18:49:09 2010 us=565278   verbosity = 5
Sun Oct 10 18:49:09 2010 us=565320   mute = 0
Sun Oct 10 18:49:09 2010 us=565362   gremlin = 0
Sun Oct 10 18:49:09 2010 us=565405   status_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=565447   status_file_version = 1
Sun Oct 10 18:49:09 2010 us=565490   status_file_update_freq = 60
Sun Oct 10 18:49:09 2010 us=565533   occ = ENABLED
Sun Oct 10 18:49:09 2010 us=565576   rcvbuf = 65536
Sun Oct 10 18:49:09 2010 us=565618   sndbuf = 65536
Sun Oct 10 18:49:09 2010 us=565661   sockflags = 0
Sun Oct 10 18:49:09 2010 us=565703   fast_io = DISABLED
Sun Oct 10 18:49:09 2010 us=565746   lzo = 0
Sun Oct 10 18:49:09 2010 us=565789   route_script = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=565832   route_default_gateway = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=565875   route_default_metric = 0
Sun Oct 10 18:49:09 2010 us=565918   route_noexec = DISABLED
Sun Oct 10 18:49:09 2010 us=565960   route_delay = 0
Sun Oct 10 18:49:09 2010 us=566003   route_delay_window = 30
Sun Oct 10 18:49:09 2010 us=566053   route_delay_defined = DISABLED
Sun Oct 10 18:49:09 2010 us=566097   route_nopull = DISABLED
Sun Oct 10 18:49:09 2010 us=566140   route_gateway_via_dhcp = DISABLED
Sun Oct 10 18:49:09 2010 us=566184   max_routes = 100
Sun Oct 10 18:49:09 2010 us=566227   allow_pull_fqdn = DISABLED
Sun Oct 10 18:49:09 2010 us=566272   management_addr = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=566315   management_port = 0
Sun Oct 10 18:49:09 2010 us=566358   management_user_pass = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=566402   management_log_history_cache = 250
Sun Oct 10 18:49:09 2010 us=566445   management_echo_buffer_size = 100
Sun Oct 10 18:49:09 2010 us=566489   management_write_peer_info_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=566533   management_client_user = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=566576   management_client_group = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=566620   management_flags = 0
Sun Oct 10 18:49:09 2010 us=566663   shared_secret_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=566706   key_direction = 0
Sun Oct 10 18:49:09 2010 us=566750   ciphername_defined = ENABLED
Sun Oct 10 18:49:09 2010 us=566793   ciphername = 'BF-CBC'
Sun Oct 10 18:49:09 2010 us=566836   authname_defined = ENABLED
Sun Oct 10 18:49:09 2010 us=566879   authname = 'SHA1'
Sun Oct 10 18:49:09 2010 us=566923   prng_hash = 'SHA1'
Sun Oct 10 18:49:09 2010 us=566966   prng_nonce_secret_len = 16
Sun Oct 10 18:49:09 2010 us=567009   keysize = 0
Sun Oct 10 18:49:09 2010 us=567117   engine = DISABLED
Sun Oct 10 18:49:09 2010 us=567162   replay = ENABLED
Sun Oct 10 18:49:09 2010 us=567206   mute_replay_warnings = DISABLED
Sun Oct 10 18:49:09 2010 us=567249   replay_window = 64
Sun Oct 10 18:49:09 2010 us=567294   replay_time = 15
Sun Oct 10 18:49:09 2010 us=567311   packet_id_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567327   use_iv = ENABLED
Sun Oct 10 18:49:09 2010 us=567344   test_crypto = DISABLED
Sun Oct 10 18:49:09 2010 us=567360   tls_server = DISABLED
Sun Oct 10 18:49:09 2010 us=567376   tls_client = DISABLED
Sun Oct 10 18:49:09 2010 us=567393   key_method = 2
Sun Oct 10 18:49:09 2010 us=567409   ca_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567425   ca_path = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567442   dh_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567458   cert_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567475   priv_key_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567493   pkcs12_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567516   cipher_list = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567532   tls_verify = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567549   tls_remote = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567565   crl_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567582   ns_cert_type = 0
Sun Oct 10 18:49:09 2010 us=567598   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567615   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567631   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567648   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567664   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567680   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567697   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567713   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567729   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567746   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567762   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567779   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567795   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567812   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567828   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567844   remote_cert_ku[i] = 0
Sun Oct 10 18:49:09 2010 us=567861   remote_cert_eku = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=567877   tls_timeout = 2
Sun Oct 10 18:49:09 2010 us=567894   renegotiate_bytes = 0
Sun Oct 10 18:49:09 2010 us=567910   renegotiate_packets = 0
Sun Oct 10 18:49:09 2010 us=567927   renegotiate_seconds = 3600
Sun Oct 10 18:49:09 2010 us=567944   handshake_window = 60
Sun Oct 10 18:49:09 2010 us=567960   transition_window = 3600
Sun Oct 10 18:49:09 2010 us=567977   single_session = DISABLED
Sun Oct 10 18:49:09 2010 us=567993   tls_exit = DISABLED
Sun Oct 10 18:49:09 2010 us=568009   tls_auth_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=568026   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568043   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568060   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568076   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568092   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568109   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568125   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568142   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568158   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568175   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568191   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568208   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568224   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568252   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568271   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568289   pkcs11_protected_authentication = DISABLED
Sun Oct 10 18:49:09 2010 us=568308   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568326   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568345   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568363   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568382   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568399   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568417   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568435   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568453   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568471   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568489   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568507   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568525   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568543   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568569   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568588   pkcs11_private_mode = 00000000
Sun Oct 10 18:49:09 2010 us=568606   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568624   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568642   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568660   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568677   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568695   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568713   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568731   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568749   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568767   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568784   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568801   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568819   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568836   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568853   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568871   pkcs11_cert_private = DISABLED
Sun Oct 10 18:49:09 2010 us=568889   pkcs11_pin_cache_period = -1
Sun Oct 10 18:49:09 2010 us=568907   pkcs11_id = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=568924   pkcs11_id_management = DISABLED
Sun Oct 10 18:49:09 2010 us=568951   server_network = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=568971   server_netmask = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=568989   server_bridge_ip = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569008   server_bridge_netmask = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569027   server_bridge_pool_start = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569046   server_bridge_pool_end = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569063   ifconfig_pool_defined = DISABLED
Sun Oct 10 18:49:09 2010 us=569082   ifconfig_pool_start = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569101   ifconfig_pool_end = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569119   ifconfig_pool_netmask = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569137   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569155   ifconfig_pool_persist_refresh_freq = 600
Sun Oct 10 18:49:09 2010 us=569172   n_bcast_buf = 256
Sun Oct 10 18:49:09 2010 us=569190   tcp_queue_limit = 64
Sun Oct 10 18:49:09 2010 us=569207   real_hash_size = 256
Sun Oct 10 18:49:09 2010 us=569225   virtual_hash_size = 256
Sun Oct 10 18:49:09 2010 us=569242   client_connect_script = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569260   learn_address_script = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569278   client_disconnect_script = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569295   client_config_dir = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569313   ccd_exclusive = DISABLED
Sun Oct 10 18:49:09 2010 us=569330   tmp_dir = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569348   push_ifconfig_defined = DISABLED
Sun Oct 10 18:49:09 2010 us=569367   push_ifconfig_local = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569386   push_ifconfig_remote_netmask = 0.0.0.0
Sun Oct 10 18:49:09 2010 us=569403   enable_c2c = DISABLED
Sun Oct 10 18:49:09 2010 us=569420   duplicate_cn = DISABLED
Sun Oct 10 18:49:09 2010 us=569438   cf_max = 0
Sun Oct 10 18:49:09 2010 us=569456   cf_per = 0
Sun Oct 10 18:49:09 2010 us=569474   max_clients = 1024
Sun Oct 10 18:49:09 2010 us=569492   max_routes_per_client = 256
Sun Oct 10 18:49:09 2010 us=569509   auth_user_pass_verify_script = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569528   auth_user_pass_verify_script_via_file = DISABLED
Sun Oct 10 18:49:09 2010 us=569546   ssl_flags = 0
Sun Oct 10 18:49:09 2010 us=569564   port_share_host = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569582   port_share_port = 0
Sun Oct 10 18:49:09 2010 us=569600   client = DISABLED
Sun Oct 10 18:49:09 2010 us=569618   pull = DISABLED
Sun Oct 10 18:49:09 2010 us=569636   auth_user_pass_file = '[UNDEF]'
Sun Oct 10 18:49:09 2010 us=569655 OpenVPN 2.1.0 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 20 2010
Sun Oct 10 18:49:09 2010 us=569786 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Oct 10 18:49:09 2010 us=569807 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Oct 10 18:49:09 2010 us=569831 ******* WARNING *******: all encryption and authentication features disabled -- all data will be tunnelled as cleartext
Sun Oct 10 18:49:09 2010 us=572567 TUN/TAP device tun0 opened
Sun Oct 10 18:49:09 2010 us=572623 TUN/TAP TX queue length set to 100
Sun Oct 10 18:49:09 2010 us=572677 /sbin/ifconfig tun0 10.8.0.2 pointopoint 10.8.0.1 mtu 1500
Sun Oct 10 18:49:09 2010 us=575466 Data Channel MTU parms [ L:1500 D:1450 EF:0 EB:4 ET:0 EL:0 ]
Sun Oct 10 18:49:09 2010 us=575532 Local Options String: 'V4,dev-type tun,link-mtu 1500,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.1 10.8.0.2'
Sun Oct 10 18:49:09 2010 us=575552 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1500,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.2 10.8.0.1'
Sun Oct 10 18:49:09 2010 us=575598 Local Options hash (VER=V4): '00f97e1a'
Sun Oct 10 18:49:09 2010 us=575623 Expected Remote Options hash (VER=V4): '7cef60b0'
Sun Oct 10 18:49:09 2010 us=575657 Socket Buffers: R=[112640->131072] S=[112640->131072]
Sun Oct 10 18:49:09 2010 us=575681 UDPv4 link local (bound): [undef]
Sun Oct 10 18:49:09 2010 us=575701 UDPv4 link remote: [AF_INET]84.131.186.120:1194
Sun Oct 10 18:49:14 2010 us=658208 event_wait : Interrupted system call (code=4)
Sun Oct 10 18:49:14 2010 us=658352 TCP/UDP: Closing socket
Sun Oct 10 18:49:14 2010 us=658425 Closing TUN/TAP interface
Sun Oct 10 18:49:14 2010 us=658487 /sbin/ifconfig tun0 0.0.0.0
Sun Oct 10 18:49:14 2010 us=694190 SIGINT[hard,] received, process exiting
Das sieht doch soweit gut aus. Wenn ich aber dann vom Client aus einen ping auf 10.8.0.1 mache kommt der nicht an. Der Tunnel steht doch, also kann auch die Firewall den Ping nicht mehr stoppen oder?


Was muß ich machen, damit das VPN richtig funktioniert?


Gruß Nixdorf

gms
Beiträge: 7798
Registriert: 26.11.2004 20:08:38
Lizenz eigener Beiträge: MIT Lizenz

Re: vpn-tunnel funktioniert noch nicht.

Beitrag von gms » 10.10.2010 22:24:28

nixdorf hat geschrieben:

Code: Alles auswählen

...
Sun Oct 10 18:49:09 2010 us=575701 UDPv4 link remote: [AF_INET]84.131.186.120:1194
Sun Oct 10 18:49:14 2010 us=658208 event_wait : Interrupted system call (code=4)
...
Das sieht doch soweit gut aus.
sehe ich nicht so, wie kommst du darauf ?

Gruß
gms

Antworten