Turris a OpenVPN s TAP interface

[xIndian]

Zdravím,

potřeboval bych prosím poradit s debugem OpenVPN na routeru Turris. Povedlo se mi rozchodit TUN spojení, ale potřeboval bych rozjet TAP. To se však nedaří. Vše jsem nakonfiguroval podle různých návodů, nicméně se stále to neseje.

Konfiguraci mám následující:

/etc/config/firewall

config rule
            option target 'ACCEPT'
            option name 'VPN'
            option src 'wan'
            option dest_port '1194'
            option proto 'tcp udp'

/etc/config/network

config interface 'lan'
        option ifname 'eth0 eth1 tap0'
        option type 'bridge'
        option proto 'static'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option ipaddr '192.168.14.1'

/etc/config/openvpn

config 'openvpn' 'lan'
        option 'enable' '1'
        option 'tls_server' '1'
        option 'port' '1194'
        option 'proto' 'udp'
        option 'dev' 'tap0'
        option 'ca' '/etc/easy-rsa/keys/ca.crt'
        option 'cert' '/etc/easy-rsa/keys/server.crt'
        option 'key' '/etc/easy-rsa/keys/server.key'
        option 'dh' '/etc/easy-rsa/keys/dh1024.pem'
        option 'server_bridge' '192.168.14.1 255.255.255.0 192.168.14.20 192.168.14.60'
        list 'push' 'dhcp-option DNS 192.168.14.1'
        list 'push' 'redirect-gateway def1'
        option 'client_to_client' '1'
        option 'comp_lzo' 'yes'
        option 'keepalive' '10 120'
        option 'status' '/tmp/openvpn_tap0.status'
        option 'persist_key' '1'
        option 'persist_tun' '1'
        option 'verb' '3'
        option 'mute' '20'

a na straně klienta:

client
tls-client
dev tap
proto udp
remote moje.ip 1194
resolv-retry infinite
nobind
ca ca.crt
cert client.crt
key client.key
mute-replay-warnings
comp-lzo
verb 3
keepalive 10 120
persist-key
persist-tun

Poradíte prosím?

[Reklama]

[Lol Phirae]

To se však nedaří. Vše jsem nakonfiguroval podle různých návodů, nicméně se stále to neseje.

Bezva popis závady... 

[xIndian]

Dobrá, tak tedy podrobněji. Připojuji se z Win OpenVPN klienta.

Chybu to hlásí:

read UDPv4: COnnection reset by peer (WSAECONNRESET) (code=10054)

[xIndian]

Ještě upřesním výpis z klienta (po zapnutí Win firewallu):

Fri Apr 29 14:17:28 2016 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Feb  1 2016
Fri Apr 29 14:17:28 2016 Windows version 6.2 (Windows 8 or greater)
Fri Apr 29 14:17:28 2016 library versions: OpenSSL 1.0.1r  28 Jan 2016, LZO 2.09
Fri Apr 29 14:17:28 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Apr 29 14:17:28 2016 Need hold release from management interface, waiting...
Fri Apr 29 14:17:29 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Apr 29 14:17:29 2016 MANAGEMENT: CMD 'state on'
Fri Apr 29 14:17:29 2016 MANAGEMENT: CMD 'log all on'
Fri Apr 29 14:17:29 2016 MANAGEMENT: CMD 'hold off'
Fri Apr 29 14:17:29 2016 MANAGEMENT: CMD 'hold release'
Fri Apr 29 14:17:29 2016 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Apr 29 14:17:29 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Apr 29 14:17:29 2016 MANAGEMENT: >STATE:1461932249,RESOLVE,,,
Fri Apr 29 14:17:29 2016 UDPv4 link local: [undef]
Fri Apr 29 14:17:29 2016 UDPv4 link remote: [AF_INET]217.xx.xx.217:1194
Fri Apr 29 14:17:29 2016 MANAGEMENT: >STATE:1461932249,WAIT,,,
Fri Apr 29 14:18:29 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Apr 29 14:18:29 2016 TLS Error: TLS handshake failed
Fri Apr 29 14:18:29 2016 SIGUSR1[soft,tls-error] received, process restarting
Fri Apr 29 14:18:29 2016 MANAGEMENT: >STATE:1461932309,RECONNECTING,tls-error,,
Fri Apr 29 14:18:29 2016 Restart pause, 2 second(s)

[xIndian]

Tak nic, vyřešil jsem to rozchozením OVPN na Raspberry Pi... "Díky"

[Reklama]