Jump to content

Dream

Forum Members
 View Profile  See their activity

  • Posts

    2

  • Joined

  • Last visited

 Content Type 

Posts posted by Dream

    Вопросы по интеграции OpenVPN в NDMS

    in Обсуждение IPsec, OpenVPN и других туннелей

    Posted · Edited by Dream

    Спасибо большое) Только проблема возникла очень странная, я подключился как клиент, 5 сек соединение работало и всё) Такое ощущение openvpn забирает полностью соединение и отключает основное. Приоритет приходится выставлять равный основному подключению, иначе соединение остаётся резервным. После того как подключается тут же теряет соединение, ставишь для openvpn меньше значение перекидывает на основное соединение и связь восстанавливается

    Скрытый текст

     

    Oct 06 08:01:46ndm
    Network::Interface::Supplicant: "OpenVPN0": authnentication is unchanged.
    Oct 06 08:01:47ndm
    Network::Interface::Base: "OpenVPN0": description saved.
    Oct 06 08:01:47ndm
    Network::Interface::IP: "OpenVPN0": IP address cleared.
    Oct 06 08:01:47ndm
    Network::Interface::IP: "OpenVPN0": global priority enabled.
    Oct 06 08:01:47ndm
    Network::Interface::IP: "OpenVPN0": TCP-MSS adjustment enabled.
    Oct 06 08:01:47ndm
    Network::Interface::OpenVpn: "OpenVPN0": configuration successfully saved.
    Oct 06 08:01:47ndm
    Network::Interface::OpenVpn: "OpenVPN0": enable automatic routes accept via tunnel.
    Oct 06 08:01:47ndm
    Network::Interface::OpenVpn: "OpenVPN0": set connection via any interface.
    Oct 06 08:01:47ndm
    Network::Interface::Base: "OpenVPN0": interface is up.
    Oct 06 08:01:47ndm
    Network::Interface::Base: "OpenVPN0": schedule cleared.
    Oct 06 08:01:47ndm
    Core::ConfigurationSaver: saving configuration...
    Oct 06 08:01:48ndm
    Network::Interface::IP: "OpenVPN0": IP address cleared.
    Oct 06 08:01:48OpenVPN0
    event_wait : Interrupted system call (code=4)
    Oct 06 08:01:48OpenVPN0
    Closing TUN/TAP interface
    Oct 06 08:01:48OpenVPN0
    SIGINT[hard,] received, process exiting
    Oct 06 08:01:51OpenVPN0
    OpenVPN 2.4.4 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD]
    Oct 06 08:01:51OpenVPN0
    library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.10
    Oct 06 08:01:51OpenVPN0
    WARNING: --ping should normally be used with --ping-restart or --ping-exit
    Oct 06 08:01:51OpenVPN0
    Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
    Oct 06 08:01:51OpenVPN0
    Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
    Oct 06 08:01:51OpenVPN0
    TCP/UDP: Preserving recently used remote address: [AF_INET]91.210.105.101:1194
    Oct 06 08:01:51OpenVPN0
    Socket Buffers: R=[155648->155648] S=[155648->155648]
    Oct 06 08:01:51OpenVPN0
    UDP link local: (not bound)
    Oct 06 08:01:51OpenVPN0
    UDP link remote: [AF_INET]91.210.105.101:1194
    Oct 06 08:01:51OpenVPN0
    NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
    Oct 06 08:01:51OpenVPN0
    TLS: Initial packet from [AF_INET]91.210.105.101:1194, sid=XXXXXXX XXXXXXX
    Oct 06 08:01:51OpenVPN0
    VERIFY SCRIPT OK: depth=1, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=ru3.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
    Oct 06 08:01:51OpenVPN0
    VERIFY OK: depth=1, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=ru3.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
    Oct 06 08:01:51OpenVPN0
    VERIFY KU OK
    Oct 06 08:01:51OpenVPN0
    Validating certificate extended key usage
    Oct 06 08:01:51OpenVPN0
    ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
    Oct 06 08:01:51OpenVPN0
    VERIFY EKU OK
    Oct 06 08:01:51OpenVPN0
    VERIFY SCRIPT OK: depth=0, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=ru3.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
    Oct 06 08:01:51OpenVPN0
    VERIFY OK: depth=0, C=PA, ST=PA, L=Panama, O=NordVPN, OU=NordVPN, CN=ru3.nordvpn.com, name=NordVPN, emailAddress=cert@nordvpn.com
    Oct 06 08:01:52OpenVPN0
    Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
    Oct 06 08:01:52OpenVPN0
    [ru3.nordvpn.com] Peer Connection Initiated with [AF_INET]91.210.105.101:1194
    Oct 06 08:01:52ndm
    Network::Interface::OpenVpn: "OpenVPN0": added host route to remote endpoint 91.210.105.101 via 192.168.2.1.
    Oct 06 08:01:52ndm
    Core::ConfigurationSaver: configuration saved.
    Oct 06 08:01:53OpenVPN0
    SENT CONTROL [ru3.nordvpn.com]: 'PUSH_REQUEST' (status=1)
    Oct 06 08:01:53OpenVPN0
    PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,sndbuf 524288,rcvbuf 524288,dhcp-option DNS 78.46.223.24,dhcp-option DNS 162.242.211.137,route-gateway 10.8.8.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.8.126 255.255.255.0,peer-id 12,cipher AES-256-GCM'
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: timers and/or timeouts modified
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
    Oct 06 08:01:53OpenVPN0
    Socket Buffers: R=[155648->1048576] S=[155648->1048576]
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: --ifconfig/up options modified
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: route options modified
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: route-related options modified
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: peer-id set
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: adjusting link_mtu to 1657
    Oct 06 08:01:53OpenVPN0
    OPTIONS IMPORT: data channel crypto options modified
    Oct 06 08:01:53OpenVPN0
    Data Channel: using negotiated cipher 'AES-256-GCM'
    Oct 06 08:01:53OpenVPN0
    Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
    Oct 06 08:01:53OpenVPN0
    Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
    Oct 06 08:01:53OpenVPN0
    TUN/TAP device tun0 opened
    Oct 06 08:01:53OpenVPN0
    TUN/TAP TX queue length set to 100
    Oct 06 08:01:53OpenVPN0
    do_ifconfig, tt->did_ifconfig_ipv6_setup=0
    Oct 06 08:01:53ndm
    Network::Interface::IP: "OpenVPN0": IP address is 10.8.8.126/24.
    Oct 06 08:01:53ndm
    Network::Interface::OpenVpn: "OpenVPN0": install accepted default route via 10.8.8.1.
    Oct 06 08:01:54ndm
    Network::Interface::OpenVpn: "OpenVPN0": adding nameserver 78.46.223.24.
    Oct 06 08:01:54ndm
    Dns::Manager: name server 78.46.223.24 added, domain (default).
    Oct 06 08:01:54ndm
    Network::Interface::OpenVpn: "OpenVPN0": add route to nameserver 78.46.223.24 via 0.0.0.0 (OpenVPN0).
    Oct 06 08:01:54ndm
    Network::Interface::OpenVpn: "OpenVPN0": adding nameserver 162.242.211.137.
    Oct 06 08:01:54ndm
    Dns::Manager: name server 162.242.211.137 added, domain (default).
    Oct 06 08:01:54ndm
    Network::Interface::OpenVpn: "OpenVPN0": add route to nameserver 162.242.211.137 via 0.0.0.0 (OpenVPN0).
    Oct 06 08:01:54OpenVPN0
    GID set to nobody
    Oct 06 08:01:54OpenVPN0
    UID set to nobody
    Oct 06 08:01:54OpenVPN0
    Initialization Sequence Completed
    Oct 06 08:01:54ndm
    kernel: IPv4 conntrack wan: flushed 65 entries with address 192.168.2.10
    Oct 06 08:01:54ndm
    Network::InterfaceFlusher: flushed FastEthernet0/Vlan2 conntrack and route cache.
    Oct 06 08:01:54upnp
    shutting down MiniUPnPd
    Oct 06 08:01:54ndm
    Core::Server: client disconnected.
    Oct 06 08:01:56ndm
    Core::Server: started Session /var/run/ndm.core.socket.
    Oct 06 08:01:56upnp
    HTTP listening on port 41984
    Oct 06 08:01:56upnp
    Listening for NAT-PMP/PCP traffic on port 5351
    Oct 06 08:02:20ndm
    Network::InternetChecker: Internet access is disappeared.
    Oct 06 08:02:28ndm
    Cloud::Agent: can not connect to the cloud server.

     

     

    Вопросы по интеграции OpenVPN в NDMS

    in Обсуждение IPsec, OpenVPN и других туннелей

    Posted

    Добрый день, не увидел в теме. Подскажите пожалуйста мне нужно подключится по openvpn как клиент(приобрёл на месяц). Сейчас обновился на своём до 2.11.A.4.0-0. Как мне ввести логин и пароль для доступа? или это нужно как-то прописать?


    client
    dev tun
    proto udp
    remote xxx.xxxx.xxxxx.xxx
    resolv-retry infinite
    remote-random
    nobind
    tun-mtu 1500
    tun-mtu-extra 32
    mssfix 1450
    persist-key
    persist-tun
    ping 15
    ping-restart 0
    ping-timer-rem
    reneg-sec 0
    explicit-exit-notify 3

    remote-cert-tls server

    #mute 10000
    auth-user-pass

    comp-lzo
    verb 3
    pull
    fast-io
    cipher AES-256-CBC

    <ca>
    -----BEGIN CERTIFICATE-----
    xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    -----END CERTIFICATE-----
    </ca>
    key-direction 1
    <tls-auth>
    #
    # 2048 bit OpenVPN static key
    #
    -----BEGIN OpenVPN Static key V1-----
    xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    -----END OpenVPN Static key V1-----
    </tls-auth>

×
×
  • Create New...