Jump to content

Алексей Воловиков

Forum Members
 View Profile  See their activity

  • Posts

    2

  • Joined

  • Last visited

 Content Type 

Posts posted by Алексей Воловиков

    Вопросы по интеграции OpenVPN в NDMS

    in Обсуждение IPsec, OpenVPN и других туннелей

    Posted · Edited by Алексей Воловиков

    А подскажите, пожалуйста, что с этим делать? По совету выше исправил на udp4, все прекрасно работало день, на следующий перестало - пишет на странице соединения No IP Address. Хотя в логе ничего критичного не вижу. Куда копать?

    Spoiler
    May 12 20:23:59
     
    ndm
    Core::Syslog: the system log has been cleared.
    May 12 20:24:03
     
    kernel
    IPv6: ADDRCONF(NETDEV_UP): ovpn_br0: link is not ready
    May 12 20:24:03
     
    ndm
    Network::Interface::Base: "OpenVPN0": interface is up.
    May 12 20:24:03
     
    ndm
    Core::ConfigurationSaver: saving configuration...
    May 12 20:24:06
     
    OpenVPN0
    OpenVPN 2.4.6 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD]
    May 12 20:24:06
     
    OpenVPN0
    library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10
    May 12 20:24:06
     
    OpenVPN0
    UDPv4 link local: (not bound)
    May 12 20:24:06
     
    OpenVPN0
    UDPv4 link remote: [AF_INET]185.14.28.10:1194
    May 12 20:24:06
     
    OpenVPN0
    NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
    May 12 20:24:07
     
    ndm
    Core::ConfigurationSaver: configuration saved.
    May 12 20:24:11
     
    OpenVPN0
    [nl6.pvpn.pw] Peer Connection Initiated with [AF_INET]185.14.28.10:1194
    May 12 20:24:11
     
    ndm
    Network::Interface::OpenVpn: "OpenVPN0": connecting via PPPoE0 (PPPoE0).
    May 12 20:24:11
     
    ndm
    Network::Interface::OpenVpn: "OpenVPN0": added host route to remote endpoint 185.14.28.10 via PPPoE0.
    May 12 20:24:17
     
    OpenVPN0
    WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
    May 12 20:24:17
     
    OpenVPN0
    WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
    May 12 20:24:17
     
    OpenVPN0
    WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
    May 12 20:24:17
     
    OpenVPN0
    TUN/TAP device tun0 opened
    May 12 20:24:17
     
    OpenVPN0
    do_ifconfig, tt->did_ifconfig_ipv6_setup=1
    May 12 20:24:17
     
    kernel
    IPv6: ADDRCONF(NETDEV_CHANGE): ovpn_br0: link becomes ready
    May 12 20:24:17
     
    ndm
    Network::Interface::Ip: "OpenVPN0": IP address is 192.168.101.3/24.
    May 12 20:24:17
     
    OpenVPN0
    IPv6 is not supported yet (ifconfig)
    May 12 20:24:18
     
    OpenVPN0
    add_route_ipv6(2000::/3 -> 2002:b90e:1c0a:1::1 metric -1) dev tun0
    May 12 20:24:18
     
    OpenVPN0
    IPv6 is not supported yet (add route)
    May 12 20:24:18
     
    OpenVPN0
    add_route_ipv6(::/3 -> 2002:b90e:1c0a:1::1 metric -1) dev tun0
    May 12 20:24:18
     
    OpenVPN0
    IPv6 is not supported yet (add route)
    May 12 20:24:18
     
    OpenVPN0
    add_route_ipv6(2000::/4 -> 2002:b90e:1c0a:1::1 metric -1) dev tun0
    May 12 20:24:18
     
    OpenVPN0
    IPv6 is not supported yet (add route)
    May 12 20:24:18
     
    OpenVPN0
    add_route_ipv6(3000::/4 -> 2002:b90e:1c0a:1::1 metric -1) dev tun0
    May 12 20:24:18
     
    OpenVPN0
    IPv6 is not supported yet (add route)
    May 12 20:24:18
     
    OpenVPN0
    add_route_ipv6(fc00::/7 -> 2002:b90e:1c0a:1::1 metric -1) dev tun0
    May 12 20:24:18
     
    OpenVPN0
    IPv6 is not supported yet (add route)
    May 12 20:24:18
     
    ndm
    Network::Interface::OpenVpn: "OpenVPN0": adding nameserver 192.168.101.1.
    May 12 20:24:18
     
    ndm
    Dns::Manager: name server 192.168.101.1 added, domain (default).
    May 12 20:24:18
     
    ndm
    Network::Interface::OpenVpn: "OpenVPN0": add route to nameserver 192.168.101.1 via 0.0.0.0 (OpenVPN0).
    May 12 20:24:18
     
    OpenVPN0
    GID set to nobody
    May 12 20:24:18
     
    OpenVPN0
    UID set to nobody
    May 12 20:24:18
     
    OpenVPN0
    Initialization Sequence Completed
    May 12 20:24:18
     
    ndm
    Http::Nginx: loaded SSL certificate for "61eefb62507a4b30d21eb455.keenetic.io".
    May 12 20:24:18
     
    ndm
    Http::Nginx: loaded SSL certificate for "hench.keenetic.pro".
    May 12 20:24:18
     
    ndm
    Core::Server: started Session /var/run/ndm.core.socket.
    May 12 20:24:18
     
    ndm
    Core::Session: client disconnected.
    May 12 20:24:19
     
    ndm
    Http::Manager: updated configuration.
    May 12 20:24:19
     
    ndm
    Core::Server: started Session /var/run/ndm.core.socket.
    May 12 20:24:19
     
    ndm
    Core::Session: client disconnected.
    May 12 20:24:21
     
    ndhcpc
    OpenVPN0: NDM DHCP client (version 3.2.37) started.
    May 12 20:24:21
     
    ndhcpc
    OpenVPN0: created PID file "/var/run/ndhcpc-ovpn_br0.pid".
    May 12 20:24:22
     
    ndm
    Network::Interface::Ip: "OpenVPN0": IP address cleared.
    May 12 20:24:22
     
    ndm
    Http::Nginx: loaded SSL certificate for "61eefb62507a4b30d21eb455.keenetic.io".
    May 12 20:24:22
     
    ndm
    Http::Nginx: loaded SSL certificate for "hench.keenetic.pro".
    May 12 20:24:23
     
    ndm
    Core::Server: started Session /var/run/ndm.core.socket.
    May 12 20:24:23
     
    ndm
    Core::Session: client disconnected.
    May 12 20:24:23
     
    ndm
    Http::Manager: updated configuration.
    May 12 20:24:23
     
    ndm
    Core::Server: started Session /var/run/ndm.core.socket.
    May 12 20:24:23
     
    ndm
    Core::Session: client disconnected.

    Вопросы по интеграции OpenVPN в NDMS

    in Обсуждение IPsec, OpenVPN и других туннелей

    Posted

    Подскажите, пожалуйста, пытаюсь поднять VPN (от prostovpn), вот что пишет лог:

    Это с UDP, с TCP всё окей но нужен именно UDP.

     

    Apr 26 08:52:08
     
    OpenVPN1
    OpenVPN 2.4.6 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD]
    Apr 26 08:52:08
     
    OpenVPN1
    library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10
    Apr 26 08:52:08
     
    OpenVPN1
    UDP link local: (not bound)
    Apr 26 08:52:08
     
    OpenVPN1
    UDP link remote: [AF_INET6]2a00:d880:5:a29::2:1194
    Apr 26 08:52:08
     
    OpenVPN1
    NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
    Apr 26 08:52:08
     
    OpenVPN1
    write UDP: Network is unreachable (code=128)
    Apr 26 08:52:08
     
    OpenVPN1
    Network unreachable, restarting
    Apr 26 08:52:08
     
    OpenVPN1
    SIGTERM received, sending exit notification to peer
    Apr 26 08:52:09
     
    OpenVPN1
    SIGTERM[soft,exit-with-notification] received, process exiting
    Apr 26 08:52:09
     
    ndm
    Service: "OpenVPN1": unexpectedly stopped.
×
×
  • Create New...