JForty Posted September 7 Share Posted September 7 День добрый. Подскажите, мучаюсь уже третьи выходные и перерыл всё, что можно. Не могу подружить свой ULTRA с облачным сервером OPVN. Причем, на разных ноутбуках (Win10, Win11) напрямую подключаюсь без проблем, а роутер соединяться отказывается. Настройки server: Цитата port 1194 proto udp4 dev tun ca /etc/openvpn/certs/ca.crt cert /etc/openvpn/certs/server.crt key /etc/openvpn/certs/server.key dh /etc/openvpn/certs/dh2048.pem topology subnet server XXX.X.X.X ZZZ.ZZZ.ZZZ.0 ifconfig-pool-persist /etc/openvpn/ipp.txt push "redirect–gateway def1 bypass–dhcp" keepalive 10 120 remote-cert-tls client tls-auth /etc/openvpn/certs/ta.key 0 cipher AES-256-GCM persist-key persist-tun status openvpn–status.log verb 4 explicit-exit-notify 1 Настройки Client: Цитата client remote XX.XXX.XX.XXX port 1194 dev tun proto udp4 resolv-retry infinite nobind redirect-gateway def1 bypass-dhcp persist-key persist-tun remote-cert-tls server key-direction 1 cipher AES-256-GCM verb 3 <ca> ---------- </ca> <cert> ---------- </cert> <key> ---------- </key> <tls-auth> ---------- </tls-auth> Лог роутера: Цитата [I] Sep 7 15:48:54 ndm: Core::Syslog: the system log has been cleared. [I] Sep 7 15:48:59 kernel: IPv6: ADDRCONF(NETDEV_UP): ovpn_br0: link is not ready [I] Sep 7 15:48:59 ndm: Network::Interface::Base: "OpenVPN0": "base" changed "conf" layer state "disabled" to "running". [I] Sep 7 15:48:59 ndm: Network::Interface::Base: "OpenVPN0": interface is up. [I] Sep 7 15:48:59 ndm: Core::System::StartupConfig: saving (http/rci). [I] Sep 7 15:49:02 OpenVPN0: OpenVPN 2.6.7 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO] [I] Sep 7 15:49:02 OpenVPN0: library versions: OpenSSL 3.1.5 30 Jan 2024, LZO 2.10 [I] Sep 7 15:49:02 OpenVPN0: DCO version: N/A [I] Sep 7 15:49:02 OpenVPN0: Socket Buffers: R=[155648->155648] S=[155648->155648] [I] Sep 7 15:49:02 OpenVPN0: UDPv4 link local: (not bound) [I] Sep 7 15:49:02 OpenVPN0: UDPv4 link remote: [AF_INET]XX.XXX.XX.XXX:1194 [I] Sep 7 15:49:02 OpenVPN0: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay [I] Sep 7 15:49:02 OpenVPN0: TLS: Initial packet from [AF_INET]XX.XXX.XX.XXX:1194, sid=9e28e313 fd07ec00 [I] Sep 7 15:49:02 OpenVPN0: VERIFY SCRIPT OK: depth=1, CN=PrivateVPN [I] Sep 7 15:49:02 OpenVPN0: VERIFY OK: depth=1, CN=PrivateVPN [I] Sep 7 15:49:02 OpenVPN0: VERIFY KU OK [I] Sep 7 15:49:02 OpenVPN0: Validating certificate extended key usage [I] Sep 7 15:49:02 OpenVPN0: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication [I] Sep 7 15:49:02 OpenVPN0: VERIFY EKU OK [I] Sep 7 15:49:02 OpenVPN0: VERIFY SCRIPT OK: depth=0, CN=Host_VPN_Server [I] Sep 7 15:49:02 OpenVPN0: VERIFY OK: depth=0, CN=Host_VPN_Server [I] Sep 7 15:49:02 OpenVPN0: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519 [I] Sep 7 15:49:02 OpenVPN0: [Host_VPN_Server] Peer Connection Initiated with [AF_INET]XX.XXX.XX.XXX:1194 [I] Sep 7 15:49:02 ndm: Network::Interface::EndpointTracker: "OpenVPN0": added a host route to XX.XXX.XX.XXX via YY.YYY.YY.Y (GigabitEthernet1). #YY.YYY.YY.Y - шлюз провайдера [I] Sep 7 15:49:02 OpenVPN0: TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1 [I] Sep 7 15:49:02 OpenVPN0: TLS: tls_multi_process: initial untrusted session promoted to trusted [I] Sep 7 15:49:02 OpenVPN0: PUSH: Received control message: 'PUSH_REPLY,redirect–gateway def1 bypass–dhcp,route-gateway 100.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 100.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt,tun-mtu 1500' [E] Sep 7 15:49:02 OpenVPN0: Unrecognized option or missing or extra parameter(s) in configuration: (line 1): redirect–gateway (2.6.7) [E] Sep 7 15:49:02 OpenVPN0: Exiting due to fatal error [E] Sep 7 15:49:02 ndm: Service: "OpenVPN0": unexpectedly stopped. [W] Sep 7 15:49:02 ndm: OpenVpn::Interface: "OpenVPN0": configuration is invalid. Ответ сервера: Цитата ovpn-server[683]: read UDPv4 [ECONNREFUSED]: Connection refused (fd=7,code=111) Quote Link to comment Share on other sites More sharing options...
hellx Posted September 22 Share Posted September 22 Аналогичная ситуация, пока не удалось победить. Получилось решить проблему? Quote Link to comment Share on other sites More sharing options...
Mak7imka Posted October 4 Share Posted October 4 (edited) Точно такая же проблема, я поднял OpenVPN на VPS сервере, сгенерировал файл, открываю его блокнотом вставляю в Кинетик и тоже самое Нет соединения. Хотя компьютер через приложение OpenVPN спокойно подключается и всё работает. Уже неделю голову ломаю, всё несколько раз переустановил и других причин как в роутере не вижу( Кто решил данную проблему или сталкивался ещё? Edited October 4 by Mak7imka добавил скрины Quote Link to comment Share on other sites More sharing options...
Demean Posted Thursday at 12:00 PM Share Posted Thursday at 12:00 PM Решило проблему на сервере и клиенте убрать push "redirect–gateway def1 bypass–dhcp" Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.