Jump to content

Ошибка redirect–gateway при соединении


Recommended Posts

День добрый. 
Подскажите, мучаюсь уже третьи выходные и перерыл всё, что можно. Не могу подружить свой ULTRA с облачным сервером OPVN.
Причем, на разных ноутбуках (Win10, Win11) напрямую подключаюсь без проблем, а роутер соединяться отказывается.
Настройки server:

Цитата

port 1194
proto udp4
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/server.crt
key /etc/openvpn/certs/server.key 
dh /etc/openvpn/certs/dh2048.pem
topology subnet
server XXX.X.X.X ZZZ.ZZZ.ZZZ.0
ifconfig-pool-persist /etc/openvpn/ipp.txt
push "redirect–gateway def1 bypass–dhcp"
keepalive 10 120
remote-cert-tls client
tls-auth /etc/openvpn/certs/ta.key 0 
cipher AES-256-GCM
persist-key
persist-tun
status openvpn–status.log
verb 4
explicit-exit-notify 1

Настройки Client:

Цитата

client
remote XX.XXX.XX.XXX
port 1194 
dev tun
proto udp4 
resolv-retry infinite
nobind
redirect-gateway def1 bypass-dhcp
persist-key
persist-tun
remote-cert-tls server 
key-direction 1
cipher AES-256-GCM
verb 3 
<ca>
----------
</ca>
<cert>
----------
</cert>
<key>
----------
</key>
<tls-auth>
----------
</tls-auth>

Лог роутера:
 

Цитата

[I] Sep  7 15:48:54 ndm: Core::Syslog: the system log has been cleared. 
[I] Sep  7 15:48:59 kernel: IPv6: ADDRCONF(NETDEV_UP): ovpn_br0: link is not ready
[I] Sep  7 15:48:59 ndm: Network::Interface::Base: "OpenVPN0": "base" changed "conf" layer state "disabled" to "running". 
[I] Sep  7 15:48:59 ndm: Network::Interface::Base: "OpenVPN0": interface is up. 
[I] Sep  7 15:48:59 ndm: Core::System::StartupConfig: saving (http/rci). 
[I] Sep  7 15:49:02 OpenVPN0: OpenVPN 2.6.7 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO] 
[I] Sep  7 15:49:02 OpenVPN0: library versions: OpenSSL 3.1.5 30 Jan 2024, LZO 2.10 
[I] Sep  7 15:49:02 OpenVPN0: DCO version: N/A 
[I] Sep  7 15:49:02 OpenVPN0: Socket Buffers: R=[155648->155648] S=[155648->155648] 
[I] Sep  7 15:49:02 OpenVPN0: UDPv4 link local: (not bound) 
[I] Sep  7 15:49:02 OpenVPN0: UDPv4 link remote: [AF_INET]XX.XXX.XX.XXX:1194 
[I] Sep  7 15:49:02 OpenVPN0: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay 
[I] Sep  7 15:49:02 OpenVPN0: TLS: Initial packet from [AF_INET]XX.XXX.XX.XXX:1194, sid=9e28e313 fd07ec00 
[I] Sep  7 15:49:02 OpenVPN0: VERIFY SCRIPT OK: depth=1, CN=PrivateVPN 
[I] Sep  7 15:49:02 OpenVPN0: VERIFY OK: depth=1, CN=PrivateVPN 
[I] Sep  7 15:49:02 OpenVPN0: VERIFY KU OK 
[I] Sep  7 15:49:02 OpenVPN0: Validating certificate extended key usage 
[I] Sep  7 15:49:02 OpenVPN0: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 
[I] Sep  7 15:49:02 OpenVPN0: VERIFY EKU OK 
[I] Sep  7 15:49:02 OpenVPN0: VERIFY SCRIPT OK: depth=0, CN=Host_VPN_Server 
[I] Sep  7 15:49:02 OpenVPN0: VERIFY OK: depth=0, CN=Host_VPN_Server 
[I] Sep  7 15:49:02 OpenVPN0: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519 
[I] Sep  7 15:49:02 OpenVPN0: [Host_VPN_Server] Peer Connection Initiated with [AF_INET]XX.XXX.XX.XXX:1194 
[I] Sep  7 15:49:02 ndm: Network::Interface::EndpointTracker: "OpenVPN0": added a host route to XX.XXX.XX.XXX via YY.YYY.YY.Y (GigabitEthernet1). #YY.YYY.YY.Y - шлюз провайдера
[I] Sep  7 15:49:02 OpenVPN0: TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1 
[I] Sep  7 15:49:02 OpenVPN0: TLS: tls_multi_process: initial untrusted session promoted to trusted 
[I] Sep  7 15:49:02 OpenVPN0: PUSH: Received control message: 'PUSH_REPLY,redirect–gateway def1 bypass–dhcp,route-gateway 100.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 100.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt,tun-mtu 1500' 
[E] Sep  7 15:49:02 OpenVPN0: Unrecognized option or missing or extra parameter(s) in configuration: (line 1): redirect–gateway (2.6.7) 
[E] Sep  7 15:49:02 OpenVPN0: Exiting due to fatal error 
[E] Sep  7 15:49:02 ndm: Service: "OpenVPN0": unexpectedly stopped. 
[W] Sep  7 15:49:02 ndm: OpenVpn::Interface: "OpenVPN0": configuration is invalid. 

Ответ сервера:

Цитата

ovpn-server[683]: read UDPv4 [ECONNREFUSED]: Connection refused (fd=7,code=111)

 

Link to comment
Share on other sites

  • 3 weeks later...
  • 2 weeks later...

Точно такая же проблема, я поднял OpenVPN на VPS сервере, сгенерировал файл, открываю его блокнотом вставляю в Кинетик и тоже самое Нет соединения. Хотя компьютер через приложение OpenVPN спокойно подключается и всё работает. Уже неделю голову ломаю, всё несколько раз переустановил и других причин как в роутере не вижу( Кто решил данную проблему или сталкивался ещё?

 

34556.png

6789.png

Edited by Mak7imka
добавил скрины
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...