Ребята, помогите:
1. Есть сервер Openvpn (он же шлюз для сети192.168.1.0) с адресами 192.168.1.1 (локальный ), 192.168.241.1 (Арес сетевого адаптера Openvpn) и 100.100.100.100 ((изменен) Внешний интернет адрес ). ОС - UBUNTU 11.04. (IP tables отключены)
2. Есть Клиент (он же шлюз для сети 192.168.2.0) с адресами 192.168.2.1 (локальный ), 192.168.241.2 (Арес селевого адаптера Openvpn) и 200.200.200.200 ((изменен) Внешний интернет адрес ). ОС - UBUNTU 11.04.) (IP tables отключены)
3. Проблема: Из сети 192.168.1.0 видно всю сеть 192.168.2.0. а из сети 192.168.2.0 видно только 1 компьютер с Windows 2003 (192.168.1.5) ну и сам 192.168.1.1.
4. Понимаю что дело в маршрутизации но не могу понять где искать. Ниже приведу конфиги серваков:
5. Server. Conf для Openvpn:
--proto tcp-server
mode server
tls-server
dev tap0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh2048.pem
ifconfig 192.168.241.1 255.255.255.0
ifconfig-pool 192.168.241.2 192.168.241.250
--ifconfig-pool-persist ipp.txt
client-config-dir /etc/openvpn/ccd
route 192.168.2.0 255.255.255.0 192.168.241.2
route 192.168.3.0 255.255.255.0 192.168.241.4
route 192.168.241.0 255.255.255.0
client-to-client
keepalive 10 600
tls-auth /etc/openvpn/keys/ta.key 0
cipher AES-128-CBC # AES
comp-lzo yes
max-clients 100
user nobody
group nogroup
persist-key
persist-tun
status /etc/openvpn/log/openvpn-status.log
log /etc/openvpn/log/openvpn.log
verb 3
tun-mtu 1500
mssfix
6. Client.Conf для Openvpn:
dev tap
client
remote 100.100.100.100
tls-client
tls-auth ta.key 1
ca ca.crt
cert terminal.crt
key terminal.key
cipher AES-128-CBC
proto tcp
comp-lzo
verb 4
route-method exe
route-delay 10
7. ifconfig и route –n для Сервер ОпенВПН 192.168.1.1
eth0 Link encap:Ethernet HWaddr 00:24:8c:e8:7c:6a
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::224:8cff:fee8:7c6a/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:112746851 errors:0 dropped:397 overruns:0 frame:0
TX packets:132094623 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:594345786 (594.3 MB) TX bytes:2118708039 (2.1 GB)
Interrupt:42 Base address:0xe000
eth1 Link encap:Ethernet HWaddr 00:00:21:22:9d:02
inet6 addr: fe80::200:21ff:fe22:9d02/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:145054393 errors:0 dropped:0 overruns:0 frame:0
TX packets:120276422 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4263203589 (4.2 GB) TX bytes:1969951427 (1.9 GB)
Interrupt:23 Base address:0xe800
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:94949 errors:0 dropped:0 overruns:0 frame:0
TX packets:94949 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:9545111 (9.5 MB) TX bytes:9545111 (9.5 MB)
ppp0 Link encap:Point-to-Point Protocol
inet addr:100.100.100.100 P-t-P:100.100.100.10 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1400 Metric:1
RX packets:95865009 errors:0 dropped:0 overruns:0 frame:0
TX packets:79481145 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:2843376554 (2.8 GB) TX bytes:4177786977 (4.1 GB)
tap0 Link encap:Ethernet HWaddr 0e:2d:75:5c:11:77
inet addr:192.168.241.1 Bcast:192.168.241.255 Mask:255.255.255.0
inet6 addr: fe80::c2d:75ff:fe5c:1177/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:50673 errors:0 dropped:0 overruns:0 frame:0
TX packets:57331 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:4365691 (4.3 MB) TX bytes:19464865 (19.4 MB)
root@slavubuntu:/etc/openvpn# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.2.0 192.168.241.2 255.255.255.0 UG 0 0 0 tap0
192.168.3.0 192.168.241.4 255.255.255.0 UG 0 0 0 tap0
192.168.241.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
100.100.100.10 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
8. ifconfig и route –n для Клиента ОпенВПН 192.168.2.1:
eth1 Link encap:Ethernet HWaddr 00:1f:c6:a4:00:ec
inet addr:192.168.44.1 Bcast:192.168.44.255 Mask:255.255.255.0
inet6 addr: fe80::21f:c6ff:fea4:ec/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:10594170 errors:0 dropped:0 overruns:0 frame:0
TX packets:7652319 errors:0 dropped:0 overruns:0 carrier:21
collisions:0 txqueuelen:1000
RX bytes:3252930730 (3.2 GB) TX bytes:2011519829 (2.0 GB)
Memory:dffc0000-e0000000
eth2 Link encap:Ethernet HWaddr 00:30:4f:1c:bf:97
inet addr:192.168.2.1 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: fe80::230:4fff:fe1c:bf97/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:7458188 errors:0 dropped:0 overruns:0 frame:0
TX packets:10387116 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1951975654 (1.9 GB) TX bytes:3140929295 (3.1 GB)
Interrupt:17 Base address:0xc800
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:1575 errors:0 dropped:0 overruns:0 frame:0
TX packets:1575 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:231738 (231.7 KB) TX bytes:231738 (231.7 KB)
ppp0 Link encap:Point-to-Point Protocol
inet addr:200.200.200.200 P-t-P:200.200.200.10 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1400 Metric:1
RX packets:8705752 errors:0 dropped:0 overruns:0 frame:0
TX packets:6383450 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:756480666 (756.4 MB) TX bytes:1692665034 (1.6 GB)
tap0 Link encap:Ethernet HWaddr ee:a8:2d:2a:14:e8
inet addr:192.168.241.2 Bcast:192.168.241.255 Mask:255.255.255.0
inet6 addr: fe80::eca8:2dff:fe2a:14e8/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:58239 errors:0 dropped:0 overruns:0 frame:0
TX packets:51548 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:19600097 (19.6 MB) TX bytes:4425337 (4.4 MB)
root@terminalgate:/home/stas# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0
192.168.1.0 192.168.241.1 255.255.255.0 UG 0 0 0 tap0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2
192.168.44.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.241.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
200.200.200.10 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0