dd-wrt + openvpn. отсутствие виртуального интерфейса.

1

2

Собственно имеется tp-link TL-WR1043ND. Решая задачу подключения филиала к центральному офису посредством OpenVPN прошил данную железку в DD-WRT v24-sp2 (12/20/11) std (она является клиентом oVPN). oVPN сервер представлен в лице zeroshell. После шаманств с поднятием туннеля имею ситуацию - судя по Zeroshell туннель до tp-link поднят. Однако. На самом tp-link ситуация следующая:

Server: : Local Address: Remote Address: Client: GET_CONFIG: Local Address: Remote Address:

И как дополнение: виртуальный интерфейс (tap/tun) не появляется.
Что примечательно - на аналогичном tp-link, только крутящемся на openWRT, та же проблема - туннель поднимается, интерфейс не создается.
В чем дело?
Логи на zeroshell:

10:32:41 	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
10:32:41 	******* WARNING *******: null cipher specified, no encryption will be used
10:32:41 	LZO compression initialized
10:32:41 	TUN/TAP device VPN04 opened
10:32:41 	UDPv4 link local (bound): [undef]:1202
10:32:41 	UDPv4 link remote: [undef]
10:32:48 	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1574'
10:32:48 	WARNING: 'cipher' is used inconsistently, local='cipher [null-cipher]', remote='cipher BF-CBC'
10:32:48 	WARNING: 'keysize' is used inconsistently, local='keysize 0', remote='keysize 128'
10:32:48 	[org.domain.com] Peer Connection Initiated with x.x.x.x:33340
10:32:49 	Initialization Sequence Completed
10:32:50 	Interface VPN04 is UP

Лог dd-wrt:

Serverlog Clientlog 20121030 10:32:51 I OpenVPN 2.2.1 mips-linux [SSL] [LZO2] built on Dec 20 2011 
20121030 10:32:51 MANAGEMENT: TCP Socket listening on 127.0.0.1:5001 
20121030 10:32:51 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 
20121030 10:32:51 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible 
20121030 10:32:51 I LZO compression initialized 
20121030 10:32:51 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ] 
20121030 10:32:51 Socket Buffers: R=[112640->131072] S=[112640->131072] 
20121030 10:32:51 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ] 
20121030 10:32:51 Local Options String: 'V4 dev-type tap link-mtu 1574 tun-mtu 1532 proto UDPv4 comp-lzo cipher BF-CBC auth SHA1 keysize 128 key-method 2 tls-client' 
20121030 10:32:51 Expected Remote Options String: 'V4 dev-type tap link-mtu 1574 tun-mtu 1532 proto UDPv4 comp-lzo cipher BF-CBC auth SHA1 keysize 128 key-method 2 tls-server' 
20121030 10:32:51 Local Options hash (VER=V4): 'd79ca330' 
20121030 10:32:51 Expected Remote Options hash (VER=V4): 'f7df56b8' 
20121030 10:32:52 I UDPv4 link local: [undef] 
20121030 10:32:52 I UDPv4 link remote: y.y.y.y:1202 
20121030 10:32:52 N read UDPv4 [ECONNREFUSED]: Connection refused (code=146) 
20121030 10:32:54 TLS: Initial packet from y.y.y.y:1202 sid=c7d4e803 e7eab002 
20121030 10:32:54 VERIFY OK: depth=1 /C=RU/ST=placea/L=place1/O=domain.com/OU=IT/CN=CA/emailAddress=admin@domain@com 
20121030 10:32:54 VERIFY OK: depth=0 /OU=Hosts/CN=org.domain.com 
20121030 10:32:56 MANAGEMENT: Client connected from 127.0.0.1:5001 
20121030 10:32:56 D MANAGEMENT: CMD 'state' 
20121030 10:32:56 MANAGEMENT: Client disconnected 
20121030 10:32:56 MANAGEMENT: Client connected from 127.0.0.1:5001 
20121030 10:32:56 D MANAGEMENT: CMD 'state' 
20121030 10:32:56 MANAGEMENT: Client disconnected 
20121030 10:32:56 MANAGEMENT: Client connected from 127.0.0.1:5001 
20121030 10:32:56 D MANAGEMENT: CMD 'state' 
20121030 10:32:56 MANAGEMENT: Client disconnected 
20121030 10:32:56 MANAGEMENT: Client connected from 127.0.0.1:5001 
20121030 10:32:56 D MANAGEMENT: CMD 'log 500' 
19700101 00:00:00

Конфиг клиента


management 127.0.0.1 5001
management-log-cache 50
verb 4
mute 5
log-append /var/log/openvpncl
client
tls-client
resolv-retry infinite
nobind
persist-key
persist-tun
script-security 2
mtu-disc yes
dev tap1
proto udp
cipher bf-cbc
auth sha1
remote y.y.y.y 1202
tun-mtu 1500
comp-lzo adaptive
fast-io

Ссылка

Похожие темы