LINUX.ORG.RU
решено Форум — Admin  

OpenVPN рвет соединение и не реконнектится обратно


0

2

Здравствуйте уважаемые! Прошу вас помочь с опытом в теме OpenVPN Дано: Сервер Ubuntu 10.04 OpenVPN 2.1.0 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 20 2010

Конфиг сервера: 

 cat /etc/openvpn/sample.conf
dev tap
keepalive 10 120
ifconfig 192.168.253.1 255.255.255.0
route 192.168.1.0 255.255.255.0 192.168.253.2
secret /etc/openvpn/static.key
comp-lzo

Клиент Windows Server 2008 R2 Конфиг клиента: 

remote XX.XX.XX.XX
dev tap
keepalive 10 120
ifconfig 192.168.253.2 255.255.255.0
route 192.168.0.0 255.255.255.0 192.168.253.1
route 192.168.2.0 255.255.255.0 192.168.253.1
secret static.key
comp-lzo

Тунель поднимается и работает отлично, пакетики везде куда нужно бегают. Суть проблемы:

Спуся какое-то время(час, два, сутки, полчаса), клиент отваливается от сервера и не цепляется обратно. Пишет в логах вот что:

Thu Jun 13 14:44:07 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jun  3 2013
Thu Jun 13 14:44:07 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jun 13 14:44:07 2013 open_tun, tt->ipv6=0
Thu Jun 13 14:44:07 2013 TAP-WIN32 device [Iiaee??aiea ii eieaeuiie naoe] opened: \\.\Global\{2CDB5F0D-FA68-40E6-9AF0-ABD843A8D61A}.tap
Thu Jun 13 14:44:07 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.253.2/255.255.255.0 on interface {2CDB5F0D-FA68-40E6-9AF0-ABD843A8D61A} [DHCP-serv: 192.168.253.0, lease-time: 31536000]
Thu Jun 13 14:44:07 2013 Successful ARP Flush on interface [17] {2CDB5F0D-FA68-40E6-9AF0-ABD843A8D61A}
Thu Jun 13 14:44:07 2013 UDPv4 link local (bound): [undef]
Thu Jun 13 14:44:07 2013 UDPv4 link remote: [AF_INET]XX.XX.XX.XX:1194
Thu Jun 13 14:44:15 2013 Peer Connection Initiated with [AF_INET]XX.XX.XX.XX:1194
Thu Jun 13 14:44:50 2013 SYSTEM ROUTING TABLE
Thu Jun 13 14:44:50 2013 0.0.0.0 0.0.0.0 192.168.1.2 p=0 i=10 t=4 pr=3 a=153547 h=0 m=276/0/0/0/0
Thu Jun 13 14:44:50 2013 127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=153556 h=0 m=306/0/0/0/0
Thu Jun 13 14:44:50 2013 127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=153556 h=0 m=306/0/0/0/0
Thu Jun 13 14:44:50 2013 127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=153556 h=0 m=306/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.0.0 255.255.255.0 192.168.253.1 p=0 i=10 t=4 pr=3 a=4908 h=0 m=21/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.0.0 255.255.255.0 192.168.253.1 p=0 i=17 t=4 pr=3 a=0 h=0 m=30/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.0.254 255.255.255.255 192.168.253.1 p=0 i=17 t=4 pr=3 a=152541 h=0 m=31/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.1.0 255.255.255.0 192.168.1.1 p=0 i=10 t=3 pr=3 a=153544 h=0 m=276/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.1.1 255.255.255.255 192.168.1.1 p=0 i=10 t=3 pr=3 a=153544 h=0 m=276/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.1.255 255.255.255.255 192.168.1.1 p=0 i=10 t=3 pr=3 a=153544 h=0 m=276/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.2.0 255.255.255.0 192.168.253.1 p=0 i=17 t=4 pr=3 a=0 h=0 m=30/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.253.0 255.255.255.252 192.168.253.2 p=0 i=17 t=3 pr=3 a=152969 h=0 m=286/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.253.2 255.255.255.255 192.168.253.2 p=0 i=17 t=3 pr=3 a=152969 h=0 m=286/0/0/0/0
Thu Jun 13 14:44:50 2013 192.168.253.3 255.255.255.255 192.168.253.2 p=0 i=17 t=3 pr=3 a=152969 h=0 m=286/0/0/0/0
Thu Jun 13 14:44:50 2013 224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=3 a=153556 h=0 m=306/0/0/0/0
Thu Jun 13 14:44:50 2013 224.0.0.0 240.0.0.0 192.168.1.1 p=0 i=10 t=3 pr=3 a=153547 h=0 m=276/0/0/0/0
Thu Jun 13 14:44:50 2013 224.0.0.0 240.0.0.0 192.168.253.2 p=0 i=17 t=3 pr=3 a=153546 h=0 m=286/0/0/0/0
Thu Jun 13 14:44:50 2013 255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=3 a=153556 h=0 m=306/0/0/0/0
Thu Jun 13 14:44:50 2013 255.255.255.255 255.255.255.255 192.168.1.1 p=0 i=10 t=3 pr=3 a=153547 h=0 m=276/0/0/0/0
Thu Jun 13 14:44:50 2013 255.255.255.255 255.255.255.255 192.168.253.2 p=0 i=17 t=3 pr=3 a=153546 h=0 m=286/0/0/0/0
Thu Jun 13 14:44:50 2013 SYSTEM ADAPTER LIST
Thu Jun 13 14:44:50 2013 TAP-Windows Adapter V9
Thu Jun 13 14:44:50 2013   Index = 17
Thu Jun 13 14:44:50 2013   GUID = {2CDB5F0D-FA68-40E6-9AF0-ABD843A8D61A}
Thu Jun 13 14:44:50 2013   IP = 192.168.253.2/255.255.255.252 
Thu Jun 13 14:44:50 2013   MAC = 00:ff:2c:db:5f:0d
Thu Jun 13 14:44:50 2013   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Jun 13 14:44:50 2013   DHCP SERV = 192.168.253.1/255.255.255.255 
Thu Jun 13 14:44:50 2013   DHCP LEASE OBTAINED = Tue Jun 11 20:15:21 2013
Thu Jun 13 14:44:50 2013   DHCP LEASE EXPIRES  = Wed Jun 11 20:15:21 2014
Thu Jun 13 14:44:50 2013   DNS SERV =  
Thu Jun 13 14:44:50 2013 Intel(R) 82567LM-3 Gigabit Network Connection
Thu Jun 13 14:44:50 2013   Index = 10
Thu Jun 13 14:44:50 2013   GUID = {9ACDE014-85DF-4487-800D-A618E3380E18}
Thu Jun 13 14:44:50 2013   IP = 192.168.1.1/255.255.255.0 
Thu Jun 13 14:44:50 2013   MAC = b8:ac:6f:2e:33:5b
Thu Jun 13 14:44:50 2013   GATEWAY = 192.168.1.2/255.255.255.255 
Thu Jun 13 14:44:50 2013   DNS SERV = 127.0.0.1/255.255.255.255 192.168.1.2/255.255.255.255 
Thu Jun 13 14:44:50 2013 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Thu Jun 13 16:15:22 2013 SIGTERM[hard,] received, process exiting

Рвет конкретно после строчки: 

Thu Jun 13 16:15:22 2013 SIGTERM[hard,] received, process exiting

До этого связывались Win 2008 SRV + Win2008SRV был такой же косяк, в качестве сервера OpenVPN решил сделать Линукс, ситуация аналогична.

Есть какие-нибудь идеи?

★
← xl2tpd и чудеса на виражах
GLIBC 2.15 на CentOS 6 или нужно с Mono бороться? →
Ответ на: комментарий от CeMKa

Вот конечные куски логов обрыва.

Tue Jul 02 08:11:53 2013 UDPv4 link remote: [AF_INET]XX.234.XX.253:1194
Tue Jul 02 08:13:53 2013 Inactivity timeout (--ping-restart), restarting
Tue Jul 02 08:13:53 2013 SIGUSR1[soft,ping-restart] received, process restarting
Tue Jul 02 08:13:55 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jul 02 08:13:55 2013 open_tun, tt->ipv6=0
Tue Jul 02 08:13:55 2013 TAP-WIN32 device [Iiaee??aiea ii eieaeuiie naoe] opened: \\.\Global\{2CDB5F0D-FA68-40E6-9AF0-ABD843A8D61A}.tap
Tue Jul 02 08:13:55 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.253.2/255.255.255.0 on interface {2CDB5F0D-FA68-40E6-9AF0-ABD843A8D61A} [DHCP-serv: 192.168.253.0, lease-time: 31536000]
Tue Jul 02 08:13:55 2013 Successful ARP Flush on interface [16] {2CDB5F0D-FA68-40E6-9AF0-ABD843A8D61A}
Tue Jul 02 08:13:55 2013 UDPv4 link local (bound): [undef]
Tue Jul 02 08:13:55 2013 UDPv4 link remote: [AF_INET]XX.234.XX.253:1194
Tue Jul 02 08:14:55 2013 Peer Connection Initiated with [AF_INET]XX.234.XX.253:1194
Tue Jul 02 08:15:02 2013 Initialization Sequence Completed
Tue Jul 02 10:54:04 2013 SIGTERM[hard,] received, process exiting

Tue Jul 02 13:09:37 2013 UDPv4 link remote: [AF_INET]XX.234.XX.253:1194
Tue Jul 02 13:09:52 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:09:58 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:02 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:02 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:02 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:03 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:04 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:08 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:08 2013 read UDPv4: Net dropped connection or reset (WSAENETRESET) (code=10052)
Tue Jul 02 13:10:19 2013 Peer Connection Initiated with [AF_INET]XX.234.XX.253:1194
Tue Jul 02 13:10:26 2013 Initialization Sequence Completed
Tue Jul 02 19:31:05 2013 SIGTERM[hard,] received, process exiting

Видно что по «ping timeout» реконнектит успешно.

И видно, что порой просто тупо «вышибает\разрывает» соединение и стоит на этом.

конкретно кажет, что в 13:10 соенинение установлено, и в 19.31 порвано. вот эта строка: 

Tue Jul 02 13:10:19 2013 Peer Connection Initiated with [AF_INET]XX.234.XX.253:1194
Tue Jul 02 13:10:26 2013 Initialization Sequence Completed
Tue Jul 02 19:31:05 2013 SIGTERM[hard,] received, process exiting

ума не приложу, в чем мб причина.

CeMKa ★
() автор топика
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.
← xl2tpd и чудеса на виражах
Admin
GLIBC 2.15 на CentOS 6 или нужно с Mono бороться? →