Всем привет.
На удаленном компе подключаюсь к серверу OpenVPN. Делаю пинг на tun0 сервера по 10.8.0.1 и все ОК.
Делаю пинг по 172.16.100.хх и нифига.
Я так понимаю, что на сервере, где OpenVPN, надо добавить маршрут, но что-то не получается.
Маршруты на сервере:
[root@openvpn openvpn]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default gate.corp.blabla 0.0.0.0 UG 100 0 0 eth0
10.8.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
172.16.100.0 0.0.0.0 255.255.255.0 U 100 0 0 eth0
Сервер OpenVPN
port 1194
proto udp
dev tun
user nobody
group nobody
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# push "redirect-gateway def1 bypass-dhcp"
dh none
ecdh-curve prime256v1
tls-crypt tls-crypt.key 0
crl-verify crl.pem
ca ca.crt
cert server_Afpb0AUb88BF7e6w.crt
key server_Afpb0AUb88BF7e6w.key
auth SHA256
cipher AES-128-GCM
ncp-ciphers AES-128-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
status /var/log/openvpn/status.log
verb 3
Клиент
client
proto udp
remote 31.200.236.202 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_Afp88BF7e6w name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
Сеть на сервере
[root@openvpn openvpn]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.16.100.5 netmask 255.255.255.0 broadcast 172.16.100.255
inet6 fe80::d3af:75d3:646d:fedd prefixlen 64 scopeid 0x20<link>
ether 00:15:5d:64:12:08 txqueuelen 1000 (Ethernet)
RX packets 17670076 bytes 1468643689 (1.3 GiB)
RX errors 0 dropped 8025 overruns 0 frame 0
TX packets 61598 bytes 5275083 (5.0 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 128 bytes 11264 (11.0 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 128 bytes 11264 (11.0 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.0.1 netmask 255.255.255.0 destination 10.8.0.1
inet6 fe80::63f3:98fb:48cb:b49 prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 3 bytes 144 (144.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
