Metastaz
01.03.2016, 08:14
Доброго дня господа, есть проблема: см. скрины
Конфиги сервера и клиента под катом.
Как пофиксить?
П.Ы. по поводу mtu взял не с потолка.
http://kazpic.kz/images/2016/03/01/ping1.jpg
http://kazpic.kz/images/2016/03/01/ping3.jpg
port 443
# TCP or UDP server?
proto tcp
;proto udp
dev tun
;dev tun
;dev-node tap-adapter
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
# Diffie hellman parameters.
dh dh1024.pem
;topology subnet
server 192.168.4.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.4.254 255.255.255.0"
;push "route 10.8.0.1 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
push "redirect-gateway def1"
;push "route-gateway 192.168.4.1"
push "dhcp-option DNS 192.168.4.1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
;comp-lzo
tun-mtu 1372
tun-mtu-extra 32
;mssfix 1450
;fragment 1200
;fast-io
;max-clients 1
;user nobody
;group nobody
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 3
;mute 20
;tcp-nodelay
client
dev tun
;dev tun
;dev-node "4d36e972-e325-11ce-bfc1-08002be10318"
proto tcp
;proto udp
remote ********* 443
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
http-proxy 192.168.1.3 8080
;mute-replay-warnings
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
;tls-auth ta.key 1
;cipher x
;comp-lzo
tun-mtu 1372
tun-mtu-extra 32
route-method exe
route-delay 2
;mssfix 1450
;fragment 1200
keepalive 15 120
verb 3
;mute 20
Конфиги сервера и клиента под катом.
Как пофиксить?
П.Ы. по поводу mtu взял не с потолка.
http://kazpic.kz/images/2016/03/01/ping1.jpg
http://kazpic.kz/images/2016/03/01/ping3.jpg
port 443
# TCP or UDP server?
proto tcp
;proto udp
dev tun
;dev tun
;dev-node tap-adapter
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
# Diffie hellman parameters.
dh dh1024.pem
;topology subnet
server 192.168.4.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.4.254 255.255.255.0"
;push "route 10.8.0.1 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
push "redirect-gateway def1"
;push "route-gateway 192.168.4.1"
push "dhcp-option DNS 192.168.4.1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
;comp-lzo
tun-mtu 1372
tun-mtu-extra 32
;mssfix 1450
;fragment 1200
;fast-io
;max-clients 1
;user nobody
;group nobody
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 3
;mute 20
;tcp-nodelay
client
dev tun
;dev tun
;dev-node "4d36e972-e325-11ce-bfc1-08002be10318"
proto tcp
;proto udp
remote ********* 443
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
http-proxy 192.168.1.3 8080
;mute-replay-warnings
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
;tls-auth ta.key 1
;cipher x
;comp-lzo
tun-mtu 1372
tun-mtu-extra 32
route-method exe
route-delay 2
;mssfix 1450
;fragment 1200
keepalive 15 120
verb 3
;mute 20