system toolbox » ubuntu

kako vidimo klijent sve parametre kupi sa servera "pull" komandom.

evo kako na klijentu stoji kada se napravi konekcija:

Sat Apr 19 12:43:05 2008 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct  1 2
006
Sat Apr 19 12:43:05 2008 IMPORTANT: OpenVPN's default port number is now 1194, b
ased on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earl
ier used 5000 as the default port.
Sat Apr 19 12:43:05 2008 WARNING: No server certificate verification method has
been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Apr 19 12:43:05 2008 LZO compression initialized
Sat Apr 19 12:43:05 2008 UDPv4 link local: [undef]
Sat Apr 19 12:43:05 2008 UDPv4 link remote: 192.168.45.5:1195
Sat Apr 19 12:43:05 2008 [hernad] Peer Connection Initiated with 192.168.45.5:11
95
Sat Apr 19 12:43:06 2008 TAP-WIN32 device [openvpn] opened: \\.\Global\{31BC22E1
-E7CA-4E36-9075-53A51A449F09}.tap
Sat Apr 19 12:43:06 2008 Notified TAP-Win32 driver to set a DHCP IP/netmask of 1
0.8.1.5/255.255.255.0 on interface {31BC22E1-E7CA-4E36-9075-53A51A449F09} [DHCP-
serv: 10.8.1.0, lease-time: 31536000]
Sat Apr 19 12:43:06 2008 Successful ARP Flush on interface [83886084] {31BC22E1-
E7CA-4E36-9075-53A51A449F09}

klijent automatski dobija route:

C:\Documents and Settings\hernad>route print 192.169.45.0

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x5000004 ...00 ff 31 bc 22 e1 ...... TAP-Win32 Adapter V8
0xd000002 ...08 00 27 fd 57 83 ...... AMD PCNET Family Ethernet Adapter
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
     192.169.45.0    255.255.255.0         10.8.1.1        10.8.1.5       1
Default Gateway:          10.0.2.2
===========================================================================
Persistent Routes:
  None

ovo treba da vrijedi i za 192.168.45.0

C:\Documents and Settings\hernad>ping 10.8.1.1

Pinging 10.8.1.1 with 32 bytes of data:

Reply from 10.8.1.1: bytes=32 time=19ms TTL=64
Reply from 10.8.1.1: bytes=32 time=9ms TTL=64

i traceroute lijepo kaže kako saobraćaj ide

C:\Documents and Settings\hernad>traceroute 192.169.45.126
'traceroute' is not recognized as an internal or external command,
operable program or batch file.

C:\Documents and Settings\hernad>tracert 192.169.45.126

Tracing route to 192.169.45.126 over a maximum of 30 hops

  1     9 ms    15 ms     6 ms  10.8.1.1
  2     7 ms     6 ms    13 ms  192.168.45.254
  3    33 ms     8 ms     8 ms  192.168.45.4
  4    11 ms    17 ms    14 ms  192.169.45.126

Trace complete.

• 2.0.9 klijent mi je zametli što se tiče pokretanja vpn konekcije
• 2.1.rc7 koji sam testirao na visti je puno bolji jer se odmah smjesti u tray

testirao i na w2k radi bez ikakvih problema.

i evo sada kada pozovem konekciju dobijam

Sat Apr 19 16:59:48 2008 OpenVPN 2.1_rc7 Win32-MinGW [SSL] [LZO2] [PKCS11] built
 on Jan 29 2008
Sat Apr 19 16:59:48 2008 WARNING: No server certificate verification method has
been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Apr 19 16:59:48 2008 LZO compression initialized
Sat Apr 19 16:59:48 2008 UDPv4 link local: [undef]
Sat Apr 19 16:59:48 2008 UDPv4 link remote: 89.146.155.59:1195
Sat Apr 19 17:00:49 2008 TLS Error: TLS key negotiation failed to occur within 6
0 seconds (check your network connectivity)
Sat Apr 19 17:00:49 2008 TLS Error: TLS handshake failed
Sat Apr 19 17:00:49 2008 SIGUSR1[soft,tls-error] received, process restarting
Sat Apr 19 17:00:51 2008 WARNING: No server certificate verification method has
been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Apr 19 17:00:51 2008 Re-using SSL/TLS context
Sat Apr 19 17:00:51 2008 LZO compression initialized
Sat Apr 19 17:00:51 2008 UDPv4 link local: [undef]
Sat Apr 19 17:00:51 2008 UDPv4 link remote: 89.146.155.59:1195

ovo je 89.146.155.59 adresa openvpn.sigma-com.net

istu stvar dobijem i kada vratim na officesa.sigma-com.net

sa starom verzijom 1.09 mi nije proradilo jer vidim ovdje je port 1195, a tamo mi kaže da taj port nije moguć, pa sam stavio novu verziju i ja.