system toolbox » router

ovo iz nekog razloga razvali konekciju ppp0

vidio da pppd call uvijek setuje dodatnu default routu na ppp1 i razvali dnsmasq.resolv pa sam ovo napravio:

napravio ovo

root@router-wan-sa-1:/tmp/etc# cat /tmp/dnsmasq.orig

nameserver 195.222.32.10
nameserver 195.222.32.20

root@router-wan-sa-1:/tmp/etc# cat /tmp/set_ppp1.sh

cd /tmp

cp etc/resolv.dnsmasq dnsmasq.orig

pppd call pppoe_1

sleep 3

ip route delete default dev ppp1

cp /tmp/dnsmasq.orig /tmp/etc/resolv.dnsmasq

root@router-wan-sa-1:/tmp/ppp/peers# cat pppoe_1

user 'hsamrae@bihnet'
password 'xxxxxxxxxxxxxxxxxx'
hide-password
connect true
#noipdefault
#persist
default-asyncmap
noaccomp
noccp
nobsdcomp
nodeflate
novjccomp
nopredictor1
lock
noauth
plugin rp-pppoe.so vlan1
ipparam vlan1
mtu 1492
mru 1492
nodefaultroute
#noreplacedefaultroute

i internet officesa bring.out => internet radi, ali forwarding internet => bring.out ne radi ?!

ppp1 poboša ip route ?

root@malisa:/etc/openvpn# invoke-rc.d openvpn restart

 * Stopping virtual private network daemon.                              [ OK ] 
 * Starting virtual private network daemon.                                      * linux-server (FAILED)
 * vps-clinet (OK)
                                                                         [ OK ]
root@malisa:/etc/openvpn# invoke-rc.d openvpn restart
 * Stopping virtual private network daemon.                              [ OK ] 
 * Starting virtual private network daemon.                                      * linux-server (FAILED)
 * vps-clinet (OK)
                                                                         [ OK ]

zar ovo nije vpn klijenta ?

bringout@desk-c2:~$ ping 192.168.99.10

PING 192.168.99.10 (192.168.99.10) 56(84) bytes of data.
From 192.168.45.7 icmp_seq=1 Time to live exceeded
From 192.168.45.7 icmp_seq=2 Time to live exceeded

Mar 24 09:15:35 malisa ovpn-vps-clinet[32224]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mar 24 09:15:35 malisa ovpn-vps-clinet[32224]: Re-using SSL/TLS context
Mar 24 09:15:35 malisa ovpn-vps-clinet[32224]: LZO compression initialized
Mar 24 09:15:37 malisa ovpn-vps-clinet[32224]: UDPv4 link local: [undef]
Mar 24 09:15:37 malisa ovpn-vps-clinet[32224]: UDPv4 link remote: 209.40.203.155:1194
Mar 24 09:16:37 malisa ovpn-vps-clinet[32224]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mar 24 09:16:37 malisa ovpn-vps-clinet[32224]: TLS Error: TLS handshake failed
Mar 24 09:16:37 malisa ovpn-vps-clinet[32224]: SIGUSR1[soft,tls-error] received, process restarting
Mar 24 09:16:39 malisa ovpn-vps-clinet[32224]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mar 24 09:16:39 malisa ovpn-vps-clinet[32224]: Re-using SSL/TLS context
Mar 24 09:16:39 malisa ovpn-vps-clinet[32224]: LZO compression initialized

vise refresh_ip procesi jer ne može da se zakači na ns_3.out.ba

root@malisa:/etc/openvpn/refresh_ip# killall refresh_ip.sh

refresh_ip.sh: nijedan proces nije ubijen

invoke-rc.d: unknown initscript, /etc/init.d/openpvpn not found.

root@malisa:/etc/openvpn/refresh_ip# invoke-rc.d openvpn restart
 * Stopping virtual private network daemon.                              [ OK ] 
 * Starting virtual private network daemon.                                      * linux-server (OK)
 * vps-clinet (OK)
                                                                         [ OK ]

ovdje imamo onaj problem kada jedan ns čučne refresh radi beskonačno. znam da smo za to otvorili ticket ali po već ustaljenoj šemi to nikada nismo i napravili

bjaskov ns-3.out.ba došao¶

u refresh_ip.sh stavio da se osvježava ns

restartovao openvpn da se klijenti rekonektuju

root@malisa:/etc/openvpn/refresh_ip# invoke-rc.d openvpn restart

 * Stopping virtual private network daemon.                              [ OK ] 
 * Starting virtual private network daemon.                                      * linux-server (OK)
 * vps-clinet (OK)
                                                                         [ OK ]

provjerio

bringout@desk-c2:~$ dig @ns-2.out.ba adsl.rama-glas.com
bringout@desk-c2:~$ dig @ns-3.out.ba adsl.rama-glas.com

isto i za adsl.bring.out.ba ... sve se osvježilo

kako ovako brzo ?

Ernad Husremović je napisao/la:

zar ovo nije vpn klijenta ?

bringout@desk-c2:~$ ping 192.168.99.10
[...]

vps ruta je čučnula, sada sam napravio up skriptu da kod svakog ponovnog kačenja isto odradi, rc.local jednostavno nije za to dobar

http://redmine.bring.out.ba/issues/19794#note-50