作者chenszhanx (czh)
看板Network
标题[除错] OPENVPN客户端config
时间Tue Jul 12 17:04:28 2016
想要透过家中番茄路由VPN上网+使用区网资源
设置如下
client
proto udp
dev tap
remote XXXX.ddns.net
port 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
comp-lzo
verb 3
因为发现对外流量并没有透过VPN
查询後在最後加入
redirect-gateway
结果会卡住 log如下
Tue Jul 12 17:01:33 2016 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)]
[LZO] [PKCS11] [IPv6] built on May 10 2016
Tue Jul 12 17:01:33 2016 Windows version 6.1 (Windows 7) 64bit
Tue Jul 12 17:01:33 2016 library versions: OpenSSL 1.0.1t 3 May 2016, LZO
2.09
Tue Jul 12 17:01:33 2016 MANAGEMENT: TCP Socket listening on
[AF_INET]127.0.0.1:25340
Tue Jul 12 17:01:33 2016 Need hold release from management interface,
waiting...
Tue Jul 12 17:01:34 2016 MANAGEMENT: Client connected from
[AF_INET]127.0.0.1:25340
Tue Jul 12 17:01:34 2016 MANAGEMENT: CMD 'state on'
Tue Jul 12 17:01:34 2016 MANAGEMENT: CMD 'log all on'
Tue Jul 12 17:01:34 2016 MANAGEMENT: CMD 'hold off'
Tue Jul 12 17:01:34 2016 MANAGEMENT: CMD 'hold release'
Tue Jul 12 17:01:34 2016 WARNING: No server certificate verification method
has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Tue Jul 12 17:01:34 2016 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jul 12 17:01:34 2016 MANAGEMENT: >STATE:1468314094,RESOLVE,,,
Tue Jul 12 17:01:34 2016 UDPv4 link local: [undef]
Tue Jul 12 17:01:34 2016 UDPv4 link remote: [AF_INET]XXX.XX.XX.XX:443
Tue Jul 12 17:01:34 2016 MANAGEMENT: >STATE:1468314094,WAIT,,,
是否用TAP就不能将流量透过远方出去?
但是我需要让client ip透过同一个DHCP指派到同一个网段
在番茄路由VPN伺服器设置只能用TAP
用TUN就只能设到不同网段
请问有解决方法吗 感谢
--
※ 发信站: 批踢踢实业坊(ptt.cc), 来自: 192.83.171.124
※ 文章网址: https://webptt.com/cn.aspx?n=bbs/Network/M.1468314270.A.9B3.html
1F：→ chenszhanx: 以透过设置route gateway解决 07/13 09:31