[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[RESOLVIDO] Re: Problema com client atrás do OpenVPN



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> gateway1:
> 
> dev tun
> mode server
> proto udp
> port 1194
> tls-server
> 
> ca keys/ca.crt
> cert keys/gw1-elite.crt
> key keys/gw1-elite.key
> dh keys/dh2048.pem
> server 192.168.150.0 255.255.255.0
> ifconfig-pool-persist /etc/openvpn/ipp.txt
> push "route 192.168.150.0 255.255.255.0" # Rede utilizada pelo tunel
> push "route 10.1.1.0 255.255.255.0" # Rotas para redes internas na matriz...
> ping 15
> client-config-dir ccd
> #criei o diretório ccd com um arquivo bm lá dentro com o seguinte
> #conteúdo cat /etc/openvpn/ccd/bm iroute 172.16.2.0 255.255.255.0
> route 172.16.2.0 255.255.255.0
> 
> #Na teoria aqui deveria acontecer a rota para a filial
> client-to-client
> push "route 192.168.2.0 255.255.255.0"
> ping-timer-rem
> persist-tun
> persist-key
> tls-auth keys/ta.key 0 # This file is secret
> auth SHA1
> cipher BF-CBC
> 
> user nobody
> group nogroup
> comp-lzo
> 
> status-version 2
> status /var/log/openvpn-status.log
> log /var/log/openvpn.log
> verb 5
> mute 20
> 
> Gateway2:
> 
> port 1194
> dev tun
> tls-client
> remote ip.do.gatewy1
> proto udp
> comp-lzo
> ca ca.crt
> cert bm.crt
> key bm.key
> tls-auth ta.key 1
> ping 15
> pull
> persist-tun
> persist-key
> 
> user nobody
> group nogroup
> 
> verb 5
> mute-replay-warnings
> mute 20
> 
> status /var/log/openvpn/openvpn-status.log
> #log /var/log/opevpn/openvpn.log
> log-append /var/log/openvpn/openvpn.log
> 

Os arquivos ficaram exatamente iguais, por algum motivo foi só restartar.

Segue a referência:

http://www.openvpn.net/index.php/open-source/documentation/howto.html#scope

- --
Flamarion Jorge
OpenPGP Key: 6CA750E1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkskKRMACgkQ0SDRnmynUOHMrQCgrbg8/A6oD4kuqBS1bQQRDO1r
v2YAoMJWFYzgwsjB4rP81s9Lnwmnsegg
=OI5j
-----END PGP SIGNATURE-----


Reply to: