Bonjour,
Ce n'est pas plutot en probleme de configuration ?
La actuellement j'arrive parfaitement à faire fonctionner mon VPN avec ce type de paramètre :
dev tun ----> Serveur mode route
Mais j'ai cru comprendre qu'il fallait passer le serveur en mode bridge pour que tous les clients VPN arrivent à ce voir sur le reseau et donc avoir la possibilité de faire du broadcast
Je me trompe ?
Du coup mon serveur devrait etre de ce type :
#OpenVPN Server conf
daemon openvpnserver
writepid /var/run/openvpn.pid
#DAN prepare ZERINA for listening on blue and orange
;local foken.no-ip.org
dev tap
tun-mtu 1400
proto udp
port 1194
tls-server
ca /var/ipcop/ovpn/ca/cacert.pem
cert /var/ipcop/ovpn/certs/servercert.pem
key /var/ipcop/ovpn/certs/serverkey.pem
dh /var/ipcop/ovpn/ca/dh1024.pem
client-config-dir /var/ipcop/ovpn/ccd ----->Ceci me permet d'atribuer des IP aux clients
server 192.168.55.0 255.255.255.0 ----> Plage adresse Reseau OPENVPN
push "route 192.168.5.0 255.255.255.0" -----> ça c'est la route vers mon reseau local à moi
client-to-client
keepalive 10 60
status-version 1
status /var/ipcop/ovpn/server.log 30
cipher BF-CBC
max-clients 25
tls-verify /var/ipcop/ovpn/verify
crl-verify /var/ipcop/ovpn/crls/cacrl.pem
user nobody
group nobody
persist-key
persist-tun
verb 3
Voila, y'a t'il quelque chose d'autre à faire (surement que oui) car la ça ne fonctionne pas au niveau de la partie client meme si il finit par ce connecter avec des erreurs
Log :
Fri Dec 08 14:31:18 2006 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Fri Dec 08 14:31:18 2006 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Fri Dec 08 14:31:21 2006 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Fri Dec 08 14:31:21 2006 Control Channel MTU parms [ L:1473 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Dec 08 14:31:21 2006 Data Channel MTU parms [ L:1473 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Fri Dec 08 14:31:21 2006 Local Options hash (VER=V4): '6d83133f'
Fri Dec 08 14:31:21 2006 Expected Remote Options hash (VER=V4): 'c28a73c6'
Fri Dec 08 14:31:21 2006 UDPv4 link local (bound): [undef]:1194
Fri Dec 08 14:31:21 2006 UDPv4 link remote: 213.44.163.190:1194
Fri Dec 08 14:31:21 2006 TLS: Initial packet from 213.44.163.190:1194, sid=1cabe038 ab41354f
Fri Dec 08 14:31:21 2006 VERIFY OK: depth=1, /C=FR/O=nom du serveur/CN=nom du serveur_CA
Fri Dec 08 14:31:21 2006 VERIFY OK: nsCertType=SERVER
Fri Dec 08 14:31:21 2006 VERIFY OK: depth=0, /C=FR/O=nom du serveur/CN=d07m-ipinternet.club-internet.fr
Fri Dec 08 14:31:22 2006 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Dec 08 14:31:22 2006 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 08 14:31:22 2006 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Dec 08 14:31:22 2006 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 08 14:31:22 2006 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Dec 08 14:31:22 2006 [d07m-ipinternet.club-internet.fr] Peer Connection Initiated with 213.44.163.190:1194
Fri Dec 08 14:31:23 2006 SENT CONTROL [d07m-89-86-126-45.d4.club-internet.fr]: 'PUSH_REQUEST' (status=1)
Fri Dec 08 14:31:23 2006 PUSH: Received control message: 'PUSH_REPLY,route 192.168.5.0 255.255.255.0,route-gateway 192.168.55.1,ping 10,ping-restart 60,route 192.168.5.0 255.255.255.0,ifconfig 192.168.55.13 192.168.55.14'
Fri Dec 08 14:31:23 2006 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 08 14:31:23 2006 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 08 14:31:23 2006 OPTIONS IMPORT: route options modified
Fri Dec 08 14:31:23 2006 WARNING: Since you are using --dev tap, the second argument to --ifconfig must be a netmask, for example something like 255.255.255.0. (silence this warning with --ifconfig-nowarn)
Fri Dec 08 14:31:23 2006 TAP-WIN32 device [Connexion au réseau local 2] opened: \\.\Global\{EAF9D512-1FE8-4A84-85E9-564256AA3FEE}.tap
Fri Dec 08 14:31:23 2006 TAP-Win32 Driver Version 8.4
Fri Dec 08 14:31:23 2006 TAP-Win32 MTU=1500
Fri Dec 08 14:31:23 2006 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.55.13/192.168.55.14 on interface {EAF9D512-1FE8-4A84-85E9-564256AA3FEE} [DHCP-serv: 192.168.55.12, lease-time: 31536000]
Fri Dec 08 14:31:23 2006 Successful ARP Flush on interface [3] {EAF9D512-1FE8-4A84-85E9-564256AA3FEE}
Fri Dec 08 14:31:23 2006 TEST ROUTES: 0/0 succeeded len=2 ret=0 a=0 u/d=down
Fri Dec 08 14:31:23 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:24 2006 TEST ROUTES: 0/0 succeeded len=2 ret=0 a=0 u/d=down
Fri Dec 08 14:31:24 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:25 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:25 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:26 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:26 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:27 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:27 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:28 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:28 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:29 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:29 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:30 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:30 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:31 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:31 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:33 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:33 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:34 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:34 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:35 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:35 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:36 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:36 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:37 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:37 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:38 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:38 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:39 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:39 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:40 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:40 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:41 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:41 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:42 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:42 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:43 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:43 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:44 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:44 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:45 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:45 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:46 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:46 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:47 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:47 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:48 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:48 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:50 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:50 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:51 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:51 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:52 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:52 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:53 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:53 2006 Route: Waiting for TUN/TAP interface to come up...
Fri Dec 08 14:31:54 2006 TEST ROUTES: 0/2 succeeded len=2 ret=0 a=0 u/d=up
Fri Dec 08 14:31:54 2006 route ADD 192.168.5.0 MASK 255.255.255.0 192.168.55.1
Fri Dec 08 14:31:54 2006 Warning: route gateway is not reachable on any active network adapters: 192.168.55.1
Fri Dec 08 14:31:54 2006 Route addition via IPAPI failed
Fri Dec 08 14:31:54 2006 route ADD 192.168.5.0 MASK 255.255.255.0 192.168.55.1
Fri Dec 08 14:31:54 2006 Warning: route gateway is not reachable on any active network adapters: 192.168.55.1
Fri Dec 08 14:31:54 2006 Route addition via IPAPI failed
Fri Dec 08 14:31:54 2006 Initialization Sequence Completed With Errors ( see
http://openvpn.net/faq.html#dhcpclientserv )
J'insiste sur le fait que en mode :
dev tun, je n'ai pas de probleme