Názor k článku OpenVPN – VPN jednoduše (2) od aTan - zdravim. mam problem s OpenVPN. dela jsem to...

zdravim. mam problem s OpenVPN. dela jsem to podle spousty navodu, ale vzdy 
mi to skonci s tim ze klient nedostane ip adresu a system mu prideli buhvico. 
napr. delal jsem to i podle root.cz. vim ze na rootu chybi routovani a neco jsem 
tam pridal. ale ip se stejne nepriradi. domnivam se ze problem je porad v 
routovani ale nevim co s tim.

server.conf:

mode server
tls-server
dev tap
ifconfig 10.0.10.100 255.255.255.0
ifconfig-pool 10.0.10.1 10.0.10.90 255.255.255.0
duplicate-cn

ca /etc/openvpn/my-ca.crt
cert /etc/openvpn/office.crt
key /etc/openvpn/office.key
dh /etc/openvpn/dh1536.pem

log-append /var/log/openvpn
status /var/run/openvpn/vpn.status 10

up ./openvpn.up

mtu-test
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ping 10
ping-restart 120

push "ping 10"
push "ping-restart 60"

push "route 10.0.0.0 255.255.255.0 10.0.10.1"

user openvpn
group openvpn
comp-lzo
verb 3

client.conf:

remote x.x.x.x
tls-client
dev tap
pull

ca my-ca.crt
cert home.crt
key home.key

mtu-test
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

comp-lzo
verb 3


openvpn.up:

#!/bin/sh

route del -net 10.0.10.0 netmask 255.255.255.0 gw 10.0.0.1
route del -net 10.0.10.0 netmask 255.255.255.0 dev tap0
route add -net 10.0.10.0 netmask 255.255.255.0 gw 10.0.10.1


route tabulka:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
x.x.x.0     *               255.255.255.224 U     0      0        0 eth3
10.0.0.0        *               255.255.255.0   U     0      0        0 eth0
10.0.1.0        *               255.255.255.0   U     0      0        0 eth1
10.0.2.0        *               255.255.255.0   U     0      0        0 eth2
10.0.10.0       10.0.10.100     255.255.255.0   UG    0      0        0 tap0
loopback        *               255.0.0.0       U     0      0        0 lo
default         v50.b1.lib.vol. 0.0.0.0         UG    1      0        0 eth3


hlasky na strane klienta:

Wed Feb 16 20:18:35 2005 Route: Waiting for TUN/TAP interface to come up...
Wed Feb 16 20:18:36 2005 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Wed Feb 16 20:18:36 2005 Route: Waiting for TUN/TAP interface to come up...
Wed Feb 16 20:18:36 2005 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Wed Feb 16 20:18:36 2005 route ADD 10.0.0.0 MASK 255.255.255.0 10.0.10.100
Wed Feb 16 20:18:36 2005 Warning: route gateway is not reachable on any active n
etwork adapters: 10.0.10.100
Wed Feb 16 20:18:36 2005 Route addition via IPAPI failed
Wed Feb 16 20:18:36 2005 Initialization Sequence Completed With Errors