马上注册成为ROSABC会员,随时发帖回复。
您需要 登录 才可以下载或查看,没有账号?会员注册
x
大家有没有用linux系统连接ROS的OVPN呀?最近几天在测试linux平台连接ROS的OVPN,ROS服务器上的配置挺简单,参考别人的教程生成了证书,导入之后使用windows系统测试成功,可以建立OVPN连接。但是linux系统下一直连不上!linux客户端的配置参考MikroTik官网,启动之后一直反复连接。大家帮忙看下什么问题哈!
官网上对linux系统给出的参考配置如下:
Linux Client config dev tunproto tcp-clientremote 2.2.2.2 1194tls-clientuser nobodygroup nogroup#comp-lzo # Do not use compression.# More reliable detection when a system loses its connection.ping 15ping-restart 45ping-timer-rempersist-tunpersist-keymute-replay-warningsverb 3cipher BF-CBCauth SHA1pullauth-user-pass auth.cfg The file auth.cfg holds your username/password combination. On the first line must be the username and on the second line your password. client2234
下面是我的配置: client dev tun
proto tcp-client
remote xx.xx.xx.xx 1194 ;remote my-server-2 1194
tls-client
resolv-retry infinite
nobind
#user nobody #group nobody
# More reliable detection when a system loses its connection. ping 15 ping-restart 45 ping-timer-rem
persist-key persist-tun
mute-replay-warnings ca ca.crt #cert test.crt #key test.key
remote-cert-tls server #tls-auth ta.key 0
#auth SHA1 auth-user-pass #auth-user-pass auth.txt auth-nocache
#cipher AES-256-CBC AES-192 #cipher BF-CBC #comp-lzo verb 3 pull
客户端启动之后一直反复连接,日志信息如下: [root@xxxxxx openvpn]# openvpn xxxx.conf Thu Oct 26 22:00:32 2017 OpenVPN 2.4.4 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017 Thu Oct 26 22:00:32 2017 library versions: OpenSSL 1.0.2k-fips 26 Jan 2017, LZO 2.06 Enter Auth Username: test4 Enter Auth Password: ****** Thu Oct 26 22:00:38 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194 Thu Oct 26 22:00:38 2017 Socket Buffers: R=[87380->87380] S=[16384->16384] Thu Oct 26 22:00:38 2017 Attempting to establish TCP connection with [AF_INET]xx.xx.xx.xx:1194 [nonblock] Thu Oct 26 22:00:39 2017 TCP connection established with [AF_INET]xx.xx.xx.xx:1194 Thu Oct 26 22:00:39 2017 TCP_CLIENT link local: (not bound) Thu Oct 26 22:00:39 2017 TCP_CLIENT link remote: [AF_INET]xx.xx.xx.xx:1194 Thu Oct 26 22:00:39 2017 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=ecef0433 4b594685 Thu Oct 26 22:00:39 2017 Connection reset, restarting [0] Thu Oct 26 22:00:39 2017 SIGUSR1[soft,connection-reset] received, process restarting Thu Oct 26 22:00:39 2017 Restart pause, 5 second(s) Thu Oct 26 22:00:44 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194 Thu Oct 26 22:00:44 2017 Socket Buffers: R=[87380->87380] S=[16384->16384] Thu Oct 26 22:00:44 2017 Attempting to establish TCP connection with [AF_INET]xx.xx.xx.xx:1194 [nonblock] Thu Oct 26 22:00:45 2017 TCP connection established with [AF_INET]xx.xx.xx.xx:1194 Thu Oct 26 22:00:45 2017 TCP_CLIENT link local: (not bound) Thu Oct 26 22:00:45 2017 TCP_CLIENT link remote: [AF_INET]xx.xx.xx.xx:1194 Thu Oct 26 22:00:45 2017 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=b817da2c 7f96390d Thu Oct 26 22:00:45 2017 Connection reset, restarting [0] Thu Oct 26 22:00:45 2017 SIGUSR1[soft,connection-reset] received, process restarting Thu Oct 26 22:00:45 2017 Restart pause, 5 second(s)
ROS的配置如附件所示。
各位帮忙分析下是什么情况哈,非常感谢!
|