ROS软路由论坛 ROSABC.com 网络方案网络工程交流

 找回密码
 会员注册

QQ登录

只需一步,快速开始

查看: 6013|回复: 0

[求助] 求助:linux系统通过openvpn客户端无法和ROS建立OVPN连接

[复制链接]
发表于 2017-10-26 22:05:12 | 显示全部楼层 |阅读模式

马上注册成为ROSABC会员,随时发帖回复。

您需要 登录 才可以下载或查看,没有账号?会员注册

x
大家有没有用linux系统连接ROS的OVPN呀?最近几天在测试linux平台连接ROS的OVPN,ROS服务器上的配置挺简单,参考别人的教程生成了证书,导入之后使用windows系统测试成功,可以建立OVPN连接。但是linux系统下一直连不上!linux客户端的配置参考MikroTik官网,启动之后一直反复连接。大家帮忙看下什么问题哈!
官网上对linux系统给出的参考配置如下:
Linux Client config
dev tunproto tcp-clientremote 2.2.2.2 1194tls-clientuser nobodygroup nogroup#comp-lzo # Do not use compression.# More reliable detection when a system loses its connection.ping 15ping-restart 45ping-timer-rempersist-tunpersist-keymute-replay-warningsverb 3cipher BF-CBCauth SHA1pullauth-user-pass auth.cfg
The file auth.cfg holds your username/password combination. On the first line must be the username and on the second line your password.
client2234
下面是我的配置:
client
dev tun

proto tcp-client

remote xx.xx.xx.xx 1194
;remote my-server-2 1194

tls-client

resolv-retry infinite

nobind

#user nobody
#group nobody


# More reliable detection when a system loses its connection.
ping 15
ping-restart 45
ping-timer-rem

persist-key
persist-tun

mute-replay-warnings
ca ca.crt
#cert test.crt
#key test.key

remote-cert-tls server
#tls-auth ta.key 0

#auth SHA1
auth-user-pass
#auth-user-pass auth.txt
auth-nocache

#cipher AES-256-CBC AES-192
#cipher BF-CBC
#comp-lzo
verb 3
pull

客户端启动之后一直反复连接,日志信息如下:
[root@xxxxxx openvpn]# openvpn xxxx.conf
Thu Oct 26 22:00:32 2017 OpenVPN 2.4.4 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017
Thu Oct 26 22:00:32 2017 library versions: OpenSSL 1.0.2k-fips  26 Jan 2017, LZO 2.06
Enter Auth Username: test4
Enter Auth Password: ******
Thu Oct 26 22:00:38 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Thu Oct 26 22:00:38 2017 Socket Buffers: R=[87380->87380] S=[16384->16384]
Thu Oct 26 22:00:38 2017 Attempting to establish TCP connection with [AF_INET]xx.xx.xx.xx:1194 [nonblock]
Thu Oct 26 22:00:39 2017 TCP connection established with [AF_INET]xx.xx.xx.xx:1194
Thu Oct 26 22:00:39 2017 TCP_CLIENT link local: (not bound)
Thu Oct 26 22:00:39 2017 TCP_CLIENT link remote: [AF_INET]xx.xx.xx.xx:1194
Thu Oct 26 22:00:39 2017 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=ecef0433 4b594685
Thu Oct 26 22:00:39 2017 Connection reset, restarting [0]
Thu Oct 26 22:00:39 2017 SIGUSR1[soft,connection-reset] received, process restarting
Thu Oct 26 22:00:39 2017 Restart pause, 5 second(s)
Thu Oct 26 22:00:44 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Thu Oct 26 22:00:44 2017 Socket Buffers: R=[87380->87380] S=[16384->16384]
Thu Oct 26 22:00:44 2017 Attempting to establish TCP connection with [AF_INET]xx.xx.xx.xx:1194 [nonblock]
Thu Oct 26 22:00:45 2017 TCP connection established with [AF_INET]xx.xx.xx.xx:1194
Thu Oct 26 22:00:45 2017 TCP_CLIENT link local: (not bound)
Thu Oct 26 22:00:45 2017 TCP_CLIENT link remote: [AF_INET]xx.xx.xx.xx:1194
Thu Oct 26 22:00:45 2017 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=b817da2c 7f96390d
Thu Oct 26 22:00:45 2017 Connection reset, restarting [0]
Thu Oct 26 22:00:45 2017 SIGUSR1[soft,connection-reset] received, process restarting
Thu Oct 26 22:00:45 2017 Restart pause, 5 second(s)


ROS的配置如附件所示。

各位帮忙分析下是什么情况哈,非常感谢!





ROS

ROS
您需要登录后才可以回帖 登录 | 会员注册

本版积分规则

不良信息举报Q:2000617

软路由

不良信息举报Q:2000617|Archiver|ROS软路由论坛 ROSABC.com 网络方案网络工程交流

GMT+8, 2025-8-5 20:23 , Processed in 0.184368 second(s), 21 queries .

Powered by Discuz! X3.4

Copyright © 2001-2021, Tencent Cloud.

快速回复 返回顶部 返回列表