Keresés

Hirdetés

Új hozzászólás Aktív témák

  • suste

    veterán

    válasz vargalex #58001 üzenetére

    a trunk-ban újra él a luci-app-openvpn, de azt nem tudom hogy BB alatt is működik-e rendesen...

  • Headless

    őstag

    válasz vargalex #58001 üzenetére

    Sziasztok
    openvpn-el próbálkoznék :)
    Addig jutottam, hogy tudok csatlakozni a vpn-hez forgalmat nem tudok bonyolítani, aztán kb 1-2 perc múlva megszakad és onnantól nem is csatlakozik.Ez után ezt írja a log állandóan.
    Mon May 25 19:50:09 2015 kern.alert kernel: [ 484.070000] CPU 0 Unable to handle kernel paging request at virtual address 00000041, epc == 8317cbc0, ra == 8317cae4
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Oops[#1]:
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] CPU: 0 PID: 3613 Comm: openvpn Not tainted 3.10.49 #16
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] task: 8179e180 ti: 82ace000 task.ti: 82ace000
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $ 0 : 00000000 006e1410 00000041 00000040
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $ 4 : 00000001 00000000 00000000 00000000
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $ 8 : 00000000 8305283c 02040559 01030302
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $12 : c0a80101 8305283c 00000000 c0bd0050
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $16 : 838863c0 0000003c 82acfeb0 833f5180
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $20 : 0000003c 00000001 00000000 83052840
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $24 : 00000000 7781fcc8
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] $28 : 82ace000 82acfd58 00000000 8317cae4
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Hi : 000000aa
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Lo : 00001f6d
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] epc : 8317cbc0 tun_get_socket+0xa3c/0x2f44 [tun]
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Not tainted
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] ra : 8317cae4 tun_get_socket+0x960/0x2f44 [tun]
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Status: 1100fc03 KERNEL EXL IE
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Cause : 00800008
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] BadVA : 00000041
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] PrId : 00019750 (MIPS 74Kc)
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Modules linked in: ath9k ath9k_common pppoe ppp_async iptable_nat ath9k_hw ath pppox ppp_generic nf_nat_ipv4 nf_conntrack_ipv4 mac80211 ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_string xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_id xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_NETMAP xt_LOG xt_HL xt_DSCP xt_CT xt_CLASSIFYMon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Process openvpn (pid: 3613, threadinfo=82ace000, task=8179e180, tls=77a53440)
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Stack : 82acfdb0 8018d1a8 83ad30d0 80310000 0000003c 83b1bb8c 00000001 83b1bb8c
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] a3b29180 82b16600 83ad30d0 83b1bb80 83b1bb8c 0000000c 00000000 83ad30d0
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] 80310000 83ad30d0 802dba84 83afd838 00000060 00000020 00420000 00000000
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] 00000000 00000000 00000800 00000020 00000000 83ad31e0 00000000 00000060
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] 838863c0 80e79140 82acfeb0 00000001 7fd01e18 00000000 00000000 00000000
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] ...
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Call Trace:
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] [<8317cbc0>] tun_get_socket+0xa3c/0x2f44 [tun]
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] [<8317cae4>] tun_get_socket+0x960/0x2f44 [tun]
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000]
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000]
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.070000] Code: 30430040 1060000c 8e6200b0 <90430000> 24040040 306300f0 10640005 24040060 1464ffd4
    Mon May 25 19:50:09 2015 kern.warn kernel: [ 484.350000] ---[ end trace 5a5dd48cc08ca494 ]---
    Mon May 25 19:50:09 2015 daemon.notice netifd: Network device 'tun0' link is down
    Mon May 25 19:50:09 2015 daemon.notice netifd: Interface 'vpn0' has link connectivity loss
    Mon May 25 19:50:09 2015 daemon.notice netifd: Interface 'vpn0' is now down
    Mon May 25 19:50:09 2015 daemon.notice netifd: Interface 'vpn0' is disabled
    Mon May 25 19:50:09 2015 daemon.notice netifd: Interface 'vpn0' is enabled
    Mon May 25 19:50:09 2015 daemon.notice netifd: Interface 'vpn0' is disabled
    Mon May 25 19:50:20 2015 kern.emerg kernel: [ 495.050000] unregister_netdevice: waiting for tun0 to become free. Usage count = 1 ## ez ismétlődik

    És sehogy nem szűnik meg max router restartal.(killall sem állítja le az openvpn-t). És a terhelés felugrik 3-4-re... Szóval valami tuti nem jó, esetleg Alex el tudnád küldeni a te config-odat, vagy valami részletét ami működik?

    Szerver Config
    config openvpn 'myvpn'
    option enabled '1'
    option dev 'tun'
    option port '1194'
    option proto 'udp'
    option log '/tmp/openvpn.log'
    option verb '3'
    option ca '/etc/openvpn/ca.crt'
    option cert '/etc/openvpn/my-server.crt'
    option key '/etc/openvpn/my-server.key'
    option server '10.8.0.0 255.255.255.0'
    option dh '/etc/openvpn/dh2048.pem'
    option push 'route 192.168.1.0 255.255.255.0'

    Cliens config
    dev tun
    proto udp

    log openvpn.log
    verb 3

    ca ca.crt
    cert my-client.crt
    key my-client.key

    client
    remote-cert-tls server
    remote *.ddns.net 1194

    és a config fájl mellett van a másik 3 fájl is.

    SERVER oldali LOG
    Mon May 25 19:48:57 2015 OpenVPN 2.3.6 mips-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jan 6 2015
    Mon May 25 19:48:57 2015 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.08
    Mon May 25 19:48:57 2015 WARNING: --keepalive option is missing from server config
    Mon May 25 19:48:57 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
    Mon May 25 19:48:58 2015 Diffie-Hellman initialized with 2048 bit key
    Mon May 25 19:48:58 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]
    Mon May 25 19:48:58 2015 TUN/TAP device tun0 opened
    Mon May 25 19:48:58 2015 TUN/TAP TX queue length set to 100
    Mon May 25 19:48:58 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
    Mon May 25 19:48:58 2015 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
    Mon May 25 19:48:59 2015 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
    Mon May 25 19:48:59 2015 UDPv4 link local (bound): [undef]
    Mon May 25 19:48:59 2015 UDPv4 link remote: [undef]
    Mon May 25 19:48:59 2015 MULTI: multi_init called, r=256 v=256
    Mon May 25 19:48:59 2015 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
    Mon May 25 19:48:59 2015 Initialization Sequence Completed
    Mon May 25 19:49:14 2015 94.44.26.90:64699 TLS: Initial packet from [AF_INET]94.44.26.90:64699, sid=9fe8ef85 0b1b6776
    Mon May 25 19:49:17 2015 94.44.26.90:64699 VERIFY OK: depth=1, C=HU, L=BudaPest, name=ACCES1
    Mon May 25 19:49:17 2015 94.44.26.90:64699 VERIFY OK: depth=0, CN=my-client, name=EasyRSA
    Mon May 25 19:49:18 2015 94.44.26.90:64699 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
    Mon May 25 19:49:18 2015 94.44.26.90:64699 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
    Mon May 25 19:49:18 2015 94.44.26.90:64699 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
    Mon May 25 19:49:18 2015 94.44.26.90:64699 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
    Mon May 25 19:49:18 2015 94.44.26.90:64699 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
    Mon May 25 19:49:18 2015 94.44.26.90:64699 [my-client] Peer Connection Initiated with [AF_INET]94.44.26.90:64699
    Mon May 25 19:49:18 2015 my-client/94.44.26.90:64699 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
    Mon May 25 19:49:18 2015 my-client/94.44.26.90:64699 MULTI: Learn: 10.8.0.6 -> my-client/94.44.26.90:64699
    Mon May 25 19:49:18 2015 my-client/94.44.26.90:64699 MULTI: primary virtual IP for my-client/94.44.26.90:64699: 10.8.0.6
    Mon May 25 19:49:21 2015 my-client/94.44.26.90:64699 PUSH: Received control message: 'PUSH_REQUEST'
    Mon May 25 19:49:21 2015 my-client/94.44.26.90:64699 send_push_reply(): safe_cap=940
    Mon May 25 19:49:21 2015 my-client/94.44.26.90:64699 SENT CONTROL [my-client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ifconfig 10.8.0.6 10.8.0.5' (status=1)

    [ Szerkesztve ]

    LEDE - R3G/DIR860l -> https://tinyurl.hu/Ntkb/

Új hozzászólás Aktív témák