-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 12-07-2009 02:32, Rafael Moraes wrote: > Boa madrugada pessoal > > criei uma vpn com openvpn e está funcionando perfeitamente a não ser > pelo fato de não conseguir pingar as redes dos clientes ( Sem firewall > para impedir ) > > O estranho é que consigo acessar um servidor WTS da rede de um cliente > vpn através de outro cliente ou do servidor sem problemas, mas pingar de > jeito nenhum. > > As devidas rotas estão inseridas na configuração do servidor.ex: push > "192.168.1.0 255.255.255.0" > > alguém já passou por isto?
Do FAQ do OpenVPN: | Q: I've successfully set up OpenVPN and can ping between both OpenVPN | peers, however I cannot reach any of the other machines on the | remote subnet. What's the problem? | A: | * Make sure that the firewall is not filtering the TUN/TAP interface. | * Make sure you have IP forwarding enabled on the server. | * If you are using routing (not ethernet bridging), make sure the | clients (or LAN gateway) have a route back to the server for the | packets coming in over the tunnel. This can be done by: | o adding a route in your default gateway for the VPN network IP | subnet pointing to the OpenVPN machine, | o adding a route to every client, or | o NATing all VPN traffic to the local address of the OpenVPN | machine for network traffic which leaves the OpenVPN machine | for the local net. | * If you are still stumped, use tcpdump, wireshark, or WinDump to | determine where packets are being dropped. Referência: http://openvpn.net/index.php/open-source/faq.html Veja os pontos acima para tentar resolver o seu problema, em especial, o fato de que os clientes precisam ter rota pra chegar na outra rede, ainda que seja através do servidor, pois o gateway pode ser diferente. Abraço, - -- Felipe Augusto van de Wiel (faw) "Debian. Freedom to code. Code to freedom!" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEAREIAAYFAkpctfUACgkQCjAO0JDlykaeIACeKLvH7H3E3DA7jCQGvzutIr1J W7oAni8fgn6O8PV/DxXjlkyPEA7hkjNS =Rfx0 -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
