2016-10-27 18:32 GMT+08:00 Gert Doering <g...@greenie.muc.de>: > Hi, > > On Thu, Oct 27, 2016 at 12:19:06PM +0800, Hongyi Zhao wrote: >> $ sudo ifconfig tun1 >> tun1 Link encap:UNSPEC HWaddr >> 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 >> inet addr:10.211.1.9 P-t-P:10.211.1.10 Mask:255.255.255.255 > > This looks like "topology net30" is used on the server. In that case, the > .10 address is not really there on the server, it's only seen as such > on the client (so it can have its /30 subnet). > > The real server address is likely 10.211.1.1 - ping that one.
I've tried that for several vpngate's vpn server, most of them cann't response the ping on the address 10.211.1.1. Furthermore, both the public ip address of the vpn server and the public gateway of vpngate (10.211.254.254) can be pinged via the tun interface, see the following: $ ping -c 4 -I tun21 10.211.254.254 PING 10.211.254.254 (10.211.254.254) from 10.211.1.21 tun21: 56(84) bytes of data. 64 bytes from 10.211.254.254: icmp_seq=1 ttl=128 time=69.0 ms 64 bytes from 10.211.254.254: icmp_seq=2 ttl=128 time=60.2 ms 64 bytes from 10.211.254.254: icmp_seq=3 ttl=128 time=69.6 ms 64 bytes from 10.211.254.254: icmp_seq=4 ttl=128 time=60.5 ms --- 10.211.254.254 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3004ms rtt min/avg/max/mdev = 60.202/64.873/69.686/4.496 ms $ ping -c 4 -I tun21 126.203.236.65 PING 126.203.236.65 (126.203.236.65) from 10.211.1.21 tun21: 56(84) bytes of data. 64 bytes from 126.203.236.65: icmp_seq=1 ttl=63 time=72.5 ms 64 bytes from 126.203.236.65: icmp_seq=2 ttl=63 time=73.5 ms 64 bytes from 126.203.236.65: icmp_seq=3 ttl=63 time=71.4 ms 64 bytes from 126.203.236.65: icmp_seq=4 ttl=63 time=71.3 ms --- 126.203.236.65 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3004ms rtt min/avg/max/mdev = 71.383/72.257/73.580/0.892 ms But, if I want to test the latency of the vpn server, which of the above tests should be more appropriate? > > > Much better, have the server move to "topology subnet"... But the vpn server is not operated / manipulated by me ... Regards > > gert > -- > USENET is *not* the non-clickable part of WWW! > //www.muc.de/~gert/ > Gert Doering - Munich, Germany g...@greenie.muc.de > fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de -- Hongyi Zhao <hongyi.z...@gmail.com> Xinjiang Technical Institute of Physics and Chemistry Chinese Academy of Sciences GnuPG DSA: 0xD108493 ------------------------------------------------------------------------------ The Command Line: Reinvented for Modern Developers Did the resurgence of CLI tooling catch you by surprise? Reconnect with the command line and become more productive. Learn the new .NET and ASP.NET CLI. Get your free copy! http://sdm.link/telerik _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
