Openvpn Matriz e Duas Filiais [RESOLVIDO]
1. Openvpn Matriz e Duas Filiais [RESOLVIDO]
asparion
(usa Ubuntu)
Enviado em 28/02/2014 - 15:26h
Ola boa tarde a todos..Achei que tinha resolvido mas não. Alguém pode ver o que ta errado aqui segue.
MATRIZ = 192.168.0.0/24 IP VALIDO 189.7.20.XX
FILIAL 1 = 192.168.1.0/24 ( VM1 TESTE )
FILIAL 2 = 192.168.1.0/24 ( VM2 TESTE MESMA REDE VM1 )
#filial1.conf -- na matriz
dev tun0
proto udp
ifconfig 10.0.0.1 10.0.0.2
cd /etc/openvpn
secret filial1.key
port 1194
user root
group root
comp-lzo
persist-key
persist-tun
ping 15
verb 3
status /var/log/openvpn/filial1.log
log-append /var/log/openvpn/messages.log
log /var/log/openvpn/logsvpn.log
#route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.0.0.2
#filial1.conf -- no cliente1 VM1
dev tun0
proto udp
ifconfig 10.0.0.2 10.0.0.1
remote 189.7.20.XX
cd /etc/openvpn
secret filial1.key
port 1194
user nobody
group nobody
comp-lzo
persist-key
persist-tun
ping 15
verb 3
status /var/log/openvpn/filial1.log
log-append /var/log/openvpn/messages.log
log /var/log/openvpn/logsvpn.log
#route add -net 192.168.0.0 netmask 255.255.255.0 gw 10.0.0.1
#filial2.conf -- na matriz
dev tun1
proto udp
ifconfig 20.0.0.1 20.0.0.2
cd /etc/openvpn
secret filial2.key
port 5000
user root
group root
comp-lzo
persist-key
persist-tun
ping 15
verb 3
status /var/log/openvpn/filial2.log
log-append /var/log/openvpn/messages.log
log /var/log/openvpn/logsvpn.log
#route add -net 192.168.1.0 netmask 255.255.255.0 gw 20.0.0.2
#filial2.conf -- no cliente2 VM2
dev tun1
proto udp
ifconfig 20.0.0.2 20.0.0.1
remote 189.7.20.XX
cd /etc/openvpn
secret filial2.key
port 5000
user nobody
group nobody
comp-lzo
persist-key
persist-tun
ping 15
verb 3
status /var/log/openvpn/filial2.log
log-append /var/log/openvpn/messages.log
log /var/log/openvpn/logsvpn.log
#route add -net 192.168.0.0 netmask 255.255.255.0 gw 20.0.0.1
Firewall nas matriz e nas duas filias
Iptables –N PORTAS
Iptables –A INPUT –j PORTAS
Iptables –A FORWARD –j PORTAS
Iptables –A OUPUT –j PORTAS
Iptables –A PORTAS –p udp –dport 1194 –j ACCEPT
Iptables –A PORTAS –p udp –dport 5000 –j ACCEPT
Iptables –A PORTAS –I tun0 –o tun0 –j ACCEPT
Iptables –A PORTAS –I tun1 –o tun1 –j ACCEPT
Iptables –A POSTROUTING –o eth0 –j MASQUERADE
Setenforce 0
echo 1 > /proc/sys/net/ipv4_ip_forward
a filial1 conecta certinho com a matriz
ja a filial 2 nao esta pingando mas nao da erro quando sobe a vpn
service openvpn restart ---> ok
as configuraçoes parecem todas ok
alguem sabe de algum macete ai pra esse joça fumegar rsrs