|
|
Hi Tina, 1. Vtun is another solution which uses the net tun interface 2. If you are little confused try first to set up a tunnel between 2 local hosts. 3. If not the config below might work for your setup. Box 1 ( lets say that it has the valid IP 66.xxx.xxx.123 ) ======== dev tun lport 5000 verb 3 ifconfig 10.0.0.1 10.0.0.2 secret /root/certificates/temp.key Box 2 ============== dev tun rport 5000 remote 66.xxx.xxx.123 verb 3 ifconfig 10.0.0.2 10.0.0.1 secret /root/certificates/temp.key Start openvpn in box1, then in box 2. Try to ping in the tun ip adresses. Hope this helps, Tácio Thanks for the Reply. I have made changes as per your configs files and here are the scenario please help. When I start the openvp from Box1 the Status is : Box 1 =============== [root@server certificates]# /usr/local/sbin/openvpn --config openvpn.conf Fri Aug 1 21:07:22 2003 0: OpenVPN 1.4.2 i686-pc-linux-gnu [SSL] built on Jul 29 2003 Fri Aug 1 21:07:22 2003 1: UDP link local (bound): [undef]:5000 Fri Aug 1 21:07:22 2003 2: UDP link remote: [undef] Fri Aug 1 21:07:22 2003 3: Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Fri Aug 1 21:07:22 2003 4: Static Encrypt: Using 160 bit message digest 'SHA1' for HMAC authentication Fri Aug 1 21:07:22 2003 5: Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Fri Aug 1 21:07:22 2003 6: Static Decrypt: Using 160 bit message digest 'SHA1' for HMAC authentication Fri Aug 1 21:07:22 2003 7: Data Channel MTU parms [ udp_mtu=1300 extra_frame=44 extra_buffer=0 extra_tun=0 dynamic = [ mtu_min_initial=MTU_INITIAL_UNDEF mtu_max_initial=MTU_INITIAL_UNDEF mtu_initial=MTU_SET_TO_MAX mtu_min=144 mtu_max=1300 mtu=1300 ]] Fri Aug 1 21:07:22 2003 8: TUN/TAP device tun0 opened Fri Aug 1 21:07:22 2003 9: /sbin/ifconfig tun0 192.168.1.101 pointopoint 192.168.1.102 mtu 1256 After this i dont get the prompt it just stops here on the both the machines. Box2 =========================== [root@localhost certificates]# /usr/local/sbin/openvpn --config openvpn.conf Fri Aug 1 11:15:21 2003 0: OpenVPN 1.4.2 i686-pc-linux-gnu [SSL] built on Aug 1 2003 Fri Aug 1 11:15:21 2003 1: UDP link local (bound): [undef]:5000 Fri Aug 1 11:15:21 2003 2: UDP link remote: 66.xxx.xxx.123:5000 Fri Aug 1 11:15:21 2003 3: Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Fri Aug 1 11:15:21 2003 4: Static Encrypt: Using 160 bit message digest 'SHA1' for HMAC authentication Fri Aug 1 11:15:21 2003 5: Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Fri Aug 1 11:15:21 2003 6: Static Decrypt: Using 160 bit message digest 'SHA1' for HMAC authentication Fri Aug 1 11:15:21 2003 7: Data Channel MTU parms [ udp_mtu=1300 extra_frame=44 extra_buffer=0 extra_tun=0 dynamic = [ mtu_min_initial=MTU_INITIAL_UNDEF mtu_max_initial=MTU_INITIAL_UNDEF mtu_initial=MTU_SET_TO_MAX mtu_min=144 mtu_max=1300 mtu=1300 ]] Fri Aug 1 11:15:21 2003 8: TUN/TAP device tun0 opened Fri Aug 1 11:15:21 2003 9: /sbin/ifconfig tun0 192.168.1.102 pointopoint 192.168.1.101 mtu 1256 Now when i take these both the processse to background and ping from Box1 [root@server certificates]# ping 192.168.1.102 PING 192.168.1.102 (192.168.1.102) from 192.168.1.101 : 56(84) bytes of data. Here it stops!! I am doing something wrong!! Regards, Tina. 01 August 2003 07:41, System wrote: > > Hello All, > > > > I am a NewBie to openvpn and Tunnel, But i have know how of Networking. > > > > I want to setup a tunnel between two linux boxes. > > Scenario: > > Box 1 : Redhat 7.3 machine which is a webhosting server with a Static IP. > > Box 2 : Redhat 9.0 machine which is on a DSL connection and a Dynamic Ip. > > > > I have compiled openvpn without any compression, I also compiled vTun and > > both are on Box1 i haven't done anything on the Redhat 9.0 box. > > > > Can Anyone please put me on the correct path, Any howto is available. I > > have > > > googled and also went to the openvpn site but that how is out of my head. > > If > > > any one can please help me. > > I have compiled openvpn and vtun on both the Machines Now I have a question > please any body anwser this: > > Box 1 Ip Address : 66.xxx.xxxx.124/127 this is Static pool of IP > Box 2 Ip Address : 192.168.1.101 (local) and DSL(24.xxx.xxx.10 this is > Dynamic) > > I have use the SSH Keys for the same and also configured for Passwordless > Authentication. > These are my openvpn.conf files > Box 1 > ======== > dev tun > port 5000 > #comp-lzo > #ping 15 > verb 3 > #shaper 1000 > remote 24.xxx.xxx.145 > ifconfig 66.xxx.xxx.123 66.xxx.xxx.124 > #up /home/openvpn/bin/ip-up.sh > #down /home/openvpn/bin/ip-down.sh > > #Using Pre-Shared Secret Key. > secret /root/certificates/temp.key > > Box 2 > ============== > dev tun > port 5000 > #comp-lzo > #ping 15 > verb 3 > #shaper 1000 > remote 66.xxx.xxx.123 > ifconfig 192.168.1.101 192.168.1.102 > #up /home/openvpn/bin/ip-up.sh > #down /home/openvpn/bin/ip-down.sh > > #Using Pre-Shared Secret Key. > secret /root/certificates/temp.key > > The above example is found from Google and from openvpn site. > I don;t know what these two file should contain i dont have them and that > is why they are commented. > #up /home/openvpn/bin/ip-up.sh > #down /home/openvpn/bin/ip-down.sh > > Now when i start > openvpn --config openvpn.conf from both the machines They both goes to the > halt stage and nothing happens after. > > I just want to know what ips should and the seuquence i have a confusion > there . > Can anybody please correct it the conf file by replacing them to the Right > place. > > Regards, > Tina. > > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > Openvpn-users mailing list > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx > https://lists.sourceforge.net/lists/listinfo/openvpn-users ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |