Twitter iPhone pliant OnePlus 11 PS5 Disney+ Orange Livebox Windows 11

OpenVPN -> probleme avec dev tap

2 réponses
Avatar
Jérôme Wentzel
------=_Part_5325_7976832.1150362433114
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Bonnjour !

Je suis sous Sarge ( 2.6.8-2-386 ) et je galere quelque peu pour configure=
r
OpenVPN avec une interface TAP.
Tout a =E9t=E9 install=E9 avec apt.

||/ Name Version
Description
+++-=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D-=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D-=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
ii openvpn 2.0-1sarge3
Virtual Private Network daemon
ii bridge-utils 1.0.4-1
Utilities for configuring the Linux ethernet bridge
ii kernel-image-2.6.8-2-386 2.6.8-16sarge1
Linux kernel image for version 2.6.8 on 386.
ii openssl 0.9.7e-3sarge1
Secure Socket Layer (SSL) binary and related cryptographic tools

Tout marche tres bien avec l'interface un dev tun dans la configuration du
serveur, mais je veux pourvoir =EAtre capable d'utiliser un serveur DHCP
extrerne.
Pour cela sur le site de openvpn, il est dit qu'il faut utiliser une
interface tap.

Je peux creer une interface tap0 avec openvpn
Je peux creer avec brctl un bridge br0 et y inclure des interfaces.

Premier probleme:
Des que je rajoute une interface ethx a br0 je ne suis plus capable de
pinguer le reseau deriere et le reseau ne peut plus me piguer !
eth1 10.40.251.1/24
tap0 0.0.0.0/32
br0 10.40.251.10/24

Deuxieme probleme:
lorsque ke lance l'ami Openvpn j'obtiens ca

---------------------------------------------------------------------------=
---------------------------------------------------------------------------=
-------------------------------
Jun 15 08:22:20 localhost ovpn-server[8110]: Current Parameter Settings:
Jun 15 08:22:20 localhost ovpn-server[8110]: config =3D
'/etc/openvpn/server.conf'
Jun 15 08:22:20 localhost ovpn-server[8110]: mode =3D 1
Jun 15 08:22:20 localhost ovpn-server[8110]: persist_config =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: persist_mode =3D 1
Jun 15 08:22:20 localhost ovpn-server[8110]: show_ciphers =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: show_digests =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: show_engines =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: genkey =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: key_pass_file =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: show_tls_ciphers =3D DISABLE=
D
Jun 15 08:22:20 localhost ovpn-server[8110]: proto =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: local =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: remote_list =3D NULL
Jun 15 08:22:20 localhost ovpn-server[8110]: remote_random =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: local_port =3D 1194
Jun 15 08:22:20 localhost ovpn-server[8110]: remote_port =3D 1194
Jun 15 08:22:20 localhost ovpn-server[8110]: remote_float =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: ipchange =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: bind_local =3D ENABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: dev =3D 'tun'
Jun 15 08:22:20 localhost ovpn-server[8110]: dev_type =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: dev_node =3D 'OpenVPN'
Jun 15 08:22:20 localhost ovpn-server[8110]: tun_ipv6 =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: ifconfig_local =3D '10.40.25=
0.1
'
Jun 15 08:22:20 localhost ovpn-server[8110]: ifconfig_remote_netmask =3D =
'
10.40.250.2'
Jun 15 08:22:20 localhost ovpn-server[8110]: ifconfig_noexec =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: ifconfig_nowarn =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: shaper =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: tun_mtu =3D 1500
Jun 15 08:22:20 localhost ovpn-server[8110]: tun_mtu_defined =3D ENABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: link_mtu =3D 1500
Jun 15 08:22:20 localhost ovpn-server[8110]: link_mtu_defined =3D DISABLE=
D
Jun 15 08:22:20 localhost ovpn-server[8110]: tun_mtu_extra =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: tun_mtu_extra_defined =3D
DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: fragment =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: mtu_discover_type =3D -1
Jun 15 08:22:20 localhost ovpn-server[8110]: mtu_test =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: mlock =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: keepalive_ping =3D 10
Jun 15 08:22:20 localhost ovpn-server[8110]: keepalive_timeout =3D 120
Jun 15 08:22:20 localhost ovpn-server[8110]: inactivity_timeout =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: ping_send_timeout =3D 10
Jun 15 08:22:20 localhost ovpn-server[8110]: ping_rec_timeout =3D 240
Jun 15 08:22:20 localhost ovpn-server[8110]: ping_rec_timeout_action =3D =
2
Jun 15 08:22:20 localhost ovpn-server[8110]: ping_timer_remote =3D DISABL=
ED
Jun 15 08:22:20 localhost ovpn-server[8110]: remap_sigusr1 =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: explicit_exit_notification =
=3D

0
Jun 15 08:22:20 localhost ovpn-server[8110]: persist_tun =3D ENABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: persist_local_ip =3D DISABLE=
D
Jun 15 08:22:20 localhost ovpn-server[8110]: persist_remote_ip =3D DISABL=
ED
Jun 15 08:22:20 localhost ovpn-server[8110]: persist_key =3D ENABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: mssfix =3D 1450
Jun 15 08:22:20 localhost ovpn-server[8110]: passtos =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: resolve_retry_seconds =3D
1000000000
Jun 15 08:22:20 localhost ovpn-server[8110]: connect_retry_seconds =3D 5
Jun 15 08:22:20 localhost ovpn-server[8110]: username =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: groupname =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: chroot_dir =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: cd_dir =3D '/etc/openvpn'
Jun 15 08:22:20 localhost ovpn-server[8110]: writepid =3D
'/var/run/openvpn.server.pid'
Jun 15 08:22:20 localhost ovpn-server[8110]: up_script =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: down_script =3D '[UNDEF]'
Jun 15 08:22:20 localhost ovpn-server[8110]: down_pre =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: up_restart =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: up_delay =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: daemon =3D ENABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: inetd =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: log =3D DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: suppress_timestamps =3D
DISABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: nice =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: verbosity =3D 9
Jun 15 08:22:20 localhost ovpn-server[8110]: mute =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: gremlin =3D 0
Jun 15 08:22:20 localhost ovpn-server[8110]: status_file =3D '
openvpn-status.log'
Jun 15 08:22:20 localhost ovpn-server[8110]: status_file_version =3D 1
Jun 15 08:22:20 localhost ovpn-server[8110]: status_file_update_freq =3D =
60
Jun 15 08:22:20 localhost ovpn-server[8110]: occ =3D ENABLED
Jun 15 08:22:20 localhost ovpn-server[8110]: rcvbuf =3D 65536
Jun 15 08:22:21 localhost ovpn-server[8110]: sndbuf =3D 65536
Jun 15 08:22:21 localhost ovpn-server[8110]: socks_proxy_server =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: socks_proxy_port =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: socks_proxy_retry =3D DISABL=
ED
Jun 15 08:22:21 localhost ovpn-server[8110]: fast_io =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: comp_lzo =3D ENABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: comp_lzo_adaptive =3D ENABLE=
D
Jun 15 08:22:21 localhost ovpn-server[8110]: route_script =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: route_default_gateway =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: route_noexec =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: route_delay =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: route_delay_window =3D 30
Jun 15 08:22:21 localhost ovpn-server[8110]: route_delay_defined =3D
DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: route
10.40.250.0/255.255.255.0/nil/nil
Jun 15 08:22:21 localhost ovpn-server[8110]: management_addr =3D '[UNDEF]=
'
Jun 15 08:22:21 localhost ovpn-server[8110]: management_port =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: management_user_pass =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: management_log_history_cache
=3D 250
Jun 15 08:22:21 localhost ovpn-server[8110]: management_echo_buffer_size =
=3D
100
Jun 15 08:22:21 localhost ovpn-server[8110]: management_query_passwords =
=3D
DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: management_hold =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: shared_secret_file =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: key_direction =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: ciphername_defined =3D ENABL=
ED
Jun 15 08:22:21 localhost ovpn-server[8110]: ciphername =3D 'BF-CBC'
Jun 15 08:22:21 localhost ovpn-server[8110]: authname_defined =3D ENABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: authname =3D 'SHA1'
Jun 15 08:22:21 localhost ovpn-server[8110]: keysize =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: engine =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: replay =3D ENABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: mute_replay_warnings =3D
DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: replay_window =3D 64
Jun 15 08:22:21 localhost ovpn-server[8110]: replay_time =3D 15
Jun 15 08:22:21 localhost ovpn-server[8110]: packet_id_file =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: use_iv =3D ENABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: test_crypto =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: tls_server =3D ENABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: tls_client =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: key_method =3D 2
Jun 15 08:22:21 localhost ovpn-server[8110]: ca_file =3D './keys/ca.crt'
Jun 15 08:22:21 localhost ovpn-server[8110]: dh_file =3D './keys/dh1024.p=
em'
Jun 15 08:22:21 localhost ovpn-server[8110]: cert_file =3D
'./keys/server.crt'
Jun 15 08:22:21 localhost ovpn-server[8110]: priv_key_file =3D
'./keys/server.key'
Jun 15 08:22:21 localhost ovpn-server[8110]: pkcs12_file =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: cipher_list =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: tls_verify =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: tls_remote =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: crl_file =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: ns_cert_type =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: tls_timeout =3D 2
Jun 15 08:22:21 localhost ovpn-server[8110]: renegotiate_bytes =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: renegotiate_packets =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: renegotiate_seconds =3D 3600
Jun 15 08:22:21 localhost ovpn-server[8110]: handshake_window =3D 60
Jun 15 08:22:21 localhost ovpn-server[8110]: transition_window =3D 3600
Jun 15 08:22:21 localhost ovpn-server[8110]: single_session =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: tls_exit =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: tls_auth_file =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: server_network =3D 10.40.250=
.0
Jun 15 08:22:21 localhost ovpn-server[8110]: server_netmask =3D
255.255.255.0
Jun 15 08:22:21 localhost ovpn-server[8110]: server_bridge_ip =3D 0.0.0.0
Jun 15 08:22:21 localhost ovpn-server[8110]: server_bridge_netmask =3D
0.0.0.0
Jun 15 08:22:21 localhost ovpn-server[8110]: server_bridge_pool_start =3D
0.0.0.0
Jun 15 08:22:21 localhost ovpn-server[8110]: server_bridge_pool_end =3D
0.0.0.0
Jun 15 08:22:21 localhost ovpn-server[8110]: push_list =3D
'redirect-gateway,dhcp-option DNS xx.xx.xx.xx,route 10.40.250.1,ping
10,ping-restart 120'
Jun 15 08:22:21 localhost ovpn-server[8110]: ifconfig_pool_defined =3D
ENABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: ifconfig_pool_start =3D
10.40.250.4
Jun 15 08:22:21 localhost ovpn-server[8110]: ifconfig_pool_end =3D
10.40.250.251
Jun 15 08:22:21 localhost ovpn-server[8110]: ifconfig_pool_netmask =3D
0.0.0.0
Jun 15 08:22:21 localhost ovpn-server[8110]:
ifconfig_pool_persist_filename =3D 'ipp.txt'
Jun 15 08:22:21 localhost ovpn-server[8110]:
ifconfig_pool_persist_refresh_freq =3D 600
Jun 15 08:22:21 localhost ovpn-server[8110]: ifconfig_pool_linear =3D
DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: n_bcast_buf =3D 256
Jun 15 08:22:21 localhost ovpn-server[8110]: tcp_queue_limit =3D 64
Jun 15 08:22:21 localhost ovpn-server[8110]: real_hash_size =3D 256
Jun 15 08:22:21 localhost ovpn-server[8110]: virtual_hash_size =3D 256
Jun 15 08:22:21 localhost ovpn-server[8110]: client_connect_script =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: learn_address_script =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: client_disconnect_script =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: client_config_dir =3D '[UNDE=
F]'
Jun 15 08:22:21 localhost ovpn-server[8110]: ccd_exclusive =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: tmp_dir =3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: push_ifconfig_defined =3D
DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: push_ifconfig_local =3D 0.0.=
0.0
Jun 15 08:22:21 localhost ovpn-server[8110]: push_ifconfig_remote_netmask
=3D 0.0.0.0
Jun 15 08:22:21 localhost ovpn-server[8110]: enable_c2c =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: duplicate_cn =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: cf_max =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: cf_per =3D 0
Jun 15 08:22:21 localhost ovpn-server[8110]: max_clients =3D 1024
Jun 15 08:22:21 localhost ovpn-server[8110]: max_routes_per_client =3D 25=
6
Jun 15 08:22:21 localhost ovpn-server[8110]: client_cert_not_required =3D
DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: username_as_common_name =3D
DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: auth_user_pass_verify_script
=3D '[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]:
auth_user_pass_verify_script_via_file =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: client =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: pull =3D DISABLED
Jun 15 08:22:21 localhost ovpn-server[8110]: auth_user_pass_file =3D
'[UNDEF]'
Jun 15 08:22:21 localhost ovpn-server[8110]: OpenVPN 2.0 i386-pc-linux [SSL=
]
[LZO] [EPOLL] built on Apr 6 2006
Jun 15 08:22:21 localhost ovpn-server[8110]: Diffie-Hellman initialized wit=
h
1024 bit key
Jun 15 08:22:21 localhost ovpn-server[8110]: MTU DYNAMIC mtu=3D0, flags=3D1=
, 0
-> 138
Jun 15 08:22:21 localhost ovpn-server[8110]: TLS-Auth MTU parms [ L:1542
D:138 EF:38 EB:0 ET:0 EL:0 ]
Jun 15 08:22:21 localhost ovpn-server[8110]: MTU DYNAMIC mtu=3D1450, flags=
=3D2,
1542 -> 1450
Jun 15 08:22:21 localhost ovpn-server[8110]: Note: Cannot open TUN/TAP dev
OpenVPN: No such file or directory (errno=3D2)
Jun 15 08:22:21 localhost ovpn-server[8110]: Note: Attempting fallback to
kernel 2.2 TUN/TAP interface
Jun 15 08:22:21 localhost ovpn-server[8110]: Cannot open TUN/TAP dev
OpenVPN: No such file or directory (errno=3D2)
Jun 15 08:22:21 localhost ovpn-server[8110]: Exiting
---------------------------------------------------------------------------=
---------------------------------------------------------------------------=
-------------------------------
Je ne vois pas ou j'ai pu faire l'erreur !
Quelqu'un a t il uine id=E9e ?

Merci d'avance !

------=_Part_5325_7976832.1150362433114
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Bonnjour !<br>
<br>
Je suis sous Sarge&nbsp; ( 2.6.8-2-386 ) et je galere quelque peu pour conf=
igurer OpenVPN avec une interface TAP.<br>
Tout a =E9t=E9 install=E9 avec apt.<br>
<br>
||/
Name&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;
Version&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;
Description<br>
+++-=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D-=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D-=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D<br>
ii&nbsp;
openvpn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;
2.0-1sarge3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Virtual Private Network daemon<br>
ii&nbsp;
bridge-utils&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
1.0.4-1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;
Utilities for configuring the Linux ethernet bridge<br>
ii&nbsp;
kernel-image-2.6.8-2-386&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;
2.6.8-16sarge1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Linux kernel image for version 2.6.8 on 386.<br>
ii&nbsp;
openssl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;
0.9.7e-3sarge1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Secure Socket Layer (SSL) binary and related cryptographic tools<br>
<br>
Tout marche tres bien avec l'interface un dev tun dans la configuration
du serveur, mais je veux pourvoir =EAtre capable d'utiliser un serveur
DHCP extrerne.<br>
Pour cela sur le site de openvpn, il est dit qu'il faut utiliser une interf=
ace tap.<br>
<br>
Je peux creer une interface tap0 avec openvpn<br>
Je peux creer avec brctl un bridge br0 et y inclure des interfaces.<br>
<br>
Premier probleme:<br>
Des que je rajoute une interface ethx a br0 je ne suis plus capable de
pinguer le reseau deriere et le reseau ne peut plus me piguer !<br>
eth1 <a href=3D"http://10.40.251.1/24">10.40.251.1/24</a><br>
tap0 <a href=3D"http://0.0.0.0/32">0.0.0.0/32</a><br>
br0 <a href=3D"http://10.40.251.10/24">10.40.251.10/24</a><br>
<br>
Deuxieme probleme:<br>
lorsque ke lance l'ami Openvpn j'obtiens ca<br>
<br>
---------------------------------------------------------------------------=
---------------------------------------------------------------------------=
-------------------------------<br>
Jun 15 08:22:20 localhost ovpn-server[8110]: Current Parameter Settings:<br=
>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; config =3D '/etc/o=
penvpn/server.conf'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; mode =3D 1<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; persist_config =3D=
DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; persist_mode =3D 1=
<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; show_ciphers =3D D=
ISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; show_digests =3D D=
ISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; show_engines =3D D=
ISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; genkey =3D DISABLE=
D<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; key_pass_file =3D =
'[UNDEF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; show_tls_ciphers =
=3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; proto =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; local =3D '[UNDEF]=
'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; remote_list =3D NU=
LL<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; remote_random =3D =
DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; local_port =3D 119=
4<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; remote_port =3D 11=
94<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; remote_float =3D D=
ISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ipchange =3D '[UND=
EF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; bind_local =3D ENA=
BLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; dev =3D 'tun'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; dev_type =3D '[UND=
EF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; dev_node =3D 'Open=
VPN'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; tun_ipv6 =3D DISAB=
LED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_local =3D=
'<a href=3D"http://10.40.250.1">10.40.250.1</a>'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_remote_ne=
tmask =3D '<a href=3D"http://10.40.250.2">10.40.250.2</a>'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_noexec =
=3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_nowarn =
=3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; shaper =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; tun_mtu =3D 1500<b=
r>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; tun_mtu_defined =
=3D ENABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; link_mtu =3D 1500<=
br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; link_mtu_defined =
=3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; tun_mtu_extra =3D =
0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; tun_mtu_extra_defi=
ned =3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; fragment =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; mtu_discover_type =
=3D -1<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; mtu_test =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; mlock =3D DISABLED=
<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; keepalive_ping =3D=
10<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; keepalive_timeout =
=3D 120<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; inactivity_timeout=
=3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ping_send_timeout =
=3D 10<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ping_rec_timeout =
=3D 240<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ping_rec_timeout_a=
ction =3D 2<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; ping_timer_remote =
=3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; remap_sigusr1 =3D =
0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; explicit_exit_noti=
fication =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; persist_tun =3D EN=
ABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; persist_local_ip =
=3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; persist_remote_ip =
=3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; persist_key =3D EN=
ABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; mssfix =3D 1450<br=
>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; passtos =3D DISABL=
ED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; resolve_retry_seco=
nds =3D 1000000000<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; connect_retry_seco=
nds =3D 5<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; username =3D '[UND=
EF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; groupname =3D '[UN=
DEF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; chroot_dir =3D '[U=
NDEF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; cd_dir =3D '/etc/o=
penvpn'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; writepid =3D '/var=
/run/openvpn.server.pid'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; up_script =3D '[UN=
DEF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; down_script =3D '[=
UNDEF]'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; down_pre =3D DISAB=
LED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; up_restart =3D DIS=
ABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; up_delay =3D DISAB=
LED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; daemon =3D ENABLED=
<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; inetd =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; log =3D DISABLED<b=
r>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; suppress_timestamp=
s =3D DISABLED<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; nice =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; verbosity =3D 9<br=
>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; mute =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; gremlin =3D 0<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; status_file =3D 'o=
penvpn-status.log'<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; status_file_versio=
n =3D 1<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; status_file_update=
_freq =3D 60<br>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; occ =3D ENABLED<br=
>
Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp;&nbsp; rcvbuf =3D 65536<b=
r>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; sndbuf =3D 65536<b=
r>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; socks_proxy_server=
=3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; socks_proxy_port =
=3D 0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; socks_proxy_retry =
=3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; fast_io =3D DISABL=
ED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; comp_lzo =3D ENABL=
ED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; comp_lzo_adaptive =
=3D ENABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; route_script =3D '=
[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; route_default_gate=
way =3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; route_noexec =3D D=
ISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; route_delay =3D 0<=
br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; route_delay_window=
=3D 30<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; route_delay_define=
d =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; route <a href=3D"h=
ttp://10.40.250.0/255.255.255.0/nil/nil">10.40.250.0/255.255.255.0/nil/nil<=
/a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; management_addr =
=3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; management_port =
=3D 0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; management_user_pa=
ss =3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; management_log_his=
tory_cache =3D 250<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; management_echo_bu=
ffer_size =3D 100<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; management_query_p=
asswords =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; management_hold =
=3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; shared_secret_file=
=3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; key_direction =3D =
0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ciphername_defined=
=3D ENABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ciphername =3D 'BF=
-CBC'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; authname_defined =
=3D ENABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; authname =3D 'SHA1=
'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; keysize =3D 0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; engine =3D DISABLE=
D<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; replay =3D ENABLED=
<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; mute_replay_warnin=
gs =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; replay_window =3D =
64<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; replay_time =3D 15=
<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; packet_id_file =3D=
'[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; use_iv =3D ENABLED=
<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; test_crypto =3D DI=
SABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tls_server =3D ENA=
BLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tls_client =3D DIS=
ABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; key_method =3D 2<b=
r>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ca_file =3D './key=
s/ca.crt'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; dh_file =3D './key=
s/dh1024.pem'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; cert_file =3D './k=
eys/server.crt'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; priv_key_file =3D =
'./keys/server.key'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; pkcs12_file =3D '[=
UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; cipher_list =3D '[=
UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tls_verify =3D '[U=
NDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tls_remote =3D '[U=
NDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; crl_file =3D '[UND=
EF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ns_cert_type =3D 0=
<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tls_timeout =3D 2<=
br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; renegotiate_bytes =
=3D 0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; renegotiate_packet=
s =3D 0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; renegotiate_second=
s =3D 3600<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; handshake_window =
=3D 60<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; transition_window =
=3D 3600<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; single_session =3D=
DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tls_exit =3D DISAB=
LED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tls_auth_file =3D =
'[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; server_network =3D=
<a href=3D"http://10.40.250.0">10.40.250.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; server_netmask =3D=
<a href=3D"http://255.255.255.0">255.255.255.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; server_bridge_ip =
=3D <a href=3D"http://0.0.0.0">0.0.0.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; server_bridge_netm=
ask =3D <a href=3D"http://0.0.0.0">0.0.0.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; server_bridge_pool=
_start =3D <a href=3D"http://0.0.0.0">0.0.0.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; server_bridge_pool=
_end =3D <a href=3D"http://0.0.0.0">0.0.0.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; push_list =3D
'redirect-gateway,dhcp-option DNS xx.xx.xx.xx,route <a href=3D"http://10.40=
.250.1">10.40.250.1</a>,ping
10,ping-restart 120'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_pool_defi=
ned =3D ENABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_pool_star=
t =3D <a href=3D"http://10.40.250.4">10.40.250.4</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_pool_end =
=3D <a href=3D"http://10.40.250.251">10.40.250.251</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_pool_netm=
ask =3D <a href=3D"http://0.0.0.0">0.0.0.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_pool_pers=
ist_filename =3D 'ipp.txt'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_pool_pers=
ist_refresh_freq =3D 600<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ifconfig_pool_line=
ar =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; n_bcast_buf =3D 25=
6<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tcp_queue_limit =
=3D 64<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; real_hash_size =3D=
256<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; virtual_hash_size =
=3D 256<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; client_connect_scr=
ipt =3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; learn_address_scri=
pt =3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; client_disconnect_=
script =3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; client_config_dir =
=3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; ccd_exclusive =3D =
DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; tmp_dir =3D '[UNDE=
F]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; push_ifconfig_defi=
ned =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; push_ifconfig_loca=
l =3D <a href=3D"http://0.0.0.0">0.0.0.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; push_ifconfig_remo=
te_netmask =3D <a href=3D"http://0.0.0.0">0.0.0.0</a><br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; enable_c2c =3D DIS=
ABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; duplicate_cn =3D D=
ISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; cf_max =3D 0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; cf_per =3D 0<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; max_clients =3D 10=
24<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; max_routes_per_cli=
ent =3D 256<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; client_cert_not_re=
quired =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; username_as_common=
_name =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; auth_user_pass_ver=
ify_script =3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; auth_user_pass_ver=
ify_script_via_file =3D DISABLED<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; client =3D DISABLE=
D<br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; pull =3D DISABLED<=
br>
Jun 15 08:22:21 localhost ovpn-server[8110]:&nbsp;&nbsp; auth_user_pass_fil=
e =3D '[UNDEF]'<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: OpenVPN 2.0 i386-pc-linux [SSL=
] [LZO] [EPOLL] built on Apr&nbsp; 6 2006<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: Diffie-Hellman initialized wit=
h 1024 bit key<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: MTU DYNAMIC mtu=3D0, flags=3D1=
, 0 -&gt; 138<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: TLS-Auth MTU parms [ L:1542 D:=
138 EF:38 EB:0 ET:0 EL:0 ]<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: MTU DYNAMIC mtu=3D1450, flags=
=3D2, 1542 -&gt; 1450<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: Note: Cannot open TUN/TAP dev =
OpenVPN: No such file or directory (errno=3D2)<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: Note: Attempting fallback to k=
ernel 2.2 TUN/TAP interface<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: Cannot open TUN/TAP dev OpenVP=
N: No such file or directory (errno=3D2)<br>
Jun 15 08:22:21 localhost ovpn-server[8110]: Exiting<br>
---------------------------------------------------------------------------=
---------------------------------------------------------------------------=
-------------------------------<br>
Je ne vois pas ou j'ai pu faire l'erreur !<br>
Quelqu'un a t il uine id=E9e ?<br>
<br>
Merci d'avance !<br>

------=_Part_5325_7976832.1150362433114--


--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.net/?DebianFrench
Vous pouvez aussi ajouter le mot ``spam'' dans vos champs "From" et
"Reply-To:"

To UNSUBSCRIBE, email to debian-user-french-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

2 réponses

Avatar
Pascal Hambourg
Salut,

Jérôme Wentzel a écrit :

Tout marche tres bien avec l'interface un dev tun dans la configuration du
serveur, mais je veux pourvoir être capable d'utiliser un serveur DHCP
extrerne.
Pour cela sur le site de openvpn, il est dit qu'il faut utiliser une
interface tap.



Oui, l'interface tap émule une liaison au niveau ethernet ("pontée")
avec adresses MAC et compagnie alors que l'interface tun crée une
liaison au niveau IP ("routée").

Je peux creer une interface tap0 avec openvpn
Je peux creer avec brctl un bridge br0 et y inclure des interfaces.

Premier probleme:
Des que je rajoute une interface ethx a br0 je ne suis plus capable de
pinguer le reseau deriere et le reseau ne peut plus me piguer !



C'est parce que dès que tu ajoutes une interface ethernet à un pont, en
quelque sorte elle cesse d'exister en tant que telle et devient juste un
"port" du pont.
Il faut associer l'interface au pont dès le démarrage de la machine, et
donner au pont l'adresse MAC et les paramètres IP qui étaient ceux de
l'interface eth. Le pont doit remplacer partout l'interface ethernet.

eth1 10.40.251.1/24
tap0 0.0.0.0/32
br0 10.40.251.10/24



En fait une fois associée au pont, eth1 ne doit plus avoir d'adresse IP,
c'est le pont qui doit prendre son ancienne adresse. Idem pour tap0 qui
ne doit pas avoir de configuration IP.

Deuxieme probleme:
lorsque ke lance l'ami Openvpn j'obtiens ca

--------------------------------------------------------------------------


[...]
Jun 15 08:22:20 localhost ovpn-server[8110]: ifconfig_remote_netmask = '
10.40.250.2'



Je ne connais pas bien OpenVPN pour ne jamais l'avoir utilisé, mais ça
me paraît bizarre qu'un truc qui s'appelle 'mask' ait une valeur de
10.40.250.2.


--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.net/?DebianFrench
Vous pouvez aussi ajouter le mot ``spam'' dans vos champs "From" et
"Reply-To:"

To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Avatar
Jérôme Wentzel
------=_Part_8377_30129001.1150374269524
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

2006/6/15, Pascal Hambourg :

Salut,

Jérôme Wentzel a écrit :
>
> Tout marche tres bien avec l'interface un dev tun dans la configuration
du
> serveur, mais je veux pourvoir être capable d'utiliser un serveur DHC P
> extrerne.
> Pour cela sur le site de openvpn, il est dit qu'il faut utiliser une
> interface tap.

Oui, l'interface tap émule une liaison au niveau ethernet ("pontée")
avec adresses MAC et compagnie alors que l'interface tun crée une
liaison au niveau IP ("routée").

Je peux creer une interface tap0 avec openvpn
> Je peux creer avec brctl un bridge br0 et y inclure des interfaces.
>
> Premier probleme:
> Des que je rajoute une interface ethx a br0 je ne suis plus capable de
> pinguer le reseau deriere et le reseau ne peut plus me piguer !

C'est parce que dès que tu ajoutes une interface ethernet à un pont, en
quelque sorte elle cesse d'exister en tant que telle et devient juste un
"port" du pont.
Il faut associer l'interface au pont dès le démarrage de la machine, et
donner au pont l'adresse MAC et les paramètres IP qui étaient ceux de
l'interface eth. Le pont doit remplacer partout l'interface ethernet.



eth1 10.40.251.1/24
> tap0 0.0.0.0/32
> br0 10.40.251.10/24

En fait une fois associée au pont, eth1 ne doit plus avoir d'adresse IP ,
c'est le pont qui doit prendre son ancienne adresse. Idem pour tap0 qui
ne doit pas avoir de configuration IP.




Ok merci, je me suis quelque peut emmelé les pinceaux ! Maintenant ca
marche bien !


Deuxieme probleme:
> lorsque ke lance l'ami Openvpn j'obtiens ca
>
>
------------------------------------------------------------------------- -
[...]
> Jun 15 08:22:20 localhost ovpn-server[8110]: ifconfig_remote_netmask =
'
> 10.40.250.2'



Je ne connais pas bien OpenVPN pour ne jamais l'avoir utilisé, mais ça
me paraît bizarre qu'un truc qui s'appelle 'mask' ait une valeur de
10.40.250.2.




Bizarre effectivement ! car le masque de sous réseau donné au client es t
bon.
Maintenant tout marche sur tap, mais le DHCP est toujours donné par OpenV PN.
je n'ai pas de commande server bridge dans la configuration.



--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.net/?DebianFrench
Vous pouvez aussi ajouter le mot ``spam'' dans vos champs "From" et
"Reply-To:"

To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact






------=_Part_8377_30129001.1150374269524
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

<br><br><div><span class="gmail_quote">2006/6/15, Pascal Hambourg &lt;<a href="mailto:"></a> &gt;:</span><blockquote class="gmail_quote" style="border-left: 1px sol id rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Salut,<br><br>Jérôme Wentzel a écrit :<br>&gt;<br>&gt; Tout marche tr es bien avec l'interface un dev tun dans la configuration du<br>&gt; serveu r, mais je veux pourvoir être capable d'utiliser un serveur DHCP<br>&gt; extrerne.
<br>&gt; Pour cela sur le site de openvpn, il est dit qu'il faut utiliser u ne<br>&gt; interface tap.<br><br>Oui, l'interface tap émule une liaison a u niveau ethernet (&quot;pontée&quot;)<br>avec adresses MAC et compagnie alors que l'interface tun crée une
<br>liaison au niveau IP (&quot;routée&quot;).<br>
</blockquote><blockquote class="gmail_quote" style="border-left: 1px so lid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">&gt; Je peux creer une interface tap0 avec openvpn<br>&gt; Je peux creer avec b rctl un bridge br0 et y inclure des interfaces.
<br>&gt;<br>&gt; Premier probleme:<br>&gt; Des que je rajoute une interface ethx a br0 je ne suis plus capable de<br>&gt; pinguer le reseau deriere et le reseau ne peut plus me piguer !<br><br>C'est parce que dès que tu ajo utes une interface ethernet à un pont, en
<br>quelque sorte elle cesse d'exister en tant que telle et devient juste u n<br>&quot;port&quot; du pont.<br>Il faut associer l'interface au pont dè s le démarrage de la machine, et<br>donner au pont l'adresse MAC et les p aramètres IP qui étaient ceux de
<br>l'interface eth. Le pont doit remplacer partout l'interface ethernet.</ blockquote><blockquote class="gmail_quote" style="border-left: 1px soli d rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">&gt; e th1
<a href="http://10.40.251.1/24">10.40.251.1/24</a><br>&gt; tap0 <a href ="http://0.0.0.0/32">0.0.0.0/32</a><br>&gt; br0 <a href="http://10.40.2 51.10/24">10.40.251.10/24</a><br><br>En fait une fois associée au pont, e th1 ne doit plus avoir d'adresse IP,
<br>c'est le pont qui doit prendre son ancienne adresse. Idem pour tap0 qui <br>ne doit pas avoir de configuration IP.</blockquote><div><br>
Ok merci, je me suis quelque peut&nbsp; emmelé les pinceaux ! Maintenant ca marche bien ! <br>
&nbsp;</div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">& gt; Deuxieme probleme:<br>&gt; lorsque ke lance l'ami Openvpn j'obtiens ca< br>&gt;
<br>&gt; ------------------------------------------------------------------ --------<br>[...]<br>&gt; Jun 15 08:22:20 localhost ovpn-server[8110]:&nbsp ;&nbsp; ifconfig_remote_netmask = '<br>&gt; <a href="http://10.40.250.2 ">10.40.250.2
</a>' <br>
</blockquote><blockquote class="gmail_quote" style="border-left: 1px so lid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Je n e connais pas bien OpenVPN pour ne jamais l'avoir utilisé, mais ça<br>m e paraît bizarre qu'un truc qui s'appelle 'mask' ait une valeur de
<br><a href="http://10.40.250.2">10.40.250.2</a>.</blockquote><div><br>
Bizarre effectivement ! car le masque de sous réseau donné au client es t bon.<br>

Maintenant tout marche sur tap, mais le DHCP est toujours donné par OpenV PN.<br>
je n'ai pas de commande server bridge dans la configuration.<br>
<br>
&nbsp;</div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">- -<br>Lisez la FAQ de la liste avant de poser une question :<br><a href="h ttp://wiki.debian.net/?DebianFrench">
http://wiki.debian.net/?DebianFrench</a><br>Vous pouvez aussi ajouter le mo t ``spam'' dans vos champs &quot;From&quot; et<br>&quot;Reply-To:&quot;<br> <br>To UNSUBSCRIBE, email to <a href="mailto: ists.debian.org">
</a><br>with a subject of &quot; unsubscribe&quot;. Trouble? Contact <a href="mailto: an.org"></a><br><br></blockquote></div><br>

------=_Part_8377_30129001.1150374269524--


--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.net/?DebianFrench
Vous pouvez aussi ajouter le mot ``spam'' dans vos champs "From" et
"Reply-To:"

To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact