设为首页收藏本站
切换到窄版

 找回密码
 注册
快捷导航
专门网»论坛 › 其他版块 › 网络技术 › 求高手帮我解答一下OPENVPN连接上的一个问题 ...
返回列表 发新帖
查看: 2666|回复: 8

求高手帮我解答一下OPENVPN连接上的一个问题

[复制链接] |自动提醒
阅读字号:
  • 大
  • 中
  • 小
r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
发表于 2010-1-15 21:53:21| 字数 16,499| - 中国–湖北–恩施土家族苗族自治州 电信 | 显示全部楼层 |阅读模式
我用是官方下的最新版本。配置好服务与客户端，不用拔号，取消配置文件里的代理那断。可以正常的接入服务端。
我用上拔号，加上10。0。0。172 80代理。拔号，连接不上，详细看LOG

Fri Jan 15 21:31:44 2010 us=875000 Current Parameter Settings:
Fri Jan 15 21:31:44 2010 us=875000   config = 'test.ovpn'
Fri Jan 15 21:31:44 2010 us=875000   mode = 0
Fri Jan 15 21:31:44 2010 us=875000   show_ciphers = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   show_digests = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   show_engines = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   genkey = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   key_pass_file = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   show_tls_ciphers = DISABLED
Fri Jan 15 21:31:44 2010 us=875000 Connection profiles [default]:
Fri Jan 15 21:31:44 2010 us=875000   proto = tcp-client
Fri Jan 15 21:31:44 2010 us=875000   local = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   local_port = 0
Fri Jan 15 21:31:44 2010 us=875000   remote = '220.114.28.33'
Fri Jan 15 21:31:44 2010 us=875000   remote_port = 443
Fri Jan 15 21:31:44 2010 us=875000   remote_float = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   bind_defined = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   bind_local = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   connect_retry_seconds = 5
Fri Jan 15 21:31:44 2010 us=875000   connect_timeout = 10
Fri Jan 15 21:31:44 2010 us=875000   connect_retry_max = 0
Fri Jan 15 21:31:44 2010 us=875000 BEGIN http_proxy
Fri Jan 15 21:31:44 2010 us=875000   server = '10.0.0.172'
Fri Jan 15 21:31:44 2010 us=875000   port = 80
Fri Jan 15 21:31:44 2010 us=875000   auth_method_string = 'none'
Fri Jan 15 21:31:44 2010 us=875000   auth_file = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   retry = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   timeout = 5
Fri Jan 15 21:31:44 2010 us=875000   http_version = '1.0'
Fri Jan 15 21:31:44 2010 us=875000   user_agent = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000 END http_proxy
Fri Jan 15 21:31:44 2010 us=875000   socks_proxy_server = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   socks_proxy_port = 0
Fri Jan 15 21:31:44 2010 us=875000   socks_proxy_retry = DISABLED
Fri Jan 15 21:31:44 2010 us=875000 Connection profiles END
Fri Jan 15 21:31:44 2010 us=875000   remote_random = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   ipchange = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   dev = 'tun'
Fri Jan 15 21:31:44 2010 us=875000   dev_type = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   dev_node = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   lladdr = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   topology = 1
Fri Jan 15 21:31:44 2010 us=875000   tun_ipv6 = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   ifconfig_local = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   ifconfig_remote_netmask = '[UNDEF]'
Fri Jan 15 21:31:44 2010 us=875000   ifconfig_noexec = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   ifconfig_nowarn = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   shaper = 0
Fri Jan 15 21:31:44 2010 us=875000   tun_mtu = 1500
Fri Jan 15 21:31:44 2010 us=875000   tun_mtu_defined = ENABLED
Fri Jan 15 21:31:44 2010 us=875000   link_mtu = 1500
Fri Jan 15 21:31:44 2010 us=875000   link_mtu_defined = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   tun_mtu_extra = 0
Fri Jan 15 21:31:44 2010 us=875000   tun_mtu_extra_defined = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   fragment = 0
Fri Jan 15 21:31:44 2010 us=875000   mtu_discover_type = -1
Fri Jan 15 21:31:44 2010 us=875000   mtu_test = 0
Fri Jan 15 21:31:44 2010 us=875000   mlock = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   keepalive_ping = 0
Fri Jan 15 21:31:44 2010 us=875000   keepalive_timeout = 0
Fri Jan 15 21:31:44 2010 us=875000   inactivity_timeout = 0
Fri Jan 15 21:31:44 2010 us=875000   ping_send_timeout = 0
Fri Jan 15 21:31:44 2010 us=875000   ping_rec_timeout = 0
Fri Jan 15 21:31:44 2010 us=875000   ping_rec_timeout_action = 0
Fri Jan 15 21:31:44 2010 us=875000   ping_timer_remote = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   remap_sigusr1 = 0
Fri Jan 15 21:31:44 2010 us=875000   explicit_exit_notification = 0
Fri Jan 15 21:31:44 2010 us=875000   persist_tun = DISABLED
Fri Jan 15 21:31:44 2010 us=875000   persist_local_ip = DISABLED
Fri Jan 15 21:31:45 2010 us=125000   persist_remote_ip = DISABLED
Fri Jan 15 21:31:45 2010 us=125000   persist_key = DISABLED
Fri Jan 15 21:31:45 2010 us=125000   mssfix = 1450
Fri Jan 15 21:31:45 2010 us=125000   resolve_retry_seconds = 1000000000
Fri Jan 15 21:31:45 2010 us=125000   username = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=125000   groupname = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=125000   chroot_dir = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=125000   cd_dir = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=125000   writepid = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=125000   up_script = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=125000   down_script = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=125000   down_pre = DISABLED
Fri Jan 15 21:31:45 2010 us=125000   up_restart = DISABLED
Fri Jan 15 21:31:45 2010 us=125000   up_delay = DISABLED
Fri Jan 15 21:31:45 2010 us=125000   daemon = DISABLED
Fri Jan 15 21:31:45 2010 us=125000   inetd = 0
Fri Jan 15 21:31:45 2010 us=125000   log = DISABLED
Fri Jan 15 21:31:45 2010 us=140000   suppress_timestamps = DISABLED
Fri Jan 15 21:31:45 2010 us=140000   nice = 0
Fri Jan 15 21:31:45 2010 us=140000   verbosity = 4
Fri Jan 15 21:31:45 2010 us=140000   mute = 0
Fri Jan 15 21:31:45 2010 us=140000   gremlin = 0
Fri Jan 15 21:31:45 2010 us=140000   status_file = 'openvpn-status.log'
Fri Jan 15 21:31:45 2010 us=140000   status_file_version = 1
Fri Jan 15 21:31:45 2010 us=140000   status_file_update_freq = 60
Fri Jan 15 21:31:45 2010 us=140000   occ = ENABLED
Fri Jan 15 21:31:45 2010 us=140000   rcvbuf = 0
Fri Jan 15 21:31:45 2010 us=140000   sndbuf = 0
Fri Jan 15 21:31:45 2010 us=140000   sockflags = 0
Fri Jan 15 21:31:45 2010 us=140000   fast_io = DISABLED
Fri Jan 15 21:31:45 2010 us=140000   lzo = 7
Fri Jan 15 21:31:45 2010 us=140000   route_script = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=140000   route_default_gateway = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=140000   route_default_metric = 0
Fri Jan 15 21:31:45 2010 us=140000   route_noexec = DISABLED
Fri Jan 15 21:31:45 2010 us=171000   route_delay = 5
Fri Jan 15 21:31:45 2010 us=171000   route_delay_window = 30
Fri Jan 15 21:31:45 2010 us=171000   route_delay_defined = ENABLED
Fri Jan 15 21:31:45 2010 us=171000   route_nopull = DISABLED
Fri Jan 15 21:31:45 2010 us=171000   route_gateway_via_dhcp = DISABLED
Fri Jan 15 21:31:45 2010 us=171000   max_routes = 100
Fri Jan 15 21:31:45 2010 us=171000   allow_pull_fqdn = DISABLED
Fri Jan 15 21:31:45 2010 us=171000   management_addr = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=171000   management_port = 0
Fri Jan 15 21:31:45 2010 us=171000   management_user_pass = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=171000   management_log_history_cache = 250
Fri Jan 15 21:31:45 2010 us=171000   management_echo_buffer_size = 100
Fri Jan 15 21:31:45 2010 us=171000   management_write_peer_info_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=171000   management_client_user = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=171000   management_client_group = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=203000   management_flags = 0
Fri Jan 15 21:31:45 2010 us=203000   shared_secret_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=203000   key_direction = 0
Fri Jan 15 21:31:45 2010 us=203000   ciphername_defined = ENABLED
Fri Jan 15 21:31:45 2010 us=203000   ciphername = 'BF-CBC'
Fri Jan 15 21:31:45 2010 us=203000   authname_defined = ENABLED
Fri Jan 15 21:31:45 2010 us=203000   authname = 'SHA1'
Fri Jan 15 21:31:45 2010 us=203000   prng_hash = 'SHA1'
Fri Jan 15 21:31:45 2010 us=203000   prng_nonce_secret_len = 16
Fri Jan 15 21:31:45 2010 us=203000   keysize = 0
Fri Jan 15 21:31:45 2010 us=203000   engine = DISABLED
Fri Jan 15 21:31:45 2010 us=203000   replay = ENABLED
Fri Jan 15 21:31:45 2010 us=203000   mute_replay_warnings = ENABLED
Fri Jan 15 21:31:45 2010 us=203000   replay_window = 64
Fri Jan 15 21:31:45 2010 us=203000   replay_time = 15
Fri Jan 15 21:31:45 2010 us=203000   packet_id_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=203000   use_iv = ENABLED
Fri Jan 15 21:31:45 2010 us=218000   test_crypto = DISABLED
Fri Jan 15 21:31:45 2010 us=218000   tls_server = DISABLED
Fri Jan 15 21:31:45 2010 us=218000   tls_client = ENABLED
Fri Jan 15 21:31:45 2010 us=218000   key_method = 2
Fri Jan 15 21:31:45 2010 us=218000   ca_file = 'ca.crt'
Fri Jan 15 21:31:45 2010 us=218000   ca_path = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   dh_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   cert_file = 'client.crt'
Fri Jan 15 21:31:45 2010 us=218000   priv_key_file = 'client.key'
Fri Jan 15 21:31:45 2010 us=218000   pkcs12_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   cryptoapi_cert = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   cipher_list = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   tls_verify = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   tls_remote = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   crl_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=218000   ns_cert_type = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=250000   remote_cert_ku = 0
Fri Jan 15 21:31:45 2010 us=265000   remote_cert_eku = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=265000   tls_timeout = 2
Fri Jan 15 21:31:45 2010 us=265000   renegotiate_bytes = 0
Fri Jan 15 21:31:45 2010 us=265000   renegotiate_packets = 0
Fri Jan 15 21:31:45 2010 us=265000   renegotiate_seconds = 3600
Fri Jan 15 21:31:45 2010 us=265000   handshake_window = 60
Fri Jan 15 21:31:45 2010 us=265000   transition_window = 3600
Fri Jan 15 21:31:45 2010 us=265000   single_session = DISABLED
Fri Jan 15 21:31:45 2010 us=265000   tls_exit = DISABLED
Fri Jan 15 21:31:45 2010 us=265000   tls_auth_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=265000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=265000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=265000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=265000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=265000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_protected_authentication = DISABLED
Fri Jan 15 21:31:45 2010 us=296000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=312000   pkcs11_private_mode = 00000000
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=343000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=375000   pkcs11_cert_private = DISABLED
Fri Jan 15 21:31:45 2010 us=375000   pkcs11_pin_cache_period = -1
Fri Jan 15 21:31:45 2010 us=375000   pkcs11_id = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=375000   pkcs11_id_management = DISABLED
Fri Jan 15 21:31:45 2010 us=375000   server_network = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   server_netmask = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   server_bridge_ip = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   server_bridge_netmask = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   server_bridge_pool_start = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   server_bridge_pool_end = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   ifconfig_pool_defined = DISABLED
Fri Jan 15 21:31:45 2010 us=375000   ifconfig_pool_start = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   ifconfig_pool_end = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   ifconfig_pool_netmask = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=375000   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=390000   ifconfig_pool_persist_refresh_freq = 600
Fri Jan 15 21:31:45 2010 us=390000   n_bcast_buf = 256
Fri Jan 15 21:31:45 2010 us=390000   tcp_queue_limit = 64
Fri Jan 15 21:31:45 2010 us=390000   real_hash_size = 256
Fri Jan 15 21:31:45 2010 us=390000   virtual_hash_size = 256
Fri Jan 15 21:31:45 2010 us=390000   client_connect_script = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=390000   learn_address_script = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=390000   client_disconnect_script = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=390000   client_config_dir = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=390000   ccd_exclusive = DISABLED
Fri Jan 15 21:31:45 2010 us=390000   tmp_dir = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=390000   push_ifconfig_defined = DISABLED
Fri Jan 15 21:31:45 2010 us=390000   push_ifconfig_local = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=390000   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jan 15 21:31:45 2010 us=421000   enable_c2c = DISABLED
Fri Jan 15 21:31:45 2010 us=421000   duplicate_cn = DISABLED
Fri Jan 15 21:31:45 2010 us=421000   cf_max = 0
Fri Jan 15 21:31:45 2010 us=421000   cf_per = 0
Fri Jan 15 21:31:45 2010 us=421000   max_clients = 1024
Fri Jan 15 21:31:45 2010 us=421000   max_routes_per_client = 256
Fri Jan 15 21:31:45 2010 us=421000   auth_user_pass_verify_script = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=421000   auth_user_pass_verify_script_via_file = DISABLED
Fri Jan 15 21:31:45 2010 us=421000   ssl_flags = 0
Fri Jan 15 21:31:45 2010 us=421000   client = ENABLED
Fri Jan 15 21:31:45 2010 us=421000   pull = ENABLED
Fri Jan 15 21:31:45 2010 us=421000   auth_user_pass_file = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=421000   show_net_up = DISABLED
Fri Jan 15 21:31:45 2010 us=421000   route_method = 0
Fri Jan 15 21:31:45 2010 us=421000   ip_win32_defined = DISABLED
Fri Jan 15 21:31:45 2010 us=421000   ip_win32_type = 3
Fri Jan 15 21:31:45 2010 us=437000   dhcp_masq_offset = 0
Fri Jan 15 21:31:45 2010 us=437000   dhcp_lease_time = 31536000
Fri Jan 15 21:31:45 2010 us=437000   tap_sleep = 0
Fri Jan 15 21:31:45 2010 us=437000   dhcp_options = DISABLED
Fri Jan 15 21:31:45 2010 us=437000   dhcp_renew = DISABLED
Fri Jan 15 21:31:45 2010 us=437000   dhcp_pre_release = DISABLED
Fri Jan 15 21:31:45 2010 us=437000   dhcp_release = DISABLED
Fri Jan 15 21:31:45 2010 us=437000   domain = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=437000   netbios_scope = '[UNDEF]'
Fri Jan 15 21:31:45 2010 us=437000   netbios_node_type = 0
Fri Jan 15 21:31:45 2010 us=437000   disable_nbt = DISABLED
Fri Jan 15 21:31:45 2010 us=437000 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 11 2009
Fri Jan 15 21:31:45 2010 us=437000 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Jan 15 21:31:45 2010 us=453000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Jan 15 21:31:45 2010 us=593000 LZO compression initialized
Fri Jan 15 21:31:45 2010 us=593000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Jan 15 21:31:45 2010 us=593000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 15 21:31:45 2010 us=593000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Jan 15 21:31:45 2010 us=593000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Jan 15 21:31:45 2010 us=593000 Local Options hash (VER=V4): '69109d17'
Fri Jan 15 21:31:45 2010 us=593000 Expected Remote Options hash (VER=V4): 'c0103fa8'
Fri Jan 15 21:31:45 2010 us=609000 Attempting to establish TCP connection with 10.0.0.172:80
Fri Jan 15 21:31:45 2010 us=921000 TCP connection established with 10.0.0.172:80
Fri Jan 15 21:31:45 2010 us=921000 Send to HTTP proxy: 'CONNECT 220.114.28.33:443 HTTP/1.0'
Fri Jan 15 21:31:47 2010 us=359000 recv_line: TCP port read failed on recv()
Fri Jan 15 21:31:47 2010 us=359000 TCP/UDP: Closing socket
Fri Jan 15 21:31:47 2010 us=359000 SIGTERM[soft,init_instance] received, process exiting



服务端配置文件：
port 443
proto tcp-server
dev tun
server 192.168.10.0 255.255.255.0
keepalive 20 180
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.10.1"
mode server
tls-server
status C:\\Program Files\\OpenVPN\\log\\openvpn-status.log
comp-lzo
verb 4


客户端配置文件：

client
dev tun
proto tcp-client
remote 220.114.28.33 443
resolv-retry infinite
nobind
http-proxy 10.0.0.172 80
mute-replay-warnings
ca ca.crt
cert client.crt
key client.key
comp-lzo
verb 4
status openvpn-status.log

如果不用拔 号连接我直接去掉了http-proxy 10.0.0.172 80这断。这样可以连上。

求高手解答下，我这个为什么拔号上不了呢。
我拔号端直接为WAP拔号，没有安装其它软件。
回复 支持 反对

使用道具 举报

r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
 楼主| 发表于 2010-1-15 22:50:21| 字数 1,710| - 中国–湖北–恩施土家族苗族自治州 电信 | 显示全部楼层
Fri Jan 15 22:47:46 2010 us=859000 TCP/UDP: Closing socket
Fri Jan 15 22:47:53 2010 us=687000 MULTI: multi_create_instance called
Fri Jan 15 22:47:53 2010 us=687000 Re-using SSL/TLS context
Fri Jan 15 22:47:53 2010 us=687000 LZO compression initialized
Fri Jan 15 22:47:53 2010 us=687000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Jan 15 22:47:53 2010 us=687000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 15 22:47:53 2010 us=687000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Jan 15 22:47:53 2010 us=687000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Jan 15 22:47:53 2010 us=687000 Local Options hash (VER=V4): 'c0103fa8'
Fri Jan 15 22:47:53 2010 us=687000 Expected Remote Options hash (VER=V4): '69109d17'
Fri Jan 15 22:47:53 2010 us=687000 TCP connection established with 123.147.128.34:56109
Fri Jan 15 22:47:53 2010 us=687000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Jan 15 22:47:53 2010 us=687000 TCPv4_SERVER link local: [undef]
Fri Jan 15 22:47:53 2010 us=687000 TCPv4_SERVER link remote: 123.147.128.34:56109
Fri Jan 15 22:47:54 2010 us=437000 123.147.128.34:56109 WARNING: Bad encapsulated packet length from peer (3338), which must be > 0 and <= 1544 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attemping restart...]
Fri Jan 15 22:47:54 2010 us=437000 123.147.128.34:56109 Connection reset, restarting [0]
Fri Jan 15 22:47:54 2010 us=437000 123.147.128.34:56109 SIGUSR1[soft,connection-reset] received, client-instance restarting
Fri Jan 15 22:47:54 2010 us=437000 TCP/UDP: Closing socket


这断为服务器的信息。其中有断是服务器让客户端重启服务是怎么回事。求高人解答。
回复 支持 反对

使用道具 举报

r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
 楼主| 发表于 2010-1-16 20:41:22| 字数 7| - 中国–湖北–恩施土家族苗族自治州 电信 | 显示全部楼层
没有人解答？》
回复 支持 反对

使用道具 举报

sdbz001

899

回帖

47

积分

8万

资产值

钻石会员 Rank: 3Rank: 3Rank: 3

注册时间
2007-5-6
月全勤勋章
发表于 2010-1-16 20:57:02| 字数 262| - 中国–江苏–苏州 电信/广州优视科技公司UCWEB浏览器苏州电信加速服务器 | 显示全部楼层
http-proxy 10.0.0.172  80     mute-replay-warnings

改为
http-proxy 10.0.0.172  80  http-proxy-timeout  20      http-proxy-retry
http-proxy-option AGENT "NokiaN90-1/3.0545.5.1 Series60/2.8 Profile/MIDP-2.0 Configuration/CLDC-1.1"
mute-replay-warnings
试试

[ Edited by  sdbz001 on 2010-1-16 21:00 ]
Edited by Administrator
回复 支持 反对

使用道具 举报

r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
 楼主| 发表于 2010-1-16 21:15:15| 字数 499| - 中国–湖北–恩施土家族苗族自治州 电信 | 显示全部楼层
WARNING: Bad encapsulated packet length from peer (3338), which must be > 0 and <= 1544 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attemping restart...]
这断信息我明白就是不知道如何处理。我郁闷了。。


http-proxy 10.0.0.172  80     mute-replay-warnings

改为
http-proxy 10.0.0.172  80  http-proxy-timeout  20      http-proxy-retry
http-proxy-option AGENT "NokiaN90-1/3.0545.5.1 Series60/2.8 Profile/MIDP-2.0 Configuration/CLDC-1.1"
mute-replay-warnings
试试


谢谢楼上的朋友。我明天测试下看，现在机器不在这里
回复 支持 反对

使用道具 举报

r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
 楼主| 发表于 2010-1-16 21:19:30| 字数 232| - 中国–湖北–恩施土家族苗族自治州 电信 | 显示全部楼层
http-proxy 10.0.0.172  80  http-proxy-timeout  20      http-proxy-retry
http-proxy-option AGENT "NokiaN90-1/3.0545.5.1 Series60/2.8 Profile/MIDP-2.0 Configuration/CLDC-1.1"
mute-replay-warnings

有点儿明白这断意思，如果不改为被识别为手机，那么有可能移动那边会有问题。。明天测试，再次谢谢楼上的
回复 支持 反对

使用道具 举报

r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
 楼主| 发表于 2010-1-28 10:14:47| 字数 29| - 中国–重庆–重庆 电信 | 显示全部楼层
经过测试还是不行，根本联不上网络了，主机也没有任何反应了。
回复 支持 反对

使用道具 举报

r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
 楼主| 发表于 2010-1-28 13:11:29| 字数 5,051| - 中国–重庆–重庆 电信 | 显示全部楼层
Thu Jan 28 13:08:18 2010 us=296000   dhcp_renew = DISABLED
Thu Jan 28 13:08:18 2010 us=296000   dhcp_pre_release = DISABLED
Thu Jan 28 13:08:18 2010 us=296000   dhcp_release = DISABLED
Thu Jan 28 13:08:18 2010 us=296000   domain = '[UNDEF]'
Thu Jan 28 13:08:18 2010 us=296000   netbios_scope = '[UNDEF]'
Thu Jan 28 13:08:18 2010 us=296000   netbios_node_type = 0
Thu Jan 28 13:08:18 2010 us=296000   disable_nbt = DISABLED
Thu Jan 28 13:08:18 2010 us=296000 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 11 2009
Thu Jan 28 13:08:18 2010 us=296000 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 28 13:08:18 2010 us=328000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 28 13:08:18 2010 us=609000 LZO compression initialized
Thu Jan 28 13:08:18 2010 us=609000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Jan 28 13:08:18 2010 us=625000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Jan 28 13:08:18 2010 us=625000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 28 13:08:18 2010 us=625000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 28 13:08:18 2010 us=625000 Local Options hash (VER=V4): '69109d17'
Thu Jan 28 13:08:18 2010 us=625000 Expected Remote Options hash (VER=V4): 'c0103fa8'
Thu Jan 28 13:08:18 2010 us=625000 Attempting to establish TCP connection with 10.0.0.172:80
Thu Jan 28 13:08:19 2010 us=31000 TCP connection established with 10.0.0.172:80
Thu Jan 28 13:08:19 2010 us=31000 Send to HTTP proxy: 'CONNECT 220.114.28.33:443 HTTP/1.0'
Thu Jan 28 13:08:20 2010 us=234000 recv_line: TCP port read failed on recv()
Thu Jan 28 13:08:20 2010 us=234000 TCP/UDP: Closing socket
Thu Jan 28 13:08:20 2010 us=234000 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 28 13:08:20 2010 us=234000 Restart pause, 5 second(s)
Thu Jan 28 13:08:25 2010 us=234000 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 28 13:08:25 2010 us=234000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 28 13:08:25 2010 us=234000 LZO compression initialized
Thu Jan 28 13:08:25 2010 us=234000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Jan 28 13:08:25 2010 us=234000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Jan 28 13:08:25 2010 us=234000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 28 13:08:25 2010 us=234000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 28 13:08:25 2010 us=234000 Local Options hash (VER=V4): '69109d17'
Thu Jan 28 13:08:25 2010 us=234000 Expected Remote Options hash (VER=V4): 'c0103fa8'
Thu Jan 28 13:08:25 2010 us=234000 Attempting to establish TCP connection with 10.0.0.172:80
Thu Jan 28 13:08:25 2010 us=609000 TCP connection established with 10.0.0.172:80
Thu Jan 28 13:08:25 2010 us=609000 Send to HTTP proxy: 'CONNECT 220.114.28.33:443 HTTP/1.0'
Thu Jan 28 13:08:26 2010 us=609000 recv_line: TCP port read failed on recv()
Thu Jan 28 13:08:26 2010 us=609000 TCP/UDP: Closing socket
Thu Jan 28 13:08:26 2010 us=609000 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 28 13:08:26 2010 us=609000 Restart pause, 5 second(s)
Thu Jan 28 13:08:31 2010 us=609000 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 28 13:08:31 2010 us=609000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 28 13:08:31 2010 us=609000 LZO compression initialized
Thu Jan 28 13:08:31 2010 us=609000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Thu Jan 28 13:08:31 2010 us=609000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Jan 28 13:08:31 2010 us=625000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 28 13:08:31 2010 us=625000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 28 13:08:31 2010 us=625000 Local Options hash (VER=V4): '69109d17'
Thu Jan 28 13:08:31 2010 us=625000 Expected Remote Options hash (VER=V4): 'c0103fa8'
Thu Jan 28 13:08:31 2010 us=625000 Attempting to establish TCP connection with 10.0.0.172:80
Thu Jan 28 13:08:31 2010 us=953000 TCP connection established with 10.0.0.172:80
Thu Jan 28 13:08:31 2010 us=953000 Send to HTTP proxy: 'CONNECT 220.114.28.33:443 HTTP/1.0'
Thu Jan 28 13:08:32 2010 us=953000 recv_line: TCP port read failed on recv()
Thu Jan 28 13:08:32 2010 us=953000 TCP/UDP: Closing socket
Thu Jan 28 13:08:32 2010 us=953000 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 28 13:08:32 2010 us=953000 Restart pause, 5 second(s)
Thu Jan 28 13:08:37 2010 us=953000 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 28 13:08:37 2010 us=953000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables



将10.0.0.172更换后这样子的。。高手指点下
回复 支持 反对

使用道具 举报

r116

76

回帖

0

积分

35

资产值

入门会员 Rank: 1

注册时间
2009-8-16
 楼主| 发表于 2010-1-30 17:35:16| 字数 7| - 中国–湖北–恩施土家族苗族自治州 电信 | 显示全部楼层
人呢，帮帮忙啊
回复 支持 反对

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Powered by Discuz! X3.5 © 2001-2023 Comsenz Inc

GMT+8, 2025-3-11 06:12 , Processed in 0.118186 second(s), 34 queries , Gzip On, OPcache On.

手机版|小黑屋|安卓客户端|iOS客户端|Archiver|备用网址1|备用网址2|在线留言|专门网

返回顶部