Zgemma (H7) openvpn

[davidas]

pouziva, nekdo pouzival nekdo openvpn v e2 openatv?
ve verzi 6-6.4 openvpn funguje (fungovala)
ve verzi 7.2 nefunguje

Kód: Vybrat vše

root@zgemmah7:~# opkg update
Downloading https://feeds2.mynonpublic.com/7.2/h7/3rdparty/Packages.gz.
Updated source 'openatv-3rdparty'.
Downloading https://feeds2.mynonpublic.com/7.2/h7/all/Packages.gz.
Updated source 'openatv-all'.
Downloading http://updates.mynonpublic.com/oea/5.2/cortexa15hf-neon-vfpv4/Packag                    es.gz.
Updated source 'cortexa15hf-neon-vfpv4-3rdparty-secret-feed'.
Downloading https://feeds2.mynonpublic.com/7.2/h7/cortexa15hf-neon-vfpv4/Package                    s.gz.
Updated source 'openatv-cortexa15hf-neon-vfpv4'.
Downloading https://feeds2.mynonpublic.com/7.2/h7/h7/Packages.gz.
Updated source 'openatv-h7'.
Downloading https://feeds2.mynonpublic.com/7.2/h7/h7_3rdparty/Packages.gz.
Updated source 'openatv-h7_3rdparty'.
Downloading https://raw.githubusercontent.com/oe-alliance/picons-feed/gh-pages/P                    ackages.gz.
Updated source 'oe-alliance-picon-feed'.
Downloading https://raw.githubusercontent.com/oe-alliance/oe-alliance-settings-f                    eed/master/feed/Packages.gz.
Updated source 'oe-alliance-settings-feed'.
Downloading https://feeds2.mynonpublic.com/7.2/STATIC/static-cortexa15hf-neon-vf                    pv4/Packages.gz.
Updated source 'openatv-static-cortexa15hf-neon-vfpv4'.
Downloading https://feeds2.mynonpublic.com/7.2/STATIC/static-h7/Packages.gz.
Updated source 'openatv-static-h7'.
Downloading https://feeds2.mynonpublic.com/7.2/h7/zgemmah7/Packages.gz.
Updated source 'openatv-zgemmah7'.
root@zgemmah7:~# opkg install kernel-module-tun
Installing kernel-module-tun-4.10.12 (4.10.12) on root.
Downloading https://feeds2.mynonpublic.com/7.2/h7/h7/kernel-module-tun-4.10.12_4                    .10.12-17_h7.ipk.
[b]Configuring kernel-module-tun-4.10.12.
depmod: WARNING: could not open modules.builtin.modinfo at /lib/modules/4.10.12:                     No such file or directory[/b]

nevim co dal ohledne te chyby

[gchevalier]

no, a keď chceš používať ovpn, tak prečo inštaluješ tun
a ešte pred inštaláciou daj opkg upgrade

[davidas]

okopiroval jsem jen radky s chybou....

tento postup od 6.1 do 6.4 funguje, dal ne

Kód: Vybrat vše

opkg remove openvpn
opkg update
opkg install kernel-module-tun
mkdir /dev/net
mknod /dev/net/tun c 10 200
modprobe tun
opkg install openvpn

mas jiny (overeny) postup pro 7.2?

[gchevalier]

ten balík je samostatný
mal by sa pri inštalácii rozbaliť do

Kód: Vybrat vše

/lib/modules/4.10.12/kernel/drivers/net/tun.ko

Kód: Vybrat vše

Package: kernel-module-tun-4.10.12
Version: 4.10.12-17
Description: tun kernel module
 tun kernel module; Universal TUN/TAP device driver
Architecture: h7
OE: linux-airdigital
Depends: kernel-4.10.12
Provides: kernel-module-tun
Source: linux-airdigital_4.10.12.bb

modprobe tun by ho mal natiahnuť

Kód: Vybrat vše

root@box# lsmod
Module                  Size  Used by
tun                    57344  0

ako aj /etc/init.d/openvpn start ,ak sa nepoužíva systemd na spúšťanie

[sky59]

zdravim, tak ako to nakoniec dopadlo?
z dovodu byt vzdy pripraveny (ako pionier) som vyskusal vpn na VTI (linux ako linux)
nainstaloval som verziu openvpn 2.3.6-r0

(dovod je taky, ak by bolo "najhorsie" da sa spustit vpn server kdesi na cloude, napr. India 20E/mesiac a az tam by vysiel prijimac do internetu cize by sa vyhol pripadnym blokaciam)

skusal som sa pripojit na moj SoftEther server na verejnej IP 62.x.x.x vid nizsie, vsetko prebehlo OK dokonca aj server potvrdil ze je pripojeny VTI, vid obrazok

avsak, ip route tables nie su korektne a aj ked sa pripoji na vpn tak aj tak ide priamo obchadzajuc vpn, tu su routes pre a po pripojeni, dokonca dostal ip z DHCP na serveri 10.81.100.113 : (pripojenie je cez wlan0 na Android tether Telering provider)

NORMAL bez vpn:

default via 192.168.43.1 dev wlan0 metric 10
169.254.0.0/16 dev wlan0
192.168.43.0/24 dev wlan0 src 192.168.43.206

pripojene OPENVPN:

0.0.0.0/1 via 10.81.100.114 dev tun0
default via 192.168.43.1 dev wlan0 metric 10
10.81.100.114 dev tun0 src 10.81.100.113
62.71.121.8 via 192.168.43.1 dev wlan0
128.0.0.0/1 via 10.81.100.114 dev tun0
169.254.0.0/16 dev wlan0
192.168.43.0/24 dev wlan0 src 192.168.43.206

teraz neviem, ci openvpn ocakava ip route table v urcitej forme ako by to bolo po pripojeni na openvpn server, ale pri pripojeni na softether si asi nerozumeju ?

evidentne openvpn client nevie co ma urobit s routes

vedel by niekto poskytnut routes pri pripojeni na openvpn server?

VUzero4k_VPN.png

[chocholousek]

Tady tu to je, klient pak sever...

Kód: Vybrat vše

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
10.9.0.0        10.9.0.77       255.255.255.0   UG    0      0        0 tun0
10.9.0.77       *               255.255.255.255 UH    0      0        0 tun0
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0


Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         10.168.3.38     0.0.0.0         UG    202    0        0 eth0
10.9.0.0        10.9.0.2        255.255.255.0   UG    0      0        0 tun1
10.9.0.2        0.0.0.0         255.255.255.255 UH    0      0        0 tun1
10.168.2.0      0.0.0.0         255.255.255.0   U     0      0        0 wlan0
10.168.3.0      0.0.0.0         255.255.255.0   U     202    0        0 eth0

p.s. mas tam zmatky, cim je route jednodussi tim lepe funguje.

[sky59]

to mi je jasne ze su tam zmatky, ale to nie ja, to on (openvpn)

musim zistit kde je problem, ale teraz budem pri vode par dni, takze az potom

[davidas]

na VTI do Vu Ultimo jsem openvpn daval, funguje jako klient v poradku, jen je na to jiny postup, jestli to jeste nemas, napis sz