Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problème avec OpenVPN

    Français
    2
    3
    2.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cyanatide
      last edited by

      Bonjour.
      Je voudrais mettre en place un VPN sur mon pfsense mais j'ai un peu de mal a le faire marcher. Vola ma configuration:

      Bureau 1 -> serveur openvpn
      Réseau: 192.168.0.0/24
      interface pfsense 192.168.0.1
      interface virtuelle 192.168.4.1

      Bureau 2 -> client Openvpn
      Réseau: 192.168.3.0/24
      interface pfsense 192.168.3.1
      interface virtuelle 192.168.4.2

      Je n'arrive pas a faire de ping entre les deux bureaux. après quelques test j'ai remarqué une chose bizarrre… Si je fais un ping de mon bureau 1 vers 192.168.4.1, ça passe. Cependant, si je fais ce même ping depuis ma machine pfsense ça ne passe pas, alors que c'est une de ses interface. Or, quand je fais un ping vers 192.168.3.1, ma trame par vers 192.168.0.1 (pfsense) mais si celui ci ne peut pinguer l'interface 4.1, comment la trame peut aller plus loin? même problème du coté client avec l'interface 4.2

      Voila, des idées qui pourraient m'aider?
      Merci d'avance.

      1 Reply Last reply Reply Quote 0
      • PARNP
        PARN
        last edited by

        Bonjour,

        Alors on aurait besoin de plus de détails pour t'aider. (Config de OpenVPN, log d'OpenVPN, règles sur les interfaces, …)
        Qu'appels tu "interface virtuelle", l'adresse pool ?
        Peut être que ce n'est qu'une question de règles ...

        1 Reply Last reply Reply Quote 0
        • C
          cyanatide
          last edited by

          Le config de mon serveur:

          writepid /var/run/openvpn_server0.pid
#user nobody
#group nobody
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
dev tun
proto udp
cipher BF-CBC
up /etc/rc.filter_configure
down /etc/rc.filter_configure
ifconfig 192.168.4.1 192.168.4.2
lport 1194
route 192.168.3.0 255.255.255.0
secret /var/etc/openvpn_server0.secret
persist-remote-ip
float

          Je poste la config de mon client dès que je la récupère.

          mes log d'openvpn:

          May 27 10:52:15 	check_reload_status: reloading filter
May 27 10:52:00 	check_reload_status: reloading filter
May 27 06:55:00 	check_reload_status: check_reload_status is starting
May 27 06:13:49 	last message repeated 5 times
May 27 06:13:12 	dnsmasq[42999]: read /etc/hosts - 2 addresses
May 27 06:13:12 	dnsmasq[42999]: using nameserver 62.4.16.70#53
May 27 06:13:12 	dnsmasq[42999]: using nameserver 62.4.17.69#53
May 27 06:13:12 	dnsmasq[42999]: reading /etc/resolv.conf
May 27 06:13:12 	dnsmasq[42999]: compile time options: IPv6 GNU-getopt BSD-bridge ISC-leasefile no-DBus no-I18N TFTP
May 27 06:13:12 	dnsmasq[42999]: started, version 2.45 cachesize 150
May 27 06:13:10 	dnsmasq[821]: exiting on receipt of SIGTERM
May 27 06:03:56 	check_reload_status: reloading filter
May 27 06:02:25 	check_reload_status: reloading filter
May 27 06:02:12 	check_reload_status: reloading filter
May 27 06:00:01 	check_reload_status: check_reload_status is starting
May 27 05:53:45 	sshd[38726]: Accepted keyboard-interactive/pam for root from 192.168.0.204 port 1263 ssh2
May 27 04:00:00 	check_reload_status: check_reload_status is starting
May 26 21:55:00 	check_reload_status: check_reload_status is starting
May 26 21:15:00 	check_reload_status: check_reload_status is starting
May 26 19:50:00 	check_reload_status: check_reload_status is starting
May 26 19:10:00 	check_reload_status: check_reload_status is starting
May 26 15:50:00 	check_reload_status: check_reload_status is starting
May 26 15:10:00 	check_reload_status: check_reload_status is starting
May 26 14:30:19 	check_reload_status: reloading filter
May 26 14:29:51 	check_reload_status: reloading filter
May 26 14:24:03 	login: login on console as root
May 26 14:23:54 	check_reload_status: check_reload_status is starting
May 26 14:23:53 	php: : Resyncing configuration for all packages.
May 26 14:23:47 	php: : [DEBUG] Lock recursion detected.
May 26 17:23:33 	php: : Creating rrd update script
May 26 14:23:25 	dnsmasq[821]: read /etc/hosts - 2 addresses
May 26 14:23:25 	dnsmasq[821]: using nameserver 62.4.16.70#53
May 26 14:23:25 	dnsmasq[821]: using nameserver 62.4.17.69#53
May 26 14:23:25 	dnsmasq[821]: reading /etc/resolv.conf
May 26 14:23:25 	dnsmasq[821]: compile time options: IPv6 GNU-getopt BSD-bridge ISC-leasefile no-DBus no-I18N TFTP
May 26 14:23:25 	dnsmasq[821]: started, version 2.45 cachesize 150
May 26 14:23:20 	pftpx[707]: listening on 127.0.0.1 port 8023
May 26 14:23:20 	pftpx[707]: listening on 127.0.0.1 port 8023
May 26 14:23:20 	pftpx[699]: listening on 127.0.0.1 port 8022
May 26 14:23:20 	pftpx[699]: listening on 127.0.0.1 port 8022
May 26 14:23:20 	pftpx[691]: listening on 127.0.0.1 port 8021
May 26 14:23:20 	pftpx[691]: listening on 127.0.0.1 port 8021
May 26 14:23:08 	sshd[394]: Server listening on 0.0.0.0 port 22.
May 26 14:23:08 	sshd[394]: Server listening on :: port 22.
May 26 14:22:58 	kernel: pflog0: promiscuous mode enabled
May 26 14:22:58 	kernel: glxsb0: <amd geode="" lx="" security="" block="" (aes-128-cbc,="" rng)=""> mem 0xa0000000-0xa0003fff irq 10 at device 1.2 on pci0
May 26 14:22:58 	kernel: Trying to mount root from ufs:/dev/ufs/pfsense0
May 26 14:22:58 	kernel: WARNING: Expected rawoffset 0, found 1902159
May 26 14:22:58 	kernel: WARNING: Expected rawoffset 0, found 63
May 26 14:22:58 	kernel: ad0: 1923MB <cf card="" ver2.21=""> at ata0-master PIO4</cf></amd>

          J'ai vérifié mes règles de firewall, il ne semble pas y avoir de problème.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.