Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Gateway e IP do Servidor DHCP no cliente

    Portuguese
    1
    2
    63
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      agmc last edited by agmc

      Bom dia prezados, sou novo no mundo PFSENSE e implantei recentemente na empresa em que trabalho, estou com um problema no OpenVPN. Configurei meu modo servidor em Tap, pois necessita fazer uma bridge, percebi que existem poucos postes sobre esse tipo de configuração, meu cliente pega IP do range que selecionei e mascara porem não pega Gateway e o IP do Servidor DHCP pega 192.168.1.0 sendo que nas minhas maquinas internas o IP do servidor dhcp é o do meu pfsense. Seguem Configurações do meu Server e Client:

      dev ovpns2
      verb 1
      dev-type tap
      dev-node /dev/tap2
      writepid /var/run/openvpn_server2.pid
      #user nobody
      #group nobody
      script-security 3
      daemon
      keepalive 10 60
      ping-timer-rem
      persist-tun
      persist-key
      proto udp4
      cipher AES-128-CBC
      auth SHA256
      up /usr/local/sbin/ovpn-linkup
      down /usr/local/sbin/ovpn-linkdown
      client-connect /usr/local/sbin/openvpn.attributes.sh
      client-disconnect /usr/local/sbin/openvpn.attributes.sh
      local x.x.x.x - IP PUBLICO
      tls-server
      server-bridge 192.168.1.201 255.255.255.0 192.168.1.222 192.168.1.225
      client-config-dir /var/etc/openvpn-csc/server2
      push "route-gateway 192.168.1.201"
      plugin /usr/local/lib/openvpn/plugins/openvpn-plugin-auth-script.so /usr/local/sbin/ovpn_auth_verify_async user TG9jYWwgRGF0YWJhc2U= false server2 1194
      tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'vpnName' 1"
      lport 1194
      management /var/etc/openvpn/server2.sock unix
      max-clients 2
      client-to-client
      ca /var/etc/openvpn/server2.ca
      cert /var/etc/openvpn/server2.cert
      key /var/etc/openvpn/server2.key
      dh /etc/dh-parameters.2048
      tls-auth /var/etc/openvpn/server2.tls-auth 0
      ncp-disable
      compress
      persist-remote-ip
      float
      push "redirect-gateway def1 bypass-dhcp"


      Cliente:
      dev tap
      persist-tun
      persist-key
      ncp-disable
      cipher AES-128-CBC
      auth SHA256
      tls-client
      client
      resolv-retry infinite
      remote x.x.x.x IP PUBLICO udp4
      verify-x509-name "vpnName" name
      auth-user-pass
      remote-cert-tls server
      compress

      1 Reply Last reply Reply Quote 0
      • A
        agmc last edited by

        Solucionei este caso seguindo os passos deste vídeo:
        https://www.youtube.com/watch?v=zt3EYV9mlnQ

        lembrando que este procedimento é para utilizar OpenVPN em modo bridge.

        Att,
        agmc

        1 Reply Last reply Reply Quote 1
        • First post
          Last post

        Products

        • Platform Overview
        • TNSR
        • pfSense
        • Appliances

        Services

        • Training
        • Professional Services

        Support

        • Subscription Plans
        • Contact Support
        • Product Lifecycle
        • Documentation

        News

        • Media Coverage
        • Press
        • Events

        Resources

        • Blog
        • FAQ
        • Find a Partner
        • Resource Library
        • Security Information

        Company

        • About Us
        • Careers
        • Partners
        • Contact Us
        • Legal
        Our Mission

        We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

        Subscribe to our Newsletter

        Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

        © 2021 Rubicon Communications, LLC | Privacy Policy