Ubuntu-fr

polain95

OpenVPN : Pas d'Internet

Bonjour,

J'essaie de mettre en place OpenVPN pour me connecter sur mon PC à distance.
Malheureusement, je n'arrive pas à le configurer correctement pour avoir accès à Internet via OpenVPN.

ping -c 3 ubuntu-fr.org
PING ubuntu-fr.org (86.65.39.13) 56(84) bytes of data.

--- ubuntu-fr.org ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 49ms

Voici mes fichiers :
(J'ai modifié les adresses ip publiques)

## /etc/openvpn/server.conf (SERVER)

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log         /var/log/openvpn/openvpn.log
log-append  /var/log/openvpn/openvpn.log
verb 4
explicit-exit-notify 1

## /etc/openvpn/client.conf (CLIENT)

client
dev tun
proto udp
remote 22.22.22.22 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
verb 4

sudo systemctl status openvpn@server (SERVER)

● openvpn@server.service - OpenVPN connection to server
   Loaded: loaded (/lib/systemd/system/openvpn@.service; disabled; vendor preset: enabled)
   Active: active (running) since Fri 2020-07-31 16:12:46 UTC; 9s ago
     Docs: man:openvpn(8)
           https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
           https://community.openvpn.net/openvpn/wiki/HOWTO
 Main PID: 7858 (openvpn)
   Status: "Initialization Sequence Completed"
    Tasks: 1 (limit: 2319)
   Memory: 1.2M
   CGroup: /system.slice/system-openvpn.slice/openvpn@server.service
           └─7858 /usr/sbin/openvpn --daemon ovpn-server --status /run/openvpn/server.status 10 --cd /etc/openvpn --config /etc/openvpn/server.conf --writepid /run/openvpn/server.pid

Jul 31 16:12:46 atlas1 systemd[1]: Starting OpenVPN connection to server...
Jul 31 16:12:46 atlas1 systemd[1]: Started OpenVPN connection to server.

sudo systemctl status openvpn@client (CLIENT)

● openvpn@client.service - OpenVPN connection to client
   Loaded: loaded (/lib/systemd/system/openvpn@.service; enabled-runtime; vendor preset: enabled)
   Active: active (running) since Fri 2020-07-31 17:12:52 BST; 24s ago
     Docs: man:openvpn(8)
           https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
           https://community.openvpn.net/openvpn/wiki/HOWTO
 Main PID: 5639 (openvpn)
   Status: "Initialization Sequence Completed"
    Tasks: 1 (limit: 4915)
   Memory: 1.7M
   CGroup: /system.slice/system-openvpn.slice/openvpn@client.service
           └─5639 /usr/sbin/openvpn --daemon ovpn-client --status /run/openvpn/client.status 10 --cd /etc/openvpn --config /etc/openvpn/client.conf --writepid /run/openvpn/client.pid

Jul 31 17:12:54 Pluto ovpn-client[5639]: /sbin/ip route add 22.22.22.22/32 via 192.168.0.254
Jul 31 17:12:54 Pluto openvpn[5639]: RTNETLINK answers: File exists
Jul 31 17:12:54 Pluto ovpn-client[5639]: ERROR: Linux route add command failed: external program exited with error status: 2
Jul 31 17:12:54 Pluto ovpn-client[5639]: /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Jul 31 17:12:54 Pluto ovpn-client[5639]: /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Jul 31 17:12:54 Pluto ovpn-client[5639]: /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Jul 31 17:12:54 Pluto ovpn-client[5639]: GID set to nogroup
Jul 31 17:12:54 Pluto ovpn-client[5639]: UID set to nobody
Jul 31 17:12:54 Pluto ovpn-client[5639]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jul 31 17:12:54 Pluto ovpn-client[5639]: Initialization Sequence Completed

Il semble y avoir un problème de routage, mais malgré mes essais je ne trouve pas une solution correcte.

Pouvez-vous m'aider ?

Dernière modification par polain95 (Le 31/07/2020, à 22:03)

R136a1

Re : OpenVPN : Pas d'Internet

Bonjour
est ce que tu as modifié les règles du pare-feu pour acheminer les connexions de tes clients?
Si c'est pas le cas, applique à la lettre les instructions de ce paragraphe du tuto (je l'ai utilisé avec succès): https://www.digitalocean.com/community/ … du-serveur