我有一个networking位于三个物理场所。 首先,我有一台名为PC1的PC,configuration为带有10.8.0.3 IP地址的OpenVpn Client。 第二,我有一个路由器configuration为OpenVpn服务器。 第三,我有另一台路由器configuration为OpenVpn客户端。 其实OpenVpn工作正常,从PC1我可以ping 10.8.0.2。
Router 1 | Router 2 ________________ | ________________ | OpenVpnServer | | | OpenVpnClient | | 10.8.0.1 |<-----------| 10.8.0.2 | |________________| | | ---------------| /|\ | | 169.254.11.254 | | | |________________| ________|______________| /|\ | | | PC 1 (10.8.0.3) | PC2 (169.254.11.23) Openvpn client |
我想要的是通过在169.254.11.23上执行ping来从PC1 ping PC2。 我认为有必要根据我的需要修改路由表,但我不知道该怎么做。 我试图在PC1和路由器1和2上修改一些路由规则,但没有成功。 以下我会报告networking各点的实际configuration:
PC1路线:
Route attive: Indirizzo rete Mask Gateway Interfaccia Metri 0.0.0.0 0.0.0.0 192.168.138.3 192.168.139.43 25 10.8.0.0 255.255.255.0 On-link 10.8.0.3 276 10.8.0.3 255.255.255.255 On-link 10.8.0.3 276 10.8.0.255 255.255.255.255 On-link 10.8.0.3 276 25.0.0.0 255.0.0.0 On-link 25.36.0.209 9256 25.36.0.209 255.255.255.255 On-link 25.36.0.209 9256 25.255.255.255 255.255.255.255 On-link 25.36.0.209 9256 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 169.254.11.0 255.255.255.0 10.8.0.1 10.8.0.3 21 192.168.138.0 255.255.254.0 On-link 192.168.139.43 281 192.168.139.43 255.255.255.255 On-link 192.168.139.43 281 192.168.139.255 255.255.255.255 On-link 192.168.139.43 281 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 25.36.0.209 9256 224.0.0.0 240.0.0.0 On-link 10.8.0.3 276 224.0.0.0 240.0.0.0 On-link 192.168.139.43 281 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 25.36.0.209 9256 255.255.255.255 255.255.255.255 On-link 10.8.0.3 276 255.255.255.255 255.255.255.255 On-link 192.168.139.43 281
Openvpn客户端cfg:
client ip-win32 ipapi ;float dev tun proto udp remote xxx.duckdns.org 1194 resolv-retry infinite nobind persist-key persist-tun mute-replay-warnings ca ca.crt cert client4.crt key client4.key remote-cert-tls server comp-lzo verb 3
Router1路由:
Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.20 0.0.0.0 UG 0 0 0 vlan2 10.8.0.0 * 255.255.255.0 U 0 0 0 tun0 127.0.0.0 * 255.0.0.0 U 0 0 0 lo 192.168.0.0 * 255.255.255.0 U 0 0 0 br0 192.168.1.0 * 255.255.255.0 U 0 0 0 vlan2
openvpn服务器cfg:
push "route 192.168.0.0 255.255.255.0" push "dhcp-option DNS 8.8.8.8" server 10.8.0.0 255.255.255.0 dev tun0 proto udp keepalive 10 60 dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem
路由器2路由:
Destination Gateway Genmask Flags Metric Ref Use Iface 10.64.64.64 * 255.255.255.255 UH 0 0 0 ppp0 10.8.0.0 * 255.255.255.0 U 0 0 0 tun11 169.254.11.0 * 255.255.255.0 U 0 0 0 br0 127.0.0.0 * 255.0.0.0 U 0 0 0 lo default 10.64.64.64 0.0.0.0 UG 0 0 0 ppp0
openvpn客户端cfg:
resolv-retry infinite nobind persist-key persist-tun mute-replay-warnings ca ca.crt comp-lzo verb 3