谁能帮我看看，为什么openvpn连上了却上不了网？谢谢

yeahlang

Sun Jun 13 12:45:18 2010 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct  1 2006
Sun Jun 13 12:45:18 2010 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Jun 13 12:45:18 2010 LZO compression initialized
Sun Jun 13 12:45:18 2010 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Jun 13 12:45:18 2010 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Jun 13 12:45:18 2010 Local Options hash (VER=V4): '41690919'
Sun Jun 13 12:45:18 2010 Expected Remote Options hash (VER=V4): '530fdded'
Sun Jun 13 12:45:18 2010 UDPv4 link local (bound): [undef]:1194
Sun Jun 13 12:45:18 2010 UDPv4 link remote: 173.212.***.***:1194
Sun Jun 13 12:45:18 2010 TLS: Initial packet from 173.212.***.***:1194, sid=ad01d5f2 e4a6df32
Sun Jun 13 12:45:19 2010 VERIFY OK: depth=1, /C=CN/ST=SH/L=Shanghai/O=domain.com/OU=domain.com/CN=domain-vps/[email protected]
Sun Jun 13 12:45:19 2010 VERIFY OK: nsCertType=SERVER
Sun Jun 13 12:45:19 2010 VERIFY OK: depth=0, /C=CN/ST=SH/L=Shanghai/O=domain.com/OU=domain.com/CN=domain-vps/[email protected]
Sun Jun 13 12:45:23 2010 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jun 13 12:45:23 2010 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jun 13 12:45:23 2010 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jun 13 12:45:23 2010 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jun 13 12:45:23 2010 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Jun 13 12:45:23 2010 [domain-vps] Peer Connection Initiated with 173.212.***.***:1194
Sun Jun 13 12:45:24 2010 SENT CONTROL [domain-vps]: 'PUSH_REQUEST' (status=1)
Sun Jun 13 12:45:24 2010 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.8.0.1,dhcp-option DNS 4.2.2.1,dhcp-option DNS 4.2.2.2,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sun Jun 13 12:45:24 2010 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:5: topology (2.0.9)
Sun Jun 13 12:45:24 2010 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jun 13 12:45:24 2010 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jun 13 12:45:24 2010 OPTIONS IMPORT: route options modified
Sun Jun 13 12:45:24 2010 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jun 13 12:45:24 2010 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{A864644E-6B57-4DEE-A691-5A0C32AE00B5}.tap
Sun Jun 13 12:45:24 2010 TAP-Win32 Driver Version 8.4
Sun Jun 13 12:45:24 2010 TAP-Win32 MTU=1500
Sun Jun 13 12:45:24 2010 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {A864644E-6B57-4DEE-A691-5A0C32AE00B5} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sun Jun 13 12:45:24 2010 Successful ARP Flush on interface [19] {A864644E-6B57-4DEE-A691-5A0C32AE00B5}
Sun Jun 13 12:45:27 2010 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Sun Jun 13 12:45:27 2010 route ADD 173.212.***.*** MASK 255.255.255.255 192.168.1.1
OK!
Sun Jun 13 12:45:27 2010 route ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Sun Jun 13 12:45:27 2010 route ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
OK!
Sun Jun 13 12:45:27 2010 route ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
OK!
Sun Jun 13 12:45:28 2010 Initialization Sequence Completed
貌似链接是可以连上去，但是显示为no internet access，原来的网络链接（本地链接）不受影响，没有断开，但是这时候连一个网页都打不开了，不知道为什么？

Google了一下，但是没有找到答案，好像是说openvpn2.0.9版本太低，必须用openvpn2.1及以上版本，可是我下载了openvpn2.1.1，发现easy-rsa目录中有三个文件夹：1.0、2.0、Windows，就是找不到2.1.1啊？我甚至在VPS上安装了SVN客户端，然后checkout SVN版本，结果发现还是这样的，真的糊涂了，谁能帮帮我啊？谢过先。

昨天发了一个贴子，里面有图 - http://www.sunk.eu.org/thread-20427-1-1.html
可能有用的信息：burstnet vps / centos 5.5 32bit
本人用的系统是Windows7 英文版

[ 本帖最后由 yeahlang 于 2010-6-13 14:39 编辑 ]

any632

easyrsa 文件夹里面的2.0的就行吧～
/etc/openvpn/easy-rsa/2.0/keys/ca.crt

/etc/openvpn/easy-rsa/2.0/keys/client1.crt

/etc/openvpn/easy-rsa/2.0/keys/client1.key
这三个下回客户端就行，从你的文件看来验证已经通过了～是不是你的ip转发没有设置啊？

你看看这篇文章吧～https://forum.ramhost.us/bbs/viewtopic.php?id=160
我多个vps安装openvpn都成功～84也按这个的

win7的不大了解，我win7连pptp都老是619 ，openvpn没试过

你先试试用xp可不可以啊。

[ 本帖最后由 any632 于 2010-6-13 14:59 编辑 ]

yeahlang

三个文件下了

ip转发也设置了

net.ipv4.ip_forward = 1



# iptables -t nat -A POSTROUTING -s 10.8.0.0/255.255.255.0 -j SNAT --to-source 173.212.***.***
# /etc/init.d/iptables save
# /etc/init.d/iptables restart

有点搞不懂了

[ 本帖最后由 yeahlang 于 2010-6-13 15:00 编辑 ]

yeahlang

没XP

霸武邪皇

VPN设置太复杂了

lemss

配置有问题吧

vvv

学习