Приветствую вас, форумчане!
Перед тем как создать тему я просмотрел форум, но не смог найти решение данного вопроса!
Помогите пожалуйста разобраться с такой проблемой!
Проблема в следующем :
Есть сервер open vpn.
С нему подключаются с 3G роутеров камеры (стоит роутер , свич, камера).
=РЕШЕНО==
Задача в том, чтобы из локальной сети сервера попадать в сеть камеры!
Для чего это? Мне нужно получить rtsp поток с камеры из локальной сети своей.
====
Проблема другая - из сети, допустим 172.16.47.20 не могу пропинговать ничего, кроме самого сервера 192.168.100.15
Распишу что и как.
Есть сервер open vpn.
Два интерфейса у него
1 ens160 192.168.100.15 - локальная сеть
2 tun0 10.1.0.1
За vpn есть подсети 172.16.X.X и 172.19.X.X
Как быть ? Помогите пожалуйста!
Конфигурация сервера
port 24899
# Протокол может быть UDP или TCP.
proto tcp
# Если вы выберите протокол TCP, здесь должно быть устройство tap. Однако, это вариант я не проверял, поэтому ищите информацию отдельно. FIXME
dev tun
# Указываем где искать ключи
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
# Для 12.04 dh1024.pem
# Задаем IP и маску виртуальной сети. Произвольно, но если не уверены лучше делайте как показано здесь
server 10.1.0.0 255.255.0.0
topology subnet
max-clients 250
#max-routes-per-client 512
max-routes 200
# Указыем, где хранятся файлы с настройками IP-адресов клиентов (создадим ниже)
client-config-dir ccd
route 192.1.1.0 255.255.255.0 #client4 1
route 192.1.2.0 255.255.255.0 #client5 2
route 192.1.3.0 255.255.255.0 #client6 3
route 192.1.4.0 255.255.255.0 #client7 4
route 192.1.5.0 255.255.255.0 #client8 5
route 192.1.6.0 255.255.255.0 #client9 6
route 192.1.7.0 255.255.255.0 #client10 7
route 192.1.8.0 255.255.255.0 #client11 8
route 192.1.9.0 255.255.255.0 #client12 9
route 192.1.10.0 255.255.255.0 #client14 10
route 192.1.11.0 255.255.255.0 #client15 11
route 192.1.12.0 255.255.255.0 #client16 12
route 192.1.13.0 255.255.255.0 #client17 13
route 192.1.14.0 255.255.255.0 #client18 14
route 192.1.15.0 255.255.255.0 #client19 15
route 192.1.16.0 255.255.255.0 #client21 16
#route 192.1.17.0 255.255.255.0 #client22 17
route 192.1.18.0 255.255.255.0 #client23 18
route 192.1.19.0 255.255.255.0 #client24 19
route 192.1.20.0 255.255.255.0 #client25 20
route 192.1.21.0 255.255.255.0 #client26 21
#route 192.1.22.0 255.255.255.0 #client27 22
#route 192.1.23.0 255.255.255.0 #client28 23
#route 192.168.10.0 255.255.255.0 #client1 1111
##############################################################################
route 172.16.1.0 255.255.255.0 #client4 1
route 172.16.2.0 255.255.255.0 #client5 2
route 172.16.3.0 255.255.255.0 #client6 3
route 172.16.4.0 255.255.255.0 #client7 4
route 172.16.5.0 255.255.255.0 #client8 5
route 172.16.6.0 255.255.255.0 #client9 6
route 172.16.7.0 255.255.255.0 #client10 7
route 172.16.8.0 255.255.255.0 #client11 8
route 172.16.9.0 255.255.255.0 #client12 9
route 172.16.10.0 255.255.255.0 #client14 10
route 172.16.11.0 255.255.255.0 #client15 11
route 172.16.12.0 255.255.255.0 #client16 12
route 172.16.13.0 255.255.255.0 #client17 13
route 172.16.14.0 255.255.255.0 #client18 14
route 172.16.15.0 255.255.255.0 #client19 15
route 172.16.16.0 255.255.255.0 #client21 16
route 172.16.17.0 255.255.255.0 #client22 17
route 172.16.18.0 255.255.255.0 #client23 18
route 172.16.19.0 255.255.255.0 #client24 19
route 172.16.20.0 255.255.255.0 #client25 20
route 172.16.21.0 255.255.255.0 #client26 21
route 172.16.22.0 255.255.255.0 #client27 22
route 172.16.23.0 255.255.255.0 #client28 23
#################################################################################
route 172.16.30.0 255.255.255.0 #client50 ip camera
route 172.16.31.0 255.255.255.0 #client51 ip camera
route 172.16.32.0 255.255.255.0 #client52 ip camera
###############################
route 172.16.40.0 255.255.255.0 #client40
route 172.16.41.0 255.255.255.0 #client41
route 172.16.42.0 255.255.255.0 #client42
route 172.16.43.0 255.255.255.0 #client43
route 172.16.44.0 255.255.255.0 #client44
route 172.16.45.0 255.255.255.0 #client45
route 172.16.46.0 255.255.255.0 #client46
route 172.16.47.0 255.255.255.0 #client47
route 172.16.48.0 255.255.255.0 #client48
route 172.16.49.0 255.255.255.0 #client49
route 172.16.50.0 255.255.255.0 #client050
route 172.16.51.0 255.255.255.0 #client051
route 172.16.52.0 255.255.255.0 #client052
route 172.16.52.0 255.255.255.0 #client53
route 172.16.53.0 255.255.255.0 #client54
route 172.16.54.0 255.255.255.0 #client55
route 172.16.55.0 255.255.255.0 #client56
route 172.16.56.0 255.255.255.0 #client57
route 172.16.57.0 255.255.255.0 #client50
route 172.16.58.0 255.255.255.0 #client50
route 172.16.59.0 255.255.255.0 #client50
route 172.16.60.0 255.255.255.0 #client50
route 172.16.61.0 255.255.255.0 #client50
route 172.16.62.0 255.255.255.0 #client50
route 172.16.63.0 255.255.255.0 #client50
route 172.16.64.0 255.255.255.0 #client50
route 172.16.65.0 255.255.255.0 #client50
route 172.16.66.0 255.255.255.0 #client50
route 172.16.67.0 255.255.255.0 #client50
route 172.16.68.0 255.255.255.0 #client50
route 172.16.69.0 255.255.255.0 #client50
route 172.16.70.0 255.255.255.0 #client50
route 172.16.71.0 255.255.255.0 #client50
route 172.16.72.0 255.255.255.0 #client50
route 172.16.73.0 255.255.255.0 #client50
route 172.16.74.0 255.255.255.0 #client50
route 172.16.75.0 255.255.255.0 #client50
route 172.16.76.0 255.255.255.0 #client50
route 172.16.77.0 255.255.255.0 #client50
route 172.16.78.0 255.255.255.0 #client50
route 172.16.79.0 255.255.255.0 #client50
route 172.16.80.0 255.255.255.0 #client50
route 172.16.81.0 255.255.255.0 #client50
route 172.16.82.0 255.255.255.0 #client50
route 172.16.83.0 255.255.255.0 #client50
route 172.19.115.0 255.255.255.0 #client50
route 172.19.15.0 255.255.255.0 #client50
route 172.19.114.0 255.255.255.0 #client50
route 172.19.14.0 255.255.255.0 #client50
route 172.19.113.0 255.255.255.0 #client50
route 172.19.13.0 255.255.255.0 #client50
route 172.19.112.0 255.255.255.0 #client50
route 172.19.12.0 255.255.255.0 #client50
route 172.19.110.0 255.255.255.0 #client50
route 172.19.10.0 255.255.255.0 #client50
route 172.19.16.0 255.255.255.0
route 172.19.116.0 255.255.255.0
route 172.19.216.0 255.255.255.0
route 172.16.84.0 255.255.255.0 #old_airp
route 172.16.85.0 255.255.255.0 #shol_20l_ipcam
route 172.16.86.0 255.255.255.0 #railway
# Запоминать динамически выданные адреса для VPN-клиентов и при последующих подключениях назначать те же значения.
#ifconfig-pool-persist ipp.txt
# Включаем TLS
#tls-server
#tls-auth /etc/openvpn/keys/ta.key 0
#tls-timeout 120
#auth SHA1
auth MD5
cipher BF-CBC
# Если нужно, чтобы клиенты видели друг друга раскомментируйте
client-to-client
keepalive 10 120
# Сжатие трафика
comp-lzo
# Максимум клиентов
#max-clients 10
user nobody
group nogroup
# Не перечитывать ключи, не закрывать и переоткрывать TUN\TAP устройство, после получения SIGUSR1 или ping-restart
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
verb 1
# Защита от повторов (максимум 20 одинаковых сообщений подряд)
#mute 20
Конфигурация одного клиента
ifconfig-push 10.1.1.189 255.255.0.0
# IP камера Пушкинская-
iroute 172.16.47.0 255.255.255.0
push "route 192.168.100.0 255.255.255.0"
Таблица маршрутизации на сервере
Таблица маршутизации ядра протокола IP
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.100.1 0.0.0.0 UG 0 0 0 ens192
10.1.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun0
172.16.1.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.2.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.3.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.4.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.5.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.6.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.7.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.8.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.9.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.10.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.11.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.12.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.13.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.14.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.15.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.16.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.17.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.18.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.19.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.20.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.21.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.22.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.23.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.30.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.31.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.32.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.40.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.41.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.42.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.43.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.44.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.45.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.46.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.47.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.48.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.49.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.50.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.51.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.52.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.53.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.54.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.55.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.56.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.57.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.58.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.59.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.60.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.61.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.62.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.63.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.64.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.65.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.66.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.67.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.68.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.69.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.70.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.71.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.72.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.73.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.74.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.75.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.76.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.77.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.78.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.79.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.80.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.81.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.82.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.83.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.84.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.85.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.16.86.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.10.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.12.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.13.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.14.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.15.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.16.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.110.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.112.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.113.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.114.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.115.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.116.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
172.19.216.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.1.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.2.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.3.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.4.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.5.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.6.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.7.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.8.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.9.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.10.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.11.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.12.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.13.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.14.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.15.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.16.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.18.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.19.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.20.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.1.21.0 10.1.0.2 255.255.255.0 UG 0 0 0 tun0
192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 ens192
ifconfig
ens192 Link encap:Ethernet HWaddr 00:50:56:8e:a8:81
inet addr:192.168.100.15 Bcast:192.168.100.255 Mask:255.255.255.0
inet6 addr: fe80::250:56ff:fe8e:a881/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:8541932 errors:0 dropped:279 overruns:0 frame:0
TX packets:5913561 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:8692898737 (8.6 GB) TX bytes:560803437 (560.8 MB)
lo Link encap:Локальная петля (Loopback)
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:64 errors:0 dropped:0 overruns:0 frame:0
TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1
RX bytes:6336 (6.3 KB) TX bytes:6336 (6.3 KB)
pimreg Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
UP RUNNING NOARP MTU:1472 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.1.0.1 P-t-P:10.1.0.1 Mask:255.255.0.0
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:8041349 errors:0 dropped:0 overruns:0 frame:0
TX packets:42244 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:4268261526 (4.2 GB) TX bytes:4489478 (4.4 MB)