OpenVPN route issue

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls.

I wouldn’t repeat how I setup OpenVPN from scratch which you can found tons of useful guide on Google. Here, I would like to share my OpenVPN routing issue and solution.

Setup details as show below:

SERVER:
LAN = 172.16.7.25X/255.255.0.0
WAN = 219.95.19x.1xx/255.255.255.252
VPN = 172.31.0.x/255.255.0.0

[root@planetmy ~]# view /etc/openvpn/server.conf
port 1194
proto udp
dev tun
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh1024.pem
server 172.31.0.0 255.255.0.0
ifconfig-pool-persist ipp.txt
push “route 172.16.0.0 255.255.0.0″
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
Read more

Possibly Related Posts:

May 15, 2009 · Filed Under Open Source, Tips

2 Comments

Linux Market Share Passes 2%!!

Possibly Related Posts:

May 4, 2009 · Filed Under Open Source

1 Comment

FreeBSD 7.2 Have Been Release

The FreeBSD Release Engineering Team is pleased to announce the availability of FreeBSD 7.2-RELEASE. This is the third release from the 7-STABLE branch which improves on the functionality of FreeBSD 7.1 and introduces some new features. Some of the highlights:

*support for fully transparent use of superpages for application memory
*support for multiple IPv4 and IPv6 addresses for jails
*csup(1) now supports CVSMode to fetch a complete CVS repository
*Gnome updated to 2.26, KDE updated to 4.2.2
*sparc64 now supports UltraSparc-III processors

For a complete list of new features and known problems, please see the online release notes and errata list, available at:

*http://www.FreeBSD.org/releases/7.2R/relnotes.html
*http://www.FreeBSD.org/releases/7.2R/errata.html

Possibly Related Posts:

May 4, 2009 · Filed Under Open Source

Comment

How to Check Filesystem Block Size on Linux?

The Linux file system architecture is an interesting example of abstracting complexity. The block size specifies size that the filesystem will use to read and write data. Larger block sizes will help improve disk I/O performance when using large files, such as databases. This happens because the disk can read or write data for a longer period of time before having to search for the next block.

For example, if you set your block size to 4096, or 4K, and you create a file that is 256 bytes in size, it will still consume 4K of space on your harddrive. For one file that may seem trivial, but when your filesystem contains hundreds or thousands of files, this can add up.

Block size can also effect the maximum supported file size on some filesystems. This is because many modern filesystem are limited not by block size or file size, but by the number of blocks. Therefore you would be using a “block size * max # of blocks = max block size” formula.

How to Check Filesystem Block Size on Linux?
Example 1:
# tune2fs -l /dev/sda1 | grep -i ‘block size’
Block size: 4096
Read more

Possibly Related Posts:

April 14, 2009 · Filed Under Open Source, Tips

1 Comment

How to grep and display IP Address on Linux

How to find out an IP Address on Linux is pretty simple by type “ifconfig” command.

Output:

# ifconfig
eth0 Link encap:Ethernet HWaddr 01:2A:A1:3C:C3:27
inet addr:192.168.1.23 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:256125364 errors:0 dropped:0 overruns:0 frame:0
TX packets:203700834 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:240597045 (229.4 Mb) TX bytes:3399069596 (3241.6 Mb)
Interrupt:16 Memory:f8000000-f8011100

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4760967 errors:0 dropped:0 overruns:0 frame:0
TX packets:4760967 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:480898269 (458.6 Mb) TX bytes:480898269 (458.6 Mb)

For some reason, you may want to display IP Address only. You can do it on multiple way and here you go:
Read more

Possibly Related Posts:

April 9, 2009 · Filed Under Open Source, Tips

Comment

← Previous Page — Next Page →