(lista de rotas atualizada / dados de conexão OpenVPN para refletir a situação atual)
Isso provavelmente foi perguntado / respondido antes, mas eu estou realmente perdido (e não posso comentar sobre outras questões já existentes devido à falta de pontos).
O que estou tentando (e quero) alcançar é permitir que meus usuários remotos (WAN) se conectem ao meu servidor VNC, mas através do meu endereço IP público / externo (Open) VPN.
Eu sei que tenho que adicionar uma entrada de roteamento para a tabela de roteamento, mas eu realmente não tenho idéia do que inserir.
Abaixo estão algumas informações úteis sobre minha rede:
IPCONFIG
Windows IP Configuration
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . : home
IPv6 Address. . . . . . . . . . . : (assumebly public address)
Temporary IPv6 Address. . . . . . : (assumebly public address)
Link-local IPv6 Address . . . . . : fe80::71dd:e774:1c82:f1ba%12
IPv4 Address. . . . . . . . . . . : 192.168.0.227
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
Ethernet adapter Ethernet 2:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::98a3:ea3d:644e:7bd4%10
IPv4 Address. . . . . . . . . . . : 10.9.1.54
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Default Gateway . . . . . . . . . : (empty)
(Open) dados IP da VPN
- 10.9.1.53 (servidor / gateway DHCP OpenVPN)
- 10.9.1.54 (meu endereço IP OpenVPN local)
IMPRESSÃO DE VIAGEM
===========================================================================
Interface List
12...60 a4 4c 3f 52 63 ......Intel(R) 82579V Gigabit Network Connection
10...00 ff 3c 66 f8 06 ......TAP-Windows Adapter V9
1...........................Software Loopback Interface 1
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.227 25
0.0.0.0 128.0.0.0 10.9.1.53 10.9.1.54 35
10.9.0.1 255.255.255.255 10.9.1.53 10.9.1.54 35
10.9.1.52 255.255.255.252 On-link 10.9.1.54 291
10.9.1.54 255.255.255.255 On-link 10.9.1.54 291
10.9.1.55 255.255.255.255 On-link 10.9.1.54 291
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
128.0.0.0 128.0.0.0 10.9.1.53 10.9.1.54 35
(public VPN IP) 255.255.255.255 192.168.0.1 192.168.0.227 25
192.168.0.0 255.255.255.0 On-link 192.168.0.227 281
192.168.0.227 255.255.255.255 On-link 192.168.0.227 281
192.168.0.255 255.255.255.255 On-link 192.168.0.227 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 10.9.1.54 291
224.0.0.0 240.0.0.0 On-link 192.168.0.227 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 10.9.1.54 291
255.255.255.255 255.255.255.255 On-link 192.168.0.227 281
===========================================================================
Log do OpenVPN:
Fri May 12 04:14:30 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.1.54/255.255.255.252 on interface {3C66F806-61B1-4EE3-9874-E1BB65CDFC75} [DHCP-serv: 10.9.1.53, lease-time: 31536000]
Fri May 12 04:14:30 2017 Successful ARP Flush on interface [10] {3C66F806-61B1-4EE3-9874-E1BB65CDFC75}
Fri May 12 04:14:30 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri May 12 04:14:30 2017 MANAGEMENT: >STATE:1494555270,ASSIGN_IP,,10.9.1.54,,,,
Fri May 12 04:14:32 2017 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri May 12 04:14:32 2017 C:\Windows\system32\route.exe ADD (public VPN address) MASK 255.255.255.255 192.168.0.1
Fri May 12 04:14:32 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Fri May 12 04:14:32 2017 Route addition via IPAPI succeeded [adaptive]
Fri May 12 04:14:32 2017 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.9.1.53
Fri May 12 04:14:32 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Fri May 12 04:14:32 2017 Route addition via IPAPI succeeded [adaptive]
Fri May 12 04:14:32 2017 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.9.1.53
Fri May 12 04:14:32 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Fri May 12 04:14:32 2017 Route addition via IPAPI succeeded [adaptive]
Fri May 12 04:14:32 2017 MANAGEMENT: >STATE:1494555272,ADD_ROUTES,,,,,,
Fri May 12 04:14:32 2017 C:\Windows\system32\route.exe ADD 10.9.0.1 MASK 255.255.255.255 10.9.1.53
Fri May 12 04:14:32 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Fri May 12 04:14:32 2017 Route addition via IPAPI succeeded [adaptive]
Fri May 12 04:14:32 2017 Initialization Sequence Completed
Fri May 12 04:14:32 2017 MANAGEMENT: >STATE:1494555272,CONNECTED,SUCCESS,10.9.1.54,(public VPN address),443,192.168.0.227,3053
VPNbook.com OpenVPN 'client' config que eu uso
client
dev tun1
proto tcp
remote [obtained VPN IP address] 443
remote [obtained VPN hostname] 443
resolv-retry infinite
nobind
persist-key
persist-tun
auth-user-pass
comp-lzo
verb 3
cipher AES-128-CBC
fast-io
pull
route-delay 2
redirect-gateway
E finalmente algumas informações do PING:
Pinging 10.9.1.54 with 32 bytes of data:
Reply from 10.9.1.54: bytes=32 time<1ms TTL=128
Pinging [public VPN address] with 32 bytes of data:
Reply from xxx.xxx.xxx.xxx: bytes=32 time=53ms TTL=50
Para recapitular: eu quero que meus clientes consigam VNC para minha caixa usando meu endereço IP público de VPN ou seu nome de host de DNS dinâmico que eu configurei.
Espero que alguém tenha a resposta e uma possível solução para mim.
Atenciosamente,
copyitright