meu problema é:
existem 4 roteadores e conectados com o openvpn (tun). r1 / r2 é o Ubuntu, e rodando no AWS EC2. r3 / r4 é pfsense, rodando no ESXi VM.
r1:
eth0: 10.5.1.8/24
tun0: 10.15.0.1 (to r2 tun0)
tun1: 10.15.1.1 (to r3 ovpnc1)
r2:
eth0: 10.5.2.9/24
tun0: 10.15.0.2 (to r1 tun0)
tun1: 10.15.1.13 (to r4 opvnc1)
r3:
em0: 192.168.91.1/24 (CARP IP: 192.168.91.3)
em1: 10.15.11.1 (PFSYNC interface, connect to r4 by dedicate vlan)
ovpnc1: 10.15.1.2 (to r1)
r4:
em0: 192.168.91.2/24 (CARP IP: 192.168.91.3)
em1: 10.15.11.2 (PFSYNC interface, connect to r3 by dedicate vlan)
ovpnc1: 10.15.1.14 (to r2)
r1 -tun - r2
| |
tun tun
| |
r3 -vlan- r4
PS: porque r1 e r2 estão em execução no AWS, então r1 (10.5.1.0/24) para r2 (10.5.2.0/24) está usando o roteador AWS VPN (10.5.1.1).
Todos os roteadores estão executando o OSPF.
detalhes:
do ping de r1:
r2(10.5.2.9): success
r2(10.15.0.2): success
r3(192.168.91.1): success
r3(10.15.1.2): success
r4(192.168.91.2): **success, but will lost the first ping packet(always)**
r4(10.15.1.14): success, no packet loss
do ping de r2:
r1(10.5.1.8): success
r1(10.15.0.1): success
r3(192.168.91.1): **success, the first packet loss too**
r3(10.15.1.2): success, no packet loss
r4(192.168.91.2): success
r4(10.15.1.14): success
do ping de r3:
r1(10.5.1.8): success
r1(10.15.1.1): success
r2(10.5.2.9): **FAILED, cannot ping**
r2(10.15.0.2): success
r2(10.15.1.13): success
r4(192.168.91.2): success
r4(10.15.11.2): success
do ping do r4:
r1(10.5.1.8): **FAILED, cannot ping**
r1(10.15.0.1): success
r1(10.15.1.1): success
r2(10.5.2.9): success
r2(10.15.1.13): success
r3(192.168.91.1): success
r3(10.15.11.1): success