[FUG-BR] [OFF TOPIC] - Open VPN Conecta mas não passa dados. (PFsense)

[Bruno Torres Viana]

Senhores,

          Li os tópicos e não achei nada fosse parecido ou que eu não tenha
compreendido como próximo aqui no forum. Estou usando o PFSense para este
servidor e as configuraçẽos em princípio estão certas.

          No cliente eu conecto, recebo o IP do pool que está como dhcp
porem não consigo acessar minha rede interna. Segue abaixo o log do cliente
e algumas configurações:

Tue May 12 15:35:12 2009 us=787158 TCPv4_CLIENT READ [32] from
201.79.60.92:1194: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=18
Tue May 12 15:35:12 2009 us=787648 PUSH: Received control message:
'PUSH_REPLY,dhcp-option DNS 192.168.1.1,192.168.1.0 255.255.255.0
,route 192.168.1.1,ping 10,ping-restart 60,ifconfig 192.168.1.6 192.168.1.5'

Tue May 12 15:35:12 2009 us=788441 Options error: Unrecognized option or
missing parameter(s) in [PUSH-OPTIONS]:2: 192.168.1.0 (2.0. 9)
Tue May 12 15:35:12 2009 us=789188 OPTIONS IMPORT: timers and/or timeouts
modified
Tue May 12 15:35:12 2009 us=789582 OPTIONS IMPORT: --ifconfig/up options
modified
Tue May 12 15:35:12 2009 us=789970 OPTIONS IMPORT: route options modified
Tue May 12 15:35:12 2009 us=790355 OPTIONS IMPORT: --ip-win32 and/or
--dhcp-option options modified
Tue May 12 15:35:12 2009 us=795701 TAP-WIN32 device [openvpn] opened:
\\.\Global\{BAD708A4-4E61-4E5B-B40C-08AE57EDFDA6}.tap
Tue May 12 15:35:12 2009 us=796152 TAP-Win32 Driver Version 8.4
Tue May 12 15:35:12 2009 us=796591 TAP-Win32 MTU=1500
Tue May 12 15:35:12 2009 us=797000 Notified TAP-Win32 driver to set a DHCP
IP/netmask of 192.168.1.6/255.255.255.252 on interface {B
AD708A4-4E61-4E5B-B40C-08AE57EDFDA6} [DHCP-serv: 192.168.1.5, lease-time:
31536000]
Tue May 12 15:35:12 2009 us=797765 DHCP option string: 0604c0a8 0101
Tue May 12 15:35:12 2009 us=799638 Successful ARP Flush on interface
[327687] {BAD708A4-4E61-4E5B-B40C-08AE57EDFDA6}
Tue May 12 15:35:12 2009 us=811405 TCPv4_CLIENT WRITE [22] to
201.79.60.92:1194: P_ACK_V1 kid=0 [ 30 ]
Tue May 12 15:35:12 2009 us=883072 TEST ROUTES: 0/0 succeeded len=1 ret=0
a=0 u/d=down
Tue May 12 15:35:12 2009 us=883473 Route: Waiting for TUN/TAP interface to
come up...
Tue May 12 15:35:12 2009 us=884050 TCPv4_CLIENT WRITE [26] to
201.79.60.92:1194: P_ACK_V1 kid=0 [ 31 32 ]
Tue May 12 15:35:14 2009 us=80970 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0
u/d=down
Tue May 12 15:35:14 2009 us=81405 Route: Waiting for TUN/TAP interface to
come up...
Tue May 12 15:35:15 2009 us=284406 TEST ROUTES: 0/0 succeeded len=1 ret=0
a=0 u/d=down
Tue May 12 15:35:15 2009 us=284832 Route: Waiting for TUN/TAP interface to
come up...
Tue May 12 15:35:16 2009 us=487373 TEST ROUTES: 0/0 succeeded len=1 ret=0
a=0 u/d=down
Tue May 12 15:35:16 2009 us=487791 Route: Waiting for TUN/TAP interface to
come up...
Tue May 12 15:35:17 2009 us=690443 TEST ROUTES: 1/1 succeeded len=1 ret=1
a=0 u/d=up
Tue May 12 15:35:17 2009 us=690873 route ADD 192.168.1.1 MASK
255.255.255.255 192.168.1.5
Tue May 12 15:35:17 2009 us=695252 Route addition via IPAPI succeeded
Tue May 12 15:35:17 2009 us=695631 Initialization Sequence Completed

Servidor

Rede local: 192.168.1.0/24
Pool: 192.168.1.0/24 [Já tentei com outra rede também]
Todos os certificados e chaves estão corretos

As regras de liberação estão corretas e em princípio NAT também.

Cliente

client
port 1194
proto tcp
dev tun
dev-node openvpn
remote aaaa.bbbb.cccc.dddd 1194
comp-lzo
ca ca.crt
cert client.crt
key client.key
verb 6
mute-replay-warnings
mute 20


Sei que tem algumas pessoas aqui que tem experiência em pfsense e tabmém com
openvpn. Qualquer ajuda é bem vinda!
Obrigado!

-- 
-------------------------------
Bruno Torres Viana