iKuai爱快流控路由

 找回密码
 立即注册

QQ登录

只需一步,快速开始

查看: 29284|回复: 17
打印 上一主题 下一主题

怎么解决OpenVPN这三个问题额?

[复制链接]
跳转到指定楼层
楼主
发表于 2018-1-12 13:43:49 | 只看该作者 |只看大图 回帖奖励 |倒序浏览 |阅读模式
本帖最后由 ftfei1991 于 2018-1-12 19:50 编辑

我使用的是OpenVPN客户端进行连接爱快的OpenVPN,提示三个问题,两个是警告,一个是路由添加失败(已经使用了管理员权限运行)官方和大神们,这个三个问题怎么解决额?
如图 (如果图看不清我把日志贴上来)
里边的IP、端口 和网卡的MAC我已经隐藏,用XXX代表


相关配置

client
dev-type tun
dev tunx
proto tcp
tun-mtu 1500
cipher AES-256-CBC
comp-lzo
remote XXX.XXX.XXX.XXX xxxx
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
auth-user-pass
script-security 2

<ca>
-----BEGIN CERTIFICATE-----
AwwPaUt1     隐藏部分   3DQEBCwUAMDcxCzAJBgNV
AwwPaUt1Y   隐藏部分   WkgRGV2aWNlIENB
LMAkGA1U    隐藏部分    EBhMCQ04x
A9pS3Vha     隐藏部分   SBEZXZpY2UgQ0EwggEiMA0G
T7awCpkG    隐藏部分   XpcHTND6g1MBzYT
NJqrSCmzQ   隐藏部分     lJNEPjQV8
GHXHvDZjT   隐藏部分     RfkVywWnleWWhs
E6WgchyBc   隐藏部分    rqcfGPyEdKoAGVzlHf9Ng
OY7dWiTAfB  隐藏部分    gNVHSMEGDAWgBRZ
DIqosY2Z5u   隐藏部分    TIsVlBBA0Z0tPLri
AeAQXt5uxFO 隐藏部分    xQpS2mjO0ZkOj/yIF+AY
kOdku3UUwp  隐藏部分   Tc9RScINwXM/p/e3K8
-----END CERTIFICATE-----
</ca>

# redirect-gateway def1 bypass-dns  # uncomment to set as default gateway
# route-nopull  # uncomment to disable server route push
#





相关日志
Fri Jan 12 13:24:54 2018 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Fri Jan 12 13:24:54 2018 Windows version 6.1 (Windows 7) 64bit
Fri Jan 12 13:24:54 2018 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Fri Jan 12 13:24:54 2018 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Fri Jan 12 13:24:54 2018 Need hold release from management interface, waiting...
Fri Jan 12 13:24:55 2018 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Fri Jan 12 13:24:55 2018 MANAGEMENT: CMD 'state on'
Fri Jan 12 13:24:55 2018 MANAGEMENT: CMD 'log all on'
Fri Jan 12 13:24:55 2018 MANAGEMENT: CMD 'echo all on'
Fri Jan 12 13:24:55 2018 MANAGEMENT: CMD 'hold off'
Fri Jan 12 13:24:55 2018 MANAGEMENT: CMD 'hold release'
Fri Jan 12 13:25:00 2018 MANAGEMENT: CMD 'username "Auth" "123"'
Fri Jan 12 13:25:00 2018 MANAGEMENT: CMD 'password [...]'
Fri Jan 12 13:25:00 2018 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Jan 12 13:25:00 2018 MANAGEMENT: >STATE:1515734700,RESOLVE,,,,,,
Fri Jan 12 13:25:00 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]42.XXX.XXX.XX:XXXX
Fri Jan 12 13:25:00 2018 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Jan 12 13:25:00 2018 Attempting to establish TCP connection with [AF_INET]42.XXX.XXX.XX:XXXX [nonblock]
Fri Jan 12 13:25:00 2018 MANAGEMENT: >STATE:1515734700,TCP_CONNECT,,,,,,
Fri Jan 12 13:25:01 2018 TCP connection established with [AF_INET]42.XXX.XXX.XX:XXXX
Fri Jan 12 13:25:01 2018 TCP_CLIENT link local: (not bound)
Fri Jan 12 13:25:01 2018 TCP_CLIENT link remote: [AF_INET]42.XXX.XXX.XX:XXXX
Fri Jan 12 13:25:01 2018 MANAGEMENT: >STATE:1515734701,WAIT,,,,,,
Fri Jan 12 13:25:01 2018 MANAGEMENT: >STATE:1515734701,AUTH,,,,,,
Fri Jan 12 13:25:01 2018 TLS: Initial packet from [AF_INET]42.XXX.XXX.XX:XXXX, sid=12c913fc b067a6aa
Fri Jan 12 13:25:01 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Jan 12 13:25:02 2018 VERIFY OK: depth=1, C=CN, O=iKuai, CN=iKuai Device CA
Fri Jan 12 13:25:02 2018 VERIFY OK: depth=0, C=CN, O=iKuai, CN=iKuai OpenVPN Server
Fri Jan 12 13:25:02 2018 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Jan 12 13:25:02 2018 [iKuai OpenVPN Server] Peer Connection Initiated with [AF_INET]42.XXX.XXX.XX:XXXX
Fri Jan 12 13:25:03 2018 MANAGEMENT: >STATE:1515734703,GET_CONFIG,,,,,,
Fri Jan 12 13:25:03 2018 SENT CONTROL [iKuai OpenVPN Server]: 'PUSH_REQUEST' (status=1)
Fri Jan 12 13:25:03 2018 PUSH: Received control message: 'PUSH_REPLY,route 192.168.6.0 255.255.255.0,route 192.168.6.0 255.255.255.0,topology net30,ping 10,ping-restart 60,ifconfig 192.168.6.6 192.168.6.5'
Fri Jan 12 13:25:03 2018 OPTIONS IMPORT: timers and/or timeouts modified
Fri Jan 12 13:25:03 2018 OPTIONS IMPORT: --ifconfig/up options modified
Fri Jan 12 13:25:03 2018 OPTIONS IMPORT: route options modified
Fri Jan 12 13:25:03 2018 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Jan 12 13:25:03 2018 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 12 13:25:03 2018 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Jan 12 13:25:03 2018 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 12 13:25:03 2018 interactive service msg_channel=0
Fri Jan 12 13:25:03 2018 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=11 HWADDR=70:XX:XX:XX:XX:XX
Fri Jan 12 13:25:03 2018 open_tun
Fri Jan 12 13:25:03 2018 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{75E088E7-3BFB-4008-B2B7-16E71C7F81BB}.tap
Fri Jan 12 13:25:03 2018 TAP-Windows Driver Version 9.21
Fri Jan 12 13:25:03 2018 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.6.6/255.255.255.252 on interface {75E088E7-3BFB-4008-B2B7-16E71C7F81BB} [DHCP-serv: 192.168.6.5, lease-time: 31536000]
Fri Jan 12 13:25:03 2018 Successful ARP Flush on interface [13] {75E088E7-3BFB-4008-B2B7-16E71C7F81BB}
Fri Jan 12 13:25:03 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Jan 12 13:25:03 2018 MANAGEMENT: >STATE:1515734703,ASSIGN_IP,,192.168.6.6,,,,
Fri Jan 12 13:25:09 2018 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Fri Jan 12 13:25:09 2018 MANAGEMENT: >STATE:1515734709,ADD_ROUTES,,,,,,
Fri Jan 12 13:25:09 2018 C:\Windows\system32\route.exe ADD 192.168.6.0 MASK 255.255.255.0 192.168.6.5
Fri Jan 12 13:25:09 2018 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri Jan 12 13:25:09 2018 Route addition via IPAPI succeeded [adaptive]
Fri Jan 12 13:25:09 2018 C:\Windows\system32\route.exe ADD 192.168.6.0 MASK 255.255.255.0 192.168.6.5
Fri Jan 12 13:25:09 2018 ROUTE: route addition failed using CreateIpForwardEntry: 对象已存在。   [status=5010 if_index=13]
Fri Jan 12 13:25:09 2018 Route addition via IPAPI failed [adaptive]
Fri Jan 12 13:25:09 2018 Route addition fallback to route.exe
Fri Jan 12 13:25:09 2018 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Fri Jan 12 13:25:09 2018 Initialization Sequence Completed
Fri Jan 12 13:25:09 2018 MANAGEMENT: >STATE:1515734709,CONNECTED,SUCCESS,192.168.6.6,42.236.237.43,1194,192.168.1.2,54771
Fri Jan 12 13:37:04 2018 C:\Windows\system32\route.exe DELETE 192.168.6.0 MASK 255.255.255.0 192.168.6.5
Fri Jan 12 13:37:04 2018 Route deletion via IPAPI succeeded [adaptive]
Fri Jan 12 13:37:04 2018 C:\Windows\system32\route.exe DELETE 192.168.6.0 MASK 255.255.255.0 192.168.6.5
Fri Jan 12 13:37:04 2018 ROUTE: route deletion failed using DeleteIpForwardEntry: 找不到元素。  
Fri Jan 12 13:37:04 2018 Route deletion via IPAPI failed [adaptive]
Fri Jan 12 13:37:04 2018 Route deletion fallback to route.exe
Fri Jan 12 13:37:04 2018 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Fri Jan 12 13:37:04 2018 Closing TUN/TAP interface
Fri Jan 12 13:37:04 2018 TAP: DHCP address released
Fri Jan 12 13:37:04 2018 SIGTERM[hard,] received, process exiting
Fri Jan 12 13:37:04 2018 MANAGEMENT: >STATE:1515735424,EXITING,SIGTERM,,,,,


QQ截图20180112133107 副本.jpg (854.59 KB, 下载次数: 27)

QQ截图20180112133107 副本.jpg
分享到:  QQ好友和群QQ好友和群 QQ空间QQ空间 腾讯微博腾讯微博 腾讯朋友腾讯朋友
收藏收藏1 支持支持 反对反对
推荐
发表于 2018-1-16 21:16:43 | 只看该作者
ftfei1991 发表于 2018-1-12 19:52
没有什么问题,网络可以连接上去,不过就是流量无法走openvpn线路

把配置文件中CA证书下面这一句

# redirect-gateway def1 bypass-dns  # uncomment to set as default gateway
# route-nopull  # uncomment to disable server route push
#

改成

redirect-gateway def1 bypass-dns  # uncomment to set as default gateway
# route-nopull  # uncomment to disable server route push
#



即去掉第一个#

再试试,包治百病。不好在找我,大夫接着给把脉看病

点评

高手,感谢  发表于 2018-3-1 17:41
沙发
发表于 2018-1-12 13:51:33 | 只看该作者
你这是线路问题。
板凳
 楼主| 发表于 2018-1-12 13:55:16 | 只看该作者

能详细说一下吗? 比如
谢谢你
地板
发表于 2018-1-12 15:01:09 | 只看该作者
ftfei1991 发表于 2018-1-12 13:55
能详细说一下吗? 比如
谢谢你

你线路不稳定,如果是连国外,要用CN2线路

如果你不是连国外,忽略我
5#
发表于 2018-1-12 15:42:04 | 只看该作者
楼主您好,在您这个日志中并没有看到明显的报错,您现在是不能正常使用吗
如果可以正常使用的话,这个日志您可以忽略的
6#
 楼主| 发表于 2018-1-12 19:52:20 | 只看该作者
爱快技术支持08 发表于 2018-1-12 15:42
楼主您好,在您这个日志中并没有看到明显的报错,您现在是不能正常使用吗
如果可以正常使用的话,这个日志 ...

没有什么问题,网络可以连接上去,不过就是流量无法走openvpn线路
8#
发表于 2018-1-16 21:17:41 | 只看该作者
好了也说一声
9#
发表于 2018-1-16 21:19:51 | 只看该作者

他那一看就是FQ用的,现在OPEN连香港失败率很高,即使连上了,速度也很差。
10#
发表于 2018-1-17 09:48:42 | 只看该作者
流量不走open有没有设置域名分流啊
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

关闭

站长推荐上一条 /1 下一条

QQ|小黑屋|手机版|Archiver|论坛规章制度|iKuai Inc. ( 京ICP备13042604号 )

GMT+8, 2024-5-12 23:22

Powered by Discuz! X3.3

© 2001-2024 Comsenz Inc.

快速回复 返回顶部 返回列表