• Зарегистрирован: 10.06.2013
  • Сообщений: 16
  • Репутация : [ 0 | 0 ]

общие сведения: имеется сервер Опенвпна, доступ к которому я не имею, на своем шлюзе поднял клиента, канал поднялся стабильный и исправно работал 3 месяца.

Теперь о проблеме: со вчерашнего дня стал отваливаться канал, т.е. периодически не пингуется сеть за сервером Опенвпн, при этом ifconfig говорит что tap1 поднять и ошибок нет, но в логи говорят что канал рестартит каждые 4 минуты
вот часть лога 

Fri Oct  4 11:27:29 2013 TLS: Initial packet from [AF_INET]X.X.X.X:1194, sid=57dfc046 bb20bb31
Fri Oct  4 11:27:29 2013 VERIFY OK: depth=1, /C=RU/ST=KLG/L=Kaluga/O=Biztrend/CN=Biztrend_CA/emailAddress=root@kaluga.biztren$
Fri Oct  4 11:27:29 2013 VERIFY OK: nsCertType=SERVER
Fri Oct  4 11:27:29 2013 VERIFY OK: depth=0, /C=RU/ST=KLG/L=Kaluga/O=Biztrend/CN=klg/emailAddress=root@kaluga.biztrend.ru
Fri Oct  4 11:27:30 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct  4 11:27:30 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct  4 11:27:30 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct  4 11:27:30 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct  4 11:27:30 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Oct  4 11:27:30 2013 [klg] Peer Connection Initiated with [AF_INET]95.31.215.19:1194
Fri Oct  4 11:27:32 2013 SENT CONTROL [klg]: 'PUSH_REQUEST' (status=1)
Fri Oct  4 11:27:32 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route-gateway 10.8.1.1,p$
Fri Oct  4 11:27:32 2013 OPTIONS IMPORT: timers and/or timeouts modified
Fri Oct  4 11:27:32 2013 OPTIONS IMPORT: --ifconfig/up options modified
Fri Oct  4 11:27:32 2013 OPTIONS IMPORT: route options modified
Fri Oct  4 11:27:32 2013 OPTIONS IMPORT: route-related options modified
Fri Oct  4 11:27:32 2013 Preserving previous TUN/TAP instance: tap1
Fri Oct  4 11:27:32 2013 Initialization Sequence Completed
Fri Oct  4 11:31:27 2013 [klg] Inactivity timeout (--ping-restart), restarting
Fri Oct  4 11:31:27 2013 TCP/UDP: Closing socket
Fri Oct  4 11:31:27 2013 SIGUSR1[soft,ping-restart] received, process restarting
Fri Oct  4 11:31:27 2013 Restart pause, 2 second(s)
Fri Oct  4 11:31:29 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executabl$
Fri Oct  4 11:31:29 2013 Re-using SSL/TLS context
Fri Oct  4 11:31:29 2013 LZO compression initialized
Fri Oct  4 11:31:29 2013 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Oct  4 11:31:29 2013 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Oct  4 11:31:29 2013 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Fri Oct  4 11:31:29 2013 Local Options hash (VER=V4): 'd79ca330'
Fri Oct  4 11:31:29 2013 Expected Remote Options hash (VER=V4): 'f7df56b8'
Fri Oct  4 11:31:29 2013 UDPv4 link local: [undef]
Fri Oct  4 11:31:29 2013 UDPv4 link remote: [AF_INET]95.31.215.19:1194
Fri Oct  4 11:31:29 2013 TLS: Initial packet from [AF_INET]X.X.X.X:1194, sid=3df8ad50 9f86a47b
Fri Oct  4 11:31:29 2013 VERIFY OK: depth=1, /C=RU/ST=KLG/L=Kaluga/O=Biztrend/CN=Biztrend_CA/emailAddress=root@kaluga.biztren$
Fri Oct  4 11:31:29 2013 VERIFY OK: nsCertType=SERVER
Fri Oct  4 11:31:29 2013 VERIFY OK: depth=0, /C=RU/ST=KLG/L=Kaluga/O=Biztrend/CN=klg/emailAddress=root@kaluga.biztrend.ru
Fri Oct  4 11:31:30 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct  4 11:31:30 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct  4 11:31:30 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct  4 11:31:30 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct  4 11:31:30 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Oct  4 11:31:30 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Oct  4 11:31:30 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Oct  4 11:31:30 2013 [klg] Peer Connection Initiated with [AF_INET]X.X.X.X:1194
Fri Oct  4 11:31:32 2013 SENT CONTROL [klg]: 'PUSH_REQUEST' (status=1)
Fri Oct  4 11:31:32 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route-gateway 10.8.1.1,p$
Fri Oct  4 11:31:32 2013 OPTIONS IMPORT: timers and/or timeouts modified
Fri Oct  4 11:31:32 2013 OPTIONS IMPORT: --ifconfig/up options modified
Fri Oct  4 11:31:32 2013 OPTIONS IMPORT: route options modified
Fri Oct  4 11:31:32 2013 OPTIONS IMPORT: route-related options modified
Fri Oct  4 11:31:32 2013 Preserving previous TUN/TAP instance: tap1
Fri Oct  4 11:31:32 2013 Initialization Sequence Completed

Куда копать и как править проблему, возможно ли что это разрывы со стороны сервера?