Добрый день, в какой то момент времени (каюсь - прозевал) АТС перестала подключаться через OpenVPN к соседней Астериск. При ручном запуске в консоли видно, что соединение устанавливается, а устройство (сетевая карта не создается).
~# openvpn /etc/openvpn.ovpn
2021-09-28 12:07:09 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2021-09-28 12:07:09 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
2021-09-28 12:07:09 OpenVPN 2.5.0 x86_64-t2-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Sep 16 2021
2021-09-28 12:07:09 library versions: OpenSSL 1.1.1i 8 Dec 2020, LZO 2.10
2021-09-28 12:07:09 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-09-28 12:07:09 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-09-28 12:07:09 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.0.219:1194
2021-09-28 12:07:09 Socket Buffers: R=[212992->212992] S=[212992->212992]
2021-09-28 12:07:09 UDP link local: (not bound)
2021-09-28 12:07:09 UDP link remote: [AF_INET]192.168.0.219:1194
2021-09-28 12:07:09 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
2021-09-28 12:07:09 TLS: Initial packet from [AF_INET]192.168.0.219:1194, sid=264b97c8 16bfecdc
2021-09-28 12:07:09 VERIFY OK: depth=1, C=RU, ST=52, L=NN, O=KS, OU=IT, CN=asterisk, name=asterisk, emailAddress=**********
2021-09-28 12:07:09 VERIFY KU OK
2021-09-28 12:07:09 Validating certificate extended key usage
2021-09-28 12:07:09 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-09-28 12:07:09 VERIFY EKU OK
2021-09-28 12:07:09 VERIFY OK: depth=0, C=RU, ST=52, L=NN, O=KS, OU=IT, CN=asterisk, name=asterisk, emailAddress=********
2021-09-28 12:07:09 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2021-09-28 12:07:09 [asterisk] Peer Connection Initiated with [AF_INET]192.168.0.219:1194
2021-09-28 12:07:10 SENT CONTROL [asterisk]: 'PUSH_REQUEST' (status=1)
2021-09-28 12:07:10 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
2021-09-28 12:07:10 OPTIONS IMPORT: timers and/or timeouts modified
2021-09-28 12:07:10 OPTIONS IMPORT: --ifconfig/up options modified
2021-09-28 12:07:10 OPTIONS IMPORT: route options modified
2021-09-28 12:07:10 Using peer cipher 'AES-128-CBC'
2021-09-28 12:07:10 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
2021-09-28 12:07:10 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-09-28 12:07:10 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
2021-09-28 12:07:10 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-09-28 12:07:10 net_route_v4_best_gw query: dst 0.0.0.0
2021-09-28 12:07:10 net_route_v4_best_gw result: via 192.168.250.1 dev eth0
2021-09-28 12:07:10 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
2021-09-28 12:07:10 Exiting due to fatal error
На ответной стороне (на стороне Астериск) в логах тоже видно, контакт есть (т.е. в сетевой части проблем нет).
OpenVPN CLIENT LIST
Updated,Tue Sep 28 12:12:17 2021
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
mikopbx,192.168.6.1:60405,4575,5135,Tue Sep 28 12:12:06 2021
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.6,mikopbx,192.168.6.1:60405,Tue Sep 28 12:12:15 2021
GLOBAL STATS
Max bcast/mcast queue length,0
END
Обновление до версии 2021.3.86 не помогло.