數位天堂

各位版大
小弟要用 Tomato 架 openvpn server 來翻牆，
小弟已查了不少資料，但還是無法成功．無奈上來救援．
連線有建立起來，client 可以連進 server，但是WAN出不去．
先簡單介紹一下環境
我用的 Asus N16 刷 Tomato Firmware 1.28.0000 MIPSR2-108 K26 USB AIO，
但是是擺在 NAT 內，我已經在 Router 上把 443 轉送進來了．
主要是參考這一份連結
http://www.mobile01.com/topicdetail.php … 716236&p=1
因為可以有很多 client ，所以選擇 TLS，放棄 static key．
其實大部份都一樣．只是換個 port，換另一組網段．
我想主要的問題是在於 Tomato 沒有作 NAT DHCP server，
是不是要設定些什麼呢？這點麻煩各位賜教一下囉！
下圖是 N16 的設定，其中最後一張圖，與別人的圖差很多，



看起來不太像 server 正常啟動．
這一點看各位版大有沒有什麼想法，因為我找不到什麼資料是和這有關的．
另外一點，查很多 openvpn server 的資料都說要在 server 端，下這些參數
push "redirect-gateway"
push "route-gateway 192.168.0.7"
push "route 192.168.0.0 255.255.255.0"
push "dhcp-option DNS 192.168.0.3"
我觀念不清楚，此時的 gateway 是 openvpn server
還是 server side 的 gateway，
DNS 也是同樣的問題?
最後附上 Log 看看版大能不能看出什麼問題？

Dec 27 16:32:03 unknown user.info kernel: tun: Universal TUN/TAP device driver, 1.6
Dec 27 16:32:03 unknown user.info kernel: tun: (C) 1999-2004 Max Krasnyansky
Dec 27 16:32:03 unknown user.info kernel: device tun22 entered promiscuous mode
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: OpenVPN 2.3.0 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar  3 2013
Dec 27 16:32:03 unknown daemon.warn openvpn[2702]: NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Dec 27 16:32:03 unknown daemon.warn openvpn[2702]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: Diffie-Hellman initialized with 1024 bit key
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: TUN/TAP device tun22 opened
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: TUN/TAP TX queue length set to 100
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: /sbin/ifconfig tun22 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Dec 27 16:32:03 unknown daemon.notice openvpn[2702]: /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Dec 27 16:32:03 unknown daemon.notice openvpn[2710]: Listening for incoming TCP connection on [undef]
Dec 27 16:32:03 unknown daemon.notice openvpn[2710]: TCPv4_SERVER link local (bound): [undef]
Dec 27 16:32:03 unknown daemon.notice openvpn[2710]: TCPv4_SERVER link remote: [undef]
Dec 27 16:32:03 unknown daemon.notice openvpn[2710]: MULTI: multi_init called, r=256 v=256
Dec 27 16:32:03 unknown daemon.notice openvpn[2710]: IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Dec 27 16:32:03 unknown daemon.notice openvpn[2710]: MULTI: TCP INIT maxclients=1024 maxevents=1028
Dec 27 16:32:03 unknown daemon.notice openvpn[2710]: Initialization Sequence Completed
Dec 27 16:32:07 unknown daemon.notice openvpn[2710]: TITLE,OpenVPN 2.3.0 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar  3 2013
Dec 27 16:32:07 unknown daemon.notice openvpn[2710]: TIME,Sun Dec 27 16:32:07 2015,1451205127
Dec 27 16:32:07 unknown daemon.notice openvpn[2710]: HEADER,CLIENT_LIST,Common Name,Real Address,Virtual Address,Bytes Received,Bytes Sent,Connected Since,Connected Since (time_t),Username
Dec 27 16:32:07 unknown daemon.notice openvpn[2710]: HEADER,ROUTING_TABLE,Virtual Address,Common Name,Real Address,Last Ref,Last Ref (time_t)
Dec 27 16:32:07 unknown daemon.notice openvpn[2710]: GLOBAL_STATS,Max bcast/mcast queue length,0
Dec 27 16:32:07 unknown daemon.notice openvpn[2710]: END