OpenVpn
鏈嶅姟绔拰瀹㈡埛绔厤缃枃浠惰瑙?/p>
#
鐢虫槑鏈満浣跨敤鐨?/p>
IP
鍦板潃锛屼篃鍙互涓嶈鏄?/p>
;local a.b.c.d
#
鐢虫槑浣跨敤鐨勭鍙ｏ紝榛樿
1194
port 1194
#
鐢虫槑浣跨敤鐨勫崗璁紝榛樿浣跨敤
UDP
锛屽鏋滀娇鐢?/p>
HTTP proxy
锛屽繀椤讳娇鐢?/p>
TCP
鍗忚
;proto tcp
proto udp
#
鐢虫槑浣跨敤鐨勮澶囧彲閫?/p>
tap
鍜?/p>
tun
锛?/p>
tap
鏄簩灞傝澶囷紝鏀寔閾捐矾灞傚崗璁�?/p>
#tun
鏄?/p>
ip
灞傜殑鐐瑰鐐瑰崗璁紝闄愬埗绋嶅井澶氫竴浜涳紝鏈汉涔犳儻浣跨敤
TAP
璁惧
dev tap
;dev tun
#OpenVPN
浣跨敤鐨?/p>
ROOT CA
锛屼娇鐢?/p>
build-ca
鐢熸垚鐨勶紝鐢ㄤ簬楠岃瘉瀹㈡埛鏄瘉涔︽槸鍚﹀悎娉?/p>
ca ca.crt
#Server
浣跨敤鐨勮瘉涔︽枃浠?/p>
cert server.crt
#Server
浣跨敤鐨勮瘉涔﹀搴旂殑
key
锛屾敞鎰忔枃浠剁殑鏉冮檺锛岄槻姝㈣鐩?/p>
key server.key # This file should be kept secret
#CRL
鏂囦欢鐨勭敵鏄庯紝琚悐閿�鐨勮瘉涔﹂摼锛岃繖浜涜瘉涔﹀皢鏃犳硶鐧诲綍
crl-verify vpncrl.pem
#
涓婇潰鎻愬埌鐨勭敓鎴愮殑
Diffie-Hellman
鏂囦欢
dh dh1024.pem
#
杩欐槸涓�鏉″懡浠ょ殑鍚堥泦锛屽鏋滀綘鏄?/p>
OpenVPN
鐨勮�佺敤鎴凤紝灏辩煡閬撹繖鏉″懡浠ょ殑鏉ョ敱
#
杩欐潯鍛戒护绛夋晥浜庯細
# mode server #OpenVPN
宸ヤ綔鍦?/p>
Server
妯″紡锛屽彲浠ユ敮鎸佸
client
鍚屾椂鍔ㄦ�佹帴鍏?/p>
# tls-server #
浣跨敤
TLS
鍔犲瘑浼犺緭锛屾湰绔负
Server
锛?/p>
Client
绔负
tls-client
#
# if dev tun: #
濡傛灉浣跨敤
tun
璁惧锛岀瓑鏁堜簬浠ヤ笅閰嶇疆
# ifconfig 10.8.0.1 10.8.0.2 #
璁剧疆鏈湴
tun
璁惧鐨勫湴鍧�
# ifconfig-pool 10.8.0.4 10.8.0.251 #
璇存槑
OpenVPN
浣跨敤鐨勫湴鍧�姹狅紙鐢ㄤ簬鍒嗛厤缁欏鎴凤級锛屽垎鍒槸璧峰鍦板潃銆佺粨鏉熷湴
鍧�
# route 10.8.0.0 255.255.255.0 #
澧炲姞涓�鏉￠潤鎬佽矾鐢憋紝鐪佺暐涓嬩竴璺冲湴鍧�锛屼笅涓�璺充负瀵圭鍦板潃锛岃繖閲屾槸
: 10.8.0.2
# if client-to-client: #
濡傛灉浣跨敤
client-to-client
杩欎釜閫夐」
# push 鈥渞oute 10.8.0.0 255.255.255.0鈥?nbsp;#
鎶婅繖鏉¤矾鐢卞彂閫佺粰瀹㈡埛绔紝瀹㈡埛杩炴帴鎴愬姛鍚庤嚜鍔ㄥ姞鍏ヨ矾鐢辫〃锛岀渷鐣ヤ簡涓嬩竴
璺冲湴鍧�
: 10.8.0.1
# else
#
push
鈥渞oute
10.8.0.1鈥?nbsp;
#
鍚﹀垯鍙戦�佹湰鏉¤矾鐢憋紝杩欐槸涓�涓富鏈鸿矾鐢憋紝鐪佺暐浜嗗瓙缃戞帺鐮佸拰涓嬩竴璺冲湴鍧�锛屽垎鍒负
:
255.255.255.255 10.8.0.1
#
# if dev tap: #
濡傛灉浣跨敤
tap
璁惧锛屽垯绛夋晥浜庝互涓嬪懡浠?/p>
# ifconfig 10.8.0.1 255.255.255.0 #
閰嶇疆
tap
璁惧鐨勫湴鍧�
# ifconfig-pool 10.8.0.2 10.8.0.254 255.255.255.0 #
瀹㈡埛绔娇鐢ㄧ殑鍦板潃姹狅紝鍒嗗埆鏄捣濮嬪湴鍧�銆佺粨鏉熷湴鍧�銆佸瓙缃戞帺鐮?/p>
# push 鈥渞oute
-gatew
ay 10.8.0.1鈥?nbsp;#
鎶婄幆澧冨彉閲?/p>
route-gateway
浼犻�掔粰瀹㈡埛鏈?/p>
#
server 10.8.0.0 255.255.255.0 #
绛夋晥浜庝互涓婂懡浠?/p>
#
鐢ㄤ簬璁板綍鏌愪釜
Client
鑾峰緱鐨?/p>
IP
鍦板潃锛岀被浼间簬
dhcpd.lease
鏂囦欢锛?/p>
#
闃叉
openvpn
閲嶆柊鍚姩鍚?/p>
鈥?/p>
蹇樿
鈥滳lient
鏇剧粡浣跨敤杩囩殑
IP
鍦板潃
ifconfig-pool-persist ipp.txt
#Bridge
鐘舵�佷笅绫讳技
DHCPD
鐨勯厤缃紝涓哄鎴峰垎閰嶅湴鍧�锛岀敱浜庤繖閲屽伐浣滃湪璺敱妯″紡锛屾墍浠ヤ笉浣跨敤