The recent OpenVPN service abnormal quit many times, because the original in order to troubleshoot problems record a large number of debug log, resulting in problems when you want to locate the problem is very difficult, the instant log was brushed off, the process dropped, instantaneous start, instantaneous and dropped, resulting in a lot of orders lost! Because the day file records too much useless information, dare not to search the log to locate t
The recent OpenVPN service abnormal quit many times, because the original in order to troubleshoot problems record a large number of debug log, resulting in problems when you want to locate the problem is very difficult, the instant log was brushed off, the process dropped, instantaneous start, instantaneous and dropped, resulting in a lot of orders lost! Because the day file records too much useless information, dare not to search the log to locate t
VPN is a virtual private network, is provided to the enterprise or between the individual and the company security data transmission between the tunnel, OpenVPN is the Linux open source VPN leader, provides the good performance and the friendly user GUI, uses the OpenSSL library encryption and the authentication function. Supports UDP and TCP protocols and provides two kinds of virtual network interfaces: Tun/tap mode. The following is the installatio
At first, my vps was installed with Ubuntu 10.10. In this version, I had been tossing for several days and failed to succeed. Later, after I upgraded the system online, I installed and configured openvpn. Finally, yes. If a new system version is available, a prompt will be prompted when the user just logs in, such:
That is to say, you can directly enter "do-release-upgrade" in the shell to upgrade to the next version. I am a linux cainiao, so I will m
Before installation, use cat/dev/net/tun to check whether tun/tap [root @ lx_web_s1 ~] is enabled. # Cat/dev/net/tuncat:/dev/net/tun: Filedescriptorinbadstate indicates that tun/tap has been enabled. you can install openVPN and configure the VPN server. 1. install and prepare yum-yinsta.
Run cat/dev/net/tun to check whether tun/tap is enabled before installation.[Root @ lx_web_s1 ~] # Cat/dev/net/tunCat:/dev/net/tun: File descriptor in bad stateIt ind
,SERVER.CSR.
2.5 Create a client certificate: Build-key Client (the certificate file name for clients), get 3 files: CLIENT.CRT,CLIENT.KEY,CLIENT.CSR.
Note: Different client certificates are generated, noting that common fields are distinguished.
2.6 Create Dee-Herman Exchange Password: BUILD-DH, this is optional. The build time is about more than 10 minutes. Get 1 Files: Dh4096.pem (different version file names may be different)
2.7 Open Tls-auth, op
The difference between an OpenVPN internal route and a system route is that the system route completely follows the longest prefix matching principle. After finding the route, the data packet is forwarded from the corresponding Nic interface. Although the routes inside OpenVPN ultimately decide whether to forward and where to forward data packets, this "whether to forward" and "where to forward" is very dif
Details of the Linux neighbor subsystem: confirm-OpenVPN server mode MAC address learning, confirm-openvpnmacIn the article parsing the aging time principle of ARP cache implemented by Linux, I analyzed the conversion of the neighbor subsystem of IPv4 on the Linux protocol stack and again pasted the state machine Conversion Diagram, but this figure is more detailed, because it has an external input, that is, confirm:
Note that if the socket or routi
Configure openvpn in Ubuntu
First, make sure that the apt-Get of ubuntu can find the openvpn package.Sudo apt-Get update
Install openvpn packageSudo apt-Get install openvpn
Create an openvpn configuration file. The example can be found in the following path:/Usr/share/doc/
OpenVPN Increase the script for logging user log
Cat connect.sh
#!/bin/bash
time= ' Date +%f '
if [-f/etc/openvpn/log/openvpn_$time.log];then touch
/ Etc/openvpn/log/openvpn_$time.log
echo "' Date ' +%f%h:%m:%s ' User $common _name trust_ip $trusted _ip is login, REMOTE_IP is $ifconfig _pool_remote_ip, Mask is $route _netmask_1 ">>/etc/
Use openvpn + linux to quickly establish an enterprise VPN
Openvpn introduction http://openvpn.sourceforge.net/, not much said.
Openvpn can work in two modes:
One is the IP Route mode, which is mainly used for point-to-point
One is the Ethernet-based Tunnel Bridge mode, which is applicable to point-to-point and multi-point networks with multiple branches
The conf
Openvpn is actually used for transmission at the application layer. You can select UDP/TCP as the transmission protocol. UDP is more commonly used. The reason is described in this article.
Why openvpn network?
If I want to access the network resources of the Organization at home, VPN is a good choice, but in general, setting up a VPN requires a VPN Server, that is, at least one real IP address, this is not
Use OPENVPN to implement Intranet mutual access between two locations (1) master server configurationMaster Server Configuration
Functions to be implemented:
Shenzhen:Master VPN Server: dns.dog.comInternet ip-eth1: 192.168.68.71Intranet ip-eth0: 10.1.1.254Guangzhou:VPN Server: lvs1.dog.comInternet ip-eth1: 192.168.68.73Intranet ip-eth0: 10.1.2.1Clients outside China:192.168.68.79Shenzhen-Guangzhou tunnel uses virtual IP addresses 10.8.0.1 and 10.8.0.
First, the working principle of OpenVPN
VPN technology establishes a private tunnel on the public network through key exchange, encapsulation, authentication and encryption, which guarantees the integrity, privacy and effectiveness of the transmitted data. OpenVPN is a new open source project emerging in recent years, which realizes a sslvpn solution.
Traditional SSL VPN through the port proxy method, the
Install OpenVPN in CentOS 7
The command is very simple, but there seems to be no information on the Internet, only the information below RHEL6.
Directly paste the command:
12345
Cd ~ Wget http://swupdate.openvpn.org/as/openvpn-as-2.0.10-CentOS7.x86_64.rpmrpm-Uvh openvpn-as-2.0.10-CentOS7.x86_64.rpmovpn-init
You can modify the port information.
After i
After completing the OpenVpn Bridge Mode experiment under UbuntuServer10.04, this experiment on the routing mode involves two modes: the bridging mode and the routing mode, let's take a look at the differences between the two modes. The above content is available on the Internet. I just organized them into tables to make it easier to compare and understand. Experiment environment: (1) topology: (2) The two routers are simulated using the Dynamips simu
First, what is OpenVPN Static Key
According to the official document, the Static Key approach is a point-to-point (point-to-point) VPN.
Second, the advantages of OpenVPN Static Key
1. Easy installation2, easy to use, Windows, OS X, Linux can be used by the official client3, adopt the UDP way, the connection is more stable
Third, the OpenVPN Static Key's disad
Article title: use Openbsd and Openvpn to quickly establish an enterprise VPN. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
Use openbsd + openvpn to quickly establish an enterprise vpn
Openvpn can work in two modes:
One is
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.