certificates provide the most comprehensive functions, but require extra effort to maintain a PKI certificate system. OpenVPN2.0 introduces a user name/password combination authentication method, which can omit the client certificate, but there is still a server certificate to be used for encryption.
All communication in OpenVPN is based on a single IP port. UDP protocol communication is recommended by def
private key, third-party certificate and user name/password combination. Pre-access keys are the easiest, but they can only be used to establish point-to-point VPNs. PKI-based third-party certificates provide the most comprehensive functions, but require extra effort to maintain a PKI certificate system. Openvpn2.0 introduces a user name/password combination authentication method, which can omit the client certificate, but there is still a server certificate to be used for encryption.
All commu
Build openvpn server in Centos6.5
Because the new version of openvpn does not contain the most important certificate preparation part: easy-rsa, You need to download easyrsa in advance and download it on GitHub. The configuration process will be shown in the following step, this deployment uses the easy-rsa3, And the easy-rsa2.0 operation is completely different, other online on the easy-rsa2.0 of the tutor
.
Installation in Windows
Download the installation package installation from the http://www.openvpn.se (http://www.openvpn.se/), where the installation package comes with a Client GUI tool for ease of use.
Configure OpenVPN
Configure OpenVPN Server
Only the configurations in Linux are described. Windows is similar. Create/etc/vpn/server. conf with the following content:
Port 1494
Proto
Openvpn construction in CentOS, centosopenvpn
OpenVPN is a VPN software based on tunnel encryption. The following describes how to install OpenVPN in CentOS 6.5:
Setenforce 0yum install-y openssl-devel lzorpm-ivh http://mirrors.sohu.com/fedora-epel/6/x86_64/epel-release-6-8.noarch.rpmcd/etc/yum. repos. d/cp epel. repo epel. repo. baksed-I's/^ secure list = https
install to other directories.
3, after installation, click on "Start Menu"--"All Programs"--"OpenVPN"-"shortcuts"-"OpenVPN configuration file directory", open the OpenVPN line configuration file storage folder, Place the OpenVPN line configuration file provided by the VPN provider in the directory, as shown below.
58. x on the Internet.
Therefore, you need to enable the Internet address ing from the company's firewall to the Intranet openvpn server.
The source nat is used, and the port is set to 1194. The protocol must be TCP (or UDP depends on the server settings)
After the ing, the firewall policy is blocked by default. You need to enable the policy to allow the Internet address to access the Intranet server netwo
Build an OpenVPN service environment using CentOS
I will not say much about the purpose of the OpenVPN environment, because friends who see this information should understand and need to use this tutorial. This tutorial has been prepared by @ qingliu for several hours. After multiple reinstallation drills, you can install and use it. The VPS environment is based on CENTOS6, if you want to install it, take a
problems
1.2.OpenVPN deployment problems
2. Full star topology advantages
It is like a company's internal LAN, and everyone is connected to a switch with enough ports. This Is a bma network. If you want to access it, simply ARP it.
3. Available Implementation Details of OpenVPN
It must be the TLS and Realiable layers implemented by memory BIO.
4. Implement OpenVPN
Installation and configuration of a OpenVPN client
1. To the OpenVPN official website http://openvpn.net Download the OpenVPN GUI, the client version should be consistent with the server version.
2. Install OpenVPN GUI, the default installation path under C:\Program Files\openvpn
Challenges of device mobility
1. the IP address of the device is often changed due to cell or mode switch.
This kind of address update is a normal behavior of mobile networks and should not be regarded as a fault or accident. Therefore, applications should be transparent and applications should not be disturbed by such incidents, so they are not responsible for handling the aftermath.
2. When a mobile device has multiple 3G/4G/2.75G NICs, you want these NICs to send and receive data at the same
OpenVPN is a software package used to create a VPC encrypted channel. It implements a two-or three-tier tunnel-based VPN. It was first written by James Yonan. OpenVPN allows the created VPN to use a public key, digital certificate, or user name/password for authentication. It uses a large number of SSLv3/TLSv1 protocol libraries in the OpenSSL encryption library.
Currently,
Installing openvpn in Ubuntu is simple. apt-getinstallopenvpn is followed by buildkey and server and client configuration. For details about how to maintain the dns on the openvpn server, refer to/etc/resolv. after openvpn is installed in conf, save it ~ /Iptables-init.sh, and then run to iptables-tnat-APOSTROUTING-s1
Installing
Download and install openvpn:Use flashget or any other method to download the openvpn installation package and install it. Remember to select the easy-RSA script,The bat script used to manage the CA.Http://openvpn.se/files/install_packages/openvpn-2.0.5-gui-1.0.3-install.exeAfter installation, easy-RSA is in the c: \ Program Files \ openvpn \ directory.Start conf
, we have another server that is said to be powerful. It is dual-IP, one Telecom ip, and one Netcom ip;
Now, due to ip conflicts, the server is connected. The ip address assigned by the Intranet is 10.9.0.1, and my local machine is connected. The allocated Intranet address is 10.9.0.6; however, I can use cmd ipconfig on the local machine to access the IP address 10.9.0.6, but the IP address 10.9.0.1 cannot be obtained from ipconfig on the server.
In addition, the machine and the server cannot
OpenVPN client configuration tutorial in Ubuntu generally, Linux servers that provide Web services seldom need to connect to OpenVPN, but personal Linux computers often need to connect to OpenVPN. For example, if you use Linux as the development environment, you need to connect to the company's OpenVPN. In this article
Environment company Intranet One CentOS 6.6 Server A, the network card eth0 intranet ip:192.168.8.60, the company public network IP is 116.228 12.88, uses the router's DMZ function to map the public net to the intranet server A (namely Intranet ip:192.168.8.60).
1, install OpenVPN on the server. Because there are no OpenVPN packages in the default CentOS software source, you can yum install
,SERVER.CSR.
2.5 Create a client certificate: Build-key Client (the certificate file name for clients), get 3 files: CLIENT.CRT,CLIENT.KEY,CLIENT.CSR.
Note: Different client certificates are generated, noting that common fields are distinguished.
2.6 Create Dee-Herman Exchange Password: BUILD-DH, this is optional. The build time is about more than 10 minutes. Get 1 Files: Dh4096.pem (different version file names may be different)
2.7 Open Tls-auth, optional, non-essential
Open one by one Genkey
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.