OpenVPN (routing mode) experiment in ipvtuserver10.04

After completing the OpenVpn Bridge Mode experiment under UbuntuServer10.04, this experiment on the routing mode involves two modes: the bridging mode and the routing mode, let's take a look at the differences between the two modes. The above content is available on the Internet. I just organized them into tables to make it easier to compare and understand. Experiment environment: (1) topology: (2) The two routers are simulated using the Dynamips simulator. The VNET is VMwareWorkstation.

Preface:

After completing the OpenVpn Bridging Mode experiment under Ubuntu Server 10.04, OpenVpn is divided into two modes: the bridging mode and the routing mode, let's take a look at the differences between the two modes.

The above content is available on the Internet. I just organized them into tables to make it easier to compare and understand.

Lab environment:

(1) topology:

(2) The two routers are simulated using the Dynamips simulator. VNET is the two VMware Network adapters added to VMware Workstation 7.0.

(3) The Openvpn server is Ubuntu server 10.4 and openvpn software package. The client uses the openvpn Software Package for Ubuntu Desktop version 10.4 this time.

(4) The establishment of this environment, see the http://www.linuxidc.com/Linux/2012-11/74792.htm (Ubuntu Server 10.4 OpenVpn Bridge Mode experiment)

Openvpn Server Configuration:

(1) install openvpn:

# Sudo apt-get install openvpn

# Sudo mkdir/etc/openvpn/easy-rsa/

# Sudo cp-R/usr/share/doc/openvpn/examples/easy-rsa/2.0/*/etc/openvpn/easy-rsa/

(2) # modify sudo vim/etc/openvpn/easy-rsa/vars as follows:

Because the following settings are available in/etc/openvpn/easy-rsa/vars:

Therefore, you need to create the keys directory under/etc/openvpn/easy-rsa/as the certificate output directory.

# Sudo mkdir/etc/openvpn/easy-rsa/keys

(3) create a server certificate

# Cd/etc/openvpn/easy-rsa/

# Sudo chown-R root: admin.

# Sudo chmod g + w.

# Source./vars

#./Clean-all

#./Build-dh

#./Pkitool -- initca

#./Pkitool -- server (the last server is the Certificate Name of the server)

# Cd keys

# Openvpn -- genkey -- secret ta. key

# Sudo cp server. crt server. key ca. crt dh1024.pem ta. key/etc/openvpn