OpenVPN server verified by account and password
EnvironmentServer: CentOS 6.7 32-bitClient: Windows XP
Server Configuration# Disable SELinuxSed-I '/^ SELINUX \ B/s/=. */= disabled/'/etc/selinux/configSetenforce 0
# Install mysql-serverYum-y install mysql-server
# Start the mysqld serviceService mysqld start
# Initialize the mysql administrator passwordMysqladmin-uroot password RedHat
# Create a radius Datab
OpenVPN is another VPN software package different from PPTP and L2TP. It is based on ssl vpn. The use of OpenVPN requires client support. Here the system is CentOS6.4.I. Check the environment required by OpenVPNOpenVPN requires support from TUN devices and the nat module of iptables.1. Check the TUN module:Modinfo tunShown as follows: If an error is reported, the TUN device is not supported. 2. In OpenVZ VP
First step: Modify the server-side configuration file:
Auth-user-pass-verify/usr/local/openvpn/etc/checkpsw.sh via-env
Client-cert-not-required
Username-as-common-name
Script-security 3
Note: If you add client-cert-not-required, then the user name password is used to authenticate the login, and if not, the certificate and username password are required to double verify the login.
checkpsw.sh Download Address: http://openvpn.se/files/other/checkp
operations)
-------------------------
# [Pkcs11_section]
# Engine_id = pkcs11
# Dynamic_path =/usr/lib/engines/engine_pkcs11.so
# MODULE_PATH = $ EVN: PKCS11_MODULE_PATH
# PIN = $ EVN: PKCS !! _ PIN
# Init = 0
-------------------------
Cancel again:
#./Revoke-full client2
If error23 is returned for the last row, the account is successfully logged out, but the following configuration is required to completely log out:
# Vi/etc/
Rotten mud: ubuntu 14.04 OpenVPN server, 14.04 openvpn
This article is written by Xiuyi Lin FengProviding friendship sponsorship, first launched in the dark world
The company branch needs to connect to the company's internal server, but the server only allows access to the company's internal network.
To solve this problem, we plan to use VPN. PPTP is the most widely used solution for VPN in the past, but
scope global tap0
Inet6 fe80: c4b9: f9ff: fe45: 993a/64 scope link
Valid_lft forever preferred_lft forever
[Root @ slave2 ~] # Ip route
202.102.1.0/24 dev eth1 proto kernel scope link src 202.102.1.2
192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.3
192.168.1.0/24 via 10.8.0.1 dev tap0
10.8.0.0/24 dev tap0 proto kernel scope link src 10.8.0.2
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth1 scope link metric 1003
V. VPN technology expansion
1.
line on the last side:Code:/usr/local/sbin/openvpn--config/usr/local/etc/server.conf >/dev/null 2>1 Seven. OpenVPN test You can use VPN login, test MSN, QQ, IE and other network applications, you can also try to visit some of the GFW banned sites, of course, if your VPN server is not in the territory. Eight. The use of OpenVPN strong points of attention It is n
Mud: openvpn configuration file details, openvpn configuration file
This document consistsXiuyi Lin FengProviding friendship sponsorship, first launchedThe world
In the previous article "build OpenVPN server in ubuntu 14.04", we mainly explained how to build and use openvpn. In this article, we will detail the config
"devices", SSH keys and X509 certificates can also be provided. It can run in Linux and is completely open-source.
PrivacyIDEA has a friendly management interface. Whether it is administrator management system or user management, you can easily complete operations on the Web. PrivacyIDEA can read users in local files, users in databases, and users in LDAP. In this way, it is very convenient to interact with the company's account system.
PrivacyIDEA'
Use MYSQL to store OpenVPN authentication information OpenVPN
BitsCN.com
Use MYSQL to store OpenVPN verification information to install OPenVPN 1. install MYSQL [root @ localhost ~] # Tar mysql-5.1.57.tar.gz zxvf [root @ localhost ~] # Cd mysql-5.1.57 [root @ localhost mysql-5.1.57] #. /configure-prefix =/usr/local/mys
The first bottleneck of openvpn is that the Tun character device reads and writes frames at one link layer. The reason why the user-mode openvpn process must have the same link-MTU on both ends, it is because each time openvpn reads a complete Ethernet frame from the/dev/NET/TUN character device, there are not many, and the library interface: ssize_t read (int fd
. OpenVPN is configured as the client. OpenVPN does not have a specific configuration file, but is provided by the server provider. OpenVPN provides two authentication methods: user name/password-based authentication and SSL certificate authentication. The user name/password authentication method cannot (or is difficult) restrict an
OpenVPN-ng: The application-layer tunnel for Mobile Life, And openvpn-ng Application LayerVPN makes people think that it is always a good thing and a way to escape from supervision. In fact, VPN has become the only synonym for escaping from supervision. You see, no matter what technology, IPSec, or WEB Proxy, as long as it is the technology that encrypts the original information, it can all be called VPN, s
required by openvpn. After the installation is complete, it should appear
/Etc/openvpn/
Folder.Configure OpenVPN
As a client, OpenVPN does not have a specific configuration file, but a configuration file is provided by the server provider. OpenVPN provides two authenticatio
OpenVPN server configuration file description (transfer), openvpn configuration file
This article describes how to configure the configuration file on the OpenVPN server. In Windows, this configuration file is generally called server. ovpn. in Linux/BSD, this configuration file is generally called server. conf. Although the configuration file name is different, t
OpenVPN client configuration tutorial in Ubuntu generally, Linux servers that provide Web Services seldom need to connect to OpenVPN, but personal Linux computers often need to connect to OpenVPN. For example, if you use Linux as the development environment, you need to connect to the company's OpenVPN. This document u
-1.8.4-ubuntu10.i386.deb
Ubuntu Ten 64bit:http://swupdate.openvpn.org/as/openvpn-as-1.8.4-ubuntu10.amd_64.deb
Ubuntu 10 corresponds to the Debian 6 system; others open the above page to download.
"Software Installation Commands"
Debian and Ubuntu Software Installation commands: Dpkg-i Openvpn-as-1.8.4-ubuntu10.i386.deb
CentOS Software Installation command: RPM-IVH
that need to be done in the organization's network at home, but the Organization does not have a VPN or has a VPN, but I have no account, I can put an openvpn on the work machine of the Organization and then go home to access and use it again.
It sounds good, but how is it implemented? Here I want to explain some technical prerequisites: You should know how to configure
Based on the linux operating system architecture openvpn Summary-Linux Enterprise Application-Linux server application information, the following is a detailed description. Use OPENVPN to connect data centers 1
1 status quo 2
2 network structure 2
3. server information and network security 4
3.1 server information 4
3.2 Network Security 4
4 Use openvpn for
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.