ovpn

Two days ago, hivefans built an openvpn server on a server in the cluster because of the inconvenience caused by the cluster's network segment. If you have encountered some problems, record them. He only built an openvpn and did not install ovpn on other servers in the cluster. He wanted to route the Intranet network segment of the cluster through ovpn, the company can access the Intranet address of the cl

OS and Linux OS. Download the Client certificate and the CA certificate first. The Client certificate mainly uses two files ending with crt and key, while the CA certificate mainly uses files ending with crt. As follows: Copy these files to the/home/ilanni/directory, and then copy the configuration file template of the openvpn client to the/home/ilanni/directory. As follows: Cp ilanni. crt ilanni. key ca. crt/home/ilanni/ Cp/usr/share/doc/openvpn/examples/sample-config-files/client. conf/

installed after a moment. After the installation is complete, the/etc/openvpn/folder appears. OpenVPN is configured as the client. OpenVPN does not have a specific configuration file, but is provided by the server provider. OpenVPN provides two authentication methods: user name/password-based authentication and SSL certificate authentication. The user name/password authentication method cannot (or is difficult) restrict an account to connect to multiple clients at the same time. using a certifi

authentication. The user name/password authentication method cannot (or is difficult) restrict an account to connect to multiple clients at the same time. Using a certificate, you can ensure that only one client can be connected to the same certificate at the same time. Of course, these are determined by the server and do not need to be selected by the client. Decompress the configuration file sent to you by the OpenVPN server provider and copy all the files to/etc/openvpn. These files contain

@www ~]# apt-get install openvpn Wait a moment to automatically install the software package required by openvpn. After the installation is complete, it should appear /Etc/openvpn/ Folder.Configure OpenVPN As a client, OpenVPN does not have a specific configuration file, but a configuration file is provided by the server provider. OpenVPN provides two authentication methods: User Name/password-based authentication and SSL certificate authentication. The user name/password authentication me

Security Group. 10. Configure the OpenVPN ClientCopy the certificate generated by the server to one place. For example, for rainbow users:# Mkdir-p/home/rainbow/tmp/openvpn_heylinux# Cd/home/rainbow/tmp/openvpn_heylinux# Cp-rpa/etc/openvpn/easy-rsa/2.0/keys/ta. key.# Cp-rpa/etc/openvpn/easy-rsa/2.0/keys/ca. crt.# Cp-rpa/etc/openvpn/easy-rsa/2.0/keys/rainbow. crt.# Cp-rpa/etc/openvpn/easy-rsa/2.0/keys/rainbow. key. Configure the ovpn configuration fil

. conf: net. ipv4.ip _ forward = 1 5. Enable sysctl. the conf configuration file takes effect and adds iptables forwarding rules: # sysctl-p # iptables-t nat-a postrouting-o eth0-s 10.8.0.0/24-j MASQUERADE #/etc/init. d/iptables save 6. Start openvpn and add random startup vi/etc/rc. add this line at the end:/usr/local/sbin/openvpn -- config/etc/openvpn/2.0/conf/server. conf 7. OpenVPN GUI For Windows Client installation process 1. download openvpn-2.1_rc15-install.exe (this version integrates

the ca under the OpenVPN GUI installation path OpenVPNconfig folder. crchloroform. keyclient1.crtclient1. csrclient1.key 4. modify client. ovpn install OpenVPN GUI in the path OpenVPNsample-config. copy the ovpn file to your OpenVPN GUI installation path OpenVPNconfig folder and open the client in Notepad. ovpn # locate remote my-server-1 1194 and change my-serv

Download OpenVPNAccessServer: openvpn.netindex.phpaccess-serverdownload-openvpn-as.html wgetswupdate. openvpn. orgasopenvpn-as-1.8.3-CentOS5.i386.rpm installation: rpm-ivhopenvpn-as-1.8.3-CentOS5.i386.rpm run Download the appropriate version of OpenVPN Access Server: http://openvpn.net/index.php/access-server/download-openvpn-as.html wget http://swupdate.openvpn.org/as/openvpn-as-1.8.3-CentOS5.i386.rpm installation: rpm-ivh openvpn-as-1.8.3-CentOS5.i386.rpm run Download the OpenVPN Access S

: ia5string: 'elm @ elm.freetcp.com'Certificate is to be certified until Feb 9 10:05:53 2016 GMT (3650 days)Sign the certificate? [Y/n]: Y1 out of 1 certificate requests certified, commit? [Y/n] yWrite out database with 1 new entriesData Base updatedC: \ Program Files \ openvpn \ easy-RSA>The TA. Key file is generated belowFormat: openvpn -- genkey -- secret keys/Ta. KeyOutput: Keys/Ta. Key========================================================== ======================================C: \ Progr

-- output connection statistics to log files SIGTERM, SIGINT -- exit. 5.3 Configuration in windows: Openvpn for windows: Http://nchc.dl.sourceforge.net/s... using _rc17-install.exe The installation method is very simple, and it is similar to other software in windows. Install it in c: \ program file \ openvpn. Create the configuration file win. ovpn in config Code: Client Dev tun Proto udp Remote VPNSERVER1 1194 Resolv-retry infinite No

start upon startupService openvpn startChkconfig openvpn onClient ConfigurationCreate a client file (named client. ovpn) with the following content (you must modify the following public IP address of the server ): ClientDev tunProto udpRemote Server public IP 1194Resolv-retry infiniteNobindPersist-keyPersist-tunNs-cert-type serverComp-lzoVerb 3Auth-user-passTls-auth [inline] 1Copy and paste all the content of/usr/share/easy-rsa/2.0/keys/ca. crt in th

client1.key to win7, 5. win7 Configuration Copy ca. crt client1.crt client1.key to the config directory under the openvpn installation directory. And create the client. ovpn (not available by default) file. Edit client. ovpn with the following content: Client Dev tun Proto udp Remotely 192.168.10.191 1194 Resolv-retry infinite Nobind User nobody Group nodody Persist-key Persis-tun Ca. crt Cert client1.crt

192.168.1.0 255.255.255.0" #192.168.1.0/24 is the intranet segment of my VPN server, modify keepalive 10 120tls-auth keys/ta according to your actual situation. key 0 # This file is secretcomp-lzopersist-keypersist-tunstatus openvpn-status.logverb 3 # enable the route forwarding function sed-I '/net. ipv4.ip _ forward/s/0/1/'/etc/sysctl. confecho 1>/proc/sys/net/ipv4/ip_forward # configure iptables-Fiptables-Xiptables-p input ACCEPTiptables-p output ACCEPTiptables-p forward ACCEPTiptables-t nat

=0x0033,0x0039,0x009E,0xcc15 From now on, use this shortcut to open your browser. (3) Linux (Ubuntu 14.04 LTS) Start chrome from the command line to delete unwanted cipher suites: google-chrome--cipher-suite-blacklist=0x0033,0x0039,0x009E,0xcc15 SSH The detailed guide for handling SSH configuration is here. VPN Most VPN software supports the ". ovpn" file extension of OpenVPN. Many VPN vendors also provide ". ovpn