{"id":27702,"date":"2025-04-19T20:56:19","date_gmt":"2025-04-19T12:56:19","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/27702.html"},"modified":"2025-04-19T20:56:19","modified_gmt":"2025-04-19T12:56:19","slug":"openvpn2-0-9%e6%90%ad%e5%bb%ba%e5%92%8cwindows%e5%ae%a2%e6%88%b7%e7%ab%af%e6%8b%a8%e5%8f%b7%e8%bf%9e%e6%8e%a5vpn%e5%b9%b6%e7%94%a8xshell%e8%bf%9e%e6%8e%a5%e6%9c%ba%e6%88%bf%e5%8f%aa%e6%9c%89%e5%86%85","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/27702.html","title":{"rendered":"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668"},"content":{"rendered":"

openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668<\/p>\n

\u5982\u679c\u5bf9\u8fd0\u7ef4\u8bfe\u7a0b\u611f\u5174\u8da3，\u53ef\u4ee5\u5728b\u7ad9\u4e0a\u3001csdn\u6216\u5fae\u4fe1\u89c6\u9891\u53f7 \u4e0a\u641c\u7d22\u6211\u7684\u8d26\u53f7： \u8fd0\u7ef4\u5b9e\u6218\u8bfe\u7a0b，\u53ef\u4ee5\u5173\u6ce8\u6211，\u5b66\u4e60\u66f4\u591a\u514d\u8d39\u7684\u8fd0\u7ef4\u5b9e\u6218\u6280\u672f\u89c6\u9891<\/p>\n

1.openvpnserver\u670d\u52a1\u5668\u7684\u5b89\u88c5\u3001\u914d\u7f6e\u548c\u670d\u52a1\u542f\u52a8：<\/span><\/p>\n

vpnserver\u670d\u52a1\u5668：（\u53cc\u7f51\u5361eth0（\u5916\u7f51）\u548ceth1（\u5185\u7f51））<\/p>\n

[root@localhost ~]# ifconfig eth0 |head -3\u00a0\u00a0\u00a0\u5916\u7f51（nat\u6a21\u5f0f）<\/p>\n

eth0 \u00a0\u00a0\u00a0\u00a0\u00a0Link encap:Ethernet \u00a0HWaddr 00:0C:29:E1:54:C6 \u00a0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet addr:192.168.43.128<\/span>\u00a0\u00a0Bcast:192.168.43.255 \u00a0Mask:255.255.255.0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet6 addr: fe80::20c:29ff:fee1:54c6\/64 Scope:Link<\/p>\n

[root@localhost ~]# ifconfig eth1 |head -3\u00a0\u00a0\u00a0\u5185\u7f51(vmnet2)<\/p>\n

eth1 \u00a0\u00a0\u00a0\u00a0\u00a0Link encap:Ethernet \u00a0HWaddr 00:0C:29:E1:54:D0 \u00a0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet addr:172.16.1.28<\/span>\u00a0\u00a0Bcast:172.16.1.255 \u00a0Mask:255.255.255.0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet6 addr: fe80::20c:29ff:fee1:54d0\/64 Scope:Link<\/p>\n

[root@localhost ~]# route -n<\/p>\n

Kernel IP routing table<\/p>\n

Destination \u00a0\u00a0\u00a0\u00a0Gateway \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Genmask \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Flags Metric Ref \u00a0\u00a0\u00a0Use Iface<\/p>\n

172.16.1.0 \u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0255.255.255.0 \u00a0\u00a0U \u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 eth1<\/p>\n

192.168.43.0 \u00a0\u00a0\u00a00.0.0.0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0255.255.255.0 \u00a0\u00a0U \u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 eth0<\/p>\n

169.254.0.0 \u00a0\u00a0\u00a0\u00a00.0.0.0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0255.255.0.0 \u00a0\u00a0\u00a0\u00a0U \u00a0\u00a0\u00a0\u00a01002 \u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 eth0<\/p>\n

169.254.0.0 \u00a0\u00a0\u00a0\u00a00.0.0.0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0255.255.0.0 \u00a0\u00a0\u00a0\u00a0U \u00a0\u00a0\u00a0\u00a01003 \u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 eth1<\/p>\n

0.0.0.0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0192.168.43.2 \u00a0\u00a0\u00a00.0.0.0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0UG \u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 eth0<\/p>\n

\u6b63\u5e38eth0\u5916\u7f51\u5361：\u8981\u914d\u7f6e\u7f51\u5173，dns\u7b49\u3002<\/p>\n

\u5185\u7f51\u5361eth1:\u4e0d\u914d\u7f51\u5173\u3002 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u53cc\u7f51\u5361\u65f6\u5019，\u7f51\u5173\u53ea\u914d\u7f6e\u4e00\u4e2a\u5373\u53ef\u3002<\/p>\n

[root@localhost ~]# ping 172.16.1.17<\/p>\n

PING 172.16.1.17 (172.16.1.17) 56(84) bytes of data.<\/p>\n

64 bytes from 172.16.1.17: icmp_seq=1 ttl=64 time=1.90 ms<\/p>\n

[root@localhost ~]# cat \/etc\/redhat-release<\/p>\n

CentOS release 6.5 (Final)<\/p>\n

1)\u914d\u7f6evpn\u670d\u52a1\u5668\u65f6\u95f4\u540c\u6b65，\u5982\u679c\u4e0d\u914d，vpn\u53ef\u80fd\u4e0d\u6210\u529f\u3002<\/span><\/p>\n

[root@localhost ~]# \/usr\/sbin\/ntpdate pool.ntp.org<\/p>\n

\u00a02 Jun 14:00:50 ntpdate[1729]: step time server 85.199.214.100 offset 1404709.077974 sec<\/p>\n

[root@localhost ~]# echo '*\/5 * * * * \/usr\/sbin\/ntpdate pool.ntp.org >\/dev\/null 2>&1' >> \/var\/spool\/cron\/root<\/p>\n

[root@localhost ~]# crontab -l<\/p>\n

*\/5 * * * * \/usr\/sbin\/ntpdate pool.ntp.org >\/dev\/null 2>&1<\/p>\n

[root@localhost ~]# mkdir \/data\/application\/openvpn -p<\/p>\n

[root@localhost ~]# cd \/data\/application\/openvpn\/<\/p>\n

[root@localhost openvpn]# rz<\/p>\n

\u4e0a\u4f20\u538b\u7f29\u6a21\u5757\u548copenvpn\u8f6f\u4ef6<\/p>\n

[root@localhost openvpn]# ls<\/p>\n

lzo-2.03.tar.gz \u00a0openvpn-2.0.9.tar.gz<\/p>\n

2)\u5b89\u88c5openvpn\u4e4b\u524d，\u5148\u5b89\u88c5lzo\u538b\u7f29\u6a21\u5757：<\/span><\/p>\n

[root@localhost openvpn]# yum -y install gcc gcc-c++<\/p>\n

[root@localhost openvpn]# tar -zxf lzo-2.03.tar.gz<\/p>\n

[root@localhost openvpn]# ls<\/p>\n

lzo-2.03 \u00a0lzo-2.03.tar.gz \u00a0openvpn-2.0.9.tar.gz<\/p>\n

[root@localhost openvpn]# cd lzo-2.03<\/p>\n

[root@localhost lzo-2.03]# ls<\/p>\n

aclocal.m4 \u00a0AUTHORS \u00a0\u00a0B \u00a0\u00a0\u00a0\u00a0ChangeLog \u00a0\u00a0configure \u00a0\u00a0\u00a0\u00a0COPYING \u00a0examples \u00a0INSTALL \u00a0Makefile.am \u00a0minilzo \u00a0README \u00a0tests \u00a0\u00a0util<\/p>\n

asm \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0autoconf \u00a0BUGS \u00a0config.hin \u00a0configure.ac \u00a0doc \u00a0\u00a0\u00a0\u00a0\u00a0include \u00a0\u00a0lzotest \u00a0Makefile.in \u00a0NEWS \u00a0\u00a0\u00a0\u00a0src \u00a0\u00a0\u00a0\u00a0THANKS<\/p>\n

[root@localhost lzo-2.03]# .\/configure<\/p>\n

[root@localhost lzo-2.03]# make<\/p>\n

[root@localhost lzo-2.03]# make install<\/p>\n

[root@localhost lzo-2.03]# cd ..<\/p>\n

[root@localhost openvpn]# ls<\/p>\n

lzo-2.03 \u00a0lzo-2.03.tar.gz \u00a0openvpn-2.0.9.tar.gz<\/p>\n

3)\u5b89\u88c5openvpn\u4f9d\u8d56\u5305openssl* <\/span>pam-devel<\/span><\/p>\n

[root@localhost openvpn]# yum -y install openssl*\u00a0\u00a0\u5426\u5219\u62a5\u9519：configure: error: OpenSSL Crypto headers not found<\/p>\n

[root@localhost openvpn]# rpm -qa openssl*<\/p>\n

openssl-static-1.0.1e-57.el6.x86_64<\/p>\n

openssl098e-0.9.8e-20.el6.centos.1.x86_64<\/p>\n

openssl-1.0.1e-57.el6.x86_64<\/p>\n

openssl-devel-1.0.1e-57.el6.x86_64<\/p>\n

openssl-perl-1.0.1e-57.el6.x86_64<\/p>\n

[root@localhost openvpn]# yum -y install pam-devel\u00a0\u00a0\u00a0\u00a0\u5426\u5219\u62a5\u9519：configure: error: libpam required but missing<\/p>\n

4)\u5b89\u88c5openvpn：<\/span><\/p>\n

[root@localhost openvpn]# ls<\/p>\n

lzo-2.03 \u00a0lzo-2.03.tar.gz \u00a0openvpn-2.0.9.tar.gz<\/p>\n

[root@localhost openvpn]# tar -zxf openvpn-2.0.9.tar.gz<\/p>\n

[root@localhost openvpn]# ls<\/p>\n

lzo-2.03 \u00a0lzo-2.03.tar.gz \u00a0openvpn-2.0.9 \u00a0openvpn-2.0.9.tar.gz<\/p>\n

[root@localhost openvpn]# cd openvpn-2.0.9<\/p>\n

[root@localhost openvpn-2.0.9]# ls<\/p>\n

acinclude.m4 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0COPYRIGHT.GPL \u00a0\u00a0\u00a0\u00a0fragment.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Makefile.in \u00a0\u00a0\u00a0\u00a0\u00a0mtu.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0otime.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0socks.h<\/p>\n

aclocal.m4 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0cryptoapi.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0gentoo \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0makefile.w32 \u00a0\u00a0\u00a0\u00a0mudp.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0packet_id.c \u00a0\u00a0\u00a0reliable.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ssl.c<\/p>\n

AUTHORS \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0cryptoapi.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0gremlin.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0makefile.w32-vc \u00a0mudp.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0packet_id.h \u00a0\u00a0\u00a0reliable.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ssl.h<\/p>\n

base64.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0crypto.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0gremlin.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0manage.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0multi.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0perf.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0route.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0status.c<\/p>\n

base64.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0crypto.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0helper.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0manage.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0multi.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0perf.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0route.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0status.h<\/p>\n

basic.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0debug \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0helper.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0management \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0NEWS \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ping.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0sample-config-files \u00a0suse<\/p>\n

buffer.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0depcomp \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0init.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mbuf.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ntlm.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ping.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0sample-keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0syshead.h<\/p>\n

buffer.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0doclean \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0init.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mbuf.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ntlm.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0ping-inline.h \u00a0sample-scripts \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0tap-win32<\/p>\n

ChangeLog \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0easy-rsa<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0INSTALL \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0memcmp.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0occ.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0plugin \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0schedule.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0t_cltsrv.sh<\/p>\n

circ_list.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0errlevel.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0install-sh \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0memdbg.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0occ.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0plugin.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0schedule.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0thread.c<\/p>\n

common.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0error.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0install-win32 \u00a0\u00a0\u00a0\u00a0\u00a0misc.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0occ-inline.h \u00a0\u00a0\u00a0\u00a0\u00a0plugin.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0service-win32 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0thread.h<\/p>\n

config.guess \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0error.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0INSTALL-win32.txt \u00a0misc.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openvpn.8 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pool.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0session_id.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0t_lpback.sh<\/p>\n

config.h.in \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0event.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0integer.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0missing \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openvpn.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pool.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0session_id.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0tun.c<\/p>\n

config.sub \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0event.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0interval.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mroute.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openvpn.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0PORTS \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0shaper.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0tun.h<\/p>\n

configure \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0fdmisc.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0interval.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mroute.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openvpn-plugin.h \u00a0proto.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0shaper.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0win32.c<\/p>\n

configure.ac \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0fdmisc.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mss.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openvpn.spec \u00a0\u00a0\u00a0\u00a0\u00a0proto.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0sig.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0win32.h<\/p>\n

config-win32.h \u00a0\u00a0\u00a0\u00a0forward.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0list.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mss.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openvpn.spec.in \u00a0\u00a0proxy.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0sig.h<\/p>\n

config-win32.h.in \u00a0forward.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0lzo.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mtcp.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0options.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0proxy.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0socket.c<\/p>\n

contrib \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0forward-inline.h \u00a0lzo.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mtcp.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0options.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0push.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0socket.h<\/p>\n

COPYING \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0fragment.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Makefile.am \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0mtu.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0otime.c \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0push.h \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0socks.c<\/p>\n

[root@localhost openvpn-2.0.9]# .\/configure –with-lzo-headers=\/usr\/local\/include\/ –with-lzo-lib=\/usr\/local\/lib<\/p>\n

#\u6ce8\u610f：\u914d\u7f6e\u65f6\u5019\u9700\u52a0\u4e0a\u538b\u7f29\u5305\u7684\u8def\u5f84：lzo\u538b\u7f29\u5305，\u9ed8\u8ba4\u7f16\u8bd1\u65f6\u5019\u5c31\u5230\u4e86\/usr\/local\u4e0b\u9762\u4e86\u3002<\/p>\n

[root@localhost openvpn-2.0.9]# make<\/p>\n

[root@localhost openvpn-2.0.9]# make install<\/p>\n

[root@localhost openvpn-2.0.9]# cd<\/p>\n

[root@localhost ~]# which openvpn<\/p>\n

\/usr\/local\/sbin\/openvpn<\/p>\n

[root@localhost ~]# ls \/usr\/local\/sbin\/openvpn<\/p>\n

\/usr\/local\/sbin\/openvpn\u00a0\u00a0\u00a0\u00a0#\u6267\u884c\u7684\u811a\u672c\u547d\u4ee4<\/p>\n

5)openvpn server\u670d\u52a1\u4e0a\u5efa\u7acbCA\u8bc1\u4e66：<\/span><\/p>\n

\u8fdb\u5165\u8f6f\u4ef6\u5b89\u88c5\u76ee\u5f55\u4e0b\u9762\u7684：\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/<\/p>\n

[root@localhost ~]# cd \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/<\/span><\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0revoke-full \u00a0whichopensslcnf<\/p>\n

[root@localhost 2.0]# cp vars vars.bak<\/p>\n

[root@localhost 2.0]# vim vars<\/span><\/p>\n

\u2026\u2026.#\u6700\u4e0b\u97625\u884c\u4fee\u6539\u6210\u5982\u4e0b：<\/p>\n

export KEY_COUNTRY="CN"<\/span><\/p>\n

export KEY_PROVINCE="BJ"<\/span><\/p>\n

export KEY_CITY="Beijing"<\/span><\/p>\n

export KEY_ORG="oldboy"<\/span><\/p>\n

export KEY_EMAIL="1441107787@qq.com"<\/span><\/p>\n

export KEY_OU="oldboy"<\/span><\/p>\n

[root@localhost 2.0]# tail –<\/span>6<\/span>\u00a0vars<\/span><\/p>\n

export KEY_COUNTRY="CN"<\/span><\/p>\n

export KEY_PROVINCE="BJ"<\/span><\/p>\n

export KEY_CITY="Beijing"<\/span><\/p>\n

export KEY_ORG="oldboy"<\/span><\/p>\n

export KEY_EMAIL="1441107787@qq.com"<\/span><\/p>\n

export KEY_OU="oldboy"<\/span><\/p>\n

[root@localhost 2.0]# source vars<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5237\u65b0，\u4f7f\u5f97\u914d\u7f6e\u751f\u6548<\/p>\n

NOTE: If you run .\/clean-all, I will be doing a rm -rf on \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys<\/p>\n

[root@localhost 2.0]# pwd<\/p>\n

\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0<\/p>\n

[root@localhost 2.0]# ls\u00a0\u00a0\u00a0#\u76ee\u524d\u8fd8\u6ca1\u6709keys\u76ee\u5f55<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0whichopensslcnf<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0revoke-full \u00a0vars.bak<\/p>\n

[root@localhost 2.0]# .\/clean-all<\/span>\u00a0\u00a0\u00a0#\u6e05\u7a7a\u6240\u6709\u7684\u79d8\u94a5\u548c\u8bc1\u4e66，\u91cd\u65b0\u6765，\u56e0\u4e3a\u662f\u65b0\u7684\u73af\u5883\u53ef\u4ee5\u8fd9\u4e48\u64cd\u4f5c<\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0revoke-full \u00a0vars.bak<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0\u00a0\u00a0\u00a0whichopensslcnf<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

[root@localhost 2.0]# ls keys\/<\/p>\n

index.txt \u00a0serial<\/p>\n

[root@localhost 2.0]# .\/build-ca<\/span>\u00a0<\/p>\n

Generating a 1024 bit RSA private key<\/p>\n

………………………………….++++++<\/p>\n

………………………………………++++++<\/p>\n

writing new private key to 'ca.key'<\/p>\n

—–<\/p>\n

You are about to be asked to enter information that will be incorporated<\/p>\n

into your certificate request.<\/p>\n

What you are about to enter is what is called a Distinguished Name or a DN.<\/p>\n

There are quite a few fields but you can leave some blank<\/p>\n

For some fields there will be a default value,<\/p>\n

If you enter '.', the field will be left blank.<\/p>\n

—–<\/p>\n

Country Name (2 letter code) [CN]:<\/p>\n

State or Province Name (full name) [BJ]:<\/p>\n

Locality Name (eg, city) [Beijing]:<\/p>\n

Organization Name (eg, company) [oldboy]:<\/p>\n

Organizational Unit Name (eg, section) [oldboy]:<\/p>\n

Common Name (eg, your name or your server's hostname) [oldboy CA]:<\/p>\n

Email Address [1441107787@qq.com]:<\/p>\n

[root@localhost 2.0]# ls keys\/<\/p>\n

ca.crt \u00a0ca.key \u00a0index.txt \u00a0serial<\/p>\n

6)\u751f\u6210\u670d\u52a1\u5668\u7aef\u8bc1\u4e66\u548c\u79d8\u94a5key\u6587\u4ef6：<\/span><\/p>\n

[root@localhost 2.0]# pwd<\/p>\n

\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0<\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0revoke-full \u00a0vars.bak<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0\u00a0\u00a0\u00a0whichopensslcnf<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

[root@localhost 2.0]# .\/build-key-server server<\/span>\u00a0#\u670d\u52a1\u7aef\u7684\u79d8\u94a5\u6587\u4ef6\u7ed9\u4e2a\u540d\u5b57\u53ebserver，\u4e0d\u662f\u5fc5\u987b\u8981\u662f\u8fd9\u4e2a\u540d\u5b57，\u4e5f\u53ef\u5176\u4ed6\u540d\u5b57，\u4e3a\u4e86\u89c4\u8303，\u53ebserver\u3002<\/p>\n

Generating a 1024 bit RSA private key<\/p>\n

………..++++++<\/p>\n

…………….++++++<\/p>\n

writing new private key to 'server.key'<\/p>\n

—–<\/p>\n

You are about to be asked to enter information that will be incorporated<\/p>\n

into your certificate request.<\/p>\n

What you are about to enter is what is called a Distinguished Name or a DN.<\/p>\n

There are quite a few fields but you can leave some blank<\/p>\n

For some fields there will be a default value,<\/p>\n

If you enter '.', the field will be left blank.<\/p>\n

—–<\/p>\n

Country Name (2 letter code) [CN]:<\/p>\n

State or Province Name (full name) [BJ]:<\/p>\n

Locality Name (eg, city) [Beijing]:<\/p>\n

Organization Name (eg, company) [oldboy]:<\/p>\n

Organizational Unit Name (eg, section) [oldboy]:<\/p>\n

Common Name (eg, your name or your server's hostname) [server]:<\/p>\n

Email Address [1441107787@qq.com]:<\/p>\n

Please enter the following 'extra' attributes<\/p>\n

to be sent with your certificate request<\/p>\n

A challenge password []:123456<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0#\u53d1\u9001\u8bc1\u4e66\u8bf7\u6c42\u65f6\u4f1a\u8981\u6c42\u7684\u4e00\u4e2a\u5bc6\u7801<\/span><\/p>\n

An optional company name []:oldboy<\/span>\u00a0#\u53ef\u9009\u7684\u516c\u53f8\u540d<\/span><\/p>\n

Using configuration from \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf<\/p>\n

Check that the request matches the signature<\/p>\n

Signature ok<\/p>\n

The Subject's Distinguished Name is as follows<\/p>\n

countryName \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'CN'<\/p>\n

stateOrProvinceName \u00a0\u00a0:PRINTABLE:'BJ'<\/p>\n

localityName \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'Beijing'<\/p>\n

organizationName \u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'oldboy'<\/p>\n

organizationalUnitName:PRINTABLE:'oldboy'<\/p>\n

commonName \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'server'<\/p>\n

emailAddress \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:IA5STRING:'1441107787@qq.com'<\/p>\n

Certificate is to be certified until May 30 06:54:05 2028 GMT (3650 days)<\/p>\n

Sign the certificate? [y\/n]:y<\/p>\n

1 out of 1 certificate requests certified, commit? [y\/n]y<\/p>\n

Write out database with 1 new entries<\/p>\n

Data Base Updated<\/p>\n

[root@localhost 2.0]# ls keys\/<\/span><\/p>\n

01.pem \u00a0ca.crt \u00a0ca.key \u00a0index.txt \u00a0index.txt.attr \u00a0index.txt.old \u00a0serial \u00a0serial.old \u00a0server.crt<\/span>\u00a0\u00a0server.csr \u00a0server.key<\/span><\/p>\n

7)\u751f\u6210\u5ba2\u6237\u7aef\u8bc1\u4e66\u548ckey\u6587\u4ef6：<\/span><\/p>\n

[root@localhost 2.0]# pwd<\/p>\n

\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0<\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0revoke-full \u00a0vars.bak<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0\u00a0\u00a0\u00a0whichopensslcnf<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

[root@localhost 2.0]# .\/build-key test<\/span><\/p>\n

Generating a 1024 bit RSA private key<\/p>\n

…………………++++++<\/p>\n

………….++++++<\/p>\n

writing new private key to 'test.key'<\/p>\n

—–<\/p>\n

You are about to be asked to enter information that will be incorporated<\/p>\n

into your certificate request.<\/p>\n

What you are about to enter is what is called a Distinguished Name or a DN.<\/p>\n

There are quite a few fields but you can leave some blank<\/p>\n

For some fields there will be a default value,<\/p>\n

If you enter '.', the field will be left blank.<\/p>\n

—–<\/p>\n

Country Name (2 letter code) [CN]:<\/p>\n

State or Province Name (full name) [BJ]:<\/p>\n

Locality Name (eg, city) [Beijing]:<\/p>\n

Organization Name (eg, company) [oldboy]:<\/p>\n

Organizational Unit Name (eg, section) [oldboy]:<\/p>\n

Common Name (eg, your name or your server's hostname) [test]:<\/p>\n

Email Address [1441107787@qq.com]:<\/p>\n

Please enter the following 'extra' attributes<\/p>\n

to be sent with your certificate request<\/p>\n

A challenge password []:123456<\/span><\/p>\n

An optional company name []:oldboy<\/span><\/p>\n

Using configuration from \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf<\/p>\n

Check that the request matches the signature<\/p>\n

Signature ok<\/p>\n

The Subject's Distinguished Name is as follows<\/p>\n

countryName \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'CN'<\/p>\n

stateOrProvinceName \u00a0\u00a0:PRINTABLE:'BJ'<\/p>\n

localityName \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'Beijing'<\/p>\n

organizationName \u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'oldboy'<\/p>\n

organizationalUnitName:PRINTABLE:'oldboy'<\/p>\n

commonName \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:PRINTABLE:'test'<\/p>\n

emailAddress \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0:IA5STRING:'1441107787@qq.com'<\/p>\n

Certificate is to be certified until May 30 07:04:31 2028 GMT (3650 days)<\/p>\n

Sign the certificate? [y\/n]:y<\/p>\n

1 out of 1 certificate requests certified, commit? [y\/n]y<\/p>\n

Write out database with 1 new entries<\/p>\n

Data Base Updated<\/p>\n

[root@localhost 2.0]# ls keys<\/p>\n

01.pem \u00a0ca.crt \u00a0index.txt \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0index.txt.attr.old \u00a0serial \u00a0\u00a0\u00a0\u00a0\u00a0server.crt \u00a0server.key \u00a0test.csr<\/span><\/p>\n

02.pem \u00a0ca.key \u00a0index.txt.attr \u00a0index.txt.old \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0serial.old \u00a0server.csr \u00a0test.crt<\/span>\u00a0\u00a0\u00a0\u00a0test.key<\/span><\/p>\n

8)\u751f\u6210\u4f20\u8f93\u8fdb\u884c\u79d8\u94a5\u4ea4\u6362\u65f6\u7528\u5230\u7684\u4ea4\u4e92\u79d8\u94a5\u534f\u8bae\u6587\u4ef6：（\u8be5\u6b65\u9aa4\u4e0d\u80fd\u7701\u7565，\u5426\u5219\u51fa\u9519）<\/span><\/p>\n

[root@localhost 2.0]# pwd<\/p>\n

\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0<\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0revoke-full \u00a0vars.bak<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0\u00a0\u00a0\u00a0whichopensslcnf<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

[root@localhost 2.0]# .\/build-dh<\/span><\/p>\n

[root@localhost 2.0]# ls keys\/<\/p>\n

01.pem \u00a0ca.crt \u00a0dh1024.pem<\/span>\u00a0\u00a0index.txt.attr \u00a0\u00a0\u00a0\u00a0\u00a0index.txt.old \u00a0serial.old \u00a0server.csr \u00a0test.crt \u00a0test.key<\/p>\n

02.pem \u00a0ca.key \u00a0index.txt \u00a0\u00a0index.txt.attr.old \u00a0serial \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0server.crt \u00a0server.key \u00a0test.csr<\/p>\n

9)\u751f\u6210\u4e00\u4e2a\u9632\u6b62\u6076\u610f\u653b\u51fb（\u5982Ddos\u3001Udp port flooding）\u7684\u6587\u4ef6：<\/span>ta.key，\u6548\u679c\u4e0d\u592a\u597d\u8bf4\u3002<\/p>\n

[root@localhost 2.0]# pwd<\/p>\n

\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0<\/p>\n

[root@localhost 2.0]# openvpn –genkey –secret keys\/ta.key<\/span><\/p>\n

[root@localhost 2.0]# ls keys\/<\/p>\n

01.pem \u00a0ca.crt \u00a0dh1024.pem \u00a0index.txt.attr \u00a0\u00a0\u00a0\u00a0\u00a0index.txt.old \u00a0serial.old \u00a0server.csr \u00a0ta.key<\/span>\u00a0\u00a0\u00a0\u00a0test.csr<\/p>\n

02.pem \u00a0ca.key \u00a0index.txt \u00a0\u00a0index.txt.attr.old \u00a0serial \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0server.crt \u00a0server.key \u00a0test.crt \u00a0test.key<\/p>\n

[root@localhost 2.0]# cd<\/p>\n

openvpn\u670d\u52a1\u7aef\u51e0\u4e2a\u91cd\u8981\u547d\u4ee4\u89e3\u91ca：<\/span>\u811a\u672c\u8def\u5f84：\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/<\/p>\n

vars\u811a\u672c： \u00a0\u7528\u6765\u521b\u5efa\u73af\u5883\u53d8\u91cf，\u8bbe\u7f6e\u6240\u9700\u8981\u7684\u7684\u53d8\u91cf\u7684\u811a\u672c\u3002<\/p>\n

clean-all\u811a\u672c： \u521b\u5efa\u751f\u6210ca\u8bc1\u4e66\u53ca\u79d8\u94a5\u6587\u4ef6\u6240\u9700\u8981\u7684\u6587\u4ef6\u53ca\u76ee\u5f55<\/p>\n

build-ca\u811a\u672c： \u751f\u6210ca\u8bc1\u4e66（\u4ea4\u4e92）<\/p>\n

build-dh\u811a\u672c： \u751f\u6210Diffie-Hellman\u6587\u4ef6（\u4ea4\u4e92）<\/p>\n

build-key-server\u811a\u672c： \u751f\u6210\u670d\u52a1\u5668\u7aef\u79d8\u94a5（\u4ea4\u4e92）<\/p>\n

build-key\u811a\u672c： \u751f\u6210\u5ba2\u6237\u7aef\u79d8\u94a5（\u4ea4\u4e92）<\/p>\n

build-key-pass\u811a\u672c：\u751f\u6210\u5ba2\u6237\u7aef\u5e26\u5bc6\u7801\u7684\u79d8\u94a5（\u4ea4\u4e92）<\/p>\n

pkitool\u811a\u672c： \u76f4\u63a5\u4f7f\u7528vars\u7684\u73af\u5883\u53d8\u91cf\u8bbe\u7f6e，\u76f4\u63a5\u751f\u6210\u8bc1\u4e66（\u975e\u4ea4\u4e92）<\/p>\n

10)vpn\u914d\u7f6e\u6587\u4ef6\u6574\u7406：<\/span><\/p>\n

[root@localhost ~]# mkdir \/etc\/openvpn<\/span><\/p>\n

[root@localhost ~]# cp -a \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys\/ \/etc\/openvpn\/<\/span><\/p>\n

[root@localhost ~]# cp -a \/data\/application\/openvpn\/openvpn-2.0.9\/sample-config-files\/server.conf \/etc\/openvpn\/<\/span><\/p>\n

[root@localhost ~]# cp -a \/data\/application\/openvpn\/openvpn-2.0.9\/sample-config-files\/client.conf \/etc\/openvpn\/<\/span><\/p>\n

[root@localhost ~]# ls \/etc\/openvpn\/<\/p>\n

client.conf \u00a0keys \u00a0server.conf<\/p>\n

[root@localhost ~]# ls \/etc\/openvpn\/keys\/<\/p>\n

01.pem \u00a0ca.crt \u00a0dh1024.pem \u00a0index.txt.attr \u00a0\u00a0\u00a0\u00a0\u00a0index.txt.old \u00a0serial.old \u00a0server.csr \u00a0ta.key \u00a0\u00a0\u00a0test.csr<\/p>\n

02.pem \u00a0ca.key \u00a0index.txt \u00a0\u00a0index.txt.attr.old \u00a0serial \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0server.crt \u00a0server.key \u00a0test.crt \u00a0test.key<\/p>\n

[root@localhost ~]# cd \/etc\/openvpn\/<\/p>\n

[root@localhost openvpn]# ls<\/p>\n

client.conf \u00a0keys \u00a0server.conf<\/p>\n

[root@localhost openvpn]# cp server.conf server.conf.bak<\/p>\n

[root@localhost openvpn]# grep -vE ";|#|^$" server.conf<\/p>\n

port 1194<\/p>\n

proto udp<\/p>\n

dev tun<\/p>\n

ca ca.crt<\/p>\n

cert server.crt<\/p>\n

dh dh1024.pem<\/p>\n

server 10.8.0.0 255.255.255.0<\/p>\n

ifconfig-pool-persist ipp.txt<\/p>\n

keepalive 10 120<\/p>\n

comp-lzo<\/p>\n

persist-key<\/p>\n

persist-tun<\/p>\n

status openvpn-status.log<\/p>\n

verb 3<\/p>\n

[root@localhost openvpn]# grep -vE ";|#|^$" server.conf > tmp.log<\/p>\n

[root@localhost openvpn]# cat tmp.log > server.conf<\/p>\n

[root@localhost openvpn]# vim server.conf<\/span>\u00a0\u00a0\u00a0#\u7f16\u8f91\u4fee\u6539，\u589e\u5220\u540e\u6700\u7ec8\u7ed3\u679c\u5982\u4e0b：<\/span><\/p>\n

local 192.168.43.128<\/span><\/p>\n

port 52115<\/span><\/p>\n

proto tcp<\/span><\/p>\n

dev tun<\/span><\/p>\n

ca \/etc\/openvpn\/keys\/ca.crt<\/span><\/p>\n

cert \/etc\/openvpn\/keys\/server.crt<\/span><\/p>\n

key \/etc\/openvpn\/keys\/server.key<\/span><\/p>\n

dh \/etc\/openvpn\/keys\/dh1024.pem<\/span><\/p>\n

server 10.8.0.0 255.255.255.0<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#<\/span>vpn server\u52a8\u6001\u5206\u914d\u7ed9vpn client\u7684\u5730\u5740\u6c60<\/span><\/p>\n

push "route 172.16.1.0 255.255.255.0"<\/span>\u00a0\u00a0#\u591a\u4e2a\u5185\u7f51\u6bb5\u5c31\u90fd\u6dfb\u52a0\u8fdb\u53bb（\u5305\u62ec\u5176\u4ed6\u5185\u7f51\u670d\u52a1\u5668\u5185\u7f51\u6bb5），\u6bcf\u4e2a\u7f51\u6bb5\u4e00\u884c<\/span><\/p>\n

ifconfig-pool-persist ipp.txt<\/span><\/p>\n

keepalive 10 120<\/span><\/p>\n

comp-lzo<\/span><\/p>\n

persist-key<\/span><\/p>\n

persist-tun<\/span><\/p>\n

status openvpn-status.log<\/span><\/p>\n

verb 3<\/span><\/p>\n

client-to-client<\/span><\/p>\n

duplicate-cn<\/span><\/p>\n

log \/var\/log\/openvpn.log<\/span><\/p>\n

[root@localhost openvpn]#\u00a0cd<\/p>\n

\u89e3\u91ca：<\/p>\n

local \u00a0192.168.43.128 (vpn\u5916\u7f51IP ) \u00a0\u00a0\u00a0\u00a0#openvpn\u76d1\u542c\u7684ip\u5730\u5740，\u82e5\u662f*，\u6240\u6709\u7f51\u5361\u7684ip\u90fd\u76d1\u542c<\/p>\n

port \u00a052115 (\u9ed8\u8ba41194) \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#openvpn\u76d1\u542c\u7684\u7aef\u53e3<\/p>\n

proto \u00a0tcp(\u9ed8\u8ba4udp) \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u6307\u5b9a\u76d1\u542c\u7684\u534f\u8bae，\u63a8\u8350tcp<\/p>\n

dev \u00a0\u00a0tun \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u91c7\u7528\u7684\u8def\u7531\u6a21\u5f0f<\/p>\n

ca \u00a0\u00a0\u00a0\/etc\/openvpn\/keys\/ca.crt\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#ca\u8bc1\u4e66，\u53ef\u4ee5\u76f8\u5bf9\u8def\u5f84（\u548cserver.conf\u5728\u540c\u4e00\u4e2a\u76ee\u5f55），\u4e5f\u53ef\u7edd\u5bf9\u8def\u5f84<\/p>\n

cert \u00a0\/etc\/openvpn\/keys\/server.crt\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u670d\u52a1\u7aef\u7684\u8bc1\u4e66，\u53ef\u4ee5\u76f8\u5bf9\u8def\u5f84，\u4e5f\u53ef\u7edd\u5bf9\u8def\u5f84<\/p>\n

key \u00a0\/etc\/openvpn\/keys\/server.key\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u670d\u52a1\u7aef\u7684\u79d8\u94a5\u6587\u4ef6，\u53ef\u4ee5\u76f8\u5bf9\u8def\u5f84，\u4e5f\u53ef\u7edd\u5bf9\u8def\u5f84<\/p>\n

dh \u00a0\u00a0\/etc\/openvpn\/keys\/dh1024.pem\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u79d8\u94a5\u4ea4\u6362\u6587\u4ef6<\/p>\n

server 10.8.0.0 255.255.255.0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u662f\u5ba2\u6237\u7aef\u62e8\u53f7\u540e，vpn server\u52a8\u6001\u5206\u914d\u7ed9vpn client\u7684\u5730\u5740\u6c60<\/span>，\u4e00\u822c\u4e0d\u9700\u66f4\u6539，\u4e0d\u8981\u548c\u4efb\u4f55\u5730\u5740\u6bb5\u51b2\u7a81\u6216\u91cd\u590d<\/p>\n

push "route 172.16.1.0 255.255.255.0"\u00a0\u00a0\u00a0#vpn\u670d\u52a1\u7aef\u63a8\u9001\u5230client\u7aef\u7684\u8def\u7531<\/span>，\u5728vpn\u7684\u5ba2\u6237\u7aef\u4e0a\u9762\u914d\u7f6e\u8fd9\u4e48\u4e00\u4e2a\u8def\u7531，\u5373vpnserver\u7aef\u7684\u5185\u7f51\u7f51\u6bb5，\u591a\u4e2a\u5185\u7f51\u6bb5\u65f6，\u5c31\u6dfb\u52a0\u591a\u884c<\/span>，\u5373\u4f7f<\/span>vpnserver\u53ea\u6709\u4e00\u4e2a\u5185\u7f51，\u4f46\u5982\u679c\u6709\u5176\u4ed6\u5185\u7f51\u670d\u52a1\u5668\u7f51\u6bb5\u4e5f\u90fd\u6dfb\u52a0\u8fdb\u53bb，\u8fd9\u6837\u5176\u4ed6\u670d\u52a1\u5668\u624d\u80fd\u901a\u8fc7vpn\u8fde\u63a5<\/span><\/p>\n

ifconfig-pool-persist ipp.txt<\/p>\n

keepalive 10 120\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u6bcf10\u79d2ping\u4e00\u6b21，\u82e5\u662f120\u79d2\u672a\u6536\u5230\u5305，\u5373\u8ba4\u5b9a\u5ba2\u6237\u7aef\u65ad\u7ebf<\/p>\n

comp-lzo\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5f00\u542f\u538b\u7f29\u529f\u80fd<\/p>\n

persist-key\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5f53vpn\u8d85\u65f6\u540e，\u5f53\u91cd\u65b0\u542f\u52a8vpn\u540e，\u4fdd\u6301\u4e0a\u4e00\u6b21\u4f7f\u7528\u7684\u79c1\u94a5，\u800c\u4e0d\u91cd\u65b0\u8bfb\u53d6\u79c1\u94a5<\/p>\n

persist-tun\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u901a\u8fc7keepalive\u68c0\u6d4bvpn\u8d85\u65f6\u540e，\u5f53\u91cd\u65b0\u542f\u52a8vpn\u540e，\u4fdd\u6301tun\u6216\u8005tap\u8bbe\u5907\u81ea\u52a8\u8fde\u63a5\u72b6\u6001<\/p>\n

status openvpn-status.log\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#openvpn\u65e5\u5fd7\u72b6\u6001\u4fe1\u606f<\/p>\n

verb 3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u6307\u5b9a\u65e5\u5fd7\u6587\u4ef6\u5197\u4f59<\/p>\n

client-to-client\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5141\u8bb8\u62e8\u53f7\u7684\u591a\u4e2avpn client\u4e92\u76f8\u901a\u4fe1<\/p>\n

duplicate-cn\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5141\u8bb8\u591a\u4e2a\u5ba2\u6237\u7aef\u4f7f\u7528\u540c\u4e00\u4e2a\u8d26\u53f7\u8fde\u63a5<\/p>\n

log \/var\/log\/openvpn.log\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u65e5\u5fd7\u6587\u4ef6<\/p>\n

11)\u8c03\u8bd5\u670d\u52a1\u5668vpn\u670d\u52a1\u542f\u52a8\u73af\u5883：<\/span><\/p>\n

[root@localhost ~]# iptables -I INPUT -p tcp –dport 52115 -j ACCEPT<\/span><\/p>\n

[root@localhost ~]# \/etc\/init.d\/iptables save<\/p>\n

[root@localhost ~]# \/etc\/init.d\/iptables restart<\/p>\n

[root@localhost ~]# iptables -nL<\/p>\n

Chain INPUT (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

ACCEPT \u00a0\u00a0\u00a0\u00a0tcp \u00a0— \u00a00.0.0.0\/0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0\/0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0tcp dpt:52115<\/p>\n

Chain FORWARD (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

Chain OUTPUT (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

[root@localhost ~]# setenforce 0\u00a0\u00a0\u6d4b\u8bd5\u662f\u5f00\u7740\u4e5f\u4e0d\u5f71\u54cd，\u5c3d\u91cf\u5173\u6389\u5427<\/p>\n

[root@localhost ~]# vim \/etc\/sysctl.conf\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u5f00\u542f\u8def\u7531\u8f6c\u53d1<\/p>\n

net.ipv4.ip_forward = 1<\/p>\n

[root@localhost ~]# sysctl -p<\/p>\n

12)\u542f\u52a8openvpn\u670d\u52a1\u5e76\u68c0\u67e5：<\/span><\/p>\n

\u542f\u52a8\u65b9\u6cd51：<\/span><\/p>\n

[root@localhost ~]# \/usr\/local\/sbin\/openvpn –config \/etc\/openvpn\/server.conf &<\/span>\u00a0\u00a0\u00a0#\u542f\u52a8openvpn<\/span><\/p>\n

[1] 24419<\/p>\n

[root@localhost ~]# netstat -anput |grep 52115<\/p>\n

tcp \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a00 192.168.43.128:52115 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0:* \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0LISTEN \u00a0\u00a0\u00a0\u00a0\u00a024419\/openvpn \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

[root@localhost ~]# ps -ef |grep openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a024419 23849 \u00a00 17:07 pts\/1 \u00a0\u00a0\u00a000:00:00 \/usr\/local\/sbin\/openvpn –config \/etc\/openvpn\/server.conf<\/p>\n

root \u00a0\u00a0\u00a0\u00a024431 23849 \u00a00 17:07 pts\/1 \u00a0\u00a0\u00a000:00:00 grep openvpn<\/p>\n

[root@localhost ~]# ifconfig \u00a0\u00a0\u00a0\u00a0openvpn\u542f\u52a8\u540e，\u4f1a\u591a\u4e00\u4e2a\u865a\u62df\u7f51\u5361tun0<\/p>\n

eth0 \u00a0\u00a0\u00a0\u00a0\u00a0Link encap:Ethernet \u00a0HWaddr 00:0C:29:E1:54:C6 \u00a0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet addr:192.168.43.128 \u00a0Bcast:192.168.43.255 \u00a0Mask:255.255.255.0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet6 addr: fe80::20c:29ff:fee1:54c6\/64 Scope:Link<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0UP BROADCAST RUNNING MULTICAST \u00a0MTU:1500 \u00a0Metric:1<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX packets:78038 errors:0 dropped:0 overruns:0 frame:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0TX packets:30843 errors:0 dropped:0 overruns:0 carrier:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0collisions:0 txqueuelen:1000<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX bytes:97192097 (92.6 MiB) \u00a0TX bytes:3093244 (2.9 MiB)<\/p>\n

eth1 \u00a0\u00a0\u00a0\u00a0\u00a0Link encap:Ethernet \u00a0HWaddr 00:0C:29:E1:54:D0 \u00a0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet addr:172.16.1.28 \u00a0Bcast:172.16.1.255 \u00a0Mask:255.255.255.0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet6 addr: fe80::20c:29ff:fee1:54d0\/64 Scope:Link<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0UP BROADCAST RUNNING MULTICAST \u00a0MTU:1500 \u00a0Metric:1<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX packets:4 errors:0 dropped:0 overruns:0 frame:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0TX packets:14 errors:0 dropped:0 overruns:0 carrier:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0collisions:0 txqueuelen:1000<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX bytes:316 (316.0 b) \u00a0TX bytes:916 (916.0 b)<\/p>\n

lo \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Link encap:Local Loopback \u00a0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet addr:127.0.0.1 \u00a0Mask:255.0.0.0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet6 addr: ::1\/128 Scope:Host<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0UP LOOPBACK RUNNING \u00a0MTU:16436 \u00a0Metric:1<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX packets:0 errors:0 dropped:0 overruns:0 frame:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0collisions:0 txqueuelen:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX bytes:0 (0.0 b) \u00a0TX bytes:0 (0.0 b)<\/p>\n

tun0 \u00a0\u00a0\u00a0\u00a0\u00a0Link encap:UNSPEC \u00a0HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 \u00a0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inet addr:10.8.0.1<\/span>\u00a0\u00a0P-t-P:10.8.0.2 \u00a0Mask:255.255.255.255<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0UP POINTOPOINT RUNNING NOARP MULTICAST \u00a0MTU:1500 \u00a0Metric:1<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX packets:0 errors:0 dropped:0 overruns:0 frame:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0collisions:0 txqueuelen:100<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0RX bytes:0 (0.0 b) \u00a0TX bytes:0 (0.0 b)<\/p>\n

[root@localhost ~]# ps -ef |grep openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a024419 23849 \u00a00 17:07 pts\/1 \u00a0\u00a0\u00a000:00:00 \/usr\/local\/sbin\/openvpn –config \/etc\/openvpn\/server.conf<\/p>\n

root \u00a0\u00a0\u00a0\u00a024448 23849 \u00a00 17:16 pts\/1 \u00a0\u00a0\u00a000:00:00 grep openvpn<\/p>\n

[root@localhost ~]# kill -9 24419<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\u505c\u6b62openvpn，\u6216\u8005pkill openvpn<\/span><\/p>\n

[root@localhost ~]# ps -ef |grep openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a024455 23849 \u00a00 17:17 pts\/1 \u00a0\u00a0\u00a000:00:00 grep openvpn<\/p>\n

\u542f\u52a8\u65b9\u6cd52：(\u5e38\u89c4\u65b9\u5f0f\u542f\u52a8)<\/span><\/p>\n

[root@localhost ~]# cp \/data\/application\/openvpn\/openvpn-2.0.9\/sample-scripts\/openvpn.init \/etc\/init.d\/openvpn<\/span><\/p>\n

[root@localhost ~]# chmod 700 \/etc\/init.d\/openvpn<\/span><\/p>\n

[root@localhost ~]# chkconfig –add openvpn<\/p>\n

[root@localhost ~]# chkconfig –list openvpn<\/p>\n

openvpn \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0:off 1:off 2:off 3:on 4:on 5:on 6:off<\/p>\n

[root@localhost ~]# vim \/etc\/init.d\/openvpn<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0# Start every .conf in $work and run .sh if exists<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0errors=0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0successes=0<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0for c in `\/bin\/ls server<\/span>.conf 2>\/dev\/null`; do\u00a0#\u4e4b\u524d\u9ed8\u8ba4\u662f*，\u4fee\u6539\u6210server，\u82e5\/etc\/openvpn\/\u4e0b\u53ea\u6709\u4e00\u4e2aserver.conf，\u6b64\u5904\u4e0d\u6539\u4e5f\u884c<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0bn=${c%%.conf}<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0if [ -f "$bn.sh" ]; then<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0. $bn.sh<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0fi<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0rm -f $piddir\/$bn.pid<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0$openvpn –daemon –writepid $piddir\/$bn.pid –config $c –cd $work<\/p>\n

\u2026..<\/p>\n

[root@localhost ~]# \/etc\/init.d\/openvpn start<\/span><\/p>\n

Starting openvpn: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[ \u00a0OK \u00a0]<\/p>\n

[root@localhost ~]# netstat -anput |grep 52115<\/p>\n

tcp \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a00 192.168.43.128:52115 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0:* \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0LISTEN \u00a0\u00a0\u00a0\u00a0\u00a024529\/openvpn \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

[root@localhost ~]# ps -ef |grep openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a024529 \u00a0\u00a0\u00a0\u00a01 \u00a00 17:22 ? \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a000:00:00 \/usr\/local\/sbin\/openvpn –daemon –writepid \/var\/run\/openvpn\/server.pid –config server.conf –cd \/etc\/openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a024535 23849 \u00a00 17:23 pts\/1 \u00a0\u00a0\u00a000:00:00 grep openvpn<\/p>\n

[root@localhost ~]# \/etc\/init.d\/openvpn stop<\/span><\/p>\n

Shutting down openvpn: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[ \u00a0OK \u00a0]<\/p>\n

[root@localhost ~]# netstat -anput |grep 52115<\/p>\n

\u65e0<\/p>\n

[root@localhost ~]# ps -ef |grep openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a024553 23849 \u00a00 17:24 pts\/1 \u00a0\u00a0\u00a000:00:00 grep openvpn<\/p>\n

[root@localhost ~]# \/etc\/init.d\/openvpn start<\/span><\/p>\n

Starting openvpn: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0[ \u00a0OK \u00a0]<\/p>\n

[root@localhost ~]# netstat -anput |grep 52115<\/p>\n

tcp \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a00 192.168.43.128:52115 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0:* \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0LISTEN \u00a0\u00a0\u00a0\u00a0\u00a024569\/openvpn \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

2.windows\u5b89\u88c5openvpn\u5ba2\u6237\u7aef\u5e76\u8fdb\u884c\u8fdc\u7a0b\u62e8\u53f7：（\u6b64\u5904\u5b89\u88c5\u7248\u672c\u662f：<\/span>openvpn-install-2.4.1-I601.exe\u4e5f\u53ef\u5176\u4ed6\u7248\u672c<\/span>）<\/span><\/p>\n

\u5b89\u88c5openvpn\u5ba2\u6237\u7aef：<\/span>openvpn-install-2.4.1-I601\u7565（\u4e00\u76f4\u4e0b\u4e00\u6b65\u5373\u53ef）<\/p>\n

\u5b89\u88c5\u5b8c\u5982\u4e0b：<\/p>\n

\"\"<\/p>\n

\u914d\u7f6eopenvpn \u5ba2\u6237\u7aef\u5e76\u8fdc\u7a0b\u62e8\u53f7\u5230vpnserver\u7aef：<\/span><\/p>\n

\u767b\u5f55openvpn\u670d\u52a1\u7aef\u4e0b\u8f7d\u5ba2\u6237\u7aef\u76f8\u5173\u9700\u8981\u7684\u8bc1\u4e66\u548c\u6587\u4ef6：<\/p>\n

[root@localhost ~]# cd \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys\/<\/p>\n

[root@localhost keys]# ls<\/p>\n

01.pem \u00a0ca.crt \u00a0dh1024.pem \u00a0index.txt.attr \u00a0\u00a0\u00a0\u00a0\u00a0index.txt.old \u00a0serial.old \u00a0server.csr \u00a0ta.key \u00a0\u00a0\u00a0test.csr<\/p>\n

02.pem \u00a0ca.key \u00a0index.txt \u00a0\u00a0index.txt.attr.old \u00a0serial \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0server.crt \u00a0server.key \u00a0test.crt \u00a0test.key<\/p>\n

[root@localhost keys]# sz -y ca.crt test.crt test.key\u00a0\u00a0\u00a0\u4e0b\u8f7d\u5230\u684c\u9762<\/p>\n

[root@localhost keys]# sz \/etc\/openvpn\/client.conf\u00a0\u00a0\u4e0b\u8f7d\u5230\u684c\u9762<\/p>\n

\"\"<\/p>\n

\u5728openvpn\u5ba2\u6237\u7aef\u7684\u5b89\u88c5\u76ee\u5f55\u7684config\u4e0b\u9762\u5efa\u7acb\u4e00\u4e2a\u6587\u4ef6\u5939：test，\u5982\u4e0b：（\u8be5\u51e0\u4e2a\u6587\u4ef6\u53ea\u8981\u653e\u5728config\u76ee\u5f55\u4e0b\u5373\u53ef（\u53ef\u9012\u5f52）），\u5982\u4e0b\u56fe：<\/p>\n

\"\"<\/p>\n

\u6839\u636eclient.conf（\u6ca1\u7528，\u4f5c\u4e3a\u5bf9\u6bd4\u7528）\u6587\u4ef6，\u5efa\u7acb\u4e00\u4e2a\u8fde\u63a5\u6587\u4ef6\u6587\u672c，\u4ee5ovpn\u7ed3\u5c3e\u7684\u6587\u4ef6，\u5185\u5bb9\u5982\u4e0b：<\/p>\n

\"\"<\/p>\n

\u5ba2\u6237\u7aef\u5f00\u59cb\u8fdc\u7a0b\u62e8\u53f7：<\/span><\/p>\n

\u53cc\u51fbOpenVPN GUI\u56fe\u6807\u8fd0\u884c\u8f6f\u4ef6\u2014\u2014\u53f3\u4e0b\u89d2vpn\u56fe\u6807\u53f3\u51fb\u2014\u2014\u9009\u62e9\u9700\u8981\u8fde\u63a5\u7684vpn\u540d\u79f0test（\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6，\u6bcf\u4e2a\u8fde\u63a5\u7684\u540d\u5b57\u5c31\u662fovpv\u6587\u4ef6\u5bf9\u5e94\u7684\u540d\u5b57，\u5f53\u914d\u7f6e\u53ea\u8fde\u63a5\u4e00\u4e2avpn server\u65f6\u5019，\u5c31\u9ed8\u8ba4\u53ea\u6709connect，\u6b64\u5904\u662f\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6\u5019）\u2014\u2014\u70b9\u51fbconnet<\/p>\n

\"\"<\/p>\n

\u70b9\u51fbconnect，\u5982\u4e0b：<\/p>\n

\"\"<\/p>\n

\u8fde\u63a5\u6210\u529f\u540e，\u5982\u4e0b\u56fe：<\/p>\n

\"\"<\/p>\n

\u4f7f\u7528xshell\u8fde\u63a5\u5185\u7f51\u670d\u52a1\u5668：172.16.1.17 \u00a0\u5185\u7f51(vmnet2)<\/p>\n

\"\"<\/p>\n

\u5982\u679c\u65ad\u5f00vpn，\u5219\u8fde\u63a5\u4e0d\u4e86\u3002<\/p>\n

3.\u5728vpnserver\u670d\u52a1\u5668\u4e0a\u67e5\u770b\u67d0\u7528\u6237\u662f\u5426\u62e8\u53f7\u5230\u8be5vpn，\u67e5\u770b\u7528\u6237\u4f7f\u7528vpn\u60c5\u51b5：（\u5224\u65ad\u79bb\u804c\u4eba\u5458\u662f\u5426\u4f7f\u7528vpn）<\/span><\/p>\n

[root@localhost ~]# cat \/etc\/openvpn\/openvpn-status.log<\/span>\u00a0<\/p>\n

OpenVPN CLIENT LIST<\/p>\n

Updated,Sat Jun \u00a02 22:02:07 2018<\/p>\n

Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since<\/p>\n

test,192.168.43.1:63352,8215,4730,Sat Jun \u00a02 21:58:43 2018<\/p>\n

ROUTING TABLE<\/p>\n

Virtual Address,Common Name,Real Address,Last Ref<\/p>\n

10.8.0.6<\/span>,test<\/span>,192.168.43.1:<\/span>63352,Sat Jun \u00a02 21:58:44 2018\u00a0\u00a0\u00a0#\u67e5\u770bvpn\u7ed9\u5ba2\u6237\u7aef\u5206\u7684IP\u5730\u5740,\u5ba2\u6237\u7aef\u540d\u5b57,\u5ba2\u6237\u7aef\u672c\u5730IP<\/p>\n

GLOBAL STATS<\/p>\n

Max bcast\/mcast queue length,0<\/p>\n

END<\/p>\n

4.\u5185\u7f51\u670d\u52a1\u5668\u7684\u57fa\u672c\u4fe1\u606f：<\/span>172.16.1.17 \u00a0\u5185\u7f51(vmnet2) \u00a0<\/p>\n

5.\u786e\u4fdd\u5ba2\u6237\u7aef\u8fdc\u7a0b\u62e8\u53f7\u80fd\u6210\u529f\u7684\u524d\u63d0\u65b9\u6cd5\u9009\u62e9：<\/span>\u00a0（\u9009\u62e9\u5176\u4e00\u5373\u53ef）<\/p>\n

\u65b9\u6cd51：\u5185\u7f51\u670d\u52a1\u5668：172.16.1.17 \u914d\u7f6e\u5185\u7f51\u670d\u52a1\u5668\u7684\u7f51\u5173<\/span>： \u5730\u5740\u4e3aopenvpn server\u7684\u5185\u7f51\u5730\u5740172.16.1.28，\u5982\u56fe：<\/p>\n

\"\"<\/p>\n

\u65b9\u6cd52：\u5185\u7f51\u670d\u52a1\u5668：172.16.1.17\u4e0d\u7528 \u914d\u7f6e\u5185\u7f51\u670d\u52a1\u5668\u7684\u7f51\u5173，\u800c\u5728vpnserver\u4e0a\u914d\u7f6e\u6e90\u5730\u5740\u8f6c\u53d1\u89c4\u5219：<\/span><\/p>\n

\u5185\u7f51\u670d\u52a1\u5668\u5982\u4e0b：<\/p>\n

\"\"<\/p>\n

openvpnserver\u670d\u52a1\u5668\u4e0a\u914d\u7f6enat\u8f6c\u53d1\u89c4\u5219：<\/p>\n

[root@localhost ~]# \/etc\/init.d\/iptables start<\/p>\n

[root@localhost ~]# iptables -I INPUT -p tcp –dport 52115 -j ACCEPT<\/span>\u00a0\u00a0\u00a01)\u7aef\u53e3\u5141\u8bb8<\/span><\/p>\n

[root@localhost ~]# iptables -nL<\/p>\n

Chain INPUT (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

ACCEPT \u00a0\u00a0\u00a0\u00a0tcp \u00a0— \u00a00.0.0.0\/0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0\/0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0tcp dpt:52115<\/p>\n

Chain FORWARD (policy ACCEPT)<\/span>\u00a0\u00a0\u00a0\u00a0\u00a02)FORWARD \u8981\u5141\u8bb8<\/span><\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

Chain OUTPUT (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

[root@localhost ~]# iptables -t nat -I POSTROUTING -s 10.8.0.0\/24 -j SNAT –to-source 172.16.1.28<\/span>\u00a0\u00a0<\/p>\n

#\u5373：<\/span>\u6e90\u5730\u5740\u8f6c\u6362<\/span>，\u6e90\u5730\u5740\u662f<\/span>vpn server\u52a8\u6001\u5206\u914d\u7ed9vpn client\u7684\u5730\u5740\u6c60<\/span>\u7684<\/span>IP\u8f6c\u6362\u4e3avpnserver\u7684\u5185\u7f51IP<\/span><\/p>\n

\u6216：<\/span>iptables -t nat -I POSTROUTING -s 10.8.0.0\/24 -j<\/span>\u00a0MASQUERADE<\/span>\u00a0\u00a0#\u82e5\u540e\u9762\u7684\u5730\u5740\u4e0d\u56fa\u5b9a，\u53ef\u7528\u8be5\u6761<\/span><\/p>\n

[root@localhost ~]# iptables -t nat -nL<\/p>\n

Chain PREROUTING (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

Chain POSTROUTING (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

SNAT \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0all \u00a0— \u00a010.8.0.0\/24 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0\/0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0to:172.16.1.28<\/p>\n

Chain OUTPUT (policy ACCEPT)<\/p>\n

target \u00a0\u00a0\u00a0\u00a0prot opt source \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0destination \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n

[root@localhost ~]# \/etc\/init.d\/iptables save<\/span><\/p>\n

iptables: Saving firewall rules to \/etc\/sysconfig\/iptables:[ \u00a0OK \u00a0]<\/p>\n

6.openvpn\u540a\u9500\u7528\u6237\u8bc1\u4e66，\u7981\u6b62\u8be5\u7528\u6237\u62e8\u53f7\u5230vpnserver<\/span><\/p>\n

\u5728openvpn server\u4e0a：<\/span><\/p>\n

[root@localhost ~]# cd \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/<\/span><\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0revoke-full \u00a0vars.bak<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0\u00a0\u00a0\u00a0whichopensslcnf<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

[root@localhost 2.0]# ls keys\/<\/p>\n

01.pem \u00a0ca.crt \u00a0dh1024.pem \u00a0index.txt.attr \u00a0\u00a0\u00a0\u00a0\u00a0index.txt.old \u00a0serial.old \u00a0server.csr \u00a0ta.key \u00a0\u00a0\u00a0test.csr<\/p>\n

02.pem \u00a0ca.key \u00a0index.txt \u00a0\u00a0index.txt.attr.old \u00a0serial \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0server.crt \u00a0server.key \u00a0test.crt \u00a0test.key<\/p>\n

[root@localhost 2.0]# source vars<\/p>\n

NOTE: If you run .\/clean-all, I will be doing a rm -rf on \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys<\/p>\n

[root@localhost 2.0]# .\/revoke-full test<\/span>\u00a0\u00a0\u00a0#\u540a\u9500\u67d0\u7528\u6237openvpn\u51ed\u8bc1，\u9632\u6b62\u7528\u6237\u767b\u5f55vpn<\/span><\/p>\n

Using configuration from \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf<\/p>\n

error on line 282 of config file '\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf'<\/p>\n

139869544200008:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:618:line 282<\/p>\n

Using configuration from \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf<\/p>\n

error on line 282 of config file '\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf'<\/span>\u00a0\u00a0#\u540a\u9500\u51ed\u8bc1\u5931\u8d25<\/span><\/p>\n

140526850815816:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:618:line 282<\/p>\n

cat: crl.pem: No such file or directory<\/p>\n

test.crt: C = CN, ST = BJ, L = Beijing, O = oldboy, OU = oldboy, CN = test, emailAddress = 1441107787@qq.com<\/p>\n

error 3 a<\/span>t 0 depth lookup:unable to get certificate CRL\u00a0\u00a0\u00a0\u00a0<\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf<\/span>\u00a0\u00a0revoke-full \u00a0vars.bak<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0\u00a0\u00a0\u00a0whichopensslcnf<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

[root@localhost 2.0]# vim openssl.cnf<\/span><\/p>\n

\u2026\u2026<\/span>..#\u6700\u4e0b\u9762\u7684\u51e0\u884c\u6ce8\u91ca\u6389<\/span><\/p>\n

[ pkcs11_section ]<\/span><\/p>\n

#engine_id = pkcs11<\/span><\/p>\n

#dynamic_path = \/usr\/lib\/engines\/engine_pkcs11.so<\/span><\/p>\n

#MODULE_PATH = $ENV::PKCS11_MODULE_PATH<\/span><\/p>\n

#PIN = $ENV::PKCS11_PIN<\/span><\/p>\n

#init = 0<\/span><\/p>\n

[root@localhost 2.0]# source vars<\/p>\n

NOTE: If you run .\/clean-all, I will be doing a rm -rf on \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys<\/p>\n

[root@localhost 2.0]# .\/revoke-full test<\/span>\u00a0\u00a0#\u518d\u6b21\u6267\u884c\u540a\u9500\u67d0\u7528\u6237\u547d\u4ee4，\u4e00\u5b9a\u8981\u4fdd\u8bc1openvpn\u670d\u52a1\u662f\u8fd0\u884c\u72b6\u6001，\u547d\u4ee4\u624d\u80fd\u6210\u529f<\/span><\/p>\n

Using configuration from \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf<\/p>\n

Revoking Certificate 02.<\/p>\n

Data Base Updated<\/p>\n

Using configuration from \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/openssl.cnf<\/p>\n

test.crt: C = CN, ST = BJ, L = Beijing, O = oldboy, OU = oldboy, CN = test, emailAddress = 1441107787@qq.com<\/p>\n

error 8 at 0 depth lookup:CRL signature failure<\/p>\n

140013267683144:error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm:a_verify.c:217:<\/p>\n

[root@localhost 2.0]# ls<\/p>\n

build-ca \u00a0\u00a0\u00a0\u00a0build-key \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0build-key-server \u00a0clean-all \u00a0\u00a0\u00a0\u00a0\u00a0list-crl \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl.cnf \u00a0revoke-full \u00a0vars.bak<\/p>\n

build-dh \u00a0\u00a0\u00a0\u00a0build-key-pass \u00a0\u00a0\u00a0build-req \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0inherit-inter \u00a0Makefile \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0pkitool \u00a0\u00a0\u00a0\u00a0\u00a0sign-req \u00a0\u00a0\u00a0\u00a0whichopensslcnf<\/p>\n

build-inter \u00a0build-key-pkcs12 \u00a0build-req-pass \u00a0\u00a0\u00a0keys \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0openssl-0.9.6.cnf \u00a0README \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0vars<\/p>\n

[root@localhost 2.0]# ls keys\/<\/span>\u00a0\u00a0#\u540a\u9500\u7528\u6237\u51ed\u8bc1\u540e，\u4f1a\u5728keys\u76ee\u5f55\u4e0b\u751f\u6210\u4e00\u4e2acrl.pem\u6587\u4ef6，\u91cc\u9762\u5c31\u662f\u6ce8\u9500\u6389\u7684\u8bc1\u4e66，\u5e76\u6ca1\u5b8c\u5168\u6ce8\u9500\u6389，\u53ef\u6062\u590d<\/span><\/p>\n

01.pem \u00a0ca.crt \u00a0crl.pem<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0index.txt \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0index.txt.attr.old \u00a0revoke-test.pem \u00a0serial.old \u00a0server.csr \u00a0ta.key \u00a0\u00a0\u00a0test.csr<\/p>\n

02.pem \u00a0ca.key \u00a0dh1024.pem \u00a0index.txt.attr \u00a0index.txt.old \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0serial \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0server.crt \u00a0server.key \u00a0test.crt \u00a0test.key<\/p>\n

[root@localhost 2.0]# cat keys\/crl.pem<\/span>\u00a0<\/p>\n

—–BEGIN X509 CRL—–<\/p>\n

MIIBYDCByjANBgkqhkiG9w0BAQQFADCBhDELMAkGA1UEBhMCQ04xCzAJBgNVBAgT<\/p>\n

AkJKMRAwDgYDVQQHEwdCZWlqaW5nMQ8wDQYDVQQKEwZvbGRib3kxDzANBgNVBAsT<\/p>\n

Bm9sZGJveTESMBAGA1UEAxMJb2xkYm95IENBMSAwHgYJKoZIhvcNAQkBFhExNDQx<\/p>\n

MTA3Nzg3QHFxLmNvbRcNMTgwNjAyMTQ0MjAzWhcNMTgwNzAyMTQ0MjAzWjAUMBIC<\/p>\n

AQIXDTE4MDYwMjE0NDIwM1owDQYJKoZIhvcNAQEEBQADgYEAjossR3MAZAStqlk2<\/p>\n

71IG\/9NMb\/42o6KDLsmlxwWKWmrbRqR1DhkEgnxAo1KgsDERluPOrg7n3Dx648GX<\/p>\n

pPNGazMz1GTIvAVfziYydHwc0Ics2lERhvOJ2cDGIzfdSSnWJL0qRxDiH4Ss0mm+<\/p>\n

xg3PwUOc\/lNCKd2qkhHdDX1yhyE=<\/p>\n

—–END X509 CRL—–<\/p>\n

[root@localhost 2.0]# cat keys\/index.txt<\/span>\u00a0\u00a0\u00a0\u00a0#\u518d\u6b21\u786e\u8ba4\u8be5\u7528\u6237\u540a\u9500，\u91cc\u9762\u662fR\u7684\u72b6\u6001\u8868\u793a\u8be5\u7528\u6237\u540a\u9500<\/span><\/p>\n

V 280530065405Z 01 unknown \/C=CN\/ST=BJ\/L=Beijing\/O=oldboy\/OU=oldboy\/CN=server\/emailAddress=1441107787@qq.com<\/p>\n

R<\/span> 280530070431Z 180602144203Z 02 unknown \/C=CN\/ST=BJ\/L=Beijing\/O=oldboy\/OU=oldboy\/CN=test\/emailAddress=1441107787@qq.com<\/p>\n

\u4e3a\u4e86\u5f7b\u5e95\u540a\u9500\u8be5\u7528\u6237\u51ed\u8bc1，\u9700\u8981\u5728openvpn\u7684\u914d\u7f6e\u6587\u4ef6server.conf\u4e2d\u6dfb\u52a0：<\/p>\n

[root@localhost 2.0]# echo "crl-verify \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys\/crl.pem" >> \/etc\/openvpn\/server.conf<\/span><\/p>\n

[root@localhost 2.0]# tail -2 \/etc\/openvpn\/server.conf<\/p>\n

log \/var\/log\/openvpn.log<\/p>\n

crl-verify \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys\/crl.pem<\/p>\n

[root@localhost 2.0]# \/etc\/init.d\/openvpn stop<\/span><\/p>\n

[root@localhost 2.0]# ps -ef |grep openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a025725 \u00a01171 \u00a00 22:54 pts\/0 \u00a0\u00a0\u00a000:00:00 grep openvpn<\/p>\n

[root@localhost 2.0]# \/etc\/init.d\/openvpn start<\/span><\/p>\n

[root@localhost 2.0]# ps -ef |grep openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a025741 \u00a0\u00a0\u00a0\u00a01 \u00a00 22:54 ? \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a000:00:00 \/usr\/local\/sbin\/openvpn –daemon –writepid \/var\/run\/openvpn\/server.pid –config server.conf –cd \/etc\/openvpn<\/p>\n

root \u00a0\u00a0\u00a0\u00a025744 \u00a01171 \u00a00 22:54 pts\/0 \u00a0\u00a0\u00a000:00:00 grep openvpn<\/p>\n

\u6b64\u65f6windows\u5ba2\u6237\u7aef\u4e0d\u80fd\u7528test\u7528\u6237\u8fde\u63a5openvpn\u4e86：<\/span><\/p>\n

\"\"<\/p>\n

\u70b9\u51fbconnect\u540e，\u65e0\u6cd5\u8fde\u63a5，\u5982\u4e0b：<\/p>\n

\"\"<\/p>\n

xshell\u4e5f\u8fde\u63a5\u4e0d\u4e0a\u5185\u7f51\u670d\u52a1\u5668：172.16.1.17<\/p>\n

\"\"<\/p>\n

7.\u540a\u9500\u7528\u6237\u7684\u518d\u6b21\u91cd\u65b0\u542f\u7528，\u6062\u590d\u7528\u6237\u62e8\u53f7\u5230vpnserver<\/span><\/p>\n

[root@localhost ~]# vim \/etc\/openvpn\/server.conf<\/p>\n

\u2026\u2026..#\u6700\u540e\u6dfb\u52a0\u7684\u8fd9\u884c\u6ce8\u91ca<\/p>\n

#crl-verify \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys\/crl.pem<\/span><\/p>\n

[root@localhost ~]# tail -3 \/etc\/openvpn\/server.conf<\/p>\n

duplicate-cn<\/p>\n

log \/var\/log\/openvpn.log<\/p>\n

#crl-verify \/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/keys\/crl.pem<\/p>\n

[root@localhost ~]# \/etc\/init.d\/openvpn stop<\/span><\/p>\n

[root@localhost ~]# \/etc\/init.d\/openvpn start<\/span><\/p>\n

[root@localhost ~]# netstat -anptu |grep 52115<\/p>\n

tcp \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00 \u00a0\u00a0\u00a0\u00a0\u00a00 192.168.43.128:52115 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a00.0.0.0:* \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0LISTEN \u00a0\u00a0\u00a0\u00a0\u00a025815\/openvpn \u00a0\u00a0\u00a0\u00a0<\/p>\n

windows\u5ba2\u6237\u7aef\u91cd\u65b0\u8fde\u63a5openvpn：<\/span><\/p>\n

\"\"<\/p>\n

\u70b9\u51fbconnect，\u5982\u4e0b：<\/p>\n

\"\"<\/p>\n

\"\"<\/p>\n

\u7528xshell\u8fde\u63a5\u5185\u7f51\u670d\u52a1\u5668：172.16.1.17 ：\u80fd\u8fde\u63a5\u5230\u5185\u7f51\u670d\u52a1\u5668<\/p>\n

\"\"<\/p>\n

\n

\u5982\u679c\u5bf9\u8fd0\u7ef4\u8bfe\u7a0b\u611f\u5174\u8da3，\u53ef\u4ee5\u5728b\u7ad9\u4e0a\u3001csdn\u6216\u5fae\u4fe1\u89c6\u9891\u53f7 \u4e0a\u641c\u7d22\u6211\u7684\u8d26\u53f7： \u8fd0\u7ef4\u5b9e\u6218\u8bfe\u7a0b，\u53ef\u4ee5\u5173\u6ce8\u6211，\u5b66\u4e60\u66f4\u591a\u514d\u8d39\u7684\u8fd0\u7ef4\u5b9e\u6218\u6280\u672f\u89c6\u9891<\/p>\n

\n","protected":false},"excerpt":{"rendered":"

\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb1.1k\u6b21\uff0c\u70b9\u8d5e28\u6b21\uff0c\u6536\u85cf8\u6b21\u3002\u53cc\u51fbOpenVPN GUI\u56fe\u6807\u8fd0\u884c\u8f6f\u4ef6\u2014\u2014\u53f3\u4e0b\u89d2vpn\u56fe\u6807\u53f3\u51fb\u2014\u2014\u9009\u62e9\u9700\u8981\u8fde\u63a5\u7684vpn\u540d\u79f0test\uff08\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6\uff0c\u6bcf\u4e2a\u8fde\u63a5\u7684\u540d\u5b57\u5c31\u662fovpv\u6587\u4ef6\u5bf9\u5e94\u7684\u540d\u5b57\uff0c\u5f53\u914d\u7f6e\u53ea\u8fde\u63a5\u4e00\u4e2avpn server\u65f6\u5019\uff0c\u5c31\u9ed8\u8ba4\u53ea\u6709connect\uff0c\u6b64\u5904\u662f\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6\u5019\uff09\u2014\u2014\u70b9\u51fbconnet\u3002\u8fdb\u5165\u8f6f\u4ef6\u5b89\u88c5\u76ee\u5f55\u4e0b\u9762\u7684\uff1a\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/_keepalive 10 120<\/p>\n","protected":false},"author":2,"featured_media":27685,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[149,43,44],"topic":[],"class_list":["post-27702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-windows","tag-43","tag-44"],"yoast_head":"\nopenvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/27702.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb1.1k\u6b21\uff0c\u70b9\u8d5e28\u6b21\uff0c\u6536\u85cf8\u6b21\u3002\u53cc\u51fbOpenVPN GUI\u56fe\u6807\u8fd0\u884c\u8f6f\u4ef6\u2014\u2014\u53f3\u4e0b\u89d2vpn\u56fe\u6807\u53f3\u51fb\u2014\u2014\u9009\u62e9\u9700\u8981\u8fde\u63a5\u7684vpn\u540d\u79f0test\uff08\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6\uff0c\u6bcf\u4e2a\u8fde\u63a5\u7684\u540d\u5b57\u5c31\u662fovpv\u6587\u4ef6\u5bf9\u5e94\u7684\u540d\u5b57\uff0c\u5f53\u914d\u7f6e\u53ea\u8fde\u63a5\u4e00\u4e2avpn server\u65f6\u5019\uff0c\u5c31\u9ed8\u8ba4\u53ea\u6709connect\uff0c\u6b64\u5904\u662f\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6\u5019\uff09\u2014\u2014\u70b9\u51fbconnet\u3002\u8fdb\u5165\u8f6f\u4ef6\u5b89\u88c5\u76ee\u5f55\u4e0b\u9762\u7684\uff1a\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/_keepalive 10 120\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/27702.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-19T12:56:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250419125615-68039d6fbc31a.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"20 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/27702.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/27702.html\",\"name\":\"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-04-19T12:56:19+00:00\",\"dateModified\":\"2025-04-19T12:56:19+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/27702.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/27702.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/27702.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/27702.html","og_locale":"zh_CN","og_type":"article","og_title":"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb1.1k\u6b21\uff0c\u70b9\u8d5e28\u6b21\uff0c\u6536\u85cf8\u6b21\u3002\u53cc\u51fbOpenVPN GUI\u56fe\u6807\u8fd0\u884c\u8f6f\u4ef6\u2014\u2014\u53f3\u4e0b\u89d2vpn\u56fe\u6807\u53f3\u51fb\u2014\u2014\u9009\u62e9\u9700\u8981\u8fde\u63a5\u7684vpn\u540d\u79f0test\uff08\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6\uff0c\u6bcf\u4e2a\u8fde\u63a5\u7684\u540d\u5b57\u5c31\u662fovpv\u6587\u4ef6\u5bf9\u5e94\u7684\u540d\u5b57\uff0c\u5f53\u914d\u7f6e\u53ea\u8fde\u63a5\u4e00\u4e2avpn server\u65f6\u5019\uff0c\u5c31\u9ed8\u8ba4\u53ea\u6709connect\uff0c\u6b64\u5904\u662f\u914d\u7f6e\u4e86\u8fde\u63a5\u591a\u4e2avpn server\u65f6\u5019\uff09\u2014\u2014\u70b9\u51fbconnet\u3002\u8fdb\u5165\u8f6f\u4ef6\u5b89\u88c5\u76ee\u5f55\u4e0b\u9762\u7684\uff1a\/data\/application\/openvpn\/openvpn-2.0.9\/easy-rsa\/2.0\/_keepalive 10 120","og_url":"https:\/\/www.wsisp.com\/helps\/27702.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-04-19T12:56:19+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250419125615-68039d6fbc31a.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"20 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/27702.html","url":"https:\/\/www.wsisp.com\/helps\/27702.html","name":"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-04-19T12:56:19+00:00","dateModified":"2025-04-19T12:56:19+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/27702.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/27702.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/27702.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"openvpn2.0.9\u642d\u5efa\u548cwindows\u5ba2\u6237\u7aef\u62e8\u53f7\u8fde\u63a5vpn,\u5e76\u7528xshell\u8fde\u63a5\u673a\u623f\u53ea\u6709\u5185\u7f51\u7684\u670d\u52a1\u5668"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/27702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=27702"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/27702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/27685"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=27702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=27702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=27702"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=27702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}