搭建openvpn服务器桥接模式.doc

《搭建openvpn服务器桥接模式.doc》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、服务器rhel5.8-64bit软件版本openvpn-2.0.9.tar.gz(安装包)openvpn-2.0.9-gui-1.0.3-install.exe(客户端)lzo-2.03.tar.gzopenssl系统自带1.安装openssl[root@samba-wikiopenvpn]#yuminstallopenssl.x86_64-y2.安装lzo[root@samba-wikilzo-2.03]#./configure[root@samba-wikilzo-2.03]#make[root@samba-wikilzo-2.03]#makeins

2、tall3.安装OpenVPN[root@samba-wikiopenvpn-2.0.9]#./configure--enable-pthread[root@samba-wikiopenvpn-2.0.9]#make&&makeinstall4.配置TUN/TAP驱动，并且启用IP转发[root@samba-wikiopenvpn]#modprobetun[root@samba-wikiopenvpn]#lsmod

3、greptuntun822412[root@samba-wikiopenvpn]#vim/etc/sysctl.conf修改net.ipv4

4、.ip_forward=0为1，使配置生效[root@samba-wikiopenvpn]#sysctl-p5.配置openvpnA.生成证书第一步，设置环境变量[root@samba-wikiopenvpn]#vim/root/.bash_profile在最后添加这几行DIR=/usr/src/openvpn/openvpn-2.0.9/easy-rsaKEY_CONFIG=$DIR/openssl.cnfKEY_DIR=$DIR/keysKEY_SIZE=1024KEY_COUNTRY=CNKEY_PROVINCE=BJKEY_CITY=BJKEY_

5、ORG="creditease"KEY_EMAIL="yulindong@creditease.cn"exportKEY_CONFIGKEY_DIRKEY_SIZEKEY_COUNTRYKEY_PROVINCEKEY_CITYKEY_ORGKEY_EMAILDIR使环境变量生效[root@samba-wikiopenvpn]#source/root/.bash_profile第二步，生成证书1.进入安装包的easy-rsa目录[root@samba-wikieasy-rsa]#pwd/usr/src/openvpn/openvpn-2.0.9/easy-

6、rsa2.生成CA证书[root@samba-wikieasy-rsa]#./clean-all[root@samba-wikieasy-rsa]#./build-ca3.生成服务器Key[root@samba-wikieasy-rsa]#./build-key-serverserver4.生成客户端Key[root@samba-wikieasy-rsa]#./build-keychenyu#这里以用户名字命名key[root@samba-wikikeys]#lschenyu.*chenyu.crtchenyu.csrchenyu.key#可以看到生成了

7、chenyu的相关证书[root@samba-wikieasy-rsa]#./build-dh5.生成ta.key[root@samba-wikieasy-rsa]#openvpn--genkey--secretta.keyB.创建OpenVPN配置文件[root@samba-wikieasy-rsa]#vi/usr/local/etc/server.confport2194prototcpdevtap0server-bridge10.10.37.2255.255.255.010.10.37.12810.10.37.254push"dhcp-option

8、DNS192.168.101.13"push"dhcp-optionDNS192.168.101.14"ifconfig-pool-persist/usr/local/etc/ipp.txtca/usr/local/etc/keys/ca.crtcert/usr/local/etc/keys/server.crtkey/usr/local/etc/keys/server.keydh/usr/local/etc/keys/dh1024.pemtls-auth/usr/local/etc/keys/ta.key0keepalive10120comp-lzos

9、tatus/var/log/openvpn-status.logverb4per