نصب vpn شخصی

[MelatHOST]

من الان به همين صورت آنلاين شدم
مطمئنيد تمام مراحل را درست طي كرديد؟

[alimosavi]

من الان به همين صورت آنلاين شدم
مطمئنيد تمام مراحل را درست طي كرديد؟

سلام . یکجایی خوندم باید به سرور اجازه ارتباط دو طرفه رو بدی . من یادم نیست این مورد رو ست کردم یا نه . کامنتی الان یادتون هست ؟

احتمالا مشکل openvpn هم همین بوده . یادم رفته بود کلا .

[alimosavi]

راحترین راه نصب openvpn :

# To install the EPEL yum repo, run the following command:

sudo rpm -ihv http://download.fedora.redhat.com/pu...5-2.noarch.rpm

Change the architecture and version appropriately for your machine.
# Install OpenVPN with the following command:

yum install openvpn

# For now I will setup OpenVPN to route rather than bridge. Later I will likely bridge two remote networks.
# Generate the Master Certificate Authority. Copy the templates files into place:

sudo cp -r /usr/share/openvpn/easy-rsa/2.0 /etc/openvpn/certs

Now cd into /etc/openvpn/certs and edit the var file. The only thing I changed was the last five lines containing the location information. Now run the following commands

sudo su
. ./vars
./clean-all
./build-ca

Note that you want to be root when running these commands because the vars script alters your environment, and they will get lost if you are using sudo on each command individually.
# Generate certificate & key for server.

./build-key-server server_name

I left challenge password empty and answered yes to signing and committing the certificate.
# Generate client certificates

./build-key client1

# Build Diffie Hellman data

./build-dh



Now you need to make a few changes to the /etc/openvpn/server.conf. You need to change the red parameters to match your network configuration.

port 1194
dev tap

tls-server

dh dh1024.pem
ca ca.crt
cert server.crt
key server.key

auth-user-pass-verify ./validate.sh via-env
client-disconnect ./logoff.sh

up ./openvpn.up

mode server
duplicate-cn
ifconfig 192.168.100.1 255.255.255.0

ifconfig-pool 192.168.100.100 192.168.100.200 255.255.255.0 # IP range for OpenVPN clients

mtu-test
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ping 10
ping-restart 120

push "ping 10"
push "ping-restart 60"

push "dhcp-option DOMAIN yourdomain.com" # push the DNS domain suffix
push "dhcp-option DNS 192.168.1.1" # push primary DNS entry to the openvpn clients.
push "route 192.168.1.0 255.255.255.0 192.168.100.1" # add route to to protected network

comp-lzo
status-version 2
status openvpn-status.log
verb 3

The last thing you need to do before the installation is complete is to do a small change in the /etc/openvpn/openvpn.up file. Change the 192.168.1.1 value to match router you used when adding a local network.
#!/bin/sh

route del -net 192.168.100.0 netmask 255.255.255.0 gw 192.168.1.1
route del -net 192.168.100.0 netmask 255.255.255.0 dev tap0
route add -net 192.168.100.0 netmask 255.255.255.0 gw 192.168.100.1



When you have changed the file to match your network we start the service.
[root@sme home]# service openvpn start