OpenVPN with Multi site-to-site

openvpn

adaam 2011-04-19 21:14:38 ‧ 9131 瀏覽

分享至

想請問一下有人作過利用VPN將兩三個不同地方的網路串起來形成一個區域網路嗎？
感覺有點像是兩個分公司都連線到總公司的VPN server，然後可以透過VPN互相存取分公司底下的電腦資源
google有找到一些資料，不過還是不大清楚設定檔要怎麼設定
找到的資料：http://www.linuxquestions.org/questions/linux-networking-3/multiple-site-2-site-openvpn-connections-570996/

adaam iT邦新手 5 級 ‧ 2011-05-11 10:35:56 檢舉

感謝兩位的協助，後來我是採用OpenVPN的client/server架構來解決這個問題

adaam iT邦新手 5 級 ‧ 2011-05-11 10:36:01 檢舉

以下是我server設定檔

# Tunnel options
mode server       # Set OpenVPN major mode
proto udp         # Setup the protocol (server)
port 1194         # TCP/UDP port number
dev tap0          # TUN/TAP virtual network device
keepalive 15 60   # Simplify the expression of --ping
daemon            # Become a daemon after all initialization
verb 3            # Set output verbosity to n
comp-lzo          # Use fast LZO compression

# OpenVPN server mode options
client-to-client  # tells OpenVPN to internally route client-to-client traffic
duplicate-cn      # Allow multiple clients with the same common name
mute-replay-warnings

ifconfig-pool 10.8.0.10 10.8.0.254 255.255.255.0 # Set ip pool for VPN client
push "route 10.8.0.0 255.255.255.0" # push route rule
ifconfig-pool-persist ipp.txt # Maintain a record of client <-> virtual IP address


# TLS Mode Options
tls-server        # Enable TLS and assume server role during TLS handshake
ca ../keys/

adaam iT邦新手 5 級 ‧ 2011-05-11 10:37:28 檢舉

以下是我client的設定檔

client
daemon
dev tap0
proto udp
remote SERVER_IP 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert VPNtest.crt
key VPNtest.key
ns-cert-type server
comp-lzo
verb 3

log-append openvpn.log

登入發表討論