Imikorere OpenVPN Seriveri ku madirishya

OpenVPN ni Rimwe Bya i Amahitamo VPN (Virtual Private Network cyangwa imiyoboro abikorera Kitaboneka), bigatuma nawe bikorwa Ibyatanzwe kwanduza ku buryo bwihariye yaremye Bishunzwe umuyoboro. Gutyo, urashobora guhuza mudasobwa ebyiri cyangwa kubaka umuyoboro bwatwara na Seriveri kandi abakiriya benshi. Muri iki gice, turi busuzume Kuri Kurema A Seriveri nko arishinga.

I OpenVPN seriveri

Nk'uko byavuzwe haruguru, abifashijwemo ikoranabuhanga, dushobora kohereza amakuru ku umutekano umuyoboro. Bishobora kuba gusangira dosiye cyangwa kubona umutekano Internet kuri Seriveri ko ari irembo rusange. Kugira Kurema, tuzaba udakeneye ibikoresho by'inyongera n'ubumenyi budasanzwe - byose bikorwa ku mudasobwa ko ari umugambi wo gukoreshwa ari Seriveri VPN.

Kuko umurimo ibindi, bizaba kandi kuba ngombwa Kuri Kugena Imiterere i Umukiriya igice ku mashini Umukoresha urusobe. umurimo bose umanuka irema imfunguzo na impamyabumenyi ko baba rero kuwushyikiriza abakiriya. Idosiye Abo Emera Kuri Kubona aderesi IP igihe isano i Seriveri: na Kurema umuyoboro hejuru Bishunzwe. amakuru yose zandurira mu bishobora gusa gusomwa niba hari urufunguzo. iyi Ikiranga Kuri bugaragara umutekano no guharanira umutekano Ibyatanzwe.

Install OpenVPN ku Machine-seriveri

Installation ni A Bisanzwe uburyo bamwe Inshengero, bikaba kuvugana more.

1. Mbere ya byose, ugomba download gahunda ku link ikurikira.

   Download OpenVPN.

   

2. Next, narirutse installer na gushikira bigize Ihitamo Idirishya. Hano uzokenera gushira igitoro hafi kugeza na izina "Easyrsa", bikaba Emera Kuri Kurema Idosiye icyemezo na Utubuto, Nka Nka gucunga bo.

   

3. Intambwe ikurikira ni guhitamo ahantu Kwinjiza porogaramu. Ku byo kworoshya, gushyira gahunda yo umuzi Sisitemu Disiki S :. Gukora iyi, gusa Gusiba cyane. Ikwiye gukora hanze

   C: \ OpenVPN

   

   Tubikora kugira ngo amakosa birinda iyo bikorwa Inyandikoporogaramu, kuva Imyanya mu nzira ntibemerewe. Ushobora Birumvikana, gufata mu Quotes, ariko yitwararitse ushobora no make, no Kureba amakosa mu Inyandikoporogaramu - rubanza ntibyoroshye.

4. Nyuma Igenamiterere bose, Kwinjiza porogaramu i Porogaramu in Ubwoko busanzwe.

Iboneza Seriveri igice

Iyo gukora ibikorwa bikurikira bikwiye kuba bitonze uko bishoboka. utunenge wese bizatuma ku inoperability ya Seriveri. ukurushaho Ikindi - konti yawe agomba kuba uburenganzira umuyobozi.

1. Twajya kuri "Easy-RSA" Agatabo, bikaba mu bitwerekeye riri

   C: \ OpenVPN \ Easy-RSA

   Shaka vars.bat.sample Idosiye.

   

   Izina ngo Vars.Bat (Turi Gusiba ijambo "enyanjura" hamwe A Akadomo).

   

   Gufungura Idosiye iyi mu Ikarine ++ Muhinduzi. Ibi ni ngombwa kubera ko ari ikaye iyi Kuri neza Kwandika na save kode, bikaba bifasha kwirinda amakosa igihe akora bo.

   

2. Mbere ya byose, tugomba gusiba comments zose yagenewe kibisi - bazaba gusa kwivanga natwe. Twabonye ibi bikurikira:

   

3. Next, guhindura inzira ku "Easy-RSA" Ububiko ku umwe bivugwa mu iyinjizaporogaramu. Muri urwo rubanza, gusa Gusiba Impinduragaciro ku% programfiles% na Guhindura ku C :.

   

4. Bikurikira Ibigenga bane Ibumoso.

   

5. Imirongo isigaye kuzuza bw'urugomo. Urugero ku i.

   

6. Kubika i Idosiye.

   

7. Ugomba no Kwandika i Idosiye bikurikira:
   • Ubaka-Ca.Bat.
   • Ubaka-Dh.Bat.
   • Kubaka-Key.Bat.
   • Kubaka-Key-Pass.bat
   • Kubaka-Key-PKCS12.Bat
   • Kubaka-Key-Server.bat

   

   Bagomba guhindura ikipe

   OpenSSL.

   Ku nzira busesuye ku bijyanye OpenSSL.EXE Idosiye. Ntiwibagirwe kuzigama impinduka.

   

8. Ubu Gufungura "Easy-RSA" Ububiko, gufatisha mitekerereze no Kanda ku PCM ku ahantu free (si ku Idosiye). Mu Imvugiro Ibikubiyemo, Guhitamo "Open itegeko idirishya" Ikintu.

   

   Mu "Command Line" atanguye na inzibacyuho ngo Intego Ububiko yamaze bikorwa.

   

9. Twinjije itegeko ryerekanwe hepfo hanyuma ukande Enter.

   vars.bat.

   

10. Next, gutangiza undi "irobe Idosiye".

    Clean-all.bat.

    

11. Turi gusubiramo itegeko mbere.

    

12. Intambwe ikurikira ni Kuri Kurema i Idosiye ngombwa. Gukora iyi, Koresha ikipe

    Ubaka-Ca.Bat.

    Nyuma bikorwa gahunda, bizaba gutanga kwemeza Ibyatanzwe ko twinjira Idosiye VARS.BAT. Nk'uko Kanda inshuro nyinshi kugeza abonekera mbere Ikurikiranyanyuguti.

    

13. Kurema A DH nyamukuru ukoresheje Idosiye Gutangira

    Ubaka-Dh.Bat.

    

14. Kurema A Impamyabushobozi kuko Seriveri igice. Hari ngombwa kimwe hano. Agomba Kugenera izina ko kwiyandikisha mu Vars.Bat mu "key_name" Umusitari. Mu rugero rwacu, ni Lumpics. Itegeko risa nkiyi:

    Kubaka-Key-Server.bat Lumpics

    Nanone agomba kwemeza Ibyatanzwe ikoresha Kwinjira urufunguzo, kandi ebyiri kwinjira ibaruwa "Y" (YEGO), aho bizaba ngombwa (reba Screenshot). Command Umurongo ashobora gufungwa.

    

15. Mu rutonde yacu "Easy-RSA" A Ububiko nshya appeared ifite umutwe "Keys".

    

16. Ibirimo yayo agomba yimuwe kandi zikavamo mu "SSL" Ububiko, bikaba ushaka Kurema mu Ububiko umuzi gahunda.

    

    View Ububiko nyuma inserting Idosiye Cyavanyweho:

    

17. Ubu tugiye Agatabo mu

    C: \ OpenVPN \ config

    Kurema A Umwandiko Inyandiko hano (PCM - Kurema - Text Document), Guhindura izina i Server.OVPN na Gufungura in Ikarine ++. Turi gutangiza code akurikira:

    Port 443.

    Proto Udp.

    TV.

    Dev-Node "VPN Lumpics"

    DH C: \\ OpenVPN \\ SSL \\ DH2048.PEM

    CA C: \\ OpenVPN \\ SSL \\ CA.CRT

    CERT C: \\ OpenVPN \\ SSL \\ Lumpics.crt

    NYAMUKURU C: \\ OpenVPN \\ SSL \\ Lumpics.Key

    Seriveri 172.16.10.0 255.255.255.0.

    Max-abakiriya 32

    Keepalive 10 120.

    Umukiriya-to-Umukiriya

    Comp-lzo.

    Gutsimbarara.

    Gutsimbarara.

    Cipher Des-CBC

    Irangamimerere C: \\ OpenVPN \\ Injira \\ Status.log

    Injira C: \\ OpenVPN \\ LOG \\ OpenVPN.log

    Inshinga 4.

    Mute 20.

    Impugukirwa amazina ya impamyabumenyi na Utubuto agomba BIHUYE i "SSL" Ububiko.

    

18. Next, Gufungura "Control Panel" no kujya mu "Network Management Centre".

    

19. Kanda ku "Guhindura Adapter Settings" link.

    

20. Hano dukeneye kubona isano binyuze "tap-Windows Adapter V9". Ushobora gukora iyi ku ku i Ukwihuza PCM maze bahindukirira imitungo yayo.

    

21. Izina ngo "VPN Lumpics" nta Quotes. Iryo zina agomba BIHUYE i "Dev-Node" Ikintu in i Idosiye Server.OVPN.

    

22. Final stage - mugaragaro serivisi. Itangazamakuru Win + R imfunguzo Ivanga, kwinjira Ikurikiranyanyuguti hepho hanyuma ukande Enter.

    Serivisi.msc.

    

23. Tubona serivisi na izina "OpenVPNService", Kanda PKM ujye imitungo yayo.

    

24. Tangira guhindura ubwoko ngo "bwikora", kwiruka serivisi na Kanda "Apply".

    

25. Niba twese bikorwa neza, maze umusaraba utukura ni ikuzimu hafi adabutateri ku. Ibi bisobanura ko Ukwihuza yiteguye igikorwa.

    

Gushyiraho Hejuru A Umukiriya igice

Mbere yo gutangira umukiriya Imikorere, uze ukore intambwe nyinshi ku mashini Seriveri - Kuri Utubuto na Impamyabushobozi Kuri Kugena Ukwihuza.

1. Twajya kuri "Easy-RSA" Ububiko, Hanyuma mu "Keys" Ububiko na Gufungura i Idosiye index.txt.

   

2. Gufungura Idosiye, Gusiba i Ibigize bose no gukiza.

   

3. Subira "Easy-RSA" na Gukoresha A "command Umurongo" (Shift + PCM - Open amategeko Idirishya).
4. Next, kumurika Vars.Bat, hanyuma Kurema A Impamyabushobozi Umukiriya.

   Kubaka-Key.Bat VPN-umukiriya

   

   Ibi ni icyemezo rusange kuko imashini bose ku urusobe. Kongerera umutekano, ushobora bibyara Idosiye buri mudasobwa, ariko kubita butandukanye (si "VPN-umukiriya", ariko "VPN-Client1" n'ibindi). Muri urwo rubanza, bizaba ngombwa gusubiramo ibikorwa byose, uhereye ku index.txt isuku.

5. Final bikorwa - Amadosiye vpn-client.crt, VPN-Client.key, ca.CRT na DH2048.PEM ngo umukiriya wa. Ushobora gukora ibi mu buryo kubonera Urugero, kwandika ku USB flash drive cyangwa kwimura urusobe.

   

Works ko bikenewe gukorwa ku mashini Umukiriya:

1. Install OpenVPN mu buryo bisanzwe.
2. Gufungura Ububiko na gahunda iyinjizaporogaramu na Gyayo Kuri i "config" Ububiko. Ugomba Ongeramo yacu Idosiye icyemezo na Utubuto.

   

3. Mu Ububiko kimwe, Kurema A Umwandiko Idosiye na Guhindura izina mu config.ovpn.

   

4. Gufungura code akurikira mu Muhinduzi na kukwandikira:

   Umukiriya.

   Icyemezo-retry kitagira iherezo

   Nobind.

   Remote 192.168.0.15 443.

   Proto Udp.

   TV.

   Comp-lzo.

   CA CA.CRT.

   CERT VPN-Client.crt

   Key VPN-Client.Key

   DH DH2048.PEM.

   guhinduka gwagacyiro

   Cipher Des-CBC

   Keepalive 10 120.

   Gutsimbarara.

   Gutsimbarara.

   Inshinga 0.

   Mu "Remote" Umusitari, ushobora kwiyandikisha aderesi external IP ya machine Seriveri - rero tuzabana kugera interineti. Niba kuva byose nk'uko biri, bizaba bishoboka gusa guhuza Seriveri ku muhora Bishunzwe.

5. Turi kwiruka OpenVPN GUI ku izina rya umuyobozi ikoresha A Iy ku Ibiro, Hanyuma & Ongera i Agashushondanga ibereye mu Agasanduku ku, Kanda PCM na Guhitamo i Ikintu mbere na izina "Kwihuza".

   

Ibi ni i Iboneza Bya i Seriveri: na OpenVPN Umukiriya barangije.

Umwanzuro

Imiterere ya VPN bwite zayo Emera Kuri kuhungukira amakuru zandurira, ndetse yafashe Internet imihora umutekano. Ikintu nyamukuru ni kwitonda igihe Iboneza ku i Seriveri: na Umukiriya igice, ushobora gukoresha ibyiza byose mu urusobemiyoboro Kitaboneka.