centos7中openvpn配置实例
时间: 2023-10-16 20:06:06 浏览: 41
对于您的问题,我可以提供以下配置实例:
1. 安装openvpn软件包:`yum install openvpn`
2. 创建一个名为`server.ovpn`的文件,并添加以下内容:
```
port 1194
proto udp
dev tun
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
auth SHA256
keepalive 10 120
```
3. 创建一个名为`client.ovpn`的文件,并添加以下内容:
```
client
dev tun
proto udp
remote SERVER_IP_ADDRESS 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/client1.crt
key /etc/openvpn/easy-rsa/keys/client1.key
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 1
cipher AES-128-CBC
auth SHA256
```
4. 生成证书和密钥:
```
cd /etc/openvpn/easy-rsa
./easyrsa init-pki
./easyrsa build-ca
./easyrsa build-server-full server
./easyrsa gen-dh
./easyrsa build-client-full client1
openvpn --genkey --secret ta.key
```
5. 启动openvpn服务:`systemctl start openvpn@server`
以上是一个简单的openvpn配置实例,希望能对您有所帮助。