Shigar da Sabis ɗinku na VPN tare da BuɗeVPN akan Ubuntu 10.04 Server

Shigar da Sabis ɗinku na VPN tare da BuɗeVPN akan Ubuntu 10.04 Server

TAFIYA

Bayan wani lokaci ba tare da nayi posting ba na kawo muku wannan jagorar na yadda ake ƙirƙirar VPN naka akan Ubuntu Server, ko dai don haɗawa zuwa pc na gida ko don amfani da intanet cikin aminci a cikin hanyoyin sadarwar Wi-Fi mara tsaro.

OpenVPN Software ne wanda yake aiki azaman abokin ciniki da sabar bisa ga yadda muke saita shi, Ina bayyana cewa akwai nau'ikan 2 na wannan:
* OpenVPN Software na Jama'a: Shine sigar da zamuyi amfani da ita kuma tana da Buɗe tushen 100%
* Buɗe Server na SamunVPN: Shine sigar da aka biya, zaka iya amfani dashi kyauta kawai har zuwa masu amfani 2, ƙarin masu amfani suna da arha sosai, kuma yana da ƙari kamar su kwamitin gudanarwa na yanar gizo, yana da sauƙin daidaitawa da ƙari.

Gabatarwar

OpenVPN samfurin software ne wanda James Yonan ya kirkira a shekara ta 2001 kuma yana cigaba da inganta tun daga lokacin.

Babu wani mafita da zai ba da irin wannan cakuda-darajar tsaro, tsaro, sauƙin amfani, da wadataccen fasali.

Hanyar mahada ce wacce ta sauƙaƙa sauƙaƙewar VPNs sosai, ta hanyar barin lokutan sauran mafita masu wahala don daidaitawa kamar IPsec da kuma saukaka shi ga mutane marasa ƙwarewa a cikin wannan nau'in fasaha.

A ce muna buƙatar sadarwa da rassa daban-daban na ƙungiya. A ƙasa za mu ga wasu mafita waɗanda aka miƙa don amsawa ga waɗannan nau'ikan buƙatun.

A baya, ana yin sadarwa ta hanyar wasiƙa, tarho ko faks. A yau akwai abubuwan da suka sa ya zama dole a aiwatar da ingantattun hanyoyin haɗin kai tsakanin ofisoshin ƙungiyoyi a ko'ina cikin duniya.

Wadannan dalilai sune:

* Saurin tafiyar da harkokin kasuwanci da karuwar da yake biyo baya cikin bukatar sassauya da saurin musayar bayanai.
* Kungiyoyi da yawa suna da rassa da yawa a wurare daban daban harma da masu aikin waya daga gida, wadanda suke bukatar musayar bayanai ba tare da wani bata lokaci ba, kamar suna tare a zahiri.
* Bukatar cibiyoyin sadarwar komputa don saduwa da manyan ƙa'idodin tsaro waɗanda ke tabbatar da inganci, aminci da kasancewa.

Source: wikipedia

Sabar:

Wannan jagorar don Ubuntu 10.04 Server ne, ina tsammanin yana aiki a cikin wasu sifofin da distros, muna da sabar ubuntu an riga an girka kuma tana aiki.
Mun shigar da OpenVPN da kuma OpenSSL, tunda tsaro ya dogara da ssl.

sudo apt-get -y kafa openvpn sudo apt-get -y kafa openssl

Mun saita OpenVPN Daemon don Ba farawa ta atomatik tare da Tsarin ba
Muna yin tsokaci game da komai ta hanyar ƙara # zuwa farkon kowane layi.

sudo nano / sauransu / tsoho / openvpn

kuma cire rubutun farawa, don hana shi farawa idan kun saita

sudo sabunta-rc.d -f /etc/init.d/openvpn cire

Yanzu mun kirkiro fayil din openvpn.conf a cikin / sauransu / openvpn /

sudo nano /etc/openvpn/server.conf

kuma mun sanya wannan daidaitawar

dev tun proto tcp tashar jiragen ruwa 1194 ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/server.crt key /etc/openvpn/keys/server.key dh /etc/openvpn/keys/dh2048.pem mai amfani ba kowa rukuni na uwar garken nogroup 10.6.0.0 255.255.255.0 ifconfig-pool-persist /etc/openvpn/clients.txt status /etc/openvpn/status.txt naci-key nace-tun tura "tura-ƙofa def1" tura "hanya 192.168.0.0 .255.255.255.0 10 "tsare 120 3 fi'ili 3 comp-lzo max-abokan ciniki XNUMX

kamar yadda kuka gani za'a iya tsara shi, wannan misali ne wanda aka gwada

Idan baku son amfani da vpn don amintaccen intanet, wato, kar ku hau kan intanet daga vpn, cire layin "tura-ƙofa".

Sauran bayanan da za a iya gyara:
* ca, cert, key da dh = sune mahaɗan, takaddun shaida, maɓalli da Diffie Hellman na sabar, zamu ƙirƙira su daga baya.
* sabar 10.6.0.0 255.255.255.0 = shine ip kewayawa da vpn zaiyi amfani da shi, yayi amfani da wani amma, baya amfani da kamfani na ainihi na hanyar sadarwa
* ifconfig-pool-persist ipp.txt = adana wanda aka sanya kowane ip a cikin vpn
* proto da port = yarjejeniya da tashar jiragen ruwa, zaku iya amfani da tcp da utp, a cikin utp bai bani sakamako mai kyau ba, tashar shine zaku iya canza shi.
* duplicate-cn = yana ba da damar yin amfani da takaddun shaida iri ɗaya da maɓallin a cikin abokan ciniki da yawa a lokaci guda, ina ba da shawarar kar a kunna ta.
* up /etc/openvpn/openvpn.up = rubutu ne da yake lodawa openvpn a fara shi, ana amfani da shi ne don KYAUTA da GABATARWA, zamu kirkireshi daga baya.
* abokin ciniki-zuwa-abokin ciniki = shine ya hana masu amfani da vpn ganin junan su, ya danganta da yanayin yana da amfani.
* comp-lzo = matsawa, yana matsa duk zirga-zirgar VPN.
* fi'ili 3 = yana ƙaruwa ko rage bayanin kuskuren akan sabar.
* max-abokan ciniki 30 = matsakaicin adadin masu amfani a lokaci ɗaya an haɗa su zuwa sabar, ana iya ƙaruwa ko raguwa.
* hanyar turawa = yana baka damar gani ko kasancewa akan hanyar sadarwar da ke bayan uwar garken vpn, yi hankali kada ka kunna abokin ciniki-zuwa-abokin ciniki.
* tura «turawa = tilasta abokin ciniki yayi amfani da VPN azaman mashiga.

yanzu mun kirkiro rubutun ne domin tsara shi da kuma fara sabar vpn.

sudo nano /etc/init.d/vpnserver

kuma mun liƙa wannan lambar, canza ip kewayon gwargwadon daidaitawar matakin da ya gabata

#! / bin / sh # vpnserver_start () {echo "VPN Server [OK]" amsa kuwwa 1> / proc / sys / net / ipv4 / ip_forward /etc/init.d/n sake kafa hanyar sadarwa> / dev / null / sbin / iptables -t nat-GASKIYA -s 10.6.0.0/24 -o eth0 -j MASQUERADE / usr / sbin / openvpn --config /etc/openvpn/server.conf 2 >> /etc/openvpn/error.txt 1 >> /etc/openvpn/normal.txt &} vpnserver_stop () {echo "VPN Server [NO]" / usr / bin / killall "openvpn" iptables -F iptables -X /etc/init.d/nakaranta hanyar sake farawa> / dev / null} vpnserver_restart () {vpnserver_stop bacci 1 vpnserver_start} # harka "$ 1" a cikin 'farawa') vpnserver_start ;; 'tsayawa') vpnserver_stop ;; 'sake kunnawa') vpnserver_restart ;; *) vpnserver_start ;; cewa C

yanzu mun sanya izini don aiwatarwa

sudo chmod + x /etc/init.d/vpnserver

Har ila yau da abin da za a saita don farawa ta atomatik tare da tsarin

sudo sabunta-rc.d vpnserver Predefinicións

Da kyau, mun riga mun saita OpenVPN, yanzu dole ne mu kunna tsarin TUN a cikin kwaya, tare da waɗannan layukan, mun ɗora shi kuma shi ke nan

sudo modprobe tun sudo echo "tun" >> / etc / modules

Kamar yadda zaku gani, daidaitawar ba ta da wahala sosai, amma yanzu ya zo mafi jinkirin:

* Createirƙiri 2048bit Diffie Hellman
* Createirƙiri Hukumar Shaida.
* Createirƙiri Takaddun shaida da maɓallan sabar.
* Createirƙiri takaddun shaida da maɓallan kowane mai amfani.

Muna kwafin misalan sauƙin rsa don ƙirƙirar mahaɗan, takaddun shaida, maɓallan da ɓoyayyun abubuwa, waɗanda suke amfani da BuɗeVPN,

sudo cp -R / usr / share / doc / openvpn / misalai / sauki-rsa / / sauransu / openvpn /

yanzu dole ne ka shigar da fayil din inda abubuwan amfani da muka kwafa suke kuma ƙirƙirar babban maɓallin

sudo cp -R / usr / share / doc / openvpn / misalai / sauki-rsa / / sauransu / openvpn / cd /etc/openvpn/easy-rsa/2.0 sudo mkdir keys

Dole ne mu shirya fayil ɗin vars wanda yake cikin /etc/openvpn/easy-rsa/2.0

sudo nano /etc/openvpn/easy-rsa/2.0/vars

kuma muna gyara waɗannan ƙimomin

fitarwa KEY_DIR = "$ EASY_RSA / makullin"

de

fitarwa KEY_DIR = "/ sauransu / openvpn / sauki-rsa / 2.0 / makullin"

shine samarda eh ko a cikin /etc/openvpn/easy-rsa/2.0/keys
mun ci gaba, muna kuma gyara abubuwan don Diffie Hellman na 2048bits

fitarwa KEY_SIZE = 1024

de

fitarwa KEY_SIZE = 2048

kawai muna ɓacewa ne ga mahallin bayarwa

fitarwa KEY_COUNTRY = "US" fitarwa KEY_PROVINCE = "CA" fitarwa KEY_CITY = "SanFrancisco" fitarwa KEY_ORG = "Fort-Funston" fitarwa KEY_EMAIL = "me@myhost.mydomain"

gyara kowane ƙima ga na ƙasarku, lardinku, birni, kamfani da wasiƙa
Misali

fitarwa KEY_COUNTRY = "AR" fitarwa KEY_PROVINCE = "SF" fitarwa KEY_CITY = "Armstrong" fitarwa KEY_ORG = "LAGA-Systems" fitarwa KEY_EMAIL = "info@lagasystems.com.ar"

Kamar yadda kuka ga AR = Argentina, SF = Santa Fe (lardina) da sauran sun fahimci juna.
To yanzu mun shirya don farawa, bi waɗannan matakan zuwa wasiƙar, saboda kuskure kuma komai ya lalace.

muna aiwatarwa

tushe ./vars

kuma ya nemi mu tsabtace idan akwai ƙungiyoyi, takaddun shaida da maɓallan, muna yin shi da jin daɗi

./clean-all

yanzu muna samar da tsaron Diffie Hellman na 2048bits

./build-dh

yanzu mun samar da lasisin hukuma za ta tambaye su bayanai iri daya kamar na fayilolin vars ina ba da shawarar kammala kowannensu, kodayake sun riga sun kasance, babu matsala

./build-ca

Yanzu ne zamu iya samar da takaddun shaida da mabuɗan sabar farko, canza sabar zuwa sunan da kuke so, zai nemi bayanai iri ɗaya kamar na fayilolin vars, ina ba da shawarar kammala kowannensu, kodayake sun riga can , ba kome.

./ka-sa-sabar sabar

Mun riga muna da takaddun shaida da mabuɗan sabar, yanzu abokin ciniki, canza abokin ciniki ga duk sunan da kuke so,
Zai nemi bayanai iri ɗaya kamar na fayilolin vars. Ina ba da shawarar kammala kowane ɗayan, kodayake sun riga sun kasance, babu damuwa.

./ abokin-gini-abokin ciniki

Wannan matakin dole ne a maimaita shi ga kowane abokin ciniki ko mai amfani da yake son haɗuwa da VPN, tuni muna da komai don aiki, a'a, muna buƙatar kwafin fayilolin da muka samar zuwa wurin da muka saita a cikin openvpn.conf
tunda kwafe makullin makullin zuwa / sauransu / openvpn /

sudo cp -R /etc/openvpn/easy-rsa/2.0/keys / sauransu / openvpn /

yanzu mun duba cewa komai yana wurin sa, mun shigar da folda / etc / openvpn / keys

cd / sauransu / openvpn / makullin

kuma tare da ls zamu ga idan fayilolin suna
yanzu mun samar da ƙarin fayil guda ɗaya, ana ƙirƙirar wannan ta hanyar openvpn

sudo openvpn --ndawa - sirrin ta.key

Kuna buƙatar kwafin fayilolin ca.crt, client.crt, client.key, idan kun ƙirƙiri ƙarin abokan ciniki, kwafa crt da mabuɗin kowannensu pendrive ko wasu hanyoyi, kar a yi amfani da imel don aika su, yana kama da bayarwa mabuɗin gidanka ga baƙo.

Shirya, komai yana kan sabar, yanzu mun fara shi don gwada cewa komai daidai ne

sudo /etc/init.d/vpnserver farawa

Idan babu kurakurai, tuni muna da vpn ɗin mu a guje, abokin ciniki ne kawai ya ɓace.

Abokin ciniki:

Wannan jagorar don Ubuntu 10.04 Desktop ne, ina tunanin yana aiki a wasu sifofin da distros, muna da ubuntu an riga an girka yana aiki.
Mun shigar da OpenVPN da kuma OpenSSL, tunda tsaro ya dogara da ssl
kuma kamar yadda za mu yi amfani da Ubuntu Network Manager, dole ne mu shigar da abubuwan haɗin don OpenVPN

sudo apt-get -y kafa openvpn sudo apt-get -y kafa openssl sudo aptitude -y girka network-manager-openvpn

Yanzu muna iya saita abokin cinikinmu misalin daidaitawa:

Tare da editan rubutu, gedit na iya zama, liƙa wannan lambar

abokin ciniki dev tun proto tcp m IP-OF-SERVER PORT kudurin sake gwadawa marar iyaka # mai amfani babu kowa #group babu wanda ya nace-key nace-tun ca cacc abokin ciniki cert.crt key abokin ciniki.key comp-lzo tun-mtu 1500 mai tsare 10 120 aikatau 4

Suna gyara bayanan, IP-DEL-SERVER wannan ita ce jama'a ko intanet na uwar garken da PORT wanda suka sanya su a kan sabar, fayilolin ca.crt, client.crt da client.key sune muka kirkira kuma muka kwafa kafin a cikin pendrive ko komai.

Idan kuna da IP na jama'a mai ƙarfi, ina ba da shawarar amfani da sabis na DDNS (DyDNS, NO-IP, CDMon), kuma kar ku manta da buɗewa da tura tashar 1194 ko wacce kuka zaɓa don sabar.

Suna adana lambar tare da sunan da suke so amma tare da .conf tsawo kuma a cikin babban fayil ɗin kamar ca.crt, client.crt da fayilolin abokin ciniki.key

Yanzu buɗe Ubuntu Network Manager kuma a cikin shafin VPN akwai maɓallin Shigo, bincika fayil ɗin .conf da muka adana kafin kuma shi ke nan.

Ina fatan hakan zai taimaka muku, tunda don yin Openvpn aiki sai na ratsa dukkan jagorori da litattafan da na samo.

Na gode da Ra'ayoyinku, Idan akwai KUSKURE to abin da tunaninku ya samo asali ne, hahaha