1.

Simple VPN
server (host only)172.16.0.2/24 gw 172.168.0.1----------------------------------------may1: (host only) 172.16.0.1/24----------------------------bridge 192.168.1.119/24 dns 8.8.8.8
---may2:bridge 192.168.1.219/24 dns 8.8.8.8-----------------------host-only 10.0.0.2/24
----------------client(host-only) 10.0.0.3/24 gw 10.0.0.2
may1+2
vi /etc/yum.repos.d/dag.repo
[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
gpgcheck=1
enabled=1
wget http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
rpm --import RPM-GPG-KEY.dag.txt
yum -y install openvpn
rm /etc/yum.repos.d/dag.repo
#rpm -ivh bridge-utils-1.1-2.i386.rpm
vi /etc/sysctl.conf
dng 7: Thay gi tri 0 thnh 1
echo "1" > /proc/sys/net/ipv4/ip_forward
BUOC2
may1:
/usr/sbin/openvpn --remote 192.168.1.219 --dev tun1 --ifconfig 192.168.2
.21 192.168.2.22
may2:
/usr/sbin/openvpn --remote 192.168.1.119 --dev tun1 --ifconfig 192.168.2
.22 192.168.2.21
may1:
route add -net 10.0.0.0 netmask 255.255.255.0 gw 192.168.2.22
may2:
route add -net 172.16.0.0 netmask 255.255.255.0 gw 192.168.2.21
route -n de xem dinh tuyen
route del de xoa dinh tuyen
2. Static Key VPN
b1:

cd /usr/share/doc/openvpn-2.2.2/
openvpn --genkey --secret key
scp key root@192.168.1.219:/usr/share/doc/openvpn-2.2.2/
b2:
may1:
/usr/sbin/openvpn --remote 192.168.1.219 --dev tun1 --ifconfig 192.168.2
.21 192.168.2.22 --secret /usr/share/doc/openvpn-2.2.2/key
may2:
/usr/sbin/openvpn --remote 192.168.1.119 --dev tun1 --ifconfig 192.168.2
.22 192.168.2.21 --secret /usr/share/doc/openvpn-2.2.2/key
may1:
route add -net 10.0.0.0 netmask 255.255.255.0 gw 192.168.2.22
may2:
route add -net 172.16.0.0 netmask 255.255.255.0 gw 192.168.2.21
netstat -anp | grep :1194
pkill openvpn
may3:

3. TLS-enabled VPN
may1 dng vai tr CA
lam tren may1:
cd /etc/openvpn
mkdir easy-rsa
cp -R /usr/share/doc/openvpn-2.2.2/easy-rsa/2.0/* easy-rsa/
chmod -R 777 easy-rsa/
cd easy-rsa/
. ./vars
./clean-all
./build-ca
ll keys
(ca.crt ca.key)
./build-key-server server1
./build-key server2
./build-dh

ln -s /etc/openvpn/easy-rsa/keys /etc/openvpn/keys
scp -r /etc/openvpn/keys/ root@192.168.1.219:/etc/openvpn
b2:
may1:
# /usr/sbin/openvpn --remote 192.168.1.219 --dev tun1 --ifconfig 192.168
.2.21 192.168.2.22 --tls-server \
--dh /etc/openvpn/keys/dh1024.pem --ca /etc/openvpn/keys/ca.crt \
--cert /etc/openvpn/keys/Server1.crt --key /etc/openvpn/keys/Server1.key
\
--reneg-sec 60 --verb 5
may2:
# /usr/sbin/openvpn --remote 192.168.1.119 --dev tun1 --ifconfig 192.168
.2.22 192.168.2.21 --tls-client \
--ca /etc/openvpn/keys/ca.crt --cert /etc/openvpn/keys/Server2.crt --key
/etc/openvpn/keys/Server2.key \
--reneg-sec 60 --verb 5
b3: Server Script - server1
tao file cau hinh
vi /etc/openvpn/server.conf
local 192.168.1.119
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server1.crt
key /etc/openvpn/keys/server1.key
dh /etc/openvpn/keys/dh1024.pem
tls-server
ifconfig 192.168.2.21 192.168.2.22
push "route 10.0.0.0 255.255.255.0"
route 10.0.0.0 255.255.255.0
keepalive 10 120
comp-lzo
user nobody
group nobody
status openvpn-status.log
verb 3
b4: Client Script - server2(lam tren may 2)
vi /etc/openvpn/client.conf

client
dev tun
local 192.168.1.219
port 1194
proto udp
tls-client
remote 192.168.1.119
ifconfig 192.168.2.22 192.168.2.21
#nobind
; version 2.1.4 bo nobind
persist-key

persist-tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server2.crt
key /etc/openvpn/keys/server2.key
comp-lzo
verb 3
push "route 172.16.0.0 255.255.255.0"
route 172.16.0.0 255.255.255.0
service openvpn start (tren 2 may)