Board logo

標題: [教學]LaFonera flash 做 DD-WRT + OpenVPN Server [打印本頁]
作者: nissin    時間: 2010-10-13 15:26     標題: [教學]LaFonera flash 做 DD-WRT + OpenVPN Server

事前準備:
1. LaFonera 一隻
2. 有NIC的PC一部
3. FonFlash
4. DD-WRT (Console image)

================================================
1. 將LaFonera 的Wan port 用Lan線連接PC, router 不需要插電
2. 開啟FonFlash, 介面如下
[attach]9642[/attach]
3. Network Interface選擇連接到router的NIC
4. Firmware Type 選擇DD-WRT
5. 選擇Firmware 所在路徑
6. Click "Flash Router Now!"
7. 把Router 接上電源, 耐心等侯約20分鐘到1小時, 直至出現完成字樣
作者: nissin    時間: 2010-10-13 15:31

DD-WRT 轉返做原廠firmware 方法
1. LaFonera 一隻
2. 有NIC的PC一部
3. FonFlash
4. LaFonera Firmware (請自行 Google)

================================================
1. 第1到3步同上
2. LaFonera 2100 請選擇OpenWRT / Gargoyle
    其他請選擇Fonera Firmware
3. 第5到7步同上
作者: nissin    時間: 2010-10-13 15:58

OpenVPN Server 安裝方法.....
詳細步驟我忘記了

請參考 openvpn.com 及 dd-wrt wiki

建立cert (for windows)
  1. 開個command prompt
  2. cd \Program Files\OpenVPN\easy-rsa
  3. 執行init-config
  4. edit vars.bat (設定KEY_COUNTRY, KEY_PROVINCE, KEY_CITY, KEY_ORG, KEY_EMAIL, 並可修改KEY_SIZE)
  5. 執行vars
  6. 執行clean-all
  7. 執行build-ca
  8. 執行build-key-server server (建立server cert)
  9. 執行build-key client1 (建立client cert, 多client者可重複做)
  10. 執行build-dh.bat
複製代碼
完成
作者: nissin    時間: 2010-10-13 17:00

OpenVPN Server / Client 設定

Client.ovpn
  1. client
  2. dev tap
  3. proto udp
  4. remote (server's WAN IP)
  5. port 443
  6. resolv-retry infinite
  7. nobind
  8. persist-key
  9. persist-tun
  10. tun-mtu 1500
  11. tun-mtu-extra 32
  12. mssfix 1450
  13. ca ca.crt
  14. cert client1.crt
  15. key client1.key
  16. #remote-cert-tls server
  17. ns-cert-type server
  18. comp-lzo
  19. verb 3
  20. route-gateway (server's LAN IP e.g. 192.168.10.1)
  21. redirect-gateway
  22. route-method exe
  23. route-delay 2
複製代碼
=============================================================

OpenVPN's startup script
  1. cd /tmp
  2. openvpn --mktun --dev tap0
  3. brctl addif br0 tap0
  4. ifconfig tap0 0.0.0.0 promisc up

  6. echo '
  7. # Tunnel options
  8. mode server       # Set OpenVPN major mode
  9. proto udp         # Setup the protocol (server)
  10. port 443          # TCP/UDP port number
  11. dev tap0          # TUN/TAP virtual network device
  12. keepalive 15 60   # Simplify the expression of --ping
  13. daemon            # Become a daemon after all initialization
  14. verb 3            # Set output verbosity to n
  15. comp-lzo          # Use fast LZO compression

  17. # OpenVPN server mode options
  18. client-to-client  # tells OpenVPN to internally route client-to-client traffic
  19. duplicate-cn      # Allow multiple clients with the same common name

  21. # IP Address Routing
  22. # push "route 192.168.10.0 255.255.255.0"
  23. # server 192.168.10.0 255.255.255.0
  24. # Above IP addresses need to change to be your own address


  27. # TLS Mode Options
  28. tls-server        # Enable TLS and assume server role during TLS handshake
  29. ca ca.crt         # Certificate authority (CA) file
  30. dh dh2048.pem     # File containing Diffie Hellman parameters
  31. cert server.crt   # Local peers signed certificate
  32. key server.key    # Local peers private key
  33. ' > openvpn.conf

  35. echo '
  36. -----BEGIN CERTIFICATE-----
  37. (把ca.crt的內容貼在這裡)
  38. -----END CERTIFICATE-----
  39. ' > ca.crt
  40. echo '
  41. -----BEGIN RSA PRIVATE KEY-----
  42. (把server.key的內容貼在這裡)
  43. -----END RSA PRIVATE KEY-----
  44. ' > server.key
  45. chmod 600 server.key
  46. echo '
  47. -----BEGIN CERTIFICATE-----
  48. (把server.crt的內容貼在這裡)
  49. -----END CERTIFICATE-----
  50. ' > server.crt
  51. echo '
  52. -----BEGIN DH PARAMETERS-----
  53. (把dh*.pem的內容貼在這裡)
  54. -----END DH PARAMETERS-----
  55. ' > dh2048.pem

  57. sleep 5
  58. ln -s /usr/sbin/openvpn /tmp/myvpn
  59. /tmp/myvpn --config openvpn.conf
複製代碼
OpenVPN 其他設定
Firewall: Off
作者: nissin    時間: 2010-10-18 15:12

updated



歡迎光臨 PC Infinity (http://pcinhk.com/discuz/) Powered by Discuz! 7.0.0