参考:https://help.ubnt.com/hc/en-us/articles/204949694-EdgeMAX-OpenVPN-Site-to-Site
不同的是,我一端是Ubuntu Linux,另一端是EdgeRouter Lite。
实现的目的也是让EdgeRouter连上远程vpn实现XXXX。
PPTP的方案参考:EdgeOS PPTP VPN客户端配置
环境
Ubuntu Linux, 10.99.99.2
EdgeRouter Lite, 10.99.99.1
配置EdgeRouter Lite
SSH到Ubnt EdgeRouter Lite
生成共享密钥文件
1 |
generate vpn openvpn-key /config/auth/secret |
执行命令创建VPN
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
configure set interfaces openvpn vtun0 set interfaces openvpn vtun0 mode site-to-site set interfaces openvpn vtun0 remote-host 服务器公网地址 set interfaces openvpn vtun0 shared-secret-key-file /config/auth/secret set interfaces openvpn vtun0 local-address 10.99.99.1 set interfaces openvpn vtun0 remote-address 10.99.99.2 set interfaces openvpn vtun0 local-port 1194 set interfaces openvpn vtun0 remote-port 1194 set interfaces openvpn vtun0 openvpn-option --comp-lzo set interfaces openvpn vtun0 openvpn-option --float set interfaces openvpn vtun0 openvpn-option "--ping 10" set interfaces openvpn vtun0 openvpn-option "--ping-restart 20" set interfaces openvpn vtun0 openvpn-option --ping-timer-rem set interfaces openvpn vtun0 openvpn-option --persist-tun set interfaces openvpn vtun0 openvpn-option --persist-key set interfaces openvpn vtun0 openvpn-option "--user nobody" set interfaces openvpn vtun0 openvpn-option "--group nogroup" commit save exit |
执行命令启用NAT
1 2 3 4 5 6 |
configure set service nat rule 5020 outbound-interface vtun0 set service nat rule 5020 type masquerade commit save exit |
如果需要重启tunnel
1 |
reset openvpn interface vtun0 |
配置Linux
安装openvpn
1 |
apt-get install openvpn |
把EdgeRouter的 /config/auth/secret 复制到 /etc/openvpn/er-site2site-static.key
编辑 /etc/openvpn/server.conf
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 |
dev tun ifconfig 10.99.99.2 10.99.99.1 secret /etc/openvpn/er-site2site-static.key lport 1194 rport 1194 user nobody group nogroup comp-lzo ping 10 ping-restart 20 ping-timer-rem persist-tun persist-key verb 3 status /var/log/openvpn/openvpn-status.log log-append /var/log/openvpn/openvpn.log |
启动openvpn
1 |
/etc/init.d/openvpn start |
测试
在EdgeRouter ping Linux
1 |
ping 10.99.99.2 |
在Linux ping EdgeRouter
1 |
ping 10.99.99.1 |
如果还有问题,可以看日志
配置路由
参考下一篇文章 UBNT EdgeOS 配置设备路由(interface-route)的方法
Incoming search terms:
- merelyf89
- 域名 site-to-site vpn ubnt
- ubnt site to site document
- thisah1
- proudbt2
- properly7qi
- previous9gw
- pitchbma
- ordinarya4o
- atom1ev
- ill5l2
- heartwnn
- healthixh
- goodyze
- existvl6
- exactlynrr
- edge openvpn