OpenWRT OpenVPN 异地组网

发表于： 2023-08-07 更新于： 2023-08-08 分类于： openwrt

字数： 392 阅读：≈ 1分钟浏览：

构建OpenWRT-22.03.5

官方仓库: https://github.com/openwrt/openwrt.git
插件地址: https://github.com/czy21/openwrt-plugin.git
Network > VPN
LuCI -> Applications

服务端

服务端需在公网下可访问,具体端口可自行指定

配置OpenVPN服务端ovpn文件; server_01.ovpn

dev tun
proto tcp
comp-lzo yes
persist-key
persist-tun
cipher AES-256-CBC
verb 3
keepalive 10 120
port <port>
server 10.8.10.0 255.255.255.0
topology subnet
duplicate-cn
auth-user-pass-verify "/etc/openvpn/auth.sh /etc/openvpn/server_01.auth" via-env
; 向客户端推送服务端所在内网的路由
push "route 192.168.8.0 255.255.255.0"
; 向客户端推送服务端的dns
push "dhcp-option DNS 192.168.8.1"
push "dhcp-option DNS 114.114.114.114"
log /var/log/openvpn.server_01.log
username-as-common-name
client-to-client
; 配置客户端ip,文件名为账号
client-config-dir /etc/openvpn/server_01_ccd
; 需要服务端内网访问客户端内网时需添加客户端内网路由
; route 192.168.9.0 255.255.255.0
<ca>
</ca>
<cert>
</cert>
<key>
</key>
<dh>
</dh>

配置服务端账号的客户端ip文件;/etc/openvpn/server_01_ccd/test1
```
ifconfig-push 10.8.10.3 255.255.255.0
iroute 192.168.9.0 255.255.255.0
```
上传实例名为server_01的ovpn文件
配置server_01.ovpn
保存 -> start -> 查看系统日志或查看openvpn日志 /var/log/openvpn_**.log

客户端

上传实例名为client_01的ovpn文件

dev tun
proto udp
comp-lzo yes
persist-key
persist-tun
cipher AES-256-CBC
verb 3

resolv-retry infinite
nobind
client
remote <host|ip> <port>
auth-user-pass /etc/openvpn/client_01.auth

<ca>
</ca>
<cert>
</cert>
<key>
</key>

配置client_01.ovpn