centos下使用OPENVPN Client

主系统是CentOS,直接用YUM来安装

配置BASE源(CentOS-Base.repo):

[base]
name=CentOS-$releasever Base
mirrorlist
=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey
=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4
enabled=1
#released updates 
[update]
name=CentOS-$releasever Updates
mirrorlist
=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey
=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4
enabled=1
#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever Addons
mirrorlist
=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=addons
#baseurl=http://mirror.centos.org/centos/$releasever/addons/$basearch/
gpgcheck=1
gpgkey
=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4
enabled=1
#additional packages that may be useful
[extras]
name=CentOS-$releasever Extras
mirrorlist
=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
#baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey
=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4
enabled=1
#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever Plus
mirrorlist
=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled
=1
gpgkey
=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4
#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever Contrib
mirrorlist
=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
#baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled
=1
gpgkey
=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4

配置三方的YUM源(CentOS-Extend.repo):
[dries]
name=Extra Fedora rpms dries $releasever $basearch
baseurl
=http://ftp.belnet.be/packages/dries.ulyssis.org/redhat/el4/en/i386/dries/RPMS
gpgcheck=1
enabled
=1
[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl
=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
gpgcheck=1
enabled
=1
[kbs-CentOS-Extras]
name=CentOS.Karan.Org-EL$releasever Stable
gpgcheck
=1
gpgkey
=http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
enabled=1
baseurl
=http://centos.karan.org/el$releasever/extras/stable/$basearch/RPMS/
[kbs-CentOS-Misc]
name=CentOS.Karan.Org-EL$releasever Stable
gpgkey
=http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
gpgcheck=1
enabled
=1
baseurl
=http://centos.karan.org/el$releasever/misc/stable/$basearch/RPMS/
[kbs-CentOS-Misc-Testing]
name=CentOS.Karan.Org-EL$releasever Testing
gpgkey
=http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
gpgcheck=1
enabled
=1
baseurl
=http://centos.karan.org/el$releasever/misc/testing/i386/RPMS/
[atrpms]
name=Fedora Core $releasever $basearch ATrpms
baseurl
=http://dl.atrpms.net/fc$releasever-$basearch/atrpms/stable
gpgkey=http://ATrpms.net/RPM-GPG-KEY.atrpms
gpgcheck=1enabled=1


导入相关的GPG key
# rpm --import http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
# rpm --import http://dries.ulyssis.org/rpm/RPM-GPG-KEY.dries.txt
# rpm --import http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
# rpm --import http://ATrpms.net/RPM-GPG-KEY.atrpms


如果导入失败可以直接wget到本地导入
# rpm --import http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
errorhttp://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt: import read failed.
# wget http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
# rpm --import RPM-GPG-KEY.dag.txt


然后直接YUM安装就可以了
# yum clean all
# yum update
# yum install openvpn -y
# chkconfig openvpn on


然后把client的相关配置复制到/etc/openvpn/目录下后启动openvpn服务就可以连接到服务器了。
注:
1、管理员发送的OPENVPN Client中的配置经常的后缀是ovpn(xxxx.ovpn),需要在/etc/openvpn/目录下把它修改为conf后缀(****.conf)
因为openvpn只认conf的配置文件。
2、service openvpn start 启动的是openvpn的服务,但是不一定是openvpn的server,是server还是client是根据/etc/openvpn/下的配置文件决定的,之前就因为想当然的以为是启动server被自己绕了半天。形而上学还是原罪哪。。

Over 记录一下,以备后查。

参考:
http://www.osresources.com/11_6_en.html
http://forums.fedoraforum.org/showthread.php?t=76363

« 上一篇 | 下一篇 »

发表评论

评论内容 (必填):