【原创】Windows下的OpenVPN服务器配置

zhouxiaoming

太深了，看不懂，不过还是要帮LZ顶一下。

zhoumnk1

说找不到*.old文件，不明白什么意思，大家帮帮忙啊

kwzlj

客户端要是用固定IP应该如何设置啊？？

chenxfei

win2000下好像不行啊。

uiojkl

那位大哥给偶发个证书！！！
小弟万分感谢

用户名：uiojkl
邮箱：uiojkl@gmail.com

>_<

lichuana

顶顶顶顶顶

lichuana

1.我在架设OPENVPN服务器的时候，没能找到WinGate 5.2.3，（在华军软件园里找到了，辛苦下载下来，却是个仓储软件，把我气的半死！），能发个到我的邮箱吗？
2.专门网里你说“换用WinGate 6就不会这么麻烦了”能给个WinGate 6的设置教程吗？
3.fangzy.3322.org是动态域名吗？你用的是什么软件？怎么配置？
4.有没有办法让电脑起动的时候自动将服务端可以连上？

yangcd99

看不懂
不知道这个有什么用的？

free_lee

好贴，留名

r_adium

顶，好贴

wangtnt

真的很详细,先留个记号!

kk667

是不是用支持cmwap的卡，可以正常上网了？

jams2001hk

我想用我的公司内网中的一台电脑建一个VPN 服务器免费给大家使用（电脑是24小时运行的），当然，我也经常出差也是要经常用的！
但是，总是无法建立连接，我想可能是这个证书的问题，我是ADSL+路由上网的。请问是否有方法解决。

myliyifei

你有端口映射没有，具体问题呢

guzhou1978

楼主辛苦了，谢谢

rainboy860127

老是下载不了啊  怎么办呀? 我也想弄个自己用用

zhgqqq

我就可以下啊！刚才还下了呢！

luuziiyoo

Sat Feb 03 15:57:09 2007 us=148897 OpenVPN 2.0.5 Win32-MinGW [SSL] [LZO] built on Nov  2 2005
Sat Feb 03 15:57:09 2007 us=206110 Cannot open e:\OPENVPN\KEY\dh1024.pem for DH parameters: error:02001003:system library:fopen:No such process: error:2006D080:BIO routines:BIO_new_file:no such file
Sat Feb 03 15:57:09 2007 us=206137 Exiting


我的出现这个问题。谁知道是什么问题？

luuziiyoo

这是什么问题，配置文件中的地址改成内网的ip就可以连接，用其他的宽带连接也可以连接但是不能加代理
总结一条只要加进去10.0.0.200:80这个代理上不去了。
Sat Feb 03 17:04:56 2007 us=620494 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Feb 03 17:04:56 2007 us=623402 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Feb 03 17:04:56 2007 us=623434 Local Options hash (VER=V4): '69109d17'
Sat Feb 03 17:04:56 2007 us=623451 Expected Remote Options hash (VER=V4): 'c0103fa8'
Sat Feb 03 17:04:56 2007 us=623475 Attempting to establish TCP connection with 10.0.0.200:80
Sat Feb 03 17:04:56 2007 us=624791 TCP connection established with 10.0.0.200:80
Sat Feb 03 17:04:56 2007 us=624810 Send to HTTP proxy: 'CONNECT 61.149.133.134:443 HTTP/1.0'
Sat Feb 03 17:05:02 2007 us=631679 recv_line: TCP port read timeout expired
Sat Feb 03 17:05:02 2007 us=631875 TCP/UDP: Closing socket
Sat Feb 03 17:05:02 2007 us=634923 SIGTERM[soft,init_instance] received, process exiting

[ 本帖最后由 luuziiyoo 于 2007-2-3 20:42 编辑 ]

birdboyli

不错.好东西

别加我

谢谢楼主的无私奉献！！！！！！！！！！

东张西望

禁用DHCP Service，或者将192.168.10.1(VPN IP)取消绑定
请问如何取消VPN的DHCP而有代理软件分配 .谢谢

wsgtrsys

我可以帮大家做基于linux服务器的openvpn，有需要的可以pm我

printf001

看不懂~~学习ING。。留名。。谢谢LZ

zjycyx

un Apr 08 14:54:28 2007 us=673321   chroot_dir = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=673360   cd_dir = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=673399   writepid = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=673439   up_script = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=673479   down_script = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=673519   down_pre = DISABLED
Sun Apr 08 14:54:28 2007 us=673558   up_restart = DISABLED
Sun Apr 08 14:54:28 2007 us=673598   up_delay = DISABLED
Sun Apr 08 14:54:28 2007 us=673637   daemon = DISABLED
Sun Apr 08 14:54:28 2007 us=673675   inetd = 0
Sun Apr 08 14:54:28 2007 us=673712   log = DISABLED
Sun Apr 08 14:54:28 2007 us=673752   suppress_timestamps = DISABLED
Sun Apr 08 14:54:28 2007 us=673791   nice = 0
Sun Apr 08 14:54:28 2007 us=673830   verbosity = 4
Sun Apr 08 14:54:28 2007 us=673868   mute = 0
Sun Apr 08 14:54:28 2007 us=673905   gremlin = 0
Sun Apr 08 14:54:28 2007 us=673944   status_file = 'openvpn-status.log'
Sun Apr 08 14:54:28 2007 us=673985   status_file_version = 1
Sun Apr 08 14:54:28 2007 us=674026   status_file_update_freq = 60
Sun Apr 08 14:54:28 2007 us=674065   occ = ENABLED
Sun Apr 08 14:54:28 2007 us=674102   rcvbuf = 0
Sun Apr 08 14:54:28 2007 us=674140   sndbuf = 0
Sun Apr 08 14:54:28 2007 us=674178 BEGIN http_proxy
Sun Apr 08 14:54:28 2007 us=674218   server = '10.0.0.200'
Sun Apr 08 14:54:28 2007 us=674257   port = 80
Sun Apr 08 14:54:28 2007 us=674297   auth_method_string = 'none'
Sun Apr 08 14:54:28 2007 us=674337   auth_file = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=674375   retry = DISABLED
Sun Apr 08 14:54:28 2007 us=674414   timeout = 5
Sun Apr 08 14:54:28 2007 us=674453   http_version = '1.0'
Sun Apr 08 14:54:28 2007 us=674492   user_agent = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=674530 END http_proxy
Sun Apr 08 14:54:28 2007 us=674570   socks_proxy_server = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=718259   socks_proxy_port = 0
Sun Apr 08 14:54:28 2007 us=718320   socks_proxy_retry = DISABLED
Sun Apr 08 14:54:28 2007 us=718358   fast_io = DISABLED
Sun Apr 08 14:54:28 2007 us=718396   comp_lzo = ENABLED
Sun Apr 08 14:54:28 2007 us=718433   comp_lzo_adaptive = ENABLED
Sun Apr 08 14:54:28 2007 us=718495   route_script = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=718537   route_default_gateway = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=718576   route_noexec = DISABLED
Sun Apr 08 14:54:28 2007 us=718614   route_delay = 0
Sun Apr 08 14:54:28 2007 us=718652   route_delay_window = 30
Sun Apr 08 14:54:28 2007 us=718690   route_delay_defined = ENABLED
Sun Apr 08 14:54:28 2007 us=718729   management_addr = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=718770   management_port = 0
Sun Apr 08 14:54:28 2007 us=718810   management_user_pass = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=718851   management_log_history_cache = 250
Sun Apr 08 14:54:28 2007 us=718892   management_echo_buffer_size = 100
Sun Apr 08 14:54:28 2007 us=803760   management_query_passwords = DISABLED
Sun Apr 08 14:54:28 2007 us=803825   management_hold = DISABLED
Sun Apr 08 14:54:28 2007 us=803868   shared_secret_file = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=803908   key_direction = 0
Sun Apr 08 14:54:28 2007 us=803946   ciphername_defined = ENABLED
Sun Apr 08 14:54:28 2007 us=803984   ciphername = 'BF-CBC'
Sun Apr 08 14:54:28 2007 us=804023   authname_defined = ENABLED
Sun Apr 08 14:54:28 2007 us=804060   authname = 'SHA1'
Sun Apr 08 14:54:28 2007 us=804096   keysize = 0
Sun Apr 08 14:54:28 2007 us=804131   engine = DISABLED
Sun Apr 08 14:54:28 2007 us=804167   replay = ENABLED
Sun Apr 08 14:54:28 2007 us=804205   mute_replay_warnings = ENABLED
Sun Apr 08 14:54:28 2007 us=804247   replay_window = 0
Sun Apr 08 14:54:28 2007 us=804283   replay_time = 0
Sun Apr 08 14:54:28 2007 us=804320   packet_id_file = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=804357   use_iv = ENABLED
Sun Apr 08 14:54:28 2007 us=804394   test_crypto = DISABLED
Sun Apr 08 14:54:28 2007 us=906283   tls_server = DISABLED
Sun Apr 08 14:54:28 2007 us=906340   tls_client = ENABLED
Sun Apr 08 14:54:28 2007 us=906380   key_method = 2
Sun Apr 08 14:54:28 2007 us=906419   ca_file = 'F:\OPENVPN\KEY\ca.crt'
Sun Apr 08 14:54:28 2007 us=906458   dh_file = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=906497   cert_file = 'F:\OPENVPN\KEY\client.crt'
Sun Apr 08 14:54:28 2007 us=906539   priv_key_file = 'F:\OPENVPN\KEY\client.key'
Sun Apr 08 14:54:28 2007 us=906579   pkcs12_file = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=906617   cryptoapi_cert = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=906655   cipher_list = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=906693   tls_verify = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=906731   tls_remote = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=906768   crl_file = '[UNDEF]'
Sun Apr 08 14:54:28 2007 us=906804   ns_cert_type = 0
Sun Apr 08 14:54:28 2007 us=906840   tls_timeout = 2
Sun Apr 08 14:54:29 2007 us=14968   renegotiate_bytes = 0
Sun Apr 08 14:54:29 2007 us=15029   renegotiate_packets = 0
Sun Apr 08 14:54:29 2007 us=15070   renegotiate_seconds = 3600
Sun Apr 08 14:54:29 2007 us=15108   handshake_window = 60
Sun Apr 08 14:54:29 2007 us=15146   transition_window = 3600
Sun Apr 08 14:54:29 2007 us=15185   single_session = DISABLED
Sun Apr 08 14:54:29 2007 us=15222   tls_exit = DISABLED
Sun Apr 08 14:54:29 2007 us=15258   tls_auth_file = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=15328   server_network = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=15373   server_netmask = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=15416   server_bridge_ip = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=15463   server_bridge_netmask = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=15506   server_bridge_pool_start = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=15550   server_bridge_pool_end = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=15594   ifconfig_pool_defined = DISABLED
Sun Apr 08 14:54:29 2007 us=15638   ifconfig_pool_start = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=131046   ifconfig_pool_end = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=131114   ifconfig_pool_netmask = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=131158   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=131205   ifconfig_pool_persist_refresh_freq = 600
Sun Apr 08 14:54:29 2007 us=131248   ifconfig_pool_linear = DISABLED
Sun Apr 08 14:54:29 2007 us=131288   n_bcast_buf = 256
Sun Apr 08 14:54:29 2007 us=131326   tcp_queue_limit = 64
Sun Apr 08 14:54:29 2007 us=131365   real_hash_size = 256
Sun Apr 08 14:54:29 2007 us=131403   virtual_hash_size = 256
Sun Apr 08 14:54:29 2007 us=131442   client_connect_script = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=131483   learn_address_script = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=131526   client_disconnect_script = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=131566   client_config_dir = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=131604   ccd_exclusive = DISABLED
Sun Apr 08 14:54:29 2007 us=131641   tmp_dir = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=257161   push_ifconfig_defined = DISABLED
Sun Apr 08 14:54:29 2007 us=257234   push_ifconfig_local = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=257280   push_ifconfig_remote_netmask = 0.0.0.0
Sun Apr 08 14:54:29 2007 us=257323   enable_c2c = DISABLED
Sun Apr 08 14:54:29 2007 us=257362   duplicate_cn = DISABLED
Sun Apr 08 14:54:29 2007 us=257399   cf_max = 0
Sun Apr 08 14:54:29 2007 us=257435   cf_per = 0
Sun Apr 08 14:54:29 2007 us=257472   max_clients = 1024
Sun Apr 08 14:54:29 2007 us=257510   max_routes_per_client = 256
Sun Apr 08 14:54:29 2007 us=257549   client_cert_not_required = DISABLED
Sun Apr 08 14:54:29 2007 us=257589   username_as_common_name = DISABLED
Sun Apr 08 14:54:29 2007 us=257630   auth_user_pass_verify_script = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=257675   auth_user_pass_verify_script_via_file = DISABLED
Sun Apr 08 14:54:29 2007 us=257714   client = ENABLED
Sun Apr 08 14:54:29 2007 us=257750   pull = ENABLED
Sun Apr 08 14:54:29 2007 us=370617   auth_user_pass_file = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=370694   show_net_up = DISABLED
Sun Apr 08 14:54:29 2007 us=370733   route_method = 0
Sun Apr 08 14:54:29 2007 us=370771   ip_win32_defined = DISABLED
Sun Apr 08 14:54:29 2007 us=370809   ip_win32_type = 3
Sun Apr 08 14:54:29 2007 us=370847   dhcp_masq_offset = 0
Sun Apr 08 14:54:29 2007 us=370887   dhcp_lease_time = 31536000
Sun Apr 08 14:54:29 2007 us=370925   tap_sleep = 0
Sun Apr 08 14:54:29 2007 us=370961   dhcp_options = DISABLED
Sun Apr 08 14:54:29 2007 us=370998   dhcp_renew = DISABLED
Sun Apr 08 14:54:29 2007 us=371036   dhcp_pre_release = DISABLED
Sun Apr 08 14:54:29 2007 us=371073   dhcp_release = DISABLED
Sun Apr 08 14:54:29 2007 us=371110   domain = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=371148   netbios_scope = '[UNDEF]'
Sun Apr 08 14:54:29 2007 us=371186   netbios_node_type = 0
Sun Apr 08 14:54:29 2007 us=371222   disable_nbt = DISABLED
Sun Apr 08 14:54:29 2007 us=371289 OpenVPN 2.0.5 Win32-MinGW [SSL] [LZO] built on Nov  2 2005
Sun Apr 08 14:54:29 2007 us=473549 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Apr 08 14:54:29 2007 us=473621 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Apr 08 14:54:29 2007 us=479197 LZO compression initialized
Sun Apr 08 14:54:29 2007 us=479623 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Apr 08 14:54:29 2007 us=483782 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Apr 08 14:54:29 2007 us=483954 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Apr 08 14:54:29 2007 us=484007 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Apr 08 14:54:29 2007 us=586775 Local Options hash (VER=V4): '69109d17'
Sun Apr 08 14:54:29 2007 us=586874 Expected Remote Options hash (VER=V4): 'c0103fa8'
Sun Apr 08 14:54:29 2007 us=586994 Attempting to establish TCP connection with 10.0.0.200:80
Sun Apr 08 14:54:29 2007 us=861613 TCP connection established with 10.0.0.200:80
Sun Apr 08 14:54:29 2007 us=861715 Send to HTTP proxy: 'CONNECT zjycyx.vicp.net:443 HTTP/1.0'
Sun Apr 08 14:54:31 2007 us=549409 HTTP proxy returned: 'HTTP/1.1 502 Proxy Error ( The ISA Server denied the specified Uniform Resource Locator (URL).  )'
Sun Apr 08 14:54:31 2007 us=549508 HTTP proxy returned bad status
Sun Apr 08 14:54:31 2007 us=563079 TCP/UDP: Closing socket
Sun Apr 08 14:54:31 2007 us=570503 SIGTERM[soft,init_instance] received, process exiting

archman

学习中。。。。。。。

如影

占位

[ 本帖最后由 如影 于 2007-8-14 01:07 编辑 ]

chinacg0313

楼主辛苦啦！

凤晓飞扬

干嘛要不wingate?
怎么不用桥接呢！不过，我现在在研究桥接，老是不能通过VPN上网，郁闷！请教！

zuhouxiang

现在很多都是用用户名和密码的方式啊