open*** tap模式一鍵安裝

 

用pkitool實際上比build要省事~~ ，沒那麼多交互。只是現在一搜索滿屏幕都是build方式安裝。。

 

wget http://apt.sw.be/redhat/el5/en/x86_64/rpmforge/RPMS/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm               
rpm -ivh rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm
yum -y install open***-2.2.0 lzo-2.04 bridge-utils

 

cat > /etc/sysconfig/network-scripts/ifcfg-eth1 <<SKS
DEVICE=eth1
ONBOOT=yes
BRIDGE=br0
SKS

cat > /etc/sysconfig/network-scripts/ifcfg-br0 <<SKS
DEVICE=br0
TYPE=Bridge
IPADDR=192.168.9.99
NETMASK=255.255.255.0
ONBOOT=yes
SKS

/etc/init.d/network restart
open*** --mktun --dev tap0
ifconfig tap0 up
brctl addif br0 tap0
brctl show

 

 

cp -r /usr/share/doc/open***-2.2.0/easy-rsa/ /etc/open***/
cp /usr/share/doc/open***-2.2.0/sample-config-files/server.conf /etc/open***/
cd /etc/open***/easy-rsa/2.0/
chmod a+x ./*

 

 

source vars
./clean-all

./build-dh 

./pkitool --initca

./pkitool --server gamewaveBJ

./pkitool client1

 

cat > /etc/open***/server.conf << SKS
port 1194
proto tcp
dev tap0
ca   ./easy-rsa/2.0/keys/ca.crt
cert ./easy-rsa/2.0/keys/gamewaveBJ.crt
key  ./easy-rsa/2.0/keys/gamewaveBJ.key
dh   ./easy-rsa/2.0/keys/dh1024.pem

server-bridge 192.168.9.0 255.255.255.0 192.168.9.200 192.168.9.250
push "route 192.168.9.0 255.255.255.0"
client-to-client
duplicate-cn
keepalive 10 120
#tls-auth ta.key 0
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status open***-status.log

log /var/log/open***.log
verb 3
SKS

 

/etc/init.d/open*** start

 

cd  keys

sz ca.crt client1.crt client1.key