下面是一些OpenVPN的plugin的列表:
使用LDAP验证: http://dpw.threerings.net/projects/openvpn-auth-ldap/
使用Radius验证: http://www.nongnu.org/radiusplugin/
使用POP3验证: http://www.wenzk.net/bbs/thread-221-1-1.html
使用文本保存用户名密码: http://openvpn.se/files/other/
ELM 发表于: 2007-8-26 23:48 来源: 榆树社区
最新回复
----------------CUT Here-------------
port 1194
; proto tcp
proto udp
; dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert server01.crt
key server01.key # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0 ///这个是不是指定服务端起动后的IP段
ifconfig-pool-persist ipp.txt
client-to-client
;duplicate-cn
keepalive 10 120
tls-auth ta.key 0 # This file is secret
auth-user-pass-verify checkpsw.exe via-env
client-cert-not-required
username-as-common-name
;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
comp-lzo
;max-clients 100
user nobody
group nobody
persist-key
persist-tun
status status.log
;log /var/log/openvpn.log
;log-append /var/log/TCP_openvpn.log
verb 4
;mute 20
----------------CUT Here-------------
client.ovpn
-------------Cut Here---------------------
client
dev tun
proto udp
remote 61.1.1.2 1194 //外网的IP是吗,要是动态的,可以用域名指向吗www.gcjob.net
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
user nobody
group nobody
route 192.168.0.0 255.255.252.0 ///这儿是指局域网的网段吗,我局域网的网段是192.168.10.0 是不是换成这个就行了,
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
ca ca.crt
auth-user-pass
ns-cert-type server
tls-auth ta.key 1
comp-lzo
# Set log file verbosity.
verb 4
--------------Cut Here---------------------
请指点,我写出中方的地方
QQ44439489