在配置文件里面添加 http-proxy-retry # retry on connection failures http-proxy [proxy server] [proxy port #] 自动运行则需要在注册表的启动项里面添加启动命令：d:\tools\openvpn\bin\openvpn.bat 其中openvpn.bat中 openvpn-gui-1.0.3 –connect client.ovpn

ifconfig-pool-persist ipp.txt ipp.txt 内 就是固定 ip       在/etc/openvpn/server.conf中增加\client-config-dir /etc/openvpn/ccd然后在 /etc/openvpn/ccd目录中放针对每个客户端的个性化配置文件。文件名就用客户端名 生成key的时候输入的 "Common Name" 名字比如要设置客户端 liushiwei为 192.168.2.24 只要在 /etc/openvpn/ccd/liushiwei文件中包含一行:ifconfig-push 192.168.2.24 255.255.255.0就可以了   sudochown-R nobody:nogroup /etc/openvpn/ccd

http://openvpn.net/archive/openvpn-users/2005-03/msg00453.html http://www.wandin.net/dotclear/index.php?post/2009/01/08/OpenVPN-MTU-Size http://hi.baidu.com/ox188/blog/item/4ae1373f33d90fe455e723a4.html http://77293.blog.51cto.com/67293/102222/ http://www.ixpub.net/thread-2059879-1-1.html Code - XML/HTML[url=]Plain Text[/url] # openvpn_server.conf     tun-mtu 1400   tun-mtu-extra 32   mssfix 1400   # openvpn_server.conf  tun-mtu 1400  tun-mtu-extra 32  mssfix 1400

1：安装apt-get install openvpn iptables 2：配置服务端 cp -R /usr/share/doc/openvpn/examples/easy-rsa /etc/openvpncd /etc/openvpn/easy-rsa/2.0chmod +x varssource ./vars./clean-all ./build-ca这一步，您一直回车就行，不要填密码，如果要求你回答Y还是N，选Y回车 ./build-key-server server ./build-key client1这2步也跟上面一样，一路回车和选择Y回车 ./build-dh 3：配置转发vi /etc/rc.local添加以下语句，您只要替换“208.110.73.134”为您自己的ip就行# add iptables rule for openvpniptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0 -j SNAT --to 208.110.73.134 4：增加服务器端conf文件vi /etc/openvpn/openvpn.conf增加如下内容dev tunproto tcpport 1194 ca /etc/openvpn/easy-rsa/2.0/keys/ca.crtcert /etc/openvpn/easy-rsa/2.0/keys/server.crtkey /etc/openvpn/easy-rsa/2.0/keys/server.keydh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem user nobodygroup nogroupserver 10.8.0.0 255.255.255.0 persist-keypersist-tun #status openvpn-status.log#verb 3client-to-client push “redirect-gateway def1″push “dhcp-option DNS 69.197.153.253″push “dhcp-option DNS 69.30.192.15″ comp-lzo ok，启动openvpn服务/etc/init.d/openvpn startnohup /etc/rc.local & 5：客户端安装配置到 http://openvpn.net/index.php/open-source/downloads.html 下载winodws客户端安装后，然后从服务器把以下3个文件拷贝到windows安装路径下的config目录这3个文件分别是/etc/openvpn/easy-rsa/2.0/keys/ca.crt/etc/openvpn/easy-rsa/2.0/keys/client1.crt/etc/openvpn/easy-rsa/2.0/keys/client1.key 6：增加客户端配置文件在config增加一个配置文件，文件名为client.ovpn内容如下：clientdev tunproto tcp # The hostname/IP and port of the server.# CHANGE THIS TO YOUR VPS IP ADDRESSremote 208.110.73.134 1194 resolv-retry infinitenobind persist-keypersist-tun ca ca.crtcert client1.crtkey…

/etc/openvpn/server-tcp.conf /etc/openvpn/server-udp.conf server 192.168.21.0 255.255.255.0 192.168.31.0 push "dhcp-option DNS 8.8.8.8" nat masquad 192.168.21.0 192.168.31.0

webmin apache global config 网络和地址 443 改成 无

rpm -q rpmforge-release rpm -e rpmforge-release-0.5.1-1.el5.rf   新版 selinux 解决方案   semanage port -m -t openvpn_port_t -p tcp 443   semanage port -a -t openvpn_port_t -p udp 443 semanage port -l | grep 443 发现 http_port_t 占用 443 [root@xxxx ~]# semanage port -d -t http_port_t -p tcp 443/usr/sbin/semanage: Port tcp/443 is defined in policy, cannot be deleted   [root@onion ~]# semanage port -a -t openvpn_port_t -p tcp 443/usr/sbin/semanage: Port tcp/443 already defined   [root@onion ~]# /usr/sbin/semanage port -m -t openvpn_port_t -p tcp 443 开机启动 chkconfig openvpn on MTU 设置 客户端 服务器 都需要 tun-mtu 1400 tun-mtu-extra 32 mssfix 1400 安装时候 注意 openvpn 版本 打开…