· KLDP.org · KLDP.net · KLDP Wiki · KLDP BBS ·
OpenVPN/Tips

OpenVPNÀ¸·Î ÇÒ ¼ö ÀÖ´Â ¿©·¯°¡Áö ÆÁ

¼­¹öÂÊÀÇ ´Ù¸¥ ¼­¹öµé ¿¬°áÇϱâ


»ý°¢¸¸Å­ ¾î·ÆÁö ¾Ê½À´Ï´Ù. OpenVPNÀÌ ¼³Ä¡µÈ ¼­¹ö¿¡ IP forwarding ¼³Á¤À» ÇØÁֽðí, ´Ù¸¥ ¼­¹ö¿¡¼­´Â VPN³×Æ®¿öÅ©ÁÖ¼Ò(°¡·É, 10.8.0.0)¿¡ ´ëÇØ OpenVPN ¼­¹ö·Î ¶ó¿ìÆÃÀ» Àâ¾ÆÁÖ¸é µË´Ï´Ù. (tunÀ» »ç¿ëÇÏ´Â °æ¿ìÀÔ´Ï´Ù. tapÀº ÇØº¸Áö ¾Ê¾Ò½À´Ï´Ù)

°¡·É OpenVPN ¼­¹öÀÇ private ³×Æ®¤Ô¤·¤Í¤»ÁÖ¼Ò°¡ 192.168.1.110(È£½ºÆ®¸í interface)À̰í, »ç¿ëÀÚ°¡ OpenVPNÀ» ÅëÇØ µ¿ÀÏ ³×Æ®¿öÅ©»ó¿¡ ÀÖ´Â ´Ù¸¥ ¼­¹ö 192.168.1.107(È£½ºÆ®¸í web1)¿¡ Á¢±ÙÇÏ°í ½ÍÀº °æ¿ì¿¡´Â web1 ¼­¹ö¿¡¼­ ´ÙÀ½ ¸í·ÉÀ» ³»·ÁÁÖ´Â °Í¸¸À¸·Î ¹«³­È÷ Á¢¼ÓÀÌ µÇ´õ±º¿ä.

[root@web1] route add -net 10.8.0.0 netmask 255.255.255.0 gw 192.168.1.110
[root@web1] netstat -nr
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
10.8.0.0        192.168.1.110   255.255.255.0   UG        0 0          0 eth2
...»ý·«...

¹°·Ð ÀÌ·¸°Ô ÀâÀº routing tableÀº ¸®ºÎÆÃÇÏ¸é ¼Ò¸êµÇ¹Ç·Î ¹èÆ÷ÆÇ¿¡ µû¶ó¼­ °ü·Ã ¼³Á¤ÆÄÀÏÀ» Àâ¾ÆÁÖ¼Å¾ß Çϴµ¥¿ä, Redhat °è¿­Àº /etc/sysconfig/network-scripts/route-eth2(ÆÄÀϸíÀº private network¿ë NIC¿¡ ¸Â°Ô Àâ¾ÆÁÖ¼¼¿ä) ÆÄÀÏÀ» ´ÙÀ½°ú °°ÀÌ ¼öÁ¤ÇÏ½Ã¸é µË´Ï´Ù.

ADDRESS0=10.8.0.0
NETMASK0=255.255.255.0
GATEWAY0=192.168.1.110

SSH Åͳθµ + OpenVPN

¼­¹öÃø Æ÷Æ®°¡ 22¹ø¸¸ ¿­·ÁÀÖ°í ¸ðµÎ ¸·ÇôÀÖ´Â °æ¿ì, SSHÅͳθµ¸¸À» ÅëÇØ¼­µµ ¼­¹öÃøÀ¸·Î ¾ó¸¶µçÁö Á¢±ÙÇÒ ¼ö°¡ ÀÖ´Ù. ÀÌ·¸°Ô ÀÏÀÏÈ÷ ÅͳθµÀ» Çϴ°ÍÀÌ ±ÍÂú´Ù°í »ý°¢µÇ¸é SSHÅͳθµ + OpenVPNÀ» ¼³Ä¡ÇÒ ¼öµµ ÀÖ´Ù.

SSHÅͳθµÀ» ¿¹¸¦ µé¾î 1194·Î localhost:1194·Î ¸¸µé¾ú´Ù¸é, OpenVPN Ŭ¶óÀÌ¾ðÆ®¿¡¼­ ¼­¹ö¸¦ localhost 1194·Î Àâ¾ÆÁÖ¸é µÈ´Ù.



sponsored by andamiro
sponsored by cdnetworks
sponsored by HP

Valid XHTML 1.0! Valid CSS! powered by MoniWiki
last modified 2008-04-10 17:54:51
Processing time 0.0520 sec