OpenVPN —— 最简单的 point-to-pont 连接（没有加密）

角色

要对OpenVPN有认识，当我看完【1】后，觉得我们要先从简单开始，不然很难对OpenVPN学得好，学得透。

目的：用最简单OpenVPN方法把互联网两点连接起来

解说：如果是最简单，然后不要加密。我们用tun device

Server：OpenVPN on OpenWRT （Virtual IP address：10.200.0.1）
Client : OpenWPN on Windows Xp （Virtual IP address：10.200.0.2）

【1】OpenVPN 2.0 Cookbook Link

tomleehk

It is seen from your action "Disable the NETBIOS over TCP/IP", I guess you used TUN device instead of TAP device.
角色 發表於 2013-11-24 17:37

Bingo...

I used
1) TUN and
2) TCPIP    <= so that client side, after simple configuration file change, can via proxy server connect to VPN server.

角色

Thank you for joining the OpenVPN-on-OpenWRT learning group such that we can prepare collecting learning materials and example for sharing in order to speed up the learning.

It is seen from your action "Disable the NETBIOS over TCP/IP", I guess you used TUN device instead of TAP device.

tomleehk

Thanks for your guidance. Just planned to learn OpenVPN on OpenWRT.

不要OpenVPN 2.3.2 -- released on 2013.06.03，因为试过不行。
角色 發表於 2013-11-24 15:51

I also found OpenVPN 2.3.2 connection problem. After I selected the option" disable the NETBIOS over TCP.IP" for the VIRTUAL network card that OpenVPN installed, I found the OpenVPN 2.3.2 connection problem was resolved immediately and it is still so far so good.

角色

Client Side

When the connection was okey, it gave

1. C:\Program Files\OpenVPN\bin>openvpn.exe -ifconfig 10.200.0.2 10.200.0.1 --dev t
   
2. un --remote 119.237.21.222
   
3. Options error: I'm trying to parse "-ifconfig" as an --option parameter but I do
   
4. n't see a leading '--'
   
5. Use --help for more information.
   
6. 
   
7. C:\Program Files\OpenVPN\bin>openvpn.exe --ifconfig 10.200.0.2 10.200.0.1 --dev
   
8. tun --remote 119.237.21.222
   
9. Sun Nov 24 10:52:27 2013 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built
   
10. on Dec 15 2011
    
11. Sun Nov 24 10:52:27 2013 IMPORTANT: OpenVPN's default port number is now 1194, b
    
12. ased on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earl
    
13. ier used 5000 as the default port.
    
14. Sun Nov 24 10:52:27 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or hig
    
15. her to call user-defined scripts or executables
    
16. Sun Nov 24 10:52:27 2013 ******* WARNING *******: all encryption and authenticat
    
17. ion features disabled -- all data will be tunnelled as cleartext
    
18. Sun Nov 24 10:52:27 2013 TAP-WIN32 device [本地连接 2] opened: \\.\Global\{A2FCF
    
19. 4EE-7BB0-4C7D-AFC0-7F041F4D21FA}.tap
    
20. Sun Nov 24 10:52:27 2013 Notified TAP-Win32 driver to set a DHCP IP/netmask of 1
    
21. 0.200.0.2/255.255.255.252 on interface {A2FCF4EE-7BB0-4C7D-AFC0-7F041F4D21FA} [D
    
22. HCP-serv: 10.200.0.1, lease-time: 31536000]
    
23. Sun Nov 24 10:52:27 2013 Successful ARP Flush on interface [131077] {A2FCF4EE-7B
    
24. B0-4C7D-AFC0-7F041F4D21FA}
    
25. Sun Nov 24 10:52:27 2013 UDPv4 link local (bound): [undef]:1194
    
26. Sun Nov 24 10:52:27 2013 UDPv4 link remote: 119.237.21.222:1194
    
27. Sun Nov 24 10:52:46 2013 Peer Connection Initiated with 119.237.21.222:1194
    
28. Sun Nov 24 10:52:52 2013 Initialization Sequence Completed

複製代碼

After the OpenVPN connection was established, the server virtual ip address 10.200.0.1 could be reachable

1. C:\Program Files\OpenVPN\bin>ping 10.200.0.1
   
2. 
   
3. Pinging 10.200.0.1 with 32 bytes of data:
   
4. 
   
5. Reply from 10.200.0.1: bytes=32 time=5ms TTL=64
   
6. Reply from 10.200.0.1: bytes=32 time=4ms TTL=64
   
7. Reply from 10.200.0.1: bytes=32 time=5ms TTL=64
   
8. Reply from 10.200.0.1: bytes=32 time=4ms TTL=64
   
9. 
   
10. Ping statistics for 10.200.0.1:
    
11.     Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    
12. Approximate round trip times in milli-seconds:
    
13.     Minimum = 4ms, Maximum = 5ms, Average = 4ms
    
14. 
    
15. C:\Program Files\OpenVPN\bin>

複製代碼

角色

Server side

Additional messages from the Server side:

1. root@OpenWrt:~#  openvpn --ifconfig 10.200.0.1 10.200.0.2 --dev tun
   
2. Sun Nov 24 10:50:09 2013 OpenVPN 2.2.2 mips-openwrt-linux [SSL] [LZO2] [EPOLL] built on Mar 14 2013
   
3. Sun Nov 24 10:50:09 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
   
4. Sun Nov 24 10:50:09 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
   
5. Sun Nov 24 10:50:09 2013 ******* WARNING *******: all encryption and authentication features disabled -- all data will be tunnelled as cleartext
   
6. Sun Nov 24 10:50:09 2013 TUN/TAP device tun0 opened
   
7. Sun Nov 24 10:50:09 2013 /sbin/ifconfig tun0 10.200.0.1 pointopoint 10.200.0.2 mtu 1500
   
8. Sun Nov 24 10:50:09 2013 UDPv4 link local (bound): [undef]:1194
   
9. Sun Nov 24 10:50:09 2013 UDPv4 link remote: [undef]
   
10. Sun Nov 24 10:52:37 2013 Peer Connection Initiated with 218.250.7.110:59085
    
11. Sun Nov 24 10:52:37 2013 Initialization Sequence Completed

複製代碼

Ping the virtual IP address 10.200.0.2 of the client, we have

1. root@OpenWrt:~# ping -c 4 10.200.0.2
   
2. PING 10.200.0.2 (10.200.0.2): 56 data bytes
   
3. 64 bytes from 10.200.0.2: seq=0 ttl=64 time=10.193 ms
   
4. 64 bytes from 10.200.0.2: seq=1 ttl=64 time=6.595 ms
   
5. 64 bytes from 10.200.0.2: seq=2 ttl=64 time=5.533 ms
   
6. 64 bytes from 10.200.0.2: seq=3 ttl=64 time=7.758 ms
   
7. 
   
8. --- 10.200.0.2 ping statistics ---
   
9. 4 packets transmitted, 4 packets received, 0% packet loss
   
10. round-trip min/avg/max = 5.533/7.519/10.193 ms
    
11. root@OpenWrt:~#

複製代碼

角色

Client：OpenVPN on Windows Xp

大家上 http://openvpn.net/index.php/download/community-downloads.html， 下载 OpenVPN 2.2.2 -- released on 2011.12.22的Windows版本（openvpn-2.2.2-install.exe），不要OpenVPN 2.3.2 -- released on 2013.06.03，因为试过不行。

下载后简单安装。然后执行下面指令：

1. 
   
2. C:\Program Files\OpenVPN\bin>openvpn.exe --ifconfig 10.200.0.2 10.200.0.1 --dev t
   
3. un --remote hostname_or_ip_address_of_OpenVPN_server

複製代碼

角色

Server : OpenVPN on OpenWRT

安装方法，大家可以参考 http://www.telecom-cafe.com/forum/viewthread.php?tid=6008

用Putty SSH进入router系统，输入

1. openvpn --ifconfig 10.200.0.1 10.200.0.2 --dev tun

複製代碼