{"id":1082,"date":"2018-12-30T12:39:44","date_gmt":"2018-12-30T08:39:44","guid":{"rendered":"https:\/\/bukleev.ru\/?page_id=1082"},"modified":"2018-12-30T12:41:06","modified_gmt":"2018-12-30T08:41:06","slug":"openvpn-grandstream-fusionpbx-freeswitch-centos-7","status":"publish","type":"page","link":"https:\/\/bukleev.ru\/?page_id=1082","title":{"rendered":"OpenVPN, Grandstream, FusionPBX, FreeSWITCH, Centos 7"},"content":{"rendered":"<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043e\u043d \u043f\u043e OpenVPN \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u043b\u0441\u044f \u0441 \u0410\u0422\u0421<\/p>\n<p>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 openvpn:<\/p>\n<pre class=\"lang:php decode:true\">yum install epel-release\r\nyum install openvpn openssl\r\nyum update<\/pre>\n<p>\u0413\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430<\/p>\n<p>CA.CRT:<\/p>\n<pre class=\"lang:php decode:true \">openssl dhparam -out \/etc\/openvpn\/dh.pem 1024\r\n\r\nopenssl genrsa -out \/etc\/openvpn\/ca.key 2048\r\n\r\nchmod 600 \/etc\/openvpn\/ca.key\r\n\r\nopenssl req -new -key \/etc\/openvpn\/ca.key -out \/etc\/openvpn\/ca.csr -subj \/CN=OpenVPN-CA\/\r\n\r\nopenssl x509 -req -in \/etc\/openvpn\/ca.csr -out \/etc\/openvpn\/ca.crt -signkey \/etc\/openvpn\/ca.key -days 3650\r\n\r\necho 01 &gt; \/etc\/openvpn\/ca.srl<\/pre>\n<p>SERVER.CRT:<\/p>\n<pre class=\"lang:php decode:true\">openssl genrsa -out \/etc\/openvpn\/server.key 2048\r\n\r\nchmod 600 \/etc\/openvpn\/server.key\r\n\r\nopenssl req -new -key \/etc\/openvpn\/server.key -out \/etc\/openvpn\/server.csr -subj \/CN=OpenVPN\/\r\n\r\nopenssl x509 -req -in \/etc\/openvpn\/server.csr -out \/etc\/openvpn\/server.crt -CA \/etc\/openvpn\/ca.crt -CAkey \/etc\/openvpn\/ca.key -days 3650<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \/etc\/openvpn\/server.conf \u043d\u0430 \u043f\u043e\u0440\u0442\u00a0UDP_PORT<\/p>\n<pre>proto udp\r\nport UDP_PORT\r\ndev tun\r\n\r\nkey \/etc\/openvpn\/server.key\r\nca \/etc\/openvpn\/ca.crt\r\ncert \/etc\/openvpn\/server.crt\r\ndh \/etc\/openvpn\/dh.pem\r\n\r\nserver 10.10.0.0 255.255.255.0\r\n\r\nifconfig-pool-persist ipp.txt\r\npush \"redirect-gateway def1\"\r\nclient-to-client\r\ncipher BF-CBC\r\ncomp-lzo\r\nduplicate-cn\r\nkeepalive 10 120\r\nstatus openvpn-status.log\r\nlog openvpn.log\r\nverb 7<\/pre>\n<p>\u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u043b\u0443\u0436\u0431\u0443<\/p>\n<pre class=\"lang:php decode:true \">systemctl enable openvpn@server\r\nsystemctl start openvpn@server<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432<\/p>\n<pre class=\"lang:php decode:true \">openssl genrsa -out \/etc\/openvpn\/client1.key 2048\r\n\r\nchmod 600 \/etc\/openvpn\/client1.key\r\n\r\nopenssl req -new -key \/etc\/openvpn\/client1.key -out \/etc\/openvpn\/client1.csr -subj \/CN=OpenVPN-Client1\/\r\n\r\nopenssl x509 -req -in \/etc\/openvpn\/client1.csr -out \/etc\/openvpn\/client1.crt -CA \/etc\/openvpn\/ca.crt -CAkey \/etc\/openvpn\/ca.key -days 3650<\/pre>\n<p>\u0417\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d<\/p>\n<pre class=\"lang:php decode:true \">\/etc\/openvpn\/ca.crt\r\n\/etc\/openvpn\/client1.crt\r\n\/etc\/openvpn\/client1.key<\/pre>\n<p>\u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u044b &#8212; \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u043e\u043c<\/p>\n<pre>client\r\ndev tun\r\ntls-client\r\nremote IP_SERVER UDP_PORT\r\nresolv-retry infinite\r\nproto udp\r\nnobind\r\npersist-key\r\npersist-tun\r\nca ca.crt\r\ncert client1.crt\r\nkey client1.key\r\ncipher BF-CBC\r\ncomp-lzo\r\nreneg-sec 0\r\nns-cert-type server\r\nverb 3\r\nmute 20<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043e\u043d \u043f\u043e OpenVPN \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u043b\u0441\u044f \u0441 \u0410\u0422\u0421 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 openvpn: yum install epel-release yum install openvpn openssl yum update \u0413\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430 CA.CRT: openssl dhparam -out \/etc\/openvpn\/dh.pem 1024 openssl genrsa -out \/etc\/openvpn\/ca.key 2048 chmod 600<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1082","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/bukleev.ru\/index.php?rest_route=\/wp\/v2\/pages\/1082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bukleev.ru\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bukleev.ru\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bukleev.ru\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bukleev.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1082"}],"version-history":[{"count":3,"href":"https:\/\/bukleev.ru\/index.php?rest_route=\/wp\/v2\/pages\/1082\/revisions"}],"predecessor-version":[{"id":1085,"href":"https:\/\/bukleev.ru\/index.php?rest_route=\/wp\/v2\/pages\/1082\/revisions\/1085"}],"wp:attachment":[{"href":"https:\/\/bukleev.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}