centos安装openvpn
yum update -y
yum install epel-release -y
yum update -y
yum install -y openvpn wget
systemctl -f enable openvpn@server.service
systemctl start openvpn@server.service
openvpn网桥模式
rc.local:
openvpn --mktun --dev tap0 #为 tap 设备建立路由隧道
brctl addbr br0 #建立桥接设备
brctl addif br0 eth0 #添加 eth 设备到网桥
brctl addif br0 tap0 #添加 tap 设备到网桥
ifconfig tap0 0.0.0.0 promisc up #设置 tap 设备为混杂模式
ifconfig eth0 0.0.0.0 promisc up #设置 eth 设备为混杂模式
ifconfig br0 ETH_IP netmask ETH_NETMASK broadcast ETH_BROADCAST #为 br0 设置原来以太网卡的网络参数
bridge-server.conf
local 0.0.0.0 # 填服务器真实IP
port 11947
proto udp
#proto tcp
dev tap0
dev-type tap
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server.crt
key /etc/openvpn/easy-rsa/pki/private/server.key
dh /etc/openvpn/easy-rsa/pki/dh.pem
tls-auth /etc/openvpn/easy-rsa/pki/ta.key 0
;server 192.168.251.0 255.255.255.0 # 给客户端分配的IP段
server-bridge 192.168.12.230 255.255.255.0 192.168.12.20 192.168.12.20
;server-bridge
;ifconfig-pool-persist /etc/openvpn/ipp.txt # 记录客户端和虚拟ip的映射关系，当客户端重新连接时依然被分配断开之前的IP地址
;push "redirect-gateway def1 bypass-dhcp" # 重定向客户端网关
;push "route 0.0.0.0 0.0.0.0"
;push "dhcp-option DNS 192.168.12.254" # 选择一个DNS，这里用Google的DNS示例
;push "dhcp-option DNS 8.8.4.4"
;push "block-outside-dns"
push "route 192.168.12.0 255.255.255.0 192.168.12.230"
duplicate-cn
client-to-client
;keepalive 10 120
compress lz4-v2
push "compress lz4-v2"
;user root
;group root
persist-key
persist-tun
cipher AES-256-CBC
auth SHA512
status /var/log/openvpn-bridge-status.log
log /var/log/openvpn-bridge.log
verb 3 # 日志等级