☰

用戶端 VPN 連線成功後如何映射網路共用？

tag-icon • tag-icon linux centos vpn openvpn clearos
用戶端 VPN 連線成功後如何映射網路共用？

最近，我的任務是為工作場所的一些「公路戰士」提供 VPN 功能。我正在運行 CentOS 5.4 Linux 伺服器。我選擇 OpenVPN 作為我的 VPN 伺服器，並成功部署和測試了多個 Windows XP 和 7 用戶端。因此，我能夠手動映射網路共享。至此，所有連接均成功且穩定。

我想要做的是能夠自動運行一個批次文件，該文件將在 VPN 隧道成功設置後創建網路共享。我該怎麼做呢？

我已經閱讀了一些有關 up 或 route-up 命令的信息OpenVPN 手冊頁但我似乎不知道如何呼叫批次檔。任何幫助都會有所幫助。

答案1

如果共用名稱始終相同，那麼您可以始終將它們對應到作業系統中，並且它們將處於斷開狀態，直到使用者使用 VPN。我們就是這樣做的，而且效果很好。

查看手冊頁，我懷疑這就是您在命令列上需要的

--up c:\script.bat

下面是該部分

--up cmd
Shell command to run after successful TUN/TAP device open (pre --user UID change). The up script is useful for specifying route commands which route IP traffic destined for private subnets which exist at the other end of the VPN connection into the tunnel.
For --dev tun execute as:

cmd tun_dev tun_mtu link_mtu ifconfig_local_ip ifconfig_remote_ip [ init | restart ]

For --dev tap execute as:

cmd tap_dev tap_mtu link_mtu ifconfig_local_ip ifconfig_netmask [ init | restart ]

See the "Environmental Variables" section below for additional parameters passed as environmental variables.

Note that cmd can be a shell command with multiple arguments, in which case all OpenVPN-generated arguments will be appended to cmd to build a command line which will be passed to the shell.

Typically, cmd will run a script to add routes to the tunnel.

Normally the up script is called after the TUN/TAP device is opened. In this context, the last command line parameter passed to the script will be init. If the --up-restart option is also used, the up script will be called for restarts as well. A restart is considered to be a partial reinitialization of OpenVPN where the TUN/TAP instance is preserved (the --persist-tun option will enable such preservation). A restart can be generated by a SIGUSR1 signal, a --ping-restart timeout, or a connection reset when the TCP protocol is enabled with the --proto option. If a restart occurs, and --up-restart has been specified, the up script will be called with restart as the last parameter.

The following standalone example shows how the --up script can be called in both an initialization and restart context. (NOTE: for security reasons, don't run the following example unless UDP port 9999 is blocked by your firewall. Also, the example will run indefinitely, so you should abort with control-c).

openvpn --dev tun --port 9999 --verb 4 --ping-restart 10 --up 'echo up' --down 'echo down' --persist-tun --up-restart

Note that OpenVPN also provides the --ifconfig option to automatically ifconfig the TUN device, eliminating the need to define an --up script, unless you also want to configure routes in the --up script.

If --ifconfig is also specified, OpenVPN will pass the ifconfig local and remote endpoints on the command line to the --up script so that they can be used to configure routes such as:

route add -net 10.0.0.0 netmask 255.255.255.0 gw $5

然後可能需要刪除映射驅動器

相關內容