{"id":98201,"date":"2020-10-24T20:42:36","date_gmt":"2020-10-24T18:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site"},"modified":"2020-11-18T00:58:46","modified_gmt":"2020-11-17T22:58:46","slug":"nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","title":{"rendered":"OpenVPN-serveri seadistamine NAS Synology jaoks site-to-site t\u00fc\u00fcpi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tere k\u00f5igile!<\/p>\n

Tean, et seadistuste OpenVPN kohta on tehtud palju. Kuid ise olen silmitsi seisnud probleemiga, et peaaegu \u00fcldse ei ole \u00fchtselt korraldatud teavet selle teema kohta ning otsustasin jagada oma kogemust eelk\u00f5ige neile, kes ei ole OpenVPN-i haldamise gurud, kuid soovivad saavutada kaugtee \u00fchendusi, n\u00e4iteks site-to-site, NAS Synology-l. Samuti j\u00e4tan endale m\u00e4rkme m\u00e4lestuseks.<\/p>\n

Seega, meil on NAS Synology DS918+, millel on installitud pakett VPN<\/a> Server, millel on seadistatud OpenVPN ja kasutajad, kes saavad VPN-serveriga \u00fchendust luua. Ma ei hakka s\u00fcvenema serveri seadistamise \u00fcksikasjadesse DSM-i (NAS serveri veebiv\u00e4rav). See teave on tootja kodulehel olemas.<\/p>\n

Probleem on selles, et DSM-i liides (publikatsiooni hetkel versioon 6.2.3) pakub piiratud seadistusi OpenVPN-serveri haldamiseks. Meie puhul on vaja site-to-site \u00fchenduse skeemi, st VPN-kliendi alamv\u00f5rgu hostid peavad n\u00e4gema VPN-serveri alamv\u00f5rgu hoste ja vastupidi. T\u00fc\u00fcpilised seadistused, mis NAS-is on saadaval, v\u00f5imaldavad seadistada juurdep\u00e4\u00e4su ainult VPN-kliendi alamv\u00f5rgust VPN-serveri alamv\u00f5rku.
\n<\/a><\/noindex>
\nKliendi alamv\u00f5rkudele VPN-serverist ligip\u00e4\u00e4su seadistamiseks peame sisse logima NAS-ile SSH kaudu ja seadistama OpenVPN-serveri konfiguratsioonifaili k\u00e4sitsi.<\/p>\n

Failide redigeerimiseks NAS-is SSH kaudu on mul mugavam kasutada Midnight Commanderi. Selleks olen pakendikeskusesse lisanud allika packages.synocommunity.com<\/a><\/noindex> ja installinud Midnight Commanderi paketi.<\/p>\n

\"OpenVPN-serveri
\n
\nLogime NAS-i SSH kaudu sisse administraatori \u00f5igustega kontoga.<\/p>\n

\"OpenVPN-serveri
\n
\nSisestame sudo su ja veel kord administraatori parooli:<\/p>\n

\"OpenVPN-serveri
\n
\nSisestame k\u00e4su mc ja k\u00e4ivitame Midnight Commanderi:<\/p>\n

\"OpenVPN-serveri
\n
\nSeej\u00e4rel l\u00e4heme kausta \/var\/packages\/VPNCenter\/etc\/openvpn\/ ja otsime faili openvpn.conf:<\/p>\n

\"OpenVPN-serveri
\n
\nKuna \u00fclesanne on \u00fchendada 2 kaugv\u00f5rku, loome DSM-is 2 kontot NAS-is piiratud \u00f5igustega k\u00f5ikides NAS-i teenustes ja anname juurdep\u00e4\u00e4su ainult VPN-\u00fchendusele VPN-serveri seadetes. Iga kliendi jaoks peame seadistama staatilise IP, mille VPN-server m\u00e4\u00e4rab, ja suunama selle IP kaudu liiklust VPN-serveri alamv\u00f5rgust VPN-kliendi alamv\u00f5rku.<\/p>\n

Sisendisubmit:<\/p>\n

VPN-serveri alamv\u00f5rk: 192.168.1.0\/24.
\nOpenVPN-serveri aadresside vahemik 10.8.0.0\/24. Ise OpenVPN server saab aadressi 10.8.0.1.
\nVPN-kliendi 1 alamv\u00f5rk (VPN-kasutaja): 192.168.10.0\/24, peab saama OpenVPN serveris staatilise aadressi 10.8.0.5.
\nVPN kliendi 2 alamv\u00f5rk (VPN-GUST kasutaja): 192.168.5.0\/24, millel peab olema OpenVPN serveris staatiline aadress 10.8.0.4<\/p>\n

Seadete katalooge loome kausta ccd ja sinna loome seadistusefailid, mille nimed vastavad kasutajate sisselogimisele.<\/p>\n

\"OpenVPN-serveri
\n
\nVPN kasutaja jaoks kirjutame failis j\u00e4rgmised seaded:<\/p>\n

\"OpenVPN-serveri
\n
\nVPN-GUST kasutaja jaoks kirjutame failis j\u00e4rgmised:<\/p>\n

\"OpenVPN-serveri
\n
\nAinult OpenVPN serveri konfigureerimine j\u00e4\u00e4b muutmata \u2014 tuleb lisada parameeter kliendi seadete lugemiseks ja lisada marsruudid kliendi alamv\u00f5rkudele:<\/p>\n

\"OpenVPN-serveri
\n
\nAntud ekraanipildil konfi esimesed 2 rida seadistatakse DSM liidese kaudu (m\u00e4rgistades parameetri \u201eLubage klientidel p\u00e4\u00e4seda serveri kohalikku v\u00f5rgusse\u201c OpenVPN serveri seadetes).<\/p>\n

Rida client-config-dir ccd n\u00e4itab, et klientide seadistused asuvad kataloogis ccd.<\/p>\n

J\u00e4rgmised 2 seadistuse rida lisavad marsruudid kliendi alamv\u00f5rkudele vastavate OpenVPN v\u00e4ravate kaudu.<\/p>\n

Ja l\u00f5puks, et k\u00f5ik \u00f5igesti t\u00f6\u00f6le hakkaks, on vajalik rakendada topoloogiat subnet.
\nK\u00f5iki teisi seadeid failis ei muuda.<\/p>\n

P\u00e4rast seadistuste kirjutamist \u00e4rge unustage taask\u00e4ivitada VPN Serveri teenust pakettide halduris. Serveri alamv\u00f5rkude hostides v\u00f5i v\u00e4ravas tuleb kirjutada marsruudid kliendi alamv\u00f5rkudele NAS-i kaudu.
\nMinu puhul oli router (192.168.1.1) k\u00f5ikide hostide, kes asusid alamv\u00f5rgus, avatud v\u00e4rav, kus asus NAS (tema IP 192.168.1.3). Sellel routeril lisasin staatilisse marsruutide tabelisse marsruudid 192.168.5.0\/24 ja 192.168.10.0\/24, millel on v\u00e4rav 192.168.1.3 (NAS).<\/p>\n

\u00c4rge unustage, et kui NASi tulem\u00fc\u00fcr on sisse l\u00fclitatud, tuleb see ka seadistada. Samuti v\u00f5ib kliendipoolses seadmes olla sisse l\u00fclitatud tulem\u00fc\u00fcr, mille seadistamine on samuti vajalik.<\/p>\n

PS. Ma ei ole professionaalne v\u00f5rgu spetsialist, eriti OpenVPN'i osas, jagan lihtsalt oma kogemusi ja avaldan seadistusi, mille tegin, v\u00f5imaldades konfigureerida \u00fchendust alamv\u00f5rkude vahel site-to-site t\u00fc\u00fcbil. V\u00f5ib-olla on olemas ka lihtsam ja\/v\u00f5i \u00f5igem seadistus, olen ainult r\u00f5\u00f5mus, kui jagate oma kogemusi kommentaarides.
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u0430\u043c \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0442\u0435\u043c\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0432 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u043d\u0435\u0442 \u0438 \u0440\u0435\u0448\u0438\u043b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0443\u0440\u0443 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 OpenVPN, \u043d\u043e \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site \u043d\u0430 NAS Synology. \u0417\u0430\u043e\u0434\u043d\u043e \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":98202,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-98201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47NAS Synology OpenVPN serveri seadistamine site-to-site t\u00fc\u00fcbil | ProHoster","description":"Tere k\u00f5igile! Tean, et OpenVPN seadistamise kohta on palju tehtud.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 NAS Synology OpenVPN \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-24T18:42:36+00:00","article:modified_time":"2020-11-17T22:58:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98201","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:03:30","updated":"2026-02-04 14:42:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/98201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=98201"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/98201\/revisions"}],"predecessor-version":[{"id":156767,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/98201\/revisions\/156767"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/98202"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=98201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=98201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=98201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}