{"id":98201,"date":"2020-10-24T20:42:36","date_gmt":"2020-10-24T18:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site"},"modified":"2020-11-18T00:58:46","modified_gmt":"2020-11-17T22:58:46","slug":"nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","title":{"rendered":"OpenVPN szerver be\u00e1ll\u00edt\u00e1sa NAS Synology-n site-to-site t\u00edpusban","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mindenkinek szia!<\/p>\n

Tudom, hogy az OpenVPN-be sok be\u00e1ll\u00edt\u00e1st k\u00e9sz\u00edtettek. Azonban \u00e9n magam is azzal szembes\u00fcltam, hogy a c\u00edmhez kapcsol\u00f3d\u00f3an l\u00e9nyeg\u00e9ben nincsen rendszerezett inform\u00e1ci\u00f3, \u00edgy \u00fagy d\u00f6nt\u00f6ttem, hogy megosztom a tapasztalataimat els\u0151sorban azokkal, akik nem guru az OpenVPN adminisztr\u00e1ci\u00f3j\u00e1ban, de szeretn\u00e9nek t\u00e1voli alh\u00e1l\u00f3zatokat csatlakoztatni site-to-site t\u00edpus\u00fa kapcsolatban a NAS Synology-on. Emellett magamnak is eml\u00e9keztet\u0151k\u00e9nt szeretn\u00e9k egy jegyzetet hagyni.<\/p>\n

Teh\u00e1t. Van egy NAS Synology DS918+ telep\u00edtett VPN<\/a> Serverrel, OpenVPN be\u00e1ll\u00edtva, \u00e9s olyan felhaszn\u00e1l\u00f3kkal, akik csatlakozhatnak a VPN szerverhez. Nem m\u00e9lyedn\u00e9k el a szerver be\u00e1ll\u00edt\u00e1sainak r\u00e9szleteibe a DSM interf\u00e9szen (a NAS szerver webport\u00e1lj\u00e1n). Az inform\u00e1ci\u00f3k a gy\u00e1rt\u00f3 weboldal\u00e1n el\u00e9rhet\u0151k.<\/p>\n

A probl\u00e9ma az, hogy a DSM interf\u00e9sz (a k\u00f6zz\u00e9t\u00e9tel id\u0151pontj\u00e1ban a 6.2.3 verzi\u00f3) korl\u00e1tozott sz\u00e1m\u00fa be\u00e1ll\u00edt\u00e1st k\u00edn\u00e1l az OpenVPN szerver kezel\u00e9s\u00e9hez. Az eset\u00fcnkben site-to-site t\u00edpus\u00fa kapcsolatra van sz\u00fcks\u00e9g, azaz a VPN kliens alh\u00e1l\u00f3zat\u00e1nak g\u00e9peinek l\u00e1tnia kell a VPN szerver alh\u00e1l\u00f3zat\u00e1nak g\u00e9peit, \u00e9s ford\u00edtva. A NAS-on el\u00e9rhet\u0151 alapbe\u00e1ll\u00edt\u00e1sok csak a VPN kliens alh\u00e1l\u00f3zat g\u00e9peinek hozz\u00e1f\u00e9r\u00e9s\u00e9t teszik lehet\u0151v\u00e9 a VPN szerver alh\u00e1l\u00f3zat g\u00e9peihez.
\n<\/a><\/noindex>
\nA VPN kliens alh\u00e1l\u00f3zatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s be\u00e1ll\u00edt\u00e1s\u00e1hoz a VPN szerver alh\u00e1l\u00f3zatb\u00f3l be kell l\u00e9pn\u00fcnk a NAS-ra SSH-n kereszt\u00fcl, \u00e9s manu\u00e1lisan be kell \u00e1ll\u00edtanunk az OpenVPN szerver konfigur\u00e1ci\u00f3s f\u00e1jlj\u00e1t.<\/p>\n

A f\u00e1jlok szerkeszt\u00e9s\u00e9hez a NAS-on SSH-n kereszt\u00fcl sz\u00e1momra k\u00e9nyelmesebb a Midnight Commander haszn\u00e1lata. Ehhez a Csomagk\u00f6zpontban hozz\u00e1adtam a forr\u00e1st packages.synocommunity.com<\/a><\/noindex> \u00e9s telep\u00edtettem a Midnight Commander csomagot.<\/p>\n

\"OpenVPN
\n
\nL\u00e9pj\u00fcnk be SSH-n a NAS-ra egy adminisztr\u00e1tori jogosults\u00e1gokkal rendelkez\u0151 fi\u00f3kkal.<\/p>\n

\"OpenVPN
\n
\n\u00cdrjuk be a sudo su parancsot, \u00e9s ism\u00e9t meg kell adnunk az adminisztr\u00e1tor jelszav\u00e1t:<\/p>\n

\"OpenVPN
\n
\n\u00cdrjuk be a mc parancsot, \u00e9s ind\u00edtsuk el a Midnight Commandert:<\/p>\n

\"OpenVPN
\n
\nEzut\u00e1n navig\u00e1ljunk a \/var\/packages\/VPNCenter\/etc\/openvpn\/ k\u00f6nyvt\u00e1rba, \u00e9s keress\u00fck meg az openvpn.conf f\u00e1jlt:<\/p>\n

\"OpenVPN
\n
\nA feladatunk az, hogy k\u00e9t t\u00e1voli alh\u00e1l\u00f3zatot csatlakoztassunk. Ehhez a DSM-en kereszt\u00fcl l\u00e9trehozunk 2 fi\u00f3kot a NAS-on korl\u00e1tozott jogosults\u00e1gokkal minden NAS szolg\u00e1ltat\u00e1sra, \u00e9s csak VPN csatlakoz\u00e1st enged\u00fcnk meg a VPN Szerver be\u00e1ll\u00edt\u00e1sain\u00e1l. Minden kliens eset\u00e9ben statikus IP-t kell be\u00e1ll\u00edtanunk, amelyet a VPN szerver oszt ki, \u00e9s az IP-n kereszt\u00fcl kell a VPN szerver alh\u00e1l\u00f3zatforgalm\u00e1t a VPN kliens alh\u00e1l\u00f3zat\u00e1ra ir\u00e1ny\u00edtani.<\/p>\n

Bemeneti adatok:<\/p>\n

A VPN szerver alh\u00e1l\u00f3zata: 192.168.1.0\/24.
\nAz OpenVPN szerver c\u00edmtartom\u00e1nya 10.8.0.0\/24. Maga az OpenVPN szerver a 10.8.0.1 c\u00edmet kapja.
\nAz 1. VPN kliens alh\u00e1l\u00f3zata (VPN felhaszn\u00e1l\u00f3): 192.168.10.0\/24, amelynek statikus c\u00edmet kell kapnia a 10.8.0.5 OpenVPN szerveren.
\nA VPN subnet for the client 2 (user VPN-GUST): 192.168.5.0\/24, must receive a static address of 10.8.0.4 on the OpenVPN server.<\/p>\n

In the settings directory, create a folder named ccd and create configuration files within it named according to the users' logins.<\/p>\n

\"OpenVPN
\n
\nFor the VPN user, the following settings are specified in the file:<\/p>\n

\"OpenVPN
\n
\nFor the VPN-GUST user, the following is specified in the file:<\/p>\n

\"OpenVPN
\n
\nIt remains only to fine-tune the OpenVPN server configuration \u2014 add a parameter to read client settings and add routes to client subnets:<\/p>\n

\"OpenVPN
\n
\nIn the provided screenshot, the first 2 lines of the config are configured using the DSM interface (by enabling the 'Allow clients to access the server's local network' option in the OpenVPN server settings).<\/p>\n

The line client-config-dir ccd indicates that client configurations are stored in the ccd folder.<\/p>\n

The next 2 configuration lines add routes to client subnets through the corresponding OpenVPN gateways.<\/p>\n

And finally, for proper operation, it is necessary to apply the subnet topology.
\nDo not touch all other settings in the file.<\/p>\n

After specifying the settings, do not forget to restart the VPN Server service in the package manager. On hosts or the gateway for the hosts, specify routes to client subnets through the NAS.
\nIn my case, the gateway for all hosts in the subnet where the NAS is located (its IP 192.168.1.3) was a router (192.168.1.1). On this router, I added routing entries for the networks 192.168.5.0\/24 and 192.168.10.0\/24 to the gateway 192.168.1.3 (NAS) in the static routing table.<\/p>\n

Do not forget that with the firewall enabled on the NAS, it will also need to be configured. Additionally, there may be a firewall enabled on the client side that will also need to be configured.<\/p>\n

P.S. I am not a professional in networking technologies and particularly in working with OpenVPN, I am just sharing my experience and publishing the settings I made that allowed to set up a connection between subnets in a site-to-site manner. There may be simpler and\/or more correct settings, and I would be happy if you share your experiences in the comments.
\n
Forr\u00e1s: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u0430\u043c \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0442\u0435\u043c\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0432 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u043d\u0435\u0442 \u0438 \u0440\u0435\u0448\u0438\u043b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0443\u0440\u0443 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 OpenVPN, \u043d\u043e \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site \u043d\u0430 NAS Synology. \u0417\u0430\u043e\u0434\u043d\u043e \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":98202,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-98201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Setting up Synology NAS OpenVPN server in a site-to-site manner | ProHoster","description":"Hello everyone! I know that many have done setups for OpenVPN.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 NAS Synology OpenVPN \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e.","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-24T18:42:36+00:00","article:modified_time":"2020-11-17T22:58:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98201","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:03:30","updated":"2026-02-04 14:42:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/98201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=98201"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/98201\/revisions"}],"predecessor-version":[{"id":156767,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/98201\/revisions\/156767"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/98202"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=98201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=98201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=98201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}