{"id":98201,"date":"2020-10-24T20:42:36","date_gmt":"2020-10-24T18:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site"},"modified":"2020-11-18T00:58:46","modified_gmt":"2020-11-17T22:58:46","slug":"nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","title":{"rendered":"Konfigurimi i nj\u00eb serveri OpenVPN n\u00eb NAS Synology n\u00eb m\u00ebnyr\u00eb site-to-site","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve!<\/p>\n

E di, se di OpenVPN ka shum\u00eb konfigursione t\u00eb b\u00ebr\u00eb. Megjithat\u00eb, un\u00eb vet\u00eb u p\u00ebrballa me faktin se nuk ka informacion t\u00eb sistematizuar mbi tem\u00ebn e titullit dhe vendosa t\u00eb ndaj p\u00ebrvoj\u00ebn time, kryesisht me ata q\u00eb nuk jan\u00eb guru n\u00eb administrimin e OpenVPN, por d\u00ebshirojn\u00eb t\u00eb arrijn\u00eb nj\u00eb lidhje midis n\u00ebndeg\u00ebve si site-to-site n\u00eb NAS Synology. Nj\u00ebherazi, do ta l\u00eb edhe p\u00ebr veten time nj\u00eb sh\u00ebnim p\u00ebr kujtim.<\/p>\n

K\u00ebshtu. Kam nj\u00eb NAS Synology DS918+ me paket\u00ebn VPN<\/a> Server, i konfigurur me OpenVPN dhe p\u00ebrdoruesit q\u00eb mund t\u00eb lidhen me \u0441\u0435\u0440\u0432\u0435\u0440in VPN. Nuk do t\u00eb hyj n\u00eb detaje t\u00eb konfigurimit t\u00eb serverit n\u00eb nd\u00ebrfaqen DSM (portali web i serverit NAS). K\u00ebto informata ndodhen n\u00eb faqen e prodhuesit.<\/p>\n

Problemi \u00ebsht\u00eb se nd\u00ebrfaqja DSM (n\u00eb dat\u00ebn e publikimit versioni 6.2.3) ka nj\u00eb num\u00ebr t\u00eb kufizuar konfigurimesh p\u00ebr menaxhimin e serverit OpenVPN. N\u00eb rastin ton\u00eb, nevojitet nj\u00eb skem\u00eb lidhjeje midis site-ve, dmth. hostet e n\u00ebndeg\u00ebs s\u00eb klientit VPN duhet t\u00eb shohin hostet e n\u00ebndeg\u00ebs s\u00eb serverit VPN dhe anasjelltas. Konfigurimet tipike t\u00eb disponueshme n\u00eb NAS, lejojn\u00eb t\u00eb konfiguroni qasjen vet\u00ebm nga hostet e n\u00ebndeg\u00ebs s\u00eb klientit VPN drejt hosteve t\u00eb n\u00ebndeg\u00ebs s\u00eb serverit VPN.
\n<\/a><\/noindex>
\nP\u00ebr t\u00eb konfigururar qasjen n\u00eb n\u00ebndeg\u00ebt e klient\u00ebve VPN nga n\u00ebndega e serverit VPN, do t\u00eb na nevojitet t\u00eb hyjm\u00eb n\u00eb NAS p\u00ebrmes SSH dhe t\u00eb modifikojm\u00eb dosjen e konfigurimit t\u00eb serverit OpenVPN manualisht.<\/p>\n

P\u00ebr redaktimin e dosjeve n\u00eb NAS p\u00ebrmes SSH, m\u00eb p\u00eblqen t\u00eb p\u00ebrdor Midnight Commander. P\u00ebr k\u00ebt\u00eb, un\u00eb aktivizova burimin n\u00eb Qendren e Paketave packages.synocommunity.com<\/a><\/noindex> dhe instalova paket\u00ebn Midnight Commander.<\/p>\n

\"Konfigurimi
\n
\nHyni p\u00ebrmes SSH n\u00eb NAS me nj\u00eb llogari administratori.<\/p>\n

\"Konfigurimi
\n
\nShkruani sudo su dhe p\u00ebrs\u00ebri jepni fjal\u00ebkalimin e administratorit:<\/p>\n

\"Konfigurimi
\n
\nShkruani komand\u00ebn mc dhe nisi Midnight Commander:<\/p>\n

\"Konfigurimi
\n
\nM\u00eb pas kaloni n\u00eb katalogun \/var\/packages\/VPNCenter\/etc\/openvpn\/ dhe gjeni dosjen openvpn.conf:<\/p>\n

\"Konfigurimi
\n
\nSipas detyr\u00ebs, na nevojitet t\u00eb lidhim 2 n\u00ebndeg\u00eb t\u00eb larg\u00ebta. P\u00ebr k\u00ebt\u00eb, krijojm\u00eb p\u00ebrmes DSM 2 llogari n\u00eb NAS me t\u00eb drejta t\u00eb kufizuara p\u00ebr t\u00eb gjitha sh\u00ebrbimet NAS dhe japim qasje vet\u00ebm p\u00ebr lidhjen VPN n\u00eb konfigurimet e VPN Server. P\u00ebr \u00e7do klient, na nevojitet t\u00eb konfiguroni nj\u00eb IP statike t\u00eb caktuar nga serveri VPN dhe rutuese p\u00ebrmes k\u00ebsaj IP-je t\u00eb trafikut nga n\u00ebndega e serverit VPN n\u00eb n\u00ebndeg\u00ebn e klientit VPN.<\/p>\n

T\u00eb dh\u00ebnat e origjin\u00ebs:<\/p>\n

N\u00ebndega e serverit VPN: 192.168.1.0\/24.
\nGrupi i adresave t\u00eb serverit OpenVPN 10.8.0.0\/24. Vet\u00eb serveri OpenVPN merr adres\u00ebn 10.8.0.1.
\nN\u00ebndega e klientit VPN 1 (p\u00ebrdoruesi VPN): 192.168.10.0\/24, duhet t\u00eb marr\u00eb n\u00eb serverin OpenVPN nj\u00eb adres\u00eb statike 10.8.0.5
\nN subneti VPN e klientit 2 (p\u00ebrdoruesi VPN-GUST): 192.168.5.0\/24, duhet t\u00eb marr\u00eb nj\u00eb adres\u00eb statike 10.8.0.4 n\u00eb serverin OpenVPN.<\/p>\n

N\u00eb katalogun e konfigurimeve krijojm\u00eb nj\u00eb dosje ccd dhe prej saj krijojm\u00eb skedar\u00ebt e konfigurimeve me emra p\u00ebrkat\u00ebs me emrat e p\u00ebrdoruesve.<\/p>\n

\"Konfigurimi
\n
\nP\u00ebr p\u00ebrdoruesin VPN n\u00eb skedar shkruajm\u00eb cil\u00ebsimet e m\u00ebposhtme:<\/p>\n

\"Konfigurimi
\n
\nP\u00ebr p\u00ebrdoruesin VPN-GUST n\u00eb skedar shkruajm\u00eb si m\u00eb posht\u00eb:<\/p>\n

\"Konfigurimi
\n
\nTani duhet vet\u00ebm t\u00eb konfiguroni serverin OpenVPN - t\u00eb shtoni parametrin p\u00ebr t\u00eb lexuar cil\u00ebsimet e klient\u00ebve dhe t\u00eb shtoni rruget mbi subnetet e klient\u00ebve:<\/p>\n

\"Konfigurimi
\n
\nN\u00eb skrinshotin e dh\u00ebn\u00eb, dy rreshtat e par\u00eb t\u00eb konfigurimit vendosen p\u00ebrmes nd\u00ebrfaqes DSM (v\u00ebnia e shenj\u00ebs n\u00eb parametrin \"Lejo klient\u00ebt t\u00eb ken\u00eb akses n\u00eb rrjetin lokal t\u00eb serverit\" n\u00eb cil\u00ebsimet e serverit OpenVPN).<\/p>\n

Rreshti client-config-dir ccd tregon q\u00eb cil\u00ebsimet e klient\u00ebve ndodhen n\u00eb dosjen ccd.<\/p>\n

Pastaj dy rreshta t\u00eb cil\u00ebsimeve shtojn\u00eb rruge mbi subnetet e klient\u00ebve p\u00ebrmes portave p\u00ebrkat\u00ebse OpenVPN.<\/p>\n

Dhe n\u00eb fund, p\u00ebr funksionim t\u00eb sakt\u00eb \u00ebsht\u00eb e nevojshme t\u00eb aplikoni topologjin\u00eb subnet.
\nT\u00eb gjitha cil\u00ebsimet e tjera n\u00eb skedarin nuk i prekim.<\/p>\n

Pas shkruarjes s\u00eb cil\u00ebsimeve mos harroni t\u00eb riaktivizoni sh\u00ebrbimin VPN Server n\u00eb menaxherin e paketave. N\u00eb hostet ose portin p\u00ebr hostet, duhet t\u00eb shkruani rruget mbi subnetet e klient\u00ebve p\u00ebrmes NAS.
\nN\u00eb rastin tim, porta p\u00ebr t\u00eb gjitha hostet e subnetit, ku ndodhet NAS (IP-ja e tij 192.168.1.3), ishte routeri (192.168.1.1). N\u00eb k\u00ebt\u00eb router kam shtuar n\u00eb tabel\u00ebn statike t\u00eb rrugeve regjistrimet p\u00ebr rrjetet 192.168.5.0\/24 dhe 192.168.10.0\/24 drejtuar n\u00eb port\u00ebn 192.168.1.3 (NAS).<\/p>\n

Mos harroni se me firewall aktiv n\u00eb NAS, do t\u00eb jet\u00eb e nevojshme ta konfiguroni at\u00eb po ashtu. P\u00ebr m\u00eb tep\u00ebr, n\u00eb an\u00ebn e klientit mund t\u00eb jet\u00eb aktivizuar nj\u00eb firewall, i cili gjithashtu do t\u00eb duhet t\u00eb konfiguroni.<\/p>\n

P.S. Un\u00eb nuk jam profesionist n\u00eb teknologjit\u00eb rrjet\u00ebsore dhe ve\u00e7an\u00ebrisht n\u00eb pun\u00ebn me OpenVPN, thjesht po ndaj p\u00ebrvoj\u00ebn time dhe publikoj cil\u00ebsimet q\u00eb kam b\u00ebr\u00eb, duke lejuar t\u00eb konfiguroj lidhjen nd\u00ebrmjet subnetve n\u00eb tipin site-to-site. Ndoshta ka edhe nj\u00eb konfigurim m\u00eb t\u00eb thjesht\u00eb dhe\/ose t\u00eb sakt\u00eb, do t\u00eb jem vet\u00ebm i lumtur, n\u00ebse ndani p\u00ebrvoj\u00ebn tuaj n\u00eb komentet.
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u0430\u043c \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0442\u0435\u043c\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0432 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u043d\u0435\u0442 \u0438 \u0440\u0435\u0448\u0438\u043b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0443\u0440\u0443 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 OpenVPN, \u043d\u043e \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site \u043d\u0430 NAS Synology. \u0417\u0430\u043e\u0434\u043d\u043e \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":98202,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-98201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Konfigurimi n\u00eb NAS Synology OpenVPN server n\u00eb tipin site-to-site | ProHoster","description":"P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve! E di se jan\u00eb b\u00ebr\u00eb shum\u00eb p\u00ebrgatitje p\u00ebr konfigurimet e OpenVPN.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 NAS Synology OpenVPN \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-24T18:42:36+00:00","article:modified_time":"2020-11-17T22:58:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98201","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:03:30","updated":"2026-02-04 14:42:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=98201"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98201\/revisions"}],"predecessor-version":[{"id":156767,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98201\/revisions\/156767"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/98202"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=98201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=98201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=98201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}