{"id":98201,"date":"2020-10-24T20:42:36","date_gmt":"2020-10-24T18:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site"},"modified":"2020-11-18T00:58:46","modified_gmt":"2020-11-17T22:58:46","slug":"nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","title":{"rendered":"Konfigurera en OpenVPN-server p\u00e5 NAS Synology med site-to-site typ","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hej alla!<\/p>\n

Jag vet att det finns m\u00e5nga inst\u00e4llningar f\u00f6r OpenVPN. Men jag har sj\u00e4lv st\u00f6tt p\u00e5 att det i princip saknas systematisk information om \u00e4mnet i rubriken och har d\u00e4rf\u00f6r beslutat att dela med mig av min erfarenhet, framf\u00f6rallt till dem som inte \u00e4r experter p\u00e5 OpenVPN-administration, men som vill uppn\u00e5 anslutning av fj\u00e4rran n\u00e4tverk typ site-to-site p\u00e5 NAS Synology. Det \u00e4r ocks\u00e5 en anteckning f\u00f6r mig sj\u00e4lv.<\/p>\n

S\u00e5. Det finns en NAS Synology DS918+ med installerat paket VPN<\/a> Server, som har OpenVPN konfigurerat och anv\u00e4ndare som kan ansluta till VPN-servern. Jag g\u00e5r inte in p\u00e5 detaljerna f\u00f6r serverinst\u00e4llningarna i DSM-gr\u00e4nssnittet (webbportalen f\u00f6r NAS-servern). Den informationen finns p\u00e5 tillverkarens hemsida.<\/p>\n

Problemet \u00e4r att DSM-gr\u00e4nssnittet (vid publiceringstillf\u00e4llet version 6.2.3) har ett begr\u00e4nsat antal inst\u00e4llningar f\u00f6r att hantera OpenVPN-servern. I v\u00e5rt fall kr\u00e4vs en anslutningsschema av typen site-to-site, dvs. v\u00e4rdarna i kundens VPN-n\u00e4tverk m\u00e5ste kunna se v\u00e4rdarna i VPN-serverns n\u00e4tverk och vice versa. Typiska inst\u00e4llningar som finns p\u00e5 NAS g\u00f6r det m\u00f6jligt att bara st\u00e4lla in \u00e5tkomst fr\u00e5n v\u00e4rdar i kundens VPN-n\u00e4tverk till v\u00e4rdar i serverns VPN-n\u00e4tverk.
\n<\/a><\/noindex>
\nF\u00f6r att st\u00e4lla in \u00e5tkomst till kundernas n\u00e4tverk fr\u00e5n VPN-servern beh\u00f6ver vi logga in p\u00e5 NAS via SSH och manuellt konfigurera OpenVPN-serverns konfigurationsfil.<\/p>\n

F\u00f6r att redigera filer p\u00e5 NAS via SSH f\u00f6redrar jag att anv\u00e4nda Midnight Commander. F\u00f6r detta har jag i Paketcenter kopplat in k\u00e4llan packages.synocommunity.com<\/a><\/noindex> och installerat paketet Midnight Commander.<\/p>\n

\"Konfigurera
\n
\nLogga in via SSH p\u00e5 NAS med ett konto med administrat\u00f6rsr\u00e4ttigheter.<\/p>\n

\"Konfigurera
\n
\nSkriv sudo su och ange administrat\u00f6rens l\u00f6senord en g\u00e5ng till:<\/p>\n

\"Konfigurera
\n
\nSkriv kommandot mc och k\u00f6r Midnight Commander:<\/p>\n

\"Konfigurera
\n
\nD\u00e4refter g\u00e5r vi till katalogen \/var\/packages\/VPNCenter\/etc\/openvpn\/ och hittar filen openvpn.conf:<\/p>\n

\"Konfigurera
\n
\nF\u00f6r uppgiften beh\u00f6ver vi ansluta 2 fj\u00e4rrn\u00e4tverk. F\u00f6r att g\u00f6ra detta skapar vi via DSM 2 konton p\u00e5 NAS med begr\u00e4nsade r\u00e4ttigheter till alla NAS-tj\u00e4nster och ger \u00e5tkomst endast till VPN-anslutning i inst\u00e4llningarna f\u00f6r VPN Server. F\u00f6r varje klient m\u00e5ste vi konfigurera en statisk IP som tilldelas av VPN-servern och routing genom denna IP f\u00f6r trafik fr\u00e5n VPN-serverns n\u00e4tverk till VPN-klientens n\u00e4tverk.<\/p>\n

Utg\u00e5ngsdatan:<\/p>\n

VPN-servern\u00e4tverk: 192.168.1.0\/24.
\nOpenVPN-serverns adresspool 10.8.0.0\/24. Sj\u00e4lva OpenVPN-servern f\u00e5r adress 10.8.0.1.
\nVPN-klientens n\u00e4tverk 1 (VPN-anv\u00e4ndare): 192.168.10.0\/24, ska f\u00e5 statisk adress 10.8.0.5 fr\u00e5n OpenVPN-servern.
\nKlientens VPN-subn\u00e4t 2 (anv\u00e4ndare VPN-GUST): 192.168.5.0\/24, ska f\u00e5 en statisk adress 10.8.0.4 p\u00e5 OpenVPN-servern.<\/p>\n

I inst\u00e4llningskatalogen skapar vi en mapp ccd och i den skapar vi inst\u00e4llningsfiler med namn som motsvarar anv\u00e4ndarnamnen.<\/p>\n

\"Konfigurera
\n
\nF\u00f6r VPN-anv\u00e4ndaren skriver vi f\u00f6ljande inst\u00e4llningar i filen:<\/p>\n

\"Konfigurera
\n
\nF\u00f6r anv\u00e4ndaren VPN-GUST skriver vi f\u00f6ljande i filen:<\/p>\n

\"Konfigurera
\n
\nDet \u00e5terst\u00e5r bara att justera OpenVPN-serverkonfigurationen - l\u00e4gga till en parameter f\u00f6r att l\u00e4sa klientinst\u00e4llningar och l\u00e4gga till routing f\u00f6r klienternas subn\u00e4t:<\/p>\n

\"Konfigurera
\n
\nI den medf\u00f6ljande sk\u00e4rmdumpen st\u00e4lls de f\u00f6rsta 2 raderna i konfigurationen in via DSM-gr\u00e4nssnittet (genom att markera alternativet \"Till\u00e5t klienter att f\u00e5 \u00e5tkomst till serverns lokala n\u00e4tverk\" i inst\u00e4llningarna f\u00f6r OpenVPN-servern).<\/p>\n

Raden client-config-dir ccd anger att klientinst\u00e4llningarna finns i mappen ccd.<\/p>\n

De f\u00f6ljande 2 inst\u00e4llningsraderna l\u00e4gger till rutter f\u00f6r klienternas subn\u00e4t via de motsvarande OpenVPN-gatewayarna.<\/p>\n

Och slutligen, f\u00f6r korrekt funktion m\u00e5ste subnet-topologin till\u00e4mpas.
\nVi r\u00f6r inte \u00f6vriga inst\u00e4llningar i filen.<\/p>\n

Efter att ha skrivit inst\u00e4llningarna, gl\u00f6m inte att starta om VPN-servertj\u00e4nsten i paketf\u00f6rvaltaren. P\u00e5 v\u00e4rdarna eller gatewayen f\u00f6r v\u00e4rdarna m\u00e5ste rutter skrivas f\u00f6r klienternas subn\u00e4t via NAS.
\nI mitt fall fungerade routern (192.168.1.1) som gateway f\u00f6r alla v\u00e4rdar i subn\u00e4tet d\u00e4r NAS finns (dess IP 192.168.1.3). Jag lade till routingposterna f\u00f6r n\u00e4tverken 192.168.5.0\/24 och 192.168.10.0\/24 i den statiska routingtabellen med gateway 192.168.1.3 (NAS).<\/p>\n

Gl\u00f6m inte att, om brandv\u00e4ggen p\u00e5 NAS \u00e4r aktiverad, m\u00e5ste du ocks\u00e5 konfigurera den. Dessutom kan en brandv\u00e4gg vara aktiverad p\u00e5 klientsidan som ocks\u00e5 m\u00e5ste konfigureras.<\/p>\n

PS. Jag \u00e4r ingen professionell inom n\u00e4tverkstekniker, speciellt n\u00e4r det g\u00e4ller att arbeta med OpenVPN, jag delar bara min erfarenhet och publicerar de inst\u00e4llningar jag gjorde som gjorde det m\u00f6jligt att st\u00e4lla in kommunikation mellan subn\u00e4ten av typen site-to-site. Det kan finnas enklare och\/eller mer korrekta inst\u00e4llningar, jag skulle uppskatta om du delar din erfarenhet i kommentarerna.
\n
K\u00e4lla: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e. \u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u0430\u043c \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0442\u0435\u043c\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0432 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u043d\u0435\u0442 \u0438 \u0440\u0435\u0448\u0438\u043b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0443\u0440\u0443 \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 OpenVPN, \u043d\u043e \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site \u043d\u0430 NAS Synology. \u0417\u0430\u043e\u0434\u043d\u043e \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":98202,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-98201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Inst\u00e4llning av NAS Synology OpenVPN-server av typen site-to-site | ProHoster","description":"Hej alla! Jag vet att det har gjorts m\u00e5nga guider om att st\u00e4lla in OpenVPN.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 NAS Synology OpenVPN \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e \u0442\u0438\u043f\u0443 site-to-site | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0417\u043d\u0430\u044e, \u0447\u0442\u043e \u0442\u0435\u043c \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 OpenVPN \u0441\u0434\u0435\u043b\u0430\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/nastrojka-na-nas-synology-openvpn-servera-po-tipu-site-to-site","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-24T18:42:36+00:00","article:modified_time":"2020-11-17T22:58:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98201","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:03:30","updated":"2026-02-04 14:42:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/98201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=98201"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/98201\/revisions"}],"predecessor-version":[{"id":156767,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/98201\/revisions\/156767"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/98202"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=98201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=98201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=98201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}