CETI/wiki-bastionado
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

docs: update vpn/openvpn/servidor

Browse Source
This commit is contained in:
José Antonio Yáñez Jiménez 2022-05-25 23:19:14 +00:00 committed by José Antonio Yáñez Jiménez
parent e809cabf7a
commit bb90567abb
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
vpn/openvpn/servidor.md
View File

@ -2,7 +2,7 @@
title: OpenVPN - Servidor title: OpenVPN - Servidor
description: Tutorial de instalación del Servidor OpenVPN description: Tutorial de instalación del Servidor OpenVPN
published: true published: true
date: 2022-05-25T23:02:41.280Z date: 2022-05-25T23:19:11.192Z
tags: vpn, servidor, debian tags: vpn, servidor, debian
editor: markdown editor: markdown
dateCreated: 2022-05-18T16:48:57.246Z dateCreated: 2022-05-18T16:48:57.246Z
@ -645,31 +645,33 @@ chmod 700 ~/client-configs/make_config.sh
cd ~/client-configs cd ~/client-configs
sudo ./make_config.sh client1 sudo ./make_config.sh client1
sudo ./make_config.sh client2
sudo ./make_config.sh client3
``` ```
* El fichero resultante, `bastionado-client1.ovpn` deberá entregarse al cliente para que éste pueda conectar a la VPN. * Los fichero resultantes, `bastionado-client{1,2,3}.ovpn` deberán entregarse a los clientes para que éstos puedan conectar a la VPN.
## Habilitando el forwarding en nftables ## Habilitando el forwarding en nftables
```bash
sudo vim /etc/nftables.conf
```
```bash ```bash
#!/usr/sbin/nft -f #!/usr/sbin/nft -f
flush ruleset flush ruleset
define vpn_port=1194 define vpn_port=6174
define vpn_if=tun0 define vpn_if=tun0
define outside_if=enp0s17 define outside_if=enp0s17
define vpn_subnet=10.8.0.0/24 define vpn_subnet=10.10.10.0/24
table inet filter { table inet filter {
chain input { chain input {
# allow generic VPN connections to the Server # allow OpenVPN VPN connections to the Server
udp dport $vpn_port accept udp dport $vpn_port accept
# allow OpenVPN
# udp dport 1194 accept
} }
chain forward { chain forward {