❶ 緹ゆ櫀NAS瀹夎匳PN Server 濂椾歡涓夌嶆湇鍔″崗璁璁懼畾
鎴戜滑鍦緹ゆ櫀nas閲屽畨瑁匳PN Server 濂椾歡鍙浠ユ妸鎴戜滑鐨勭兢鏅杗as鍙樻垚涓涓猇PN鏈嶅姟鍣錛屾垜浠鍙浠ュ畨鍏ㄧ殑鍦ㄨ繙絝瀛樺彇Synology NAS 灞鍩熺綉鍐呭垎浜鐨勮祫婧愶紝緹ゆ櫀鐨刅PN server鏁村悎浜嗗父鐢ㄧ殑閫氳鍗忓畾錛 PPTP銆丱penVPN 銆 L2TP/IPSec錛屽綋鎴戜滑鍚鐢ㄤ簡nas鐨剉pn鏈嶅姟錛屼細褰卞搷緋葷粺鐨勭綉緇滄ц兘銆
鎴戜滑鍏堟潵浜嗚В涓涓嬩笁縐嶅崗璁錛
PPTP
PPTP (Point-to-Point Tunneling Protocol錛岀偣瀵圭偣淇￠亾鍗忚) 鏄甯哥敤鐨 VPN 瑙ｅ喅鏂規堬紝涓斿ぇ澶氭暟鐨勫㈡埛絝 (鍖呭惈 Windows銆丮ac銆丩inux 鍙婅屽姩瑁呯疆) 鐨嗘敮鎸併
鑻ヨ佸惎鍔 PPTP VPN 鏈嶅姟鍣錛
1銆佸紑鍚 VPN Server 騫跺墠寰宸︿晶闈㈡澘鐨 PPTP銆
2銆佸嬀閫夊惎鍔 PPTP VPN 鏈嶅姟鍣ㄣ
3銆佸湪鍔ㄦ IP 鍦板潃瀛楁佃緭鍏 VPN 鏈嶅姟鍣ㄧ殑鉶氭嫙 IP 鍦板潃銆傝峰弬闃呬笅鏂圭殑鍏充簬鍔ㄦ IP 鍦板潃鏉ヤ簡瑙ｆ洿澶氫俊鎮銆
4銆佽懼畾鏈澶ц仈鏈烘暟閲忔潵闄愬埗 VPN 鑱旀満鐨勫叡鍚岃仈鏈烘暟閲忋
5銆佽懼畾鍚屼竴璐﹀彿鏈澶氳仈鏈烘暟閲忔潵闄愬埗浣跨敤鍚屼竴涓璐﹀彿鎵榪涜 VPN 鑱旀満鐨勫叡鍚岃仈鏈烘暟閲忋
6銆佷粠璁よ瘉涓嬫媺寮忛夊崟涓閫夋嫨涓嬪垪浠諱竴欏圭洰鏉ヨよ瘉 VPN 瀹㈡埛絝錛
PAP錛氳よ瘉榪囩▼涓錛屽皢涓嶅姞瀵 VPN 瀹㈡埛絝鐨勫瘑鐮併
MS-CHAP v2錛氳よ瘉榪囩▼涓錛屽皢浣跨敤 Microsoft CHAP version 2 鍔犲瘑 VPN 瀹㈡埛絝鐨勫瘑鐮併
7銆佽嫢鎮ㄩ夋嫨 MS-CHAP v2 楠岃瘉錛岃蜂粠鍔犲瘑涓嬫媺寮忛夊崟涓閫夋嫨涓嬪垪浠諱竴欏圭洰鏉ュ姞瀵 VPN 鑱旀満錛
No MPPE錛歏PN 鑱旀満涓嶄細鍙楀埌鍔犲瘑鏈哄埗淇濇姢銆
Optional MPPE錛氬㈡埛絝璁懼畾灝嗗喅瀹 VPN 鑱旀満浼 / 涓嶄細鍙楀埌 40-bit 鎴 128-bit 鍔犲瘑鏈哄埗淇濇姢銆
Require MPPE錛氬㈡埛絝璁懼畾灝嗗喅瀹 VPN 鑱旀満浼氬彈鍒 40-bit 鎴 128-bit 鍔犲瘑鏈哄埗淇濇姢銆
8銆佽懼畾 MTU (鏈澶т紶杈撳崟鍏) 鏉ラ檺鍒 VPN 緗戠粶浼犺緭鐨勬暟鎹灝佸寘澶у皬銆
9銆佸嬀閫夋墜鍔ㄨ懼畾 DNS 騫舵寚媧 DNS 鏈嶅姟鍣ㄧ殑 IP 鍦板潃鏉ュ彂閫佺粰 PPTP 瀹㈡埛絝銆傝嫢鍋滅敤姝ら夐」錛屽垯浼氬皢 Synology NAS 鐩鍓嶆墍浣跨敤鐨 DNS 鏈嶅姟鍣ㄥ彂閫佺粰瀹㈡埛絝銆
10銆佸崟鍑誨楃敤鏉ヨ╁彉鏇寸敓鏁堛
娉ㄦ剰錛
鑱旀満鑷 VPN 鏃訛紝VPN 瀹㈡埛絝鐨勯獙璇佸強鍔犲瘑璁懼畾蹇呴』涓 VPN Server 涓婄殑鐩稿悓錛屽惁鍒欏㈡埛絝灝嗘棤娉曟垚鍔熻仈鏈恆
涓哄吋瀹逛簬榪愯屽湪 Windows銆Mac OS銆乮OS 涓 Android 緋葷粺鐨勫ぇ閮ㄥ垎 PPTP 瀹㈡埛絝錛岄勮劇殑 MTU 鍊間負 1400銆傝嫢鎮ㄧ殑緗戠粶鐜澧冭緝涓哄嶆潅錛屽彲鑳介渶瑕佽懼畾涓涓杈冨皬鐨 MTU 鍊箋傝嫢鎮ㄧ粡甯告敹鍒伴炬椂璁鎮鎴栬仈鏈轟笉紼沖畾錛岃烽檷浣 MTU 鍊箋
璇鋒鏌 Synology NAS 涓庤礬鐢卞櫒涓婄殑絝鍙ｈ漿閫佽勫垯涓庨槻鐏澧欒懼畾錛岀『璁 TCP 1723 絝鍙ｅ凡寮鍚銆
閮ㄥ垎璺鐢卞櫒鍐呭緩 PPTP VPN 鏈嶅姟錛屽洜姝ゅ彲鑳藉凡鍗犵敤 1723 絝鍙ｃ傛偍闇鍏堥忚繃璺鐢卞櫒鐨勭＄悊鎺ュ彛鍏抽棴鍏跺唴寤虹殑 PPTP VPN 鏈嶅姟錛屾墠鑳界『淇 VPN Server 涓婄殑 PPTP VPN 鏈嶅姟鍙浠ユｅ父榪愪綔銆傛ゅ栵紝閮ㄥ垎鏃у紡璺鐢卞櫒鍙鑳戒細灝侀攣 GRE 鍗忚 (IP 鍗忚 47)錛岄犳垚 VPN 鑱旀満澶辮觸錛涘緩璁浣跨敤鏀鎸 VPN pass-through 鑱旀満鐨勮礬鐢卞櫒銆
OpenVPN
OpenVPN 鏄寮鏀懼師濮嬬爜鐨 VPN 鏈嶅姟瑙ｅ喅鏂規堬紝浼氫互 SSL / TLS 鍔犲瘑鏈哄埗淇濇姢 VPN 鑱旀満銆
鑻ヨ佸惎鍔 OpenVPN VPN 鏈嶅姟鍣錛
1銆佸紑鍚 VPN Server錛屽墠寰宸︿晶闈㈡澘鐨 OpenVPN銆
2銆佸嬀閫夊惎鍔 OpenVPN 鏈嶅姟鍣ㄣ
3銆佸湪鍔ㄦ IP 鍦板潃瀛楁佃緭鍏 VPN 鏈嶅姟鍣ㄧ殑鉶氭嫙鍐呴儴 IP 鍦板潃銆傝峰弬闃呬笅鏂圭殑鍏充簬鍔ㄦ IP 鍦板潃鏉ヤ簡瑙ｆ洿澶氫俊鎮銆
4銆佽懼畾鏈澶ц仈鏈烘暟閲忔潵闄愬埗 VPN 鑱旀満鐨勫叡鍚岃仈鏈烘暟閲忋
5銆佽懼畾鍚屼竴璐﹀彿鏈澶氳仈鏈烘暟閲忔潵闄愬埗浣跨敤鍚屼竴涓璐﹀彿榪涜 VPN 鑱旀満鐨勫叡鍚岃仈鏈烘暟閲忋
6銆佷負 OpenVPN 鏁版嵁浼犺緭璁懼畾絝鍙ｄ笌閫氳鍗忚銆傛偍鍙浠ュ喅瀹氳佸皢浣曠嶅崗璁鐨勬暟鎹灝佸寘閫忚繃 VPN 杞閫佽嚦 Synology NAS 鐨勫摢涓絝鍙ｃ傞粯璁ゅ間負 UDP 絝鍙 1194
娉ㄦ剰錛 涓虹『淇 Synology NAS 涓婄殑鏈嶅姟鍙浠ユｅ父榪愪綔錛岃烽伩鍏嶅皢鍚屾牱鐨勪竴緇勭鍙ｄ笌閫氳鍗忚鎸囨淳緇欏叾浠 Synology 鏈嶅姟銆傝峰弬闃呮ょ瘒搴旂敤鏁欏︿互浜嗚В鏇村氫俊鎮銆
7銆佸湪鍔犲瘑涓嬫媺寮忛夊崟涓鎷╀竴錛屼互鍔犲瘑 VPN 淇￠亾涓鐨勬暟鎹灝佸寘銆
8銆佸湪楠岃瘉涓嬫媺寮忛夊崟涓鎷╀竴錛屼互楠岃瘉 VPN 瀹㈡埛絝銆
9銆佽嫢瑕佸湪浼犺緭鏁版嵁鏃跺帇緙╂暟鎹錛岃峰嬀閫夊惎鍔 VPN 鍘嬬緝鑱旀満銆傛ら夐」鍙鎻愬崌浼犺緭閫熷害錛屼絾鍙鑳戒細娑堣楄緝澶氱郴緇熻祫婧愩
10銆佸嬀閫夊厑璁稿㈡埛絝瀛樺彇鏈嶅姟鍣ㄧ殑灞鍩熺綉緇滄潵璁╁㈡埛絝瀛樺彇鏈嶅姟鍣ㄧ殑灞鍩熺綉緇溿
11銆佸嬀閫夊惎鍔 IPv6 鏈嶅姟鍣ㄦā寮忔潵鍚鍔 OpenVPN 鏈嶅姟鍣錛屼互浼犻 IPv6 鍦板潃銆傛偍蹇呴』鍏堝湪鎺у埗闈㈡澘 > 緗戠粶 > 緗戠粶鎺ュ彛涓錛岄忚繃 6in4/6to4/DHCP-PD 鍙栧緱 Prefix錛屽苟鍦ㄦら〉闈涓閫夋嫨璇 Prefix銆
12銆佸崟鍑誨楃敤鏉ヨ╁彉鏇寸敓鏁堛
娉ㄦ剰錛
VPN Server 涓嶆敮鎸佺珯鍙板圭珯鍙扮殑妗ユ帴妯″紡銆
璇鋒鏌 Synology NAS 涓庤礬鐢卞櫒涓婄殑絝鍙ｈ漿閫佽勫垯涓庨槻鐏澧欒懼畾錛岀『璁 UDP 1194 絝鍙ｅ凡寮鍚銆
鍦 Windows Vista 鎴 Windows 7 涓婃墽琛 OpenVPN GUI 鏃訛紝璇鋒敞鎰忥紝UAC (鐢ㄦ埛甯愭埛鎺у埗) 棰勮句負寮鍚銆傛よ懼畾寮鍚鏃訛紝闇浣跨敤浠ョ郴緇熺＄悊鍛樿韓浠芥墽琛岄夐」鏉ラ忚繃 OpenVPN GUI 榪涜岃仈鏈恆
鍦 Windows 涓婇忚繃 OpenVPN GUI 鍚鍔 IPv6 鏈嶅姟鍣ㄦā寮忔椂錛岃鋒敞鎰忎互涓嬩簨欏癸細
VPN 鎵浣跨敤鐨勬帴鍙ｅ悕縐頒笉鍙鍖呭惈絀烘牸錛屼緥濡傦細LAN 1 欏誨彉鏇翠負 LAN1銆
閲嶆柊瀵煎悜緗戝叧 (redirect-gateway) 閫夐」欏葷敱瀹㈡埛絝浜 openvpn.ovpn 妗ｆ堜腑璁懼畾銆傝嫢鎮ㄤ笉鎯寵懼畾姝ら夐」錛屽簲鎵嬪姩璁懼畾 VPN 鎺ュ彛鐨 DNS銆傛偍鍙浠ヤ嬌鐢 Google IPv6 DNS錛2001:4860:4860::8888銆
鑻ヨ佹眹鍑洪厤緗鏂囦歡錛
鍗曞嚮奼囧嚭閰嶇疆鏂囦歡銆侽penVPN 璁 VPN 鏈嶅姟鍣ㄥ彲棰佸彂璇佷功渚涘㈡埛絝浣跨敤銆傛墍奼囧嚭鐨勬。妗堜負 zip 鍘嬬緝鏂囦歡錛屽叾涓鍖呭惈 ca.crt (VPN 鏈嶅姟鍣ㄧ殑鍑璇佹。妗)銆乷penvpn.ovpn (瀹㈡埛絝浣跨敤鐨勯厤緗鏂囦歡妗)錛屼互鍙 README.txt (瀹㈡埛絝濡備綍璁懼畾 OpenVPN 鑱旀満鐨勭畝鏄撹存槑)銆
娉ㄦ剰錛
姣忔″惎鍔 VPN Server 鏃訛紝渚誇細鑷鍔ㄥ嶅埗銆佷嬌鐢ㄦ樉紺轟簬鎺у埗闈㈡澘 > 瀹夊叏鎬 > 鍑璇佷箣鍑璇併傝嫢鎮ㄩ渶浣跨敤絎涓夋柟鍑璇侊紝璇峰埌鎺у埗鍙 > 瀹夊叏鎬 > 鍑璇 > 鏂板炴潵奼囧叆鍑璇侊紝騫墮噸鏂板惎鍔 VPN Server銆
姣忔′慨鏀瑰嚟璇佹枃浠 (鏄劇ず浜庢帶鍒墮潰鏉 > 瀹夊叏鎬 > 鍑璇) 鍚庯紝VPN Server 灝嗕細鑷鍔ㄩ噸鏂板惎鍔ㄣ
L2TP/IPSec
L2TP (Layer 2 Tunneling Protocol) over IPSec 鎻愪緵鏇村畨鍏ㄧ殑鉶氭嫙縐佹湁緗戠粶錛屼笖澶у氭暟鐨勫㈡埛絝 (濡 Windows銆丮ac銆丩inux 鍙婅屽姩瑁呯疆) 鐨嗘敮鎸併
鑻ヨ佸惎鍔 L2TP/IPSec VPN 鏈嶅姟鍣錛
1銆佸紑鍚 VPN Server 騫跺墠寰宸︿晶闈㈡澘鐨 L2TP/IPSec銆
2銆佸嬀閫夊惎鍔 L2TP/IPSec VPN 鏈嶅姟鍣ㄣ
3銆佸湪鍔ㄦ IP 鍦板潃瀛楁佃緭鍏 VPN 鏈嶅姟鍣ㄧ殑鉶氭嫙 IP 鍦板潃銆傝峰弬闃呬笅鏂圭殑鍏充簬鍔ㄦ IP 鍦板潃鏉ヤ簡瑙ｆ洿澶氫俊鎮銆
4銆佽懼畾鏈澶ц仈鏈烘暟閲忔潵闄愬埗 VPN 鑱旀満鐨勫叡鍚岃仈鏈烘暟閲忋
5銆佽懼畾鍚屼竴璐﹀彿鏈澶氳仈鏈烘暟閲忔潵闄愬埗浣跨敤鍚屼竴涓璐﹀彿榪涜 VPN 鑱旀満鐨勫叡鍚岃仈鏈烘暟閲忋
6銆佷粠璁よ瘉涓嬫媺寮忛夊崟涓閫夋嫨涓嬪垪浠諱竴欏圭洰鏉ヨよ瘉 VPN 瀹㈡埛絝錛
PAP錛氳よ瘉榪囩▼涓錛屽皢涓嶅姞瀵 VPN 瀹㈡埛絝鐨勫瘑鐮併
MS-CHAP v2錛氳よ瘉榪囩▼涓錛屽皢浣跨敤 Microsoft CHAP version 2 鍔犲瘑 VPN 瀹㈡埛絝鐨勫瘑鐮併
7銆佽懼畾 MTU (鏈澶т紶杈撳崟鍏) 鏉ラ檺鍒 VPN 緗戠粶浼犺緭鐨勬暟鎹灝佸寘澶у皬銆
8銆佸嬀閫夋墜鍔ㄨ懼畾 DNS 騫舵寚媧 DNS 鏈嶅姟鍣ㄧ殑 IP 鍦板潃鏉ュ彂閫佺粰 L2TP/IPSec 瀹㈡埛絝銆傝嫢鍋滅敤姝ら夐」錛屽垯浼氬皢 Synology NAS 鐩鍓嶆墍浣跨敤鐨 DNS 鏈嶅姟鍣ㄥ彂閫佺粰瀹㈡埛絝銆
9銆佽嫢瑕佸彂鎸 VPN 鏈澶ф晥鑳斤紝閫夊彇鎵ц屾牳蹇 (kernel) 妯″紡銆
10銆佽緭鍏ュ苟紜璁ら勫厛鍏變韓瀵嗛掗銆傛偍搴斿皢姝ゅ瘑閽ユ彁渚涚粰 L2TP/IPSec VPN 浣跨敤鑰呬互楠岃瘉鑱旀満銆
11銆佸嬀閫夊惎鍔 SHA2-256 鍏煎規ā寮 (96 bit)錛屼互璁╃壒瀹氬㈡埛絝 (闈 RFC 鏍囧噯) 鍙浠ヤ嬌鐢 L2TP/IPSec 鑱旀満銆
12銆佸崟鍑誨楃敤鏉ヨ╁彉鏇寸敓鏁堛
娉ㄦ剰錛
鑱旀満鑷 VPN 鏃訛紝VPN 瀹㈡埛絝鐨勯獙璇佸強鍔犲瘑璁懼畾蹇呴』涓 VPN Server 涓婄殑璁懼畾鐩稿悓錛屽惁鍒欏㈡埛絝灝嗘棤娉曟垚鍔熻繘琛岃仈鏈恆
涓哄吋瀹逛簬榪愯屽湪 Windows銆丮ac OS銆乮OS 涓 Android 緋葷粺鐨勫ぇ閮ㄥ垎 L2TP/IPSec 瀹㈡埛絝錛岄勮劇殑 MTU 鍊間負 1400銆傝嫢鎮ㄧ殑緗戠粶鐜澧冭緝涓哄嶆潅錛屽彲鑳介渶瑕佽懼畾涓涓杈冨皬鐨 MTU 鍊箋傝嫢鎮ㄧ粡甯告敹鍒伴炬椂璁鎮鎴栬仈鏈轟笉紼沖畾錛岃烽檷浣 MTU 鍊箋
璇鋒鏌 Synology NAS 涓庤礬鐢卞櫒涓婄殑絝鍙ｈ漿閫佽勫垯涓庨槻鐏澧欒懼畾錛屼互紜璁 UDP 1701銆500銆4500 絝鍙ｅ凡寮鍚銆
閮ㄥ垎璺鐢卞櫒鍐呭緩 L2TP 鎴 IPSec VPN 鏈嶅姟錛屽洜姝ゅ彲鑳藉凡鍗犵敤 1701銆500 鎴 4500 絝鍙ｃ傛偍闇鍏堥忚繃璺鐢卞櫒鐨勭＄悊鎺ュ彛鍏抽棴鍏跺唴寤虹殑 L2TP 鎴 IPsec VPN 鏈嶅姟錛屾墠鑳界『淇 VPN Server 涓婄殑 L2TP/IPsec VPN 鏈嶅姟鍙浠ユｅ父榪愪綔銆傚緩璁浣跨敤鏀鎸 VPN pass-through 鑱旀満鐨勮礬鐢卞櫒銆
鍏充簬鍔ㄦ IP 鍦板潃
VPN Server 浼氫緷鎹鎮ㄥ湪鍔ㄦ IP 鍦板潃涓杈撳叆鐨勬暟瀛楋紝浠庤櫄鎷 IP 鍦板潃鑼冨洿涓閫夋嫨涓涓 IP 鍦板潃鏉ュ垎閰嶇粰 VPN 瀹㈡埛絝浣跨敤銆備緥濡傦細鑻 VPN 鏈嶅姟鍣ㄧ殑鍔ㄦ IP 鍦板潃璁懼畾涓恆10.0.0.0銆嶏紝鍒 PPTP VPN 瀹㈡埛絝鐨勮櫄鎷 IP 鍦板潃鑼冨洿涓恆10.0.0.1銆嶈嚦銆10.0.0.[鏈澶ц仈鏈烘暟閲廬銆嶏紱OpenVPN 瀹㈡埛絝鐨勮櫄鎷 IP 鍦板潃鑼冨洿鍒欎負銆10.0.0.2銆嶈嚦銆10.0.0.255銆嶃
閲嶈佷簨欏癸細 鎸囧畾 VPN 鏈嶅姟鍣ㄧ殑鍔ㄦ IP 鍦板潃涔嬪墠錛岃鋒敞鎰忥細
1銆乂PN 鏈嶅姟鍣ㄥ彲浣跨敤鐨勫姩鎬 IP 鍦板潃蹇呴』涓轟笅鍒楀叾涓錛
浠庛10.0.0.0銆嶈嚦銆10.255.255.0銆
浠庛172.16.0.0銆嶈嚦銆172.31.255.0銆
浠庛192.168.0.0銆嶈嚦銆192.168.255.0銆
2銆佹偍鎸囧畾鐨 VPN 鏈嶅姟鍣ㄥ姩鎬 IP 鍦板潃浠ュ強鎸囨淳緇 VPN 瀹㈡埛絝鐨勮櫄鎷 IP 鍦板潃錛岀殕涓嶈兘涓庡矓鍩熺綉緇滀腑浠諱竴宸蹭嬌鐢ㄧ殑 IP 鍦板潃鍐茬獊銆
鍏充簬瀹㈡埛絝榪涜 VPN 鑱旀満鏃朵嬌鐢ㄧ殑緗戝叧璁懼畾
浣跨敤 VPN 鑱旀満鑷 Synology NAS 鐨勫矓鍩熺綉緇滀箣錛屽㈡埛絝鍙鑳介渶瑕佷負 VPN 鑱旀満鍙樻洿緗戝叧璁懼畾錛涘惁鍒欙紝鍦 VPN 鑱旀満寤虹珛涔嬪悗錛屽畠浠鍙鑳戒細鏃犳硶鑱旀満鑷沖洜鐗圭綉銆