OpenVPN Access Server: qalisa kabusha i-daemon noma sebenzisa isilungiselelo

Imiyalo emibili inanyathiselwa entweni ebukeka njengomsebenzi ofanayo ku-OpenVPN Access Server, futhi yenza izinto ezihlukile. I-systemctl restart openvpnas imisa futhi iqalise kabusha wonke umkhiqizo. I-sacli start iphakamisa izinsizakalo zangaphakathi ezifunda ukucushwa okusanda kushintshwa. Ukukhetha phakathi kwazo akuyona indaba yokuthanda: kuncike kulokho okushiwo imibhalo yesilungiselelo uqobo, ukuthi isikhathi sakho sidlula kuseva ozoqalisa kabusha yini, nokuthi ngabe ubheka umkhiqizo ofanele.

Izendlalelo ezimbili, i-daemon eyodwa

I-Access Server isebenza njengeyunithi eyodwa ye-systemd, i-openvpnas, futhi leyo daemon yengamela izinsizakalo zangaphakathi ngemuva kwesixhumi esibonakalayo sewebhu kanye nabalaleli be-VPN. I-sacli iyisixhumi somugqa womyalo kuleyo nto yokufaka efanayo, ku-/usr/local/openvpn_as/scripts/sacli, futhi ingaqalisa, imise futhi ibuze lezo zingxenye zangaphakathi ngaphandle kokushintsha iyunithi.

Yingakho kukhona yomibili imiyalo. Ukuqalisa kabusha i-daemon kwenza konke kusebenze kabusha, kuhlanganise inqubo eqeda amashubhu amaklayenti. I-sacli start icela i-daemon esivele isebenza ukuthi iphakamise izingxenye zayo ukuze zifunde ukucushwa okusha, futhi yilokho iningi lezinguquko zezici ezikudinga ngempela.

Isimo sokuqala: imibhalo yesilungiselelo ithini

Funda ikhasi lesilungiselelo osishintshile, hhayi lesilungiselelo osishintshe ngenyanga edlule. Ngemuva kwesici esibhalwe nge-ConfigPut kuvame ukulandela i-sacli start, futhi labo babili bayisinyathelo sokusebenzisa esibhalwe emibhalweni. Ushintsho ekuziphatheni ezingeni labalaleli, noma noma yini ikhasi eliyichaza njengedinga ukuqalisa kabusha kwensizakalo, yisigaba lapho ukuqalisa kabusha kweyunithi kulungile.

Imiyalo emibili ayishintsheki, ngakho indlela yokwehluleka lapho uqagelayo ayilingani. Ukusebenzisa i-sacli start lapho kwakudingeka ukuqalisa kabusha okuphelele kushiya inqubo endala isasebenza ngokucushwa kwangaphambilini, okubonakala sengathi isilungiselelo sashinganyekwa. Ukuqalisa kabusha okuphelele lapho i-sacli start yayanele kukhipha iklayenti ngayinye exhunyiwe ngaphandle kwesizathu.

Isimo sesibili: ingabe isikhathi sakho singaphakathi komhubhe

Uma uphatha i-Access Server nge-VPN eyinikezayo, ukuqalisa kabusha kususa uxhumano oluthwala i-shell yakho. Umyalo ungase uqede ngemuva kokufa kwesikhathi sakho, ngakho uqagela ukuthi usebenzile yini. Ngesizathu esifanayo i-sacli start nayo ingaphazamisa isikhathi isikhashana lapho ingxenye eqalisa kabusha isebenza ngethrafikhi yakho.

Gcina indlela engaphandle kwebhande ivuliwe ngaphambi kwanoma yimuphi umyalo: ikhonsoli yomhlinzeki, ikhonsoli ye-hypervisor, noma isikhathi se-serial. Lesi simo sinquma ukuthi uwusebenzisa nini umyalo, hhayi ukuthi muphi, futhi yiso esishintsha ushintsho lwamaminithi amabili lube umbiko wokuphazamiseka.

Isimo sesithathu: ingabe lo umkhiqizo oqondile

I-Access Server akuyo i-Community OpenVPN. Ukufakwa komphakathi kusebenzisa amayunithi afana ne-openvpn@server noma i-openvpn-client@profile, ukucushwa kuku-/etc/openvpn, futhi i-sacli ayikho lapho. Ukuqalisa kabusha iyunithi ngayinye ene-openvpn egameni layo kuseva eyabiwe yindlela amashubhu angenawo ukuxhumana awa ngayo kanyekanye.

Khomba ngaphambi kokuthinta noma yini: i-systemctl status openvpnas --no-pager iphendula ukuthi i-Access Server yiyo esebenzayo yini, i-sacli status ibala izingxenye zayo zangaphakathi, futhi i-systemctl list-units --type=service ibala amayunithi ane-openvpn egameni. Uma umyalo wokugcina ukhombisa amayunithi anamagama ephrofayela, usemkhiqizweni womphakathi futhi okunye lapha akukuthinti.

Sebenzisa, bese uqinisekisa ngale kwe-active

Iyunithi ebika i-active inenqubo esebenzayo, lokho akufani nendlela yokuqinisekisa esebenzayo. Ngemuva kwesinyathelo sokusebenzisa, hlola i-sacli status ezingxenyeni obukade ulindele ukuthi ziqalise kabusha, qinisekisa ukuthi inani lalondolozwa nge-sacli ConfigQuery, bese usebenzisa ukungena kweklayenti okukodwa okulinganiselwe nge-akhawunti yokuhlola.

Qeda ngento esezingeni lesicelo: finyelela isisetshenziswa esiyimfihlo ngomhubhe, hhayi nje i-ping ekhelini lomphakathi leseva. Ukuxhawula okuluphumelelayo ngenkathi indlela eshayelwe noma ukucushwa kwe-DNS kungalungile kuzodlula zonke izivivinyo zensizakalo futhi kusahluleke umuntu obike inkinga.

isifundo somhlinzeki ngokuphathwa kwezinsizakalo yireferensi yokuthi yimiphi imisebenzi engelye-sacli, futhi kufanele uyivule ngaphambi kokunquma ukuthi ukuqalisa kabusha yisinqumo esiphephile.

Isinqumo ohambweni olulodwa

Ehla kule miyalo emine bese uma kowokuqala ofanayo:

• Ikhasi lesilungiselelo libiza i-sacli start, noma usanda kusebenzisa i-ConfigPut: sebenzisa i-sacli start.
• Ikhasi lidinga ukuqalisa kabusha, noma ushintsho luthinta abalaleli hhayi izici: sebenzisa i-systemctl restart openvpnas.
• I-shell yakho iza ngalesi seva: qala ngokuhlela ukufinyelela kwekhonsoli, bese usebenzisa umyalo okhethwe imigqa emibili engenhla.
• Ukuqinisekisa: i-sacli status, i-ConfigQuery yanani, ukungena okukodwa, isisetshenziswa esisodwa esiyimfihlo. Isimo sensizakalo sisodwa akusona umugqa wokugcina.

Imibili yaleyo migqa iyizivivinyo kanti eminye imibili iyizenzo, futhi yiyo incazelo yokulandelana. Uma ungakwazi ukuphendula umbuzo womkhiqizo, yima: umyalo obuzowusebenzisa ungowokunye ukufakwa, futhi umhubhe ozowisa ngeke ube yilowo obuwuqondile.