https://wiki.linuxsa.org/index.php?action=history&feed=atom&title=CentOS7_install_and_configuration_OpenVPN 2026-04-23T10:45:56Z 本wiki上该页面的版本历史 MediaWiki 1.43.1 https://wiki.linuxsa.org/index.php?title=CentOS7_install_and_configuration_OpenVPN&diff=199&oldid=prev 2020-12-25T12:51:55Z

<p><span class="autocomment">see also</span></p> <p><b>新页面</b></p><div>=info=<br /> <br /> =添加iptables转发规则=<br /> &lt;pre&gt;<br /> 开启转发<br /> [root@openvpn ~]# vim /etc/sysctl.conf <br /> net.ipv4.ip_forward = 1<br /> [root@openvpn ~]# sysctl -p<br /> <br /> 服务器IP 172.18.140.173<br /> (10.8.0.0/24为VPN的网段,eth0 为内网网卡，xxxx 为内网ip ) <br /> <br /> 运行 iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE #添加 iptables 转发规则 改为自己的 10.8.0.0/24吧 <br /> <br /> #good 让vpn client 可以 直接内网连接其它内网机器 <br /> iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eh1 -j SNAT --to-source 172.18.140.173 <br /> <br /> #内网网关为192.168.0.1<br /> iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 172.18.140.173 <br /> service iptables save<br /> <br /> iptables -t nat -A POSTROUTING -s 172.18.0.0/24 -j MASQUERADE<br /> iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE<br /> iptables -t nat -A POSTROUTING -s 172.18.0.0/24 -o eth1 -j SNATA --to-source 172.18.140.173<br /> iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth1 -j SNAT --to-source x.x.x.x<br /> (192.168.0.0/24为VPN的网段,eth1 为外网网卡，xxxx 为外网ip ) <br /> <br /> iptables -L -n -t nat <br /> <br /> 也要注意 docker网络 <br /> &lt;/pre&gt;<br /> <br /> =see also=<br /> [http://www.yunweipai.com/archives/12375.html 什么是VPN？看运维专家聊聊VPN的那些事儿]<br /> <br /> [http://wuhuizhong.iteye.com/blog/2037216 Openvpn完美解决公司网络没有固定公网IP的问题]<br /> <br /> [https://www.bbsmax.com/A/n2d9GlZ0JD/ OpenVPN 服务端（pritunl）的一些运维经验]<br /> <br /> <br /> ==install==<br /> [http://www.cnblogs.com/xishuai/p/centos-openvpn.html CentOS 7 安装配置 OpenVPN 客户端]<br /> <br /> ==iptalbes 转发 ==<br /> <br /> [https://blog.csdn.net/windeal3203/article/details/51111543 NAT、用iptables配置NAT]<br /> <br /> [http://www.mojidong.com/linux/2016/02/01/vpn-of-iptables/ vpn的iptables配置]<br /> <br /> [http://blog.51cto.com/lustlost/943110 IPtables之四：NAT原理和配置]<br /> <br /> [https://blog.csdn.net/donghaixiaolongwang/article/details/63263226 iptables——实战NAT（端口转发）]<br /> <br /> [https://forum.ubuntu.org.cn/viewtopic.php?f=124&amp;t=473809 VPN或者NAT过来的流量怎么转发到指定端口出去]<br /> <br /> [https://unix.stackexchange.com/questions/283801/iptables-forward-traffic-to-vpn-tunnel-if-open iptables forward traffic to vpn tunnel if open]<br /> <br /> [[category:ops]]</div>

Evan