wget http://apt.sw.be/redhat/el6/en/x86_64/rpmforge/RPMS/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm

rpm -Uvh rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm

yum makecache

yum install open***

cp -R /usr/share/doc/open***-2.2.2/easy-rsa /etc/open***

cd /etc/open***/easy-rsa/2.0

chmod +x ./*

source ./vars

./clean-all

./build-ca server

./build-key-server server

./build-key tx***

./build-dh

1、####################服务端配置文件#############

more /etc/open***/server.conf(配置文件修改)


port 1194

proto tcp

dev tun

ca /etc/open***/easy-rsa/2.0/keys/ca.crt

cert /etc/open***/easy-rsa/2.0/keys/server.crt

key /etc/open***/easy-rsa/2.0/keys/server.key

dh /etc/open***/easy-rsa/2.0/keys/dh1024.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

client-to-client

push "route 192.168.0.0 255.255.252.0"

keepalive 10 120

push "dhcp-option DNS 8.8.8.8"

comp-lzo

status /var/log/open***/open***-status.log

log         /var/log/open***/open***.log

log-append  /var/log/open***/open***.log

persist-key

persist-tun

verb 3

duplicate-cn


2、###########开启转发功能############

vim /etc/sysctl.conf

net.ipv4.ip_forward = 1


重载命令：sysctl -p

3、#######iptables########################

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

iptables -A INPUT -p TCP --dport 1194 -j ACCEPT

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

4.启动***软件

/etc/init.d/open*** start


########################客户端的配置#################################################

1、将服务器端生成的key（ca.crt，tx***.crt，tx***.key，ca.key）下载到本地，并将其放入客户端“×××安装目录config个下面”。

cd /etc/open***/easy-rsa/2.0/keys


进入客户端Open×××目录，将sample-config下的client.o***文件复制到config目录，

client端做相应的修改：(不需要密码认证的)

client

dev tun

proto tcp

remote 218.94.35.226 1194

nobind

persist-key

persist-tun

ca ca.crt

cert tx***.crt

key tx***.key

ns-cert-type server

comp-lzo

verb 3

tun-mtu-extra 32



2.需要密码认证的配置文件（可以参考如下链接）

http://ylw6006.blog.51cto.com/470441/1009004/

http://www.cnblogs.com/electron/p/3488033.html


注意：push "route 192.168.0.0 255.255.252.0"，会上×××连接上后，直接可以入192.168.0.0网段进行通信


丢包严重的情况下，加上此参数tun-mtu-extra 32