{"id":64,"date":"2023-02-11T00:00:00","date_gmt":"2023-02-10T15:00:00","guid":{"rendered":"https:\/\/hmhr.ath.cx\/?p=64"},"modified":"2023-02-08T01:42:35","modified_gmt":"2023-02-07T16:42:35","slug":"android%e3%81%a8vpn-%ef%bc%93","status":"publish","type":"post","link":"https:\/\/hmhr.ath.cx\/?p=64","title":{"rendered":"Android\u3068VPN \uff13"},"content":{"rendered":"\n

\u524d\u56de<\/a>\u307e\u3067\u3067\u3001OpenVPN\u81ea\u4f53\u306e\u8a2d\u5b9a\u307e\u3067\u7d42\u308f\u3089\u305b\u305f\u3002
\u4eca\u56de\u306f\u3001\u30d6\u30ea\u30c3\u30b8\u306e\u8a2d\u5b9a\u304b\u3089\u304a\u3053\u306a\u3063\u3066\u3044\u304f\u3002<\/p>\n\n\n\n\n\n\n\n

\u30d6\u30ea\u30c3\u30b8\u8a2d\u5b9a<\/h2>\n\n\n\n

bridge-start\u306e\u5909\u66f4\u30fb\u8ffd\u52a0\u70b9<\/p>\n\n\n

\nsudo apt-get install bridge-utils\nsudo cp \/usr\/share\/doc\/openvpn\/examples\/sample-scripts\/bridge-st* \/etc\/openvpn\/\n<\/pre><\/div>\n\n\n
bridge-stop\u304c\u305d\u306e\u307e\u307e\u3060\u3068\u30c0\u30e1\u3060\u3063\u305f\u306e\u3067\u3001\u672b\u5c3e\u306b\u8ffd\u52a0<\/p>\n\n\n
\neth_ip="192.168.1.2" #eth0\u306eIP\u30a2\u30c9\u30ec\u30b9\neth_broadcast="192.168.1.255"\ngw="192.168.1.1"\nroute add default gw $gw #\u6700\u7d42\u884c\u306b\u8ffd\u52a0\n<\/pre><\/div>\n\n
\n\/etc\/init.d\/networking reload\n<\/pre><\/div>\n\n\n
IP forward\u3092\u6709\u52b9\u306b\u3059\u308b\u305f\u3081\u306b\u3001\/etc\/sysctl.conf\u306b<\/p>\n\n\n
\nnet.ipv4.ip_forward=1\n<\/pre><\/div>\n\n\n
\u3092\u8ffd\u8a18\u3059\u308b\u3002<\/p>\n\n\n\n
\u8d77\u52d5\u6642\u306b\u30d6\u30ea\u30c3\u30b8\u306e\u8a2d\u5b9a\u304c\u6709\u52b9\u306b\u306a\u308b\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u3001\/etc\/init.d\/ \u306b\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u4f5c\u6210<\/p>\n\n\n\n
\/etc\/init.d\/bridge<\/p>\n\n\n
\n#!\/bin\/sh\n \n### BEGIN INIT INFO\n# Provides:       bridge\n# Required-Start: $network $remote_fs $syslog\n# Required-Stop:  $network $remote_fs $syslog\n# Default-Start:  2 3 4 5\n# Default-Stop:   0 1 6\n# Short-Description: Bridge for OpenVPN\n### END INIT INFO\n \nSTART_BRIDGE="\/etc\/openvpn\/bridge-start"\nSTOP_BRIDGE="\/etc\/openvpn\/bridge-stop"\n \ncase "$1" in\n        start)\n         echo -n "Starting Bridge"\n         $START_BRIDGE\n         ;;\n        stop)\n         echo -n "Stopping Bridge"\n         $STOP_BRIDGE\n         ;;\n        restart)\n         $STOP_BRIDGE\n         sleep 2\n         $START_BRIDGE\n         ;;\n        *)\n         echo "Usage: $0 {start|stop|restart}" > 2\n         exit 1\n         ;;\nesac\n<\/pre><\/div>\n\n\n
\u307e\u305f\u3001\u4eca\u4f5c\u3063\u305fbridge\u3092\u5b9f\u884c\u5f8c\u306bOpenVPN\u3092\u8d77\u52d5\u3057\u305f\u3044\u306e\u3067\u3001\/etc\/init.d\/openvpn\u306eINIT INFO\u90e8\u5206\u3092\u66f8\u304d\u63db\u3048\u308b\u3002<\/p>\n\n\n
\n# Required-Start: bridge $network $remote_fs $syslog\n# Required-Stop: bridge $network $remote_fs $syslog\n<\/pre><\/div>\n\n\n
\u66f8\u304d\u63db\u3048\u305f\u3089\u3001rc-update\u3092\u5b9f\u884c\u3059\u308b\u3002<\/p>\n\n\n
\nsudo update-rc.d bridge defaults\nsudo update-rc.d openvpn defaults\n<\/pre><\/div>\n\n\n
\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u9375\u4f5c\u6210\u3068\u8a3c\u660e\u66f8\u767a\u884c<\/h2>\n\n\n
\ncd \/usr\/share\/doc\/openvpn\/examples\/easy-rsa\/2.0\n.\/build-key client\n<\/pre><\/div>\n\n\n
\u3053\u308c\u3082\u5f15\u6570\u304cCommon name\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u5024\u3068\u306a\u308b\u305f\u3081\u3001\u4eca\u307e\u3067\u5165\u308c\u3066\u304d\u305fCommon name\u3068\u88ab\u3089\u306a\u3044\u540d\u524d\u3092\u5165\u529b\u3059\u308b\u3002<\/p>\n\n\n\n
\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u8a2d\u5b9a<\/h2>\n\n\n\n
\u30eb\u30fc\u30bf\u306e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3067server.conf\u3067\u6307\u5b9a\u3057\u305f\u30d7\u30ed\u30c8\u30b3\u30eb(TCP\/UDP)\u3068\u30dd\u30fc\u30c8\u3092VPN\u306e\u30b5\u30fc\u30d0\u306b\u306a\u308b\u30de\u30b7\u30f3\u306eIP\u3078\u30dd\u30fc\u30c8\u30de\u30c3\u30d4\u30f3\u30b0\u8a2d\u5b9a\u3059\u308b\u3002<\/p>\n\n\n\n
\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb<\/h2>\n\n\n\n
\/usr\/share\/doc\/openvpn\/examples\/sample-config-files\/client.conf
\u306b\u3042\u308b\u3001\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u4f8b\u3092\u30b3\u30d4\u30fc\u3057\u3001\u5909\u66f4\u3059\u308b\u3002<\/p>\n\n\n
\ndev tap0\n;dev tun\nremote my-server-1 1234 # VPN\u30b5\u30fc\u30d0\u306e\u30db\u30b9\u30c8\u540d\u3068\u30dd\u30fc\u30c8\u756a\u53f7\nuser nobody\ngroup nogroup\nca ca.crt\ncert client.crt\nkey client.key\n<\/pre><\/div>\n\n\n
my-server-1\u306e\u90e8\u5206\u306f\u81ea\u5206\u306e\u30db\u30b9\u30c8\u540d\u304bIP\u30a2\u30c9\u30ec\u30b9\u306b\u66f8\u304d\u63db\u3048\u308b\u3002
ca\u306f\u8a8d\u8a3c\u5c40\u306e\u4f5c\u6210\u3067\u4f5c\u3063\u305f\u8a8d\u8a3c\u5c40\u306e\u8a3c\u660e\u66f8\u3002
cert,key\u306f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u9375\u4f5c\u6210\u3068\u8a3c\u660e\u66f8\u767a\u884c\u3067\u4f5c\u3063\u305f\u8a3c\u660e\u66f8\u30d5\u30a1\u30a4\u30eb\u3068\u9375\u30d5\u30a1\u30a4\u30eb\u306e\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u6307\u5b9a\u3059\u308b\u3002<\/p>\n\n\n\n
\u3068\u3001\u3053\u3053\u307e\u3067\u8a2d\u5b9a\u3092\u3057\u3066\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u306a\u308bAndroid\u5074\u306e\u6e96\u5099\u306b\u53d6\u308a\u639b\u304b\u308d\u3046\u3068\u3059\u308b\u3068\u3001\u3068\u3066\u3082\u60b2\u3057\u3044\u3053\u3068\u6c17\u306b\u304c\u3064\u3044\u305f\u3002
\u73fe\u5728\u306e\u3068\u3053\u308dAndroid\u3067\u306froot\u5316\u3057\u306a\u3044\u3068TAP\u3067\u306eOpenVPN\u63a5\u7d9a\u306f\u3067\u304d\u306a\u3044\u3068\u3044\u4e8b\u304c\u308f\u304b\u3063\u305f\u3002
Android\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u304c\u5bfe\u5fdc\u3057\u3066\u3044\u306a\u3044\u3068\u3044\u3046\u3053\u3068\u3060\u3002<\/p>\n\n\n\n
\u305d\u3046\u306a\u308b\u3068\u3001Android\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u304cTAP\u306eAPI\u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3001\u305d\u306e\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u305f\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u30d5\u30a1\u30fc\u30e0\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u306a\u3044\u3068\u3044\u3051\u306a\u3044\u30fb\u30fb\u30fb
\u3053\u308c\u306f\u3061\u3087\u3063\u3068\u671f\u5f85\u3067\u304d\u306a\u305d\u3046\u306a\u306e\u3067\u3001\u305d\u3063\u3068\u30b3\u30de\u30f3\u30c9\u3092\u53e9\u3044\u3066\u7d42\u4e86\u3057\u305f\u3002<\/p>\n\n\n
\nsudo \/etc\/init.d\/openvpn stops\nsudo \/etc\/init.d\/bridge stop\nsudo update-rc.d openvpn remove\nsudo update-rc.d bridge remove\n<\/pre><\/div>\n\n\n
\u3042\u3068\u3001\/etc\/sysctl.conf\u306eip forward\u306e\u8a2d\u5b9a\u3082off\u306b\u3057\u305f\u3002<\/p>\n\n\n\n
\n
\u53c2\u8003<\/p>\nHowto setup openvpn in bridge mode on debian<\/a><\/cite><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
\u524d\u56de\u307e\u3067\u3067\u3001OpenVPN\u81ea\u4f53\u306e\u8a2d\u5b9a\u307e\u3067\u7d42\u308f\u3089\u305b\u305f\u3002\u4eca\u56de\u306f\u3001\u30d6\u30ea\u30c3\u30b8\u306e\u8a2d\u5b9a\u304b\u3089\u304a\u3053\u306a\u3063\u3066\u3044\u304f\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,4],"tags":[10],"class_list":["post-64","post","type-post","status-publish","format-standard","hentry","category-android","category-linux","tag-vpn"],"_links":{"self":[{"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=\/wp\/v2\/posts\/64","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=64"}],"version-history":[{"count":4,"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=\/wp\/v2\/posts\/64\/revisions"}],"predecessor-version":[{"id":71,"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=\/wp\/v2\/posts\/64\/revisions\/71"}],"wp:attachment":[{"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=64"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=64"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hmhr.ath.cx\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=64"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}