我最近的任务是为我的工作场所的一些“道路战士”提供VPNfunction。 我正在运行一个CentOS 5.4 Linux服务器。 我select了OpenVPN作为我的VPN服务器,并成功部署和testing了几个Windows XP和7客户端。 我已经能够手动映射networking共享。 在这一点上,所有的连接都是成功和稳定的。
我想要做的是能够自动运行一个batch file,将创buildVPN隧道成功build立后的networking共享。 我该怎么做呢?
我已经读了一些关于从OpenVPN手册页的up或route-up命令,但我似乎无法弄清楚如何调用batch file。 任何援助将是有益的。
如果共享名称一直是相同的,那么您可以将它们映射到操作系统中,直到用户在VPN上,它们将处于断开状态。 这是我们如何做到的,并且运作良好。
看看手册页,我怀疑这是你需要在命令行上
--up c:\script.bat
下面是该部分
--up cmd Shell command to run after successful TUN/TAP device open (pre --user UID change). The up script is useful for specifying route commands which route IP traffic destined for private subnets which exist at the other end of the VPN connection into the tunnel. For --dev tun execute as: cmd tun_dev tun_mtu link_mtu ifconfig_local_ip ifconfig_remote_ip [ init | restart ] For --dev tap execute as: cmd tap_dev tap_mtu link_mtu ifconfig_local_ip ifconfig_netmask [ init | restart ] See the "Environmental Variables" section below for additional parameters passed as environmental variables. Note that cmd can be a shell command with multiple arguments, in which case all OpenVPN-generated arguments will be appended to cmd to build a command line which will be passed to the shell. Typically, cmd will run a script to add routes to the tunnel. Normally the up script is called after the TUN/TAP device is opened. In this context, the last command line parameter passed to the script will be init. If the --up-restart option is also used, the up script will be called for restarts as well. A restart is considered to be a partial reinitialization of OpenVPN where the TUN/TAP instance is preserved (the --persist-tun option will enable such preservation). A restart can be generated by a SIGUSR1 signal, a --ping-restart timeout, or a connection reset when the TCP protocol is enabled with the --proto option. If a restart occurs, and --up-restart has been specified, the up script will be called with restart as the last parameter. The following standalone example shows how the --up script can be called in both an initialization and restart context. (NOTE: for security reasons, don't run the following example unless UDP port 9999 is blocked by your firewall. Also, the example will run indefinitely, so you should abort with control-c). openvpn --dev tun --port 9999 --verb 4 --ping-restart 10 --up 'echo up' --down 'echo down' --persist-tun --up-restart Note that OpenVPN also provides the --ifconfig option to automatically ifconfig the TUN device, eliminating the need to define an --up script, unless you also want to configure routes in the --up script. If --ifconfig is also specified, OpenVPN will pass the ifconfig local and remote endpoints on the command line to the --up script so that they can be used to configure routes such as: route add -net 10.0.0.0 netmask 255.255.255.0 gw $5
然后,也许一个下来删除映射的驱动器