如何設定VPN客戶端存取遠端VPN伺服器？

VPN 用戶端是用於在使用者和 VPN 伺服器之間建立安全連線的終端設備或軟體。

 

什麼是 VPN？ p>

VPN（虛擬私人網路）透過隧道技術協助您遠端、安全、私密地存取網際網路資源。 VPN 會對您的個人資訊進行加密，並在您使用網路時向公眾隱藏您的 IP 位址。對於 VPN 用戶來說，電腦看起來像是直接相互連接的。

 

一般網路拓樸：

 

 

這裡以WR2100為例

 

第1 步：開啟網頁瀏覽器並前往http: // /cudy.net 或http ://192.168.10.1。 

詳情請參考如何登入Cudy 的網頁介面路由器？

第 2 步： 點選 常規設定->VPN並啟用VPN.

預設規則： 允許所有設備或禁止所有設備使用VPN。

要指定設備，請點選系統狀態- > 設備->VPN 啟用或停用它。

站點到站點：< /strong >允許兩個站點中的設備相互通訊。

VPN 政策：

停用： 無需其他設定。

VPN 終止開關：當VPN 連線遺失時關閉網路連線。

域：指定哪些域通過 VPN，哪些不

遠端子網路：指定哪些子網路透過 VPN哪些不

第 3 步： 在協定清單中，選擇您需要的協定並輸入VPN 提供者提供的VPN 資訊。

 

• PPTP VPN

輸入 VPN 伺服器位址（例如 113.92.73.163）以及 VPN 使用者名稱和密碼由您的VPN提供者提供。

 

• L2TP VPN

輸入 VPN 伺服器位址（例如 113.92.73.163）、VPN 使用者名稱和密碼以及您提供的預共用金鑰VPN 供應商。

如果您的VPN 提供者也為您提供了與帳戶綁定的隧道IP，您可以啟用使用自訂隧道 IP 選項。

 

• OpenVPN < /跨度>

點選瀏覽器匯入由您的VPN 供應商。

 

 

• WireGuard VPN

 

點選瀏覽器匯入由您的VPN 供應商。

介面和對等點將自動從VPN 提供者的CONF 檔案同步。

 

 

 

• ZeroTier 從站

輸入 ZeroTier 網路 ID 和 網關由ZeroTier Master 提供。網關可以在 VPN 狀態部分找到。

 

 

相關文章： 如何透過Zerotier遠端連線Cudy Router？

返回網誌

201 則留言

Thanks, now It works like a charm.

Íñigo Ortega

আমার উয়াইফাই অন্য কারো হাতে

MD Hamim

@Dear Inigo Ortega,
We have tested this situation in our office. Here is normal. If the problem remains, please check the following methods:
1. If you ping the device’s IP address of the computer in the Lan area of the P5. Please make sure you have disable the Firewall of the computer.
2. Please check if the computer’s gateway IP address is 192.168.10.1.
3. Please try to login to the web page of the router, Go to “Advanced Settings” —“Firewall” page and disable the SPI Firewall and check again.

“Hello,

I am experiencing a problem with WireGuard Site-to-Site on my Cudy P5 that appears to be very similar to other cases reported on your support website.

My setup is:

Cudy P5 with 5G SIM (Lowi) Firmware: 2.4.27 (latest available) Cudy LAN: 192.168.10.0/24 Cudy LAN IP: 192.168.10.1 ASUS TUF-AX5400 running Asuswrt-Merlin/Gnuton ASUS LAN: 192.168.50.0/24 ASUS LAN IP: 192.168.50.1
The ASUS is configured as the WireGuard server and the Cudy P5 as the WireGuard client.

On the Cudy:

WireGuard Client: enabled Site-to-Site: enabled Default rule: Allow all devices VPN policy: Remote Subnet Remote subnet: 192.168.50.0/24 WireGuard tunnel IP: 10.6.0.2 Endpoint port: 51820
The problem is asymmetric:

1. From a device connected to the Cudy LAN (192.168.10.x), I can access devices on the ASUS LAN (192.168.50.x) correctly.
2. From the ASUS LAN, I can ping 10.6.0.2 and even access the Cudy web interface through 10.6.0.2.
3. However, from the ASUS LAN I cannot access the Cudy LAN:

192.168.10.1 does not respond. Devices behind the Cudy, for example 192.168.10.121, do not respond.
4. Therefore, the WireGuard tunnel itself is working, but traffic arriving through WireGuard is apparently not being forwarded from the VPN interface to the Cudy LAN.
I have already upgraded the P5 from firmware 2.4.25 to the latest 2.4.27, but the behaviour is exactly the same.

I have also found previous Cudy support cases describing what appears to be the same asymmetric Site-to-Site behaviour, where the remote LAN can access the VPN server LAN but the reverse direction does not work.

Could you please confirm:

1. Is this a known limitation or bug in the P5 WireGuard Site-to-Site implementation?
2. Has the problem reported in the previous support cases been fixed in firmware 2.4.27?
3. If it is not fixed, is there a recommended configuration to allow traffic from the WireGuard tunnel (10.6.0.0/…) to be forwarded to the P5 LAN (192.168.10.0/24)?
4. Is there a way to enable the required forwarding/NAT manually, or is this something that requires a firmware update?
5. If possible, could you provide the exact configuration required to make the connection fully bidirectional?

I would be happy to provide screenshots or configuration details if needed.

Thank you."

support

Hello,

I am experiencing a problem with WireGuard Site-to-Site on my Cudy P5 that appears to be very similar to other cases reported on your support website.

My setup is:

Cudy P5 with 5G SIM (Lowi) Firmware: 2.4.27 (latest available) Cudy LAN: 192.168.10.0/24 Cudy LAN IP: 192.168.10.1 ASUS TUF-AX5400 running Asuswrt-Merlin/Gnuton ASUS LAN: 192.168.50.0/24 ASUS LAN IP: 192.168.50.1

The ASUS is configured as the WireGuard server and the Cudy P5 as the WireGuard client.

On the Cudy:

WireGuard Client: enabled Site-to-Site: enabled Default rule: Allow all devices VPN policy: Remote Subnet Remote subnet: 192.168.50.0/24 WireGuard tunnel IP: 10.6.0.2 Endpoint port: 51820

The problem is asymmetric:

1. From a device connected to the Cudy LAN (192.168.10.x), I can access devices on the ASUS LAN (192.168.50.x) correctly.
2. From the ASUS LAN, I can ping 10.6.0.2 and even access the Cudy web interface through 10.6.0.2.
3. However, from the ASUS LAN I cannot access the Cudy LAN:

192.168.10.1 does not respond. Devices behind the Cudy, for example 192.168.10.121, do not respond.
4. Therefore, the WireGuard tunnel itself is working, but traffic arriving through WireGuard is apparently not being forwarded from the VPN interface to the Cudy LAN.

I have already upgraded the P5 from firmware 2.4.25 to the latest 2.4.27, but the behaviour is exactly the same.

I have also found previous Cudy support cases describing what appears to be the same asymmetric Site-to-Site behaviour, where the remote LAN can access the VPN server LAN but the reverse direction does not work.

Could you please confirm:

1. Is this a known limitation or bug in the P5 WireGuard Site-to-Site implementation?
2. Has the problem reported in the previous support cases been fixed in firmware 2.4.27?
3. If it is not fixed, is there a recommended configuration to allow traffic from the WireGuard tunnel (10.6.0.0/…) to be forwarded to the P5 LAN (192.168.10.0/24)?
4. Is there a way to enable the required forwarding/NAT manually, or is this something that requires a firmware update?
5. If possible, could you provide the exact configuration required to make the connection fully bidirectional?

I would be happy to provide screenshots or configuration details if needed.

Thank you.

Inigo Ortega

Mám CUDY R700 a vypadává mi připojení do Internetu. Běží několik hodin (různě) a pak dojde k přerušení spojení. Zařízení je nutné restartovat, aby se opět rozběhlo. Zkoušel jsem i VPN tunel pomocí IPSEC a OpenVPN proti zařízení ARCHER VX1800v VPN. Nedaří se mi VPN zprovoznit.

Karel

發表留言