{"id":1680,"date":"2023-04-26T11:21:24","date_gmt":"2023-04-26T04:21:24","guid":{"rendered":"https:\/\/longvan.net\/cong-dong\/?p=1680"},"modified":"2023-04-26T11:21:24","modified_gmt":"2023-04-26T04:21:24","slug":"huong-dan-cau-hinh-openvpn-tren-firewall-pfsense","status":"publish","type":"post","link":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/","title":{"rendered":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense"},"content":{"rendered":"<h4>I. T\u1ed5ng quan:<\/h4>\n<p><strong>OpenVPN<\/strong> l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng m\u1ea1ng ri\u00eang \u1ea3o (VPN) th\u1ef1c hi\u1ec7n c\u00e1c k\u1ef9 thu\u1eadt t\u1ea1o ra c\u00e1c k\u1ebft n\u1ed1i point-to-point<br \/>\nho\u1eb7c site-to-site an to\u00e0n. Cho ph\u00e9p c\u00e1c b\u00ean x\u00e1c th\u1ef1c v\u1edbi nhau b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng kh\u00f3a chia s\u1ebb (<em>pre-shared key<\/em>), ch\u1ee9ng ch\u1ec9 (<em>certificates<\/em>) ho\u1eb7c t\u00ean ng\u01b0\u1eddi d\u00f9ng\/m\u1eadt kh\u1ea9u. Khi s\u1eed d\u1ee5ng trong c\u1ea5u h\u00ecnh multi client-server, n\u00f3 cho ph\u00e9p m\u00e1y ch\u1ee7 ph\u00e1t h\u00e0nh m\u1ed9t ch\u1ee9ng ch\u1ec9 x\u00e1c th\u1ef1c cho m\u1ed7i client. N\u00f3 s\u1eed d\u1ee5ng th\u01b0 vi\u1ec7n m\u00e3 h\u00f3a OpenSSL c\u0169ng nh\u01b0 giao th\u1ee9c TLS m\u1ed9t c\u00e1ch r\u1ed9ng r\u00e3i \u0111\u1ed3ng th\u1eddi c\u00f3 nhi\u1ec1u t\u00ednh n\u0103ng ki\u1ec3m so\u00e1t v\u00e0 b\u1ea3o m\u1eadt.<\/p>\n<p>Trong b\u00e0i vi\u1ebft n\u00e0y, Long V\u00e2n s\u1ebd h\u01b0\u1edbng d\u1eabn c\u00e1c b\u1ea1n c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall Pfsense.<\/p>\n<p><strong>M\u1ed9t s\u1ed1 l\u01b0u \u00fd:<\/strong><\/p>\n<ul>\n<li>\u0110\u1ea7u ti\u00ean c\u1ea7n \u0111\u1ea3m b\u1ea3o firewall pfSense \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t v\u00e0 ho\u1ea1t \u0111\u1ed9ng v\u1edbi c\u00e1c interface bao g\u1ed3m WAN v\u00e0 LAN.<\/li>\n<li>M\u1ed9t s\u1ed1 thi\u1ebft l\u1eadp kh\u00f4ng \u0111\u01b0\u1ee3c \u0111\u1ec1 c\u1eadp \u0111\u1ebfn trong h\u01b0\u1edbng d\u1eabn, c\u00e1c b\u1ea1n c\u00f3 th\u1ec3 \u0111\u1ec3 m\u1eb7c \u0111\u1ecbnh.<\/li>\n<li>H\u01b0\u1edbng d\u1eabn n\u00e0y s\u1ebd s\u1eed d\u1ee5ng c\u1ea3 hai ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c bao g\u1ed3m m\u1eadt kh\u1ea9u v\u00e0 ch\u1ee9ng ch\u1ec9.<\/li>\n<\/ul>\n<h4><strong>III. C\u1ea5u h\u00ecnh tr\u00ean pfsense server.<\/strong><\/h4>\n<ol>\n<li><strong>B\u01b0\u1edbc 1<\/strong>: T\u1ea1o m\u1ed9t <strong>Certificate Authority &#8211; CA<\/strong>\n<ul>\n<li>V\u00e0o menu <strong><strong>System &gt; Cert. Manager<br \/>\n<\/strong><\/strong><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-1978 aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-300x154.png\" alt=\"System-Cert. Manager\" width=\"300\" height=\"154\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-300x154.png 300w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1.png 316w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/li>\n<li>Nh\u1ea5n ph\u00edm <strong>Add<\/strong> \u0111\u1ec3 t\u1ea1o m\u1edbi m\u1ed9t CA.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1980 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-1.png\" alt=\"CAs\" width=\"623\" height=\"285\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-1.png 623w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-1-300x137.png 300w\" sizes=\"auto, (max-width: 623px) 100vw, 623px\" \/><\/li>\n<li>Nh\u1eadp t\u00ean nh\u1eadn di\u1ec7n cho ch\u1ee9ng ch\u1ec9\u00a0CA.<\/li>\n<li>\u0110\u1eb7t ph\u01b0\u01a1ng th\u1ee9c (<strong>Method<\/strong>) l\u00e0<strong> Create an internal Certificate Authority<br \/>\n<\/strong><\/li>\n<li>Ch\u1ecdn\u00a0<strong>Key Type<\/strong>. (<strong>RSA,<\/strong>\u00a0<strong>ECDSA<\/strong> ..)<\/li>\n<li>\u0110\u1eb7t \u0111\u1ed9 d\u00e0i c\u1ee7a kh\u00f3a\u00a0<strong>Key length\u00a0<\/strong>(<strong>2048, 4096,<\/strong> &#8230;)<\/li>\n<li>Ch\u1ecdn thu\u1eadt to\u00e1n m\u00e3 h\u00f3a\u00a0<strong>Digest Algorithm\u00a0<\/strong>(<strong>sha256,<\/strong> <strong>sha512, &#8230;<\/strong>)<\/li>\n<li>\u0110\u1eb7t t\u00ean chung\u00a0<strong>Common Name<\/strong> (<strong>internal-ca<\/strong>, <strong>own-ca, <\/strong>&#8230;)<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1983 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-4.png\" alt=\"\" width=\"516\" height=\"815\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-4.png 516w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-4-190x300.png 190w\" sizes=\"auto, (max-width: 516px) 100vw, 516px\" \/><\/li>\n<li><strong>Save<\/strong> \u0111\u1ec3 l\u01b0u, nh\u01b0 v\u1eady <strong>CA<\/strong> \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o ho\u00e0n t\u1ea5t.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1982 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-3.png\" alt=\"\" width=\"624\" height=\"242\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-3.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-3-300x116.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 2<\/strong>: T\u1ea1o ch\u1ee9ng ch\u1ec9 cho server &#8211; <strong>Server Certificate<br \/>\n<\/strong><\/p>\n<ul>\n<li>V\u00e0o menu <strong><strong>System &gt; Cert. Manager<\/strong><\/strong>.<\/li>\n<li>Truy c\u1eadp tab <strong>Certificates<\/strong> \u1edf sub-menu<\/li>\n<li>Ch\u1ecdn <strong>Add\/<\/strong><strong>Sign<\/strong> \u1edf b\u00ean tay ph\u1ea3i d\u01b0\u1edbi c\u00f9ng<\/li>\n<li>\u0110i\u1ec1u ch\u1ec9nh ph\u01b0\u01a1ng th\u1ee9c (<strong>Method<\/strong>) l\u00e0\u00a0<strong> Create an internal Certificate Authority<\/strong>.<\/li>\n<li>Nh\u00e2p Descriptive name.<\/li>\n<li>\u0110\u1eb7t\u00a0<strong>Key length<\/strong> v\u00e0\u00a0<strong>Digest\u00a0<\/strong><strong>Algorithm<\/strong> gi\u1ed1ng v\u1edbi\u00a0<strong>CA<\/strong> \u0111\u00e3 t\u1ea1o<\/li>\n<li>Ch\u1ec9nh th\u1eddi h\u1ea1n\u00a0<strong>Lifetime<\/strong> l\u00e0 <strong>365<\/strong> ng\u00e0y ho\u1eb7c t\u00f9y ch\u1ec9nh kh\u00f4ng qu\u00e1 398 ng\u00e0y.<\/li>\n<li>\u0110\u1eb7t Common Name.<\/li>\n<li>Thi\u1ebft \u0111\u1eb7t <strong>Certificate Type<\/strong> l\u00e0 <strong>Server Certificate<\/strong><strong><br \/>\n<\/strong><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1983 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-4.png\" alt=\"\" width=\"516\" height=\"815\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-4.png 516w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-4-190x300.png 190w\" sizes=\"auto, (max-width: 516px) 100vw, 516px\" \/><\/li>\n<li><strong>Save<\/strong> \u0111\u1ec3 l\u01b0u, nh\u01b0 v\u1eady <strong>Server Certificate <\/strong>\u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o ho\u00e0n t\u1ea5t.<\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 3<\/strong>: T\u1ea1o user OpenVPN\n<ul>\n<li>V\u00e0o menu <strong><strong><strong>System &gt; User Manager<br \/>\n<\/strong><\/strong><\/strong><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1984 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-5.png\" alt=\"\" width=\"624\" height=\"199\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-5.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-5-300x96.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<li>Ch\u1ecdn n\u00fat <strong>Add<\/strong> v\u00e0 nh\u1eadp <strong>Username <\/strong>v\u00e0 <strong>Password<\/strong> cho ng\u01b0\u1eddi d\u00f9ng c\u1ee7a b\u1ea1n<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1985 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-6.png\" alt=\"\" width=\"624\" height=\"730\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-6.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-6-256x300.png 256w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<li>Nh\u1ea5n<strong> Save<\/strong> \u0111\u1ec3 l\u01b0u, nh\u01b0 v\u1eady <strong>ng\u01b0\u1eddi d\u00f9ng <\/strong><strong>OpenVPN<\/strong><strong>\u00a0<\/strong>\u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o ho\u00e0n t\u1ea5t sau \u0111\u00f3 s\u1ebd \u0111\u01b0\u1ee3c chuy\u1ec3n v\u1ec1 giao di\u1ec7n ban \u0111\u1ea7u.<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1986 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-7.png\" alt=\"\" width=\"624\" height=\"172\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-7.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-7-300x83.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<li>Thi\u1ebft l\u1eadp ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c theo ch\u1ee9ng ch\u1ec9 ho\u1eb7c m\u1eadt kh\u1ea9u, c\u00f3 th\u1ec3 ch\u1ecdn c\u1ea3 hai (<strong>icon edit ch\u00ec \u0111\u1ec3 ch\u1ec9nh s\u1eeda)<\/strong><\/li>\n<li>Ch\u1ecdn <strong>Add -&gt; User Certificate<\/strong> v\u00e0 nh\u1eadp b\u1ed5 sung<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1987 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-8.png\" alt=\"\" width=\"624\" height=\"90\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-8.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-8-300x43.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<li>\u0110\u1eb7t ph\u01b0\u01a1ng th\u1ee9c (<strong>Method -&gt; Create an internal Certificate)<\/strong><\/li>\n<li>Ch\u1ecdn <strong>Key length, Type v\u00e0 Digest Algorithm<\/strong> gi\u1ed1ng v\u1edbi\u00a0<strong>CA<\/strong> \u0111\u00e3 t\u1ea1o tr\u01b0\u1edbc \u0111\u00f3.<\/li>\n<li>\u0110\u1eb7t th\u1eddi gian h\u1ebft h\u1ea1n <strong>Lifetime 365 ng\u00e0y.<\/strong><\/li>\n<li>Ki\u1ec3m tra <strong>Certificate Type<\/strong> \u0111\u01b0\u1ee3c ch\u1ecdn l\u00e0 ch\u1ee9ng ch\u1ec9 ng\u01b0\u1eddi v\u1eeba t\u1ea1o (<strong>User Certificate<\/strong>)<\/li>\n<li><strong>Save<\/strong> \u0111\u1ec3 l\u01b0u v\u00e0 ho\u00e0n t\u1ea5t li\u00ean k\u1ebft v\u1edbi ch\u1ee9ng ch\u1ec9 ng\u01b0\u1eddi d\u00f9ng v\u1edbi OpenVPN user (<strong>User Certificate &#8211; OpenVPN user)<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1989 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-10.png\" alt=\"\" width=\"538\" height=\"801\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-10.png 538w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-10-201x300.png 201w\" sizes=\"auto, (max-width: 538px) 100vw, 538px\" \/><\/strong><\/li>\n<li>\u1ea4n\u00a0<strong>Save<\/strong> v\u1eady \u0111\u00e3 ho\u00e0n t\u1ea5t thi\u1ebft l\u1eadp t\u1ea1o t\u00e0i kho\u1ea3n ng\u01b0\u1eddi d\u00f9ng cho OpenVPN.<\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 4<\/strong>: T\u1ea1o m\u00e1y ch\u1ee7 VPN &#8211; <strong>OpenVPN Server<\/strong>\n<ul>\n<li>Ch\u1ecdn th\u1ebb <strong>VPN<\/strong> &gt;\u00a0<strong>OpenVPN.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2059 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-11.png\" alt=\"\" width=\"624\" height=\"160\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-11.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-11-300x77.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/strong><\/li>\n<li>Ch\u1ecdn <strong>Add<\/strong>\n<ul>\n<li>Th\u00f4ng tin chung\n<ol>\n<li><strong>Server mode &#8211; <\/strong>ch\u1ecdn\u00a0<strong>Remote Access (SSL\/TLS + User Auth)<\/strong><\/li>\n<li><strong>Local port <\/strong>, ch\u1ecdn port k\u1ebft n\u1ed1i, trong b\u00e0i h\u01b0\u1edbng d\u1eabn n\u00e0y l\u00e0 1194<\/li>\n<li>Nh\u1eadp n\u1ed9i dung m\u00f4 t\u1ea3 &#8211; <strong>Description<\/strong><strong><br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2060 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-12.png\" alt=\"\" width=\"624\" height=\"371\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-12.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-12-300x178.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/strong><\/li>\n<\/ol>\n<\/li>\n<li>C\u00e0i \u0111\u1eb7t m\u1eadt m\u00e3 &#8211; <strong>Cryptographic Settings<\/strong>\n<ol>\n<li>Ch\u1ecdn s\u1eed d\u1ee5ng <strong>TLS Key<\/strong> v\u00e0 t\u1ef1 \u0111\u1ed9ng b\u1eadt\u00a0<strong>Automatically generate a TLS Key<\/strong><\/li>\n<li>Trong <strong>Peer Certificate Authority\u00a0<\/strong>ch\u1ecdn CA \u0111\u00e3 t\u1ea1o tr\u01b0\u1edbc \u0111\u00f3.<\/li>\n<li>Ch\u1ecdn <strong>Server Certificate<\/strong> \u0111\u00e3 t\u1ea1o.<\/li>\n<li>Ch\u1ecdn 4096 cho <strong>DH Parameter Length<\/strong><\/li>\n<li>Thi\u1ebft l\u1eadp <strong>Auth digest algorithm <\/strong>l\u00e0 <strong>RSA-SHA512<\/strong>\u00a0<strong>(512-bit)<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-2070 size-full\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-13.png\" alt=\"\" width=\"426\" height=\"689\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-13.png 426w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-13-185x300.png 185w\" sizes=\"auto, (max-width: 426px) 100vw, 426px\" \/><br \/>\n<\/strong><\/li>\n<\/ol>\n<\/li>\n<li>C\u00e0i \u0111\u1eb7t \u0111\u01b0\u1eddng h\u1ea7m VPN &#8211; <strong>Tunnel Setting<\/strong>\n<ol>\n<li>T\u1ea1o subnet trong <strong>IPv4 Tunnel Network <\/strong>l\u00e0<strong> 10.0.2.0\/8<\/strong><\/li>\n<li>\u0110\u1ec3 tr\u1ed1ng <strong>IPv6 Tunnel Network<\/strong><\/li>\n<li>B\u1eadt c\u1ed5ng chuy\u1ec3n h\u01b0\u1edbng <strong>Redirect IPv4 Gateway<br \/>\n<\/strong><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2077 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-14.png\" alt=\"\" width=\"624\" height=\"523\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-14.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-14-300x251.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ol>\n<\/li>\n<li>C\u1ea5u h\u00ecnh n\u00e2ng cao &#8211; <strong>Advenced Configuration<\/strong>\n<ol>\n<li>B\u1eadt <strong>UDP Fast I\/O<\/strong><\/li>\n<li>Ch\u1ecdn <strong>IPv4 Only<\/strong> trong\u00a0<strong>Gateway creation<\/strong>. ch\u1ecdn\u00a0<strong>Both\u00a0<\/strong>n\u1ebfu s\u1eed d\u1ee5ng IPv4, IPv6<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2081 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-15.png\" alt=\"\" width=\"624\" height=\"506\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-15.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-15-300x243.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ol>\n<\/li>\n<\/ul>\n<\/li>\n<li>Nh\u1ea5n Save \u0111\u1ec3 l\u01b0u lai \u0111\u1ec3 c\u1eadp nh\u1eadt c\u1ea5u h\u00ecnh<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2082 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-16.png\" alt=\"\" width=\"624\" height=\"187\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-16.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-16-300x90.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 5<\/strong>: X\u00e1c minh c\u1ea5u h\u00ecnh m\u00e1y ch\u1ee7\n<ul>\n<li>Ch\u1ecdn menu <strong>Status &gt; System Logs<\/strong><\/li>\n<li>Ch\u1ecdn tab <strong>OpenVPN<\/strong><\/li>\n<li>Ki\u1ec3m tra log s\u1ebd hi\u1ec3n th\u1ecb <strong>Initialization Sequence Completed\u00a0<\/strong>n\u1ebfu \u0111\u00e3 ho\u00e0n th\u00e0nh.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2085 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-17.png\" alt=\"\" width=\"624\" height=\"395\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-17.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-17-300x190.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 6<\/strong>: C\u1ea5u h\u00ecnh cho ph\u00e9p truy c\u1eadp trong VPN\n<ul>\n<li>Ch\u1ecdn menu <strong>Firewall &gt; Rules<\/strong><\/li>\n<li>Ch\u1ecdn <strong>OpenVPN<\/strong><\/li>\n<li>Ch\u1ecdn <strong>Add<\/strong> \u0111\u1ea7u ti\u00ean \u0111\u1ec3 th\u00eam.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2089 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-18.png\" alt=\"\" width=\"623\" height=\"190\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-18.png 623w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-18-300x91.png 300w\" sizes=\"auto, (max-width: 623px) 100vw, 623px\" \/><\/li>\n<li><strong>Address Family<\/strong> ch\u1ecdn ch\u1ec9 <strong>IPv4<\/strong><\/li>\n<li><strong>Protocol <\/strong>ch\u1ecdn<strong> Any<br \/>\n<\/strong><\/li>\n<li><strong>Source<\/strong> ch\u1ecdn <strong>Network v\u1edbi range IP \u0111\u00e3 thi\u1ebft l\u1eadp \u1edf b\u01b0\u1edbc 4<\/strong><\/li>\n<li>Nh\u1eadp m\u00f4 t\u1ea3, nh\u1ea5n <strong>Save<\/strong> v\u00e0 <strong>Appy Changes<\/strong> \u0111\u1ec3 l\u01b0u l\u1ea1i c\u1ea5u h\u00ecnh.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2090 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-19.png\" alt=\"\" width=\"624\" height=\"679\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-19.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-19-276x300.png 276w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 7<\/strong>: C\u1ea5u h\u00ecnh cho ph\u00e9p truy c\u1eadp v\u00e0o VPN\n<ul>\n<li>Ch\u1ecdn menu <strong>Firewall &gt; Rules<\/strong><\/li>\n<li>Ch\u1ecdn tab <strong>WAN<\/strong><\/li>\n<li>Nh\u1ea5n ch\u1ecdn <strong>Add<\/strong> \u0111\u1ec3 th\u00eam rule m\u1edbi<\/li>\n<li>Thi\u1ebft l\u1eadp <strong>Address Family<\/strong> l\u00e0 <strong>IPv4<\/strong><\/li>\n<li>Ch\u1ecdn <strong>Source <\/strong>l\u00e0<strong> any<br \/>\n<\/strong><\/li>\n<li>Ch\u1ecdn <strong>Protocol l\u00e0 UDP<br \/>\n<\/strong><\/li>\n<li><strong>V\u1edbi Destination Port Range <\/strong>nh\u1eadp port OpenVPN \u0111\u00e3 thi\u1ebft l\u1eadp tr\u01b0\u1edbc \u0111\u00f3 l\u00e0 <strong>1194<br \/>\n<\/strong><\/li>\n<li>Nh\u1eadp m\u00f4 t\u1ea3, nh\u1ea5n <strong>Save<\/strong> v\u00e0<strong> Apply Changes<\/strong> \u0111\u1ec3 l\u01b0u l\u1ea1i c\u1ea5u h\u00ecnh<br \/>\n<strong><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2095 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-21.png\" alt=\"\" width=\"624\" height=\"790\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-21.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-21-237x300.png 237w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/strong><\/li>\n<\/ul>\n<\/li>\n<li><strong>\u00a0B\u01b0\u1edbc 8<\/strong>: C\u00e0i \u0111\u1eb7t ti\u1ec7n \u00edch <strong>OpenVPN Client Export Utility<\/strong>, l\u00e0 ti\u1ec7n \u00edch h\u1ed7 tr\u1ee3 export ra VPN Client<strong><br \/>\n<\/strong><\/p>\n<ul>\n<li>Ch\u1ecdn <strong>System &gt; Package Manager<\/strong><\/li>\n<li>ch\u1ecdn\u00a0<strong>Available Packages\u00a0<\/strong>trong sub-menu<\/li>\n<li>T\u00ecm ti\u1ec7n \u00edch m\u1edf r\u1ed9ng <strong>openvpn-client-export <\/strong>v\u00e0 ch\u1ecdn\u00a0<strong>install<\/strong> \u0111\u1ec3 c\u00e0i \u0111\u1eb7t<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2108 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-23.png\" alt=\"\" width=\"624\" height=\"125\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-23.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-23-300x60.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<li>Nh\u1ea5n ch\u1ecdn <strong>confirm\u00a0<\/strong>x\u00e1c nh\u1eadn c\u00e0i \u0111\u1eb7t.<\/li>\n<li>Khi c\u00e0i \u0111\u1eb7t ho\u00e0n th\u00e0nh s\u1ebd hi\u1ec3n th\u1ecb <strong>Success<\/strong> trong giao di\u1ec7n\u00a0<strong>Package Installer<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2110 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-25.png\" alt=\"\" width=\"624\" height=\"388\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-25.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-25-300x187.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/strong><\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 9<\/strong>: Export g\u00f3i c\u00e0i \u0111\u1eb7t VPN Client\n<ul>\n<li>Ch\u1ecdn <strong>VPN &gt; OpenVPN<\/strong><\/li>\n<li>Ch\u1ecdn <strong>Client Export <\/strong>\u1edf sub-menu<\/li>\n<li>Ch\u1ecdn \u0111\u00fang m\u00e1y ch\u1ee7 <strong>OpenVPN<\/strong> c\u1ea1nh\u00a0<strong>Remote Access Server<\/strong><\/li>\n<li>N\u1ebfu s\u1eed d\u1ee5ng <strong>Dynamic DNS <\/strong>\u0111\u1ec3 truy c\u1eadp m\u1ea1ng<strong> WAN pfSense<\/strong>, ch\u1ecdn\u00a0<strong>Other <\/strong>v\u00e0 ch\u1ecdn<strong> Host Name Resolution\u00a0<\/strong>(Thi\u1ebft l\u1eadp n\u00e0y cho ph\u00e9p truy c\u1eadp m\u1ea1ng WAN pfSense b\u1eb1ng t\u00ean thay v\u00ec b\u1eb1ng IP, s\u1ebd kh\u00f4ng m\u1ea5t quy\u1ec1n truy c\u1eadp m\u00e1y ch\u1ee7 OpenVPN n\u1ebfu ISP thay \u0111\u1ed5i IP hay m\u1ea1ng WAN<\/li>\n<li>N\u1ebfu kh\u00f4ng s\u1eed d\u1ee5ng h\u00e3y ch\u1ecdn <strong>Host Name Resulation <\/strong>th\u00e0nh<strong> Interface IP Address<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-2116\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-26.png\" alt=\"\" width=\"624\" height=\"858\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-26.png 611w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-26-218x300.png 218w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><br \/>\n<\/strong><\/li>\n<li>K\u00e9o xu\u1ed1ng d\u01b0\u1edbi \u0111\u1ebfn v\u1ecb tr\u00ed user mu\u1ed1n download file c\u00e0i \u0111\u1eb7t VPN Client, v\u00e0 ch\u1ecdn t\u1ea3i v\u1ec1 file c\u00e0i \u0111\u1eb7t ph\u00f9 h\u1ee3p.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2118 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-27.png\" alt=\"\" width=\"624\" height=\"185\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-27.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-27-300x89.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ul>\n<\/li>\n<li><strong>B\u01b0\u1edbc 10<\/strong>: Ki\u1ec3m tra s\u1eed d\u1ee5ng k\u1ebft n\u1ed1i OpenVPN\n<ul>\n<li>Ch\u1ea1y c\u00e0i \u0111\u1eb7t file VPN Client \u0111\u00e3 download v\u1ec1.<\/li>\n<li>Sau khi k\u1ebft n\u1ed1i th\u00e0nh c\u00f4ng t\u1edbi\u00a0<strong>OpenVPN<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2119 size-full aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-28.png\" alt=\"\" width=\"572\" height=\"373\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-28.png 572w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-28-300x196.png 300w\" sizes=\"auto, (max-width: 572px) 100vw, 572px\" \/><br \/>\n<\/strong><\/li>\n<li>Th\u00f4ng tin network &#8211; khi k\u1ebft n\u1ed1i \u0111\u1ebfn OpenVPN<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"wp-image-2120 aligncenter\" src=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-29.png\" alt=\"\" width=\"624\" height=\"365\" srcset=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-29.png 624w, https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-29-300x175.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p>Nh\u01b0 v\u1eady Long V\u00e2n \u0111\u00e3 ho\u00e0n t\u1ea5t h\u01b0\u1edbng d\u1eabn Qu\u00fd kh\u00e1ch c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense, Ch\u00fac Q\u00fay kh\u00e1ch th\u00e0nh c\u00f4ng!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I. T\u1ed5ng quan: OpenVPN l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng m\u1ea1ng ri\u00eang \u1ea3o (VPN) th\u1ef1c hi\u1ec7n c\u00e1c k\u1ef9 thu\u1eadt t\u1ea1o ra c\u00e1c k\u1ebft n\u1ed1i point-to-point ho\u1eb7c site-to-site an to\u00e0n. Cho ph\u00e9p c\u00e1c b\u00ean x\u00e1c th\u1ef1c v\u1edbi nhau b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng kh\u00f3a chia s\u1ebb (pre-shared key), ch\u1ee9ng ch\u1ec9 (certificates) ho\u1eb7c t\u00ean ng\u01b0\u1eddi d\u00f9ng\/m\u1eadt kh\u1ea9u. Khi s\u1eed d\u1ee5ng [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_oasis_is_in_workflow":0,"_oasis_original":0,"footnotes":""},"categories":[3,1,4],"tags":[38,188,187,31],"class_list":["post-1680","post","type-post","status-publish","format-standard","hentry","category-he-dieu-hanh","category-huong-dan-chung","category-linux","tag-firewall","tag-openvpn","tag-pfsense","tag-vpn"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense - Long V\u00e2n<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/\" \/>\n<meta property=\"og:locale\" content=\"vi_VN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense - Long V\u00e2n\" \/>\n<meta property=\"og:description\" content=\"I. T\u1ed5ng quan: OpenVPN l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng m\u1ea1ng ri\u00eang \u1ea3o (VPN) th\u1ef1c hi\u1ec7n c\u00e1c k\u1ef9 thu\u1eadt t\u1ea1o ra c\u00e1c k\u1ebft n\u1ed1i point-to-point ho\u1eb7c site-to-site an to\u00e0n. Cho ph\u00e9p c\u00e1c b\u00ean x\u00e1c th\u1ef1c v\u1edbi nhau b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng kh\u00f3a chia s\u1ebb (pre-shared key), ch\u1ee9ng ch\u1ec9 (certificates) ho\u1eb7c t\u00ean ng\u01b0\u1eddi d\u00f9ng\/m\u1eadt kh\u1ea9u. Khi s\u1eed d\u1ee5ng [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/\" \/>\n<meta property=\"og:site_name\" content=\"Long V\u00e2n\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-26T04:21:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"316\" \/>\n\t<meta property=\"og:image:height\" content=\"162\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"V\u0169 Thi\u1ec7n Quang\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u0110\u01b0\u1ee3c vi\u1ebft b\u1edfi\" \/>\n\t<meta name=\"twitter:data1\" content=\"V\u0169 Thi\u1ec7n Quang\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u01af\u1edbc t\u00ednh th\u1eddi gian \u0111\u1ecdc\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 ph\u00fat\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/\"},\"author\":{\"name\":\"V\u0169 Thi\u1ec7n Quang\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#\\\/schema\\\/person\\\/d8575ab23f69ff6ff8fe27d082eb9f43\"},\"headline\":\"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense\",\"datePublished\":\"2023-04-26T04:21:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/\"},\"wordCount\":1476,\"publisher\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/1-300x154.png\",\"keywords\":[\"firewall\",\"openvpn\",\"pfsense\",\"vpn\"],\"articleSection\":[\"H\u1ec7 \u0111i\u1ec1u h\u00e0nh\",\"H\u01b0\u1edbng d\u1eabn chung\",\"Linux\"],\"inLanguage\":\"vi\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/\",\"url\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/\",\"name\":\"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense - Long V\u00e2n\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/1-300x154.png\",\"datePublished\":\"2023-04-26T04:21:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/#breadcrumb\"},\"inLanguage\":\"vi\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"vi\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/#primaryimage\",\"url\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/1.png\",\"contentUrl\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/1.png\",\"width\":316,\"height\":162,\"caption\":\"truy c\u1eadp Cert. Manager\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Trang ch\u1ee7\",\"item\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#website\",\"url\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/\",\"name\":\"Long V\u00e2n\",\"description\":\"C\u1ed9ng \u0110\u1ed3ng\",\"publisher\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"vi\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#organization\",\"name\":\"Long V\u00e2n\",\"url\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"vi\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/cropped-logo-longvancloudsolution.png\",\"contentUrl\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/cropped-logo-longvancloudsolution.png\",\"width\":1300,\"height\":330,\"caption\":\"Long V\u00e2n\"},\"image\":{\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/#\\\/schema\\\/person\\\/d8575ab23f69ff6ff8fe27d082eb9f43\",\"name\":\"V\u0169 Thi\u1ec7n Quang\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"vi\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae494bee7d6ab274d4c5215c38c7a27e24822330d41ab77e89f2bfbeebe6ba5d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae494bee7d6ab274d4c5215c38c7a27e24822330d41ab77e89f2bfbeebe6ba5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae494bee7d6ab274d4c5215c38c7a27e24822330d41ab77e89f2bfbeebe6ba5d?s=96&d=mm&r=g\",\"caption\":\"V\u0169 Thi\u1ec7n Quang\"},\"sameAs\":[\"http:\\\/\\\/longvan.net\"],\"url\":\"https:\\\/\\\/longvan.net\\\/cong-dong\\\/author\\\/thienquang\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense - Long V\u00e2n","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/","og_locale":"vi_VN","og_type":"article","og_title":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense - Long V\u00e2n","og_description":"I. T\u1ed5ng quan: OpenVPN l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng m\u1ea1ng ri\u00eang \u1ea3o (VPN) th\u1ef1c hi\u1ec7n c\u00e1c k\u1ef9 thu\u1eadt t\u1ea1o ra c\u00e1c k\u1ebft n\u1ed1i point-to-point ho\u1eb7c site-to-site an to\u00e0n. Cho ph\u00e9p c\u00e1c b\u00ean x\u00e1c th\u1ef1c v\u1edbi nhau b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng kh\u00f3a chia s\u1ebb (pre-shared key), ch\u1ee9ng ch\u1ec9 (certificates) ho\u1eb7c t\u00ean ng\u01b0\u1eddi d\u00f9ng\/m\u1eadt kh\u1ea9u. Khi s\u1eed d\u1ee5ng [&hellip;]","og_url":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/","og_site_name":"Long V\u00e2n","article_published_time":"2023-04-26T04:21:24+00:00","og_image":[{"width":316,"height":162,"url":"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1.png","type":"image\/png"}],"author":"V\u0169 Thi\u1ec7n Quang","twitter_card":"summary_large_image","twitter_misc":{"\u0110\u01b0\u1ee3c vi\u1ebft b\u1edfi":"V\u0169 Thi\u1ec7n Quang","\u01af\u1edbc t\u00ednh th\u1eddi gian \u0111\u1ecdc":"7 ph\u00fat"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/#article","isPartOf":{"@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/"},"author":{"name":"V\u0169 Thi\u1ec7n Quang","@id":"https:\/\/longvan.net\/cong-dong\/#\/schema\/person\/d8575ab23f69ff6ff8fe27d082eb9f43"},"headline":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense","datePublished":"2023-04-26T04:21:24+00:00","mainEntityOfPage":{"@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/"},"wordCount":1476,"publisher":{"@id":"https:\/\/longvan.net\/cong-dong\/#organization"},"image":{"@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/#primaryimage"},"thumbnailUrl":"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-300x154.png","keywords":["firewall","openvpn","pfsense","vpn"],"articleSection":["H\u1ec7 \u0111i\u1ec1u h\u00e0nh","H\u01b0\u1edbng d\u1eabn chung","Linux"],"inLanguage":"vi"},{"@type":"WebPage","@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/","url":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/","name":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense - Long V\u00e2n","isPartOf":{"@id":"https:\/\/longvan.net\/cong-dong\/#website"},"primaryImageOfPage":{"@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/#primaryimage"},"image":{"@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/#primaryimage"},"thumbnailUrl":"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1-300x154.png","datePublished":"2023-04-26T04:21:24+00:00","breadcrumb":{"@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/#breadcrumb"},"inLanguage":"vi","potentialAction":[{"@type":"ReadAction","target":["https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/"]}]},{"@type":"ImageObject","inLanguage":"vi","@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/#primaryimage","url":"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1.png","contentUrl":"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2023\/03\/1.png","width":316,"height":162,"caption":"truy c\u1eadp Cert. Manager"},{"@type":"BreadcrumbList","@id":"https:\/\/longvan.net\/cong-dong\/huong-dan-cau-hinh-openvpn-tren-firewall-pfsense\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Trang ch\u1ee7","item":"https:\/\/longvan.net\/cong-dong\/"},{"@type":"ListItem","position":2,"name":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh OpenVPN tr\u00ean firewall pfSense"}]},{"@type":"WebSite","@id":"https:\/\/longvan.net\/cong-dong\/#website","url":"https:\/\/longvan.net\/cong-dong\/","name":"Long V\u00e2n","description":"C\u1ed9ng \u0110\u1ed3ng","publisher":{"@id":"https:\/\/longvan.net\/cong-dong\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/longvan.net\/cong-dong\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"vi"},{"@type":"Organization","@id":"https:\/\/longvan.net\/cong-dong\/#organization","name":"Long V\u00e2n","url":"https:\/\/longvan.net\/cong-dong\/","logo":{"@type":"ImageObject","inLanguage":"vi","@id":"https:\/\/longvan.net\/cong-dong\/#\/schema\/logo\/image\/","url":"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2025\/11\/cropped-logo-longvancloudsolution.png","contentUrl":"https:\/\/longvan.net\/cong-dong\/wp-content\/uploads\/2025\/11\/cropped-logo-longvancloudsolution.png","width":1300,"height":330,"caption":"Long V\u00e2n"},"image":{"@id":"https:\/\/longvan.net\/cong-dong\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/longvan.net\/cong-dong\/#\/schema\/person\/d8575ab23f69ff6ff8fe27d082eb9f43","name":"V\u0169 Thi\u1ec7n Quang","image":{"@type":"ImageObject","inLanguage":"vi","@id":"https:\/\/secure.gravatar.com\/avatar\/ae494bee7d6ab274d4c5215c38c7a27e24822330d41ab77e89f2bfbeebe6ba5d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ae494bee7d6ab274d4c5215c38c7a27e24822330d41ab77e89f2bfbeebe6ba5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae494bee7d6ab274d4c5215c38c7a27e24822330d41ab77e89f2bfbeebe6ba5d?s=96&d=mm&r=g","caption":"V\u0169 Thi\u1ec7n Quang"},"sameAs":["http:\/\/longvan.net"],"url":"https:\/\/longvan.net\/cong-dong\/author\/thienquang\/"}]}},"_links":{"self":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/comments?post=1680"}],"version-history":[{"count":116,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1680\/revisions"}],"predecessor-version":[{"id":2232,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/posts\/1680\/revisions\/2232"}],"wp:attachment":[{"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/media?parent=1680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/categories?post=1680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/longvan.net\/cong-dong\/wp-json\/wp\/v2\/tags?post=1680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}