Openvpn - Revision history

Ciscodude4life: Guide on setting up OpenVPN

2010-05-12T19:50:21Z

Guide on setting up OpenVPN

← Older revision		Revision as of 19:50, 12 May 2010
Line 10:		Line 10:
	*all of the files will be located in the:		*all of the files will be located in the:

	''/etc/openvpn''		''/etc/openvpn''

	2. to make things easier you can '''copy the dir "easy-rsa"''' from the samples dir to the current dir of "/etc/openvpn".		2. to make things easier you can '''copy the dir "easy-rsa"''' from the samples dir to the current dir of "/etc/openvpn".

	''cp -R /usr/share/doc/openvpn/examples/easy-rsa/ ./''		''cp -R /usr/share/doc/openvpn/examples/easy-rsa/ ./''

	3. after copying the easy-rsa dir switch to ''easy-rsa/2.0/'' where we will build the Certificates of Authority with some scripts provided.		3. after copying the easy-rsa dir switch to ''easy-rsa/2.0/'' where we will build the Certificates of Authority with some scripts provided.
Line 20:		Line 20:
	4. '''edit the vars file''' and add in information for KEY_COUNTRY, KEY_PROVINCE, KEY_CITY, KEY_ORG, and KEY_EMAIL parameters. save and exit out back to ''easy-rsa/2.0/''.		4. '''edit the vars file''' and add in information for KEY_COUNTRY, KEY_PROVINCE, KEY_CITY, KEY_ORG, and KEY_EMAIL parameters. save and exit out back to ''easy-rsa/2.0/''.

	''Nano vars''		''Nano vars''

	*then after you edit the file use the command ''source vars''		*then after you edit the file use the command ''source vars''
Line 26:		Line 26:
	5. now we are going to run some scripts starting with the '''clean-all'''		5. now we are going to run some scripts starting with the '''clean-all'''

	''./clean-all''		''./clean-all''

	*followed up by the		*followed up by the

	''./build-ca''		''./build-ca''

	*the text showing up should look somewhat like this		*the text showing up should look somewhat like this
Line 39:		Line 39:
	6. time to make the '''server key''' with the script		6. time to make the '''server key''' with the script

	''./build-key-server server''		''./build-key-server server''

	*you will be prompted the same message as above but you will have the added '''Sign the Certificate''' which you want to say yes.		*you will be prompted the same message as above but you will have the added '''Sign the Certificate''' which you want to say yes.
Line 45:		Line 45:
	7. the last key required is the '''client key''' and is created by doing		7. the last key required is the '''client key''' and is created by doing

	''./build-key client1''		''./build-key client1''

	*this will create a key for the first client and if you want more just name it "client2" for the next one. also don't forget the get the client key signed. you should have created 3 keys for CA, server, and client1 at this point.		*this will create a key for the first client and if you want more just name it "client2" for the next one. also don't forget the get the client key signed. you should have created 3 keys for CA, server, and client1 at this point.
Line 51:		Line 51:
	8. the DH(Diffie Hellman) parameters need to be genterated for the OpenVPN server		8. the DH(Diffie Hellman) parameters need to be genterated for the OpenVPN server

	''./build-dh''		''./build-dh''

	[[File:keydh.jpg]]		[[File:keydh.jpg]]
Line 64:		Line 64:
	1.this part can get kinda crazy on editing the text files for each system. making this easier on ourselfs we will copy the sample configuration files from the download to make life easy. take note that the '''server.conf''' file is zipped.copying the files to the /etc/openvpn dir.		1.this part can get kinda crazy on editing the text files for each system. making this easier on ourselfs we will copy the sample configuration files from the download to make life easy. take note that the '''server.conf''' file is zipped.copying the files to the /etc/openvpn dir.

	''cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz ./		''cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz ./
	''		''
	*then for client configuration		*then for client configuration

	''cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf ./''		''cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf ./''

	*unzipping the server.conf file with		*unzipping the server.conf file with

	''gunzip server.conf.gz''		''gunzip server.conf.gz''

	2.since we moved all the certificates around we now need to edit the server file to point to the right location to access the certificates.		2.since we moved all the certificates around we now need to edit the server file to point to the right location to access the certificates.

	''nano server.conf''		''nano server.conf''

	*scroll down a bit until you reach the part that looks like this:		*scroll down a bit until you reach the part that looks like this:
Line 100:		Line 100:
	4. testing the server to see if it is working by turning it on with the command inside the /etc/openvpn/ location.		4. testing the server to see if it is working by turning it on with the command inside the /etc/openvpn/ location.

	''openvpn server.conf''		''openvpn server.conf''

	*if everything worked as planned a bunch of text will flash the screen and end with '''initialization sequence completed''' meaning its working : ). the server that is.		*if everything worked as planned a bunch of text will flash the screen and end with '''initialization sequence completed''' meaning its working : ). the server that is.
Line 108:		Line 108:
	5.testing the client side in Linux on a different system by typing this command and don't forget to copy all the files needed.		5.testing the client side in Linux on a different system by typing this command and don't forget to copy all the files needed.

	''openvpn client.conf''		''openvpn client.conf''

	*if the gods are on your side and a '''initialization sequence completed''' statement shows up on the client it worked!		*if the gods are on your side and a '''initialization sequence completed''' statement shows up on the client it worked!

Ciscodude4life: Guide on setting up OpenVPN

2010-05-12T19:49:28Z

Guide on setting up OpenVPN

← Older revision		Revision as of 19:49, 12 May 2010
Line 6:		Line 6:
	1. First '''install''' the openvpn software with the command.		1. First '''install''' the openvpn software with the command.

	''aptitude install openvpn''		''aptitude install openvpn''

	*all of the files will be located in the:		*all of the files will be located in the:

Ciscodude4life at 19:30, 12 May 2010

2010-05-12T19:30:45Z

← Older revision		Revision as of 19:30, 12 May 2010
Line 96:		Line 96:
	*then do the '''same for''' ''DH dh1024.pem'' which should only be a few lines below.		*then do the '''same for''' ''DH dh1024.pem'' which should only be a few lines below.

	3. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are a ton of configurations in the files so you can play around with what you need.		3. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are ton of configurations in the files so you can play around with what you need.

	4. testing the server to see if it is working by turning it on with the command inside the /etc/openvpn/ location.		4. testing the server to see if it is working by turning it on with the command inside the /etc/openvpn/ location.

Ciscodude4life at 19:25, 12 May 2010

2010-05-12T19:25:51Z

← Older revision		Revision as of 19:25, 12 May 2010
Line 2:		Line 2:
	== Steps to setting up a VPN on a Ubuntu server ==		== Steps to setting up a VPN on a Ubuntu server ==

	So you are brave enough to venture in the installing and configuring of a VPN but do not fear this page can give you a ~~heads up~~. ''what is a VPN?'' well it is creating a tunnel from one network to another over the internet in a private LAN. once it is setup you will be able to access computers or servers as if you were at a local network. VPN can become a very useful tool for a person dealing a lot of work over a remote connection that is secure. this guide will give step by step information on installing Openvpn on a Ubuntu Linux server and setting up a basic client.		So you are brave enough to venture in the installing and configuring of a VPN but do not fear this page can give you a head start. ''what is a VPN?'' well it is creating a tunnel from one network to another over the internet in a private LAN. once it is setup you will be able to access computers or servers as if you were at a local network. VPN can become a very useful tool for a person dealing a lot of work over a remote connection that is secure. this guide will give step by step information on installing Openvpn on a Ubuntu Linux server and setting up a basic client.

	1. First '''install''' the openvpn software with the command.		1. First '''install''' the openvpn software with the command.

Ciscodude4life at 19:24, 12 May 2010

2010-05-12T19:24:48Z

← Older revision		Revision as of 19:24, 12 May 2010
Line 112:		Line 112:
	*if the gods are on your side and a '''initialization sequence completed''' statement shows up on the client it worked!		*if the gods are on your side and a '''initialization sequence completed''' statement shows up on the client it worked!

	*for a Windows client you will be creating a logical Network card called something like ''TUN''.		*for a Windows client you will be creating a logical Network card called something like ''TUN'' in the network places.

Ciscodude4life at 19:23, 12 May 2010

2010-05-12T19:23:53Z

← Older revision		Revision as of 19:23, 12 May 2010
Line 103:		Line 103:

	*if everything worked as planned a bunch of text will flash the screen and end with '''initialization sequence completed''' meaning its working : ). the server that is.		*if everything worked as planned a bunch of text will flash the screen and end with '''initialization sequence completed''' meaning its working : ). the server that is.

			*also take note that a new network card has been added to the options in the servers interfaces file. the new interface will be ''TUN0'' which will be the tunneled connection.

	5.testing the client side in Linux on a different system by typing this command and don't forget to copy all the files needed.		5.testing the client side in Linux on a different system by typing this command and don't forget to copy all the files needed.
Line 109:		Line 111:

	*if the gods are on your side and a '''initialization sequence completed''' statement shows up on the client it worked!		*if the gods are on your side and a '''initialization sequence completed''' statement shows up on the client it worked!

			*for a Windows client you will be creating a logical Network card called something like ''TUN''.

Ciscodude4life at 19:21, 12 May 2010

2010-05-12T19:21:09Z

← Older revision		Revision as of 19:21, 12 May 2010
Line 113:		Line 113:
	== Problems with not connecting ==		== Problems with not connecting ==

	*There can be a huge range of problems with a VPN not working heck even i didn't make it but i was close. problems such as ports being blocked, Windows being a pain or not having both the networks talking is a never ending cycle of playing with the configuration files until something works. by reading this page will give anyone a jump start on creating your own VPN.		*There can be a huge range of problems with a VPN not working heck even i didn't make it but i was close. problems such as ports being blocked, Windows XP being a pain or not having both the networks talking is a never ending cycle of playing with the configuration files until something works. by reading this page will give anyone a jump start on creating your own VPN.

Ciscodude4life at 19:20, 12 May 2010

2010-05-12T19:20:23Z

← Older revision		Revision as of 19:20, 12 May 2010
Line 96:		Line 96:
	*then do the '''same for''' ''DH dh1024.pem'' which should only be a few lines below.		*then do the '''same for''' ''DH dh1024.pem'' which should only be a few lines below.

	2. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are a ton of configurations in the files so you can play around with what you need.		3. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are a ton of configurations in the files so you can play around with what you need.

	3. testing the server to see if it is working by turning it on with the command inside the /etc/openvpn/ location.		4. testing the server to see if it is working by turning it on with the command inside the /etc/openvpn/ location.

	''openvpn server.conf''		''openvpn server.conf''
Line 104:		Line 104:
	*if everything worked as planned a bunch of text will flash the screen and end with '''initialization sequence completed''' meaning its working : ). the server that is.		*if everything worked as planned a bunch of text will flash the screen and end with '''initialization sequence completed''' meaning its working : ). the server that is.

	4.testing the client side in Linux on a different system by typing this command and don't forget to copy all the files needed.		5.testing the client side in Linux on a different system by typing this command and don't forget to copy all the files needed.

	''openvpn client.conf''		''openvpn client.conf''

Ciscodude4life at 19:19, 12 May 2010

2010-05-12T19:19:51Z

← Older revision		Revision as of 19:19, 12 May 2010
Line 94:		Line 94:
	key '''/etc/openvpn/easy-rsa/2.0/keys/'''server.key		key '''/etc/openvpn/easy-rsa/2.0/keys/'''server.key

	*then do the same for ''DH dh1024.pem'' which should only be a few lines below.		*then do the '''same for''' ''DH dh1024.pem'' which should only be a few lines below.

	2. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are a ton of configurations in the files so you can play around with what you need.		2. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are a ton of configurations in the files so you can play around with what you need.

Ciscodude4life at 19:19, 12 May 2010

2010-05-12T19:19:43Z

← Older revision		Revision as of 19:19, 12 May 2010
Line 94:		Line 94:
	key '''/etc/openvpn/easy-rsa/2.0/keys/'''server.key		key '''/etc/openvpn/easy-rsa/2.0/keys/'''server.key

	*then do the same for ''DH dh1024.pem'' which should only be a few lines ~~down~~.		*then do the same for ''DH dh1024.pem'' which should only be a few lines below.

	2. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are a ton of configurations in the files so you can play around with what you need.		2. then you can continue to configure the '''client.conf''' file as well to use for another Linux machine or use a windows client. you will just need to update the keys locations in the configuration file and change the ip address to the server. there are a ton of configurations in the files so you can play around with what you need.