M
M
machno2014-06-11 18:42:59
openvpn
machno, 2014-06-11 18:42:59

How to set up OpenVPN(server)?

There was a need to lift VPN. There is a server on DigitalOcean, a computer with 1C (acting as a server) and a random number of devices. The server is running Ubuntu 14.04.
First I googled OpenVPN Access Server. Installed - works great. But there are only 2 licenses, additional 10 (you can't buy less) licenses cost $75. Personally, I'm not particularly satisfied. Went to google "ubuntu openvpn"
Found this habrahabr.ru/post/153855
After this habrahabr.ru/company/infopulse/blog/183628
Neither works. The second option is not OpenVPN, but pptpd, although it didn’t work for me either. In general, I have already exhausted during the day and I can’t imagine WHAT WRONG.
UPD:
Server config:

local х.х.х.х
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
port 1194

;proto tcp
proto udp

;dev tap
dev tun

;dev-node MyTap

ca ca.crt
cert server.crt
key server.key  # This file should be kept secret

dh dh1024.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

;server-bridge

;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script

;push "redirect-gateway def1 bypass-dhcp"

;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"

client-to-client

;duplicate-cn

keepalive 10 120

;tls-auth ta.key 0 # This file is secret

;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES

comp-lzo

;max-clients 100

;user nobody
;group nogroup

persist-key
persist-tun

status openvpn-status.log

;log         openvpn.log
;log-append  openvpn.log

verb 3

;mute 20

Client side config:
remote х.х.х.х 1194
client openvpn
dev tun
ping 10
comp-lzo
proto udp
tls-client
remote-cert-tls server
pkcs12 vpn.windows.p12
verb 3
pull

Answer the question

In order to leave comments, you need to log in

3 answer(s)
I
Igor, 2014-06-11
@merryjane

And what exactly did not work according to the instructions: habrahabr.ru/post/153855?
Are there any errors in the logs?
Post the server and client configuration files, command output (also for client and server):

iptables-save
ip a

S
shaazz, 2014-06-12
@shaazz

did something like this . OpenVPN server on Win2008 with a white address. Inside the OpenVPN network, static addresses with prescribed routes. The task is to go from client to client.

R
rgb000, 2016-01-07
@rgb000

In some cases, you need to quickly raise the tunnel between two points. And the fastest way with minimal security is a shared key, as they say, for example here - sysadm.pp.ua/linux/encryption/openvpn-point-to-po... .

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question