Difference between revisions of "OpenVPN"
| Line 174: | Line 174: | ||
| client.ovpn || This file is OpenVPN client configuration. The extension .conf is mandatory, but the filename can be changed. | | client.ovpn || This file is OpenVPN client configuration. The extension .conf is mandatory, but the filename can be changed. | ||
|} | |} | ||
| + | |||
Revision as of 13:52, 18 January 2019
Under Construction!
Contents
Introduction
The purpose of this document is to describe how to create a VPN connection between IPLOG device(s) and server via OpenVPN.
This document describes
- OpenVPN server installation and configuration on Debian machine
- OpenVPN client installation and configuration on IPLOG device
- OpenVPN client installation and configuration on Windows 10 machine
OpenVPN
OpenVPN is an open-source commercial software that implements virtual private network (VPN) techniques to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that utilizes SSL/TLS for key exchange. It is capable of traversing network address translators (NATs) and firewalls. It was written by James Yonan and is published under the GNU General Public License (GPL).
All information about OpenVPN at the link openvpn.net
OpenVPN server
OpenVPN server is available as standard package in many Linux distribution. This document is focused on Debian distribution.
Install server
The following command install the OpenVPN package witch contains both server and client.
metel@debian:~$ apt-get install openvpn
Configure Server
The files, as specified in table below, need to be installed first. These files can be generated, as specified in RD-02(TBW).
| File extension | Description |
|---|---|
| ca.crt | This file contains root CA certificate. |
| server.crt | This file contains server certificate. |
| server.key | This file contains the server private key. |
| dh2048.pem | This file is needed. |
| server.conf | This file is OpenVPN server configuration. The extension .conf is mandatory, but the filename can be changed. |
The following lines need to in /etc/openvpn/server.conf
# port number and protocol(tcp/udp) can be changed as needed port 1194 proto tcp dev tun ca ca.crt cert server.crt dh dh2048.pem # this is IP adrress range used by OpenVPN server server 172.16.0.0 255.255.255.0 # the following line enables communication among clients client-to-client comp-lzo persist-key persist-tun
OpenVPN Client for IPLOG Device
OpenVPN client is already installed in all IPLOG devices.
Configure Client
The files in table below are needed before configuration. These files can be generated, as specified in RD-02(TBW).
| File extension | Description |
|---|---|
| ca.crt | This file contains root CA certificate. |
| client01.crt | This file contains client certificate. |
| client01.key | This file contains the client private key. |
| client01.conf | This file is OpenVPN client configuration. The extension .conf is mandatory, but the filename can be changed. |
The following lines need to in /etc/openvpn/client01.conf
client proto tcp remote vpn.iplog.eu 1195 dev tun resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert client01.crt key client01.key comp-lzo route-method exe route-delay 2
OpenVPN client for Windows
This section describes how to install the OpenVPN client to Windows 10.
Install Client
1. Download installation file at the link Download OpenVPN.
2. Wait until the download completes, and then open it.
3. Follow the install wizard. Hit the Next to start installation.
Confirm a License Agreement.
Choose a OpenVPN components to install.
Choose install location and run the installation by Install button.
Wizard automatically starts install all components, when the Complete label appear continue by Next.
Installation is complete. Show Readme views a basic configuration information.
Configure client
The files in table below are needed to configuration. These files can be generated, as specified in RD-02(TBW).
| File extension | Description |
|---|---|
| ca.crt | This file contains root CA certificate. |
| client01.crt | This file contains client certificate. |
| client01.key | This file contains the client private key. |
| client.ovpn | This file is OpenVPN client configuration. The extension .conf is mandatory, but the filename can be changed. |
a) Run the OpenVPN Program
The OpenVPN message. No config files were imported into the program.
b) Copy and edit file
C:\Program Files\OpenVPN\sample-config\client.ovpn to C:\Users\Root\OpenVPN\config
The following lines need to in C:\Users\Root\OpenVPN\config\client.ovpn
client proto tcp remote vpn.iplog.eu 1195 dev tun resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert client01.crt key client01.key comp-lzo route-method exe route-delay 2
Connection to VPN
Right click to OpenVPN icon in Notification area of Taskbar, select Connect.
Successful connection is logged in dialog window, Initialization Sequence Completed.
