OpenVPN

Under Construction!

Introduction

The purpose of this document is to describe how to create a VPN connection between IPLOG device(s) and server via OpenVPN.

This document describes

• OpenVPN server installation and configuration on Debian machine
• OpenVPN client installation and configuration on IPLOG device
• OpenVPN client installation and configuration on Windows 10 machine

OpenVPN

OpenVPN is an open-source commercial software that implements virtual private network (VPN) techniques to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that utilizes SSL/TLS for key exchange. It is capable of traversing network address translators (NATs) and firewalls. It was written by James Yonan and is published under the GNU General Public License (GPL).

All information about OpenVPN at the link openvpn.net

OpenVPN server

OpenVPN server is available as standard package in many Linux distribution. This document is focused on Debian distribution.

Install server

The following command install the OpenVPN package witch contains both server and client.

metel@debian:~$ apt-get install openvpn

Configure Server

The files, as specified in table below, need to be installed first. These files can be generated, as specified in RD-02(TBW).

File extension	Description
ca.crt	This file contains root CA certificate.
server.crt	This file contains server certificate.
server.key	This file contains the server private key.
dh2048.pem	This file is needed.
server.conf	This file is OpenVPN server configuration. The extension .conf is mandatory, but the filename can be changed.

The following lines need to in /etc/openvpn/server.conf

# port number and protocol(tcp/udp) can be changed as needed
port 1194
proto tcp

dev tun

ca ca.crt
cert server.crt
dh dh2048.pem

# this is IP adrress range used by OpenVPN server
server 172.16.0.0 255.255.255.0

# the following line enables communication among clients 
client-to-client

comp-lzo
persist-key
persist-tun

OpenVPN Client for IPLOG Device

OpenVPN client is already installed in all IPLOG devices.

Configure Client

The files in table below are needed before configuration. These files can be generated, as specified in RD-02(TBW).

File extension	Description
ca.crt	This file contains root CA certificate.
client01.crt	This file contains client certificate.
client01.key	This file contains the client private key.
client01.conf	This file is OpenVPN client configuration. The extension .conf is mandatory, but the filename can be changed.

The following lines need to in /etc/openvpn/client01.conf

client

proto tcp
remote vpn.iplog.eu 1195

dev tun

resolv-retry infinite
nobind

persist-key
persist-tun

ca ca.crt
cert client01.crt
key client01.key

comp-lzo
route-method exe
route-delay 2

OpenVPN client for Windows

This section describes how to install the OpenVPN client to Windows 10.

Install Client

1. Download installation file at the link Download OpenVPN.

2. Wait until the download completes, and then open it.

3. Follow the install wizard.