openvpn on ubuntu 16.04

Open vpn server ip = 54.202.195.232
apt-get update && apt-get upgrade
apt-get install openvpn

vim /etc/default/openvpn,
    uncomment AUTOSTART="all"
sudo systemctl daemon-reload
sudo service openvpn restart

cd /usr/share/doc/openvpn/examples/sample-config-files/
gunzip -c server.conf.gz > /etc/openvpn/server.conf

vim /etc/openvpn/server.conf

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

user nobody
group nogroup

echo 1 > /proc/sys/net/ipv4/ip_forward

vim /etc/sysctl.conf
net.ipv4.ip_forward=1

iptables -t NAT -A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE

cd /usr/share/easy-rsa/
mkdir -p /etc/openvpn/easy-rsa/keys
cp -r /usr/share/easy-rsa/ /etc/openvpn/
mkdir /etc/openvpn/easy-rsa/keys
vim /etc/openvpn/easy-rsa/vars
  # change the export KEY_EMAIL ..
  export KEY_NAME="server"    # keep this in reference

openssl dhparam -out /etc/openvpn/dh2048.pem 2048

cd /etc/openvpn/easy-rsa/
. ./vars
./clean-all
./build-ca

    # let the defaults be same and no passwords
./build-key-server server
    sign the certificate = y

cd keys

cp server.crt server.key ca.crt /etc/openvpn
service openvpn start

## Create client keys
[CLIENT MACHINE]

/etc/openvpn/easy-rsa/build-key client
    ..writing a new private key to 'client.key'
sign the certificate y/n : select y

ls /etc/openvpn/easy-rsa/keys
-rw-r--r-- 1 root  root  1.7K Sep  3 02:13 client.key
-rw-r--r-- 1 root  root  5.4K Sep  3 02:13 client.crt
-rw-r--r-- 1 root  root  1.8K Sep  3 02:13 ca.crt

create client.ovpn file eg.
# vim urgen.ovpn
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote 54.202.195.232 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
;mute-replay-warnings
remote-cert-tls server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 3
;mute 20
####
Now append certificate and key file to urgen.ovpn file

echo "<ca>" >> urgen.ovpn
cat ca.crt >> urgen.ovpn
echo "</ca>" >> urgen.ovpn

echo "<cert>" >> urgen.ovpn
cat client.crt >> urgen.ovpn
echo "</cert>" >> urgen.ovpn

echo "<key>" >> urgen.ovpn
cat client.key >> urgen.ovpn
echo "</key>" >> urgen.ovpn

sudo openvpn urgen.ovpn

....now check your changed public ip addr

No comments:

Post a Comment