Open vpn server ip = 54.202.195.232
apt-get update && apt-get upgrade
apt-get install openvpn
vim /etc/default/openvpn,
uncomment AUTOSTART="all"
sudo systemctl daemon-reload
sudo service openvpn restart
cd /usr/share/doc/openvpn/examples/sample-config-files/
gunzip -c server.conf.gz > /etc/openvpn/server.conf
vim /etc/openvpn/server.conf
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
user nobody
group nogroup
echo 1 > /proc/sys/net/ipv4/ip_forward
vim /etc/sysctl.conf
net.ipv4.ip_forward=1
iptables -t NAT -A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE
cd /usr/share/easy-rsa/
mkdir -p /etc/openvpn/easy-rsa/keys
cp -r /usr/share/easy-rsa/ /etc/openvpn/
mkdir /etc/openvpn/easy-rsa/keys
vim /etc/openvpn/easy-rsa/vars
# change the export KEY_EMAIL ..
export KEY_NAME="server" # keep this in reference
openssl dhparam -out /etc/openvpn/dh2048.pem 2048
cd /etc/openvpn/easy-rsa/
. ./vars
./clean-all
./build-ca
# let the defaults be same and no passwords
./build-key-server server
sign the certificate = y
cd keys
cp server.crt server.key ca.crt /etc/openvpn
service openvpn start
## Create client keys
[CLIENT MACHINE]
/etc/openvpn/easy-rsa/build-key client
..writing a new private key to 'client.key'
sign the certificate y/n : select y
ls /etc/openvpn/easy-rsa/keys
-rw-r--r-- 1 root root 1.7K Sep 3 02:13 client.key
-rw-r--r-- 1 root root 5.4K Sep 3 02:13 client.crt
-rw-r--r-- 1 root root 1.8K Sep 3 02:13 ca.crt
create client.ovpn file eg.
# vim urgen.ovpn
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote 54.202.195.232 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
;mute-replay-warnings
remote-cert-tls server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 3
;mute 20
####
Now append certificate and key file to urgen.ovpn file
echo "<ca>" >> urgen.ovpn
cat ca.crt >> urgen.ovpn
echo "</ca>" >> urgen.ovpn
echo "<cert>" >> urgen.ovpn
cat client.crt >> urgen.ovpn
echo "</cert>" >> urgen.ovpn
echo "<key>" >> urgen.ovpn
cat client.key >> urgen.ovpn
echo "</key>" >> urgen.ovpn
sudo openvpn urgen.ovpn
....now check your changed public ip addr
apt-get update && apt-get upgrade
apt-get install openvpn
vim /etc/default/openvpn,
uncomment AUTOSTART="all"
sudo systemctl daemon-reload
sudo service openvpn restart
cd /usr/share/doc/openvpn/examples/sample-config-files/
gunzip -c server.conf.gz > /etc/openvpn/server.conf
vim /etc/openvpn/server.conf
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
user nobody
group nogroup
echo 1 > /proc/sys/net/ipv4/ip_forward
vim /etc/sysctl.conf
net.ipv4.ip_forward=1
iptables -t NAT -A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE
cd /usr/share/easy-rsa/
mkdir -p /etc/openvpn/easy-rsa/keys
cp -r /usr/share/easy-rsa/ /etc/openvpn/
mkdir /etc/openvpn/easy-rsa/keys
vim /etc/openvpn/easy-rsa/vars
# change the export KEY_EMAIL ..
export KEY_NAME="server" # keep this in reference
openssl dhparam -out /etc/openvpn/dh2048.pem 2048
cd /etc/openvpn/easy-rsa/
. ./vars
./clean-all
./build-ca
# let the defaults be same and no passwords
./build-key-server server
sign the certificate = y
cd keys
cp server.crt server.key ca.crt /etc/openvpn
service openvpn start
## Create client keys
[CLIENT MACHINE]
/etc/openvpn/easy-rsa/build-key client
..writing a new private key to 'client.key'
sign the certificate y/n : select y
ls /etc/openvpn/easy-rsa/keys
-rw-r--r-- 1 root root 1.7K Sep 3 02:13 client.key
-rw-r--r-- 1 root root 5.4K Sep 3 02:13 client.crt
-rw-r--r-- 1 root root 1.8K Sep 3 02:13 ca.crt
create client.ovpn file eg.
# vim urgen.ovpn
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote 54.202.195.232 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
;mute-replay-warnings
remote-cert-tls server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 3
;mute 20
####
Now append certificate and key file to urgen.ovpn file
echo "<ca>" >> urgen.ovpn
cat ca.crt >> urgen.ovpn
echo "</ca>" >> urgen.ovpn
echo "<cert>" >> urgen.ovpn
cat client.crt >> urgen.ovpn
echo "</cert>" >> urgen.ovpn
echo "<key>" >> urgen.ovpn
cat client.key >> urgen.ovpn
echo "</key>" >> urgen.ovpn
sudo openvpn urgen.ovpn
....now check your changed public ip addr
No comments:
Post a Comment