User Tools

Site Tools


vpn

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
vpn [2016/06/28 09:05] fe80:1475:38c6:316e:4a08:906c:bed3:85eevpn [2017/10/21 08:51] (current) fe80:a01f:f991:9991:a229:fec6:a8a5:1c99
Line 15: Line 15:
 </code> </code>
  
-anyconnect:+===== Anyconnect ===== 
 + 
  
   http://dl.xxshe.com/cisco_anyconnect/   http://dl.xxshe.com/cisco_anyconnect/
   https://software.cisco.com/download/release.html?mdfid=286281283&flowid=72322&softwareid=282364313&release=4.2.02075&relind=AVAILABLE&rellifecycle=&reltype=latest   https://software.cisco.com/download/release.html?mdfid=286281283&flowid=72322&softwareid=282364313&release=4.2.02075&relind=AVAILABLE&rellifecycle=&reltype=latest
 +  
 +  
 +<code>
 +Description: Core / VPN Module - Windows / Standalone installer (MSI)
 +Release: 4.3.05017
 +Release Date: 19/Dec/2016
 +File Name: anyconnect-win-4.3.05017-pre-deploy-k9.msi
 +Size: 7.55 MB (7917056 bytes)
 +MD5 Checksum: 6443495b38b3d8cc9ecdc77503d7ddf2
 +SHA512 Checksum:
 +44635f944c3326039f7572481832fb20fd2ea3adfd7397ac8a8451eee7a6624d982e46bdb13585a5dc544943b2db6155328c7a0f97a7487efa8705c5130f5b0b
 +
 +Snapshot: https://goo.gl/re4k65
 +Link: https://o84sq5a89.qnssl.com/anyconnect-win-4.3.05017-pre-deploy-k9.msi.zip
 +</code>
 +
 +===== OpenVPN =====
 +
 +installation:
 +
 +<code>
 +apt-get install openvpn easy-rsa
 +gunzip -c /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz > /etc/openvpn/server.conf
 +sed -i 's/^dh dh1024.pem/dh dh2048.pem/g' /etc/openvpn/server.conf
 +sed -i 's/^;push "redirect-gateway def1 bypass-dhcp"/push "redirect-gateway def1 bypass-dhcp"' /etc/openvpn/server.conf
 +push "dhcp-option DNS 208.67.222.222"
 +</code>
 +
 +server.conf directives:
 +
 +<code>
 +loca
 +proto #can both udp and tcp
 +ca
 +cert 
 +key
 +dh dh2048.pem
 +server 
 +push "redirect-gateway def1 bypass-dhcp"
 +push "dns-option DNS 8.8.8.8"
 +cipher
 +auth SHA256
 +</code>
 +
 +cert:
 +
 +<code>
 +make-cadir ~/openvpn-ca
 +export KEY_NAME="server" # in vars
 +./build-ca
 +./build-key-server server
 +./build-dh
 +openvpn --genkey --secret keys/ta.key
 +./build-key client1
 +</code>
 +
 +firewall:
 +
 +    -A POSTROUTING -s 10.8.0.0/8 -o wlp11s0 -j MASQUERADE
vpn.1467104730.txt.gz · Last modified: by fe80:1475:38c6:316e:4a08:906c:bed3:85ee

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki