Differences

This shows you the differences between two versions of the page.

--- vpn [2017/01/07 01:40] – fe80:a910:1771:8d4d:e56d:8541:6979:450d
+++ vpn [2017/10/21 08:51] (current) – fe80:a01f:f991:9991:a229:fec6:a8a5:1c99
@@ Line 36: / Line 36: @@
 Link: https://o84sq5a89.qnssl.com/anyconnect-win-4.3.05017-pre-deploy-k9.msi.zip
 </code>
+===== OpenVPN =====
+installation:
+<code>
+apt-get install openvpn easy-rsa
+gunzip -c /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz > /etc/openvpn/server.conf
+sed -i 's/^dh dh1024.pem/dh dh2048.pem/g' /etc/openvpn/server.conf
+sed -i 's/^;push "redirect-gateway def1 bypass-dhcp"/push "redirect-gateway def1 bypass-dhcp"' /etc/openvpn/server.conf
+push "dhcp-option DNS 208.67.222.222"
+</code>
+server.conf directives:
+<code>
+loca
+proto #can both udp and tcp
+ca
+cert
+key
+dh dh2048.pem
+server
+push "redirect-gateway def1 bypass-dhcp"
+push "dns-option DNS 8.8.8.8"
+cipher
+auth SHA256
+</code>
+cert:
+<code>
+make-cadir ~/openvpn-ca
+export KEY_NAME="server" # in vars
+./build-ca
+./build-key-server server
+./build-dh
+openvpn --genkey --secret keys/ta.key
+./build-key client1
+</code>
+firewall:
+    -A POSTROUTING -s 10.8.0.0/8 -o wlp11s0 -j MASQUERADE