OpenVPN on 4.0.2CD - Revision history

Eadz at 05:35, 15 July 2008

2008-07-15T05:35:31Z

193.67.39.194: dompasac

2008-07-12T08:32:03Z

dompasac

Harry Kuhman: Reverted edit of PvuA7p, changed back to last version by Rwcitek

2007-06-22T16:42:21Z

Reverted edit of PvuA7p, changed back to last version by Rwcitek

PvuA7p at 11:51, 22 June 2007

2007-06-22T11:51:32Z

Rwcitek: refactored /* Setup 2: tunnel with static-key security */

2005-12-08T06:52:38Z

refactored ‎Setup 2: tunnel with static-key security

Rwcitek: vpn client/server with static key/* Setup 2: tunnel with static-key security */

2005-12-08T06:02:32Z

vpn client/server with static key‎Setup 2: tunnel with static-key security

Rwcitek: autopick tun device /* Setup 1: simple tunnel without security */

2005-12-08T05:50:21Z

autopick tun device ‎Setup 1: simple tunnel without security

Rwcitek: with static-key /* Run and test with two machines */

2005-12-01T23:46:05Z

with static-key ‎Run and test with two machines

Rwcitek: run and test /* Configuring */

2005-12-01T23:04:53Z

run and test ‎Configuring

Rwcitek: test /* Installing */

2005-12-01T22:41:11Z

test ‎Installing

← Older revision		Revision as of 05:35, 15 July 2008
Line 1:		Line 1:
−	~~eltace~~
	The goal is to create a simple VPN between two machines on a network. The VPN software will be [http://openvpn.net/ OpenVPN] under Knoppix 4.0.2CD using a persistent disk image (PDI).		The goal is to create a simple VPN between two machines on a network. The VPN software will be [http://openvpn.net/ OpenVPN] under Knoppix 4.0.2CD using a persistent disk image (PDI).
	__TOC__		__TOC__

← Older revision		Revision as of 08:32, 12 July 2008
Line 1:		Line 1:
		+	eltace
	The goal is to create a simple VPN between two machines on a network. The VPN software will be [http://openvpn.net/ OpenVPN] under Knoppix 4.0.2CD using a persistent disk image (PDI).		The goal is to create a simple VPN between two machines on a network. The VPN software will be [http://openvpn.net/ OpenVPN] under Knoppix 4.0.2CD using a persistent disk image (PDI).
	__TOC__		__TOC__

@@ Line 27: / Line 27: @@
 On first machine 192.168.0.200:
   sudo openvpn --remote 192.168.0.201 --dev tun \
-    --ifconfig 10.4.0.1 10.4.0.2 --verb 9 >
+    --ifconfig 10.4.0.1 10.4.0.2 --verb 9 >& vpn.log &

@@ Line 27: / Line 27: @@
 On first machine 192.168.0.200:
   sudo openvpn --remote 192.168.0.201 --dev tun \
-    --ifconfig 10.4.0.1 10.4.0.2 --verb 9 >& vpn.log &
+    --ifconfig 10.4.0.1 10.4.0.2 --verb 9 >
-On second machine 192.168.0.201:
- sudo openvpn --remote 192.168.0.200 --dev tun \
-   --ifconfig 10.4.0.2 10.4.0.1 --verb 9 >& vpn.log &
-Test with a ping from first machine to second:
- ping -R -c 4 10.4.0.2
-Test with a ping from second machine to first:
- ping -R -c 4 10.4.0.1
-−
-== Setup 2: tunnel with static-key security ==
-The first machine (192.168.0.200) will act as the server.  The second machine (192.168.0.201) will act as the client.
-−
-Setup environment variables on both client and server:
- public_server=192.168.0.200
- public_client=192.168.0.201
- open_vpn_server=10.1.1.200
- open_vpn_client=10.1.1.201
-−
-On the server, generate a key:
- openvpn --genkey --secret openvpn.key
-−
-Copy key to the client, e.g. using a USB stick or via ssh:
- scp openvpn.key knoppix@${public_client}:
-−
-On the server, start openvpn:
- sudo openvpn --dev tun --ifconfig ${open_vpn_server} ${open_vpn_client} \
-   --secret openvpn.key --verb 9 >&vpn.log &
-−
-On the client, connect to openvpn daemon on server:
- sudo openvpn --dev tun --ifconfig ${open_vpn_client} ${open_vpn_server} \
-   --remote ${public_server} \
-   --secret openvpn.key --verb 9 >&vpn.log &
-−
-On the client, ping the server:
- ping -R -c 4 ${open_vpn_server}
-−
-On the server, ping the client:
- ping -R -c 4 ${open_vpn_client}

@@ Line 38: / Line 38: @@
 == Setup 2: tunnel with static-key security ==
 The first machine (192.168.0.200) will act as the server.  The second machine (192.168.0.201) will act as the client.
 On the server, generate a key:
   openvpn --genkey --secret openvpn.key
-Copy key to second machine, e.g. using a USB stick or via ssh:
+Copy key to the client, e.g. using a USB stick or via ssh:
-  scp openvpn.key knoppix@192.168.0.201:
+  scp openvpn.key knoppix@${public_client}:
-On server, start openvpn:
+On the server, start openvpn:
-  sudo openvpn --dev tun --ifconfig 10.4.0.1 10.4.0.2 \
+  sudo openvpn --dev tun --ifconfig ${open_vpn_server} ${open_vpn_client} \
     --secret openvpn.key --verb 9 >&vpn.log &
-On client, connect to openvpn on server:
+On the client, connect to openvpn daemon on server:
-  sudo openvpn --remote 192.168.0.200 --dev tun \
+  sudo openvpn --dev tun --ifconfig ${open_vpn_client} ${open_vpn_server} \
-    --ifconfig 10.4.0.2 10.4.0.1 --secret openvpn.key --verb 9 >&vpn.log &
+   --remote ${public_server} \

@@ Line 24: / Line 24: @@
 This is on two machines connected to a router with a DHCP server that serves up IP addresses in the 192.168.0.xxx range.
 On first machine 192.168.0.200:
-  openvpn --remote 192.168.0.201 --dev tun1 --ifconfig 10.4.0.1 10.4.0.2 --verb 9 >& vpn.log &
+  sudo openvpn --remote 192.168.0.201 --dev tun1 --ifconfig 10.4.0.1 10.4.0.2 --verb 9 >& vpn.log &
 On second machine 192.168.0.201:
-  openvpn --remote 192.168.0.200 --dev tun1 --ifconfig 10.4.0.2 10.4.0.1 --verb 9 >& vpn.log &
+  sudo openvpn --remote 192.168.0.200 --dev tun1 --ifconfig 10.4.0.2 10.4.0.1 --verb 9 >& vpn.log &
 Test with a ping from first machine to second:
-  ping -c 4 10.4.0.2
+  ping -R -c 4 10.4.0.2
 Test with a ping from second machine to first:
-  ping -c 4 10.4.0.1
+  ping -R -c 4 10.4.0.1

← Older revision		Revision as of 23:04, 1 December 2005
Line 20:		Line 20:
	modprobe tun		modprobe tun
	lsmod\| grep tun		lsmod\| grep tun
		+
		+	= Run and test with two machines =
		+	This is on two machines connected to a router with a DHCP server that serves up IP addresses in the 192.168.0.xxx range.
		+
		+	On first machine 192.168.0.200:
		+	openvpn --remote 192.168.0.201 --dev tun1 --ifconfig 10.4.0.1 10.4.0.2 --verb 9 >& vpn.log &
		+	On second machine 192.168.0.201:
		+	openvpn --remote 192.168.0.200 --dev tun1 --ifconfig 10.4.0.2 10.4.0.1 --verb 9 >& vpn.log &
		+	Test with a ping from first machine to second:
		+	ping -c 4 10.4.0.2
		+	Test with a ping from second machine to first:
		+	ping -c 4 10.4.0.1

@@ Line 9: / Line 9: @@
 Following notes from http://openvpn.net/howto.html#install
   apt-get update
   apt-get -y install openvpn carpaltunnel
-  # Select "yes" when the installer asks about creating the tun device.
+  # Answer "yes" when the installer asks about creating the tun device.
 = Configuring =