Setting up Openvpn between Pi and Ubuntu server - Revision history

George2 at 19:52, 1 October 2015

2015-10-01T19:52:39Z

2015-10-01T19:51:11Z

2015-10-01T19:44:41Z

2015-10-01T19:36:31Z

2015-10-01T19:18:17Z

2015-10-01T10:45:37Z

2015-10-01T10:43:43Z

2015-10-01T10:42:28Z

2015-10-01T10:39:48Z

2015-10-01T10:37:43Z

← Older revision		Revision as of 19:52, 1 October 2015
Line 107:		Line 107:
	In the same vars file, also edit this one line shown below. For simplicity, we will use server as the key name. If you want to use a different name, you would also need to update the OpenVPN configuration files that reference server.key and server.crt.<br>		In the same vars file, also edit this one line shown below. For simplicity, we will use server as the key name. If you want to use a different name, you would also need to update the OpenVPN configuration files that reference server.key and server.crt.<br>

−	'''export KEY_NAME="server"'''	+	'''export KEY_NAME="server"'''<br><br>
		+	We need to generate the Diffie-Hellman parameters; this can take several minutes.<br>
		+
		+	openssl dhparam -out /etc/openvpn/dh2048.pem 2048<br>

@@ Line 88: / Line 88: @@
 (v6)                    ALLOW       Anywhere (v6)
 /udp (v6)              ALLOW       Anywhere (v6)
 </source>
 '''Creating a Certificate Authority and Server-Side Certificate & Key'''

← Older revision		Revision as of 19:44, 1 October 2015
Line 45:		Line 45:
	</source>		</source>
	'''Uncomplicated Firewall (ufw)'''		'''Uncomplicated Firewall (ufw)'''
		+	ufw allow ssh<br>
		+	ufw allow 1194/udp<br>
		+	vim /etc/default/ufw
		+	<source lang="text">
		+	DEFAULT_FORWARD_POLICY="ACCEPT"
		+	</source>
		+	vim /etc/ufw/before.rules<br>
		+	<source lang="text">
		+	#
		+	# rules.before
		+	#
		+	# Rules that should be run before the ufw command line added rules. Custom
		+	# rules should be added to one of these chains:
		+	# ufw-before-input
		+	# ufw-before-output
		+	# ufw-before-forward
		+	#
		+
		+	# START OPENVPN RULES
		+	# NAT table rules
		+	*nat
		+	:POSTROUTING ACCEPT [0:0]
		+	# Allow traffic from OpenVPN client to eth0
		+	-A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE
		+	COMMIT
		+	# END OPENVPN RULES
		+
		+	# Don't delete these required lines, otherwise there will be errors
		+	*filter
		+	</source>
		+	ufw enable<br>
		+	To check the status of UFW<br>
		+	ufw status<br>
		+	The result should look like below <br>
		+	<source lang="text">
		+	Status: active
		+
		+	To Action From
		+	-- ------ ----
		+	22 ALLOW Anywhere
		+	1194/udp ALLOW Anywhere
		+	22 (v6) ALLOW Anywhere (v6)
		+	1194/udp (v6) ALLOW Anywhere (v6)
		+
		+	</source>
		+	'''Creating a Certificate Authority and Server-Side Certificate & Key'''

@@ Line 38: / Line 38: @@
 ;user nobody             <---- Uncomment
 ;group nogroup           <--
 </source>

@@ Line 32: / Line 32: @@
 ;push "dhcp-option DNS 208.67.222.222"    <-------Uncomment these two lines
 ;push "dhcp-option DNS 208.67.220.220"    <--
+</source>
 </source>

@@ Line 23: / Line 23: @@
 ;push "redirect-gateway def1 bypass-dhcp"   <<<<------ uncomment this line
 </source>
-<source lang="test">
+<source lang="text">
 # Certain Windows-specific network settings
 # can be pushed to clients, such as DNS

@@ Line 11: / Line 11: @@
 # 2048 bit keys.
 dh dh1024.pem    <<<<<-------- Change this to 2048
 </source>

@@ Line 4: / Line 4: @@
 gunzip -c /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz > /etc/openvpn/server.conf<br>
 vim /etc/openvpn/server.conf<br>
-<source lang="test">
+<source lang="text">
 # Diffie hellman parameters.
 # Generate your own with: