OpenVPN

# cp -R /usr/share/doc/openvpn/examples/easy-rsa/ /etc/openvpn
# cd /etc/openvpn/easy-rsa/2.0/

# nano vars
# source vars
# ./clean-all
# ./build-ca
# ./build-key-server server
# ./build-key client
# ./build-dh

# cd keys/
# cp ca.crt ca.key server.crt server.key dh1024.pem /etc/openvpn
SERVER KONFIGURATION
# nano /etc/openvpn/server.conf
port 1194
proto tcp
dev tun
ca /etc/openvpn/ca.crt

cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server 10.9.8.0 255.255.255.0

ifconfig-pool-persist ipp.txt
push “route <
server’s IP eth0> 255.255.255.0″
push “dhcp-option DNS 8.8.8.8″
keepalive 10 120
cipher AES-128-CBC
comp-lzo

user nobody
group nogroup
persist-key
persist-tun
verb 3
Restart OPENVPN

Client

Copy from /etc/openvpn/easy-rsa/2.0/keys to C:\program Files\OpenVPN\config

  • ca.crt
  • client.crt
  • client.key
  • client.ovpn

client
dev tun
proto tcp
remote <
your server’s IP> 1194
pull
route <
your server’s IP> 255.255.255.255 net_gateway
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 3

# useradd -m -s /bin/false namauserbaru
# passwd 
namauserbaru
auth-user-pass

Posted on 14 September 2013, in Linux. Bookmark the permalink. Leave a comment.

Leave a comment