OpenVPN Client & Server Configuration HOWTO
Giusto per non scordarmele di nuovo e visto che le usero’ molto spesso d’ora in avanti, ecco alcuni step per configurare un client e un server Linux ma anche Mac OS X per parlarsi in VPN con OpenVPN.
Installazione certificati
. ./vars
./clean-all
./build-ca
Copiare i file ca.* su entrambi i computer (client/server)
Creazione certificati client/server
. ./vars
./build-key-server <common-name-server>
./build-dh
./build-key <common-name-client>
Copiare i file <common-name-client>.* sul computer client
Configurazione Server
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
dh dh1024.pem
#Subnet for the VPN, this computer will get the first ip (10.10.100.1)
server 10.10.100.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
persist-key
persist-tun
status openvpn-status.log
verb 3
Configurazione Client
client
dev tun
proto udp
# This is the remote ip address and port of the VPN Server
remote 1.2.3.4 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
verb 3
If you enjoyed this post, please consider to leave a comment or subscribe to the feed and get future articles delivered to your feed reader.
08:08 on July 23rd, 2012
Your website is just what I was searching for. You have
no clue how long I have been thinking about the same thing!
I am so glad that I am no longer apart.
23:35 on July 22nd, 2012
I pay a visit daily some web sites and information sites to read content, but this website gives feature based writing.
20:50 on May 15th, 2009
ЕÑли хотите могу поделитьÑÑ Ð¼Ð¾Ð¸Ð¼ опытом в Ñтой тематике. ЕÑтеÑтвенно не беÑплатно. ICQ – 91634165.
12:55 on March 18th, 2009
Such a nice post!!
12:50 on March 18th, 2009
Good knowledge on Linux.
08:07 on March 16th, 2009
Thanks for post!!
03:55 on January 2nd, 2009
Thanks, that’s a great VPN client and server configuration guide
07:19 on November 27th, 2008
This will work for a routed VPN but if you want to broadcast (especially between clients) you will need to use a TAP interface, not TUN, and add the bridged option.