HowTo install OpenVPN server

[tex]

@tramadite
Thank's very much for answer..with "asus console" you mean the root of ASUS where i go with Putty? If yes, can you also tell me how to explore directory (i mean "dir" of dos) and how to go inside directory ("cd" of dos). Which is the correct instruction to move this file from one directory to the other?
From my question you understand that i've nvere used this language... sorry for that and thank's again for your attention

[jimmy_cr]

dir = ls
cd.. = cd ..
cd = cd

if you want to "address" file in current directory, it is recommended to use ./file.ext instead of file.ext (put ./ in front of filename)

[Quadronix]

Hey,

I proceed the whole tutorial (thanks for this), but my asus tells me after every start

"Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
devfs_register(net/tun): could not append to parent, err: -17"
after entering the dmesg command.

Do you have an idea what the problem could be?

thx

[hedgy]

"Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
devfs_register(net/tun): could not append to parent, err: -17"
after entering the dmesg command.

I got the same error on last Oleg's firmware. You should not invoke next commands:
mkdir /dev/net
mknod /dev/net/tun c 10 200

Only
insmod tun
is necessary.

So you need to change startup script respectively.

[rej]

Hi guys,

Thanks for the tutorial, I used this and the wlhdd.co.uk one, and I got OpenVPN working, at least sourt of. I am using Ubuntu 9.04 on my machine, so I had to grab bits and pieces from other resources as well, but finally I got it working, at least on the LAN side. I can log in, no problem. But I cannot log in from the WAN side, and I don't really need it from the LAN side :-)

So I am thinking it must be a firewall issue, but I configured the firewall exactly like described - and my rule for ssh works just fine.

My question is whether there is anywhere else the error could be, other than the firewall, considering that it works from LAN?

Thanks in advance.
BR,
René

[Tamadite]

Why are you bumping? What makes you think that you are doing the correct thing? Delete your bump post so I can work on your answer.... otherwise good luck!

[mi5hu]

thanks for this tutorial!!!
Now I have a functional vpn between my Xp laptop and wl500gp.
Behind my router I have an ubuntu desktop.
How should I put my desktop in vpn?
I have to install a vpn client in ubuntu or I have to bridge lan interface?
I have to make other changes on router?
Can you make la little tutorial?

Thank you

[rej]

thanks for this tutorial!!!
Now I have a functional vpn between my Xp laptop and wl500gp.
Behind my router I have an ubuntu desktop.
How should I put my desktop in vpn?
I have to install a vpn client in ubuntu or I have to bridge lan interface?
I have to make other changes on router?
Can you make la little tutorial?

Thank you

Hi!

I am not sure what you are asking - do you want to know how to configure OpenVPN on Ubuntu? I can help you with that tomorrow if that is what you want.

As a sidenote I did get my VPN connection working. By reconfiguring the server (server.conf), the firewall (post-firewall) and the client to TCP instead of UDP, I can connect to my home network from WAN. Anybody got an idea why UDP doesn't work? I didn't change port number or anything else.

BR,
René

[mi5hu]

thank you for your answer,

yes, a little help in configuring ubuntu will be appreciated

my network architecture is:

XP Laptop --- internet --- router(wl500g) --- Ubuntu Desktop

I want to access Ubuntu Desktop from XP Laptop over VPN

[rej]

Aaah - I see, so your VPN connection between your outside XP pc and router is up and running, but you cannot access your ubuntu machine on the LAN side of the router. I actually cannot help you there as I have the same problems myself. On http://wlhdd.co.uk/wiki/OpenVPN it says to add the following to your server.conf:

 push "route 192.168.0.0 255.255.255.0"

However it does not work on my machine. I have also tried:

 push "route 192.168.1.0 255.255.255.0"

It seems more logic to me, but this does not work either. I can access the samba server on my router, but not any of the other machines on the LAN. I guess I have to look at the openVPN documentation to find out how to do this - stay tuned for an update to this.....

BR,
René

[Tamadite]

thank you for your answer,

yes, a little help in configuring ubuntu will be appreciated

my network architecture is:

XP Laptop --- internet --- router(wl500g) --- Ubuntu Desktop

I want to access Ubuntu Desktop from XP Laptop over VPN

I do not understand why you need to establish a VPN between the Ubuntu desktop and the router. Please advice.

You wrote:

Now I have a functional vpn between my Xp laptop and wl500gp.

Please confirm you have understood FINAL NOTES point (ii). If I got it correctly, that should be the answer to your problem.

[mi5hu]

I succeeded!!!
I started all over again from zero.
I don't know where I did wrong
I kept the same firewall rules from this tutorial

server.conf is:


sdev tun0
proto udp
dh dh1024.pem
ifconfig-pool-persist ipp.txt
client-config-dir ccd
server 10.8.0.0 255.255.255.0
keepalive 10 120
comp-lzo
verb 3
ca ca.crt
cert asus.crt
key asus.key
push "route 192.168.99.0 255.255.255.0"



and in client:


client
dev tun0
remote xxx.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca "\\Program Files\\OpenVPN\\config\\ca.crt"
cert "\\Program Files\\OpenVPN\\config\\laptopxp.crt"
key "\\Program Files\\OpenVPN\\config\\laptopxp.key"
comp-lzo
verb 3

[rej]

Hi!
I am not sure what you are asking - do you want to know how to configure OpenVPN on Ubuntu? I can help you with that tomorrow if that is what you want.

Here is a short guide to installing and configuring ubuntu to VPN. It does require that you are knowledged in linux/ubuntu, and it does require you to read the above guide for windows (or the one over at wlhdd.co.uk).

First install the OpenVPN client (from command prompt):

sudo apt-get install network-manager-openvpn

This installs all the neccessary packages needed to use the VPN client

If you have already generated the client certificates e.g. on an XP machine, all you have to do is left click on your network icon in the notification area and go to VPN Connections -> Configure VPN... Then you click import. Select your client.ovpn (make sure the certificates is located as indicated in the client.ovpn file). Then you are pretty much set to go. To log on to your vpn network click the network icon in the notification area and choose network connctions -> whateveryoucalledyourconnection. A fireball should now fly around your notification area icon until it connects and shows a small lock.

If you also want to generate your keys and certificates on your linux machine, copy the example configuration directory to your home directory. Stand in your home directory, then:

cp -r /usr/share/doc/openvpn/examples/easy-rsa/ .

navigate to easy-rsa/2.0 directory. I this directory all the configuration files you find in the XP version is located and you more or less just follow the XP guide either in this thread or in the wlhdd.co.uk guide. I have only encountered one difference, init-config does not exist, so don't run this command :-)

BR,
René

[sarlacc]

I can access the samba server on my router, but not any of the other machines on the LAN.

I have the same problem. Do you succeed in it? Maybe it is necessary to configure smb.conf :

 interfaces = eth0 192.168.1.1
      hosts allow = 192.168.1.1 ... 127.0.0.1

[rej]

I have the same problem. Do you succeed in it? Maybe it is necessary to configure smb.conf :

 interfaces = eth0 192.168.1.1
      hosts allow = 192.168.1.1 ... 127.0.0.1

No I have not gotten it to work. I will take it up on a later time, first I got to get the router stable while running with a USB stick attached...

By the way, I don't think working on the samba server on the router will help you - in theory you don't even need samba running on your router to access samba on computers in your workgroup.

BR,
René