#BRIDGED SETUP # apt-get install openvpn liblzo1 liblzo2-2 bridge-utils cp -Rv /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/ cd /etc/openvpn/ vi vars #edit the last lines in the file # # eg: #export KEY_COUNTRY="NL" #export KEY_PROVINCE="ZH" #export KEY_CITY="Amsterdam" #export KEY_ORG="virtcomputing.com" #export KEY_EMAIL="noc@virtcomputing.com" #set the variables ./vars ./clean-all ./build-ca ./build-key-server server #As common name we give "server", answer "yes" to #-Sign the certificate? [y/n] #-1 out of 1 certificate requests certified, commit? [y/n] ./build-dh #build keys for client(s) ./build-key client1 # All generated keys are now in /usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/ # and need to distributed over the server/client(s) cp keys/{ca.crt,server.crt,server.key,dh1024.pem} /etc/openvpn/ chmod 600 /etc/openvpn/{ca.crt,server.crt,server.key,dh1024.pem} vim /etc/openvpn/vpn_server.conf ------------------------- port 1194 proto udp dev tun ca /etc/openvpn/ca.crt cert /opt/keys/server.crt key /opt/keys/server.key dh /opt/keys/dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt client-to-client keepalive 10 120 comp-lzo user nobody group nogroup persist-key persist-tun status openvpn-status.log verb 3 ------------------------- Articles to study/read: http://www.uno-code.com/?q=node/50 http://www.uno-code.com/?q=node/120