{"id":700,"date":"2013-04-02T19:13:09","date_gmt":"2013-04-02T17:13:09","guid":{"rendered":"http:\/\/blog.rabahi.net\/?page_id=700"},"modified":"2014-08-04T17:37:37","modified_gmt":"2014-08-04T15:37:37","slug":"srv-vpn","status":"publish","type":"page","link":"https:\/\/blog.rabahi.net\/?page_id=700","title":{"rendered":"srv-vpn"},"content":{"rendered":"

Prerequiste<\/h1>\n

I assume that you have a Centos installation.<\/p>\n

Installation<\/h1>\n

You can copy\/paste this script and use it to configure automatically your server.<\/p>\n

  1. #!\/bin\/bash<\/span><\/div><\/li>
  2.  <\/div><\/li>
  3. echo<\/span> "install openvpn"<\/span><\/div><\/li>
  4. dnf -y<\/span> install<\/span> openvpn<\/div><\/li>
  5.  <\/div><\/li>
  6. echo<\/span> "start service openvpn at boot"<\/span><\/div><\/li>
  7. systemctl enable<\/span> openvpn@<\/span>server.service<\/div><\/li>
  8.  <\/div><\/li>
  9. echo<\/span> "add service openvpn (port 1194) to firewall"<\/span><\/div><\/li>
  10. firewall-cmd --permanent<\/span> --add-service<\/span> openvpn<\/div><\/li>
  11. firewall-cmd --reload<\/span><\/div><\/li>
  12.  <\/div><\/li>
  13. echo<\/span> "configure vpn"<\/span><\/div><\/li>
  14. rm<\/span> -f<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  15. cp<\/span> \/<\/span>usr\/<\/span>share\/<\/span>doc\/<\/span>openvpn-*\/<\/span>sample\/<\/span>sample-config-files\/<\/span>server.conf \/<\/span>etc\/<\/span>openvpn\/<\/span> <\/div><\/li>
  16.  <\/div><\/li>
  17. sed<\/span> -i<\/span> "s\/dev tun\/dev tap0\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  18. sed<\/span> -i<\/span> "s\/^\\(ca \\)\/#\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  19. sed<\/span> -i<\/span> "s\/^\\(cert \\)\/#\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  20. sed<\/span> -i<\/span> "s\/^\\(key \\)\/#\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  21. sed<\/span> -i<\/span> "s\/^\\(dh \\)\/#\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  22. sed<\/span> -i<\/span> "s\/^\\(server \\)\/#\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  23. sed<\/span> -i<\/span> "s\/^\\(ifconfig-pool-persist \\)\/#\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  24. sed<\/span> -i<\/span> "s\/^\\;\\(log\\)\/\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  25. sed<\/span> -i<\/span> "s\/\\(openvpn.log\\)\/\\\/var\\\/log\\\/\\1\/g"<\/span> \/<\/span>etc\/<\/span>openvpn\/<\/span>server.conf<\/div><\/li>
  26.  <\/div><\/li>
  27.  <\/div><\/li>
  28. # echo "SSL Part (disabled)"<\/span><\/div><\/li>
  29. # echo "If uncomment:"<\/span><\/div><\/li>
  30. # echo " - Remember to sign and commit (when it will be asked)"<\/span><\/div><\/li>
  31. # echo " - In \/etc\/openvpn\/server.conf:"<\/span><\/div><\/li>
  32. # echo "       * update ca, cert, key dh path"<\/span><\/div><\/li>
  33. # echo "       * uncomment and configure the server-bridge (syntax [VPN server's IP] [subnetmask] [the range of IP for client])"<\/span><\/div><\/li>
  34. # echo "       * uncomment and configure the 'push \\"route\\ (...)\\" (syntax [network VPN server in] [subnetmask])"<\/span><\/div><\/li>
  35. # cp -R \/usr\/share\/openvpn\/easy-rsa\/2.0 \/etc\/openvpn\/easy-rsa<\/span><\/div><\/li>
  36. # cd \/etc\/openvpn\/easy-rsa<\/span><\/div><\/li>
  37. # ln -s openssl-1.0.0.cnf openssl.cnf<\/span><\/div><\/li>
  38. # source .\/vars<\/span><\/div><\/li>
  39. # .\/clean-all<\/span><\/div><\/li>
  40. # .\/build-ca<\/span><\/div><\/li>
  41. # .\/build-key-server server <\/span><\/div><\/li>
  42. # .\/build-dh<\/span><\/div><\/li>
  43. # .\/build-key-pass client <\/span><\/div><\/li>
  44.  <\/div><\/li>
  45. echo<\/span> "start service"<\/span><\/div><\/li>
  46. systemctl start openvpn@<\/span>server.service<\/div><\/li>
  47.  <\/div><\/li><\/ol><\/pre>\n
    That’s all \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"
    Prerequiste I assume that you have a Centos installation. Installation You can copy\/paste this script and use it to configure automatically your server. That’s all \ud83d\ude42<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":677,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-700","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=700"}],"version-history":[{"count":4,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/700\/revisions"}],"predecessor-version":[{"id":1030,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/700\/revisions\/1030"}],"up":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/677"}],"wp:attachment":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}