Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
|
configuration:openvpn [2015/05/19 12:36] hess |
configuration:openvpn [2021/03/05 05:46] dodenhoeft [Server] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== OpenVPN ====== | ====== OpenVPN ====== | ||
| - | ===== How to create a routed OpenVPN scenario ===== | + | OpenVPN is a opensourse Software to establish virtual private network(VPN) via encrypted TLS connections. It provides a secure and encrypted user data communication between different hosts and networks. |
| + | |||
| + | ===== The focus on OpenVPN is on ===== | ||
| + | |||
| + | * High compatibility and support for many Operation systems (Linux, OS X, Windows, iOS, and Android) | ||
| + | * High stability | ||
| + | * Easy Scalability | ||
| + | * Flexible VPN client extenions | ||
| + | * Easy installation | ||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | ===== How to setup OpenVPN ===== | ||
| + | |||
| + | The following step by step instruction will guide you through a OpenVPN configuration. So basically OpenVPN does have two different modes: | ||
| + | |||
| + | |||
| + | |||
| + | __**Bridge mode (TAP):**__ | ||
| + | |||
| + | **Advantages** | ||
| + | * behaves like a real network adapter (except it is a virtual network adapter) | ||
| + | * can transport any network protocols (IPv4, IPv6, Netalk, IPX, etc, etc) | ||
| + | * Works in layer 2, meaning Ethernet frames are passed over the VPN tunnel | ||
| + | * Can be used in bridges | ||
| + | **Disadvantages** | ||
| + | * causes much more broadcast overhead on the VPN tunnel | ||
| + | * adds the overhead of Ethernet headers on all packets transported over the VPN tunnel | ||
| + | * scales poorly | ||
| + | |||
| + | __**Routing Mode (TUN)**__ | ||
| + | |||
| + | **Advantages** | ||
| + | * A lower traffic overhead, transports only traffic which is destined for the VPN client | ||
| + | * Transports only layer 3 IP packets | ||
| + | **Disadvantages** | ||
| + | * Broadcast traffic is not normally transported | ||
| + | * Can only transport IPv4 (OpenVPN 2.3 adds IPv6) | ||
| + | * Cannot be used in bridges | ||
| + | |||
| + | ===== Network setup ===== | ||
| + | |||
| + | For this configuration we will use the most common mode, **__the routing mode__**. | ||
| + | |||
| + | {{:configuration:openvpn1.png|}} | ||
| + | |||
| + | ==== Server ==== | ||
| + | ^General^Parameter^ | ||
| + | |Operation mode|Server| | ||
| + | |Server port|1194| | ||
| + | |Type|TUN| | ||
| + | |Protocol|UDP| | ||
| + | |Cipher|AES-256-CBC| | ||
| + | ^Authentication^Parameter^ | ||
| + | |certificate-based| | ||
| + | |HMAC digest|SHA256| | ||
| + | |Manage keys and certifictaes (below)| | ||
| + | ^Options^Parameter^ | ||
| + | |use compression|enable| | ||
| + | |use keepalive|enable| | ||
| + | |||
| + | After you done with the server configuation apply the setting and we will continue with the client configuation. | ||
| + | |||
| + | ==== Client ==== | ||
| + | ^General^Parameter^ | ||
| + | |Operation mode|Client| | ||
| + | |Server port|1194| | ||
| + | |Type|TUN| | ||
| + | |Protocol|UDP| | ||
| + | |Cipher|AES-256-CBC| | ||
| + | ^Authentication^Parameter^ | ||
| + | |certificate-based| | ||
| + | |HMAC digest|SHA256| | ||
| + | |Manage keys and certifictaes (below)| | ||
| + | ^Options^Parameter^ | ||
| + | |use compression|enable| | ||
| + | |use keepalive|enable| | ||
| + | |||
| + | ==== Keys and certificates ==== | ||
| + | |||
| + | |||
| + | |||
| See {{:nrsw:openvpn.pdf|}} | See {{:nrsw:openvpn.pdf|}} | ||