They are available 24×7 and will OpenVPN on Ubuntu 16.04, or other Linux OS, immediately. Of course, you don’t have to install OpenVPN on Ubuntu 16.04 if you use one of our Managed Linux VPS Hosting services, in which case you can simply ask our expert Linux admins to Install and configure OpenVPN on Ubuntu 16.04, for you. You have successfully installed a configured an OpenVPN server on your Ubuntu 16.04 VPS. clientĭo not forget to change with your OpenVPN server IP address. Next, copy the following files to your client machine /etc/openvpn/ca.pemĪnd start your OpenVPN client with the following configuration. Openssl x509 -req -in /etc/openvpn/client-csr.pem -out /etc/openvpn/client-cert.pem -CA /etc/openvpn/ca.pem -CAkey /etc/openvpn/ca-key.pem -days 36525 Openssl req -new -key /etc/openvpn/client-key.pem -out /etc/openvpn/client-csr.pem -subj /CN=OpenVPN-Client/ The following commands will generate a client certificate and key: openssl genrsa -out /etc/openvpn/client-key.pem 2048 mo GET YOUR VPS sed -i 's|#_forward=1|_forward=1|' /etc/nf
Instead of the rule above add: iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT -to-source įinally, we also need to allow IP forwarding: Note: If you are running an openvz based VPS iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE Change the eth0 with the public network interface of your server. Open the file and comment the LimitNPROC=10 lineĪdd the following iptables rule so that traffic can leave the VPN. Save the file and enable and start the OpenVPN service with: sudo systemctl enable systemctl start If you are running an openvz based VPS Sudo openssl x509 -req -in /etc/openvpn/server-csr.pem -out /etc/openvpn/server-cert.pem -CA /etc/openvpn/ca.pem -CAkey /etc/openvpn/ca-key.pem -days 365Ĭreate server configuration file: sudo nano /etc/openvpn/nf server 10.8.0.0 255.255.255.0 Sudo openssl req -new -key /etc/openvpn/server-key.pem -out /etc/openvpn/server-csr.pem -subj /CN=OpenVPN/ Sudo chmod 600 /etc/openvpn/server-key.pem The following commands will generate a server certificate and key: sudo openssl genrsa -out /etc/openvpn/server-key.pem 2048 Sudo openssl x509 -req -in /etc/openvpn/ca-csr.pem -out /etc/openvpn/ca.pem -signkey /etc/openvpn/ca-key.pem -days 365 Sudo openssl req -new -key /etc/openvpn/ca-key.pem -out /etc/openvpn/ca-csr.pem -subj /CN=OpenVPN-CA/
Generate ca.pem (certificate authority) file: sudo openssl genrsa -out /etc/openvpn/ca-key.pem 2048 openssl dhparam -out /etc/openvpn/dh.pem 2048 This command can take a while to run depending on the server. Generate local certificate authorityįirst, generate the Diffie-Hellman parameters. Update the system sudo apt-get update & sudo apt-get -y upgradeĪnd install OpenVPN.
0 kommentar(er)
