NamHB's Blog

OpenVPN. Tun Lab

Nam Ha Bach's photo
Nam Ha Bach
·

2 min read

Lab1: Tun Client to server:
Step1: No Security:
Window Client:

# OpenVPN server
remote 192.168.19.100
# Tunnel mode
dev tun
# IP addresses
ifconfig 220.110.1.1 220.110.1.2
# Cipher mode
cipher none
# Authentication mode
auth none
# Log verbosity
verb 2

CentOS server:

# Tunnel mode
dev tun
# IP addresses
ifconfig 220.110.1.2 220.110.1.1
# Cipher mode
cipher none
# Authentication mode
auth none
# Log verbosity
verb 2

Lab2: Tun Preshare Key
In previous entry
Lab3: Tun SSL/TLS
Build cert + key on server
You can find script in /usr/share/doc/openvpn/easy-rsa....
If don`t have. you can copy from openvpn source code
Edit vars
Then

chmod 700 *
. ./vars
./clean-all
./build-ca
./build-key-server server
./build-dh
./build-key-pass client

Window Client:

# TLS mode - client
tls-client
# openVPN server
remote 192.168.19.100
# Tunnel mode
dev tun
# IP addresses
ifconfig 220.110.1.1 220.110.1.2
# CA certificate
ca "ca.crt"
# client certificate
cert "client.crt"
# client private key
key "client.key"
# Cipher mode
cipher none
# Authentication mode
auth none
# Log verbosity
verb 2

CentOS server:

tls-server
# Tunnel mode
dev tun
# IP addresses
ifconfig 220.110.1.2 220.110.1.1
# Cipher mode
cipher none
# Authentication mode
auth none
# CA certificate
ca ca.crt
# server certificate
cert server.crt
# server private key
key server.key
# Diffie-Hellman Settings
dh dh1024.pem
# Log verbosity
verb 2

-----------------------------------------------------------
Video lab:
Lab 1: No Security: http://www.mediafire.com/?5y40xxtyvm1ctx5
Lab 2: SSL/TLS: http://www.mediafire.com/?6ope6mw6ecww9pm
------------------------------------------------------------
Thanks for reading
--------------------------------------------------------------------------
All my Lab:
Linux Lab -- window and Cisco Lab
to be continued - I will update more.

Nam Habach