Howto/Setup Bridged OpenVPN server on Ubuntu 10.04 - Revision history

Andrew: /* The Steps */

2017-02-16T15:49:02Z

The Steps

← Older revision		Revision as of 11:49, 16 February 2017
Line 10:		Line 10:
	== The Steps ==		== The Steps ==
	Using the following as a guide,		Using the following as a guide,
			https://help.ubuntu.com/lts/serverguide/openvpn.html
	https://help.ubuntu.com/10.04/serverguide/C/openvpn.html		https://help.ubuntu.com/10.04/serverguide/C/openvpn.html
	https://help.ubuntu.com/10.04/serverguide/C/network-configuration.html#bridging		https://help.ubuntu.com/10.04/serverguide/C/network-configuration.html#bridging

2017-02-16T15:48:22Z

The Steps

← Older revision		Revision as of 11:48, 16 February 2017
Line 13:		Line 13:
	https://help.ubuntu.com/10.04/serverguide/C/network-configuration.html#bridging		https://help.ubuntu.com/10.04/serverguide/C/network-configuration.html#bridging

	; Step 1) Install ~~openvpn~~		; Step 1) Install prerequisites
	sudo apt-get install openvpn		sudo apt-get install openvpn bridge-utils easy-rsa

	; Step 2) Install a virtual bridged adapter		; Step 2) Install a virtual bridged adapter
	~~Install the necessary package~~
	~~sudo apt-get install bridge-utils~~
	Modify /etc/network/interfaces		Modify /etc/network/interfaces
	<pre>		<pre>

2012-01-14T10:19:45Z

The Steps

← Older revision		Revision as of 06:19, 14 January 2012
Line 38:		Line 38:
	bridge_stp off		bridge_stp off

	# bridge, if router cannot lease static ips		## bridge, if router cannot lease static ips
	#auto br0		#auto br0
	#iface br0 inet static		#iface br0 inet static

2012-01-14T10:19:12Z

The Steps

2012-01-14T10:18:53Z

My setup

← Older revision		Revision as of 06:18, 14 January 2012
Line 4:		Line 4:
	* The following was tested on '''OpenVPN 2.1''' but may work for other version		* The following was tested on '''OpenVPN 2.1''' but may work for other version
	* I have a standard router that acts as my gateway, located at '''192.168.8.1'''		* I have a standard router that acts as my gateway, located at '''192.168.8.1'''
	* My OpenVPN server has '''one NIC on ~~eth1~~''' and its ip address is '''192.168.8.141''' and it is using the default '''UDP 1194''' port		* My OpenVPN server has '''one NIC on eth0''' and its ip address is '''192.168.8.141''' and it is using the default '''UDP 1194''' port
	* My router is setup to assign ip addresses upon requests via '''dhcp''' in the range 192.168.8.100 to 192.168.8.199, and my servers have '''static leases'''.		* My router is setup to assign ip addresses upon requests via '''dhcp''' in the range 192.168.8.100 to 192.168.8.199, and my servers have '''static leases'''.
	* The OpenVPN server will be responsible for handing out ips to clients in the range 192.168.8.5 to 192.168.8.99		* The OpenVPN server will be responsible for handing out ips to clients in the range 192.168.8.5 to 192.168.8.99

2012-01-14T10:18:18Z

The Steps

← Older revision		Revision as of 06:18, 14 January 2012
Line 29:		Line 29:
	iface eth0 inet manual		iface eth0 inet manual

	# bridge		# bridge, if router can lease static ips (static ip: 192.168.8.141)
	auto br0		auto br0
	iface br0 inet dhcp		iface br0 inet dhcp
Line 37:		Line 37:
	bridge_maxage 12		bridge_maxage 12
	bridge_stp off		bridge_stp off

			# bridge, if router cannot lease static ips
			#auto br0
			#iface br0 inet static
			# address 192.168.8.141
			# network 192.168.8.0
			# netmask 255.255.255.0
			# broadcast 192.168.8.255
			# gateway 192.168.8.1
			# bridge_ports eth1
			# bridge_fd 9
			# bridge_hello 2
			# bridge_maxage 12
			# bridge_stp off
	</pre>		</pre>
	Restart networking		Restart networking

2012-01-14T10:15:01Z

The Steps

← Older revision		Revision as of 06:15, 14 January 2012
Line 21:		Line 21:
	Modify /etc/network/interfaces		Modify /etc/network/interfaces
	<pre>		<pre>
			# The loopback network interface
	auto lo		auto lo
	iface lo inet loopback		iface lo inet loopback

			# The primary network interface
			auto eth0
			iface eth0 inet manual

			# bridge
	auto br0		auto br0
	iface br0 inet ~~static~~		iface br0 inet dhcp
	~~address 192.168.8.141~~		bridge_ports eth0
	~~network 192.168.8.0~~
	~~netmask 255.255.255.0~~
	~~broadcast 192.168.8.255~~
	~~gateway 192.168.8.1~~
	bridge_ports ~~eth1~~
	bridge_fd 9		bridge_fd 9
	bridge_hello 2		bridge_hello 2

2011-12-26T14:09:15Z

The Steps

← Older revision		Revision as of 10:09, 26 December 2011
Line 86:		Line 86:
	Forward requests for port 1194 on the router to the ip address of the server via the router's web interface.		Forward requests for port 1194 on the router to the ip address of the server via the router's web interface.

	; Step 6) ~~Install~~ the client		; Step 6) On another machine outside the network, install the client
	For Ubuntu it is already installed after doing		For Ubuntu it is already installed after doing
	sudo apt-get install openvpn		sudo apt-get install openvpn

2011-12-26T14:08:05Z

The Steps

← Older revision		Revision as of 10:08, 26 December 2011
Line 74:		Line 74:
	Create the up.sh and down.sh scripts as per the Ubuntu guide		Create the up.sh and down.sh scripts as per the Ubuntu guide
	https://help.ubuntu.com/10.04/serverguide/C/openvpn.html		https://help.ubuntu.com/10.04/serverguide/C/openvpn.html
	~~and~~ place them in /etc/openvpn.		place them in /etc/openvpn and make them executable
			sudo chmod 755 /etc/openvpn/down.sh
			sudo chmod 755 /etc/openvpn/up.sh

	Here was the part that took me MANY HOURS to figure out as it was only by browsing the OpenVPN FAQ that I figured it out. For clients to see all machines on the server's side, edit /etc/sysctl.conf		Here was the part that took me MANY HOURS to figure out as it was only by browsing the OpenVPN FAQ that I figured it out. For clients to see all machines on the server's side, edit /etc/sysctl.conf

2011-12-26T14:06:25Z

The Steps

← Older revision		Revision as of 10:06, 26 December 2011
Line 72:		Line 72:
	</pre>		</pre>

	Create the up.sh and down.sh scripts as per the Ubuntu guide and place them in /etc/openvpn.		Create the up.sh and down.sh scripts as per the Ubuntu guide
			https://help.ubuntu.com/10.04/serverguide/C/openvpn.html
			and place them in /etc/openvpn.

	Here was the part that took me MANY HOURS to figure out as it was only by browsing the OpenVPN FAQ that I figured it out. For clients to see all machines on the server's side, edit /etc/sysctl.conf		Here was the part that took me MANY HOURS to figure out as it was only by browsing the OpenVPN FAQ that I figured it out. For clients to see all machines on the server's side, edit /etc/sysctl.conf