Difference between revisions of "VPNLinux"

From Amahi Wiki
Jump to: navigation, search
Line 37: Line 37:
  
 
Many messages should scroll by on your terminal screen and you should be requested for your username and password.  Enter your HDA username here.
 
Many messages should scroll by on your terminal screen and you should be requested for your username and password.  Enter your HDA username here.
 +
 +
If you'd like to connect to the VPN without having to enter your username and password, here's what you need to do:
 +
Create a file named ''credentials'' in the same directory as the above scripts. In it, write your username on the first line, and your password on the second line. Make it readable only by root:
 +
 +
<pre><nowiki>
 +
    sudo chown root:root credentials; sudo chmod 600 credentials
 +
</nowiki></pre>
 +
 +
Then, as root, run the openvpn client software like this, instead of using the above commands:
 +
 +
<pre><nowiki>
 +
    cd /home/username
 +
    openvpn --config myvpn.conf --auth-user-pass credentials
 +
</nowiki></pre>
 +
 +
Finally, if you'd like your VPN clients to get IP address in the same subnet as your HDA, and not in the 10.8.0.0/24 subnet (default), read this page: [[VPNBridge]].
 +
 
[[Category: VPN]]
 
[[Category: VPN]]

Revision as of 17:00, 31 January 2010

VPN Client - Linux

The VPN client for Linux comes with the OpenVPN. It's invoked with a script.

Save this script to a file called myvpn.conf. It should be saved in your users home folder (eg /home/joe). Replacing XYZ for the nickname of the HDA you are trying to connect to:

      remote XYZ.yourhda.com 1194
      client
      dev tun
      proto udp
      resolv-retry infinite
      nobind
      persist-key
      persist-tun
      ca Ca-cert.crt
      cert AmahiHDAClient.crt
      key AmahiHDAClient.key
      comp-lzo
      verb 3
      auth-user-pass

Be sure to also have a copy of the certificate files using the same names as the ca, cert, and key lines above:

Then, as root, run the openvpn client software:

    cd /home/username 
    openvpn --config myvpn.conf 

Many messages should scroll by on your terminal screen and you should be requested for your username and password. Enter your HDA username here.

If you'd like to connect to the VPN without having to enter your username and password, here's what you need to do: Create a file named credentials in the same directory as the above scripts. In it, write your username on the first line, and your password on the second line. Make it readable only by root:

    sudo chown root:root credentials; sudo chmod 600 credentials

Then, as root, run the openvpn client software like this, instead of using the above commands:

    cd /home/username 
    openvpn --config myvpn.conf --auth-user-pass credentials

Finally, if you'd like your VPN clients to get IP address in the same subnet as your HDA, and not in the 10.8.0.0/24 subnet (default), read this page: VPNBridge.