Difference between revisions of "VPN"

From Amahi Wiki
Jump to: navigation, search
(New page: Our remote access solution is implemented through the very popular [http://openvpn.net/ OpenVPN] software. Each HDA comes preconfigured with a remote access server. Once connected, your m...)
 
 
(54 intermediate revisions by 8 users not shown)
Line 1: Line 1:
Our remote access solution is implemented through the very popular [http://openvpn.net/ OpenVPN] software.
+
There are '''two''' supported options for VPN in Amahi:
  
Each HDA comes preconfigured with a remote access server. Once connected, your machine is virtually part of your home network.
+
* An [http://www.amahi.org/apps/ipsec-vpn IPsec VPN app] which is built in on iOS devices like the iPad, iPhone, iPod. Details on how to set it up at [[IPSec VPN]]
 +
* An [http://www.amahi.org/apps/openvpn OpenVPN app] which is a popular open source VPN stack. This is not included by default in iOS or Mac OS X. Details on how to set it up at [[OpenVPN]]
  
= Requirements =
 
  
There are two requirements:
+
Both of them require forwarding ports to work from outside your network to your HDA.
  
* On the client side, you need to be running an OpenVPN client. We provide one for Windows, preconfigured and we recommend one for the Mac, which requires some manual configuration (for the time being).
+
We offer a free OpenVPN tester in your console in Amahi.org to test your setup, as a convenience, because the OpenVPN cannot be tested from within your network.
* Your network needs to provide '''UDP port 1194''' access.
 
  
On to the clients.
+
To get started, pick one and install the app and the relevant client software in your client computer or mobile device, then configure it for remote access.
  
= Windows =
+
[[Category: Services]]
 
+
[[Category: VPN]]
** Download the [http://yourhda.com/newuser/hdaconnect.exe HDAConnect installer].
 
** You will want to exit and uninstall the previous version, if any.
 
** On windows XP simply run it. On Vista, run it as Administrator (this is important). The defaults should work for everyone.
 
*** Click on "Continue Anyway" warning for the driver, if any.
 
** After installation is done. It will display a small icon in the desktop tray. It may also display a network icon with a red mark indicating "A network cable is di
 
sconnected." This is the VPN "network adapter" indicating the VPN is down.
 
  attachment:vpn-taskbar.png
 
** Any time you want to connect, simply double click in the icon.
 
** Input your HDA's nickname, your username and password.
 
 
 
= Mac =
 
 
 
For the Mac, we recommend using the [http://www.tunnelblick.net/ Tunnelblick] client.
 
 
 
* Download and install [http://www.tunnelblick.net/Tunnelblick_3.0_B4.zip Tunnelblick 3.0(B4)] for Mac OS X 10.4.
 
* There are some .ctr/.key files needed:
 
  attachment:HomeHDAClient.crt
 
  <br>
 
  attachment:HomeHDAClient.key
 
  <br>
 
  attachment:ca.crt
 
* Download the .ctr/.key files and save them in the /Users/'''username'''/Library/openvpn folder, where '''username''' is the home directory of the current user.
 
* Go to the configuration for Tunnelblick and edit the config file.
 
* Click on the Tunnelblick icon in the upper right corner of the display, then click '''''Details...'''''
 
[[Image:tunnelblick-pulldown.png]
 
* "OpenVPN Log Output" window should appear, click on '''''Edit Configuration'''''. Make sure the ''Set Nameserver (Experimental)'' option is ''checked.''
 
[[Image:tunnelblick-editconfig.png]]
 
* Delete the default sample configuration
 
attachment:openvpn_conf1.png attachment:openvpn_conf2.png
 
* Copy and paste the configuration below into the OpenVPN.conf file, replacing XYZ for your HDA's nickname:
 
  <pre><nowiki>
 
remote XYZ.yourhda.com 1194
 
client
 
dev tun
 
proto udp
 
resolv-retry infinite
 
nobind
 
persist-key
 
persist-tun
 
ca ca.crt
 
cert HomeHDAClient.crt
 
key HomeHDAClient.key
 
comp-lzo
 
verb 3
 
auth-user-pass
 
</nowiki></pre>
 
 
 
[[Image:openvpn_conf4.png]]
 
 
 
* Any time you want to connect '''from outside of your home network''', simply click on '''Connect'''
 
* Input your username and password
 
* It is possible to use keyrings. Will link here the details when available.
 
 
 
Note:
 
* The procedure above has been tested with an Intel-based Mac OSX.
 
* If the latest does not work, try the Beta 3 of Tunneblick: [http://www.tunnelblick.net/Tunnelblick_3.0_rc3.zip Tunnelblick_3.0_rc3.zip]
 

Latest revision as of 10:34, 13 June 2017

There are two supported options for VPN in Amahi:

  • An IPsec VPN app which is built in on iOS devices like the iPad, iPhone, iPod. Details on how to set it up at IPSec VPN
  • An OpenVPN app which is a popular open source VPN stack. This is not included by default in iOS or Mac OS X. Details on how to set it up at OpenVPN


Both of them require forwarding ports to work from outside your network to your HDA.

We offer a free OpenVPN tester in your console in Amahi.org to test your setup, as a convenience, because the OpenVPN cannot be tested from within your network.

To get started, pick one and install the app and the relevant client software in your client computer or mobile device, then configure it for remote access.