Linux/OpenVPN

Also see: OpenWrt/OpenVPN

OpenVPN - Routing Howto

OpenVPN Internet Server

• easy-rsa
• server.conf
• /etc/sysctl.conf

net.ipv4.ip_forward=1

• rc.local

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
/etc/init.d/dnsmasq start

• apt-get install dnsmasq
• /etc/dnsmasq.conf

interfaces=tun0
bind-interfaces
no-hosts
address=/server.domain.de/10.8.0.1

OpenVPN Mobile Client

• Internal traffic through VPN / Internet traffic through ISP

client
dev tun
proto udp
remote server.domain.de 1194 
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert device1.crt
key device1.key
ns-cert-type server
tls-auth ta.key 1
comp-lzo
verb 3

• Internal traffic through VPN + Internet traffic through VPN

client
dev tun
proto udp
remote server.domain.de 1194
resolv-retry infinite
nobind 
persist-key
persist-tun
ca ca.crt
cert device1.crt
key device1.key
ns-cert-type server
tls-auth ta.key 1
comp-lzo
verb 3
redirect-gateway def1 bypass-dhcp

Links

• http://www.smallnetbuilder.com/security/security-howto/30353-how-to-set-up-a-site-to-site-vpn-with-openvpn?start=4
• http://serverfault.com/questions/368412/getting-openvpn-to-fully-connect-two-networks

• http://wiki.ubuntuusers.de/OpenVPN
• http://sarwiki.informatik.hu-berlin.de/OpenVPN_(deutsch)#Wahl_des_virtuellen_Device
• http://openvpn.net/index.php/open-source/documentation/howto.html#pki
• http://www.dd-wrt.com/wiki/index.php/OpenVPN_-_Site-to-Site_routed_VPN_between_two_routers#Server_Configuration
• https://blog.ipredator.se/howto/openwrt/configuring-openvpn-on-openwrt.html
• http://wiki.openwrt.org/doc/howto/vpn.server.openvpn.tun
• http://thomas-leister.de/allgemein/openvpn-server-als-internet-gateway-unter-ubuntu-12-04/
• https://wiki.archlinux.org/index.php/Openvpn
• http://www.area536.com/projects/securely-link-two-offices-using-openvpn/