wiki:openvpn_installation
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
wiki:openvpn_installation [2024/04/10 11:33] – [References] add openssl x509v3_config config link antisa | wiki:openvpn_installation [2024/04/10 12:48] – add section about systemd service antisa | ||
---|---|---|---|
Line 91: | Line 91: | ||
./easyrsa sign-req server server | ./easyrsa sign-req server server | ||
| | ||
- | 3. Create client signing request and certificate. Change EntityName, '' | + | 4. Create client signing request and certificate. Change EntityName, '' |
./easyrsa gen-req EntityName nopass | ./easyrsa gen-req EntityName nopass | ||
./easyrsa sign-req client EntityName | ./easyrsa sign-req client EntityName | ||
Line 98: | Line 98: | ||
./easyrsa gen-dh | ./easyrsa gen-dh | ||
| | ||
- | For each new client just repeat step 3. | + | For each new client just repeat step 4. |
==== Creating configuration files for server and clients ==== | ==== Creating configuration files for server and clients ==== | ||
Line 184: | Line 184: | ||
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE | iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE | ||
- | | + | |
+ | ===== Running openvpn server as a service ===== | ||
+ | |||
+ | Debian 12 ships with systemd units for this. The way to run it is to first make sure the server configuration file is located in /// | ||
+ | |||
+ | systemctl enable --now openvpn-server@myvpnserver | ||
+ | |||
+ | Check logs with | ||
+ | journalctl -xefu openvpn-server@server.service | ||
====== Tested on ====== | ====== Tested on ====== | ||
* Debian 12 Bookworw | * Debian 12 Bookworw |
wiki/openvpn_installation.txt · Last modified: 2024/05/13 16:18 by antisa