| Nodes Available | Node Map | Ip Allocation | Node Concentrator | Example Node VPN Configuration |
This configuration file can be used almost exactly for your home setup.
File
/etc/openvpn/juneauwirelesstunnel.conf
dev tun # Use a dynamic tun device. # For Linux 2.2 or non-Linux OSes, # you may want to use an explicit # unit number such as "tun1". # OpenVPN also supports virtual # ethernet "tap" devices. # This is the VPN concentrator vpn.juneauwireless.net remote 65.75.154.60 # 10.1.0.2 is our local VPN endpoint (home). # 10.1.0.1 is our remote VPN endpoint (office). ifconfig 10.121.4.x 10.121.4.x # Your IP ^^^^^^^ ^^^^^^^^^ other IP # Our up script will establish routes # once the VPN is alive. up /etc/openvpn/juneauwireless.up # Our pre-shared static key secret juneauwireless.key # Juneauwireless will give you this key file. # it is created by typing # openvpn --genkey --secret static.key # OpenVPN uses UDP port 5000 by default. # Each OpenVPN tunnel must use # a different port number. # lport or rport can be used # to denote different ports # for local and remote. ; port 5000 #you will not be port 5000, the port you will be using will be given to you # Downgrade UID and GID to # "nobody" after initialization # for extra security. user nobody group nobody # If you built OpenVPN with # LZO compression, uncomment # out the following line. comp-lzo #hopefully you did... save bandwidth! #if this is Debian package it was shipped with LZO.. this is a MUST :) # Send a UDP ping to remote once # every 15 seconds to keep # stateful firewall connection # alive. Uncomment this # out if you are using a stateful # firewall. ping 35 # Uncomment this section for a more reliable detection when a system # loses its connection. For example, dial-ups or laptops that # travel to other locations. ; ping 15 ; ping-restart 45 ; ping-timer-rem ; persist-tun ; persist-key # Verbosity level. # 0 -- quiet except for fatal errors. # 1 -- mostly quiet, but display non-fatal network errors. # 3 -- medium output, good for normal operation. # 9 -- verbose, good for troubleshooting verb 3
Remember, chmod 755 this file!
file /etc/openvpn/juneauwireless.up
#!/bin/bash #you may want to delete some of these lines if you have a better link else ware and #do not want the traffic traveling over the vpn route add -net 10.121.0.0 netmask 255.255.0.0 gw $5 route add -net 10.122.0.0 netmask 255.255.0.0 gw $5 route add -net 10.123.0.0 netmask 255.255.0.0 gw $5 route add -net 10.124.0.0 netmask 255.255.0.0 gw $5 route add -net 10.125.0.0 netmask 255.255.0.0 gw $5 route add -net 10.126.0.0 netmask 255.255.0.0 gw $5 route add -net 10.127.0.0 netmask 255.255.0.0 gw $5 #sorry these are not dynamic.. maybe in the future we can somehow make them dynamic
now start the vpn with:
openvpn --config /etc/openvpn/juneauwirelesstunnel.conf
or if you are running debian, just run /etc/init.d/openvpn start
everything should come up perfectly as everything is auto-detected!