3,054
edits
Changes
From SME Server
Jump to navigationJump to search
mLine 1:
Line 1: − + − + + + Line 12:
Line 14: + + + + − First Collect and install the rpm`s as indicated below. The RPM are taken from DAG's repository which is pretty extensive.+ − + + + + + + + + + + + + Line 27:
Line 44: + + + + + + Line 104:
Line 127: − + Line 177:
Line 200: + + + + + + + + +
no edit summary
[[Category:Howto]]
{{Warning box|: this contribution is obsolete. Prefer to refer towards [[OpenVPN_Bridge]], [[OpenVPN_Routed]], [[OpenVPN_SiteToSite]], ... contribs of Daniel B..}}
==Maintainer==
==Maintainer==
This howto has been developed by [[User:Knuddi|Jesper Knudsen]]
This howto has been developed by [[User:Knuddi|Jesper Knudsen]] from [http://smeoptimizer.swerts-knudsen.dk SME Optimizer]
The files needed here from the site hosting it - http://sme.swerts-knudsen.dk/ - are not available anymore.
==Description==
==Description==
{{Note box|OpenVPN-Bridge contribution is an alternative to this (with even a server-manager panel) but is more targeted site<->end clients configurations. See http://wiki.contribs.org/OpenVPN_Bridge}}
{{Note box|OpenVPN-Bridge contribution is an alternative to this (with even a server-manager panel) but is more targeted site<->end clients configurations. See http://wiki.contribs.org/OpenVPN_Bridge}}
{{Note box|You can also take a look at http://wiki.contribs.org/OpenVPN_SiteToSite . It's an alternative, with a panel in the server-manager and is specially made to connect several SME Servers together.}}
{{Note box|You can also take a look at http://wiki.contribs.org/PHPki as another alternative, with a panel in the server-manager.}}
==OpenVPN Server Configuration==
==OpenVPN Server Configuration==
For SME 7x, first Collect and install the rpm`s as indicated below. The RPM are taken from DAG's repository which is pretty extensive.
cd /root
cd /root
mkdir openvpn
mkdir openvpn
cd openvpn
cd openvpn
wget http://dag.wieers.com/rpm/packages/lzo2/lzo2-2.02-3.el4.rf.i386.rpm
wget http://rpmforge.sw.be/redhat/el4/en/i386/rpmforge/RPMS/lzo-2.04-1.el4.rf.i386.rpm
wget http://dag.wieers.com/rpm/packages/openvpn/openvpn-2.0.9-1.el4.rf.i386.rpm
wget http://dag.wieers.com/rpm/packages/openvpn/openvpn-2.0.9-1.el4.rf.i386.rpm
rpm -Uvh *.rpm
For SME 8x, the easiest way is to get the RPM from the DAG repository.
cd /root
mkdir openvpn
cd openvpn
wget http://apt.sw.be/redhat/el5/en/i386/dag/RPMS/lzo-2.06-1.el5.rf.i386.rpm
wget http://apt.sw.be/redhat/el5/en/i386/dag/RPMS/openvpn-2.2.2-1.el5.rf.i386.rpm
# (--[[User:Ddougan|Ddougan]] 20:53, 6 September 2012 (MDT))
wget http://apt.sw.be/redhat/el5/en/i386/dag/RPMS/pkcs11-helper-1.08-1.el5.rf.i386.rpm
rpm -Uvh *.rpm
rpm -Uvh *.rpm
cd /usr/share/doc/openvpn-2.0.9/easy-rsa
cd /usr/share/doc/openvpn-2.0.9/easy-rsa
pico vars
pico vars
For SME8.x
cd /usr/share/doc/openvpn-2.2.2/easy-rsa/2.0/
nano vars
chmod 744 *
chmod -R 700 keys
Now we can create the master certificate. Choose the defaults as entered into the vars file. You will need to enter values for the "Organizational Unit Name" which you can set to "VPN" and"Common Name" could be set to "Server"
Now we can create the master certificate. Choose the defaults as entered into the vars file. You will need to enter values for the "Organizational Unit Name" which you can set to "VPN" and"Common Name" could be set to "Server"
If your server is in "server mode" you also need to fiddle with IPTables. Install the port opener and ensure to update the navigation panel. You will now have a "Port Opening" in the "Configuration" sections of the server-manager. Use it to open UDP/1194.
If your server is in "server mode" you also need to fiddle with IPTables. Install the port opener and ensure to update the navigation panel. You will now have a "Port Opening" in the "Configuration" sections of the server-manager. Use it to open UDP/1194.
rpm -Uvh http://sme.swerts-knudsen.com/downloads/dmc-mitel-portopening-0.0.1-4.noarch.rpm
rpm -Uvh http://sme.swerts-knudsen.dk/downloads/dmc-mitel-portopening-0.0.1-4.noarch.rpm
/etc/e-smith/events/actions/navigation-conf
/etc/e-smith/events/actions/navigation-conf
This contrib has not yet been created in the bugtracker so just send an email to mailto:contribs@swerts-knudsen.dk
This contrib has not yet been created in the bugtracker so just send an email to mailto:contribs@swerts-knudsen.dk
==Other articles in this category==
{{#ask: [[Category:VPN]]}}
----
[[Category:Howto]]
[[Category:Administration:VPN]]
[[Category:VPN]]
