Changes

From SME Server
Jump to navigationJump to search
2,657 bytes added ,  22:55, 27 April 2013
Line 263: Line 263:  
* Add username and password of client. Private key password I believe is the same password just added but I am not certain. (This is where having tested in windows is a good idea in case it doesn't work you can debug confidently).
 
* Add username and password of client. Private key password I believe is the same password just added but I am not certain. (This is where having tested in windows is a good idea in case it doesn't work you can debug confidently).
 
* As a note, when connected successfully to the vpn, browsing the internet may not work in tandem, therefore go to '''ipv4 settings''' tab when editing the vpn connection. Click on "Routes" and check "Use this connection only for resources on its network". Also try adding 8.8.4.4 to "Additional DNS Servers" (This is google's dns servers).
 
* As a note, when connected successfully to the vpn, browsing the internet may not work in tandem, therefore go to '''ipv4 settings''' tab when editing the vpn connection. Click on "Routes" and check "Use this connection only for resources on its network". Also try adding 8.8.4.4 to "Additional DNS Servers" (This is google's dns servers).
 +
 +
===== Fedora 16 / 17 64bit =====
 +
(Not tested in 32bit but will most likely work)
 +
 +
Note: server set as user/pass + certificate
 +
 +
* '''Install openvpn for network manager'''
 +
yum install NetworkManager-openvpn
 +
 +
 +
 +
====== manual settings ======
 +
* Assuming that phpki is being used. In browser go to '''server-manger panel > certificate management''' and download the relevant client's "PCKS#12 Bundle" and place it into one convenient folder.
 +
* go to '''yournuserame > System Settings > Network''' click on little '''+''' sign on bottom left
 +
* in the new pop-up window select '''VPN''' then push Create
 +
* select '''OpenVPN''' and push Create
 +
* select password with certificate (or any other method you set on server)
 +
* put credentials for user and private key password
 +
* set the gateway as your ''server.domain.tld ''
 +
* at advanced check ''Use LZO data compression''
 +
* at advanced check '' Use a TAP device''
 +
* click on the small folder near the first certificate and go to the bundle certificate downloaded into convenient folder - all certificates should be filled up
 +
** Note: I recommend to check also in '''IPv4 > route''' ''Use this connection only for resources on its network"
 +
* save and test
 +
 +
====== import settings ======
 +
 +
* Create folder called e.g. ".openVPN" (can be anything) in your home directory (could be any directory).
 +
* Assuming that phpki is being used. In browser go to '''server-manger panel > certificate management''' and download the relevant client's "PCKS#12 Bundle" and place it in the ".openVPN" folder.
 +
* Go to '''server-manager panel > openvpn-bridge''' click on "Display a functional client configuration file". Copy and paste this into a text editor and save with '''.ovpn''' extension into the "openVPN" folder (the name of the file will be the visible name in network manager to select VPN connection). Make sure user.p12 is replaced with the name of the .p12 (PCKS#12 Bundle) client file downloaded previously. Also check that the '''remote''' (gateway) is the correct server url.
 +
* In fedora ALT+F2 enter ''nm-connection-editor'' and ENTER  go to '''Network Connections > VPN '''. Click '''Import''' then in the explorer navigate to the openvpn folder in the home directory and select the .ovpn file created previously. This should automatically load all settings into network manager.
 +
* Add username and password of client. Private key password which could differ from the user pass (and will not change if user/admin will change user password in ''server-manager'' or ''server-user''
 +
** Note: I recommend to check also in '''IPv4 > route''' ''Use this connection only for resources on its network"
 +
* save and test
    
==== Linux ====
 
==== Linux ====
63

edits

Navigation menu