Changes

From SME Server
Jump to navigationJump to search
1,369 bytes added ,  16:55, 4 August 2013
no edit summary
Line 288: Line 288:  
* go to '''Network Connections > VPN '''. Click '''Import''' then in the explorer navigate to the openvpn folder in the home directory and select the .ovpn file created previously. This should automatically load all settings into network manager.
 
* go to '''Network Connections > VPN '''. Click '''Import''' then in the explorer navigate to the openvpn folder in the home directory and select the .ovpn file created previously. This should automatically load all settings into network manager.
 
* Add username and password of client. Private key password which could differ from the user pass (and will not change if user/admin will change user password in ''server-manager'' or ''server-user''
 
* Add username and password of client. Private key password which could differ from the user pass (and will not change if user/admin will change user password in ''server-manager'' or ''server-user''
 +
** Note: I recommend to check also in '''IPv4 > route''' ''Use this connection only for resources on its network"
 +
* save and test
 +
 +
===== Fedora 19 64bit =====
 +
(Not tested in 32bit but will most likely work)
 +
 +
the import feature apparently does not work
 +
 +
also the ""bundle" does not work
 +
 +
you'll need to
 +
 +
* Assuming that phpki is being used. In browser go to '''server-manger panel > certificate management''' and download the relevant client's cacert.pem user.pem user-key.pem and place it into one convenient folder.
 +
go to '''yournuserame > System Settings > Network''' click on little '''+''' sign on bottom left
 +
* in the new pop-up window select '''VPN''' then push Create
 +
* select '''OpenVPN''' and push Create
 +
* select password with certificate (or any other method you set on server)
 +
* put credentials for user and private key password
 +
* set the gateway as your ''server.domain.tld ''
 +
* at advanced check ''Use LZO data compression''
 +
* at advanced check '' Use a TAP device''
 +
* click on the small folder near the first certificate and go to the user.pem certificate downloaded into convenient folder
 +
* click on the small folder near the second certificate and go to the cacert.pem certificate downloaded into convenient folder
 +
* click on the small folder near the third certificate and go to the user-key.pem certificate downloaded into convenient folder 
 
** Note: I recommend to check also in '''IPv4 > route''' ''Use this connection only for resources on its network"
 
** Note: I recommend to check also in '''IPv4 > route''' ''Use this connection only for resources on its network"
 
* save and test
 
* save and test
63

edits

Navigation menu