How to install and configure openvpn on centos 6.4 step by step
30Hi friends today's I will show to you how to install openvpn on centos 6.4 step by step. Openvpn installation is very complex but in this video tutorial everyone can install and configure openvpn very easy.
Following the step:
This video tutorial divided in two parts. First part is server side installation and 2 part is client side installation
Centos 6.4:
Wan interface card = eth0 = 192.168.10.120
Lan interface card = eth1 = 192.168.0.20
Window client:
Wan interface card = 192.168.10.116
Lan interface card ip address = 192.168.0.244
Login server as root user
-----------------------------------
Step 1 - First command you can put
yum install gcc make rpm-build autoconf.noarch zlib-devel pam-devel openssl-devel --y
Step 2 - Second you put confirm wget install on centos
Yum install wget --y
Step 3 - Now can download LZO RPM and Configure RPMForge Repo
wget http://openvpn.net/release/lzo-1.08-4.rf.src.rpm
Step 4 - Now add correct repo for your server
CentOS 6 32-bit (x86):
wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.2-1.el6.rf.i686.rpm
CentOS 6 64-bit (x86_64):
wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm
step 5 - Then build the rpm package using this command
rpmbuild --rebuild lzo-1.08-4.rf.src.rpm
rpm -Uvh lzo-*.rpm
rpm -Uvh rpmforge-release*
step 6 - Installing OpenVPN
yum install openvpn --y
step 7- Copy the easy-rsa folder to /etc/openvpn/, use this command
cp -R /usr/share/doc/openvpn-2.2.2/easy-rsa/ /etc/openvpn/
Step 7 -- Now edit it
Vi /etc/openvpn/easy-rsa/2.0/vars
export KEY_CONFIG='$EASY_RSA/whichopensslcnf $EASY_RSA'
replace it with
export KEY_CONFIG=/etc/openvpn/easy-rsa/2.0/openssl-1.0.0.cnf
Step 8 -- Create the certificate using these commands:
cd /etc/openvpn/easy-rsa/2.0
chmod 755 *
source ./vars
./vars
./clean-all
Step 9 -- It's time to build necessary CA file:
./build-ca
Step 10 -- Time to build Key Server:
./build-key-server server
Step 11 -- Now issue command below to build Diffie Hellman:
./build-dh
Step 12 -- Create OpenVPN config file:
Vi /etc/openvpn/server.conf
port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 192.168.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3
Step 14 -- Lets start OpenVPN service on your server for the very first time:
service openvpn start
Step 15 -- Lets start OpenVPN service on startup
chkconfig openvpn on
Step 16 -- You'll also need to enable IP forwarding
Vi /etc/sysctl.conf
replace 0 with 1 in this line:
net.ipv4.ip_forward = 1
Step 17 -- Issue this command to load the change:
sysctl --p
Step 18 -- Create new Linux username which can also be used to login to the VPN:
useradd username -s /bin/false
Then also create its password:
passwd username
Step 19 -- Now route some iptables
Xen and KVM users use:
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
special for OpenVZ use these two instead:
iptables -t nat -A POSTROUTING -o venet0 -j SNAT --to-source 123.123.123.123
and
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT --to-source 123.123.123.123
Step 20 -- Now save that iptables and restart rules
Service iptables save
Service iptables restart
if you learn more linux tutorial than visit my official website http://www.broexperts.com/