Comments on: Quick simple tutorial/howto on OpenVPN with Debian

By: VPN | :: user blog ::

VPN | :: user blog :: — Fri, 27 Aug 2010 15:22:35 +0000

[...] Guide ???? [...]

By: siddharth

siddharth — Tue, 04 May 2010 07:09:48 +0000

my open vpn is confiured on 3 linux debian routers using tunnels with static keys. i have not defined any server or client just direct router to router tunnels to all of them is this practise safe and adviseable ?
or should i make a openvpn server and define the other routers as my clients ?
also can you advise me on how to enhace ma data security over the vpn .

By: knotme

knotme — Sun, 31 Jan 2010 21:20:11 +0000

push “redirect-gateway” just stops all traffic. Here is what I have now for server config.
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 172.16.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
max-clients 1
client-to-client
user nobody
group users
persist-key
persist-tun
status openvpn-status.log
verb 3

By: knotme

knotme — Sun, 31 Jan 2010 20:45:21 +0000

Also I did change to UDP and I can’t use this command.
openvpn –genkey –secret ta.key

By: knotme

knotme — Sun, 31 Jan 2010 20:03:37 +0000

I followed this guide. It was very useful and I want to thank you for doing this.

I do have 2 questions.

1. Since this is not a bridged connection. Is there a way I can add some info to the server config to route all traffic through the connection. I really wanted to use this to hide my identity or IP and have secure traffic.

2. I would like to implement the tls-auth handshake with a secret key. How do I make this key? Should I be using UDP instead?

I installed this on Debian Etch and XP pro using the OpenVPN executable. Thanks

By: Robert

Robert — Fri, 08 May 2009 10:53:31 +0000

It seems to me Reece used “../vars” instead of “. ./vars” (note the space following the first dot)

Excellent guide; works great for me. Thanks!

By: admin

admin — Sat, 08 Nov 2008 16:01:43 +0000

what system are you running?

the official openvpn howto says…

Next, initialize the PKI. On Linux/BSD/Unix:

. ./vars

By: Reece

Reece — Wed, 05 Nov 2008 22:05:11 +0000

I had to manually create the
/etc/openvpn/easy-rsa/2.0/keys
directory before each script worked.

./vars
./clean-all
./build-ca

Also, ./vars worked for me instead of ../vars

By: Sebastian

Sebastian — Wed, 29 Oct 2008 17:19:12 +0000

Thanks. Good howto!

By: admin

admin — Fri, 17 Oct 2008 09:07:17 +0000

thanks – always nice with some feedback.