Instalasi OpenVPN - Revision history

Onnowpurbo: /* Pranala Menarik */

2010-07-07T09:03:43Z

Pranala Menarik

← Older revision		Revision as of 09:03, 7 July 2010
Line 273:		Line 273:
	==Pranala Menarik==		==Pranala Menarik==

	* [http://eshabe.wordpress.com/2008/10/17/hardy-ubuntu-804-speedy-openvpn]		* http://eshabe.wordpress.com/2008/10/17/hardy-ubuntu-804-speedy-openvpn
	* [[Instalasi OpenVPN Client di Linux]]		* [[Instalasi OpenVPN Client di Linux]]
	* [[Instalasi OpenVPN di Windows]]		* [[Instalasi OpenVPN di Windows]]
	* [[Linux Howto]]		* [[Linux Howto]]

			[[Category: Linux]]

Onnowpurbo: /* Cara menjalankan VPN Server */

2010-01-11T00:48:23Z

Cara menjalankan VPN Server

← Older revision		Revision as of 00:48, 11 January 2010
Line 270:		Line 270:

	# openvpn --config /etc/openvpn/server.conf		# openvpn --config /etc/openvpn/server.conf








	==Pranala Menarik==		==Pranala Menarik==

Onnowpurbo: /* Edit Server.conf */

2010-01-11T00:47:58Z

Edit Server.conf

← Older revision		Revision as of 00:47, 11 January 2010
Line 161:		Line 161:
	# Which local IP address should OpenVPN listen on? (optional)		# Which local IP address should OpenVPN listen on? (optional)
	local 192.168.0.3		local 192.168.0.3

	# Which TCP/UDP port should OpenVPN listen on?		# Which TCP/UDP port should OpenVPN listen on?
	port 1194		port 1194

	# TCP or UDP server?		# TCP or UDP server?
	proto udp		proto udp

	# "dev tun" will create a routed IP tunnel, which is what we want		# "dev tun" will create a routed IP tunnel, which is what we want
	dev tun		dev tun

	# SSL/TLS root certificate (ca), certificate		# SSL/TLS root certificate (ca), certificate
	# (cert), and private key (key). Each client		# (cert), and private key (key). Each client
Line 181:		Line 181:
	# Diffie hellman parameters.		# Diffie hellman parameters.
	dh keys/dh1024.pem		dh keys/dh1024.pem

	# Configure server mode and supply a VPN subnet		# Configure server mode and supply a VPN subnet
	server 192.168.111.0 255.255.255.0		server 192.168.111.0 255.255.255.0

	# Maintain a record of client <-> virtual IP address		# Maintain a record of client <-> virtual IP address
	# associations in this file.		# associations in this file.
	ifconfig-pool-persist ipp.txt		ifconfig-pool-persist ipp.txt

	# Push routes to the client to allow it		# Push routes to the client to allow it
	# to reach other private subnets behind		# to reach other private subnets behind
Line 211:		Line 211:
	# clients to be able to âseeâ		# clients to be able to âseeâ
	client-to-client		client-to-client

	# Ping every 10 seconds, assume that remote		# Ping every 10 seconds, assume that remote
	# peer is down if no ping received during		# peer is down if no ping received during
	# a 120 second time period.		# a 120 second time period.
	keepalive 10 120		keepalive 10 120

	# For extra security beyond that provided		# For extra security beyond that provided
	# by SSL/TLS, create an âHMAC firewallâ		# by SSL/TLS, create an âHMAC firewallâ
Line 227:		Line 227:
	;cipher AES-128-CBC # AES		;cipher AES-128-CBC # AES
	;cipher DES-EDE3-CBC # Triple-DES		;cipher DES-EDE3-CBC # Triple-DES

	# Enable compression on the VPN link.		# Enable compression on the VPN link.
	; comp-lzo		; comp-lzo

	# The maximum number of concurrently connected		# The maximum number of concurrently connected
	# clients we want to allow.		# clients we want to allow.
	max-clients 250		max-clients 250

	# It's a good idea to reduce the OpenVPN		# It's a good idea to reduce the OpenVPN
	# daemonâs privileges after initialization.		# daemonâs privileges after initialization.
	user nobody		user nobody
	group nogroup		group nogroup

	# The persist options will try to avoid		# The persist options will try to avoid
	# accessing certain resources on restart		# accessing certain resources on restart
Line 246:		Line 246:
	persist-key		persist-key
	persist-tun		persist-tun

	# Output a short status file showing		# Output a short status file showing
	status openvpn-status.log		status openvpn-status.log
	log-append openvpn.log		log-append openvpn.log

	# Set the appropriate level of log		# Set the appropriate level of log
	# file verbosity.		# file verbosity.
Line 259:		Line 259:
	# 9 is extremely verbose		# 9 is extremely verbose
	verb 4		verb 4

	# Silence repeating messages. At most 20		# Silence repeating messages. At most 20
	# sequential messages of the same message		# sequential messages of the same message
	# category will be output to the log.		# category will be output to the log.
	mute 20		mute 20




	==Cara menjalankan VPN Server==		==Cara menjalankan VPN Server==

Onnowpurbo: /* Test sambungan di 2 windows */

2010-01-11T00:46:48Z

Test sambungan di 2 windows

← Older revision		Revision as of 00:46, 11 January 2010
Line 141:		Line 141:
	Test yang sangat berguna melihat sambungan OpenVPN dari dua (2) Windows.		Test yang sangat berguna melihat sambungan OpenVPN dari dua (2) Windows.

	# cd /etc/openvpn		cd /etc/openvpn
	# cp -Rf /usr/share/doc/openvpn/examples/sample-config-files/ /etc/openvpn/		cp -Rf /usr/share/doc/openvpn/examples/sample-config-files/ /etc/openvpn/
	# cp -Rf /usr/share/doc/openvpn/examples/sample-keys/ /etc/openvpn/		cp -Rf /usr/share/doc/openvpn/examples/sample-keys/ /etc/openvpn/
	# openvpn --config sample-config-files/loopback-client		openvpn --config sample-config-files/loopback-client
	# openvpn --config sample-config-files/loopback-server		openvpn --config sample-config-files/loopback-server


	Jika di perlukan kita dapat menginstalasi OpenVPN Administrator.		Jika di perlukan kita dapat menginstalasi OpenVPN Administrator.
Line 152:		Line 151:

	# apt-get install mono openvpn-admin		# apt-get install mono openvpn-admin




	==Edit Server.conf==		==Edit Server.conf==

Onnowpurbo: /* Membuat Certificate Authority (CA) */

2010-01-11T00:44:22Z

Membuat Certificate Authority (CA)

← Older revision		Revision as of 00:44, 11 January 2010
Line 45:		Line 45:
	==Membuat Certificate Authority (CA)==		==Membuat Certificate Authority (CA)==

	# cd /etc/openvpn/		cd /etc/openvpn/
	. ./vars		. ./vars
	./clean-all		./clean-all
Line 60:		Line 60:
	Lihat keys apakah sudah di generate		Lihat keys apakah sudah di generate

	# ls -l /etc/openvpn/		ls -l /etc/openvpn/
	# ls -l /etc/openvpn/keys		ls -l /etc/openvpn/keys

	Akan tampak file berikut		Akan tampak file berikut
Line 69:		Line 69:
	index.txt		index.txt
	serial		serial


	==Membuat Server Key==		==Membuat Server Key==

Onnowpurbo: /* Install openvpn */

2010-01-11T00:42:39Z

Install openvpn

← Older revision		Revision as of 00:42, 11 January 2010
Line 3:		Line 3:
	Install openvpn di Ubuntu		Install openvpn di Ubuntu

	# apt-get install openvpn		apt-get install openvpn
	# cp -Rf /usr/share/doc/openvpn/examples/easy-rsa/* /etc/openvpn/		cp -Rf /usr/share/doc/openvpn/examples/easy-rsa/* /etc/openvpn/

	Pada Ubuntu 8.10 akan di terlihat folder		Pada Ubuntu 8.10 akan di terlihat folder
Line 11:		Line 11:
	/etc/openvpn/2.0		/etc/openvpn/2.0

	Mungkin ada baiknya untuk pengguna Ubuntu 8.10, 9.04 untuk memilih kita akan menggunakan konfigurasi 1.0 atau 2.0 dengan cara mengcopy		Mungkin ada baiknya untuk pengguna Ubuntu 8.10, 9.04, 9.10 untuk memilih kita akan menggunakan konfigurasi 1.0 atau 2.0 dengan cara mengcopy

	# cp -Rf /etc/openvpn/2.0/* /etc/openvpn		cp -Rf /etc/openvpn/2.0/* /etc/openvpn

			Alternatif lain yang lebih susah, compile openvpn dari [[source code]]

	~~Alternatif lain yang lebih susah, compile~~ openvpn ~~dari source code~~		cp openvpn-2.0.9.tar.gz /usr/local/src
			cd /usr/local/src
			tar zxvf openvpn-2.0.9.tar.gz
			cd openvpn-2.0.9
			./configure
			make
			make install

	~~# cp openvpn-2.0.9.tar.gz /usr/local/src~~		Anda tidak perlu mengcompile dari [[source code]], jika sudah menginstalasi openvpn menggunakan apt-get install
	~~# cd /usr/local/src~~
	~~# tar zxvf openvpn-2.0.9.tar.gz~~
	~~# cd openvpn-2.0.9~~
	~~# ./configure~~
	~~# make~~
	~~# make install~~

	Anda tidak perlu mengcompile dari source code, jika sudah menginstalasi openvpn menggunakan apt-get install


Line 43:		Line 42:
	export KEY_ORG="Kerm.IT"		export KEY_ORG="Kerm.IT"
	export KEY_EMAIL="onno@indo.net.id"		export KEY_EMAIL="onno@indo.net.id"


	==Membuat Certificate Authority (CA)==		==Membuat Certificate Authority (CA)==

Onnowpurbo at 02:06, 22 June 2009

2009-06-22T02:06:37Z

← Older revision		Revision as of 02:06, 22 June 2009
Line 11:		Line 11:
	/etc/openvpn/2.0		/etc/openvpn/2.0

	Mungkin ada baiknya untuk pengguna Ubuntu 8.10 untuk memilih kita akan menggunakan konfigurasi 1.0 atau 2.0 dengan cara mengcopy		Mungkin ada baiknya untuk pengguna Ubuntu 8.10, 9.04 untuk memilih kita akan menggunakan konfigurasi 1.0 atau 2.0 dengan cara mengcopy

	# cp -Rf /etc/openvpn/2.0/* /etc/openvpn		# cp -Rf /etc/openvpn/2.0/* /etc/openvpn
Line 25:		Line 25:
	# make		# make
	# make install		# make install

			Anda tidak perlu mengcompile dari source code, jika sudah menginstalasi openvpn menggunakan apt-get install


	Edit file vars di /etc/openvpn		Edit file vars di /etc/openvpn

Onnowpurbo at 01:17, 26 May 2009

2009-05-26T01:17:14Z

← Older revision		Revision as of 01:17, 26 May 2009
Line 1:		Line 1:
			==Install openvpn==

	Install openvpn di Ubuntu		Install openvpn di Ubuntu

Line 40:		Line 42:


	~~Buat~~ Certificate Authority (CA)		==Membuat Certificate Authority (CA)==

	# cd /etc/openvpn/		# cd /etc/openvpn/
Line 68:		Line 70:


	~~Buat~~ Server Key		==Membuat Server Key==

	# ./build-key-server server		# ./build-key-server server
Line 101:		Line 103:
	Data Base Updated		Data Base Updated

	Buat key untuk user admin maupun user lainnya jika di perlukan		==Buat Key User==

			Membuat key untuk user admin maupun user lainnya jika di perlukan

	# ./build-key admin		# ./build-key admin
Line 112:		Line 116:
	./build-key-pass username		./build-key-pass username
	./build-key username		./build-key username


			Membuat DH Parameter dari key

	./build-dh		./build-dh


	# openvpn --genkey --secret keys/ta.key		# openvpn --genkey --secret keys/ta.key


	# openvpn --genkey --secret keys/ca.key		# openvpn --genkey --secret keys/ca.key
	# openvpn --genkey --secret keys/ta.key		# openvpn --genkey --secret keys/ta.key


			==Test key==

	Test key		Test key

	# openvpn --genkey --secret key		# openvpn --genkey --secret key
	# openvpn --test-crypto --secret key		# openvpn --test-crypto --secret key


	Test sambungan di 2 windows		==Test sambungan di 2 windows==

			Test yang sangat berguna melihat sambungan OpenVPN dari dua (2) Windows.

	# cd /etc/openvpn		# cd /etc/openvpn
	# cp -Rf /usr/share/doc/openvpn/examples/sample-config-files/ /etc/openvpn/		# cp -Rf /usr/share/doc/openvpn/examples/sample-config-files/ /etc/openvpn/
Line 134:		Line 148:


			Jika di perlukan kita dapat menginstalasi OpenVPN Administrator.
			Contoh menginstalasi OpenVPN-Admin

	~~Contoh menginstalasi OpenVPN-Admin~~
	# apt-get install mono openvpn-admin		# apt-get install mono openvpn-admin

Line 141:		Line 156:


	Edit Server.conf		==Edit Server.conf==

	# vi /etc/openvpn/server.conf		# vi /etc/openvpn/server.conf
Line 255:		Line 270:


	Cara menjalankan VPN Server dengan server.conf (from www.openvpn.org)

			==Cara menjalankan VPN Server==

			Mengaktifkan VPN Server dengan server.conf (from www.openvpn.org)

	# openvpn --config /etc/openvpn/server.conf		# openvpn --config /etc/openvpn/server.conf

Onnowpurbo at 13:15, 25 May 2009

2009-05-25T13:15:37Z

← Older revision		Revision as of 13:15, 25 May 2009
Line 1:		Line 1:

	Install openvpn di Ubuntu		Install openvpn di Ubuntu

Line 5:		Line 4:
	# cp -Rf /usr/share/doc/openvpn/examples/easy-rsa/* /etc/openvpn/		# cp -Rf /usr/share/doc/openvpn/examples/easy-rsa/* /etc/openvpn/

	Pada Ubuntu 8.04 akan di terlihat folder		Pada Ubuntu 8.10 akan di terlihat folder

	/etc/openvpn/1.0		/etc/openvpn/1.0
	/etc/openvpn/2.0		/etc/openvpn/2.0

	Mungkin ada baiknya untuk pengguna Ubuntu 8.04 untuk memilih kita akan menggunakan konfigurasi 1.0 atau 2.0 dengan cara mengcopy		Mungkin ada baiknya untuk pengguna Ubuntu 8.10 untuk memilih kita akan menggunakan konfigurasi 1.0 atau 2.0 dengan cara mengcopy

	# cp -Rf /etc/openvpn/2.0/* /etc/openvpn		# cp -Rf /etc/openvpn/2.0/* /etc/openvpn

Onnowpurbo at 12:29, 25 May 2009

2009-05-25T12:29:24Z

← Older revision		Revision as of 12:29, 25 May 2009
Line 1:		Line 1:
	~~== Membuat Server OpenVPN ==~~


	Install openvpn di Ubuntu		Install openvpn di Ubuntu