OpenVPN: Instalasi di Ubuntu 18.04: Difference between revisions

From OnnoCenterWiki
Jump to navigationJump to search
← Older edit
Onnowpurbo (talk | contribs)
69,477 edits
Onnowpurbo (talk | contribs)
69,477 edits
Onnowpurbo (talk | contribs)
69,477 edits
 
(12 intermediate revisions by the same user not shown)
Line 19: Line 19:
==Step 3 – Download & run openvpn-install.sh script==
==Step 3 – Download & run openvpn-install.sh script==


Download,
Pastikan tidak ada yang menggunakan repository ubuntu,  


  sudo su
  sudo rm -Rf /var/lib/dpkg/lock
 
Sebagai '''User Biasa''', Download,
 
sudo chmod 777 /usr/local/src
  cd /usr/local/src/
  cd /usr/local/src/
  wget https://git.io/vpn -O openvpn-install.sh
  wget https://git.io/vpn -O openvpn-install.sh
Line 30: Line 34:
  sudo ./openvpn-install.sh
  sudo ./openvpn-install.sh


Kita perlu menjawab beberapa pertanyaan. Selesai instalasi, contoh sertifikat client.ovpn akan di keluarkan.
Akan keluar beberapa pertanyaan, tekan [ENTER].
Selesai instalasi, contoh sertifikat ~/client.ovpn akan di keluarkan.
 
Hack sedikit
 
sudo su
cp -Rf /etc/openvpn/server/* /etc/openvpn/


Run OpenVPN,
Run OpenVPN,
Line 41: Line 51:
==Step 4 – Connect an OpenVPN server using IOS/Android/Linux/Windows client==
==Step 4 – Connect an OpenVPN server using IOS/Android/Linux/Windows client==


On server your will find a client configuration file called ~/desktop.ovpn. All you have to do is copy this file to your local desktop using the scp command:
Copykan file sertifikat client.ovpn ke client, misalnya menggunakan perintah,


  $ scp vivek@104.20.187.5:~/deskcop.ovpn .
  scp vivek@104.20.187.5:~/client.ovpn .


Next, provide this file to your OpenVPN client to connect:
===Linux Desktop: OpenVPN client configuration===


    Apple iOS client
Install,
    Android client
    Apple MacOS (OS X) client
    Windows 8/10 client


Linux Desktop: OpenVPN client configuration
sudo apt -y install openvpn
sudo cp client.ovpn /etc/openvpn/client.ovpn


First, install the openvpn client for your desktop, enter:
Coba sambungan dari sisi client
$ sudo yum install openvpn


OR
  sudo openvpn --client --config /etc/openvpn/client.ovpn
  $ sudo apt install openvpn


Next, copy desktop.ovpn as follows:
Linux akan secara automatis tersambung ke computer dengan openvpn script
$ sudo cp desktop.ovpn /etc/openvpn/client.conf


Test connectivity from the CLI:
  sudo systemctl start openvpn@client # <--- start client service
  $ sudo openvpn --client --config /etc/openvpn/desktop.conf


Your Linux system will automatically connect when computer restart using openvpn script/service:
==Step 5 - Verify/test the connectivity==
$ sudo systemctl start openvpn@client # <--- start client service
Step 5 - Verify/test the connectivity


Execute the following commands after connecting to OpenVPN server from your Linux desktop:
Execute the following commands after connecting to OpenVPN server from your Linux desktop:
$ ping 10.8.0.1 #Ping to the OpenVPN server gateway
$ ip route #Make sure routing setup working
$ dig TXT +short o-o.myaddr.l.google.com @ns1.google.com #Must return public IP address of OpenVPN server
A note about trouble shooting OpenVPN server and client issues


Check OpenVPN server for errors:
ping 10.8.0.1      # Ping to the OpenVPN server gateway
$ journalctl --identifier ovpn-server
ip route            # Make sure routing setup working
dig TXT +short o-o.myaddr.l.google.com @ns1.google.com #Must return public IP address of OpenVPN server
 
Beberapa catatan troubleshooting OpenVPN & Client
 
Cek OpenVPN server for errors:


OpenVPN server log files and error
journalctl --identifier ovpn-server
Click to enlarge image


Is firewall rule setup correctly on your server? Use the cat command to see rules:
Cek Filewall Rules
  $ cat /etc/rc.local
 
  cat /etc/rc.local


  #!/bin/sh -e
  #!/bin/sh -e
Line 89: Line 92:
  exit 0
  exit 0


Another option is to run iptables command and sysctl command commands to verify NAT rule setup on your server:
Alternatif lain, run iptables command & sysctl command untuk verifikasi NAT rule setup
$ sudo iptables -t nat -L -n -v
$ sysctl net.ipv4.ip_forward


NAT Firewall OpenVPN Rules Verification
sudo iptables -t nat -L -n -v
Insert the rules if not inserted from /etc/rc.local
sysctl net.ipv4.ip_forward
  $ sudo sh /etc/rc.local
 
  $ sudo sysctl -w net.ipv4.ip_forward=1
Insert rules ke /etc/rc.local (kalau belum di insert)
  sudo sh /etc/rc.local
  sudo sysctl -w net.ipv4.ip_forward=1


Is OpenVPN server running and port is open? Use the ss command or netstat command and pidof command/ps command:
Is OpenVPN server running and port is open? Use the ss command or netstat command and pidof command/ps command:
  $ netstat -tulpn | grep :1194 ## 1194 is the openvpn server port ##
  $ netstat -tulpn | grep :1194 ## 1194 is the openvpn server port ##
  $ ss -tulpn | grep :1194 ## 1194 is the openvpn server port ##
  $ ss -tulpn | grep :1194 ## 1194 is the openvpn server port ##
Line 117: Line 122:


If not connected it means either a Linux desktop firewall or your router is blocking access to server. Make sure both client and server using same protocol and port, e.g. UDP port 1194.
If not connected it means either a Linux desktop firewall or your router is blocking access to server. Make sure both client and server using same protocol and port, e.g. UDP port 1194.
==Conclusion==
==Conclusion==


Congratulations. You successfully set up an OpenVPN server on Ubuntu Linux 18.04 LTS server running in the cloud. See the OpenVPN website here and Ubuntu page here for additional information.
Congratulations. You successfully set up an OpenVPN server on Ubuntu Linux 18.04 LTS server running in the cloud. See the OpenVPN website here and Ubuntu page here for additional information.
==Youtube==
* [https://youtu.be/qb07-Lpd71M YOUTUBE: Membuat Sambungan Server - OpenVPN - Cloud - Mikrotik - Kali]


==Referensi==
==Referensi==
Line 126: Line 137:


==Pranala Menarik==
==Pranala Menarik==
* [[OpenVPN: IPv4 /32 single client]]
* [[OpenVPN: IPv4 /32 multi-client]]
* [[OpenVPN: IPv4 routed LAN]]
* [[OpenVPN: IPv4 routed 2 LAN]]
* [[OpenVPN: IPv6 /128 single client]]
* [[OpenVPN: IPv6 routed LAN]]
* [[OpenVPN: IPv6 routed 2 LAN]]
* [[IPv6: OpenVPN: Ubuntu roadwarrior]]
* [[OpenVPN: Simple Server using Script]]
* [[OpenVPN: Free VPN untuk Ubuntu]]
* [[Instalasi OpenVPN]]
* [[Instalasi OpenVPN Client di Linux]]
* [[Capture Screen Proses Instalasi OpenVPN di Windows]]
* [[Instalasi OpenVPN di Windows]]
* [[WNDW: OpenVPN]]
* [[OpenVPN: Instalasi di Ubuntu 16.04]]
* [[OpenVPN: Instalasi di Ubuntu 18.04]]
* [[OpenVPN: Briding dan Routing]]

Latest revision as of 01:02, 31 March 2020

Sumber: https://www.cyberciti.biz/faq/ubuntu-18-04-lts-set-up-openvpn-server-in-5-minutes/


Step 1 – Update system

Run, 

sudo apt update
sudo apt upgrade

Step 2 – Cek IP address

Pakai perintah, 

ip a
ip a show eth0
ip a show enp0s3

Step 3 – Download & run openvpn-install.sh script

Pastikan tidak ada yang menggunakan repository ubuntu, 

sudo rm -Rf /var/lib/dpkg/lock

Sebagai User Biasa, Download, 

sudo chmod 777 /usr/local/src
cd /usr/local/src/
wget https://git.io/vpn -O openvpn-install.sh
chmod +x openvpn-install.sh

Run, 

sudo ./openvpn-install.sh

Akan keluar beberapa pertanyaan, tekan [ENTER]. Selesai instalasi, contoh sertifikat ~/client.ovpn akan di keluarkan.

Hack sedikit 

sudo su
cp -Rf /etc/openvpn/server/* /etc/openvpn/

Run OpenVPN, 

sudo systemctl stop openvpn@server    # <--- stop server
sudo systemctl start openvpn@server   # <--- start server
sudo systemctl restart openvpn@server # <--- restart server
sudo systemctl status openvpn@server  # <--- get server status

Step 4 – Connect an OpenVPN server using IOS/Android/Linux/Windows client

Copykan file sertifikat client.ovpn ke client, misalnya menggunakan perintah, 

scp vivek@104.20.187.5:~/client.ovpn .

Linux Desktop: OpenVPN client configuration

Install, 

sudo apt -y install openvpn
sudo cp client.ovpn /etc/openvpn/client.ovpn

Coba sambungan dari sisi client 

sudo openvpn --client --config /etc/openvpn/client.ovpn

Linux akan secara automatis tersambung ke computer dengan openvpn script 

sudo systemctl start openvpn@client # <--- start client service

Step 5 - Verify/test the connectivity

Execute the following commands after connecting to OpenVPN server from your Linux desktop: 

ping 10.8.0.1       # Ping to the OpenVPN server gateway
ip route            # Make sure routing setup working
dig TXT +short o-o.myaddr.l.google.com @ns1.google.com #Must return public IP address of OpenVPN server

Beberapa catatan troubleshooting OpenVPN & Client

Cek OpenVPN server for errors: 

journalctl --identifier ovpn-server

Cek Filewall Rules 

cat /etc/rc.local

#!/bin/sh -e
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to 172.26.6.74
exit 0

Alternatif lain, run iptables command & sysctl command untuk verifikasi NAT rule setup 

sudo iptables -t nat -L -n -v
sysctl net.ipv4.ip_forward

Insert rules ke /etc/rc.local (kalau belum di insert) 

sudo sh /etc/rc.local
sudo sysctl -w net.ipv4.ip_forward=1

Is OpenVPN server running and port is open? Use the ss command or netstat command and pidof command/ps command: 

$ netstat -tulpn | grep :1194 ## 1194 is the openvpn server port ##
$ ss -tulpn | grep :1194 ## 1194 is the openvpn server port ##
$ ps aux | grep openvpn ## is the openvpn server running? ##
$ ps -C openvpn ## is the openvpn server running? ##
$ pidof openvpn ## find the openvpn server PID ##

Verify that OpenVPN server runnign and Port is Open on ubuntu Linux If not running, restart the OpenVPN server: 

$ sudo systemctl restart openvpn@server

Look out for errors: 

$ sudo systemctl status openvpn@server

Can the Linux desktop client connect to the OpenVPN server machine? First you need to run a simple test to see if the OpenVPN server port (UDP 1194) accepts connections: 

$ nc -vu 104.20.187.5 1194

Connection to 104.20.187.5 1194 port [udp/openvpn] succeeded!

If not connected it means either a Linux desktop firewall or your router is blocking access to server. Make sure both client and server using same protocol and port, e.g. UDP port 1194.

Conclusion

Congratulations. You successfully set up an OpenVPN server on Ubuntu Linux 18.04 LTS server running in the cloud. See the OpenVPN website here and Ubuntu page here for additional information.

Youtube


Referensi

Pranala Menarik

Retrieved from "https://lms.onnocenter.or.id/wiki/index.php?title=OpenVPN:_Instalasi_di_Ubuntu_18.04&oldid=60656"