VPN (OpenVPN) Setting Guide. Johnny

Transcription

1 VPN (OpenVPN) Setting Guide Johnny 1

2 Agenda Prepare Example for IP settings Static mode TLS-mode

3 Prepare Required equipment Desktop or Laptop * 2 VPN Server *1 (Use JetBox 5630 in this case) VPN Client *1 (Use JetWave 2311 in this case)

4 Example for IP settings OpenVPN Server OpenVPN Client Eth 1 IP: WAN port IP: Eth 1 IP: Eth PC 2 IP: GW: VPN Tunnel: Default Route IP: <-> VPN ifconfig: <-> PC 1 IP: GW:

5 Agenda Prepare Example for IP settings Static mode TLS-mode

6 Static mode Server IP settings Setup IP address for WAN & LAN in Network => Settings Click Save & Apply after setup IP address

7 Static mode Server IP settings (For PC) Change to same IP domain for Desktop (or Laptop) which you connected to server Gateway should be LAN port IP address of your server (JetBox 5630)

8 Static mode Create a new VPN connection Go to VPN => OpenVPN Insert name of the connection and click Add

9 Static mode Setup VPN connection for server 1. Choose secret for Encryption 2. Click Generate

10 Static mode Setup VPN connection 3. Click file icon, chose static.key 4. Check the three options

11 Static mode Setup VPN connection 5. Add Port keepalive & route one by one in Additional Field 6. Port keepalive don t need to modify, route should be same domain with LAN IP address of client

12 Static mode Download Key Go to VPN => Certificates Click Download archive Find static.key in \etc\openvpn, it need to import to client later

13 Static mode Start Open VPN connection which you created Back to OpenVPN page Click Start, and then click Save & Apply

14 Static mode Client Network Mode modify Go to System => Basic Settings, Change Network Mode to Router and press Apply

15 Static mode Client IP settings Go to System => IP Settings, setup IP address for WAN & LAN, and then Click Apply after you setup IP address

16 Static mode Client IP settings (For PC) Change to same IP domain for Desktop (or Laptop) which you connected to client Gateway should be LAN port IP address of your client (JetWave 2311)

17 Static mode Client import Key Copy Keys file which you downloaded from server, and put it to PC which you connected to client Go to Management => Certificate File Import static.key to client

18 Static mode Client time settings Go to System => Time Settings Click Get PC Time, and then click Apply

19 Static mode Setup VPN connection for client Go to VPN => OpenVPN Client Choose Static for Encryption Mode Remote Server IP (1): Insert IP address of Server WAN port

20 Static mode Setup VPN connection for client Page down Route: Should be same domain with LAN IP address of Server

21 Static mode Enable VPN connection for client Page up Check Enable OpenVPN Client Connection

22 Static mode Enable VPN connection for client Page down Click Apply

23 Static mode Save settings for client Go to Save Click Save to Flash

24 Static mode Confirm VPN connection status Go to VPN => Status, you can check out the status of VPN connection

25 Agenda Prepare Example for IP settings Static mode TLS-mode

26 Server IP settings Setup IP address for WAN & LAN in Network => Settings Click Save & Apply after setup IP address

27 Server IP settings (For PC) Change to same IP domain for Desktop (or Laptop) which you connected to server Gateway should be LAN port IP address of your server (JetBox 5630).

28 Create a new VPN connection Go to VPN => OpenVPN Insert name of the connection and click Add

29 Build Keys for VPN connection It can t be built Key in Web interface for TLS-Mode, must create Key from command mode Use console cable connect PC & JetBox 5630 together, or you can use Telnet in CMD

30 Build Keys for VPN connection Enter cd /etc/openvpn/easy-rsa/2.0 Enter vi vars could be modify vars file, you can skip if you don t want to change (1024 or 2048)

31 Build Keys for VPN connection Enter../vars (set up vars) //Notice: There has a blank between two point Enter./clean-all (Remove all keys which created before)

32 Build Keys for VPN connection ca Enter./build-ca, you can press ENTER to skip Country name State...etc. if you don t want to change it

33 Build Keys for VPN connection - Server Enter./build-key-server server, you can press ENTER to skip Country name State...etc. if you don t want to change it Sign the certificate & 1 out 1 certificate requests certificated, commit? Please press y and then press ENTER

34 Build Keys for VPN connection - Client Enter./build-key client Sign the certificate & 1 out 1 certificate requests certificated, commit? Please press y and then press ENTER

35 Build Keys for VPN connection - DH (Diffie Hellman parameters) Enter./build-dh

36 Download Keys Access to the web interface of JetBox 5630 Go to VPN => Certificates click Download archive

37 Modify Key Extract keys file which you download from server to desktop, go to Keys like picture from below Create a new folder which name is client, and put client.crt & client.key to that folder

38 Setup VPN connection for server Check Automatically Start after reboot Choose tls-mode for Encryption Choose correct keys for ca dh cert & key like picture from below Check Choose tls-mode

39 Setup VPN connection for server 1. Check the three options 2. Add Port keepalive & route one by one in Additional Field 3. Port keepalive don t need to modify, push route should be same domain with LAN IP address of server

40 Server route settings Back to 5630 command mode Enter cd /etc/openvpn/ and press ENTER Enter vi (Insert the Name which you choose in page.37).conf

41 Server route settings Press i from your keyboard Move cursor to behind the auth SHA1 press ENTER to line feed and enter: client-config-dir ccd route //client IP domain Press ESC when you finish Enter :wq

42 Server route settings Enter mkdir ccd //create ccd folder Enter cd ccd //Go to ccd Enter vi client

43 Server route settings Press i from your keyboard and enter: ifconfig-push iroute Press ESC when you finish Enter :wq

44 Start Open VPN connection which you created Back to OpenVPN page Click Start, and then click Save & Apply

45 Client Network Mode modify Go to System => Basic Settings, Change Network Mode to Router and press Apply

46 Client IP setting Go to System => IP Settings, setup IP address for WAN & LAN, and then Click Apply after you setup IP address

47 Client IP settings (For PC) Change to same IP domain for Desktop (or Laptop) which you connected to client Gateway should be LAN port IP address of your client (JetWave 2311)

48 Client import Key Copy Keys file which you downloaded from server, and put it to PC which you connected to client Go to Management => Certificate File Import ca.crt client.crt & client.key to client

49 Client time settings Go to System => Time Settings Click Get PC Time, and then click Apply

50 Setup VPN connection for client Go to VPN => OpenVPN Client Choose TLS for Encryption Mode Remote Server IP (1): Insert IP address of Server WAN port

51 Setup VPN connection for client Page down Route: Should be same domain with LAN IP address of Server

52 Enable VPN connection for client Page up Check Enable OpenVPN Client Connection

53 Enable VPN connection for client Page down Click Apply

54 Save settings for client Go to Save Click Save to Flash

55 Confirm VPN connection status Go to VPN => Status, you can check out the status of VPN connection

56 Thanks a lot! 56