Difference between revisions of "OpenVPN: IPv4 /32 single client"

From OnnoWiki
Jump to navigation Jump to search
 
(13 intermediate revisions by the same user not shown)
Line 5: Line 5:
  
  
−
  CLIENT 1 ------- HOST A ---------------- HOST B --------- CLIENT 2
+
  CLIENT 1 ------- HOST A ---------------- HOST B
 
                   ovpn server            ovpn client
 
                   ovpn server            ovpn client
−
 
−
 
−
 
  
 
Host A akan berfungsi sebagai OpenVPN Server.
 
Host A akan berfungsi sebagai OpenVPN Server.
Line 27: Line 24:
 
Download script openvpn-install dari github
 
Download script openvpn-install dari github
  
 +
sudo su
 +
apt install openssh-server openvpn
 +
 
  cd /usr/local/src
 
  cd /usr/local/src
 
  wget https://git.io/vpn -O openvpn-install.sh
 
  wget https://git.io/vpn -O openvpn-install.sh
Line 45: Line 45:
 
  /root/client.ovpn
 
  /root/client.ovpn
  
−
Copykan ke client
+
Install openssh-server di client, copykan client.ovpn ke client
 +
 
 +
scp client.ovpn root@192.168.0.237:
 +
 
 +
 
 +
Reboot
 +
 
 +
shutdown -r now
 +
 
 +
Cek kondisi jaringan
  
−
  scp client.ovpn root@192.168.0.237:/etc/openvpn/
+
  ifconfig
  
 +
Akan muncul interface tun0
 +
 +
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
 +
        inet 10.8.0.1  netmask 255.255.255.0  destination 10.8.0.1
 +
        inet6 fe80::eaaa:77ed:ba02:748  prefixlen 64  scopeid 0x20<link>
 +
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
 +
        RX packets 0  bytes 0 (0.0 B)
 +
        RX errors 0  dropped 0  overruns 0  frame 0
 +
        TX packets 6  bytes 288 (288.0 B)
 +
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
  
 
==Konfigurasi OpenVPN Client==
 
==Konfigurasi OpenVPN Client==
Line 54: Line 73:
 
Pastikan openvpn terinstalsi
 
Pastikan openvpn terinstalsi
  
−
  apt install openvpn
+
sudo su
 +
  apt install openssh-server openvpn
 +
 
 +
Edit /etc/hosts isi dengan nama OpenVPN server
 +
 
 +
192.168.0.239 vpnserver
 +
 
  
 
Jalankan OpenVPN client
 
Jalankan OpenVPN client
Line 62: Line 87:
 
  openvpn --config client.ovpn
 
  openvpn --config client.ovpn
  
−
Sample output:
+
Akan keluar kira-kira
  
−
Now, check if tun0(VPN interface) is created, and check the VPN interface IP address using ‘ip addr’ command:
+
..
 +
..
 +
Sat Feb 16 08:24:45 2019 TUN/TAP device tun0 opened
 +
Sat Feb 16 08:24:45 2019 TUN/TAP TX queue length set to 100
 +
Sat Feb 16 08:24:45 2019 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
 +
Sat Feb 16 08:24:45 2019 /sbin/ip link set dev tun0 up mtu 1500
 +
Sat Feb 16 08:24:45 2019 /sbin/ip addr add dev tun0 10.8.0.2/24 broadcast 10.8.0.255
 +
Sat Feb 16 08:24:45 2019 /sbin/ip route add 192.168.0.239/32 dev enp0s3
 +
Sat Feb 16 08:24:45 2019 /sbin/ip route add 0.0.0.0/1 via 10.8.0.1
 +
Sat Feb 16 08:24:45 2019 /sbin/ip route add 128.0.0.0/1 via 10.8.0.1
 +
Sat Feb 16 08:24:45 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
 +
Sat Feb 16 08:24:45 2019 Initialization Sequence Completed
  
−
ip addr
+
Cek interface, akan muncul tun0
  
−
Sample output:
+
ifconfig
  
−
  1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
+
  tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
−
  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+
        inet 10.8.0.2  netmask 255.255.255.0  destination 10.8.0.2
−
  inet 127.0.0.1/8 scope host lo
+
        inet6 fe80::28c4:3e38:2497:e12a  prefixlen 64 scopeid 0x20<link>
−
  valid_lft forever preferred_lft forever
+
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
−
  inet6 ::1/128 scope host
+
        RX packets 51  bytes 11522 (11.5 KB)
−
  valid_lft forever preferred_lft forever
+
        RX errors 0  dropped 0  overruns 0 frame 0
−
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
+
        TX packets 134  bytes 43524 (43.5 KB)
−
  link/ether 08:00:27:28:98:6b brd ff:ff:ff:ff:ff:ff
+
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
−
  inet 192.168.43.199/24 brd 192.168.43.255 scope global dynamic enp0s3
 
−
  valid_lft 42359sec preferred_lft 42359sec
 
−
  inet6 fe80::a00:27ff:fe28:986b/64 scope link  
 
−
  valid_lft forever preferred_lft forever
 
−
  3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
 
−
  link/none
 
−
  inet 10.8.0.2/24 brd 10.8.0.255 scope global tun0
 
−
  valid_lft forever preferred_lft forever
 
  
−
As you can see in the above output, Our VPN server automatically assigned an IP address 10.8.0.2 to the VPN client.
+
Cek sambungan
−
 
 
−
Now, try to ping the VPN server from your VPN client system:
 
  
 
  ping -c3 10.8.0.1
 
  ping -c3 10.8.0.1
Line 96: Line 122:
  
 
  PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
 
  PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
−
  64 bytes from 10.8.0.1: icmp_seq=1 ttl=64 time=1.05 ms
+
  64 bytes from 10.8.0.1: icmp_seq=1 ttl=64 time=0.539 ms
−
  64 bytes from 10.8.0.1: icmp_seq=2 ttl=64 time=1.94 ms
+
  64 bytes from 10.8.0.1: icmp_seq=2 ttl=64 time=1.17 ms
−
  64 bytes from 10.8.0.1: icmp_seq=3 ttl=64 time=2.49 ms
+
  64 bytes from 10.8.0.1: icmp_seq=3 ttl=64 time=0.921 ms
 
   
 
   
 
  --- 10.8.0.1 ping statistics ---
 
  --- 10.8.0.1 ping statistics ---
−
  3 packets transmitted, 3 received, 0% packet loss, time 2001ms
+
  3 packets transmitted, 3 received, 0% packet loss, time 2007ms
−
  rtt min/avg/max/mdev = 1.057/1.832/2.495/0.594 ms
+
  rtt min/avg/max/mdev = 0.539/0.878/1.176/0.264 ms
  
−
Congratulations! We have now successfully installed and configured OpenVPN server and client in CentOS. This method is same for DEB based systems such as Ubuntu and Linux Mint. Unlike the manual installation, this script makes the the openvpn installation and configuration much easier.
+
Cek routing
  
−
Cheers!
+
route -n
 +
 
 +
Sample output
 +
 
 +
Kernel IP routing table
 +
Destination    Gateway        Genmask        Flags Metric Ref    Use Iface
 +
0.0.0.0        10.8.0.1        128.0.0.0      UG    0      0        0 tun0
 +
 
 +
 
 +
Anda sudah tersambung ke VPN dengan IP 10.8.0.0/24
  
 
==Referensi==
 
==Referensi==
Line 114: Line 149:
 
==Pranala Menarik==
 
==Pranala Menarik==
  
−
* [[OpenVPN]]
+
* [[OpenVPN: IPv4 /32 single client]]
−
* [[IPv6]]
+
* [[OpenVPN: IPv4 /32 multi-client]]
 +
* [[OpenVPN: IPv4 routed LAN]]
 +
* [[OpenVPN: IPv4 routed 2 LAN]]
 +
* [[OpenVPN: IPv6 /128 single client]]
 +
* [[OpenVPN: IPv6 routed LAN]]
 +
* [[OpenVPN: IPv6 routed 2 LAN]]
 +
 
 +
* [[IPv6: OpenVPN: Ubuntu roadwarrior]]
 +
* [[OpenVPN: Simple Server using Script]]
 +
* [[OpenVPN: Free VPN untuk Ubuntu]]
 +
* [[Instalasi OpenVPN]]
 +
* [[Instalasi OpenVPN Client di Linux]]
 +
* [[Capture Screen Proses Instalasi OpenVPN di Windows]]
 +
* [[Instalasi OpenVPN di Windows]]
 +
* [[WNDW: OpenVPN]]
 +
* [[OpenVPN: Instalasi di Ubuntu 16.04]]
 +
* [[OpenVPN: Instalasi di Ubuntu 18.04]]
 +
* [[OpenVPN: Briding dan Routing]]

Latest revision as of 08:17, 31 March 2020

sumber: https://www.ostechnix.com/easiest-way-install-configure-openvpn-server-linux/


Topology

CLIENT 1 ------- HOST A ---------------- HOST B
                 ovpn server             ovpn client

Host A akan berfungsi sebagai OpenVPN Server. 

OS : Ubuntu 18.04
IP : 192.168.0.239/24
hostname : vpnserver


Host B akan berfungsi sebagai OpenVPN client 

OS : Ubuntu 18.04
IP : 192.168.0.237/24

Instal & Konfigurasi OpenVPN Server

Download script openvpn-install dari github 

sudo su
apt install openssh-server openvpn

cd /usr/local/src
wget https://git.io/vpn -O openvpn-install.sh
bash openvpn-install.sh

Jawab pertanyaan: 

IP address: 192.168.0.239
Public IP address / hostname: vpnserver
Protocol [1-2]: 1 -- UDP
Port: 1194
DNS [1-5]: 1
Client name: client
Press any key to continue...  <ENTER>

Maka akan tampak file client.ovpn, di 

/root/client.ovpn

Install openssh-server di client, copykan client.ovpn ke client 

scp client.ovpn root@192.168.0.237:


Reboot 

shutdown -r now

Cek kondisi jaringan 

ifconfig

Akan muncul interface tun0 

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.8.0.1  netmask 255.255.255.0  destination 10.8.0.1
        inet6 fe80::eaaa:77ed:ba02:748  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 6  bytes 288 (288.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Konfigurasi OpenVPN Client

Pastikan openvpn terinstalsi 

sudo su
apt install openssh-server openvpn

Edit /etc/hosts isi dengan nama OpenVPN server 

192.168.0.239 vpnserver


Jalankan OpenVPN client 

cd ~
sudo su
openvpn --config client.ovpn

Akan keluar kira-kira 

..
..
Sat Feb 16 08:24:45 2019 TUN/TAP device tun0 opened
Sat Feb 16 08:24:45 2019 TUN/TAP TX queue length set to 100
Sat Feb 16 08:24:45 2019 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Feb 16 08:24:45 2019 /sbin/ip link set dev tun0 up mtu 1500
Sat Feb 16 08:24:45 2019 /sbin/ip addr add dev tun0 10.8.0.2/24 broadcast 10.8.0.255
Sat Feb 16 08:24:45 2019 /sbin/ip route add 192.168.0.239/32 dev enp0s3
Sat Feb 16 08:24:45 2019 /sbin/ip route add 0.0.0.0/1 via 10.8.0.1
Sat Feb 16 08:24:45 2019 /sbin/ip route add 128.0.0.0/1 via 10.8.0.1
Sat Feb 16 08:24:45 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Feb 16 08:24:45 2019 Initialization Sequence Completed

Cek interface, akan muncul tun0 

ifconfig

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.8.0.2  netmask 255.255.255.0  destination 10.8.0.2
        inet6 fe80::28c4:3e38:2497:e12a  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 51  bytes 11522 (11.5 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 134  bytes 43524 (43.5 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Cek sambungan 

ping -c3 10.8.0.1

Sample output: 

PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
64 bytes from 10.8.0.1: icmp_seq=1 ttl=64 time=0.539 ms
64 bytes from 10.8.0.1: icmp_seq=2 ttl=64 time=1.17 ms
64 bytes from 10.8.0.1: icmp_seq=3 ttl=64 time=0.921 ms

--- 10.8.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2007ms
rtt min/avg/max/mdev = 0.539/0.878/1.176/0.264 ms

Cek routing 

route -n

Sample output 

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.8.0.1        128.0.0.0       UG    0      0        0 tun0


Anda sudah tersambung ke VPN dengan IP 10.8.0.0/24

Referensi

Pranala Menarik

Retrieved from "https://onnocenter.or.id/wiki/index.php?title=OpenVPN:_IPv4_/32_single_client&oldid=60657"