Difference between revisions of "OpenVPN: IPv6 /128 single client"

From OnnoWiki
Jump to navigation Jump to search
Line 22: Line 22:
 
  OS : Ubuntu 18.04
 
  OS : Ubuntu 18.04
  
 
 
==Instal & Konfigurasi OpenVPN Server==
 
 
Download script openvpn-install dari github
 
 
sudo su
 
apt install openssh-server openvpn
 
 
cd /usr/local/src
 
wget https://git.io/vpn -O openvpn-install.sh
 
bash openvpn-install.sh
 
 
Jawab pertanyaan:
 
 
IP address: 192.168.0.239
 
Public IP address / hostname: vpnserver
 
Protocol [1-2]: 1 -- UDP
 
Port: 1194
 
DNS [1-5]: 1
 
Client name: client
 
Press any key to continue...  <ENTER>
 
 
Maka akan tampak file client.ovpn, di
 
 
/root/client.ovpn
 
 
Install openssh-server di client, copykan client.ovpn ke client
 
 
scp client.ovpn root@192.168.0.237:
 
 
 
Reboot
 
 
shutdown -r now
 
 
Cek kondisi jaringan
 
 
ifconfig
 
 
Akan muncul interface tun0
 
 
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
 
        inet 10.8.0.1  netmask 255.255.255.0  destination 10.8.0.1
 
        inet6 fe80::eaaa:77ed:ba02:748  prefixlen 64  scopeid 0x20<link>
 
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
 
        RX packets 0  bytes 0 (0.0 B)
 
        RX errors 0  dropped 0  overruns 0  frame 0
 
        TX packets 6  bytes 288 (288.0 B)
 
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
 
==Konfigurasi IPv6 Server==
 
 
Enable IPv6 forwarding
 
 
echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
 
echo 1 > /proc/sys/net/ipv6/conf/default/forwarding
 
echo 1 > /proc/sys/net/ipv6/conf/enp0s3/forwarding
 
echo 1 > /proc/sys/net/ipv6/conf/enp0s8/forwarding
 
echo 1 > /proc/sys/net/ipv6/conf/tun0/forwarding
 
 
Edit /etc/openvpn/server.conf
 
 
vi /etc/openvpn/server.conf
 
 
Tambahkan
 
 
tun-ipv6
 
server-ipv6 2345::/64
 
push tun-ipv6
 
push "route-ipv6 2000::/3"
 
 
Restart
 
 
/etc/init.d/openvpn restart
 
  
 
==Konfigurasi OpenVPN Client==
 
==Konfigurasi OpenVPN Client==

Revision as of 19:07, 10 March 2019

sumber: https://www.ostechnix.com/easiest-way-install-configure-openvpn-server-linux/


Topology

CLIENT 1 ------- HOST A ---------------- HOST B --------- CLIENT 2
                 ovpn server             ovpn client
                 2345::1/64


Host A akan berfungsi sebagai OpenVPN Server.

OS : Ubuntu 18.04
IP : 192.168.0.239/24   (IP public)
hostname : vpnserver


Host B akan berfungsi sebagai OpenVPN client

OS : Ubuntu 18.04


Konfigurasi OpenVPN Client

Pastikan openvpn terinstalsi

sudo su
apt install openssh-server openvpn

Edit /etc/hosts isi dengan nama OpenVPN server

192.168.0.239 vpnserver


Jalankan OpenVPN client

cd ~
sudo su
openvpn --config client.ovpn

Akan keluar kira-kira

..
..
Sat Feb 16 08:24:44 2019 Unrecognized option or missing or extra parameter(s) in client.ovpn:14: block-
Sat Feb 16 08:24:45 2019 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Feb 16 08:24:45 2019 /sbin/ip link set dev tun0 up mtu 1500
Sat Feb 16 08:24:45 2019 /sbin/ip addr add dev tun0 10.8.0.2/24 broadcast 10.8.0.255
Sat Feb 16 08:24:45 2019 /sbin/ip route add 192.168.0.239/32 dev enp0s3
Sat Feb 16 08:24:45 2019 /sbin/ip route add 0.0.0.0/1 via 10.8.0.1
Sat Feb 16 08:24:45 2019 /sbin/ip route add 128.0.0.0/1 via 10.8.0.1
Sat Feb 16 08:24:45 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Feb 16 08:24:45 2019 Initialization Sequence Completed 

Cek interface, akan muncul tun0 yang ada IPv6-nya

ifconfig
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.8.0.3  netmask 255.255.255.0  destination 10.8.0.3
        inet6 2001:db8:0:123::1001  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::36a5:3f7a:13b1:a4d5  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 3861  bytes 4970868 (4.9 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 2835  bytes 215402 (215.4 KB)
        TX errors 0  dropped 543 overruns 0  carrier 0  collisions 0

Cek sambungan

ping -c3 10.8.0.1

Sample output:

PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
64 bytes from 10.8.0.1: icmp_seq=1 ttl=64 time=0.539 ms
64 bytes from 10.8.0.1: icmp_seq=2 ttl=64 time=1.17 ms
64 bytes from 10.8.0.1: icmp_seq=3 ttl=64 time=0.921 ms

--- 10.8.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2007ms
rtt min/avg/max/mdev = 0.539/0.878/1.176/0.264 ms

Cek routing

route -n

Sample output

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.8.0.1        128.0.0.0       UG    0      0        0 tun0


Anda sudah tersambung ke VPN dengan IP 10.8.0.0/24

Referensi

Pranala Menarik