OpenVPN: Instalasi di Ubuntu 18.04

Sumber: https://www.cyberciti.biz/faq/ubuntu-18-04-lts-set-up-openvpn-server-in-5-minutes/

Step 1 – Update system

Run,

sudo apt update
sudo apt upgrade

Step 2 – Cek IP address

Pakai perintah,

ip a
ip a show eth0
ip a show enp0s3

Step 3 – Download & run openvpn-install.sh script

Download,

sudo su
cd /usr/local/src/
wget https://git.io/vpn -O openvpn-install.sh
chmod +x openvpn-install.sh

Run,

sudo ./openvpn-install.sh

Kita perlu menjawab beberapa pertanyaan. Selesai instalasi, contoh sertifikat client.ovpn akan di keluarkan.

Run OpenVPN,

sudo systemctl stop openvpn@server    # <--- stop server
sudo systemctl start openvpn@server   # <--- start server
sudo systemctl restart openvpn@server # <--- restart server
sudo systemctl status openvpn@server  # <--- get server status

Step 4 – Connect an OpenVPN server using IOS/Android/Linux/Windows client

On server your will find a client configuration file called ~/desktop.ovpn. All you have to do is copy this file to your local desktop using the scp command:

$ scp vivek@104.20.187.5:~/deskcop.ovpn .

Next, provide this file to your OpenVPN client to connect:

   Apple iOS client
   Android client
   Apple MacOS (OS X) client
   Windows 8/10 client

Linux Desktop: OpenVPN client configuration

First, install the openvpn client for your desktop, enter: $ sudo yum install openvpn

OR

$ sudo apt install openvpn

Next, copy desktop.ovpn as follows:

$ sudo cp desktop.ovpn /etc/openvpn/client.conf

Test connectivity from the CLI:

$ sudo openvpn --client --config /etc/openvpn/desktop.conf

Your Linux system will automatically connect when computer restart using openvpn script/service:

$ sudo systemctl start openvpn@client # <--- start client service

Step 5 - Verify/test the connectivity

Execute the following commands after connecting to OpenVPN server from your Linux desktop:

$ ping 10.8.0.1 #Ping to the OpenVPN server gateway
$ ip route #Make sure routing setup working
$ dig TXT +short o-o.myaddr.l.google.com @ns1.google.com #Must return public IP address of OpenVPN server

A note about trouble shooting OpenVPN server and client issues

Check OpenVPN server for errors: $ journalctl --identifier ovpn-server

OpenVPN server log files and error Click to enlarge image

Is firewall rule setup correctly on your server? Use the cat command to see rules:

$ cat /etc/rc.local

#!/bin/sh -e
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to 172.26.6.74
exit 0

Another option is to run iptables command and sysctl command commands to verify NAT rule setup on your server:

$ sudo iptables -t nat -L -n -v
$ sysctl net.ipv4.ip_forward

NAT Firewall OpenVPN Rules Verification Insert the rules if not inserted from /etc/rc.local

$ sudo sh /etc/rc.local
$ sudo sysctl -w net.ipv4.ip_forward=1

Is OpenVPN server running and port is open? Use the ss command or netstat command and pidof command/ps command:

$ netstat -tulpn | grep :1194 ## 1194 is the openvpn server port ##
$ ss -tulpn | grep :1194 ## 1194 is the openvpn server port ##
$ ps aux | grep openvpn ## is the openvpn server running? ##
$ ps -C openvpn ## is the openvpn server running? ##
$ pidof openvpn ## find the openvpn server PID ##

Verify that OpenVPN server runnign and Port is Open on ubuntu Linux If not running, restart the OpenVPN server:

$ sudo systemctl restart openvpn@server

Look out for errors:

$ sudo systemctl status openvpn@server

Can the Linux desktop client connect to the OpenVPN server machine? First you need to run a simple test to see if the OpenVPN server port (UDP 1194) accepts connections:

$ nc -vu 104.20.187.5 1194

Connection to 104.20.187.5 1194 port [udp/openvpn] succeeded!

If not connected it means either a Linux desktop firewall or your router is blocking access to server. Make sure both client and server using same protocol and port, e.g. UDP port 1194.

Conclusion

Congratulations. You successfully set up an OpenVPN server on Ubuntu Linux 18.04 LTS server running in the cloud. See the OpenVPN website here and Ubuntu page here for additional information.

Referensi

• https://www.cyberciti.biz/faq/ubuntu-18-04-lts-set-up-openvpn-server-in-5-minutes/