Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Overview of this book

OpenVPN is a powerful, open source SSL VPN application. It can secure site-to-site connections, WiFi and enterprise-scale remote connections. While being a full-featured VPN solution, OpenVPN is easy to use and does not suffer from the complexity that characterizes other IPSec VPN implementations. It uses the secure and stable TLS/SSL mechanisms for authentication and encryption. This book is an easy introduction to this popular VPN application. After introducing the basics of security and VPN, the book moves on to cover using OpenVPN, from installing it on various platforms, through configuring basic tunnels, to more advanced features, such as using the application with firewalls, routers, proxy servers, and OpenVPN scripting. While providing only necessary theoretical background, the book takes a practical approach, presenting plenty of examples.
Table of Contents (17 chapters)
OpenVPN
Credits
About the Author
About the Reviewers
Preface
Index

Troubleshooting


If you run into problems, check the following:

  • Ensure basic network connectivity between the two systems. Can they ping each other without problems? Are there firewalls involved between them?

  • Disable all firewalls on both systems during testing the tunnels. We will later set them up properly. Remember that both Windows XP and SuSE activate their firewall solutions by default.

  • OpenVPN and X509 certificates need synchronized time on both systems. For testing purposes you can set the time by hand. On Linux, the commands date and hwclock will help you, for the production environment a time server client should be set up. On Linux, Xntp is probably the most common one; its homepage offers documentation: http://www.eecis.udel.edu/~ntp/.

  • If you copy the files from a Windows machine to a Linux machine, remember to have dos2unix run and convert the end-of-line characters. The same applies to configuration files, certificates, and keys created on Linux and transferred to Windows—apply...