Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Overview of this book

OpenVPN is a powerful, open source SSL VPN application. It can secure site-to-site connections, WiFi and enterprise-scale remote connections. While being a full-featured VPN solution, OpenVPN is easy to use and does not suffer from the complexity that characterizes other IPSec VPN implementations. It uses the secure and stable TLS/SSL mechanisms for authentication and encryption. This book is an easy introduction to this popular VPN application. After introducing the basics of security and VPN, the book moves on to cover using OpenVPN, from installing it on various platforms, through configuring basic tunnels, to more advanced features, such as using the application with firewalls, routers, proxy servers, and OpenVPN scripting. While providing only necessary theoretical background, the book takes a practical approach, presenting plenty of examples.
Table of Contents (17 chapters)
OpenVPN
Credits
About the Author
About the Reviewers
Preface
Index

Important Windows-Specific Options


A fast-growing number of options can only be used on Windows clients, because other systems can't deal with the methods used. The following table gives an overview of these:

Parameter

Options

Function

Usage

dhcp-option

WINS <IP> DNS <IP> DOMAIN <name> NBDD <IP> NTP <IP> NBT <type> NBS <scope-id> DISABLE-NBT

Sets specific DHCP data over the VPN for Windows clients:

Sets a specific DNS or WINS server via DHCP, set domain name, NetBIOS server address, network time server, and more.

--push "dhcp-option DNS 10.94.46.11"

route-method

ipapi exe

Sets the method Windows uses to set routes, either by executing the route command (exe) or by using the IPAPI interface.

--route-method ipapi

ip-win32

<method>

Sets the Windows Network adapter's IP and netmask using <method>

--ip-win32 ipapi

Are you ready for an example? Read the following command line and write down what it does:

openvpn --port 5001...