Part 4 - Install OpenVPN
Code:
#Install OpenVPN
apt-get update
apt-get upgrade --show-upgraded
apt-get install nano
apt-get install openvpn
------------------------------------------------------------------------------------------------------------------------------------------------------
#Configure Easy-RSA
mkdir /etc/openvpn/easy-rsa
cp /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa
cd /etc/openvpn/easy-rsa
-----------------------------------------------------------------------------------------------------------------------------------------------------
#editing the /etc/openvpn/easy-rsa/vars file
nano vars
export KEY_COUNTRY="Amerika"
export KEY_PROVINCE="New York City"
export KEY_CITY="New York City"
export KEY_ORG="myvpn"
export KEY_EMAIL="[email protected]"
#Exit tekan CTRL+X dan masukkan Y for "Yes, save" - tekan enter.
source ./vars
./clean-all
chmod 700 /etc/openvpn/easy-rsa/keys/
./build-ca
./build-dh
#tunggu kejap
------------------------------------------------------------------------------------------------------------------------------------------------------
#Create server key
./build-key-server server
------------------------------------------------------------------------------------------------------------------------------------------------------tekan enter je pastu jawab ‘yes’ - sign the certificate
--------------------
#Create client key
./build-key client
------------------------------------------------------------------------------------------------------------------------------------------------------tekan enter je pastu jawab ‘yes’ - sign the certificate
Part 5 Server Configuration
Code:
nano /etc/openvpn/udpserver.conf
-copy paste code dibawah
- ctrl + x = exit dan save
- *port 137 untuk clcom, 443 tuk streamyx
Code:
##protocol port
port 137
proto udp
dev tun
##ip server client
server 192.168.22.0 255.255.255.0
##key
ca easy-rsa/keys/ca.crt
cert easy-rsa/keys/server.crt
key easy-rsa/keys/server.key
dh easy-rsa/keys/dh1024.pem
##option
persist-key
persist-tun
keepalive 5 60
reneg-sec 432000
##option authen.
comp-lzo
#user openvpn
#group openvpn
client-to-client
##push to client
#max-clients 50
push "persist-key"
push "persist-tun"
push "redirect-gateway def1"
push "explicit-exit-notify 1"
##DNS-Server
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
##log-status
status openvpn-status.log
##option2
fragment 0
tun-mtu 9000
tun-mtu-extra 32
verb 3
mute 20
#Enjoy!
-Restart openvpn
Part 6 Client Configuration
1- Install OpenVPN download sini
http://swupdate.openvpn.org/community/releases/openvpn-2.2.2-install.exe
2- Pergi ke c/program file/openvpn/config
3- Create file udp137.ovpn
4- Paste code di bawah
5- Tukar xxx.xxx.xxx.xxx dengan IP vps anda dan save
Code:
client
dev tun
port 137
fragment 0
tun-mtu 9000
tun-mtu-extra 32
proto udp
ca ca.crt
cert client.crt
key client.key
remote [COLOR="Red"]xxx.xxx.xxx.xxx[/COLOR] 137
reneg-sec 432000
engine dynamic
explicit-exit-notify 2
route-method exe
verb 3
mute 20
ping 10
comp-lzo
persist-key
resolv-retry infinite
nobind
#Enjoy!
Part 7 Internet Forwarding
1- Login ke vps
Code:
nano /etc/sysctl.conf
##Buang "#" di depan net.ipv4.ip_forward=1
nano /etc/rc.local
##Paste code di bawah sebelum "exit 0"
##Gantikan xxx.xxx.xxx.xxx dengan ip vps anda.
##ctrl + x = exit
--------------
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -A POSTROUTING -s 192.168.22.0/24 -j SNAT --to xxx.xxx.xxx.xxx
----
Pastu run
Code:
/etc/rc.local
iptables-save
Part 8 Connect ke Server [Windows]
1- Connect vps pakai Secure shell.
2- Klik windows -> new file transfer
3- Gantikan /root dalam kotak dengan /etc/openvpn/easy-rsa/keys
4- download ca.crt, client.crt dan client.key dan paste 3 file nie ke c:/programfiles/openvpn/config
5- Pergi ke control panel -> openvpn -> utilities -> ADD TAP
6- Bukak OpenVpn GUI t dia kuar kt taskbar.
7- Klik kanan pilih udp137 -> connect.
yuhuu da siap.
