This will connect 2 Networks together via OpenVPN.
become root:
CLIENT="ion"
LUSER="steve"
portinstall openvpn
cd /usr/local/etc/ && mkdir -p openvpn/bin openvpn/certs && cd openvpn/certs
openvpn --genkey --secret shared.key.$CLIENT && chmod 600 shared.key.$CLIENT
cp /home/$LUSER/work/plumbum-ion-sysadmin/trunk/configs/common/openvpn/bin/ion-* /usr/local/etc/openvpn/bin/ && chmod 750 /usr/local/etc/openvpn/bin/*
cp /home/$LUSER/work/plumbum-ion-sysadmin/trunk/configs/common/openvpn/openvpn-CLIENT.conf /usr/local/etc/openvpn/openvpn-$CLIENT.conf
echo "/usr/local/sbin/openvpn --daemon --config /usr/local/etc/openvpn/openvpn.conf" >> /etc/rc.local
echo openvpn_enable=\"YES\" >> /etc/rc.conf
On the server:
copy the shared.key.$CLIENT to Your VPN Server. And begin the server side config.
chmod 600 /usr/local/etc/openvpn/certs/*
cd /usr/local/etc/openvpn
cp /home/$LUSER/work/plumbum-ion-sysadmin/trunk/configs/common/openvpn/openvpn-SERVER.conf openvpn-$CLIENT.conf
cp /home/$LUSER/work/plumbum-ion-sysadmin/trunk/configs/common/openvpn/bin/CLIENT-* bin/ && chmod 750 bin/CLIENT-* && cd bin/ && mv CLIENT-up.sh $CLIENT-up.sh && mv CLIENT-down.sh $CLIENT-down.sh
PKI:
cp -rvp /usr/local/share/doc/openvpn /usr/local/etc/openvpn/doc
cp -rvp /usr/local/share/doc/openvpn/easy-rsa /usr/local/etc/openvpn/
cd /usr/local/etc/openvpn/easy-rsa
. ./vars
./clean-all
./build-ca
./build-key-server server
./build-key client1
./build-dh
ion_ovpn (last edited 2008-06-10 08:27:09 by vodsl-11071)