A VPN server can be used to hide your real ip on your PC or Android Device, a VPN server can be used to create a secure network link when you connect to free or open wifi Hot Spots! So OpenVPN is very important for your private data safety<\/p>\n\n\n\n
First you need a VPS<\/strong><\/h4>\n\n\n\nYou will need to buy a VPS to host your VPN, Sovahost.net<\/a> offers fast VPS for only \u20ac 5.99\/mo you can see the offer following this link <\/a>but you can use this guide on any other provider.<\/p>\n\n\n\nDownload and Install Packages<\/strong><\/h4>\n\n\n\nWe can obtain the OpenVPN Access Server package for CentOS from the project\u2019s website<\/a> .
Right-click on the package that matches your version of CentOS and your machine\u2019s architecture. Select the \u201ccopy link address\u201d item or whatever option is closest.
On your CentOS VPS, download the package with curl -O (that\u2019s the letter \u201co\u201d, not a zero) followed by the URL you copied from the page. In my case, this turned out to be:<\/p>\n\n\n\nFor Centos 7<\/strong><\/h2>\n\n\n\nyum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos7.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Centos 8<\/strong><\/h2>\n\n\n\nyum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos8.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 22.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 20.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 18<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 16<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb [arch=amd64] http:\/\/as-repository.openvpn.net\/as\/debian xenial main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 10<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian buster main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 9<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian stretch main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nAfter installing the package, an administration account is created called OpenVPN. However, no password has been set.
Set a password for the administrator\u2019s account by typing:<\/p>\n\n\n\n
sudo passwd openvpn<\/code><\/pre>\n\n\n\nNow, the command line configuration steps are complete. The rest of the guide will focus on configuring options through the web interface.<\/p>\n\n\n\n
Accessing the Web Interface<\/strong><\/h4>\n\n\n\nWe can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
<\/p>\n\n\n\n
We can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
You will get a warning that the site\u2019s SSL certificates are not trusted:<\/p>\n\n\n\n![\"Image\"](\"https:\/\/www.systemfreaks.com\/blog\/wp-content\/uploads\/2024\/02\/image-3.png\")
<\/a><\/figure>\n\n\n\nThis is expected and perfectly fine. All that this is telling us is that OpenVPN is using a self-signed SSL certificate, which is not trusted by default by our browser. We can click on the \u201cProceed anyway\u201d button or whatever similar option you have.
Note: If you are unable to connect to the web interface, there\u2019s a chance that OpenVPN is bound to the wrong network interface. You can verify this by typing:<\/p>\n\n\n\n
sudo netstat -plunt | grep openvpn<\/code><\/pre>\n\n\n\nIf the response does not show your server\u2019s public IP address, you will need to manually reconfigure it by typing:<\/p>\n\n\n\n
sudo \/usr\/local\/openvpn_as\/bin\/ovpn-init<\/code><\/pre>\n\n\n\nDelete the current configuration by typing DELETE at the prompt. Next, accept the license agreement and press ENTER to mark this as the primary server. In the next prompt, select (1) all interfaces: 0.0.0.0 to bind to all interfaces. This will ensure that the access server is available in spite of a bind error in the OpenVPN installer. Press ENTER to accept the default values of the remaining prompts.
After reconfiguring, you should be able to access the web interface after accepting the SSL certificate in your browser.
You will be presented with the admin login page. Use the username openvpn and the password you set for this user:<\/p>\n\n\n\n![\"Image\"](\"https:\/\/www.systemfreaks.com\/blog\/wp-content\/uploads\/2024\/02\/image-1.png\")
<\/figure>\n\n\n\nYou will be taken to the OpenVPN Access Server\u2019s EULA, which you will have to agree to if you wish to continue:<\/p>\n\n\n\n![\"Image\"](\"https:\/\/www.systemfreaks.com\/blog\/wp-content\/uploads\/2024\/02\/image-5.png\")
<\/figure>\n\n\n\nOnce you log in, you can see the administrative interface, complete with some useful at-a-glance stats on the landing page:<\/p>\n\n\n\n![\"Image\"](\"https:\/\/www.systemfreaks.com\/blog\/wp-content\/uploads\/2024\/02\/image-6.png\")
<\/figure>\n\n\n\nHere, you can configure your VPN server. The access server separates the web interface and the actual VPN access and each can be configured independently.
For instance, if you go to the Server Network Settings in the left-hand menu, you will see a page where you can configure the port and interface that each component operates on. You can also specify the address pool that will be available to the clients.
Another thing you might want to do is add users and configure the authentication methods. You can add VPN users that match your system users, or add users that you might be controlling through an LDAP server.
Logging in as a Client
When you are finished configuring things as an admin, you can visit the client portion by going to your IP address or domain name followed by port 943:
https:\/\/server_ip_or_domain:943
You will have to type in a username of a user that you have configured VPN access for:<\/p>\n\n\n\n![\"Image\"](\"https:\/\/www.systemfreaks.com\/blog\/wp-content\/uploads\/2024\/02\/image-2.png\")
<\/figure>\n\n\n\nIf you the user that you logged in as has been designated as an OpenVPN admin account, you will see an \u201cAdmin\u201d button that can be used to take you back to the admin control panel. Either way, you will be taken to a page that will allow you to download software for your client to connect to the VPN server:<\/p>\n\n\n\n![\"Image\"](\"https:\/\/www.systemfreaks.com\/blog\/wp-content\/uploads\/2024\/02\/image-4.png\")
<\/figure>\n\n\n\nIf your desktop is Windows or OS X, or if you have an android or iOS device, you can download an OpenVPN Connect client that will operate within your browser. If your desktop is a Linux machine, you will be asked to download the normal VPN client.
You should follow the directions of the client of your choice. If you are using the Linux client, you\u2019ll need to download the connection settings profile by clicking on the \u201cYourself\u201d link:<\/p>\n\n\n\n![\"Image\"](\"https:\/\/www.systemfreaks.com\/blog\/wp-content\/uploads\/2024\/02\/image.png\")
<\/a><\/figure>\n\n\n\nUsing the regular Linux openvpn client, you can connect using something like this:
sudo openvpn \u2013config client.ovpn
Conclusion<\/strong>
Now, you should have a portal that can be used to configure your VPN access. This is an easy to manage interface that can be set up once and configured on-the-fly. It automatically generates valid configuration files for your users to connect to the server, which can save a lot of headaches with explaining how to configure access.<\/p>\n\n\n\nConnect Using your Android Device<\/h3>\n\n\n\n
You can download the openVPN application from google store : https:\/\/play.google.com\/store\/apps\/details?id=net.openvpn.openvpn&hl=en<\/a><\/p>\n\n\n\nConnect Using your PC<\/h3>\n\n\n\n
Download and Install Packages<\/strong><\/h4>\n\n\n\nWe can obtain the OpenVPN Access Server package for CentOS from the project\u2019s website<\/a> .
Right-click on the package that matches your version of CentOS and your machine\u2019s architecture. Select the \u201ccopy link address\u201d item or whatever option is closest.
On your CentOS VPS, download the package with curl -O (that\u2019s the letter \u201co\u201d, not a zero) followed by the URL you copied from the page. In my case, this turned out to be:<\/p>\n\n\n\nFor Centos 7<\/strong><\/h2>\n\n\n\nyum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos7.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Centos 8<\/strong><\/h2>\n\n\n\nyum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos8.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 22.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 20.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 18<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 16<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb [arch=amd64] http:\/\/as-repository.openvpn.net\/as\/debian xenial main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 10<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian buster main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 9<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian stretch main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nAfter installing the package, an administration account is created called OpenVPN. However, no password has been set.
Set a password for the administrator\u2019s account by typing:<\/p>\n\n\n\n
sudo passwd openvpn<\/code><\/pre>\n\n\n\nNow, the command line configuration steps are complete. The rest of the guide will focus on configuring options through the web interface.<\/p>\n\n\n\n
Accessing the Web Interface<\/strong><\/h4>\n\n\n\nWe can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
<\/p>\n\n\n\n
We can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
You will get a warning that the site\u2019s SSL certificates are not trusted:<\/p>\n\n\n\n<\/a><\/figure>\n\n\n\nThis is expected and perfectly fine. All that this is telling us is that OpenVPN is using a self-signed SSL certificate, which is not trusted by default by our browser. We can click on the \u201cProceed anyway\u201d button or whatever similar option you have.
Note: If you are unable to connect to the web interface, there\u2019s a chance that OpenVPN is bound to the wrong network interface. You can verify this by typing:<\/p>\n\n\n\n
sudo netstat -plunt | grep openvpn<\/code><\/pre>\n\n\n\nIf the response does not show your server\u2019s public IP address, you will need to manually reconfigure it by typing:<\/p>\n\n\n\n
sudo \/usr\/local\/openvpn_as\/bin\/ovpn-init<\/code><\/pre>\n\n\n\nDelete the current configuration by typing DELETE at the prompt. Next, accept the license agreement and press ENTER to mark this as the primary server. In the next prompt, select (1) all interfaces: 0.0.0.0 to bind to all interfaces. This will ensure that the access server is available in spite of a bind error in the OpenVPN installer. Press ENTER to accept the default values of the remaining prompts.
After reconfiguring, you should be able to access the web interface after accepting the SSL certificate in your browser.
You will be presented with the admin login page. Use the username openvpn and the password you set for this user:<\/p>\n\n\n\n<\/figure>\n\n\n\nYou will be taken to the OpenVPN Access Server\u2019s EULA, which you will have to agree to if you wish to continue:<\/p>\n\n\n\n<\/figure>\n\n\n\nOnce you log in, you can see the administrative interface, complete with some useful at-a-glance stats on the landing page:<\/p>\n\n\n\n<\/figure>\n\n\n\nHere, you can configure your VPN server. The access server separates the web interface and the actual VPN access and each can be configured independently.
For instance, if you go to the Server Network Settings in the left-hand menu, you will see a page where you can configure the port and interface that each component operates on. You can also specify the address pool that will be available to the clients.
Another thing you might want to do is add users and configure the authentication methods. You can add VPN users that match your system users, or add users that you might be controlling through an LDAP server.
Logging in as a Client
When you are finished configuring things as an admin, you can visit the client portion by going to your IP address or domain name followed by port 943:
https:\/\/server_ip_or_domain:943
You will have to type in a username of a user that you have configured VPN access for:<\/p>\n\n\n\n<\/figure>\n\n\n\nIf you the user that you logged in as has been designated as an OpenVPN admin account, you will see an \u201cAdmin\u201d button that can be used to take you back to the admin control panel. Either way, you will be taken to a page that will allow you to download software for your client to connect to the VPN server:<\/p>\n\n\n\n<\/figure>\n\n\n\nIf your desktop is Windows or OS X, or if you have an android or iOS device, you can download an OpenVPN Connect client that will operate within your browser. If your desktop is a Linux machine, you will be asked to download the normal VPN client.
You should follow the directions of the client of your choice. If you are using the Linux client, you\u2019ll need to download the connection settings profile by clicking on the \u201cYourself\u201d link:<\/p>\n\n\n\n<\/a><\/figure>\n\n\n\nUsing the regular Linux openvpn client, you can connect using something like this:
sudo openvpn \u2013config client.ovpn
Conclusion<\/strong>
Now, you should have a portal that can be used to configure your VPN access. This is an easy to manage interface that can be set up once and configured on-the-fly. It automatically generates valid configuration files for your users to connect to the server, which can save a lot of headaches with explaining how to configure access.<\/p>\n\n\n\nConnect Using your Android Device<\/h3>\n\n\n\n
You can download the openVPN application from google store : https:\/\/play.google.com\/store\/apps\/details?id=net.openvpn.openvpn&hl=en<\/a><\/p>\n\n\n\nConnect Using your PC<\/h3>\n\n\n\n
Right-click on the package that matches your version of CentOS and your machine\u2019s architecture. Select the \u201ccopy link address\u201d item or whatever option is closest.
On your CentOS VPS, download the package with curl -O (that\u2019s the letter \u201co\u201d, not a zero) followed by the URL you copied from the page. In my case, this turned out to be:<\/p>\n\n\n\n
For Centos 7<\/strong><\/h2>\n\n\n\nyum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos7.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Centos 8<\/strong><\/h2>\n\n\n\nyum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos8.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 22.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 20.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 18<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 16<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb [arch=amd64] http:\/\/as-repository.openvpn.net\/as\/debian xenial main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 10<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian buster main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 9<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian stretch main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nAfter installing the package, an administration account is created called OpenVPN. However, no password has been set.
Set a password for the administrator\u2019s account by typing:<\/p>\n\n\n\n
sudo passwd openvpn<\/code><\/pre>\n\n\n\nNow, the command line configuration steps are complete. The rest of the guide will focus on configuring options through the web interface.<\/p>\n\n\n\n
Accessing the Web Interface<\/strong><\/h4>\n\n\n\nWe can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
<\/p>\n\n\n\n
We can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
You will get a warning that the site\u2019s SSL certificates are not trusted:<\/p>\n\n\n\n<\/a><\/figure>\n\n\n\nThis is expected and perfectly fine. All that this is telling us is that OpenVPN is using a self-signed SSL certificate, which is not trusted by default by our browser. We can click on the \u201cProceed anyway\u201d button or whatever similar option you have.
Note: If you are unable to connect to the web interface, there\u2019s a chance that OpenVPN is bound to the wrong network interface. You can verify this by typing:<\/p>\n\n\n\n
sudo netstat -plunt | grep openvpn<\/code><\/pre>\n\n\n\nIf the response does not show your server\u2019s public IP address, you will need to manually reconfigure it by typing:<\/p>\n\n\n\n
sudo \/usr\/local\/openvpn_as\/bin\/ovpn-init<\/code><\/pre>\n\n\n\nDelete the current configuration by typing DELETE at the prompt. Next, accept the license agreement and press ENTER to mark this as the primary server. In the next prompt, select (1) all interfaces: 0.0.0.0 to bind to all interfaces. This will ensure that the access server is available in spite of a bind error in the OpenVPN installer. Press ENTER to accept the default values of the remaining prompts.
After reconfiguring, you should be able to access the web interface after accepting the SSL certificate in your browser.
You will be presented with the admin login page. Use the username openvpn and the password you set for this user:<\/p>\n\n\n\n<\/figure>\n\n\n\nYou will be taken to the OpenVPN Access Server\u2019s EULA, which you will have to agree to if you wish to continue:<\/p>\n\n\n\n<\/figure>\n\n\n\nOnce you log in, you can see the administrative interface, complete with some useful at-a-glance stats on the landing page:<\/p>\n\n\n\n<\/figure>\n\n\n\nHere, you can configure your VPN server. The access server separates the web interface and the actual VPN access and each can be configured independently.
For instance, if you go to the Server Network Settings in the left-hand menu, you will see a page where you can configure the port and interface that each component operates on. You can also specify the address pool that will be available to the clients.
Another thing you might want to do is add users and configure the authentication methods. You can add VPN users that match your system users, or add users that you might be controlling through an LDAP server.
Logging in as a Client
When you are finished configuring things as an admin, you can visit the client portion by going to your IP address or domain name followed by port 943:
https:\/\/server_ip_or_domain:943
You will have to type in a username of a user that you have configured VPN access for:<\/p>\n\n\n\n<\/figure>\n\n\n\nIf you the user that you logged in as has been designated as an OpenVPN admin account, you will see an \u201cAdmin\u201d button that can be used to take you back to the admin control panel. Either way, you will be taken to a page that will allow you to download software for your client to connect to the VPN server:<\/p>\n\n\n\n<\/figure>\n\n\n\nIf your desktop is Windows or OS X, or if you have an android or iOS device, you can download an OpenVPN Connect client that will operate within your browser. If your desktop is a Linux machine, you will be asked to download the normal VPN client.
You should follow the directions of the client of your choice. If you are using the Linux client, you\u2019ll need to download the connection settings profile by clicking on the \u201cYourself\u201d link:<\/p>\n\n\n\n<\/a><\/figure>\n\n\n\nUsing the regular Linux openvpn client, you can connect using something like this:
sudo openvpn \u2013config client.ovpn
Conclusion<\/strong>
Now, you should have a portal that can be used to configure your VPN access. This is an easy to manage interface that can be set up once and configured on-the-fly. It automatically generates valid configuration files for your users to connect to the server, which can save a lot of headaches with explaining how to configure access.<\/p>\n\n\n\nConnect Using your Android Device<\/h3>\n\n\n\n
You can download the openVPN application from google store : https:\/\/play.google.com\/store\/apps\/details?id=net.openvpn.openvpn&hl=en<\/a><\/p>\n\n\n\nConnect Using your PC<\/h3>\n\n\n\n
yum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos7.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Centos 8<\/strong><\/h2>\n\n\n\nyum -y install https:\/\/as-repository.openvpn.net\/as-repo-centos8.rpm\nyum -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 22.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 20.04<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 18<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian bionic main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Ubuntu 16<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb [arch=amd64] http:\/\/as-repository.openvpn.net\/as\/debian xenial main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 10<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian buster main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nFor Debian 9<\/h2>\n\n\n\napt update && apt -y install ca-certificates wget net-tools gnupg\nwget -qO - https:\/\/as-repository.openvpn.net\/as-repo-public.gpg | apt-key add -\necho \"deb http:\/\/as-repository.openvpn.net\/as\/debian stretch main\">\/etc\/apt\/sources.list.d\/openvpn-as-repo.list\napt update && apt -y install openvpn-as<\/code><\/pre>\n\n\n\nAfter installing the package, an administration account is created called OpenVPN. However, no password has been set.
Set a password for the administrator\u2019s account by typing:<\/p>\n\n\n\n
sudo passwd openvpn<\/code><\/pre>\n\n\n\nNow, the command line configuration steps are complete. The rest of the guide will focus on configuring options through the web interface.<\/p>\n\n\n\n
Accessing the Web Interface<\/strong><\/h4>\n\n\n\nWe can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
<\/p>\n\n\n\n
We can access our VPN portal by going to our server\u2019s IP address or domain name, at port 943. The server operates using TLS, so we will need to specify the HTTPS protocol.
For our initial interaction, we actually want to go to the administrative interface, which is the same, except ending with \/admin:
https:\/\/server_ip_or_domain:943\/admin
You will get a warning that the site\u2019s SSL certificates are not trusted:<\/p>\n\n\n\n<\/a><\/figure>\n\n\n\nThis is expected and perfectly fine. All that this is telling us is that OpenVPN is using a self-signed SSL certificate, which is not trusted by default by our browser. We can click on the \u201cProceed anyway\u201d button or whatever similar option you have.
Note: If you are unable to connect to the web interface, there\u2019s a chance that OpenVPN is bound to the wrong network interface. You can verify this by typing:<\/p>\n\n\n\n
sudo netstat -plunt | grep openvpn<\/code><\/pre>\n\n\n\nIf the response does not show your server\u2019s public IP address, you will need to manually reconfigure it by typing:<\/p>\n\n\n\n
sudo \/usr\/local\/openvpn_as\/bin\/ovpn-init<\/code><\/pre>\n\n\n\nDelete the current configuration by typing DELETE at the prompt. Next, accept the license agreement and press ENTER to mark this as the primary server. In the next prompt, select (1) all interfaces: 0.0.0.0 to bind to all interfaces. This will ensure that the access server is available in spite of a bind error in the OpenVPN installer. Press ENTER to accept the default values of the remaining prompts.
After reconfiguring, you should be able to access the web interface after accepting the SSL certificate in your browser.
You will be presented with the admin login page. Use the username openvpn and the password you set for this user:<\/p>\n\n\n\n<\/figure>\n\n\n\nYou will be taken to the OpenVPN Access Server\u2019s EULA, which you will have to agree to if you wish to continue:<\/p>\n\n\n\n<\/figure>\n\n\n\nOnce you log in, you can see the administrative interface, complete with some useful at-a-glance stats on the landing page:<\/p>\n\n\n\n<\/figure>\n\n\n\nHere, you can configure your VPN server. The access server separates the web interface and the actual VPN access and each can be configured independently.
For instance, if you go to the Server Network Settings in the left-hand menu, you will see a page where you can configure the port and interface that each component operates on. You can also specify the address pool that will be available to the clients.
Another thing you might want to do is add users and configure the authentication methods. You can add VPN users that match your system users, or add users that you might be controlling through an LDAP server.
Logging in as a Client
When you are finished configuring things as an admin, you can visit the client portion by going to your IP address or domain name followed by port 943:
https:\/\/server_ip_or_domain:943
You will have to type in a username of a user that you have configured VPN access for:<\/p>\n\n\n\n<\/figure>\n\n\n\nIf you the user that you logged in as has been designated as an OpenVPN admin account, you will see an \u201cAdmin\u201d button that can be used to take you back to the admin control panel. Either way, you will be taken to a page that will allow you to download software for your client to connect to the VPN server:<\/p>\n\n\n\n<\/figure>\n\n\n\nIf your desktop is Windows or OS X, or if you have an android or iOS device, you can download an OpenVPN Connect client that will operate within your browser. If your desktop is a Linux machine, you will be asked to download the normal VPN client.
You should follow the directions of the client of your choice. If you are using the Linux client, you\u2019ll need to download the connection settings profile by clicking on the \u201cYourself\u201d link:<\/p>\n\n\n\n<\/a><\/figure>\n\n\n\nUsing the regular Linux openvpn client, you can connect using something like this:
sudo openvpn \u2013config client.ovpn
Conclusion<\/strong>
Now, you should have a portal that can be used to configure your VPN access. This is an easy to manage interface that can be set up once and configured on-the-fly. It automatically generates valid configuration files for your users to connect to the server, which can save a lot of headaches with explaining how to configure access.<\/p>\n\n\n\nConnect Using your Android Device<\/h3>\n\n\n\n
You can download the openVPN application from google store : https:\/\/play.google.com\/store\/apps\/details?id=net.openvpn.openvpn&hl=en<\/a><\/p>\n\n\n\nConnect Using your PC<\/h3>\n\n\n\n