Openvpn - Revision history

Pio2pio: /* Install OpenVPN3 client */

2021-07-14T09:22:58Z

Install OpenVPN3 client

@@ Line 9: / Line 9: @@
 sudo apt update
 sudo apt install openvpn3
 </source>

2020-08-19T07:31:48Z

OpenVPN Server

← Older revision		Revision as of 09:31, 19 August 2020
Line 156:		Line 156:
	./sacli --user <USER> --lock 0 GoogleAuthRegen #unlocked, user can scan		./sacli --user <USER> --lock 0 GoogleAuthRegen #unlocked, user can scan
	./sacli -u joe GoogleAuthRegen #regenerate Google token, so a user can scan QR code again		./sacli -u joe GoogleAuthRegen #regenerate Google token, so a user can scan QR code again
	['AAAAAAAAAEXAMPLE', 'otpauth://totp/OpenVPN:joe@ivpn.acme.com?secret=~~Z*******B~~&issuer=OpenVPN']		['AAAAAAAAAEXAMPLE', 'otpauth://totp/OpenVPN:joe@ivpn.acme.com?secret=AAAAAAAAAEXAMPLE&issuer=OpenVPN']

	#./sacli		#./sacli

2020-08-19T07:31:27Z

OpenVPN Server

← Older revision		Revision as of 09:31, 19 August 2020
Line 156:		Line 156:
	./sacli --user <USER> --lock 0 GoogleAuthRegen #unlocked, user can scan		./sacli --user <USER> --lock 0 GoogleAuthRegen #unlocked, user can scan
	./sacli -u joe GoogleAuthRegen #regenerate Google token, so a user can scan QR code again		./sacli -u joe GoogleAuthRegen #regenerate Google token, so a user can scan QR code again
	['~~Z*******B~~', 'otpauth://totp/OpenVPN:joe@ivpn.acme.com?secret=Z*****B&issuer=OpenVPN']		['AAAAAAAAAEXAMPLE', 'otpauth://totp/OpenVPN:joe@ivpn.acme.com?secret=Z*******B&issuer=OpenVPN']

	#./sacli		#./sacli

2020-08-19T07:30:48Z

OpenVPN Server

← Older revision		Revision as of 09:30, 19 August 2020
Line 126:		Line 126:
	<source lang=bash>		<source lang=bash>
	cd /usr/local/openvpn_as/scripts		cd /usr/local/openvpn_as/scripts
	sudo ./confdba -us -p joe #display info about a user		sudo ./confdba -us # display all users
			sudo ./confdba -us -p joe # display info about a specific user
	{		{
	"joe": {		"joe": {
	"access_to.0": "+NAT:10.0.0.0/8",		"access_to.0": "+NAT:10.0.0.0/8",
	"pvt_google_auth_secret": "~~Z********B~~", #this is GoogleAuth MFA secret_token that a user scans as QR code		"pvt_google_auth_secret": "AAAAAAAAAEXAMPLE", # this is GoogleAuth MFA secret_token that a user scans as QR code
	"pvt_google_auth_secret_locked": "false",		"pvt_google_auth_secret_locked": "false", # \| it also works with 'oathtool'
	"pvt_password_digest": "30******bb71",		"pvt_password_digest": "30******bb71", # \| oathtool --base32 --totp AAAAAAAAAEXAMPLE
	"type": "user_compile"		"type": "user_compile"
	}		}

2020-07-23T17:57:18Z

Install OpenVPN3 client

← Older revision		Revision as of 19:57, 23 July 2020
Line 69:		Line 69:
	<source lang=bash>		<source lang=bash>
	tail -f /var/log/syslog		tail -f /var/log/syslog
			journalctl -u dbus --follow
	...		...
	Jul 23 17:59:12 laptop-1 NetworkManager[1148]: <info> [1595523552.1879] device (tun0): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'external')		Jul 23 17:59:12 laptop-1 NetworkManager[1148]: <info> [1595523552.1879] device (tun0): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'external')

2020-07-23T17:46:46Z

Install OpenVPN3 client

@@ Line 87: / Line 87: @@
       TUN_BYTES_IN...............27836
       TUN_PACKETS_IN...............210
 </source>

2020-07-23T17:38:38Z

@@ Line 26: / Line 26: @@
-;New tunnel interface
+Once connected you can see the session details
 <source lang=bash>
 : tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500

2020-07-23T17:35:29Z

Install OpenVPN3 client

@@ Line 73: / Line 73: @@
       TUN_BYTES_IN...............27836
       TUN_PACKETS_IN...............210
 </source>

2020-07-23T17:26:22Z

Install OpenVPN3 client

@@ Line 60: / Line 60: @@
 Jul 23 17:59:12 laptop-1 NetworkManager[1148]: <info>  [1595523552.1894] device (tun0): Activation: successful, device activated.
 Jul 23 17:59:22 laptop-1 systemd[1]: NetworkManager-dispatcher.service: Succeeded.
 </source>

2020-07-23T17:20:45Z

Install OpenVPN3 client

← Older revision		Revision as of 19:20, 23 July 2020
Line 17:		Line 17:
	$ OPENVPN_CONFIG=~/environment/vpn.acme.net.ovpn		$ OPENVPN_CONFIG=~/environment/vpn.acme.net.ovpn
	$ openvpn3 session-start --config ${OPENVPN_CONFIG}		$ openvpn3 session-start --config ${OPENVPN_CONFIG}
	Using configuration profile from file: vpn~~-eu~~.~~contactengine~~.net-3.ovpn		Using configuration profile from file: vpn.acme.net.ovpn
	Session path: /net/openvpn/v3/sessions/180fa892s3ca1s4bf7s84eesdfe524d70a63		Session path: /net/openvpn/v3/sessions/180fa892s3ca1s4bf7s84eesdfe524d70a63
	Auth User name: piotr		Auth User name: piotr