Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


OpenVPN solution for OpenVZ?
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

OpenVPN solution for OpenVZ?

Hi all

I have been trying to get some appliance templates for OpenVZ and have made 1-2 myself as well.

Now I am on to a VPN template. And have been stuck miserably in finding a solution. Most of my clients are actually buying VPS for providing VPN services to their clients. So I am looking for a template for OpenVPN/any other VPN platform for OpenVZ.

I have had a look at EasyOpenVPN template and 1-2 other installers which didn't quite work.
Also had a look at touchvps but they don't seem reliable.

I am using SolusVM right now. Can someone suggest me an ideal solution for it? Even if I have to pay for the template it's ok, as long as it works fine...

Btw, Proxmox(OpenVZ) templates do work just fine on Solus more often than not. I have found a lot of those created in Proxmox work fine on SolusVM.

Comments

  • If you're lazy you can install OpenVPN AS, which includes a web management interface.

    http://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/install-openvpn-access-server-on-linux-debian-6/

  • Is it possible to install on Linux CentOS?

  • Yes, it is possible.

    For, CentOS 6.4 X64

    yum upgrade -y

    wget http://swupdate.openvpn.org/as/openvpn-as-2.0-CentOS6.x86_64.rpm

    rpm -i openvpn-as-2.0-CentOS6.x86_64.rpm

    passwd openvpn

  • @comeback said:
    Is it possible to install on Linux CentOS?

    What ? Asking the question and then responding to yourself :D

  • @alexvolk said:
    What ? Asking the question and then responding to yourself :D

    I found the solution, so I'm sharing

  • Hmm. I have heard a bit about OpenVPN AS. But after installing it, I suppose you need to do some more configuration for setting up a proper VPS with the config file and certificate for client to use. Right?

  • @jainy25 said:
    Hmm. I have heard a bit about OpenVPN AS. But after installing it, I suppose you need to do some more configuration for setting up a proper VPS with the config file and certificate for client to use. Right?

    Nope, it's all done for you. Go to the login URL (https://yourip:943/) and you can download the .ovpn profile to use in an OpenVPN client.

  • @awson said: Nope, it's all done for you. Go to the login URL (https://yourip:943/) and you can download the .ovpn profile to use in an OpenVPN client.

    Hmm ok. So I was playing around with it. I was able to connect to the VPN. But I can't browse the net. Are there any more commands that have to be given in order to get the internet working?

  • trewqtrewq Administrator, Patron Provider

    Probably something to do with your IPtables rules. Have you set any?

  • @trewq said:
    Probably something to do with your IPtables rules. Have you set any?

    No not really. I didn't change any IPtable rule. I thought OpenVPN AS takes care of it.

    Do I need to make any changes?

  • The output of iptables -L -t nat -n is following:

    Chain PREROUTING (policy ACCEPT)

    target prot opt source destination

    AS0_NAT_PRE_REL_EST all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED

    AS0_DPFWD_UDP udp -- 0.0.0.0/0 (myvpsip) udp dpt:1194 state NEW

    AS0_DPFWD_TCP tcp -- 0.0.0.0/0 (myvpsip) tcp dpt:443 state NEW

    Chain POSTROUTING (policy ACCEPT)

    target prot opt source destination

    AS0_NAT_POST_REL_EST all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED

    AS0_NAT_PRE all -- 0.0.0.0/0 0.0.0.0/0 mark match 0x2000000/0x2000000

    SNAT all -- 10.8.0.0/24 0.0.0.0/0 to:(myvpsip)

    MASQUERADE all -- 192.168.150.0/24 0.0.0.0/0

    MASQUERADE all -- 10.8.0.0/24 0.0.0.0/0

    Chain OUTPUT (policy ACCEPT)

    target prot opt source destination

    Chain AS0_DPFWD_TCP (1 references)

    target prot opt source destination

    DNAT tcp -- 0.0.0.0/0 0.0.0.0/0 to:(myvpsip):914

    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

    Chain AS0_DPFWD_UDP (1 references)

    target prot opt source destination

    DNAT udp -- 0.0.0.0/0 0.0.0.0/0 to:(myvpsip):916

    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

    Chain AS0_NAT (2 references)

    target prot opt source destination

    SNAT all -- 0.0.0.0/0 0.0.0.0/0 to:(myvpsip)

    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

    Chain AS0_NAT_POST_REL_EST (1 references)

    target prot opt source destination

    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

    Chain AS0_NAT_PRE (1 references)

    target prot opt source destination

    AS0_NAT_TEST all -- 0.0.0.0/0 192.168.0.0/16

    AS0_NAT_TEST all -- 0.0.0.0/0 172.16.0.0/12

    AS0_NAT_TEST all -- 0.0.0.0/0 10.0.0.0/8

    AS0_NAT all -- 0.0.0.0/0 0.0.0.0/0

    Chain AS0_NAT_PRE_REL_EST (1 references)

    target prot opt source destination

    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

    Chain AS0_NAT_TEST (3 references)

    target prot opt source destination

    ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

    ACCEPT all -- 0.0.0.0/0 172.27.224.0/20

    AS0_NAT all -- 0.0.0.0/0 0.0.0.0/0

    So I stand clueless right now. I don't mind giving someone the VPS access. It is a test VPS anyways.

  • I've never had to mess around with iptables when using OpenVPN AS.

  • @jainy25 said:
    Hmm ok. So I was playing around with it. I was able to connect to the VPN. But I can't browse the net. Are there any more commands that have to be given in order to get the internet working?

    Did you change the DNS server to Google public DNS for example ?

    If not here we go: Admin panel -> Configuration -> VPN Settings -> DNS Settings -> Have clients use these DNS servers: and put your favorite working dns here.

    That's all.

  • jainy25jainy25 Member
    edited October 2013

    Well. It worked. I just recreated the VPS and reinstalled it. And it worked! Weird why it didn't work last time...

    Since I don't know how to setup inithooks(like in Turnkey Appliances), I guess I'll leave it till the part where the VPS client will just have to run the command to install the AS.

    Just wondering, are there are any other alternatives to OpenVPN and PPTP?

  • GunterGunter Member
    edited October 2013

    @jainy25 said:
    Well. It worked. I just recreated the VPS and reinstalled it. And it worked! Weird why it didn't work last time...

    Since I don't know how to setup inithooks(like in Turnkey Appliances), I guess I'll leave it till the part where the VPS client will just have to run the command to install the AS.

    Just wondering, are there are any other alternatives to OpenVPN and PPTP?

    L2TP (w/ IPSEC / SWAN), Tinc, TVPN, SoftEther (based off of L2TP), SSTP, Cisco Systems VPN / Cisco AnyConnect Secure Mobility, LogMeIn Hamachi,

Sign In or Register to comment.