CARA INSTALL OPEN VPN PADA CENTOS 5 DAN 6 32BIT ATAU 64BIT

1. masuk via bitvise buka terminal (xterm), atau via putty

2. harus dengan root access
---
pastikan TUN TAP sudah aktif
masukkan :
cat /dev/net/tun
pastikan balasannya : file descriptor in bad state 
---------------------------------
3. masukan perintah berikut :
CENTOS 5 32bit

wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.i386.rpm

CENTOS 5 64bit

wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm

CENTOS 6 32 bit

wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.i686.rpm

CENTOS 6 64bit

wget http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm

ALL CENTOS 5 

rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt

rpm -K rpmforge-release-0.5.2-2.el5.rf.*.rpm

rpm -i rpmforge-release-0.5.2-2.el5.rf.*.rpm

ALL CENTOS 6 

rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt (abaikan jika gagal)

rpm -K rpmforge-release-0.5.3-1.el6.rf.*.rpm

rpm -i rpmforge-release-0.5.3-1.el6.rf.*.rpm

yum install openvpn -y

cp -r /usr/share/doc/openvpn-2.2.2/easy-rsa/ /etc/openvpn/

PERHATIKAN CENTOS 6
butuh sedikit perubahan
yum -y install nano
nano /etc/openvpn/easy-rsa/2.0/vars
kemudian EDIT baris berikut : 

export KEY_CONFIG=`$EASY_RSA/whichopensslcnf $EASY_RSA`

MENJADI :

export KEY_CONFIG=/etc/openvpn/easy-rsa/2.0/openssl-1.0.0.cnf

kemudian SAVE (Ctrl+x) (Y) (ENTER)

cd /etc/openvpn/easy-rsa/2.0/

chmod +x *

source ./vars

./vars

./clean-all

./build-ca

cukup Enter Semua KECUALI COMMON NAME (isi sesuai keinginan)
kemudian :

./build-key-server server

Perhatikan dan Ikuti Langkahnya Baik-baik
saat muncul notifikasi (ada dua kali) pilih Y (y)
----------------------------------------

./build-dh

tunggu hingga proses selesai
 jika sudah masukkan berikut :

cp -r /etc/openvpn/easy-rsa/2.0/keys/ /etc/openvpn/keys/

cd /etc/openvpn/

Membuat Response ke TUN driver

cat > server.conf <<END

dev tun*

END 

MembuatConfigurasi server :

cat > groundworld.conf <<END

port 443
proto tcp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.9.8.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status server-tcp.log
verb 3
END

 Forwarding Port

echo 1 > /proc/sys/net/ipv4/ip_forward

Iptables Route rules

iptables -t nat -A POSTROUTING -s 10.9.8.0/24 -o venet0 -j SNAT --to xxx.xxx.xxx.xxx

xxx.xxx.xxx.xxx diatas ganti dengan IP VPS anda
 Jalankan VPN di server :

service openvpn start

Buat Client Config :

cat > groundworld.ovpn <<END

client
dev tun
proto tcp
remote xxx.xxx.xxx.xxx 443
resolv-retry infinite
route-method exe
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
verb 3
END

INGAT, ganti xxx.xxx dengan IP VPS anda
==============================
sekarang kita bungkus makanan kita :

tar -czvf config.tar.gz ca.crt groundworld.ovpn

cp config.tar.gz /root

makanan sudah jadi tinggal di download dari SFTP windows di bitvise ada di root folder

=========================
sekarang di terminal (masih)
bikin user untuk ngetest

adduser -m -s /bin/false trial

passwd trial 

masukkan 2x autentikasi pass nya 

cmiww, DONE !!!
------------------------
Tinggal Pindahkan Downloadan Config tadi, ekstrak
dan pindahkan ke C > program files > openvpn > config

Read More