VPN | Debian 7/ Linux

Ita89 · 10. April 2015

Hallo Users, ich würde gerne einen VPN Server auf meinem Server installieren un dies verwenden. Könnt ihr mir einen guten und einfachen Tutorial empfehlen?

ToBee94 · 10. April 2015

http://gidf.de

Dann eingeben "vpn debian"

Erster Link: https://wiki.debian.org/OpenVPN

Tada -.-

Was ist so schwer an googlen....

Ita89 · 10. April 2015

Es ist nicht schwer. Aber da ich verschiedene Tutorials gesehen habe...dachte ich mir das ihr vielleicht bessere bzw. schnellere empfehlen könnt :p

seegras · 10. April 2015

https://github.com/Nyr/openvpn-install

Repo klonen, Datei ausführen, Fragen beantworten, VPN Server installiert haben & freuen

Ita89 · 10. April 2015

Ich bekomme folgende fehlermeldung (er lässt sich nicht starten) in der log:

TCP/UDP: Socket bind failed on local address [undef]: Address already in use

ToBee94 · 10. April 2015

Ja dann läuft schon etwas unter dem Port

Ita89 · 10. April 2015

Problem gelöst vielen dank an allen

/e

Ich bin nun verbunden. Sollte sich die IP eig. nicht verändert haben?

Pall. · 10. April 2015

Zitat von Ita89

Ich bin nun verbunden. Sollte sich die IP eig. nicht verändert haben?

Wieso sollte Sie das ?

ToBee94 · 10. April 2015

Zitat von Ita89

ch bin nun verbunden. Sollte sich die IP eig. nicht verändert haben?

Ja eigentlich schon

Ita89 · 10. April 2015

Bei mir ändert sich die IP Adresse nicht.

Dazu habe ich folgendes probiert. Ich habe folgendes in der conf Datei eingefügt (route-method exe). Dazu erscheint dann dies im LOG Fenster:

Zitat

Fri Apr 10 12:24:30 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Fri Apr 10 12:24:30 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Fri Apr 10 12:24:30 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Apr 10 12:24:30 2015 Need hold release from management interface, waiting...
Fri Apr 10 12:24:31 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Apr 10 12:24:31 2015 MANAGEMENT: CMD 'state on'
Fri Apr 10 12:24:31 2015 MANAGEMENT: CMD 'log all on'
Fri Apr 10 12:24:31 2015 MANAGEMENT: CMD 'hold off'
Fri Apr 10 12:24:31 2015 MANAGEMENT: CMD 'hold release'
Fri Apr 10 12:24:31 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Apr 10 12:24:31 2015 UDPv4 link local: [undef]
Fri Apr 10 12:24:31 2015 UDPv4 link remote: [AF_INET][SERVER_IP_ADRESSE]:1194
Fri Apr 10 12:24:31 2015 MANAGEMENT: >STATE:1428661471,WAIT,,,
Fri Apr 10 12:24:31 2015 MANAGEMENT: >STATE:1428661471,AUTH,,,
Fri Apr 10 12:24:31 2015 TLS: Initial packet from [AF_INET][SERVER_IP_ADRESSE]:1194, sid=c3d34d87 98491e4f
Fri Apr 10 12:24:31 2015 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Fri Apr 10 12:24:31 2015 VERIFY OK: nsCertType=SERVER
Fri Apr 10 12:24:31 2015 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Fri Apr 10 12:24:32 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 10 12:24:32 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 10 12:24:32 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 10 12:24:32 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 10 12:24:32 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Apr 10 12:24:32 2015 [changeme] Peer Connection Initiated with [AF_INET][SERVER_IP_ADRESSE]:1194
Fri Apr 10 12:24:33 2015 MANAGEMENT: >STATE:1428661473,GET_CONFIG,,,
Fri Apr 10 12:24:34 2015 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Apr 10 12:24:34 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 46.38.252.230,dhcp-option DNS 46.38.225.230,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Fri Apr 10 12:24:34 2015 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 10 12:24:34 2015 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 10 12:24:34 2015 OPTIONS IMPORT: route options modified
Fri Apr 10 12:24:34 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 10 12:24:34 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Apr 10 12:24:34 2015 MANAGEMENT: >STATE:1428661474,ASSIGN_IP,,10.8.0.6,
Fri Apr 10 12:24:34 2015 open_tun, tt->ipv6=0
Fri Apr 10 12:24:34 2015 TAP-WIN32 device [LAN-Verbindung 3] opened: \\.\Global\{B5CA9537-A0E4-4578-BC26-187652F6C99B}.tap
Fri Apr 10 12:24:34 2015 TAP-Windows Driver Version 9.9
Fri Apr 10 12:24:34 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {B5CA9537-A0E4-4578-BC26-187652F6C99B} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Fri Apr 10 12:24:34 2015 Successful ARP Flush on interface [28] {B5CA9537-A0E4-4578-BC26-187652F6C99B}
Fri Apr 10 12:24:39 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Apr 10 12:24:39 2015 C:\Windows\system32\route.exe ADD [SERVER_IP_ADRESSE] MASK 255.255.255.255 192.168.178.1
Fri Apr 10 12:24:39 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Fri Apr 10 12:24:39 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri Apr 10 12:24:39 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Fri Apr 10 12:24:39 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri Apr 10 12:24:39 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Fri Apr 10 12:24:39 2015 MANAGEMENT: >STATE:1428661479,ADD_ROUTES,,,
Fri Apr 10 12:24:39 2015 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Fri Apr 10 12:24:39 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Fri Apr 10 12:24:39 2015 Initialization Sequence Completed
Fri Apr 10 12:24:39 2015 MANAGEMENT: >STATE:1428661479,CONNECTED,SUCCESS,10.8.0.6,[SERVER_IP_ADRESSE]

Alles anzeigen

Ohne dieses "route-method exe" bekomme ich folgendes:

Zitat

Fri Apr 10 12:32:14 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Fri Apr 10 12:32:14 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Fri Apr 10 12:32:14 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Apr 10 12:32:14 2015 Need hold release from management interface, waiting...
Fri Apr 10 12:32:15 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Apr 10 12:32:15 2015 MANAGEMENT: CMD 'state on'
Fri Apr 10 12:32:15 2015 MANAGEMENT: CMD 'log all on'
Fri Apr 10 12:32:15 2015 MANAGEMENT: CMD 'hold off'
Fri Apr 10 12:32:15 2015 MANAGEMENT: CMD 'hold release'
Fri Apr 10 12:32:15 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Apr 10 12:32:15 2015 UDPv4 link local: [undef]
Fri Apr 10 12:32:15 2015 UDPv4 link remote: [AF_INET][SERVER_IP_ADRESSE]:1194
Fri Apr 10 12:32:15 2015 MANAGEMENT: >STATE:1428661935,WAIT,,,
Fri Apr 10 12:32:15 2015 MANAGEMENT: >STATE:1428661935,AUTH,,,
Fri Apr 10 12:32:15 2015 TLS: Initial packet from [AF_INET][SERVER_IP_ADRESSE]:1194, sid=addca8f9 915dd8b5
Fri Apr 10 12:32:15 2015 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Fri Apr 10 12:32:15 2015 VERIFY OK: nsCertType=SERVER
Fri Apr 10 12:32:15 2015 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=changeme, name=changeme, emailAddress=mail@host.domain
Fri Apr 10 12:32:16 2015 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 10 12:32:16 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 10 12:32:16 2015 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 10 12:32:16 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 10 12:32:16 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Apr 10 12:32:16 2015 [changeme] Peer Connection Initiated with [AF_INET][SERVER_IP_ADRESSE]:1194
Fri Apr 10 12:32:17 2015 MANAGEMENT: >STATE:1428661937,GET_CONFIG,,,
Fri Apr 10 12:32:18 2015 SENT CONTROL [changeme]: 'PUSH_REQUEST' (status=1)
Fri Apr 10 12:32:18 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 46.38.252.230,dhcp-option DNS 46.38.225.230,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Fri Apr 10 12:32:18 2015 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 10 12:32:18 2015 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 10 12:32:18 2015 OPTIONS IMPORT: route options modified
Fri Apr 10 12:32:18 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 10 12:32:18 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Apr 10 12:32:18 2015 MANAGEMENT: >STATE:1428661938,ASSIGN_IP,,10.8.0.6,
Fri Apr 10 12:32:18 2015 open_tun, tt->ipv6=0
Fri Apr 10 12:32:18 2015 TAP-WIN32 device [LAN-Verbindung 3] opened: \\.\Global\{B5CA9537-A0E4-4578-BC26-187652F6C99B}.tap
Fri Apr 10 12:32:18 2015 TAP-Windows Driver Version 9.9
Fri Apr 10 12:32:18 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {B5CA9537-A0E4-4578-BC26-187652F6C99B} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Fri Apr 10 12:32:18 2015 Successful ARP Flush on interface [28] {B5CA9537-A0E4-4578-BC26-187652F6C99B}
Fri Apr 10 12:32:23 2015 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Apr 10 12:32:23 2015 C:\Windows\system32\route.exe ADD [SERVER_IP_ADRESSE] MASK 255.255.255.255 192.168.178.1
Fri Apr 10 12:32:23 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Fri Apr 10 12:32:23 2015 Route addition via IPAPI succeeded [adaptive]
Fri Apr 10 12:32:23 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri Apr 10 12:32:23 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Apr 10 12:32:23 2015 Route addition via IPAPI succeeded [adaptive]
Fri Apr 10 12:32:23 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri Apr 10 12:32:23 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Apr 10 12:32:23 2015 Route addition via IPAPI succeeded [adaptive]
Fri Apr 10 12:32:23 2015 MANAGEMENT: >STATE:1428661943,ADD_ROUTES,,,
Fri Apr 10 12:32:23 2015 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Fri Apr 10 12:32:23 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Apr 10 12:32:23 2015 Route addition via IPAPI succeeded [adaptive]
Fri Apr 10 12:32:23 2015 Initialization Sequence Completed
Fri Apr 10 12:32:23 2015 MANAGEMENT: >STATE:1428661943,CONNECTED,SUCCESS,10.8.0.6,[SERVER_IP_ADRESSE]

Alles anzeigen

! Ja es wird als Administrator ausgeführt.