[TriLUG] OpenVPN and CentOS 6

[Rogers, Matthew via TriLUG]

You need to copy a working template, those things are hard to write from scratch (no unlike an Xfree86.conf file...amirite?), VyprVPN and others have template OpenVPN files for download.  You may want to grab one of those and see how they configure their clients.

Matthew Rogers
Senior Security Manager
O: +1.919.329.1130    M: +1.919.691.4636
allscripts.com | matthew.rogers2 at allscripts 

Allscripts: Building open, connected communities of health
_______________________________________________

-----Original Message-----
From: TriLUG [mailto:trilug-bounces+matthew.rogers2=allscripts.com at trilug.org] On Behalf Of Brian McCullough via TriLUG
Sent: Thursday, December 15, 2016 3:45 PM
To: Triangle Linux Users Group discussion list <trilug at trilug.org>
Subject: Re: [TriLUG] OpenVPN and CentOS 6


On Thu, Dec 15, 2016 at 04:45:16PM +0000, Triangle Linux Users Group discussion list wrote:
> On Thu, 15 Dec 2016, Brian McCullough via TriLUG wrote:
> 
> >I should have asked here a long time ago ( at least a week! ), but 
> >better late....
> 
> It took me about a week to get openvpn going.

On Debian-derived machines, acting as clients, as I want this one to, it takes me perhaps 10 minutes.



> >I am running into an issue where the tun0 device is missing.  Of 
> >course, when OpenVPN ( which I installed with yum ) tries to start, it fails.
> 
> Echoing Stephen, have you done
> 
> modprobe tun

Yes, but it has no visible effect.  lsmod shows a couple of entries.



> 
> >When I look at /dev, there are none, but in /dev/net, there is a tun 
> >device.
> 
> ethernet devices (eg eth0) aren't in /dev either
> 
> I have a binary (where it came from I don't know) called tunctl. From 
> my notes I used it when messing around. It's not part of the scripts I 
> use to invoke openvpnd

Probably another package.  I don't have it on this machine.



> To scan server from client
> 
> nmap -sU -p 1194 50.55.x.x

Hmmm.  Yes, I have nmap, use it a lot, but without the tun device, OpenVPN doesn't even start.


I tried adding the make-tun command to my client configuration file, and it seemed to have some effect, but also seems to completely short-cut the startup.  That happens, but nothing else.


Hmmm, again.  I should try running OpenVPN by hand, instead of using "service start."

Nope.  That's all.  It makes a new tun device, but nothing else.


B

--
This message was sent to: Matthew <matthew.rogers2 at allscripts.com> To unsubscribe, send a blank message to trilug-leave at trilug.org from that address.
TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
Unsubscribe or edit options on the web	: http://www.trilug.org/mailman/options/trilug/matthew.rogers2%40allscripts.com
Welcome to TriLUG: http://trilug.org/welcome