- OpenVPN Cookbook - Second Edition
- OpenVPN Cookbook - Second Edition
- Credits
- About the Author
- About the Reviewer
- www.PacktPub.com
- Customer Feedback
- Preface
- 1. Point-to-Point Networks
- 2. Client-server IP-only Networks
- Introduction
- Setting up the public and private keys
- A simple configuration
- Server-side routing
- Adding IPv6 support
- Using client-config-dir files
- Routing - subnets on both sides
- Redirecting the default gateway
- Redirecting the IPv6 default gateway
- Using an ifconfig-pool block
- Using the status file
- The management interface
- Proxy ARP
- 3. Client-server Ethernet-style Networks
- 4. PKI, Certificates, and OpenSSL
- Introduction
- Certificate generation
- OpenSSL tricks - x509, pkcs12, verify output
- Revoking certificates
- The use of CRLs
- Checking expired/revoked certificates
- Intermediary CAs
- Multiple CAs - stacking, using the capath directive
- Determining the crypto library to be used
- Crypto features of OpenSSL and PolarSSL
- Pushing ciphers
- Elliptic curve support
- 5. Scripting and Plugins
- 6. Troubleshooting OpenVPN - Configurations
- Introduction
- Cipher mismatches
- TUN versus TAP mismatches
- Compression mismatches
- Key mismatches
- Troubleshooting MTU and tun-mtu issues
- Troubleshooting network connectivity
- Troubleshooting client-config-dir issues
- Troubleshooting multiple remote issues
- Troubleshooting bridging issues
- How to read the OpenVPN log files
- 7. Troubleshooting OpenVPN - Routing
- Introduction
- The missing return route
- Missing return routes when iroute is used
- All clients function except the OpenVPN endpoints
- Source routing
- Routing and permissions on Windows
- Unable to change Windows network location
- Troubleshooting client-to-client traffic routing
- Understanding the MULTI: bad source warnings
- Failure when redirecting the default gateway
- 8. Performance Tuning
- 9. OS Integration
- Introduction
- Linux - using NetworkManager
- Linux - using pull-resolv-conf
- Windows - elevated privileges
- Windows - using the CryptoAPI store
- Windows - updating the DNS cache
- Windows - running OpenVPN as a service
- Windows - public versus private network adapters
- Windows - routing methods
- Windows 8+ - ensuring DNS lookups are secure
- Android - using the OpenVPN for Android clients
- Push-peer-info - pushing options to Android clients
- 10. Advanced Configuration
- Introduction
- Including configuration files in config files
- Multiple remotes and remote-random
- Inline certificates
- Connection blocks
- Details of ifconfig-pool-persist
- Connecting using a SOCKS proxy
- Connecting via an HTTP proxy
- Connecting via an HTTP proxy with authentication
- IP-less setups - ifconfig-noexec
- Port sharing with an HTTPS server
- Routing features - redirect-private, allow-pull-fqdn
- Filtering out pushed options
- Handing out the public IPs
In this chapter, we will cover the following topics:
- Simple configuration - non-bridged
- Enabling client-to-client traffic
- Bridging - Linux
- Bridging - Windows
- Checking broadcast and non-IP traffic
- An external DHCP
- Using the status file
- The management interface
- Integrating IPv6 into TAP-style networks
The recipes in this chapter will cover the deployment model of a single server with multiple remote clients capable of forwarding Ethernet traffic.
We will look at several common configurations, including bridging, the use of an external DHCP server, and also the use of the OpenVPN status file. Please note that bridging should only be used as a last resort. Most of the functionality provided by bridging can be achieved through other methods. Moreover, there are many disadvantages to using bridging, especially in terms of performance and security.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.