- OpenVPN Cookbook - Second Edition
- OpenVPN Cookbook - Second Edition
- Credits
- About the Author
- About the Reviewer
- www.PacktPub.com
- Customer Feedback
- Preface
- 1. Point-to-Point Networks
- 2. Client-server IP-only Networks
- Introduction
- Setting up the public and private keys
- A simple configuration
- Server-side routing
- Adding IPv6 support
- Using client-config-dir files
- Routing - subnets on both sides
- Redirecting the default gateway
- Redirecting the IPv6 default gateway
- Using an ifconfig-pool block
- Using the status file
- The management interface
- Proxy ARP
- 3. Client-server Ethernet-style Networks
- 4. PKI, Certificates, and OpenSSL
- Introduction
- Certificate generation
- OpenSSL tricks - x509, pkcs12, verify output
- Revoking certificates
- The use of CRLs
- Checking expired/revoked certificates
- Intermediary CAs
- Multiple CAs - stacking, using the capath directive
- Determining the crypto library to be used
- Crypto features of OpenSSL and PolarSSL
- Pushing ciphers
- Elliptic curve support
- 5. Scripting and Plugins
- 6. Troubleshooting OpenVPN - Configurations
- Introduction
- Cipher mismatches
- TUN versus TAP mismatches
- Compression mismatches
- Key mismatches
- Troubleshooting MTU and tun-mtu issues
- Troubleshooting network connectivity
- Troubleshooting client-config-dir issues
- Troubleshooting multiple remote issues
- Troubleshooting bridging issues
- How to read the OpenVPN log files
- 7. Troubleshooting OpenVPN - Routing
- Introduction
- The missing return route
- Missing return routes when iroute is used
- All clients function except the OpenVPN endpoints
- Source routing
- Routing and permissions on Windows
- Unable to change Windows network location
- Troubleshooting client-to-client traffic routing
- Understanding the MULTI: bad source warnings
- Failure when redirecting the default gateway
- 8. Performance Tuning
- 9. OS Integration
- Introduction
- Linux - using NetworkManager
- Linux - using pull-resolv-conf
- Windows - elevated privileges
- Windows - using the CryptoAPI store
- Windows - updating the DNS cache
- Windows - running OpenVPN as a service
- Windows - public versus private network adapters
- Windows - routing methods
- Windows 8+ - ensuring DNS lookups are secure
- Android - using the OpenVPN for Android clients
- Push-peer-info - pushing options to Android clients
- 10. Advanced Configuration
- Introduction
- Including configuration files in config files
- Multiple remotes and remote-random
- Inline certificates
- Connection blocks
- Details of ifconfig-pool-persist
- Connecting using a SOCKS proxy
- Connecting via an HTTP proxy
- Connecting via an HTTP proxy with authentication
- IP-less setups - ifconfig-noexec
- Port sharing with an HTTPS server
- Routing features - redirect-private, allow-pull-fqdn
- Filtering out pushed options
- Handing out the public IPs
In this chapter, we will cover the following recipes:
- Cipher mismatches
- TUN versus TAP mismatches
- Compression mismatches
- Key mismatches
- Troubleshooting MTU and
tun-mtuissues - Troubleshooting network connectivity
- Troubleshooting
client-config-dirissues - Troubleshooting multiple
remoteissues - Troubleshooting bridging issues
- How to read the OpenVPN log files
The topic of this chapter and the next is troubleshooting OpenVPN. This chapter will focus on troubleshooting OpenVPN misconfigurations, whereas the next chapter will focus on the all-too-common routing issues that occur when setting up a VPN.
The recipes in these chapters will therefore deal first with breaking things. We will then provide the tools on how to find and solve the configuration errors. Some of the configuration directives used in this chapter have not been demonstrated before, so even if you are not interested in breaking things, this chapter will still be insightful.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.