View source for Tutorials and How-tos/Connect Two Bubba Servers via VPN

__FORCETOC__ 

== OpenVPN  ==

If you have two Bubba servers (for example, one at home and another one at work) you can connect them together via a virtual private network. For this to work, you need both a home, and a work, two Bubba servers, an Internet connection available at both work and home, and at least one of those connections must be externally accessible; for most people, this is usually home, as at work, the corporate firewall might not happily comply. So with the basic assumption that home is our central location, we will host the "server" there. First we SSH into the two bubbas and issues the command as root: 

 apt-get install openvpn

at your home bubba, copy the folder <code>/usr/share/doc/openvpn/examples/easy-rsa/</code> to <code>/root</code>; Also copy <code>/usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz</code> to <code>/etc/openvpn</code> and '''gunzip''' it At the office ''bubba'', copy <code>/usr/share/doc/openvpn/examples/sample-config-files/client.conf</code> to <code>/etc/openvpn</code>. At home ''bubba'', <code>cd</code> to <code>/root/easy-rsa</code> Edit the file <code>vars</code>, and enter the required values at the bottom, <code>KEY_COUNTRY</code> is the two letter country code. Now issue following command: 

 . ./vars
 ./clean-all
 ./build-ca

The field '''Common Name''' during build-ca is required to be filled. Now issue: 

 ./build-key-server server

As above, fill in a common name (for example "server"), and choose yes on all questions. And again: 

 ./build-key client

And again, fill in a common name (for example "client"), and choose yes on everything. We continue now by creating [http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange Diffie Hellman ]parameters: 

 ./build-dh

This might take a while. Now copy the ca.crt, server.crt, server.key and the dh1024.pem file from the keys dir to /etc/openvpn; Copy magically ca.crt, client.crt, client.key to the office bubba in /etc/openvpn. now enter /etc/network and edit the firewall.conf, add following: 

<br> 

 -A INPUT -i tun+ -j ACCEPT
 -A FORWARD -i tun+ -j ACCEPT
 -A INPUT -i eth0 -p udp -m udp --dport 1194 -j ACCEPT

And on the client side add 

<br> 

 -A INPUT -i tun+ -j ACCEPT
 -A FORWARD -i tun+ -j ACCEPT

on both issue: 

<br> 

 iptables-restore &lt; firewall.conf

Now this is done, we need to make an decision; we must have unique networks everywhere; and as the BubbaTwo defaults with 192.168.10.0, we need first to change that one one machine, for example to change it to 192.168.37.0 on the office machine, also remember that the networks must be unique in relation to adjacent networks on the other networks. On the server, edit <code>/etc/openvpn/server.conf</code> at the line starting with "server", set e unique network on both places. In the <code>client.conf</code> file at the office, set the remote to your home ip/dns. now on both, issue 

 /etc/init.d/openvpn restart

Now, at your office, by pinging 10.8.0.1, your home bubba should answer. ' That is basically it, more information can be found in http://openvpn.net/index.php/documentation/howto.html

== PPTP  ==

:''this howto is preliminary''

PPTP is a protocol that ise used by Microsoft for vpn solutions; it can be used to connect to a vpn on the bubba. First install pptpd, by issuing following: 

 apt-get install pptpd

now edit /etc/pptpd.conf, enable following: 

 bcrelay eth1
 localip 192.168.10.220
 remoteip 192.168.10.221-240

edit /etc/ppp/pptpd-options: 

 name bubba
 ms-dns 192.168.10.1
 ms-wins 192.168.10.1
 proxyarp
 

add to /etc/ppp/chap-secrets credentials in format 

 &lt;username&gt;  bubba &lt;password&gt;  *

update /etc/dnsmasq.conf, remove the interface row and add 

 except-interface=eth0

or add 

 ppp0,ppp1,ppp2,...,pppN 

to the interface line 

edit /etc/network/firewall, under OUTPUT, add 

 -A INPUT -i eth0 -p gre -j ACCEPT
 -A INPUT -i ppp+ -j ACCEPT
 -A INPUT -i eth0 -p tcp -m tcp --dport 1723 -j ACCEPT 
 -A FORWARD -i ppp+ -j ACCEPT
 -A OUTPUT -o eth0 -p gre -j ACCEPT

run 

 iptables-restore /etc/network/firewall
 /etc/init.d/pptpd restart
 /etc/init.d/dnsmasq restart