How to setup ovpn in CentOS?

Setting Up OpenVPN on CentOS: A Step-by-Step Guide

Introduction

OpenVPN is a popular and widely-used encryption protocol that allows secure and reliable communication over the internet. CentOS, being a popular Linux distribution, provides a robust environment for setting up OpenVPN. In this article, we will guide you through the process of setting up OpenVPN on CentOS, covering the necessary steps and configurations.

Prerequisites

Before we begin, make sure you have the following prerequisites:

• CentOS 7 or later (OpenVPN 2.4 or later)
• A compatible VPN client (e.g., OpenVPN, ExpressVPN, or WireGuard)
• A static IP address or a dynamic IP address with a stable DNS server

Step 1: Install OpenVPN

To start, you need to install OpenVPN on your CentOS system. You can do this using the following command:

sudo yum install openvpn

Step 2: Configure OpenVPN

Once installed, you need to configure OpenVPN. You can do this by creating a configuration file for your VPN server. Here’s a step-by-step guide:

• Create a new file called openvpn.conf in the /etc/openvpn directory:

  sudo nano /etc/openvpn/openvpn.conf

• Add the following lines to the file:

  
  
  # OpenVPN configuration file

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0

* Save and close the file.



**Step 3: Generate Certificates and Key**



To complete the configuration, you need to generate certificates and keys for your VPN server. Here's how:



* Generate a certificate signing request (CSR) using OpenSSL:

```bash

sudo openssl req -x509 -newkey rsa:2048 -nodes -keyout server.key -out server.crt -days 3650 -subj "/C=US/ST=State/L=Locality/O=Organization/CN=vpn.example.com"

• Generate a private key for your VPN server:

  sudo openssl genrsa -out server.key 2048

• Generate a self-signed certificate for your VPN server:

  sudo openssl req -new -key server.key -out server.csr

Step 4: Configure the VPN Server

Now that you have generated certificates and keys, you can configure your VPN server. Here’s a step-by-step guide:

• Create a new file called server.conf in the /etc/openvpn directory:

  sudo nano /etc/openvpn/server.conf

• Add the following lines to the file:

  
  
  # OpenVPN server configuration file

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0

* Save and close the file.



**Step 5: Start and Enable the VPN Service**



To start and enable the VPN service, you can use the following commands:



* Start the OpenVPN service:

```bash

sudo systemctl start openvpn

• Enable the OpenVPN service to start automatically on boot:

  sudo systemctl enable openvpn

Step 6: Test the VPN Connection

To test the VPN connection, you can use the following command:

sudo openvpn --test

Step 7: Configure the VPN Client

To configure your VPN client, you need to add the following lines to your client’s configuration file:

• Add the following lines to your client’s configuration file:

  
  
  # OpenVPN client configuration file

client
dev tun
proto udp
ca ca.crt
cert client.crt
key client.key
dh dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0

* Save and close the file.



**Step 8: Connect to the VPN**



To connect to the VPN, you can use the following command:



```bash

sudo openvpn --config /etc/openvpn/server.conf

Troubleshooting Tips

• Make sure you have the latest version of OpenVPN installed and configured.
• Check the OpenVPN logs for any errors or warnings.
• Verify that your VPN server is running and accepting connections.
• If you encounter any issues, try restarting the OpenVPN service or checking the OpenVPN configuration file.

Conclusion

Setting up OpenVPN on CentOS is a straightforward process that requires minimal configuration. By following these steps, you can create a secure and reliable VPN connection on your CentOS system. Remember to test your VPN connection regularly to ensure it is working correctly.