Right-click the OpenVPN system tray icon and select Connect. Once you have installed the application, launch OpenVPN.ģ. You can find the latest build on the OpenVPN Community Downloads page. Download and install the OpenVPN application. First, copy the client.ovpn configuration file in the C:Program FilesOpenVPNconfig directory.Ģ. To connect to OpenVPN, run the command: openvpn -config /path/to/client.ovpn For Windows Usersġ. The instructions on how to connect to OpenVPN differ depending on your client machine’s operating system. Make sure to replace the bolded parts with your respected values.Ĥ. Remote-cert-eku 'TLS Web Client Authentication' Add the following content to the file: client Then, create a configuration file for the OpenVPN client under the name client.ovpn on the client machine: vi client.ovpnģ. /etc/openvpn/easy-rsa/easyrsa3/pki/private/client.keyĢ.

/etc/openvpn/easy-rsa/easyrsa3/pki/client.crt.

/etc/openvpn/easy-rsa/easyrsa3/pki/ca.crt.

Find and copy the following files from the server to the client machine: With everything set up on the OpenVPN server, you can configure your client machine and connect it to the server.Īs mentioned in Step 4, each client machine needs to have local copies of the CA certificate, client key, SSL certificate, and the encryption key.ġ. The output should respond that the OpenVPN service for the server is active (running). Verify the service is active with: systemctl status Then, enable it to start up at boot by running: systemctl -f enable ģ. To start the OpenVPN service, run the command: systemctl -f start Ģ. Finally, restart the service: systemctl restart rvice Step 6: Start OpenVPNġ.

Add the following line at the top of the file: _forward = 1Ħ.

Move on to routing all web traffic from the client to the server’s IP address by enabling IP forwarding. Reload firewalld for the changes to take place: firewall-cmd -reloadĤ. Next, permanently add the routing rule using the variable created above: firewall-cmd -permanent -direct -passthrough ipv4 -t nat -A POSTROUTING -s 10.8.0.0/24 -o $VAR -j MASQUERADEģ. However, you can create a variable under the name of your choice. In the command below, the variable is named VAR. Create a variable that represents the primary network interface used by your server.

Once you have completed the steps above, move on to routing to your OpenVPN subnet.ġ.

Install tunnelblick