OpenVPN Usage and Certificate

Generation Instructions

Version: <2.0>

Release date: <2020-03-30>

Contents

Contents..............................................................................................................................................2

1 Introduction to OpenVPN..........................................................................................................3

1.1 Overview.............................................................................................................................3

2.3.2 Generating Certificates............................................................................................. 5

2.3.3 Starting the Server.....................................................................................................6

2.4 Server Configuration...........................................................................................................6

3 Client Configuration and Use....................................................................................................... 7

3.1 Client Configuration........................................................................................................... 7

3.2 Using OpenVPN on the Phone........................................................................................... 7

3.3 Enable VPN NAT................................................................................................................9

1 Introduction to OpenVPN

A virtual private network (VPN) is a secure network established in the public network. Different

from conventional networks, the VPN implements data encryption, integrity check, and user

possible for enterprises to transmit private and confidential information securely and

economically over the Internet.

This document describes how to configure the VPN on Windows by using OpenVPN. OpenVPN

is an open-source third-party VPN configuration tool that can build a VPN application gateway

by using the inherent equipment.

2 Server Installation and Configuration

OpenVPN is an open-source third-party VPN configuration tool that can build a VPN application

gateway by using the inherent equipment. This chapter describes how to deploy and configure

servers on Ubuntu and Windows.

Run the following commands to perform initial configuration:

sudo mkdir /etc/openvpn/easy-rsa/

sudo cp -r /usr/share/easy-rsa/* /etc/openvpn/easy-rsa/

sudo su

sudo vi /etc/openvpn/easy-rsa/vars

-----> Modify certificate configurations as follows:

export KEY_COUNTRY="CN"

export KEY_PROVINCE="BJ"

export KEY_CITY="BeiJing"

export KEY_ORG="fanvil"

Generate a server certificate: ./build-key-server server

Generate a client certificate: ./build-key client

Build a dynamic password library: ./build-dh

Configure the server environment, and save the certificate configuration files in the specified

directory:

cp keys/ca.crt /etc/openvpn/

cp keys/server.crt keys/server.key keys/dh2048.pem /etc/openvpn

mv /etc/openvpn/dh2048.pem /etc/openvpn/dh1024.pem

/etc/init.d/openvpn restart

Download the OpenVPN software for Windows from the Internet. This document uses the

software available at openVPN GUI.

Double-click the software to download and install it. Select easy-rsa during the installation. The

default path is C:\Program Files\OpenVPN.

Before generating certificates, perform initialization.

Modify the following configurations in vars.bat.sample under

set KEY_EMAIL=admin@winline.com.cn #(email address)

The characters marked with # are comments. Do not write them into the file.

Run cmd as an administrator to enter DOS, and run the following commands:

In the openvpn\easy-rsa directory:

Generate a root certificate: build-ca (Press Enter repeatedly to retain default

Build a dynamic password library: build-dh

Copy the generated certificates to the OpenVPN\config directory.

Copy the server configuration files from the OpenVPN\sample-config directory to the

OpenVPN\config directory.

Start the OpenVPN software.

In the OpenVPN installation directory, open the server.ovpn or server.conf file on a notepad++

to view the server files. For example:

port 1194 ＃Allocated by IANA and can be changed as needed.

proto udp ＃TCP is alternative.

dev tun

keepalive 10 120

client-to-client

comp-lzo

max-clients 100

persist-key

persist-tun

status openvpn-status.log

verb 3

3 Client Configuration and Use

The client refers to any Fanvil device that supports OpenVPN. A certificate file is required for

Fanvil phones to connect to the OpenVPN server.

resolv-retry infinite

nobind

persist-key

persist-tun

ca ca.crt

cert client.crt

key client.key

client.ovpn, client.key, client.crt, and ca.crt one by one in the OpenVPN Files pane. After the

upgrade is complete, the sizes of the upgraded files are displayed in the OpenVPN Files pane, as

shown in the following figure.

On the VPN tab page, select OpenVPN in VPN mode, select Enable VPN, and click Apply.

After you successfully connect to the server, the obtained IP address is displayed in the Virtual

Private Network (VPN) Status pane on the VPN tab page. As shown in the following figure,

the IP address is 10.8.0.10.

Notes:

1. The X3S / X4 phones do not have the Open VPN mode selection box. The default is tun,

install apk on the phone to use openvpn.