Background:
I have had an Openvpn server running for years and it has worked fine, the last time I touched it was about three years ago when I changed my in-house IP schema, so am quite rusty. I was running it on a single ETH port connected directly to my router and had all the iptables rules worked out etc. so figured it would be easy to recreate.
My ISP has warned me of an upcoming external IP address change and although I could easily update the client ovpn files I thought it would be good to re-build / upgrade because amongst other things my original server didn't implement IPv6 at all. My feeling was I could build a new server and port over all my certs and keys to save redoing all of those (had to do that once when an SD died) but I have the process for generating them well documented so wouldn't mind.
My Issue:
I have some pretty good build documentation I created when I built the first one (although it assumes I would still be more current in the ways of the Pi) but it just seems to fall apart after the "apt-get install openvpn step" because none of the stuff I expect to find is there - I have no recollection how the TUN and BRI adaptors got created before but as my doc just skips to cert creation and iptables stuff, a lot more must have happened during the package install.
I would appreciate a nudge in the right direction as all the searches I do focus on building the thing with a script for wireguard or pivpn which is not really the way I would prefer.
TIA
I have had an Openvpn server running for years and it has worked fine, the last time I touched it was about three years ago when I changed my in-house IP schema, so am quite rusty. I was running it on a single ETH port connected directly to my router and had all the iptables rules worked out etc. so figured it would be easy to recreate.
My ISP has warned me of an upcoming external IP address change and although I could easily update the client ovpn files I thought it would be good to re-build / upgrade because amongst other things my original server didn't implement IPv6 at all. My feeling was I could build a new server and port over all my certs and keys to save redoing all of those (had to do that once when an SD died) but I have the process for generating them well documented so wouldn't mind.
My Issue:
I have some pretty good build documentation I created when I built the first one (although it assumes I would still be more current in the ways of the Pi) but it just seems to fall apart after the "apt-get install openvpn step" because none of the stuff I expect to find is there - I have no recollection how the TUN and BRI adaptors got created before but as my doc just skips to cert creation and iptables stuff, a lot more must have happened during the package install.
I would appreciate a nudge in the right direction as all the searches I do focus on building the thing with a script for wireguard or pivpn which is not really the way I would prefer.
TIA
Statistics: Posted by inspire1 — Sat Feb 03, 2024 10:50 am