{"id":30,"date":"2010-11-02T21:38:28","date_gmt":"2010-11-02T14:38:28","guid":{"rendered":"http:\/\/iroel.blog.binusian.org\/?p=30"},"modified":"2010-11-02T21:38:28","modified_gmt":"2010-11-02T14:38:28","slug":"vpn-udp-tcp","status":"publish","type":"post","link":"https:\/\/iroel.blog.binusian.org\/index.php\/2010\/11\/02\/vpn-udp-tcp\/","title":{"rendered":"Vpn udp & tcp"},"content":{"rendered":"

Nie mau bagi” tutorial buat Lw yang belum tau cara buat vpn di vps atau dedicated server SSH..<\/p>\n

Lets Go….
\nsyarat2 nya
\n1. PC or Notebook
\n2. Koneksi Internet \"\"
\n3. Server serah mau DS or VPS seng penting akses e root
\n4. Rokok Sebungkus + Kopi tambah cemilan dikit<\/p>\n


\nLangsung aja bagi yang udah punya VPS atau Dedicated Server SSH dengan akses root yang berbasis CENTOS ok Go Buka Putty nya sekarang \"\"<\/p>\n

sebelum membuat vpn cek dulu apakah server nya udah didukung dev\/tun apa belum
\ndan juga beberapa aplikasi yang mendukung untuk jalan nya openvpn<\/p>\n

================================================== =
\nlogin as: root
\nroot@iroel.info<\/a>‘s password:
\n[root@iroel ~]# ls -al \/dev\/net\/tun <<< command nya
\ncrw——- 1 root root 10, 2000 Feb 26 18:01 \/dev\/net\/tun << berarti sudah di dukung dev tun
\n[root@iroel ~]#
\n================================================== =
\nselanjut nya install beberapa aplikasi yang di perlukan
\nini beberapa paket yang di perlukan<\/p>\n

1. gcc
\n2. rpm-build
\n3. autoconf.noarch
\n4. zlib-devel
\n5. pam-devel
\n6. openssl-devel
\n7. make<\/p>\n

install langsung semua nya
\n================================================== ==========
\n[root@iroel ~]# yum install gcc rpm-build autoconf.noarch zlib-devel pam-devel openssl-devel make
\n================================================== ==========
\nsetelah nanti di install download openvpn nya ke dalam server<\/p>\n

================================================== ==========
\n[root@iroel ~]# wget http:\/\/openvpn.net\/release\/openvpn-2.0.9.tar.gz<\/a>
\n[root@iroel ~]# wget http:\/\/openvpn.net\/release\/lzo-1.08-4.rf.src.rpm<\/a>
\n================================================== ==========
\njadiin rpm yang udah di download tadi<\/p>\n

[root@iroel ~]#rpmbuild –rebuild lzo-1.08-4.rf.src.rpm
\n[root@iroel ~]#rpm -Uvh \/usr\/src\/redhat\/RPMS\/x86_64\/lzo-*.rpm
\n[root@iroel ~]#rpmbuild -tb openvpn-2.0.9.tar.gz
\n[root@iroel ~]#rpm -Uvh \/usr\/src\/redhat\/RPMS\/x86_64\/openvpn-2.0.9-1.x86_64.rpm<\/p>\n

perhatikan bahwa nama direktori mungkin saja berbeda, apabila mesin nya 32bit maka direktorinya biasanya: \/usr\/src\/redhat\/RPMS\/i386\/<\/p>\n

cara cek mesin cukup ketik uname -a pada server nanti nya akan keluar tulisan seperti ini<\/p>\n

[root@iroel ~]# uname -a
\nLinux iroel.info 2.6.18-028stab059.6 #1 SMP Fri Nov 14 14:01:22 MSK 2000 x86_64 x86_64 x86_64 GNU\/Linux <<< mesin 64bit
\n[root@iroel ~]#<\/p>\n

copy file konfigurasi nya menuju folder \/etc\/openvpn (biar gampang ngecek nya)<\/p>\n

[root@iroel ~]#cp -r \/usr\/share\/doc\/openvpn-2.0.9\/easy-rsa\/ \/etc\/openvpn\/
\n[root@iroel ~]#cp \/usr\/share\/doc\/openvpn-2.0.9\/sample-config-files\/server.conf \/etc\/openvpn\/<\/p>\n

Building certificate (membuat sertifikat)
\ncaranya, kita masuk direktori \/etc\/openvpn\/easy-rsa\/2.0<\/p>\n

[root@iroel ~]#cd \/etc\/openvpn\/easy-rsa\/2.0
\n[root@iroel ~]#source .\/vars
\n[root@iroel ~]#.\/vars
\n[root@iroel ~]#.\/clean-all
\n[root@iroel ~]#.\/build-ca
\nakan muncul tulisan2 aneh seperti ini:
\nGenerating a 1024 bit RSA private key
\n\u2026\u2026\u2026\u2026\u2026\u2026\u2026\u2026\u2026++++++
\n\u2026\u2026\u2026\u2026\u2026\u2026\u2026\u2026.++++++
\nwriting new private key to \u2018ca.key\u2019
\ndsb….. dll<\/p>\n

ga usah bingung enter enter aja, yang perlu diisi hanyalah pada field \u201cCommon Name\u201d itu aja.<\/p>\n

buat key server nya <\/p>\n

[root@iroel ~]#.\/build-key-server server<\/p>\n

buat Diffie Hellman<\/p>\n

[root@iroel ~]# .\/build-dh<\/p>\n

Sekarang copy sertifikat2 tersebut menuju \/etc\/openvpn\/keys<\/p>\n

[root@iroel ~]#cp \/etc\/openvpn\/easy-rsa\/2.0\/keys \/etc\/openvpn\/keys -R<\/p>\n

sekarang kita ke direktori \/etc\/openvpn\/<\/p>\n

[root@iroel ~]# cd \/etc\/openvpn\/
\n[root@iroel openvpn]#<\/p>\n

lihat apa yang aja isi dari direktori openvpn nya
\n[root@iroel openvpn]# ls -al
\ndrwxr-xr-x 4 root root 4096 Feb 26 17:25 easy-rsa
\n-rw——- 1 root root 0 Feb 26 17:35 ipp.txt
\ndrwx—— 2 root root 4096 Feb 26 17:30 keys
\n-rw-r–r– 1 root root 9 Feb 28 17:36 server.conf
\n[root@iroel openvpn]#<\/p>\n

backup dulu server.conf nya <\/p>\n

[root@iroel openvpn]# cp server.conf server.conf.bak<\/p>\n

trus edit server.conf nya hapus juga ga apa apa<\/p>\n

[root@iroel openvpn]# rm -rf server.conf
\n[root@iroel openvpn]# <\/p>\n

buat baru lagi server.conf nya bisa pake command vi, pico, nano
\n[root@iroel openvpn]# vi server.conf<\/p>\n

isi aja di situ tulisan “dev tun” tanpa tanda petik<\/p>\n

nah sekarang buat config 443.conf juga 53.conf
\nsesuai kebutuhan hehehehehhe<\/p>\n

ini isi config nya 443.conf
\n================================================== =========
\nport 443
\nproto tcp
\ndev tun
\nca \/etc\/openvpn\/keys\/ca.crt
\ncert \/etc\/openvpn\/keys\/server.crt
\nkey \/etc\/openvpn\/keys\/server.key
\ndh \/etc\/openvpn\/keys\/dh1024.pem<\/p>\n

plugin \/usr\/share\/openvpn\/plugin\/lib\/openvpn-auth-pam.so \/etc\/pam.d\/login
\nclient-cert-not-required
\nusername-as-common-name<\/p>\n

server 10.8.0.0 255.255.255.0
\nifconfig-pool-persist ipp.txt
\npush “redirect-gateway def1”
\npush “dhcp-option DNS 4.2.2.1”
\npush “dhcp-option DNS 4.2.2.2”
\nkeepalive 5 30
\ncomp-lzo
\npersist-key
\npersist-tun
\nstatus server-tcp.log
\nverb 3
\n================================================== =========<\/p>\n

isi config 53.conf<\/p>\n

================================================== =========
\nport 53
\nproto udp
\ndev tun
\nca \/etc\/openvpn\/keys\/keys\/ca.crt
\ncert \/etc\/openvpn\/keys\/keys\/server.crt
\nkey \/etc\/openvpn\/keys\/keys\/server.key
\ndh \/etc\/openvpn\/keys\/keys\/dh1024.pem<\/p>\n

plugin \/usr\/share\/openvpn\/plugin\/lib\/openvpn-auth-pam.so \/etc\/pam.d\/login
\nclient-cert-not-required
\nusername-as-common-name<\/p>\n

server 10.9.0.0 255.255.255.0
\nifconfig-pool-persist ipp.txt
\npush “redirect-gateway def1”
\npush “dhcp-option DNS 4.2.2.1”
\npush “dhcp-option DNS 4.2.2.2”
\nkeepalive 5 30
\ncomp-lzo
\npersist-key
\npersist-tun
\nstatus server-tcp.log
\nverb 3
\n================================================== =========<\/p>\n

setelah semua nya selesai jalankan openvpn nya<\/p>\n

[root@iroel openvpn]# openvpn \/etc\/openvpn\/443.conf<\/p>\n

[root@iroel openvpn]# openvpn \/etc\/openvpn\/53.conf<\/p>\n

Ok sekarang openVPN server sudah siap , sekarang tinggal bagaimana caranya supaya kita atau client dapat menikmati koneksi seakan-akan direct connection. Yang kita akan lakukan adalah setting firewall :<\/p>\n

1. Enabling packet forwarding dengan command:
\n[root@iroel openvpn]#echo 1 > \/proc\/sys\/net\/ipv4\/ip_forward<\/p>\n

2.Edit NAT table untuk MASQUERADING Command berikut khusus untuk server Dedicated saja:<\/p>\n

[root@iroel openvpn]#iptables -t nat -A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE<\/p>\n

Sedangkan untuk VPS, command nya adalah sbb:
\n[root@iroel openvpn]#iptables -t nat -A POSTROUTING -s 10.8.0.0\/24 -o venet0 -j SNAT –to 70.99.166.214 (ip disesuaikan dengan ip server anda kebetulan yang saya pakai ip 70.99.166.214)<\/p>\n

Download openVPN berbasis GUI , biar gampang jalaninnya
\nhttp:\/\/openvpn.se\/files\/install_pack….3-install.exe<\/a><\/p>\n

Copy sertifikat2 dari server tadi, yaitu file: ca.crt di direktori \/etc\/openvpn\/keys\/
\nbiar gampang download aja Winscp buat download file ca.crt<\/p>\n

Buat file konfigurasi client openvpn<\/p>\n

untuk udp :
\n================================================== ==========
\nclient
\ndev tun
\nproto udp
\nremote 70.99.166.214 53
\nresolv-retry infinite
\nroute-method exe
\nresolv-retry infinite
\nnobind
\npersist-key
\npersist-tun
\nca ca.crt
\nauth-user-pass
\ncomp-lzo
\nverb 3
\n================================================== ==========<\/p>\n

untuk tcp port 443
\n================================================== ==========
\nclient
\ndev tun
\nproto tcp
\nremote 70.99.166.214 443
\nresolv-retry infinite
\nroute-method exe
\nresolv-retry infinite
\nnobind
\npersist-key
\npersist-tun
\nca ca.crt
\nauth-user-pass
\ncomp-lzo
\nverb 3
\n================================================== =========
\ncopy file tersebut di c:\\program files\\openvpn\\config<\/p>\n

dah tinggal konekan nya work and tested by me 100% berhasil
\ntinggal anda yang coba \"\" <\/p>\n

opss lupa ini cara add user buat openvpn
\n[root@iroel ~]# adduser “iroel” -m -s \/bin\/false <<<<<<< nama user tanpa tanda petik
\n[root@iroel ~]# passwd “iroel”
\nChanging password for user iroel.
\nNew UNIX password: <<<< isi passnya” enter isi lagi 2 kali biasa nya<\/p>\n","protected":false},"excerpt":{"rendered":"

Nie mau bagi” tutorial buat Lw yang belum tau cara buat vpn di vps atau dedicated server SSH.. Lets Go…. syarat2 nya 1. PC or Notebook 2. Koneksi Internet 3. Server serah mau DS or VPS seng penting akses e root 4. Rokok Sebungkus + Kopi tambah cemilan dikit<\/p>\n","protected":false},"author":3208,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[707],"tags":[],"class_list":["post-30","post","type-post","status-publish","format-standard","hentry","category-internet"],"_links":{"self":[{"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/posts\/30","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/users\/3208"}],"replies":[{"embeddable":true,"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/comments?post=30"}],"version-history":[{"count":1,"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/posts\/30\/revisions"}],"predecessor-version":[{"id":31,"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/posts\/30\/revisions\/31"}],"wp:attachment":[{"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/media?parent=30"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/categories?post=30"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iroel.blog.binusian.org\/index.php\/wp-json\/wp\/v2\/tags?post=30"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}