Setting Up OpenVPN Access Server On Ubuntu
OpenVPN Access Server fits seamlessly with Ubuntu. The repository provides you with the following three components: the popular OpenVPN open-source software; a user-friendly and intuitive admin web interface; and Connect Clients for Android, iOS, Windows, macOS, and Linux. Once set up, deploying VPN clients is simple.
Follow this high level overview to set up OpenVPN Server and OpenVPN Access Server Admin Web UI. Additional configuration steps can be found with the links in the Next Steps section.
1. Get Updates
Begin by logging on to your Linux system on the console or via SSH with root privileges.
Update the cached packages list to the newest in the Ubuntu repository.
Then, upgrade any of these available package updates by getting them from the repo and installing them:
2. Install OpenVPN Access Server Via Repository
3. Set Up The Admin Account Through Terminal
First, change the password.
At the prompt, set a password for the user openvpn.
Connect to the admin page and login using the openvpn user with the new password.
Replace “[youripaddress]” with the IP address of your server
The Access Server Admin Web Interface provides an intuitive tool to manage settings for OpenVPN Access Server.
Helpful tips for configuration settings:
To reach OpenVPN Access Server via the Internet, set the Hostname or IP address to one facing the public internet.
The default subnet for OpenVPN Access Server’s internal DHCP system is 172.27.224.0/20. This may be changed to a subnet that might work better for your current network.
To access OpenVPN Connect via web browser, use the address below by replacing “[youripaddress]” with the IP allocated to your openvpn-as instance:
Users will then enter their username and password.
Download OpenVPN Connect: After logging in, users can download pre-configured OpenVPN Connect apps or their user configuration files (client.ovpn) and use them to connect to the VPN with other OpenVPN Clients.
Helpful Linux Tips
- Successfully running the Linux commands here require that they are executed with root privileges logged in as a root user or sudo up
- Make sure the time and date on the Linux server are correct as Access Server generates certificates with both a start and expiration date. It can also affect the use of multi-factor systems such as Google Authenticator. If needed, install a Network Time Protocol (NTP) client program on the server to correctly and automatically sync the time.
- For configuring an Access Server without internet access, it requires contacting the OpenVPN team for an offline activation procedure
- If you experience slowness with the web interface or attempting license key activation, check that DNS resolution is working as expected (e.g.: pinging www.google.com should resolve this to an IP address)