Top Banner
pfSense OpenVPN Server
40

pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Mar 30, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

pfSenseOpenVPN Server

Page 2: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Login

6-1-2 OpenVPN Server 1Creative Commons: Attribution & Share Alike

Page 3: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Configure OpenVPN

6-1-2 OpenVPN Server 2Creative Commons: Attribution & Share Alike

Page 4: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Use the Wizard

6-1-2 OpenVPN Server 3Creative Commons: Attribution & Share Alike

Page 5: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Local Authentication

6-1-2 OpenVPN Server 4Creative Commons: Attribution & Share Alike

Page 6: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Certificate Parameters

6-1-2 OpenVPN Server 5Creative Commons: Attribution & Share Alike

Page 7: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

The Server’s Certificate

6-1-2 OpenVPN Server 6Creative Commons: Attribution & Share Alike

Page 8: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

External Interface

6-1-2 OpenVPN Server 7Creative Commons: Attribution & Share Alike

Same as VPN Name

Page 9: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Crypto Settings

6-1-2 OpenVPN Server 8Creative Commons: Attribution & Share Alike

Page 10: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Client Tunnel Parms

6-1-2 OpenVPN Server 9Creative Commons: Attribution & Share Alike

Page 11: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

What We Tell Client

6-1-2 OpenVPN Server 10Creative Commons: Attribution & Share Alike

I Ignore the Rest

Page 12: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

That is the Coreof the VPN

Hit Next

6-1-2 OpenVPN Server 11Creative Commons: Attribution & Share Alike

Page 13: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Enable NAT & Firewall

6-1-2 OpenVPN Server 12Creative Commons: Attribution & Share Alike

Page 14: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

OpenVPN Almost Works

6-1-2 OpenVPN Server 13Creative Commons: Attribution & Share Alike

Page 15: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

But we Need toGenerate a

User Certificatefor the

VPN Cl4ients6-1-2 OpenVPN Server 14Creative Commons: Attribution & Share Alike

Page 16: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Use Cert Manager

6-1-2 OpenVPN Server 15Creative Commons: Attribution & Share Alike

4

Page 17: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

And Certificate Creator

6-1-2 OpenVPN Server 16Creative Commons: Attribution & Share Alike

Page 18: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Make a New Certificate

6-1-2 OpenVPN Server 17Creative Commons: Attribution & Share Alike

Page 19: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Client Certificate

6-1-2 OpenVPN Server 18Creative Commons: Attribution & Share Alike

Be Sure the Two NamesAre the Same

Page 20: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

The Certificates

6-1-2 OpenVPN Server 19Creative Commons: Attribution & Share Alike

Web Server

VPN Server

Web Client

Page 21: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

The Admin UserNeeds to Use theClient Certificateor Client ExportWill Not Work

6-1-2 OpenVPN Server 20Creative Commons: Attribution & Share Alike

Page 22: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Go to User Manager

6-1-2 OpenVPN Server 21Creative Commons: Attribution & Share Alike

Page 23: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Edit Admin User

6-1-2 OpenVPN Server 22Creative Commons: Attribution & Share Alike

Page 24: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Set User Certificate

6-1-2 OpenVPN Server 23Creative Commons: Attribution & Share Alike

Page 25: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Use the Client Cert

6-1-2 OpenVPN Server 24Creative Commons: Attribution & Share Alike

Page 26: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

To Generate ClientPackages, We Needto Enable a Package

6-1-2 OpenVPN Server 25Creative Commons: Attribution & Share Alike

Page 27: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Go to Package Manager

6-1-2 OpenVPN Server 26Creative Commons: Attribution & Share Alike

Page 28: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Available Packages

6-1-2 OpenVPN Server 27Creative Commons: Attribution & Share Alike

Page 29: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

6-1-2 OpenVPN Server 28Creative Commons: Attribution & Share Alike

Page 30: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Install Export Utility

6-1-2 OpenVPN Server 29Creative Commons: Attribution & Share Alike

Page 31: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

6-1-2 OpenVPN Server 30Creative Commons: Attribution & Share Alike

Page 32: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Check and Then

6-1-2 OpenVPN Server 31Creative Commons: Attribution & Share Alike

Page 33: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Try Client Export

6-1-2 OpenVPN Server 32Creative Commons: Attribution & Share Alike

Page 34: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

6-1-2 OpenVPN Server 33Creative Commons: Attribution & Share Alike

Page 35: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Client Export

6-1-2 OpenVPN Server 34Creative Commons: Attribution & Share Alike

Page 36: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

And You Should Get the List

6-1-2 OpenVPN Server 35Creative Commons: Attribution & Share Alike

Page 37: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Make Export Package

6-1-2 OpenVPN Server 36Creative Commons: Attribution & Share Alike

Page 38: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

This Should DroppfSense-udp-443-bt.vpn.rg.net-install.exe

On Your Desktop

6-1-2 OpenVPN Server 37Creative Commons: Attribution & Share Alike

Page 39: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

Give it to theClient User toInstall on Their

Laptop

6-1-2 OpenVPN Server 38Creative Commons: Attribution & Share Alike

Page 40: pfSense OpenVPN ServerThe Admin User Needs to Use the Client Certificate or Client Export Will Not Work 6-1-2 OpenVPN Server Creative Commons: Attribution & Share Alike 20

The Client User canUse the Package

a la2-3-1.openvpn.pdf

6-1-2 OpenVPN Server 39Creative Commons: Attribution & Share Alike