Install OpenVPN Access Server on Raspberry Pi
– 👌
an introduction
In this document, we’ll show you how to install OpenVPN Access Server on a single board Raspberry Pi. You can also use these steps as a reference to install OpenVPN Access Server on other ARM64-based single-board computers such as Orange Pi or Rock Pi. Note that Access Server performance is highly dependent on the CPU and network capabilities of your platform.
What is covered
- How to create a bootable microSD card with Ubuntu Server 20.04.
- How to install and run OpenVPN Access Server.
- How to login to Admin Web UI.
- How to connect VPN clients.
before you start
OpenVPN Access Server is available for Ubuntu 20.04 LTS ARM 64-bit platform. Note that the Raspbian operating system is Not supported.
You will need:
- microSD card (8 GB or more recommended – 4 GB possible).
- A computer with a microSD card drive or an SD card drive and a microSD card adapter.
- Raspberry Pi 4, 400 or CM4 (A Raspberry Pi 3 will be rather slow, and Raspberry Pi 2 and above can’t run 64-bit programs and so are not compatible)
- Internet service
- Display with HDMI input (optional)
- microHDMI to HDMI cable (optional)
- USB keyboard (optional)
Install Ubuntu Image to SD Card
The first step is to install Ubuntu Server 20.04 on the Raspberry Pi and connect it to the network. Follow this tutorial, but skip step 5 (you don’t need a desktop install):
How to install Ubuntu Server on your Raspberry Pi.
Noticeable: The steps in the tutorial will erase all the contents on your microSD card. If you already have Ubuntu 20.04 LTS ARM64 running on your Raspberry Pi board, you can skip the tutorial.
Boot Ubuntu Server on Raspberry Pi
Step 4 in the Ubuntu installation tutorial guides you to “Boot Ubuntu Server”. This section reiterates some of that information.
Refer to the appropriate section for your setup – choose between connecting directly to a keyboard and monitor or connecting to a headless server.
Connect directly to the keyboard and screen
Before turning on the Raspberry Pi, make sure that the keyboard is connected and the display is connected using the mini-HDMI port. Insert the SD card into the Raspberry Pi and turn it on.
Noticeable: Watch the boot process on the screen. During the first boot, you must wait for a file first letter cloud A tool to complete the configuration before trying to log in.
Once first letter cloud Finishing, sign in with Ubuntu Both are login id and password. When prompted, change the password to something more secure.
Remote calling (headless)
Insert the SD card into the Raspberry Pi and turn it on.
To connect, you will need:
- The IP address of the Raspberry Pi on your local network
- SSH client
To locate the Raspberry Pi’s IP address, look at your router’s DHCP client list to try to identify the device, or alternatively run the arp command to locate the device using the network interface’s MAC address.
On Ubuntu and macOS:
ARP -na | grep -i “[beginning of MAC address]”
On Windows:
ARP -a | findstr “[beginning of MAC address]”
To start with the MAC address, depending on the version of the Raspberry Pi, you can try to use one of the following options:
The output should return the IP address of your Raspberry Pi.
On Ubuntu and macOS, use the installed SSH client. Open Terminal and run the following command:
ssh ubuntu @[Raspberry Pi IP address]
In Windows 10, if you don’t already have an SSH client, you can use PuTTY or OpenSSH.
To contact PuTTY:
- Open the PuTTY app.
- Enter the IP address of the Raspberry Pi in the format host name or IP address).
- (Optional) Enter a name to contact in Saved sessions and click Memorizes.
- click to open.
- Read the security prompt and click Yes To add the server host key to the registry cache.
To connect with bash (Ubuntu) on Windows:
- Open the bash app.
- Run an SSH command: ssh ubuntu @[Raspberry Pi IP address]
Once connected, enter Ubuntu For login ID and password. When prompted, set a new password and then reconnect with the SSH command and the new password.
Install OpenVPN Access Server
Select a time zone
First, you have to set the time zone on your Raspberry Pi. It is important that the time and date on the server are accurate for any certificate creation and verification as well as the time-based functionality of Google Multi-Factor Authentication (MFA). To set the date and time, run these commands with root privileges:
update apt apt -y install tzdata dpkg-Recfigure tzdata
Provide internet access
OpenVPN access server can run completely in an environment without internet access. However, without this access, VPN clients cannot connect over the Internet. This document assumes that the Raspberry Pi is connected to a private network that has Internet access through an Internet-connected router.
We recommend that you use a firewall with your network setup, such as those included with most Internet routers. Access Server requires that the ports TCP 443, TCP 943, TCP 945, and UDP 1194 be forwarded from the public Internet to the private IP address of the access server on the Raspberry Pi behind the firewall.
Install Your Access Server Package Using OpenVPN Repository
Add the OpenVPN Access Server repository to your Raspberry Pi via our OpenVPN download page, click Ubuntu , and select Ubuntu 20 [arm64] In the mode that opens.
After installing the file openvpn-like package, the initial configuration is run. When complete, note the addresses for the admin user interface and the client user interface as well as the randomly generated password for the admin user, openvpn.
++++++++++++++++++++++++++++++++++++++++++++++++ Access Server 2.10 Done 0 installed successfully in /usr/local/openvpn_as The configuration log file was written to /usr/local/openvpn_as/init.log Access server web user interfaces are available here: Admin UI: https://192.168.102.130:943 / admin Client UI: https://192.168.102.130.943 Login as “openvpn” with “RR4ImyhwbFFq” to continue (Password can be changed on Admin UI) ++++++++++++++++++ +++ +++++++++++++++++++++++++++++
For more details, see “Finishing the Access Server Configuration”.
Log in to Admin Web UI
Use the admin user interface address to connect to the admin web user interface. The administrative web user interface is usually located on your Raspberry Pi address with the /admin/ extension, for example https://192.168.70.222/admin/.
In a web browser, enter the URL and click the security message. The security message appears because the Access Server is using a self-signed certificate. You have the option to upload your valid certificate in the web interface later.
sign in with openvpn User and password. After reading and accepting the EULA, the first screen is activation Administration, where you can paste your subscription key.
You can use up to two simultaneous connections to test each Access Server feature for free. Get a free activation key from our website. Then paste the key and click on it activation. When you’re ready for more connections, it’s easy to increase your connections on our site and the change is automatically reflected on your access server.
The next step is to set up a fully qualified domain name (FQDN) like vpn.example.com, which turns into the public Internet IP address of your access server. You can then configure this FQDN in the access server as the address that VPN clients connect to. Once you have this address, you can enter it into a file Host name or IP address field in network setting Page in Admin Web UI. After setting this up, VPN clients will then know how to access your access server from the public internet.
Connect VPN Clients
The final step is to connect the VPN clients to a Raspberry Pi running the OpenVPN Access Server. Download the preconfigured clients directly from Access Server’s Client UI:
- Enter the IP address or FQDN of your server in a web browser.
- Log in as a user.
- Download and install the OpenVPN Connect app for your operating system.
OpenVPN Connect is our free VPN client. The client user interface provides preconfigured OpenVPN Connect apps for download. You can also choose to download only a connection profile and import it into a VPN client such as OpenVPN Connect or another compatible OpenVPN client software.
Once the app is downloaded and installed, open it and click on the user profile to connect.
Useful Resources
We offer free support as well as technical guides on our website. Here are some helpful resources:
[ad_1]
Don’t forget to share this post with friends !
