In this post, I’ll show you how to set up a VPN server on a Raspberry Pi. By the end of this, you should be able to host your own dmvpn server complete with OpenVPN and SSH access to your Raspberry Pi.
DMVPN is short for Dynamic Multi-Protocol Label Switching Virtual Private Network and it is meant as a virtual appliance that can run on any linux machine. The following instructions will walk you through installing and configuring it on an Amazon EC2 instance running ubuntu 14.04 LTS with an arm processor (an arm64 architecture).
It uses OpenVPN to create a secure VPN connection between the client and the dmvpn server, while SSH tunnels are used for remote management of devices on the VPN connection. The following are the steps to install it on your Raspberry Pi.
Steps to install Dmvpn on your device
1) Go to the AWS website and sign up for an EC2 instance.
2) Once your EC2 instance is ready, log into your CLI and run:
sudo apt-get update sudo apt-get upgrade -y sudo apt-get install build-essential python3 python3-pip python3-dev pkg-config iproute iputils wget -y git git clone https://github.com/dvpngate/dmvpn cd dmvpn make & make install cp /usr/local/etc/openvpn/plugins/*.]*
./openvpn/ sudo service sshd restart
3) Now you need to create a configuration file for dmvpn. To do this run:
sudo nano /usr/local/etc/openvpn/host.conf 1 sudo nano / usr / local / etc / openvpn / host .conf
And then enter the following lines into the file:
client dev tun proto udp # Sample client-side OpenVPN 2.0 config file # Change CA, cert, key, and dh parameters to fit your needs. ca dmvpn.crt cert dmvpn.key key dmvpn.key tls-auth ta.key 0 dh dh2048.pem server 172.16.1.0 255.255.255.0 ifconfig-pool-persist ipp2 192.168..2/24 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig-pool ipp2 10.255.255.250 # This is the IP of your Pi push “route 192..254 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig-pool ipp2 192.168..2/24 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig-pool ipp2 10.255.255.250 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 # Sample client-side OpenVPN 2.0 config file # Change CA, cert, key, and dh parameters to fit your needs. ca dmvpn .crt cert dmvpn .key key dmvpn .key tls – auth ta .
key 0 dh dh2048.pem server 172.16.1.0 255.255.255.0 ifconfig-pool-persist ipp2 192.168..2/24 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig-pool ipp2 10.255.255.250 # This is the IP of your Pi push “route 192..254 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig-pool ipp2 192.168..2/24 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig-pool ipp2 10.255.255.250 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 # Sample client-side OpenVPN 2.0 config file # Change CA, cert, key, and dh parameters to fit your needs. ca dmvpn .crt cert dmvpn .key key dmvpn .key tls – auth ta .key 0 dh dh2048 .pem server 172 .16 .1 .0 255 .255 .255 .0 ifconfig – pool – persist ipp2 192.168..2 / 24 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig – pool ipp2 10.255.255.250 # This is the IP of your Pi push “route 192..254 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig – pool ipp2 192.168..2 / 24 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig – pool ipp2 10.255.255.250
4) Now create the file /etc/openvpn/server.conf with the following lines:
client dev tun proto udp remote your_server_ip 1194 server 172.16.1.0 255.255.255.0 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig-pool ipp2 10.64…1 1 2 3 4 5 6 7 client dev tun proto udp remote your_server_ip 1194 server 172 .16 .1 .0 255 .255 .255 .0 push “route 172..1 255..255” push “dhcp-option DNS 8..8.8.8” ifconfig – pool ipp2 10.64…1
The above lines will create the OpenVPN server (software) and it will be able to communicate with the client. If you’re having trouble connecting to your VPN server, please consult this frequently asked questions page: http://openvpn.net/index.php/openvpn-faq/faq-connecting-to-the-server/. (If you do not have internet access, you can always connect to your VPN server using SSH).
