VPN

Allow OpenVPN traffic through your firewall

If you are running openvpn(8) in a firewalled environment as it was described in the server configuration of OpenVPN, you will need to pass the traffic through your firewall, so that clients can connect to your OpenVPN server.

Below you will find a very basic pf.conf file, that contains sample Packet Filter (PF) rules, that will allow your clients to communicate with your OpenVPN server:

OpenVPN client configuration

Below is a sample OpenVPN client configuration file that you can use for your OpenVPN clients.

Please refer to the openvpn(8) manual page for explanation of the different options.

OpenVPN server configuration

Now we are going to configure the OpenVPN server itself.

The OpenVPN server configuration will reside in the /usr/local/etc/openvpn/server.conf file.

Below you will find a working configuration file for routed OpenVPN setup.

Please refer to the manual page of openvpn(8) for more information on the different options.

Generating certificates for server

OpenVPN's default install directory and configuration resides in /usr/local/share/doc/openvpn

First, let's create a configuration directory for OpenVPN under /usr/local/etc/openvpn

# mkdir /usr/local/etc/openvpn

Now let's copy the sample configuration for the OpenVPN server, and the scripts we are going to need, in order to generate the certificates and keys for our server and clients.

A handbook about installing and configuring OpenVPN server under FreeBSD