ITSec VPN Useful links

Updated

For installation use:

Oracle Virtual Box Free Download

Ubuntu Free Download
Use the alternative downloads and find one that fits your country; e.g. Denmark one.com

Install Ubuntu on Oracle Virtual Box
Includes also BIOS handling of virtualization problems, is any

Install Kali-Linux on Oracle Virtual Box
Do assignment No. 1., not more

DigitalOcean.Set Up OpenVPN on Ubuntu
(Probably the best and explaneasily read explanation)

OpenVPN Client Configuration Example
(Shows the configuration file on client)

Here are differnt versions of iso-files that works on i386 computers,
Ubuntu 14.04 i386, Ubuntu 16.10 i386

Winscp: For file exchange betrween server and client
https://winscp.net/eng/docs/installation

For deeper understanding of virtualization read these:

WikipeidiaVirtualization

DigitalOcean Virtual Machines

VMWare Virtualization Explanation

VMWare Player Free Download

Useful tricks for VPN Assigment

More explanation is given in the special paper "VPN Problems". Below are just some hints.

Superuser how?
Always start with the command
sudo su

IP adress of server
Remember VPN is a virtual network where both server and client is on the "same LAN"
When you set up openvpn rules allowing traffic from client to server you have given the identification of the vpn-server as eth0 or something similar:

# START OPENVPN RULES
# NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
# Allow traffic from OpenVPN client to eth0
-A POSTROUTING -s 10.8.0.0/8 -o eth0 -j MASQUERADE
COMMIT
# END OPENVPN RULES

Therefore use the "virtual" address which you can find in the terminal window by the command:

ifconfig

IF you only see IP6 addresses one will have to disable IP6 and enable IP4 addresses
More explanation is given in the special paper "VPN Problems"

TAP-Adapter file
For the client remember to tick the TAP Virtual Adapter box during setup of OpenVPN.
Remember to rename the adapter on the client to MyTap.

Forward
When defining forward use the following:
echo "1" | sudo tee /proc/sys/net/ipv4/ip_forward

Client dev-node
dev-node = MyTap

must be defined in client configuration file

Bridge or Net in Virtual box ?
Use the Bridge Adapter i VirtualBox.

Virtual box How to copy client files and server certifucate from Linux to Windows.

In step 11 the following is not necessary

Here is an example SFTP command using our client1.ovpn example. This command can be run from your local computer (OS X or Linux). It places the .ovpn file in your home directory:

sftp sammy@openvpn_server_ip:client-configs/files/client1.ovpn ~/  

Transfer files from server to local computer (local client)

There are several tools and tutorials for securely transferring files from the server to a local computer:

Method O: Drag and drop the file into windows desktop, if possible.

Mehtod A: Define a shared folder. Google it.

Method B: Copy client files and server certifucate from Linux to a USB stick.

Method C: Open browser from Ubuntu and send an email with the certificates.

Mehod D: Use the program https://winscp.net/eng/docs/installation

First find the USB icon lower rigth corner, Click on it and the it should appear in the virtual box left side.

Then do something like:

Now follow the instructions how to create one openvpn file on client as stated in the guide from DigitalOcean.