713 B
713 B
1. Init RSA
cd /usr/share/easy-rsa
./easyrsa clean-all
./easyrsa init-pki
./easyrsa build-ca nopass
./easyrsa build-server-full server nopass
./easyrsa gen-dh
2. Create user certs
cd /usr/share/easy-rsa
./easyrsa build-client-full USERNAME nopass
3. Configure server
Preconfigured example is here:
nano /data/openvpn.conf
4. Enable routing protocols
nano /data/frr/daemons
5. Enable services autostart
rc-update add frr
rc-update add openvpn
6. Start services
rc-service frr start
rc-service openvpn start
7. Configure router
vtysh
8. Get client config file
build-client-config USERNAME