tips:vpn:galileo

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
tips:vpn:galileo [2017/04/12 14:42] – [galileo openvpn] scipiotips:vpn:galileo [2024/07/19 10:21] (current) – [Console] sscipioni
Line 1: Line 1:
 ====== VPN Galileo ====== ====== VPN Galileo ======
 +
 +VPN PPTP/L2TP:
 +  * indirizzo server concentratore: vpn1.csgalileo.org
 +  * username e password
 +
 +<code>
 +yay -S networkmanager-l2tp networkmanager-strongswan
 +</code>
 +
 +aggiungere vpn L2TP
 +
 +{{ :tips:vpn:vpn01.png?400 |}}
 +
 +{{ :tips:vpn:vpn02.png?400 |}}
 +
 +{{ :tips:vpn:vpn03.png?400 |}}
 +
 +====== pptp manual ======
 +
 +<file ini /etc/NetworkManager/system-connections/galileo.nmconnection>
 +[connection]
 +id=galileo
 +uuid=97852b85-b57b-4b38-9687-d919f2820e57
 +type=vpn
 +autoconnect=false
 +permissions=user:scipio:;
 +timestamp=1623922800
 +
 +[vpn]
 +gateway=94.230.76.2
 +mru=1400
 +mtu=1400
 +password-flags=0
 +user=xxx
 +user-auth-type=password
 +service-type=org.freedesktop.NetworkManager.l2tp
 +
 +[vpn-secrets]
 +password=xxx
 +
 +[ipv4]
 +dns-search=
 +ignore-auto-dns=true
 +method=auto
 +
 +[ipv6]
 +addr-gen-mode=stable-privacy
 +dns-search=
 +method=disabled
 +
 +[proxy]
 +
 +</file>
 +
 +<code>
 +chmod 600 /etc/NetworkManager/system-connections/galileo.nmconnection
 +</code>
 +
 +change:
 +   * permissions=user:scipio:; (this is local linux user)
 +   * user=xxx
 +   * password=xxx
 +
 +
 +
 +====== pptp GUI ======
 +
 +Installare il package networkmanager-pptp
 +
 +Aggiungere una VPN pptp
 +
 +{{:tips:vpn:vpn_1.png?400|}}
 +
 +{{ :tips:vpn:ptpp-galileo.png |}}
  
 ===== galileo openvpn ===== ===== galileo openvpn =====
Line 5: Line 79:
 Server certificate Server certificate
 <file txt ca.crt> <file txt ca.crt>
 +-----BEGIN CERTIFICATE-----
 +MIIDVDCCAjygAwIBAgIIK+uSMAP/qZcwDQYJKoZIhvcNAQELBQAwHDEaMBgGA1UE
 +AwwRQ0EtVlBOQ09OQy1NRVVDQ0kwHhcNMjEwNzE1MTAxOTQwWhcNMjIwNzE1MTAx
 +OTQwWjAcMRowGAYDVQQDDBFDQS1WUE5DT05DLU1FVUNDSTCCASIwDQYJKoZIhvcN
 +AQEBBQADggEPADCCAQoCggEBAMpvDbQaXdZ670pKiI/b5WuQa3iXxr7A9Z37Yk82
 +5ezrDlDpG2fzX1L7VHFwP9ICxWl5f4D54k9tf4BjSdkSprCNGZy7m6jjub/6KAQu
 +Ogqys//Ngd8izPAWVT7DT34z5rH8uuSbM/ZpZa+W0AQEQQi3NkVL7il1dN6vBZYZ
 +KDynF9xoWgrFNOjnzBB+/dJE/sz6Xz+HGhfMf8sQPg2BpOhjJNaQ+V3giRlGMQEA
 +r6hUwrOIYe0/fcP148eFl8pReAMwcw+Ngv3IV53iZq/DrJAWKwWwdwR4gevskVvz
 +UeFulcgrXN0W+lGM1JWwSwMlCR5E8Q8u/Y2l35rxl4UE7NECAwEAAaOBmTCBljAP
 +BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUGP2aPxrh
 +8UwB4OCsmtunMwXwdjYwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovLzk0LjIzMC43
 +Ni4yL2NybC8xNC5jcmwwJAYJYIZIAYb4QgENBBcWFUdlbmVyYXRlZCBieSBSb3V0
 +ZXJPUzANBgkqhkiG9w0BAQsFAAOCAQEAJ/9cl1glKLuvHHDXmnz17+bH5ZAWOR7g
 +KMjY1P2b9eK08mAAq4+Gp8/N/suiMBN6hA+WHtzbPYurXZgm1tAlI2kZE0XdLtig
 +o2rJ3Z24E/MuxxPGhNQe+l1Qx4v9Cp5Q98NIZh9Hl5KEV4ZvInvXbVxlzOSz+KN3
 +R9fWzZrV9KWOWfLXvPF4n/nLyVL702VDgpPaMmrShIOTOfbh9OGcJ/IYDo5FN0C0
 +vO0dg/IddWkJ0LDQLB78MXP6gXrXRhhSCosnASJyoFbX7C+2ouXDMzjDUH/bZbPI
 +ilkuUqzSXarAg4LqxShPRxfSnX2kUP6IXsDeonX/UwmzrztRd+QZ2w==
 +-----END CERTIFICATE-----
 +</file>
 +
 +==== GUI ====
 +ubuntu 
 +<code bash>
 +sudo apt install network-manager-openvpn-gnome
 +sudo service network-manager restart
 +</code>
 +
 +arch: pacman -S networkmanager-openvpn
 +
 +add VPN connection with network manager GUI:
 +  * type: openvpn
 +  * gateway: **vpn1.csgalileo.org**
 +  * user: <user>
 +  * pass: <pass>
 +  * CA certificate: <ca.crt>
 +  * in advanced settings check **"Use TCP connection"**
 +  * in route add 10.0.0.0/8 and 185.91.188.0/25
 +
 +==== Console ====
 +
 +<code bash>
 +sudo apt install openvpn
 +</code>
 +
 +<file txt auth.cfg>
 +<user>
 +<pass>
 +</file>
 +
 +<file txt openvpn.conf>
 +client
 +dev tun
 +proto tcp-client
 +remote vpn1.csgalileo.org
 +port 1194
 +nobind
 +persist-key
 +persist-tun
 +tls-client
 +remote-cert-tls server
 +ca cert_export_CA-VPNCONC-MEUCCI.crt
 +cert cert_export_client-VPNCONC-MEUCCI-adalcason.crt
 +key cert_export_client-VPNCONC-MEUCCI-adalcason.key
 +verb 1
 +mute 20
 +auth SHA1
 +auth-user-pass login.conf
 +cipher AES-256-CBC
 +;cipher AES-256-GCM
 +auth-retry interact
 +;route-gateway 172.22.22.1
 +route 10.0.0.0 255.0.0.0
 +route 172.16.0.0 255.240.0.0
 +route 94.230.77.0 255.255.255.0
 +route 94.230.78.0 255.255.255.0
 +route 94.230.79.0 255.255.255.0
 +route 109.104.240.0 255.255.252.0
 +route 185.91.188.0 255.255.252.0
 +#log-append log.txt
 +askpass chiave.config
 +
 +providers legacy default
 +data-ciphers-fallback BF-CBC
 +compat-mode 2.3.18
 +
 +</file>
 +
 +<file txt go>
 +sudo openvpn --config openvpn.conf
 +</file>
 +
 +Connect with 
 +<code bash>
 +./go
 +</code>
 +
 +==== Winzozz ====
 +
 +<file txt c:\Program Files\OpenVPN\config\auth_galileo.cfg>
 +username
 +password
 +</file>
 +
 +<file txt c:\Program Files\OpenVPN\config\galileo.ovpn>
 +client
 +dev tun
 +proto tcp-client
 +remote-cert-tls server
 +
 +remote vpn.csgalileo.org 1194
 +route 10.0.0.0 255.0.0.0 vpn_gateway 3
 +route 185.91.188.0 255.255.255.0 vpn_gateway 3
 +
 +resolv-retry infinite
 +nobind
 +persist-key
 +persist-tun
 +verb 3
 +auth-user-pass auth_galileo.cfg
 +script-security 3
 +<ca>
 -----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
 MIIE3zCCA8egAwIBAgIJAKI/infDrLAoMA0GCSqGSIb3DQEBCwUAMIGlMQswCQYD MIIE3zCCA8egAwIBAgIJAKI/infDrLAoMA0GCSqGSIb3DQEBCwUAMIGlMQswCQYD
Line 34: Line 231:
 vlW7 vlW7
 -----END CERTIFICATE----- -----END CERTIFICATE-----
 +</ca>
 </file> </file>
- 
-<code bash> 
-sudo apt install network-manager-openvpn-gnome 
-sudo service network-manager restart 
-</code> 
- 
-add VPN connection with network manager GUI: 
-  * type: openvpn 
-  * gateway: **vpn.csgalileo.org** 
-  * user: <user> 
-  * pass: <pass> 
-  * CA certificate: <ca.crt> 
-  * in advanced settings check **"Use TCP connection"** 
  
 ===== Lavagno ===== ===== Lavagno =====
  • tips/vpn/galileo.1492000974.txt.gz
  • Last modified: 2017/04/12 14:42
  • by scipio