OpenVPN - Revision history

Burger: Blanked the page

2023-05-18T18:22:25Z

Blanked the page

← Older revision		Revision as of 14:22, 18 May 2023
Line 1:		Line 1:
	~~OpenVPN can be used to allow remote access to the ZM server and camera feeds, on a desktop computer or mobile device. An alternative to OpenVPN is to use SSH port forwarding.~~



	~~== Setup ==~~

	~~From the ZM Server, follow instructions on~~

	~~<code>~~
	~~http://github.com/nyr/openvpn-install~~
	~~</code>~~

	~~Use a non default port for setup.~~


	~~The idea is to run the script on the server, create the configurations for server and client. Then to send the client configurations to the client, where he runs them.~~


	If you run the roadwarrior script a second time after the first time, it will allow you to make new client certificates. By default, OpenVPN will allow one person to use each certificate. If you want others to view the camera feeds, you will need to make additional certificates.


	The certificates are created as .ovpn files. These extensions should be renamed to .conf and placed in the /etc/openvpn folder for most distributions. Then edit /etc/default/openvpn and add the name of the ####.conf file to the autostart, if you want the VPN connected upon boot.


	If you have not setup a VPN before, you need to understand how to troubleshoot if things go wrong. VPNs are widely documented on the internet. This 'roadwarrior' script quickly sets up a VPN for you with the settings that 'most' people want. It needs to be slightly tweaked for Zoneminder usage, as we only want to redirect traffic intended for the ZM server. We do not want to redirect traffic through the Zoneminder server to the WAN.


	~~=== Mobile Device ===~~

	~~This works easily on a mobile device as well.~~

	~~Download the official OpenVPN application, and import the .ovpn file. Then connect to 10.8.0.1/zm on a browser.~~


	~~== Troubleshooting ==~~

	~~=== I can't connect to the internet when VPN is running ===~~

	VPNs can work in different ways depending how they route traffic. Some will route all outbound traffic to the VPN, others will only route a particular IP subnet requests. OpenVPN, with the configuration above adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side as well (comment out from /etc/openvpn/server.conf).

Snake: /* I can't connect to the internet when VPN is running */

2021-01-08T17:21:34Z

I can't connect to the internet when VPN is running

← Older revision		Revision as of 13:21, 8 January 2021
Line 37:		Line 37:
	=== I can't connect to the internet when VPN is running ===		=== I can't connect to the internet when VPN is running ===

	~~This~~ particular ~~VPN~~, ~~by default~~ adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side as well (comment out from /etc/openvpn/server.conf).		VPNs can work in different ways depending how they route traffic. Some will route all outbound traffic to the VPN, others will only route a particular IP subnet requests. OpenVPN, with the configuration above adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side as well (comment out from /etc/openvpn/server.conf).

Snake at 06:40, 19 January 2019

2019-01-19T06:40:00Z

← Older revision		Revision as of 02:40, 19 January 2019
Line 1:		Line 1:
	OpenVPN can be used to allow remote access to the ZM server and camera feeds, on a desktop computer or mobile device.		OpenVPN can be used to allow remote access to the ZM server and camera feeds, on a desktop computer or mobile device. An alternative to OpenVPN is to use SSH port forwarding.


Line 31:		Line 31:

	Download the official OpenVPN application, and import the .ovpn file. Then connect to 10.8.0.1/zm on a browser.		Download the official OpenVPN application, and import the .ovpn file. Then connect to 10.8.0.1/zm on a browser.


	== Troubleshooting ==		== Troubleshooting ==

Snake at 22:23, 27 February 2017

2017-02-27T22:23:23Z

← Older revision		Revision as of 18:23, 27 February 2017
Line 30:		Line 30:
	This works easily on a mobile device as well.		This works easily on a mobile device as well.

	Download the official OpenVPN application ~~from the internet~~, and import the .ovpn file. Then connect to 10.8.0.1/zm on a browser.		Download the official OpenVPN application, and import the .ovpn file. Then connect to 10.8.0.1/zm on a browser.

	== Troubleshooting ==		== Troubleshooting ==
Line 36:		Line 36:
	=== I can't connect to the internet when VPN is running ===		=== I can't connect to the internet when VPN is running ===

	This particular VPN, by default adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side as well.		This particular VPN, by default adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side as well (comment out from /etc/openvpn/server.conf).

Snake: /* Setup */

2017-02-27T22:22:17Z

Setup

← Older revision		Revision as of 18:22, 27 February 2017
Line 12:		Line 12:

	Use a non default port for setup.		Use a non default port for setup.


			The idea is to run the script on the server, create the configurations for server and client. Then to send the client configurations to the client, where he runs them.


	If you run the roadwarrior script a second time after the first time, it will allow you to make new client certificates. By default, OpenVPN will allow one person to use each certificate. If you want others to view the camera feeds, you will need to make additional certificates.		If you run the roadwarrior script a second time after the first time, it will allow you to make new client certificates. By default, OpenVPN will allow one person to use each certificate. If you want others to view the camera feeds, you will need to make additional certificates.

Snake: /* Setup */

2017-02-27T22:20:37Z

Setup

← Older revision		Revision as of 18:20, 27 February 2017
Line 6:		Line 6:

	From the ZM Server, follow instructions on		From the ZM Server, follow instructions on
	~~<code>http://github.com/nyr/openvpn-install</code>~~

			<code>
			http://github.com/nyr/openvpn-install
			</code>

			Use a non default port for setup.

	If you run the roadwarrior script a second time after the first time, it will allow you to make new client certificates. By default, OpenVPN will allow one person to use each certificate. If you want others to view the camera feeds, you will need to make additional certificates.		If you run the roadwarrior script a second time after the first time, it will allow you to make new client certificates. By default, OpenVPN will allow one person to use each certificate. If you want others to view the camera feeds, you will need to make additional certificates.
Line 23:		Line 27:

	Download the official OpenVPN application from the internet, and import the .ovpn file. Then connect to 10.8.0.1/zm on a browser.		Download the official OpenVPN application from the internet, and import the .ovpn file. Then connect to 10.8.0.1/zm on a browser.


	== Troubleshooting ==		== Troubleshooting ==

Snake: /* I can't connect to the internet when VPN is running */

2017-02-27T22:14:50Z

I can't connect to the internet when VPN is running

← Older revision		Revision as of 18:14, 27 February 2017
Line 29:		Line 29:
	=== I can't connect to the internet when VPN is running ===		=== I can't connect to the internet when VPN is running ===

	This particular VPN, by default adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side.		This particular VPN, by default adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side as well.

Snake at 22:14, 27 February 2017

2017-02-27T22:14:17Z

← Older revision		Revision as of 18:14, 27 February 2017
Line 5:		Line 5:
	== Setup ==		== Setup ==

	~~Follow~~ instructions on		From the ZM Server, follow instructions on
	<code>http://github.com/nyr/openvpn-install</code>		<code>http://github.com/nyr/openvpn-install</code>


	If you run the ~~program~~ a second time after the first time, it will allow you to make new client certificates. By default, OpenVPN will allow one person to use each certificate. If you want others to view the camera feeds, you will need to make additional certificates.		If you run the roadwarrior script a second time after the first time, it will allow you to make new client certificates. By default, OpenVPN will allow one person to use each certificate. If you want others to view the camera feeds, you will need to make additional certificates.

Snake: /* I can't connect to the internet when VPN is running */

2017-02-27T22:10:57Z

I can't connect to the internet when VPN is running

← Older revision		Revision as of 18:10, 27 February 2017
Line 29:		Line 29:
	=== I can't connect to the internet when VPN is running ===		=== I can't connect to the internet when VPN is running ===

	This particular VPN, by default adds a setting called: This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push ~~default gw commands~~ that you might already know forward traffic.		This particular VPN, by default adds a setting called: '''Topology Subnet''' This setting will route traffic through VPN which you do not want for an OpenVPN setup with a camera. You want a VPN that connects only to the camera machine subnet when you want it. You are not trying to forward all outgoing traffic. Note that this setting is in addition to the push redirect gateway and push dhcp options that you might already know forward traffic. All of the push commands should be disabled on the server side.

Snake at 22:07, 27 February 2017

2017-02-27T22:07:22Z

← Older revision		Revision as of 18:07, 27 February 2017
Line 6:		Line 6:

	Follow instructions on		Follow instructions on
	[code]http://github.com/nyr/openvpn-install[/code]		<code>http://github.com/nyr/openvpn-install</code>