Create a VPN Server on Ubuntu 12.04 (OpenVZ)

As we know, VPN is frequently needed in order to connect to the Internet or other device in more safer way. So today I want to show you how to create your own VPN server using OpenVPN on Ubuntu 12.04

First, we run apt-get update & apt-get upgrade to update & upgrade the repo/package
Then, we get the openvpn & openssl package via apt-get install openvpn openssl

After that, cd  to openvpn dir;

cd /etc/openvpn

Then, we copy the file to the correct dir;

cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0 ./easy-rsa

Edit the vars file;

vi easy-rsa/vars

Change from this;

export EASY_RSA=”`pwd`”

to this;

export EASY_RSA=”/etc/openvpn/easy-rsa

Then, we run this 2 commands;

. ./easy-rsa/vars

Enter the dir;

cd easy-rsa

Link the config file;

ln -s openssl-1.0.0.cnf openssl.cnf

Then, we reverse the dir a step back, then we run this commands;

cd ..

./easy-rsa/build-ca OpenVPN
./easy-rsa/build-key-server server
./easy-rsa/build-key client1

Edit the config gile;

vi openvpn.conf

Begin openvpn.conf contents – copy below this line

dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
user nobody
group nogroup
status /var/log/openvpn-status.log
verb 3
push “redirect-gateway def1”
#set the dns servers
push “dhcp-option DNS”
push “dhcp-option DNS”
log-append /var/log/openvpn

end openvpn.conf contents – copy above this line

Enable ipv4 ip_forwarding;

echo 1 > /proc/sys/net/ipv4/ip_forward

Do “ifconfig” to get adapter name and ipaddress (venet0 was mine since my vps is using openvz)

Then, we put this iptables rule;

iptables -t nat -A POSTROUTING -s -o venet0 -j SNAT –to YOUR.VPS.IP

Please ensure that you vps ip is correct

Then we go dir backward & edit the sysctl file;

cd ..
vi sysctl.conf

uncomment (remove the #) from the line containing #net.ipv4.ip_forward=1

Create new openvpn config file;
Begin newvpn.ovpn contents – copy below this line

dev tun
proto udp
remote YOUR.VPS.IP 1194
resolv-retry infinite
ca ca.crt
cert client1.crt
key client1.key
verb 3

end newvpn.ovpn contents – copy above this line

Copy all this file;


and place it under 1 folder (e.g. vpn client)

Start the openvpn service;

service openvpn start

The software that I use to download the files required by openvpn client is called WinSCP. It allows you to transfer files via SSH. This is useful if you do not have an ftp or http server running.

Download all the config file (vpn client folder) to client/user PC via WinSCP.

The openvpn client that I use is openvpn protable. Paste the config folder to OpenVPNPortabledataconfig
Run the openvpn client to see if it is connected or not.

Credit to

Any Comments?