Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save berga/bcf8864a715b7ca240f84aee1268d4fd to your computer and use it in GitHub Desktop.
Save berga/bcf8864a715b7ca240f84aee1268d4fd to your computer and use it in GitHub Desktop.
#############################
### GENERATE CERT AND KEY ###
#############################
# when generating key and cert, use password provided by administrator
cd ~/Workspace/Silvermedia/vpn
kozak127@callisto:~/Workspace/Silvermedia/vpn$ openssl pkcs12 -in michal.wesoly.p12 -nocerts -nodes -out michal.wesoly.key
Enter Import Password:
MAC verified OK
kozak127@callisto:~/Workspace/Silvermedia/vpn$ openssl pkcs12 -in michal.wesoly.p12 -clcerts -nokeys -out michal.wesoly.crt
Enter Import Password:
MAC verified OK
######################################
### RUN CLIENT AND MANAGEMENT TOOL ###
######################################
cd ~/Downloads/vpnclient
kozak127@callisto:~/Downloads/vpnclient$ sudo ./vpnclient start
The SoftEther VPN Client service has been started.
kozak127@callisto:~/Downloads/vpnclient$ sudo ./vpncmd
vpncmd command - SoftEther VPN Command Line Management Utility
SoftEther VPN Command Line Management Utility (vpncmd command)
Version 4.21 Build 9613 (English)
Compiled 2016/04/24 16:39:47 by yagi at pc30
Copyright (c) SoftEther VPN Project. All Rights Reserved.
By using vpncmd program, the following can be achieved.
1. Management of VPN Server or VPN Bridge
2. Management of VPN Client
3. Use of VPN Tools (certificate creation and Network Traffic Speed Test Tool)
Select 1, 2 or 3: 2
Specify the host name or IP address of the computer that the destination VPN Client is operating on.
If nothing is input and Enter is pressed, connection will be made to localhost (this computer).
Hostname of IP Address of Destination:
Connected to VPN Client "localhost".
######################################
### CREATE VIRTUAL NETWORK ADAPTER ###
######################################
VPN Client>nicCreate
NicCreate command - Create New Virtual Network Adapter
Virtual Network Adapter Name: silvermedia
The command completed successfully.
###########################
### CREATE USER ACCOUNT ###
###########################
VPN Client>accountcreate silvermedia
AccountCreate command - Create New VPN Connection Setting
Destination VPN Server Host Name and Port Number: remote.silvermedia.pl:443
Destination Virtual Hub Name: SILVERMEDIA
Connecting User Name: michal.wesoly
Used Virtual Network Adapter Name: silvermedia
The command completed successfully.
###############################
### ADD KEY AND CERTIFICATE ###
###############################
VPN Client>AccountCertSet silvermedia
AccountCertSet command - Set User Authentication Type of VPN Connection Setting to Client Certificate Authentication
Read X.509 certificate from file name: /home/kozak127/Workspace/Silvermedia/vpn/michal.wesoly.crt
Read private key from file name: /home/kozak127/Workspace/Silvermedia/vpn/michal.wesoly.key
The command completed successfully.
######################
### VERIFY ACCOUNT ###
######################
VPN Client>accountget silvermedia
AccountGet command - Get Setting of VPN Connection Setting
Item |Value
-----------------------------------------------------+-------------------------------------------------------------------------------------------------------------------------------
VPN Connection Setting Name |silvermedia
Destination VPN Server Host Name |remote.silvermedia.pl
Destination VPN Server Port Number |443
Destination VPN Server Virtual Hub Name |SILVERMEDIA
Proxy Server Type |Direct TCP/IP Connection
Verify Server Certificate |Disable
Device Name Used for Connection |silvermedia
Authentication Type |Client Certificate Authentication
User Name |michal.wesoly
Client Certificate for Authentication Use |CN=michal.wesoly, SERIAL="00" (Digest: MD5="XXX", SHA1="XXX")
Number of TCP Connections to Use in VPN Communication|1
Interval between Establishing Each TCP Connection |1
Connection Life of Each TCP Connection |Infinite
Use Half Duplex Mode |Disable
Encryption by SSL |Enable
Data Compression |Disable
Connect by Bridge / Router Mode |Disable
Connect by Monitoring Mode |Disable
No Adjustment for Routing Table |Disable
Do not Use QoS Control Function |Disable
The command completed successfully.
#######################
### CONNECT ACCOUNT ###
#######################
VPN Client>accountconnect silvermedia
AccountConnect command - Start Connection to VPN Server using VPN Connection Setting
The command completed successfully.
#############################
### ENABLE IP4 FORWARDING ###
#############################
kozak127@callisto:~$ sudo echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf
kozak127@callisto:~$ sudo sysctl -p
######################
### ALTER IP TABLE ###
######################
# this is not a typo - in vpncmd is silvermedia, in iptables is vpn_silvermedia
kozak127@callisto:~$ sudo dhclient vpn_silvermedia
######################################
### AFTER REBOOT, TO RUN VPN AGAIN ###
######################################
cd ~/Downloads/vpnclient
kozak127@callisto:~/Downloads/vpnclient$ sudo ./vpnclient start
The SoftEther VPN Client service has been started.
kozak127@callisto:~/Downloads/vpnclient$ sudo ./vpncmd
vpncmd command - SoftEther VPN Command Line Management Utility
SoftEther VPN Command Line Management Utility (vpncmd command)
Version 4.21 Build 9613 (English)
Compiled 2016/04/24 16:39:47 by yagi at pc30
Copyright (c) SoftEther VPN Project. All Rights Reserved.
By using vpncmd program, the following can be achieved.
1. Management of VPN Server or VPN Bridge
2. Management of VPN Client
3. Use of VPN Tools (certificate creation and Network Traffic Speed Test Tool)
Select 1, 2 or 3: 2
Specify the host name or IP address of the computer that the destination VPN Client is operating on.
If nothing is input and Enter is pressed, connection will be made to localhost (this computer).
Hostname of IP Address of Destination:
Connected to VPN Client "localhost".
VPN Client>accountconnect silvermedia
AccountConnect command - Start Connection to VPN Server using VPN Connection Setting
The command completed successfully.
kozak127@callisto:~$ sudo dhclient vpn_silvermedia
#################
### AND VOLIA ###
#################
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment