Access Server

Follow us

Install OpenVPN Access Server on Linux Debian 6

Last modified: 28 June 2012

How to: Install OpenVPN Access Server on Linux Debian 6

This document assumes you have a working Linux Debian 6 install with the network connection already set up and working properly. In this guide our sample OpenVPN Access Server is on IP address 192.168.47.220 - if yours is on another IP, please adjust to match. We will be using PuTTY to connect to the server and perform the command line part of the installation procedure. A browser will be used to open the admin web interface to configure the public IP/hostname for the OpenVPN Access Server. Click on each blue line to see the accompanying screenshot for more information. Please note that the screenshots may contain references to a slightly older version of Access Server, so you may see Access Server 1.8.3 in some places where we actually are up to 1.8.4 right now.

Start PuTTY and connect to the IP address of your server on port 22, SSH, and click ‘Open’.

Enter the server’s username and password. It must have root access.

Execute command: wget http://swupdate.openvpn.org/as/openvpn-as-1.8.4-Ubuntu10.amd_64.deb

Please note that in this example we assume that you are using a 64bits version of Linux Debian 6. If you're using 32bits, use the 32bits installation file.
Here's both the 32bits and the 64bits download URL's you can copy and paste into PuTTY easily (pasting in PuTTY is done by right clicking).
x64 (64bits) version: http://swupdate.openvpn.org/as/openvpn-as-1.8.4-Ubuntu10.amd_64.deb
x86 (32bits) version: http://swupdate.openvpn.org/as/openvpn-as-1.8.4-Ubuntu10.i386.deb

The filename of the installation file you've just downloaded will be shown. You need this in the next step.

Execute command: dpkg -i openvpn-as-1.8.4-Ubuntu10.amd_64.deb

After the installation has completed, you will see the address for the admin web interface clearly displayed, you will need this in a moment but first you MUST set a password for the admin web interface for OpenVPN Access Server. If you don't, you can't access your OpenVPN Access Server's admin web interface at all.

Execute command: passwd openvpn

Open the admin web interface address in your browser, in our example: https://192.168.47.220:943/admin

You will see a big scary SSL warning. This is normal and correct behavior. Click 'Proceed anyway' to continue.

Enter the username 'openvpn' and the password you assigned just a few moments ago.

The first time you login you will see the license agreement. If you agree, click 'agree'.

This is what the admin web interface looks like. Now click on 'Server Network Settings' in the panel on the left.

Now enter the proper hostname or public IP address at which this server will be reachable from the outside.

Click on 'Save Settings' at the bottom of the page to save the settings.

At the top of the page now click on 'Update Running Server' to commit the changes.

You will receive a confirmation message that the changes have been made. You're done.

Congratulations. You now have a working OpenVPN Access Server. Things on your to-do list now are deciding how to set up your user access system (PAM, local, LDAP, RADIUS), forwarding OpenVPN traffic to your OpenVPN Access Server (unless it's already on a public IP) and of course figuring out how you want to do the routing/NATting to your networks and what access you wish to give your VPN clients. For all of this we refer you to our other documentation pages and guides.