User Tools

Site Tools

Quick and easy OpenVPN server

Starting with Turris OS 3.6, you can configure OpenVPN easily through the Foris web interface. If you want to find out more about the OpenVPN Foris plugin before you install it - for example what it is good for, why it isn't preinstalled and the requirements for running it - visit this more theoretical article on OpenVPN. Alternatively, you can also install OpenVPN from the command line.

This manual describes how to set up OpenVPN in five easy steps using Foris:

1. Download the OpenVPN package

Log into the Foris user interface (if you don't know how to do that, please follow this manual) and go to the Updater tab. Check the box next to OpenVPN - An easy setup of OpenVPN server from Foris. Then click Save changes.

2. Check that the package was installed

Go to the Home page tab and refresh the browser, you should see all the installed packages and the “foris-openvpn-plugin” among them:

3. Reboot your router using Foris

Go to the Maintenance tab, scroll down and click “Reboot”.

4. Generate certificate authority

Once the router has rebooted, refresh the page and log back in. There should now be a new OpenVPN tab between the Data collection and Diagnostics tabs. Go to that tab and click Generate CA.

It might take up to 30 minutes to generate the certificate authority, but this isn't a process that we can speed up in any way. Afterwards you can just click Reload page.

5. Enable configuration

By checking the box Configuration enabled you let the plugin create a simplified VPN configuration. The reason for this step is for you to be able to have your personal OpenVPN configuration without it getting destroyed. After you click Apply configuration, you can temporarily lose connection to your router, you just need to refresh the page or wait.

In most cases you don’t need to change any of the settings, you can stick to the automatically generated OpenVPN address and progress to creating clients. For every client you need to generate a separate file, which the user will load into his OpenVPN client. Here you can just add the name of the client (this serves as a note to yourself) and the configuration file is generated within a few minutes. This again is an encryption process, which cannot be sped up.

Tadaaa! You now have an OpenVPN server.

We wish you a happy and open VPN time!

Please note: if something is not working as it should or you would like to extend the OpenVPN configuration, please write your suggestions here.

Configuring OpenVPN on the client side

At this point you need to select and download a client for your platform, if you don't already have one. The OpenVPN client is available for all possible platforms, you just need to find a manual for yours to set it up correctly.