{"id":4087,"date":"2013-05-03T09:23:52","date_gmt":"2013-05-03T16:23:52","guid":{"rendered":"http:\/\/www.podfeet.com\/wordpress\/?page_id=4087"},"modified":"2018-11-29T15:10:43","modified_gmt":"2018-11-29T23:10:43","slug":"how-to-set-up-a-vpn-server-using-a-mac-2","status":"publish","type":"page","link":"https:\/\/www.podfeet.com\/blog\/tutorials-5\/how-to-set-up-a-vpn-server-using-a-mac-2\/","title":{"rendered":"How To Set Up a VPN Server Using a Mac"},"content":{"rendered":"

<\/p>\n

\n
\n These instructions may seem arcane and complex but they’re really easy if you just follow along step by step. Donald Burr of Otaku No Podcast (otakunopodcast.com) created all of these instructions in text form, Allison just created the ScreenSteps tutorial! <\/font><\/p>\n

I’ll be focusing on using a Mac on your home network using an Airport Extreme Router (of course any router will work but the screenshots will be for the Airport). If you have a router capable of installing the Tomato Router Firmware, you should look at Donald’s full instructions because you may not need to use a Mac at all for this, your router can do it all. See Donald’s notes for other options.<\/font><\/p>\n

Read Donald’s instructions ===> here<\/a>.<\/p>\n

If you’d rather download this manual for easy off line reference, click here<\/a>.<\/p>\n

If you’ve installed the VPN Server but would like to UNinstall it, click here<\/a> for instructions.
\nIf you can connect to your VPN server but can’t get outside your network, click here<\/a>.<\/p>\n

Let’s get started already!<\/p>\n<\/p><\/div>\n

\n

SECTION 1 – Setting Up a Static IP for the Server on the LAN Side<\/h3>\n
\n

These instructions should be completed on the machine that will become the VPN server.\n<\/p><\/div>\n<\/p><\/div>\n

\n

Open Network Preferences<\/h3>\n
\n \"wpid4031-media_1365280662765.png\"\n<\/div>\n<\/p><\/div>\n
\n

Select Advanced<\/h3>\n
\n \"wpid4032-media_1365280675209.png\"\n<\/div>\n<\/p><\/div>\n
\n

Copy the Mac Address<\/h3>\n
\n \"wpid4033-media_1365280721095.png\"\n<\/div>\n<\/p><\/div>\n
\n

Open AirPort Utility<\/h3>\n
\n \"wpid4028-media_1365280516371.png\"\n<\/div>\n
\n Click on your router, in my case it’s called White Dart.\n<\/div>\n<\/p><\/div>\n
\n

Select Enter Router Password<\/h3>\n
\n \"wpid4029-media_1365280554220.png\"\n<\/div>\n
\n Enter your password when prompted and click OK.\n<\/div>\n<\/p><\/div>\n
\n

Select Edit<\/h3>\n
\n \"wpid4030-media_1365280584891.png\"\n<\/div>\n<\/p><\/div>\n
\n

Select the Network Tab and Click the + Button<\/h3>\n
\n \"wpid4034-media_1365280882600.png\"\n<\/div>\n<\/p><\/div>\n
\n

Paste in the Mac Address You Copied Earlier<\/h3>\n
\n \"wpid4035-media_1365280918919.png\"\n<\/div>\n<\/p><\/div>\n
\n

Select Update<\/h3>\n
\n \"wpid4036-media_1365280952190.png\"\n<\/div>\n<\/p><\/div>\n
\n

Select Continue<\/h3>\n
\n \"wpid4037-media_1365280961141.png\"\n<\/div>\n
\n Quit Airport Utility when this operation completes.\n<\/div>\n<\/p><\/div>\n
\n

SECTION 2 – Creating Account at No-IP.com<\/h3>\n
\n \"wpid4038-media_1365281321183.png\"\n<\/div>\n
\n Navigate to http:\/\/www.noip.com<\/a> and select Sign Up.\n<\/div>\n<\/p><\/div>\n
\n

Create a Username and Password<\/h3>\n
\n \"wpid4039-media_1365281419227.png\"\n<\/div>\n
\n Enter your Email address. Note the host name shown which is free, but if you want to pay you can get more options. Scroll down to the bottom of the page.\n<\/div>\n<\/p><\/div>\n
\n

Select Sign Up<\/h3>\n
\n \"wpid4040-media_1365281428527.png\"\n<\/div>\n<\/p><\/div>\n
\n

Email Confirmation Will be Sent<\/h3>\n
\n \"wpid4041-media_1365281518624.png\"\n<\/div>\n<\/p><\/div>\n
\n

Click the Link in the Email<\/h3>\n
\n \"wpid4042-media_1365281542237.png\"\n<\/div>\n<\/p><\/div>\n
\n

Download the Update Client<\/h3>\n
\n \"wpid4043-media_1365281570364.png\"\n<\/div>\n
\n This client will run in the background and check to see if your IP address has changed, and if it has, will send it to no-ip.com\n<\/div>\n<\/p><\/div>\n
\n

Download and Install the Client<\/h3>\n
\n \"wpid4044-media_1365282117739.png\"\n<\/div>\n<\/p><\/div>\n
\n

Enter Your No-iP.com Account Info You Just Created<\/h3>\n
\n \"wpid4045-media_1365282485030.png\"\n<\/div>\n
\n This menu should pop up automatically.\n<\/div>\n<\/p><\/div>\n
\n

Click OK<\/h3>\n
\n \"wpid4046-media_1365282491538.png\"\n<\/div>\n<\/p><\/div>\n
\n

Click on Hosts and Check the Box Next to the Host Name You Chose<\/h3>\n
\n \"wpid4047-media_1365282517357.png\"\n<\/div>\n
\n It may take a few moments for the host name you selected at no-ip.com to show up. Make sure you note this name, you’ll need it later.\n<\/div>\n<\/p><\/div>\n
\n

Select Update Now<\/h3>\n
\n \"wpid4048-media_1365282533083.png\"\n<\/div>\n<\/p><\/div>\n
\n

Turn on the Daemon<\/h3>\n
\n \"wpid4049-media_1365282588526.png\"\n<\/div>\n
\n I chose this rather than running the application in the background all the time.\n<\/div>\n<\/p><\/div>\n
\n

SECTION 3 – Installing Xcode and Running Command Line Tools<\/h3>\n
\n Find Xcode in the Mac App Store\n<\/div>\n<\/p><\/div>\n
\n

Install Xcode<\/h3>\n
\n \"wpid4050-media_1365282711107.png\"\n<\/div>\n<\/p><\/div>\n
\n

Install Java<\/h3>\n
\n \"wpid4051-media_1365284749241.png\"\n<\/div>\n
\n Xcode only installs the standalone Java, and it does NOT include the Java Web plugin that has been the subject of so many security vulnerabilities lately.\n<\/div>\n<\/p><\/div>\n
\n

Select Install Next to Command Line Tools<\/h3>\n
\n \"wpid4052-media_1365285864062.png\"\n<\/div>\n
\n Wait till the installation finishes and quit X-Code\n<\/div>\n<\/p><\/div>\n
\n

Type xcodebuild -license to Open the License Agreement<\/h3>\n
\n \"wpid4053-media_1365287350119.png\"\n<\/div>\n<\/p><\/div>\n
\n

Start Hitting the Space Bar to Scroll Through the EULA – A LOT of Times<\/h3>\n
\n \"wpid4054-media_1365287366580.png\"\n<\/div>\n<\/p><\/div>\n
\n

Type Agree<\/h3>\n
\n \"wpid4055-media_1365287392448.png\"\n<\/div>\n
\n Type agree\n<\/div>\n<\/p><\/div>\n
\n

Joy of Agreement<\/h3>\n
\n \"wpid4056-media_1365287403891.png\"\n<\/div>\n<\/p><\/div>\n
\n

SECTION 4 – Installing MacPorts<\/h3>\n
\n \"wpid4057-media_1365287788717.png\"\n<\/div>\n
\n Navigate to https:\/\/distfiles.macports.org\/MacPorts\/<\/a> and scroll to the bottom to download the installer file for your OS.\n<\/div>\n<\/p><\/div>\n
\n

Install MacPorts<\/h3>\n
\n \"wpid4058-media_1365288008992.png\"\n<\/div>\n<\/p><\/div>\n
\n

Enter These Commands in the Terminal<\/h3>\n
\n \"wpid4059-media_1365288274692.png\"\n<\/div>\n
\n To run the self update to Macports enter:<\/p>\n
  source ~\/.profile\nthen\n  sudo port -v selfupdate<\/pre>\n
and enter your administrator password\n<\/p><\/div>\n<\/p><\/div>\n
\n
Success<\/h3>\n
\n    \"wpid4060-media_1365288401688.png\"\n<\/div>\n<\/p><\/div>\n
\n
Open the VPN Software<\/h3>\n
\n    \"wpid4061-media_1365288464077.png\"\n<\/div>\n
\n    Enter<\/p>\n
  sudo port -v install openvpn2<\/pre>\n
and watch a lot of glop go by…\n<\/p><\/div>\n<\/p><\/div>\n
\n
SECTION 5 – Installing Tuntap Drivers<\/h3>\n
\n    \"wpid4062-media_1365288693615.png\"\n<\/div>\n
\n    Download tuntap drivers from http:\/\/tuntaposx.sourceforge.net\/download.xhtml<\/a>\n<\/div>\n<\/p><\/div>\n
\n
Open the Package File (in the folder after tuntap expands)<\/h3>\n
\n    \"wpid4063-media_1365288872704.png\"\n<\/div>\n
\n    Gatekeeper won’t let you just double click on the installer package (it will complain that it is from an unknown source), you have to right click on the installer package and choose “open”.\n<\/div>\n<\/p><\/div>\n
\n
SECTION 6 – Donald’s Nifty Scripts of Doom<\/h3>\n
\n    Download Donald’s scripts from: https:\/\/www.dropbox.com\/s\/4yhc5oimze9zzij\/openvpn-mac.tar.bz2?dl=0<\/a><\/p>\n<\/div><\/div>\n
\n
Type These Commands to Unarchive the Scripts<\/h3>\n
\n    \"wpid4064-media_1365289258876.png\"\n<\/div>\n
\n
cd ~\/Downloads\ntar xvjf openvpn-mac.tar.bz2<\/pre>\n<\/div><\/div>\n
\n
Setting Up OpenVPN Server<\/h3>\n
\n    \"wpid4065-media_1365290046566.png\"\n<\/div>\n
\n    We’re now going to run Donald’s scripts.  Enter this command:<\/font><\/p>\n
  cd openvpn-mac && sudo bash setup-openvpn-server<\/font><\/pre>\n
Name your Server (I’ve entered kyles-mac-vpn)<\/font>
\nEnter the dynamic dns host name you noted back on no-ip.com (you DID note it, right?)<\/font>\n<\/div>\n<\/p><\/div>\n
\n
Keep Answering Questions<\/h3>\n
\n    \"wpid4066-media_1365290326768.png\"\n<\/div>\n
\n    The first time through you need to answer these.  These steps will be duplicated MANY times, but after this the answers will be there and you can simply hit Enter for each questions.\n<\/div>\n<\/p><\/div>\n
\n
Hit Enter for All These Questions for an RSA Key<\/h3>\n
\n    \"wpid4068-media_1365290494060.png\"\n<\/div>\n<\/p><\/div>\n
\n
And Again for Some Reason<\/h3>\n
\n    \"wpid4067-media_1365290461185.png\"\n<\/div>\n<\/p><\/div>\n
\n
Keep Answering…<\/h3>\n
\n    \"wpid4069-media_1365290595513.png\"\n<\/div>\n<\/p><\/div>\n
\n
And Again<\/h3>\n
\n    \"wpid4070-media_1365290809777.png\"\n<\/div>\n<\/p><\/div>\n
\n
And Again…<\/h3>\n
\n    \"wpid4071-media_1365290886144.png\"\n<\/div>\n<\/p><\/div>\n
\n
Whew!<\/h3>\n
\n    \"wpid4072-media_1365290948754.png\"\n<\/div>\n
\n    Enter passphrase and password as many times as they ask for it!\n<\/div>\n<\/p><\/div>\n
\n
Finder Window Opens Showing config-files<\/h3>\n
\n    \"wpid4073-media_1365291120916.png\"\n<\/div>\n
\n    Copy this file to Dropbox. It will be the first connection file you test. It would be good to name it something associated with the device on which you’ll use it (you’ll be creating one of these for each of your devices).\n<\/div>\n<\/p><\/div>\n
\n
Create a New VPN Connection Document for Each Device You Have<\/h3>\n
\n    In Terminal, enter: <\/p>\n
  sudo setup-openvpn-client connection-name<\/pre>\n
where connection-name means something to you for each different device you’ll want to connect to the VPN server.  Move each of these files to Dropbox to be picked up on your devices.\n<\/p><\/div>\n<\/p><\/div>\n
\n
SECTION 7 – Opening up UDP Port 1194<\/h3>\n
\n    \"wpid4074-media_1365291286486.png\"\n<\/div>\n
\n    Open Airport Utility again, select your Airport again, Select Edit again.  Select the Network tab, and select the + under Port Settings\n<\/div>\n<\/p><\/div>\n
\n
Enter Information As Shown<\/h3>\n
\n    \"wpid4075-media_1365291365335.png\"\n<\/div>\n<\/p><\/div>\n
\n
Select Update<\/h3>\n
\n    \"wpid4076-media_1365291371431.png\"\n<\/div>\n
\n    Wait until your Airport updates.\n<\/div>\n<\/p><\/div>\n
\n
SECTION 8 – Install VPN Software on iOS<\/h3>\n
\n    \"wpid4021-IMG_5127.png\"\n<\/div>\n
\n    Download OpenVPN Connect from the iTunes App Store.\n<\/div>\n<\/p><\/div>\n
\n
Open Dropbox<\/h3>\n
\n    \"wpid4022-IMG_5128.png\"\n<\/div>\n
\n    Find the file you created and moved into Dropbox and tap on it.\n<\/div>\n<\/p><\/div>\n
\n
Select the Open In Button in the Bottom Right<\/h3>\n
\n    \"wpid4023-IMG_5129.png\"\n<\/div>\n<\/p><\/div>\n
\n
Select Open in OpenVPN<\/h3>\n
\n    \"wpid4024-IMG_5130.png\"\n<\/div>\n<\/p><\/div>\n
\n
Click the Green Plus Button to Import the File<\/h3>\n
\n    \"wpid4025-IMG_5131.png\"\n<\/div>\n<\/p><\/div>\n
\n
Enter the Password<\/h3>\n
\n    \"wpid4026-IMG_5133.png\"\n<\/div>\n
\n    Enter the Password you created in the creation of the file, and tap the Save switch to turn it on.  Finally tap the Off Switch to Connect to the VPN.\n<\/div>\n<\/p><\/div>\n
\n
Connected!<\/h3>\n
\n    \"wpid4027-IMG_5134.png\"\n<\/div>\n<\/p><\/div>\n
\n
SECTION 9 – Install VPN Software on OSX<\/h3>\n
\n    \"wpid4077-media_1365292563757.png\"\n<\/div>\n
\n    Two options for a VPN application on the Mac. Donald recommended Viscosity from http:\/\/www.sparklabs.com\/viscosity\/download\/<\/a> which is $9 per Mac.  <\/p>\n
After the show Dr. Matt suggested the free TunnelBlick from http:\/\/code.google.com\/p\/tunnelblick<\/a>. I installed both and they both work well.  This tutorial will be for Viscosity, but if you try Tunnelblick you have to do one thing to make it work.  In the Settings, Configuration tab, select Advanced and then uncheck the box to use TunnelBlick’s tun\/tap drivers.  <\/p>\n
Let’s keep going with Viscosity as our example.\n<\/p><\/div>\n<\/p><\/div>\n
\n
Install Viscosity<\/h3>\n
\n    \"wpid4078-media_1365292763152.png\"\n<\/div>\n
\n    Click on the icon for Viscosity in the menubar and choose Preferences.\n<\/div>\n<\/p><\/div>\n
\n
In the Connection Tab Click on the Plus Button at the Bottom<\/h3>\n
\n    \"wpid4079-media_1365292787379.png\"\n<\/div>\n<\/p><\/div>\n
\n
Select Import Connection From File…<\/h3>\n
\n    \"wpid4080-media_1365292806653.png\"\n<\/div>\n<\/p><\/div>\n
\n
Navigate to the File You Created for This Device<\/h3>\n
\n    \"wpid4081-media_1365292836675.png\"\n<\/div>\n
\n    In my case I called it alsmac so I could tell which one to open\n<\/div>\n<\/p><\/div>\n
\n
Connection Imported<\/h3>\n
\n    \"wpid4082-media_1365292845976.png\"\n<\/div>\n<\/p><\/div>\n
\n
Connect Using Menu Bar App<\/h3>\n
\n    \"wpid4083-media_1365293050152.png\"\n<\/div>\n<\/p><\/div>\n
\n
Enter the Password You Created<\/h3>\n
\n    \"wpid4084-media_1365293071771.png\"\n<\/div>\n
\n    No clue which one of the 198 I entered, luckily I typed the same one over and over again.\n<\/div>\n<\/p><\/div>\n
\n
Fleeting Notification of Connection<\/h3>\n
\n    \"wpid4086-media_1365293260928.png\"\n<\/div>\n
\n    To test mine at home I used a Mifi so I was on a different network.\n<\/div>\n<\/p><\/div>\n
\n
Use the Menubar Icon to Disconnect When You’re Through<\/h3>\n
\n    \"wpid4085-media_1365293105700.png\"\n<\/div>\n
\n    If you want to prove to yourself that you’re on VPN – go to http:\/\/ipchicken.com<\/a> before and after you VPN and you’ll find that your IP changes to your home IP.  Congratulations!\n<\/div>\n<\/p><\/div>\n<\/div>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
These instructions may seem arcane and complex but they’re really easy if you just follow along step by step. Donald Burr of Otaku No Podcast (otakunopodcast.com) created all of these instructions in text form, Allison just created the ScreenSteps tutorial! I’ll be focusing on using a Mac on your home network using an Airport Extreme […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":4374,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"jetpack_post_was_ever_published":false,"footnotes":""},"categories":[],"tags":[51,7,152,9,142],"class_list":["post-4087","page","type-page","status-publish","hentry","tag-mac","tag-macintosh","tag-security-tutorials","tag-tutorials","tag-vpn","post"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/pages\/4087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/comments?post=4087"}],"version-history":[{"count":5,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/pages\/4087\/revisions"}],"predecessor-version":[{"id":16950,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/pages\/4087\/revisions\/16950"}],"up":[{"embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/pages\/4374"}],"wp:attachment":[{"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/media?parent=4087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/categories?post=4087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.podfeet.com\/blog\/wp-json\/wp\/v2\/tags?post=4087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}