Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
Part two of Building an OpenVPN access point, this time on Hak5.
-------------------------------
Shop: http://www.hakshop.com
Support:   / threatwire  
Subscribe:    / hak5  
Our Site: http://www.hak5.org
Contact Us:   / hak5  
------------------------------
Recap: We've been building an VPN WiFi hotspot using OpenWRT and OpenVPN.

Last week we setup the OpenVPN Access Server and setup user accounts.

Today we're going to work on the access-point side of things in OpenWRT by setting up the openvpn client, configuring the IP routing and testing the connection with WiFi devices.


SCP client.opvn to pineapple
SSH to pineapple
Get pineapple online
opkg update
opkg install openvpn-openssl
route
openvpn client.ovpn
route

#Setup forwarding for clients

iptables -t nat -A POSTROUTING -s 172.16.42.0/24 -o tun0 -j MASQUERADE
iptables -A FORWARD -s 172.16.42.0/24 -o tun0 -j ACCEPT
iptables -A FORWARD -d 172.16.42.0/24 -m state --state ESTABLISHED,RELATED -i tun0 -j ACCEPT

#demo clients
Test connection

apt-get update
apt-get install php5-cli

~-~~-~~~-~~-~
Please watch: "Bash Bunny Primer - Hak5 2225"
   • Bash Bunny Primer - Hak5  2225  
~-~~-~~~-~~-~
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.