
-------------------------------------------------------------------------------

QUICK HOW TO USE THIS WITH eComStation


This setup needs to be done on all clients and servers:

  Copy openvpn.sys + openvpn.sym + openvpn.nif to \IBMCOM\MACS 
  on your bootdrive.

  Start MPTS2.CMD, and add "OpenVPN Virtual Net Driver" as
  a new interface.
  Select the device and EDIT - which gives you access to change
  the MAC address. It is VERY important, that you create a uniq
  MAC address, as OpenVPN will not work, it you leave it at default !!

  Add TCP/IP as a protocol to this interface.
  If you was to use Peer through VPN tunnel, add
  "NETBIOS OVER TCP/IP" as protocol too.
  (Do not add "NETBIOS" protocol as it doesn't work here)
  Exit from MPTN.

  Now you need to configure the new lan interface, which is done by editing
  the file \mtpn\bin\setup.cmd
  Uncomment the first free Ifconfig lanX line you have
  (If you only have 1 NIC that is most likely "Ifconfig lan1.. line)  
  Change this line to:

  On server:
  ifconfig lan1 10.7.7.1 netmask 255.255.255.0 metric 0 mtu 1500
  (again "lan1" should be your next free lanx).

  On clients:
  ifconfig lan1 10.7.7.2 netmask 255.255.255.0 metric 0 mtu 1500
  (again "lan1" should be your next free lanx).

  If you are setting up more that 1 client change IP to unique number on each
  in range 10.7.7.3 to 10.7.7.254

  Save file, and reboot PC.
  

-------------------------------------------------------------------------------

Generation of encryption key must only be done once:

  Now you need to generate a new secret key for encryption
  of traffic. Run:

  openvpn --genkey --secret static.key

  and now you have a new key. 
  This key should be used on all your servers/clients - so remember to 
  copy it in a safe way - not over unencrypted networks.

-------------------------------------------------------------------------------

Starting the server:
  The server runs as standard on port 1194 UDP. If your server is behind a
  Firewall/NAT remember to open for this port.
  The included server configuration file can be used without any modifications.
  All you need to do is starting the server with this command:

  Openvpn server.ovpn

  Now your server is ready to accept clients connecting.

-------------------------------------------------------------------------------

Starting the client:
  The client makes an outgoing connection to the server, so it shouldn't matter
  if you are behind a Firewall/NAT. Making connections out through a http-
  proxy is beyond the scope of this document (see openvpn.net).
  You need to change 1 line in the client configuration file - client.ovpm -
  before you can use it. Look for this line:

  remote microsoft.com

  and change the hostname to the hostname of the server you wich to connect to.
  You can use an IP address instead, if you want to.
  Save file, and start Openvpn client this way:

  Openvpn client.ovpn

-------------------------------------------------------------------------------

If all is done right, your client should connect to the server after a few
seconds. When that has happened, try

ping 10.7.7.1 

from client, to verify you have a working VPN tunnel.

From server, you can try:

ping 10.7.7.2

If you installed Peer (Netbios over TCP/IP) - you should be able to make peer
connect to you lan now.

The scope of this readme is only to help setting VPN tunnel up in its very
simplest form. Although this is usefull and safe enough for many, OpenVPN
do have a much more advanced possibilities and security.

For further information about OpenVPN - got to OpenVPN homepage, and 
READ IT ALL !

OpenVPN homapage:  http://openvpn.net
OpenVPN/2 ported for you by Pasha
This document written for you by Yoda

If you can't figure out what I've written in this document,
contact yoda@warpspeed.dk

If OpenVPN traps or crashes in other ways,
contact pasha@fortuna.odessa.ua

For all other questions, goto http://openvpn.net
and READ ;-)


 Yoda




