In this guide we will setup a “Debian 9(stretch)” virtual machine on our GCP Project and configure a OpenVPN server.

OpenVPN Access Server delivers the enterprise VPN your business has been looking for. Protect your data communications, secure IoT resources, and provide encrypted remote access to on-premise, hybrid, and public cloud resources. Access Server provides you with a powerful and easy-to-use web-based admin site that makes VPN management. To get started securing your OpenVPN Access Server with Duo, you'll need to: Sign up for a Duo account. Log in to the Duo Admin Panel and navigate to Applications. Click Protect an Application and locate the entry for OpenVPN Access Server in the applications list. OpenVPN Access Server is a set of installation and configuration tools that come in one package that simplifies the rapid deployment of a VPN remote access solution. At its core it is based on the popular OpenVPN open source software project, and maintains compatibility with it, making the deployed VPN immediately compatible with OpenVPN client. Mar 26, 2019 OpenVPN Access Server by OpenVPN Technologies, Inc. Is a full-featured SSL VPN software solution that integrates the open-source OpenVPN server capabilities with additional features. Those features include a simplified administration web interface and automated certificate management to easily issue user certificates and keys without.

Creating a Debian 9 instance

Let’s start by opening the menu from the top left of the page and selecting ‘VM instances’ under ‘Compute Engine’.

We start the creation process by clicking on create.

Next we start by giving a name to the instance to be created. Then we select a region. The best option is to select a region that is in close proximity. The regions can be further specified by selecting a zone under them(this is an optional choice and may be left as the default value).

Now we will select the operating system that we want the system to use. Click on the change icon and search for ‘Debian 9′(if that is not already selected).

We shall see a link for “Management, security, discs, networking, sole tenancy” when we scroll down the page. We will click on that to view an advanced options section.

Navigating to the Security tab we can add our public ssh key into the box. We should add a name at the end of the ssh key if there is not one as that will the username we shall use to connect to the instance later on.

Finally we shall move onto the Networking tab and add ‘vpn’ to the Network tags field. This tag will later be used to bind firewall rules to the instance.

Finally we can click the ‘Create’ button on the bottom of the page and start the creation of the instance.

Firewall Rules

With the machine instance setup we can now move onto adding a rule to allow clients to connect to the VPN server. We navigate to the Firewall Rules section as shown below.

We start by adding a rule and giving it a name.

Then we select the Ingress option to make the rule effect incoming packages and set the ‘Action’ as ‘Allow’

We will select the Specified targets tags from the Targets field. And then set the tag that we gave the machine during creation as the Target tag. This will associate the rule with the machine.

Next we select IP Ranges as the Source filter on the rule. and add ‘0.0.0.0/0’ as the Source IP range. This will allow all addresses to reach the machine over VPN. If we have a list of the client public addresses we can give that in order to restrict the allowed Public IP’s.

Openvpn Access Server Admin Web Ui

Finally we select “Specified protocols and ports” option and set the tcp port that we want for the VPN server connection. The default OpenVPN port is 1194.

We can now click the ‘Create’ button at the bottom to add the rule.

OpenVPN Configuration

Having set up the machine and its security rules we can now start installing OpenVPN and configuring it. Start by connecting to the machine over ssh. Once connected:

Change to the root user and moving to the default root directory.

Now we can download a script to help us install and configure the OpenVPN server. Download the script and make it executable.

We can run the script and start configuring the vpn server.

Upon running the script asks us about the ip address of the machine. We select the number corresponding to the Public IP address of the machine.

Next we choose to use TCP as the base connection type for our VPN.

Now we will set the port that we added an Inbound rule for so that the OpenVPN server can listen for incoming connections on that port.

The DNS option can be set as preferred.

Finally we give a name that will be used to create a certificate for a user to be allowed to connect. The script will create the required files that a user will need to be able to connect to the server.

Hi Leon,There was an old bug between RX 2 and Premiere Pro that prevented RX from showing up in the plug-in list. Izotope rx 2 free download. Please make sure you're running the latest versions of both software packages.Also, the RX 2 standalone app will open anything that can be opened by Quicktime codecs (it strips out the audio so you'll have to re-spot it in Premiere) and has a batch processor that will take care of all of your files in a batch (provided they have the same type of problem). This has been fixed on iZotope's side in the latest version of RX 2 and on Adobe's side by the latest versions of Premiere (though I'm not 100% sure if the update is in Premiere Pro CS5 or CS5.5).

Adding / Removing Clients

With the server up and running we can run the script again in order to create new client certificates or to revoke existing certificates.

We can rerun the script we downloaded to install OpenVPN. The script will now as us if we want to add or remove a user.

Entering the number corresponding to “Add a new user” and then providing a name for the user when prompted for shall create the certificate file required for the user to connect to the VPN server.

On the other hand if we enter the number corresponding to “Revoke an existing user”; we will be presented with a list of the available clients. Entering the number corresponding to the user that we intend to remove shall destroy the certificate generated for that user; resulting in them not being able to connect to the VPN.

Since we only allow SSH connection to the machine other than the VPN; we can use any SFTP client to connect to the server and download the user certificate files.

Users can then connect to the VPN server using their ovpn certificate files.

Need to setup a VPN? Here’s how to download and install OpenVPN.

SERVER SETUP

Download the installer from https://openvpn.net/index.php/download/community-downloads.html and run it on the server computer.

Open the installer file and start the installation.

Remember to adjust the Windows firewall (open the 1194 UDP port).
Assign a static IP to the new created TAP interface (like 10.8.0.1).
Install OpenVPN on each client. (This step can be skipped for now and done at any convenient time)
Choose All check boxes for the install

Certificates and Keys

Preparatory Steps

Navigate to the C:Program FilesOpenVPNeasy-rsa folder in the command prompt:

Press Windows Key + R
Type “cmd.exe” and press Enter.
cmd.exe

Right click to run as administrator
Navigate to the correct folder:

Initialize the OpenVPN configuration:

NOTE: Only run init-config once, during installation.
Open the vars.bat file in a text editor:

Edit the following lines in vars.bat, replacing “US”, “CA,” etc. with your company’s information:

Save the file and exit notepad.
Run the following commands:

Building Certificates and Keys

The certificate authority (CA) certificate and key:

When prompted, enter your country, etc. These will have default values, which appear in brackets. For your “Common Name,” a good choice is to pick a name to identify your company’s Certificate Authority. For example, “OpenVPN-CA”:

The server certificate and key:

When prompted, enter the “Common Name” as “server”
When prompted to sign the certificate, enter “y”
When prompted to commit, enter “y”