Jump to content

Astrill Setup Manual:How to configure OpenVPN with Network Manager on Linux

From Astrill Wiki

Step 1

First open Terminal, and use this command to install the OpenVPN Network Manager plugin:

sudo apt-get install network-manager-openvpn openvpn


Step 2

Login to Members area, and create and download a certificate for OpenVPN with configuration files. Click on Members, login to your account, then click VPN Services, and then click on OpenVPN certificates generation.

https://members.astrill.com/tools/openvpn-certificates


Step 3

Open Astrill-ubuntu.zip file you just downloaded, and pick a server and extract the OVPN file (in this example 27-USA-Seattle-1.ovpn).



Then make 4 copies of 27-USA-Seattle-1.ovpn file, and rename them and edit them accordingly:

Text between <ca></ca> tags goes into ca.crt file

Text between <cert></cert> tags goes into user.crt file

Text between <key></key> tags goes into private.key file

Text between <tls-auth></tls-auth> tags goes into tls.key file



Step 4

Open Network Manager, and then click on Add button to create new connection.


Select OpenVPN for connection type, and then click on Create... button to create new OpenVPN connection.



Step 5

On VPN tab, you need to set the following:

Connection name: Astrill VPN

Gateway: <VPN Server IP address>

Authentication Type: Certificates (TLS)

User Certificate: user.crt

CA Certificate: ca.crt

Private Key: private.key


Then click on Advanced... button for more configuration options.



On General tab, you need to set the following:

Use custom gateway port: tick and set 8292

Use LZO data compression: tick



On Security tab, you need to set the following:

Cipher: BF-CBC

HMAC Authentication: SHA-1



On TLS Authentication tab, you need to set the following:

Use additional TSL authentication: ticked

Key File: tls.key

Key Direction: 1


File:N.linux ovpnnet5.4.jpg


Once done, click on OK button and then click on Save button.


Step 6

Now we are ready to start Astrill OpenVPN connection.



Once OpenVPN connection is established you will see successful pop-up message.



You can check and confirm your IP address. http://www.astrill.com/what-is-my-ip