Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Trying to set up a VPN server on an Arch Linux box. All I want is for it to be usable by OS X and iPhone OS. I'm a noob at VPN and can't seem to have much luck googling. What software do I need to install and what else do I need to configure?

Thanks.

share|improve this question

3 Answers 3

up vote 4 down vote accepted

Recommended reading: OpenVPN Howtos

share|improve this answer
    
Definitely. The OpenVPN Howtos should get you started. If you still have questions, then post back on serverfault. –  Weegee Jul 14 '09 at 13:17
1  
OpenVPN isn't going to do iPhone. IPSEC, L2TP, PPTP. –  phresus Jul 14 '09 at 14:40
    
Indeed, iPhone only supports IPSEC, L2TP and PPTP. So OpenVPN doesn't support any of those? –  ibz Jul 15 '09 at 2:49
    
No, OpenVPN is an SSL-based VPN. It's fantastic, but no clients for the iPhone (jailbroken or not). –  phresus Jul 15 '09 at 11:12

OpenVPN works fine on OSX. To work with iPhoneOS, though, you're going to need a L2TP, PPTP, or IPsec server. Free/OpenSWAN is pretty easy to set up these days if you.

Honestly, the OpenSWAN documentation is pretty good, but you can find Gentoo instructions that are reasonably applicable to Arch (the default kernel config should have the options you need, so you can skip that part) here. Relevant OpenSWAN docs are here if you want to do L2TP (which makes interop with Windows clients a lot easier).

share|improve this answer
    
So the benefit of L2TP over others would be easy interop with Windows too? Other than that, are there other significant reasons why I would choose one over another? –  ibz Jul 15 '09 at 2:51
1  
Yes, the benefit of L2TP is easy interop with Windows (and PPTP is pretty much a given with it). Vista and Win7 support easy-ish IPSEC, XP... not so much. Really, though, all three of them have their own issues with NAT. I'd probably just set up OpenSWAN for authentication with all three, if it were me. –  phresus Jul 15 '09 at 11:13

As nice as certificates are, the easiest solution is getting a PPTP server setup: https://wiki.archlinux.org/index.php/PPTP_Server

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.