up vote 2 down vote favorite
1
share [g+] share [fb]

Trying to set up a VPN server on an Arch Linux box. All I want is for it to be usable by OS X and iPhone OS. I'm a noob at VPN and can't seem to have much luck googling. What software do I need to install and what else do I need to configure?

Thanks.

link|improve this question
feedback

3 Answers

up vote 4 down vote accepted

Recommended reading: OpenVPN Howtos

link|improve this answer
Definitely. The OpenVPN Howtos should get you started. If you still have questions, then post back on serverfault. – Weegee Jul 14 '09 at 13:17
1  
OpenVPN isn't going to do iPhone. IPSEC, L2TP, PPTP. – phresus Jul 14 '09 at 14:40
Indeed, iPhone only supports IPSEC, L2TP and PPTP. So OpenVPN doesn't support any of those? – ibz Jul 15 '09 at 2:49
No, OpenVPN is an SSL-based VPN. It's fantastic, but no clients for the iPhone (jailbroken or not). – phresus Jul 15 '09 at 11:12
feedback
up vote 1 down vote

OpenVPN works fine on OSX. To work with iPhoneOS, though, you're going to need a L2TP, PPTP, or IPsec server. Free/OpenSWAN is pretty easy to set up these days if you.

Honestly, the OpenSWAN documentation is pretty good, but you can find Gentoo instructions that are reasonably applicable to Arch (the default kernel config should have the options you need, so you can skip that part) here. Relevant OpenSWAN docs are here if you want to do L2TP (which makes interop with Windows clients a lot easier).

link|improve this answer
So the benefit of L2TP over others would be easy interop with Windows too? Other than that, are there other significant reasons why I would choose one over another? – ibz Jul 15 '09 at 2:51
1  
Yes, the benefit of L2TP is easy interop with Windows (and PPTP is pretty much a given with it). Vista and Win7 support easy-ish IPSEC, XP... not so much. Really, though, all three of them have their own issues with NAT. I'd probably just set up OpenSWAN for authentication with all three, if it were me. – phresus Jul 15 '09 at 11:13
feedback
up vote 0 down vote

As nice as certificates are, the easiest solution is getting a PPTP server setup: https://wiki.archlinux.org/index.php/PPTP_Server

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.