6 Easy Steps to Setup VPN on Your Raspberry Pi
Raspberry Pi is a single-board computer of UK origins that has taken the world by storm since is introduction in 2015, selling close to 20 million units. Its main purpose is to teach computer science in schools as well as developing countries.
In such places, a great work-around for this type of censorship is by using a Virtual Private Network (VPN). But with a Raspberry Pi computer and some basic coding skills, you can actually build your own VPN server from the comforts of your own desk.
From there, you can browse the Internet with a heightened sense of security through your home network, as well as accessing shared files from your home computer on your own local-area network.
What You Need to Build a VPN Server on Raspberry Pi
The following are necessary in order to build your own VPN server on your Raspberry Pi computer.
- Raspberry Pi/Pi 2 computer
- 8GB micro SD card
- SD card reader
- HDMI monitor (either a computer monitor or a television)
- USB keyboard
- Ethernet network cable
- 5-volt mini USB power supply (such as a phone charger)
Step 1: Prepare to install Raspberry Pi operating system
This first step involves the micro SD card. If you are using or reusing an old SD card, you must make sure you have properly formatted it to remove any old files. This can be done for free at http://sdcard.org
Once the card is fully formatted, insert it into your card reader.
Step 2: Installing Raspbian onto your Raspberry Pi Computer
Get online and visit the Raspberry Pi website. Download the New Out of the Box Software (NOOBS). NOOBS is an operating system installation manager. Open the file, select all files, then drag and drop them to your SD card in the card reader.
Now, take your SD card and insert it into the Raspberry Pi. Follow that up by connecting a monitor, keyboard, and power cable.
After you power on the Raspberry Pi, observe the green light blinking as the computer processes data from the SD card. Following this, a window will pop up. Opt for Raspbian and press ENTER to initiate the installation. Remember to modify the default password before proceeding.
Step 3: Create a static IP address for your Raspberry Pi
Connect your Raspberry Pi to your router with the Ethernet cable.
Pull up a command prompt and type: ifconfig
A host of information will follow, some of which you need to record with pen and paper. Record the digits and letters following:
- Inet addr
- Bcast
- Mask
Back to the command prompt, type: sudo route -n
Now record the characters after:
- Gateway
- Destination
Back at the command prompt, type: sudo nano /etc/network/interfaces
Find the line that reads “iface eth0 inet dhcp” or “iface eth0 inet manual”
If your file says “manual”, use the arrow keys to delete it and replace it with the world “static”.
Next, put your cursor at the end of the line and press Enter.
On the following lines, insert the information you notated in the lines above between the square brackets.
- Address [your current IP address]
- Netmask [your subnet mask]
- Network [your destination]
- Broadcast [your broadcast range]
- Gateway [your gateway]
Save the file by press CTRL and X at the same time. At the command prompt, type: sudo reboot
Step 4: Constructing your VPN on Raspberry Pi
Raspbian comes with OpenVPN installed and ready to unpack.
At the command prompt, type: sudo apt-get install openvpn
Now you must generate keys to ensure you’re the only one using your VPN. Use Easy_RSA to generate your keys. When you want to execute commands in your root directory, make sure you type: sudo -s.
At the command prompt, type: cp-r/usr/share/doc/openvpn/examples/easy-rsa/2.0/etc/openvpn/easy-rsa
Next type: cd /etc/openvpn/easy-rsa
In the text that opens find the line that begins: export EASY_RSA=
you need to move the cursor down to edit this line to read:
export EASY_RSA=”/etc/openvpn/easy-rsa”
Find the text that reads “export KEY_SIZE=1024” and change the numeral to “2048”.
Keep scrolling and change the proper settings on Country and City.
Step 5: Build certificates for your VPN
Open the easy-rsa directory at the command prompt type by typing: cd /etc/openvpn/easy-rsa
Then type: source ./vars
Next, type: ./clean-all
This will remove any previous keys in the system.
Next type: ./build-ca
Step 6: Name the server
You can name your server whatever you want, just don’t forget the name
Type: ./build-key-server [ServerName]
Just a few more steps round out the process.
Common Name is the name of the server
Challenge password must be left blank
Type “y” for sign the certificate.
Finally when prompted with the question:
1 out of 1 certificate requests certified, commit? [y/n]
Type “y” and the process is complete.
