Hi Mark,

Just so you know, OpenVPN Access Server, automatically sets up all the databases, certificates and web management.  It's REALLY EASY SOLID and simple.  You get something like 3 free licenses. 

I don't recommend you mess around with the regular OpenVPN instructions  (as linked below on your response) - unless you are masochistic.

Use these:  http://openvpn.net/index.php/access-server/docs/quick-start-guide.html

Excerpt:

Linux Distribution:
You will need to make sure you download the package that corresponds with the current OS Distro, we currently support these Linux Distros:
- Ubuntu
- RHEL
- Fedora
- CentOS
- Debian (Install Ubuntu Packages for Debian)

Click here to download the OpenVPN Access Server packages


CPU Architecture:
You will need to make sure you install the correct package depending on your CPU Architecture (32bit or 64bit)


Installing the OpenVPN-AS Package:
To Install the OpenVPN-AS package in Ubuntu or Debian you will need to run this command:

dpkg -i openvpnasdebpack.deb

To install the OpenVPN-AS package in CentOS, RHEL, or Fedora you will need to run this command:

rpm -i openvpnasrpmpack.rpm

The Admin Account for OpenVPN-AS needs to be setup through terminal by doing the following:

Change the password:

passwd openvpn

You will then be prompted to set a password for the user openvpn, after setting the password you can login to the Admin UI with the Username openvpn and the password you set.

Note: In some circumstances for certain configurations you may need to run the complete ovpn-init script terminal: /usr/local/openvpn_as/bin/ovpn-init

Configuring the Admin Web Interface:
After you have completed the Initial Configuration Tool you should then be able to access the Admin Web Interface through your preferred web browser. You should have noticed an link to the Admin Web Interface after you completed the Initial Configuration Tool, if you missed it you can access the Admin Web Interface by typing the following in your browsers address bar: https://openvpnasip/admin (Please replace "openvpnasip" with the IP you allocated to your openvpn-as instance)

You can now go ahead and login with your openvpn admin credentials. Once logged in you will see the following screen:

end excerpt

On Sun, Jun 24, 2012 at 6:08 PM, Mark Phillips <mark@phillipsmarketing.biz> wrote:

Thanks for all the comments. Based on what you have said and further research, I have come to the conlusion...

1. I need to install openvpn on a machine on my lan and on my laptop.
2. I will follow these instructions for installation and configuration - http://openvpn.net/index.php/open-source/documentation/howto.html#quick
3. Just enable all the vpn options on my BEFSX41 and pray it all connects...;)

fallback....purchase a cisco pix 501 and play with that.

Thanks!

Mark

On Sun, Jun 24, 2012 at 3:20 PM, Lisa Kachold <lisakachold@obnosis.com> wrote:
Hi Mark,

The BEFSX41's were not completely configured for anything but SITE<--->SITE VPN.  An IPSEC tunnel to tunnel can be setup evidently to work with a linux VPN client. where you have a static client IP address (no NAT), but you are correct, it's a bit of work.

And there are some known issues:  http://homecommunity.cisco.com/t5/Wired-Routers/VPN-works-causes-periodic-freezes-of-BEFSX41/m-p/227179?comm_cc=HSus&comm_lang=en#226944

Version:
Do you have BEFSX41 v1 or v2?  With the most recent firmware, the VPN page should look like this:
http://ui.linksys.com/files/BEFSX41/1.52.5/Security-VPN-Tunnel-Enabled.htm

Linksys QuickVPN software and cisco VPN client will not work for IPSEC or this router.  Linksys has instructions for setting up an IPSEC tunnel for the BEFSX41 (which is all it supports):  http://homesupport.cisco.com/en-us/wireless/lbc/BEFSX41

As you can see, you can, with this router, do passthrough and OpenVPN is so nice, easy and powerful, I recommend you just use it (rather than try to configure VPNs from this router) [simply check all three boxes on the BEFSX41 and save].

OpenVPN Access Server (OpenVPN-AS) is a set of installation and configuration tools that simplify the rapid deployment of a VPN remote access solution. It is based on the popular OpenVPN open-source software, making the deployed VPN immediately compatible with OpenVPN client software across multiple user platforms. The server configurations options supported are a carefully selected subset of a quite large set of possible OpenVPN configurations. Thus, OpenVPN Access Server streamlines the configuration and management of an OpenVPN-based secure remote access deployment.

You can get OpenVPNAS here (for Ubuntu, Fedora, CentOs and Redhat, as well as VirtualMachine images):
http://openvpn.net/index.php/download/access-server-downloads.html

To configure OpenVPN client in Linux: 
Simply surf to the port you setup for your OpenVPNAS server [usually 80/443] (be sure to port forward as needed) and login with the user name and password you setup and it will prompt you to download your client for Linux, OS X, or Windows.

Client configuration instructions for  Sentinel  to BEFSX41: (useful for setting options in your linux client):
http://www.homenethelp.com/vpn/router-config.asp








On Jun 24, 2012 1:00 PM, "Mark Phillips" <mark@phillipsmarketing.biz> wrote:
I need to take my laptop on several road trips, and I need to connect back to my home office LAN - all Debian machines. I am on COX cable with a BEFSX41 router. The BEFSX41 has a VPN option that I have never used. What do I need to add to my laptop (Debian) to talk to my home office LAN securely (ie through a VPN) using my BEFSX41? Obviously, I am a complete nube when it comes to setting up VPN access to my LAN. I have googled for some recommendations, but I have not found a good reference to follow.

Thanks,

Mark






--
(503) 754-4452 Android
(623) 239-3392 Skype
(623) 688-3392 Google Voice
**
Safeway.com
Automation Engineer
















---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



--
(503) 754-4452 Android
(623) 239-3392 Skype
(623) 688-3392 Google Voice
**
Safeway.com
Automation Engineer