Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

For other reasons that I'm not going to go into, I'm not going to use Mountain Lion Server.

I've looked around but can't find anything that allows me to set up a VPN server without using the Apple OS X server.

What are my options? I've heard of openVPN but can't find any recent guides as to how to set it up.

share|improve this question

1 Answer 1

You can install OpenVPN on MacOS X very easily using MacPorts. Once you have it installed, any guide to configuring OpenVPN will show you the next steps. The official OpenVPN howto is a good place to start.

One of the key things you'll need to do is enable your MacOS X server to route packets between interfaces. This can be accomplished with the following sysctl command:

sysctl -w net.inet.ip.forwarding=1

This does not survive reboots, so you will have to make OpenVPN invoke it, or make a launchd script to do it.

Remember also that, once you become a router, you should be filtering packets. MacOS X has offered ipfw packet filter for a long time, and more recent versions include the even nicer pf packet filter. Documentation of both of these tools is abundant, including in MacOS X man pages.

share|improve this answer
    
FYI, if you want a sysctl change to survive reboots, the easiest way is to write it to /etc/sysctl.conf. See man sysctl.conf. Unfortunately that man page isn't linked from the other sysctl-related man pages, so people don't always find out about it. –  Spiff Feb 12 '13 at 0:11

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.