build your own passthrough device capable of PIA openVPN AES 256 SHA 256 RSA-4096

Page 12 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.
Toggle sidebar Toggle sidebar
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
my desktop detects it as two Intel NICs
After updating the BIOS it still wont turn on with the card. I guess I am stuck using Realtek cards.
I am not disappointed though, I feel good about this Pentium purchase. Everything seems faster and no graphical glitches.
Now all I need to make this something really special is to figure out how to use the new openVPN certs from PIA preferably the ca.4096.crt one for a rig that is encrypted with AES 256 and SHA256.
Anyone have any ideas on this?
Thanks
 
mxnerd

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,103
126
1. Install of pfsense is fast and it will tell you it recognize the NIC or not.

2. Intall Windows 7,8,or 10 on N3700 motherboard to make sure INTEL NIC is good.

3. If yours is ASROCK N3700-ITX, in BIOS's Boot tab, there is
Full Screen Logo
Enable to display the boot logo or disable to show normal POST messages.
AddOn ROM Display

Enable AddOn ROM Display to see the AddOn ROM messages or conigure the
AddOn ROM if you've enabled Full Screen Logo. Disable for faster boot speed.
Click to expand...

Play with both and you probably will see INTEL NIC at boot time.
 
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
it won't come on at all with the Intel NIC so there is no way for me to test it with this board. I'm not going to worry about that any more, Realtek will have to suffice.
I think I broke one of the USB connectors when I plugged it into the motherboard because I thought I heard a small snap when I was twisting the wire.
the top USB front port does not work but the bottom does.
I have my keyboard plugged into the bottom one.
I just want AES 256 and SHA 256 now. I can put up with all the minor stuff.
And I am not bitter about the NIC not working out.
 
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
I have not yet figured out how my router is going to connect to the device once I have it ready.
I would prefer that my router do the DHCP routing on the internal network.
 
mxnerd

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,103
126
If you have pfsense working, it will be become your router. Disable pfsense's LAN side DHCP.

Configure your existing router's to AP mode and uplink one of LAN port to pfsense and it becomes access point & DHCP server.
 
Last edited:
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
mxnerd said:
If you have pfsense working, it will be become your router. Disable pfsense's LAN side DHCP.

Configure your existing router's to AP mode and uplink one of LAN port to pfsense and it becomes access point & DHCP server.
Click to expand...

That confirms what I was thinking. Thanks
Who is [H] and where do I find his guide?
Thanks
 
mxnerd

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,103
126
Tutorial: Configuring pfSense as VPN client to Private Internet Access

https://forum.pfsense.org/index.php?topic=76015.0

copy & paste PIA's 4096 certificate data (ca.4096.crt) in first step that create the CA Certificate

You have to use pfSense 2.1.5, since NAT outbound config doesn't work if you use 2.2.4
(seems 2.2.4 can't set NAT port range 1024 to 65536 like 2.1.5)

Seems all the instruction on the web, regardless which VPN provider, all use older 2.1.5

http://mirror.transip.net/pfsense/downloads/pfSense-LiveCD-2.1.5-RELEASE-amd64.iso.gz

===

don't know what's XavierMace's [H] mean
 
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
mxnerd said:
Tutorial: Configuring pfSense as VPN client to Private Internet Access

https://forum.pfsense.org/index.php?topic=76015.0

copy & paste PIA's 4096 certificate data (ca.4096.crt) in first step that create the CA Certificate

You have to use pfSense 2.1.5, since NAT outbound config doesn't work if you use 2.2.4
(seems 2.2.4 can't set NAT port range 1024 to 65536 like 2.1.5)

Seems all the instruction on the web, regardless which VPN provider, all use older 2.1.5

http://mirror.transip.net/pfsense/downloads/pfSense-LiveCD-2.1.5-RELEASE-amd64.iso.gz

===

don't know what's XavierMace's [H] mean
Click to expand...

I can't find 2.1.5 I can only find 2.1.3 any one know of a mirror that has 2.1.5?
 
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
thanks mxnerd
I found 2.1.5 but it is a cd installer can I use rufus to convert it to a USB installer?
 
mxnerd

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,103
126
BirdDad said:
thanks mxnerd
I found 2.1.5 but it is a cd installer can I use rufus to convert it to a USB installer?
Click to expand...

You have to use 7zip or WinRAR to extract the iso file from that .gz file first.

However last night I use rufus and UNetbootin and neither works and always gives me errors. I have to burn it on CDROM to make it work.

The ISO file works perfectly in virtual environment.

You have to read config instruction very, very, very carefully. Anything missed or misconfigured will make it not working.

For the Encryption algorithm = BF-CBC (128-bit) change it to AES-256

and since you also wants to use SHA256, in OpenVPN Client config part, you add "auth sha256" to the end of Advanced configuration so it looks like

auth-user-pass /etc/openvpn-password.txt;
verb 5;
remote-cert-tls server;
auth sha256
Click to expand...

be sure to put those semicolons, I don't know if it will work if you don't put them in there
 
Last edited:
Engineer

Engineer

Elite Member
Oct 9, 1999
39,230
701
126
sdifox said:
That's because you didn't notice you are using yahoo now :awe:
Click to expand...

I actually used to use Yahoo but they have more pages of ads now than search results. It's almost unbearable to do any searching with them. I like their finance page and still use e-mail with them (sports too) but can't stand their searching at this point.
 
X

XavierMace

Diamond Member
Apr 20, 2013
4,307
450
126
Engineer said:
[H] is [H]ardOCP or their forums. I searched and didn't find the particular guide but we all know how my Google skills are based on this thread, lol! :p

Found this thread but seems old:

http://hardforum.com/showthread.php?t=1663797
Click to expand...

Sorry, yeah, [H]ardOCP. That looks like the thread I was thinking of. The threads a bit old, but still got me most of the way there when I did a pfSense/PIA setup a year or so ago.
 
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
mxnerd said:
You have to use 7zip or WinRAR to extract the iso file from that .gz file first.

However last night I use rufus and UNetbootin and neither works and always gives me errors. I have to burn it on CDROM to make it work.

The ISO file works perfectly in virtual environment.

You have to read config instruction very, very, very carefully. Anything missed or misconfigured will make it not working.

For the Encryption algorithm = BF-CBC (128-bit) change it to AES-256

and since you also wants to use SHA256, in OpenVPN Client config part, you add "auth sha256" to the end of Advanced configuration so it looks like
No it's not working yet.


be sure to put those semicolons, I don't know if it will work if you don't put them in there
Click to expand...
nevermind the tut explained it
 
Last edited:
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
Nope it does not work.
Really frustrated.
Thanks all for bearing with me.
I hate to think that the best encryption I can get out of this would be Blowfish128bit
 
B

BirdDad

Golden Member
Nov 25, 2004
1,131
0
71
it always shows openVPN is down under status, I restart it and get all green arrows then check the status and it is down
I've tried both the 4096 and the 2048 crts
 
Last edited:
mxnerd

mxnerd

Diamond Member
Jul 6, 2007
6,799
1,103
126
I have said pfsense is extremely complex. You have to follow the steps very carefully.

I have made VPNBook working following the PIA instruction.

Did you turn on the "infinitely resolve server" & "LZO compression on this page" ?

PIA_OpenVPN_Client.gif
 
You must log in or register to reply here.

TRENDING THREADS

COMPANY
RESOURCES
FOLLOW
Top Bottom