So, we are ready to join VPN tunnels from your devices into a single network ...
All the configuration tasks are to be done in two separate places:
- In a special section of our web site, available upon successful registration
- On you own network devices – and we have guides for that
Prior to starting the configuration it’s advantageous to collect the following information:
To set up VPNKI one needs the following information:
- Your home networks addresses specified as network IP address / prefix (e.g., 192.168.0.0/24)
- VPN types supported by your equipment. We support PPTP (with or without MPPE encryption!), L2TP and L2TP/IPSec. For all of these we support CHAP and MS-CHAPv2 authentication. For PPTP without encryption please use CHAP, for PPTP with encryption please use MS-CHAPv2. We also support OpenVPN tunnels.
- If your devices support DHCP client for PPTP or L2TP connections for the sake of getting their network routes from VPNKI server automatically.
For example, Android 6.0 and Linux don’t support DHCP client on their tunnel interfaces out of the box. Meanwhile Windows and Apple IOS do. This means that Android and Linux users will have to specify the following routes manually in their VPN connections settings:
- 172.16.0.0 / 16 towards the VPNKI network (mandatory)
- routes to your other home networks (192.168.x.x / x) (optional)
For detailed explanation please refer to the configuration guides your device type on our web site.
Start with settings on your personal VPNKI web page
You should create a tunnel for every networking device that will connect to VPNKI. Each device should use a separate tunnel!
In VPNKI terms a tunnel is a combination of login and password that your device will authenticate with when connecting to VPNKI server.
Example. Suppose you have two tunnels.
You intend to run one tunnel from your tablet and the other one – from the router at your country house, where you may have s video surveillance server.
The first tunnel is simple: there is no home network behind your tablet. But that’s not the case with the second one. It should additionally include the network, located “behind” you country house router. As per our example that’s 192.168.2.0/24.
After that the settings on your personal web page will look similar to the following:
The settings demonstrated above are sufficient for our system to accept VPN connections from your devices over PPTP, L2TP or L2TP/IPSec.
Starting up OpenVPN
If you wish to use OpenVPN (and have appropriate client software) then you should check the “Use OpenVPN” box on main personal webpage. Then download the .ovpn profile and import it into you client.
Important! The .ovpn file is regenerated every time you check the box. Old .ovpn file may be invalidated and stop functioning. So please download the file any number of times but don’t enable/disable OpenVPN any more than necessary.
Starting ip HTTP and SOCKS5 proxy
If you wish to provide access to your home resources via HTTP or SOCKS5 proxy you should check the corresponding checkbox on the main personal webpage and write down ports for HTTP and SOCKS5 proxy connections
Any further configuration is to be done on your networking devices including authentication settings. Please refer to the corresponding guides on our site.
Important! We strongly discourage first-time users from utilizing any of the options provided in the “Advanced” menu. They are intended for specific situations and assume a certain amount of VPNKI usage experience.
Important! Almost all of the settings done on the website apply to newly established VPN tunnels and have no effect on existing ones. So please tear down and reestablish your VPN connections after changing the settings.
You can monitor you VPN connections establishment and teardown processes using “Connections statistics” and “Security events” menu items (available upon registration).
Activating “URL publish” service
To publish an URL from your home network on the Internet through VPNKI service you must accept this service Terms and Conditions and then set up URL mapping between a public URL as https://yourname-tag.vpnki.com and your private URL on your home network (e.g. http://192.168.1.1)
Important! This service has certain technical limitations. Read the details here.
The scheme below depicts a typical set of VPNKI tunnels along with addressing and connections examples.
Please refer to the FAQ – Frequently Asked Questions for technical limitations imposed by VPNKI remote access system.
Technical support requests are welcome on our forum.