Launch instance from AMI. If the Elastic IP was assigned to a running instance, the instance must be restarted. After launching the server, it is immediately ready to work; no additional settings are required.
Linux username: admin
User authentication: certificates + username/password.
Server certificates are automatically generated and installed on the server when instance is launched for the first time or after starting the instance if IP address of the instance has changed. User certificates are the same for all users.
User management Web Panel:
https://[Public IP address].sslip.io
http://[Public IP address]
(use "administrator" as username and your instance ID as password)
WINDOWS-CLIENT SETUP
To set up the VPN client on Windows, you need to perform two main steps:
1. Install client certificates on Windows.
2. Create and configure an IKEv2 VPN connection with Extended Authentication Protocol (EAP) EAP-MSCHAP v2.
1. Installing certificates on Windows computers.
Please download the certificates as a ZIP archive from the web panel and extract it into a separate folder. Certificates should be installed in the "Local Computer" store. To do this, simply run the file "install-cert-win.bat" (administrator account required). As a result, the client certificate "vpnclient@ec2-...amazonaws.com" will be installed to "Local Computer"->"Personal"->"Certificates" store, and the certificate "ADEO VPN root CA" will be installed to "Local Computer"->"Trusted Root Certification Authorities" store, as shown in the picture "cert-console.jpg". You can check this using the MMC console (double-click the file "cert-console.msc").
2. Creating and configuring the IKEv2 VPN connection with Extended Authentication Protocol (EAP) EAP-MSCHAP v2.
The VPN connection must be created using standard Windows tools. The VPN connection should include:
ANDROID-CLIENT SETUP
To set up the VPN client on Android, you need to perform two main steps:
1. Install client certificates on your Android device.
2. Install and configure the "strongSwan VPN Client" application from Google Play.
1. Installing certificates on Android device.
Upload the file "client-cert.p12" to your Android device and tap on it. Install the certificates using the password "vpn".
2. Installing and configuring the "strongSwan VPN Client" application.
Download and install the "strongSwan VPN Client" application from Google Play. Then, create a new profile.
The profile for the "strongSwan VPN Client" should include:
If you decide to use the standard Android VPN client instead of the "strongSwan VPN Client", then the settings should include:
