Deploying and Configuring Pritunl VPN Server on CloudPe (With Private Network Access)

Step 1: Deploy the VPN Server VM

1. Log in to the CloudPe CMP dashboard.
   
2. Navigate to Virtual Machines → Create VM.
   
3. Select the desired Region.
   
4. Under Image, go to Marketplace and select vpn-server.
   
5. Choose the required Flavor and Volume size.
   
6. Attach both networks that you want to connect through the VPN tunnel.
   
   For Example
   
   Private Network → so the VPN server can communicate with internal VMs.
   
   Note: Here to create a Private network
   
   Public Network → so you can access the VPN server from outside over the internet.
   
   
7. Click on click button to create the virtual machine.

Once the process is complete, your VPN server will appear in the instance list.

Step 2: Access the VPN Web Console

1. After deployment, copy your VM’s public IP address.
   
2. Open a web browser and enter the IP address to access the VPN admin page.
   

You’ll be greeted by the Pritunl VPN login screen.

Step 3: Update Default Account Details

1. Log in using the default credentials.
   

Field	Value
Username	pritunl
Password	spjuoXhfjBGE

⚠️ Security Tip: Change the default username and password right after your first login.

2. Click the Settings in the top-right corner.

3. Change your Username and Password to something secure.

4. Click Save when done.

Step 4: Add an Organization and User

1. Go to the Users section in the left menu.
   

2. Click Add Organization and provide a name for your organization.

3. Then click Add User

Note: Optionally, you can enter the user’s email address and PIN code.

Step 5: Create and Start the VPN Server

1. Open the Servers page and click Add Server.

2. A random UDP port and VPN subnet will be auto-assigned.

NOTE: Make sure this network range does not overlap with your local or office network.

3. The system automatically uses Google DNS unless you specify another DNS.

4. Once the server is added, click Attach Organization and link the organization you created earlier.

5. Finally, click Start Server to bring the VPN server online.

Step 6. Download VPN Profile

1. Go to the Users page.
   

2. Locate the user you created and click the Download icon.

Step 7. Connect to VPN Using Client

Choose one:

• Pritunl Client (preferred)
  

Steps:

1. Import the profile
   
2. Click Connect
   
3. Connection established → You get a VPN IP (e.g., 192.168.x.x)

Step 8. Using Profile Links

Each user profile link allows quick access to the VPN configuration.

You can use the URI link to import the profile directly into the Pritunl client, simplifying the setup process for end users.

Step 9 . Verify Internal Network Access

9.1 Add Private Network Route in Pritunl (Mandatory)

Pritunl assigns VPN clients an internal address (e.g., 192.168.235.x).
Your CloudPe private network is different (e.g., 192.68.0.0/24).
To allow communication between these networks, you must add a route.

Steps:

1. Log in to the Pritunl Admin Panel
2. Go to:
   Servers → Add Router
3. Enter your CloudPe private network CIDR:
4. Select Server
5. Click on Attach
6. Restart the Pritunl Server
7. Reconnect your VPN client
   

9.2 Test Internal Connectivity

Once the route is added and the VPN client reconnects:

Test ping

ping 192.68.0.45

ssh root@192.68.0.45

If both tests work, the VPN is correctly routing traffic to the private network.

9.3 Expected Result

• VPN client shows “Connected”
• Ping to private IP works successfully
• SSH to private VM over private IP works
• User can access internal resources without needing public IP