Linux VPN setup: A step-by-step guide for easy installation

How does the VPN setup process differ across Linux distributions? 

Linux gives you tons of control, but that also means that the process of setting up a VPN for Linux can look a bit different depending on the distribution you're using. Each distro serves different users and has its own package management system, default tools, and user environments. All those differences affect how you set up and manage a VPN (virtual private network).

Desktop-oriented distros like Ubuntu come with handy graphical tools. But when you're working with more security-focused distributions like Kali or Raspberry Pi, which often don’t have full desktop environments, you need more hands-on, command-line solutions. Figuring out your distro first makes it easier to pick the right setup.

To help you get started faster, here’s a quick breakdown of popular Linux distributions and the best VPN setup methods for each:

How to check which Linux distribution you are using

You can install a VPN client on a Linux device in different ways, and the one you’d choose depends largely on your technical skill level and personal preference. However, the Linux distribution you have matters too, since how to set up a VPN on Kali Linux can differ quite a bit from doing it on Ubuntu or Raspberry Pi. No worries if you’re not sure. Finding out only takes a minute:

1. 1.Open the terminal by clicking “Ctrl” + “Alt” + “T” on your keyboard or by finding the “Terminal” app icon in your system menu or desktop.
2. 2.In the “Terminal” window, run a command that would show the information on your Linux distribution. The most common are:

Setting up OpenVPN connections on Linux

OpenVPN is one of the most reliable and widely supported protocols used to set up a VPN for Linux. It's open source, secure, and works great on almost any distribution. While it requires a few commands to set up a VPN server on Linux, connecting to NordVPN via Linux Terminal is straightforward and repeatable once you’ve done it once.

We’ll walk you through the process step by step below, but you can also follow along with this video tutorial:

1. Install OpenVPN

Open your terminal (“Ctrl” + “Alt” + “T”). Before installing OpenVPN, make sure to disable IPv6 to avoid DNS leaks or connectivity issues. Once ready, install the VPN client with the following command: 

You may be asked for your system password to continue.

2. Download VPN configuration files

Go to the OpenVPN configuration directory:

Then, download the OpenVPN configuration archive by running:

If you get an SSL certificate error, you can fix it by running:

To open the files, you’ll need to unzip them — so make sure the “unzip” package is installed. If you haven’t already installed it, you can do so with:

Extract the files using this command:

After the extraction, you can delete the archive with:

3. Configure the VPN

Once unzipped, you’ll have two folders — one for UDP-based connections and one for TCP-based connections. To go into one of the folders, use either of these commands:

To run a VPN on Linux, you’ll need a server. Now you could choose one from all available servers. To see them, run the following command:

However, for the best performance, we suggest using the recommended server. To find which one it is, log in to your Nord account and go to “NordVPN” > “Advanced settings” > “Set up NordVPN manually” > “Server recommendation.”

4. Connect to the VPN

Run this command to start the VPN:

Replace “us2957.nordvpn.com.udp.ovpn” with the “.ovpn” file that matches your chosen server and protocol. For example, to use a TCP-based server instead, you might run:

When prompted, enter your NordVPN service credentials. To find them, log in to your Nord account, go to “NordVPN” > Set up NordVPN manually” > “Service credentials.”

That’s it — you’ve now successfully established a connection with a VPN client. The VPN will be running as long as the “Terminal” window is open. Press “Ctrl” + “C” to close the window and disconnect from the VPN.

Setting up IKEv2/IPSec connections on Linux

A similar and equally effective option is setting up a VPN connection using IKEv2/IPSec. Many Linux users favor this protocol because of its speed and stability. It’s ideal for maintaining a consistent connection, especially on mobile or frequently changing networks. To set up a VPN server on Linux with IKEv2/IPSec, most people use StrongSwan, a widely used open-source implementation that is compatible with most major VPN providers.

1. Install StrongSwan for IKEv2/IPsec

Install the required StrongSwan package with the following command:

Additionally, install all extra StrongSwan plugins needed for advanced VPN functionality:

2. Configure VPN settings

Open and edit the “ipsec.secrets” file using your NordVPN service credentials. To do that, run this command:

In the file, add this line (replace “USERNAME” with your actual NordVPN service username and “PASSWORD” with the password in double quotes):

To find your service credentials, log in to your Nord account, go to “NordVPN” > Set up NordVPN manually” > “Service credentials.”

Now, you’ll need to edit the configuration file. To open it, run the following command:

Add the following configuration to the file:

Replace “USERNAME” with your NordVPN service one in the double quotes and “SERVER” with your chosen NordVPN server hostname. To find the recommended server, log in to your Nord account, and go to “NordVPN” > “Advanced settings” > “Set up NordVPN manually” > “Server recommendation.”

Use the following command to edit the constraints file, and change the line in the file from “load = yes” to “load = no”:

Then, download the NordVPN certificate by running:

3. Restart the VPN service

To apply your changes, just restart ipsec:

4. Connect to the VPN

Use the following command for the VPN to start working:

To disconnect, just run: 

Setting up a VPN using Network Manager

If you prefer using something with a graphical interface over the command line, connecting to NordVPN via Linux Network Manager is a great alternative to a terminal-based VPN setup.

With Network Manager, you can configure a VPN for Linux once and connect every time with a single click. Here’s how you can set it up.

1. Install the Network Manager plugin

First, update your system and install the necessary OpenVPN plugin for Network Manager with:

To use Network Manager as your VPN manager, you’ll also have to download the OpenVPN configuration file package from NordVPN and extract the contents into a folder of your choice. You can also run the following commands to do the same:

2. Open network settings

In the top-right corner, click your network icon. Then, click on the “Settings” icon and go to the “Network” tab. Under the VPN section, click the “+” button to add a new connection.

3. Add VPN connection

In the pop-up, choose “Import from file…” Find the folder containing the extracted configuration files and select the file of your preferred server.

Go to the “Identity” tab and enter your NordVPN service login details. To find them, log in to your Nord account, go to “NordVPN” > Set up NordVPN manually” > “Service credentials.”

4. Connect to the VPN

Go back to the Network Manager and toggle the VPN switch to connect to a NordVPN server. Once connected, the switch will turn green. To disconnect, toggle the switch off.

Setting up a VPN app on Linux

If you’re after the easiest way to get a VPN for Linux up and running, a dedicated app is the way to go. 

Not everyone loves the command line — and it’s perfectly okay! Having both options is a big plus when you're figuring out how to choose an online VPN service that actually fits your style of working. NordVPN has a native Linux app with two options: a command-line version for terminal users and a GUI (graphical user interface) for those who prefer it. Our Linux app works on most major distros and desktop environments.

We’ll walk through the steps on how to install our official Linux app below, but you can also follow along with this video:

1. Download the VPN app

To download VPN software on Linux, you can choose between two installation methods depending on whether you want the GUI or the CLI version.

To install the graphical NordVPN app version, open your terminal and enter:

To install the CLI version of the app, you can use the following command in the terminal:

2. Install the VPN app

After you run the command, the installation will start automatically. After the installation is complete:

• If you chose the GUI version, look for the NordVPN icon in your applications menu or desktop environment and launch it from there.
• If you're using the CLI version, it will be ready to use directly from your terminal.

3. Log in to your account

Next, log in to your NordVPN account. In the GUI app, simply enter your Nord account email and password. In the CLI version, use the login command in the terminal:

Open the link provided in the output on your preferred browser and finish the login process there. Then, follow the instructions to open the app again.

4. Connect to the VPN

To connect to a VPN server in the GUI, just click on “Quick Connect.” In the CLI version, run the connection command to establish a secure connection with the recommended server:

Once connected, you’ll be able to browse the internet more securely.

You can also change various settings, including your preferred VPN protocol, in the GUI's settings menu or with the available NordVPN CLI settings commands, which we’ll cover next. For the fastest and most secure connection, you can switch to the VPN WireGuard protocol by enabling NordLynx in the app’s settings.

Useful NordVPN Linux commands for setup and management

Using NordVPN on Linux is pretty straightforward, too. Here’s a helpful cheat sheet for getting the most out of NordVPN on Linux:

Troubleshooting VPN setup on Linux

Even though getting a VPN to work on Linux is no rocket science, sometimes you can hit snags in the process. Maybe the app doesn’t behave as expected, or the connection keeps dropping — either way, it can be frustrating when the setup doesn't go as planned. Luckily, it’s usually something simple you can fix quickly. Below are some common problems Linux users face during VPN setup, and how to solve them quickly.

VPN connection fails

Sometimes, the VPN won’t connect at all. This issue can happen due to incorrect login details, outdated software, or network conflicts.

To solve the issue, first log out and log back in to your VPN account. Then make sure your app is up to date. Restarting your computer or your network manager can also sometimes help fix this issue.

Slow VPN connection

If your VPN is connected but feels sluggish, the server you’re using might be overloaded or too far away. Switch to a different VPN server — closer is usually faster. Also, try changing your VPN protocol.

Can’t access websites after connecting to VPN

If you’re connected, but some websites won’t load, it can be caused by DNS or firewall settings. Try clearing your DNS cache and checking that your firewall isn’t blocking traffic while the VPN is active.

Unable to connect to OpenVPN

If you’re setting up OpenVPN manually and it won’t connect, the issue could be with your configuration files or simply because of wrong login credentials.

Make sure you’ve downloaded the correct “.ovpn” files and placed them in the right folder. Double-check your OpenVPN installation and that your username and password are correct. Don’t forget to run the connection command with “sudo” for proper admin permissions.