Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Apologies if this is a FAQ but I did not find it in the answers, hence, I'm positing it here. I have a following scenario and I am curious how can I use OpenVPN-(AS) to solve my issue.

  1. I have two Application servers in two different LANs, separated by WAN, that need to communicate with each other over around 2500 different ports.
  2. Both of them have Static IP addressing and IP addresses cannot be changed on the fly.
  3. I only have SSL port open for me to communicate with over.


  1. Can I build a SSL tunnel using OpenVPN to do what I need?
  2. will the following OpenVPN-AS scenario work?


  1. I setup a publicly visible VPN Server (
  2. Make Application servers on both sides and connect to this publicly visible VPN server using the OpenVPN-Client.
  3. Connect from Application server 1 to Application Server 2 just like they can see each other.

Is this feasible with OpenVPN, and if so, are there any pointers on how to achieve this?

share|improve this question
up vote 1 down vote accepted

Yes you can do what's in your scenario. Read this and enable "client-to-client" in your config.

You only need to set up the config, generate the certs (easy-rsa, very simple), and start the processes. Just don't forget the "client-to-client" option in the config file.

The other possibility is to set up server on one of the servers, and client on another (if you have a free port visible from outside on one of them - if you only have tcp/443 it's not such a good idea, since tcp-over-tcp has alot of overhead, but will still work, if there is no better solution).

share|improve this answer
Hi @Mulaz, thanks for the response. I am not sure what part of the document you wanted me to read or the whole document itself. – Atul Kulkarni Aug 28 '12 at 1:07
There are configuration examples for client and server setup, and an explanation for client-to-client setting there. Of course, other usefull stuff too. – mulaz Aug 28 '12 at 1:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.