Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a setup with a local host A behind a firewall acting as VPN client and a VPN server B which is publicly reachable. This setup works fine using openvpn.

Now what I would like to do is to reverse the setup, meaning have the VPN server locally on host A and the VPN client externally on host B. The problem here is of course that the VPN client on host B can't see (resolve) my local host A behind the firewall without the VPN. Therefore the normal connection from VPN client to VPN server does not work.

If there was a way to initiate the connection from the local VPN server to the VPN client, everything would be fine. Is there such a way?

share|improve this question

What you're asking to do breaks the commonly recognised client/server model. Clients will always initiate connections to servers.

The only way that this is usually resolved is by brokering the connection in the middle with a publically addressable common host. This is how Hamachi works in such situations.

share|improve this answer

It sounds like what you want to accomplish is a reverse tunnel into your network. I would suggest you check out reverse SSH tunnels and how to use them.

share|improve this answer
Reverse tunneling is still initiated by the client, not the server. – user1305332 Feb 18 at 22:38

You could set your firewall to port forward VPN (1723) to your VPN Server on the inside of the network, then you'd use the client to connect to the external IP of your firewall.

share|improve this answer
If I had control over the firewall, yes, that would be an option. But sadly I have not. Sorry, forgot to mention this. – Blixtor Jul 22 '09 at 5:54
If you can't get that port on host A then there's you're sunk unless you do the common host as Dan C alluded to. What are you trying to accomplish? maybe there's a better solution. – prestomation Sep 1 '09 at 17:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.