Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to be able to route all my (outbound) network traffic through my OpenVPN connection. For me, the easiest way to do this would seem to be to enable my clearOS server to act as an OpenVPN client, and to route all my traffic through the server/router (and thus, my VPN connection).

That way I would only have to configure and maintain one VPN connection (the one on my server/router), and all my connected stations can just connect to the router as they normally do. This way I wouldn't have to configure each station individually, and even stations that don't support installing the openVPN client would be able to use the connection.

However, as far as I can see, clearOS can only act as an OpenVPN server, not as a client. Is there a way to do this in clearOS? Or am I going to have to do this through the command line or by fiddling with the base OS (I'd rather not)?

share|improve this question
    
The openvpn binary itself can function as server and client, depending on the configuration file. Most likely, you'll just have to create an OpenVPN client configuration file, drop it into the filesystem (presumably in /etc/openvpn, maybe removing any server config) and go from there. I'm unfamiliar with ClearOS's GUI management tool, but certainly a basic client.conf should work. –  cjc Oct 19 '12 at 13:01
    
@cjc, would that kind of a configuration also prevent any other traffic besides that routed through the openvpn connection? (like dns lookups etc.) –  user120729 Oct 19 '12 at 13:14
    
that's more a routing table/firewall configuration, which can be pushed by your OpenVPN server. Look at openvpn.net/index.php/open-source/documentation/… and you will need to adjust your firewall to block any FORWARD traffic other than what goes over the VPN interface. –  cjc Oct 19 '12 at 13:39

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.