OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

5
votes
2answers
2k views

OpenVPN - client-to-client traffic working in one direction but not the other

I have the following VPN configuration: +------------+ +------------+ +------------+ | outpost |----------------| kino |----------------| guchuko | ...
5
votes
4answers
3k views

Openvpn, forward packets very slowly

I rebooted my server, and an odd issue just came out. I am running on ArchLinux, the clients are Ubuntu, Android and Mac. The problem is that accessing the internet via the clients is slow, about ...
5
votes
2answers
1k views

ARP reply vanishes from br0 to tap0 using OpenVPN in bridging mode

i have setup a linux box (on an esxi5) which acts as an openvpn server. the server is configured to use bridging for the clients, which essentially works, with one exception. if the client pings some ...
4
votes
4answers
7k views

What is difference between OpenVPN and PPTP?

I know PPTP is based PPP, so what is the openVPN based on ? can the packets of openVPN be routed by ubuntu server ? thanks!
4
votes
2answers
1k views

Is OpenVPN UDP vulnerable to heartbleed?

Is OpenVPN UDP vulnerable to heartbleed? I need to decide if I'm going to rebuild some servers, but they are very carefully firewalled; 1194/TCP is one of the firewalled ports (yay whitelist!). ...
4
votes
1answer
8k views

How to view connected users to open vpn server?

I'm developing a web site for managing open vpn users with django framework. But I need to now is there any way to extract active users from open vpn? My server is running Ubuntu 12.04.
4
votes
2answers
5k views

No tun device in lxc guest for openvpn

I am trying to set up an openvpn server inside a lxc guest. However, it seams there is no tun device available in the container. Starting openvpn inside the container gives me this error: Tue Sep 18 ...
4
votes
1answer
5k views

How to ensure OpenVPN connection uses specific DNS?

I'm using OpenVPN through Tunnelblick on MacOS X Lion. I need to set specific DNS (with local IP, which works only when VPN is up) for the duration of this VPN session only. I do not have access to ...
4
votes
2answers
3k views

OpenVPN DNS Fails to Resolve

I am connected to an OpenVPN server that is configured with the options to redirect the VPN as the default gateway and to push my internal DNS servers: push "dhcp-option DNS 192.168.1.2" push ...
4
votes
2answers
1k views

Comments in OpenVPN client config files?

Is it possible to put comments in the client config files (those in the path specified by "client-config-dir") for OpenVPN, i.e. something beginning with "#" or "//" or the like? If so, what is the ...
4
votes
3answers
7k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
4
votes
3answers
4k views

SSH traffic over openvpn connection freezes when I cat a file

I have an openvpn (version 2.1_rc15 at both ends) connection setup between two gentoo boxes using shared keys. it works fine for the most part. I use mysql, http, ftp, scp over the vpn with no ...
4
votes
3answers
793 views

How secure is a VPN connection over WiFi?

I travel a lot and connect to public wifi hotspots all the time. What information will be given out if I use VPN within public wifi hotspots? Will the owners or intruders in the hotspot be able to ...
4
votes
2answers
122 views

stunnel vpn traffic and ensure it looks like SSL traffic on port 443

I am trying to make my outgoing and incoming traffic look as legitimate as close to SSL traffic as possible. Is there a way to DPI my own traffic to ensure it looks like SSL traffic and not OpenVPN ...
4
votes
2answers
10k views

Installing OpenVPN on Windows7

It seems I cannot install the current version of OpenVPN (2.1.2) because the TAP driver is not signed and therefore windows 7 x64 refuses to install it. It shows up in the device manager, but with a ...
4
votes
1answer
2k views

How to set OpenVPN client bind address?

The OpenVPN client machine has two interfaces to Internet: a low-speed and high-speed one. Default route goes throught the low-speed one. I'd like OpenVPN to connect to server through the high-speed ...
4
votes
1answer
419 views

Can my ISP know that I am connected through a VPN?

I have a general understanding of VPNs and how they work. However, I am not sure of how the initial request is seen by my ISP? For example say I am connected to an OpenVPN provider, what happens when ...
4
votes
2answers
963 views

Bypass openvpn for particular ip

My desktop machine runs Trisquel GNU/Linux 6.0 (which is basically a libre version of Ubuntu 12.04), and I use OpenVPN to connect to a commercial VPN provider for internet access. It currently routes ...
4
votes
1answer
4k views

Why Openvpn use network 0.0.0.0 netmask 128.0.0.0 as default route?

If you use "redirect-gateway def1" option in openvpn config file,the server will add a default gateway on your route table, what i want to konw is Why openvpn did not use network 0.0.0.0 netmask ...
4
votes
2answers
5k views

OpenVPN port-share with Apache/SSL

I'm trying to set up OpenVPN to listen on port 443, and then pass all HTTPS traffic to Apache, by using the port-share option. Relevant config snippets are: OpenVPN local ${PUBLIC_IP} port 443 ...
4
votes
2answers
15k views

How to set up OpenVPN to let the VPN clients to access all the servers inside the server LAN?

My server LAN IP is 192.168.1.1 and there is an intranet web server on 192.168.1.2 The OpenVPN daemon is configured to give clients 192.168.2.* addresses. There is push "route 192.168.1.0 ...
4
votes
1answer
7k views

OpenVPN server running on openvz. How to write iptables rule without masquerade?

I am configuring a VPS which is running on openvz as an OpenVPN server using a tun interface. I am having some trouble with the iptables rule as MASQUERADE is not available. If MASQUERADE were ...
4
votes
5answers
4k views

VPN server on Google Compute Engine with OpenVPN

I'm trying to use Google Compute Engine server as VPN server for all my traffic (I'm living in Russia, we have some issues with censorship here). There is mini-tutorial about VPN on GCE, but it's ...
4
votes
3answers
1k views

connected to Centos openvpn but no outside internet access

I am using Windows 7 to connect to a VPS server running CentOS 6.4 First off, I have read every single post and just cant find the solution to my problem I configured my VPN server with openvpn, and ...
4
votes
1answer
5k views

Which openvpn cipher should I use?

From both a performance and security standpoint, which cipher should I use with openvpn? According to http://openvpn.net/index.php/open-source/documentation/howto.html#security , the default is ...
4
votes
3answers
3k views

Opening up the subnet LAN behind an OpenVPN server

I've set up an OpenVPN server on my work network, and I am able to access the server from a remote machine over the vpn. However I can't work out how to access the lan behind the server. The network ...
4
votes
1answer
259 views

OpenVPN needs to change its port every time I use

I have a Linode VPS that I setup OpenVPN server on it. Since I'm in China we have to deal with the GFW (Great Firewall), so I use the VPN a lot. The weird part is, that every time I use it, I need to ...
4
votes
1answer
2k views

openVPN: Changing Windows 7 firewall settings

I had a problem where Windows 7 would not allow inbound connections over my openVPN tunnel. Meaning that my Windows 7 client would allow outbound and established connections but not allow inbound ...
4
votes
1answer
240 views

OpenVPN and routing

I've a server running openvpn, and I have a little issue. All my traffic is forwarded to the VPN, and when I use a website like "whatismyip" I see the server IP, so this part is working. But when I ...
4
votes
2answers
13k views

How can I setup OpenVPN with IPv4 and IPv6 using a tap device?

I've managed to setup OpenVPN for full IPv4 connectivity using tap0. Now I want to do the same for IPv6. Addresses and network setup (note that my real prefix is replaced by 2001:db8): ...
4
votes
2answers
2k views

Replace DNS on Openvpn client without redirect-gateway

I am trying to push DNS to the client with OpenVPN server with config: push "dhcp-option DNS 192.168.x.x" It is working well, but what I really need is that during the VPN connection I do not ...
4
votes
2answers
4k views

OpenVPN connection works but no gateway is assigned

i try to setup openvpn on a vps and I'm able to establish a connection to the server, but the gateway isn't assigned to the client. Here are my config files: client config: client dev tun proto ...
4
votes
1answer
299 views

How to handle OpenVPN client as a service, when the laptop is physically on the network already?

The Setup I've gotten OpenVPN working on our Windows XP laptops. Users are limited, so I went ahead and set OpenVPN client to run as a service, which is great anyway because that means they are on ...
4
votes
1answer
4k views

Problems setting up a VPN: can connect but can't ping anyone

This is my first time setting a VPN. Clients can connect but can't ping other machines. This is certainly a route problem but i can't find the right way to configure it. Here is a sample example of ...
4
votes
2answers
1k views

OpenVPN Server - CPU is pegged out

I am configuring OpenVPN to act as a SSL tunnel for a remote location. I have OpenVPN1 at our current location acting as a server then OpenVPN2 at the other location that is acting as a client but is ...
4
votes
2answers
5k views

openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

My goal: I want to set up openVPN on a vServer from the company netcup, running Debian squeeze. I only want a VPN connection from client to server; clients should not be able to see each other, also ...
4
votes
1answer
788 views

OpenVPN web traffic routing not working

My first time trying to set up OpenVPN. I followed the HOWTO guide from OpenVPN's site and was successfully connected but when I tried to route my web traffic, it seems that nothing gets through to my ...
3
votes
6answers
12k views

What's the advantage of OpenVPN over SSTP?

If considering Windows only environment, what's the advantage of introducing OpenVPN as the company VPN service, instead of Windows built-in protocols? Especially the new SSTP protocol already ...
3
votes
2answers
7k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
3
votes
5answers
11k views

How do I make Windows 7 treat a VPN connection to a subnet look like a non-“public” network?

I'm torturing myself with the task of trying to get an OpenVPN connection to a work subnet working under Windows 7. After some travail I've gotten the OpenVPN client to work and properly connect. ...
3
votes
3answers
12k views

How to connect multiple VPNs using OpenVPN on Windows 7 on the same time?

I work most of the time remotly from home. To gain access to the different servers (via SSH) I have to use OpenVPN. I would like to connect to all of them (three, sometimes four) at once, so I dont ...
3
votes
5answers
520 views

The right vpn to replace heavy ssh usage

We are a small development firm looking to access the following services remotely: http smb network shares rdc / vnc Currently we do this with a lot of ssh tunnels. We are looking into switching ...
3
votes
2answers
4k views

OpenVPN with iptables and a tun interface

With an openvpn tunnel that uses a tun device, what iptables rules allow the encapsulated traffic through and what rules control the packets after encapsulation? Basically, I am wondering how the ...
3
votes
2answers
6k views

VPN can't connect properly

have set up a vpn client on my laptop connecting to a openvpn server on a vps. It was working just fine until i restarted my laptop. I get this connection log in the vpn client: ...
3
votes
2answers
2k views

What's the best method to monitor an OpenVPN server?

I have an OpenVPN server machine which resides on an isolated network, a NAT rule in the company's firewall is redirecting all traffic on port 1194 (tcp) from the public IP I chose to the internal ...
3
votes
2answers
8k views

How to connect to VPN from the command line in Linux?

I have different tunnels that I configured using the network manager GUI. When I login to my desktop, I'm connected to the internet without any tunnels. To connect to a tunnel, I usually click on the ...
3
votes
3answers
2k views

How can I prevent OpenVPN from clobbering local route?

I have a local network on 192.168.1.0 with netmask 255.255.255.0. When I connect to a VPN though OpenVPN (as a client), it pushes a route for 192.168.1.0 that clobbers the existing one, making my ...
3
votes
3answers
3k views

Multiple openvpn clients on one openvpn server

Can I have multiple openvpn clients connecting to a single openvpn server? The following setting works well for a single user This is the server configuration (openvpn.conf) port 1194 proto udp dev ...
3
votes
3answers
2k views

Help setting up OpenVPN server

I set up an openvpn server on ec2 following the directions here: http://alestic.com/2009/05/openvpn-ec2 That all works great. I'd like to change this to use asymmetric keys, and allow multiple ...
3
votes
1answer
571 views

Limiting OpenVPN bandwidth

I'd like to give users a certain amount of traffic. Let's say user A gets 1 GB and user B get 5 GB. I have a great script which does log all this info, however this script is called when the user ...