OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

6
votes
2answers
2k views

Very low TCP OpenVPN throughput (100Mbit port, low CPU utilization)

I am experiencing extremely slow OpenVPN transfer rates between two servers. For this question, I'll call the servers Server A and Server B. Both Server A and Server B are running CentOS 6.6. Both ...
6
votes
1answer
5k views

Can OpenSWAN replace OpenVPN?

Background I have a working OpenVPN setup right now, where users can connect the the private network at home with their computers. However most phones only support IPSec, so I would like to offer ...
6
votes
3answers
7k views

Bridging VirtualBox over OpenVPN TAP adapter on Windows

I'm trying to configure a virtual machine (VirtualBox guest running Backtrack 4) with a bridged adapter over a VPN connection. The VPN is is hosted by the cybersecurity club at my university, and ...
6
votes
1answer
3k views

Software VPN connection to Amazon AWS VPC private instance [closed]

I have a Virtual Private Cloud (VPC) instance on Amazon AWS. Inside the VPC, I have a private instance which is running the database and a public instance which has the front-end web pages for ...
6
votes
2answers
10k views

How do I prevent TCP connection freezes over an OpenVPN network?

New details added at the end of this question; it's possible that I'm zeroing in on the cause. I have a UDP OpenVPN-based VPN set up in tap mode (I need tap because I need the VPN to pass multicast ...
6
votes
2answers
2k views

OpenVpn bridge interface does not respond to incoming packets from outer network !

We are trying to set up a roadwarrior vpn setup with openvpn. We want the people to be able to connect to our network via openvpn. And we want them to be able to see and connect to the machines in our ...
6
votes
5answers
5k views

OpenVPN over TCP, terrible latency but only on Win7 x64

I know TCP encapsulated over TCP is a terrible idea in general, but I can deal with the occasional decreased performance and MTU issues, and the snowball effect TCP within TCP provides where error ...
6
votes
2answers
243 views

Unable to login via PAM and ldap: failed to get password

I'm trying to have OpenVPN authenticate users via PAM over LDAP to an Active Directory server. Here are the relevant parts of my configuration files: /etc/openvpn/server.conf: # ... plugin /...
6
votes
1answer
24k views

Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
6
votes
3answers
914 views

Timing issues with OpenVPN and NFS mounts (Debian Squeeze)

I'm trying to mount NFS filesystems over an OpenVPN link on Debian Squeeze. The problem is that the default layout of init scripts and such tries to mount the NFS filesystems before bringing up the ...
6
votes
4answers
4k views

Openvpn, forward packets very slowly

I rebooted my server, and an odd issue just came out. I am running on ArchLinux, the clients are Ubuntu, Android and Mac. The problem is that accessing the internet via the clients is slow, about 2ko/...
5
votes
4answers
8k views

What is difference between OpenVPN and PPTP?

I know PPTP is based PPP, so what is the openVPN based on ? can the packets of openVPN be routed by ubuntu server ? thanks!
5
votes
6answers
10k views

Why Can't OpenVPN GUI add routes in Windows 7?

Good-day all, I'm having trouble getting the OpenVPN GUI application to add routes to a Windows 7 client. I'm using the same config file I've used on a Windows XP client except that I added the ...
5
votes
5answers
7k views

OpenVPN with Active Directory integration

Is anyone successfully running OpenVPN with Active Directory integration? Are you using the openvpn.net or the openvpn.net/opensource version of OpenVPN? Any tips, tricks or gotchas or did it "just ...
5
votes
3answers
1k views

Is it possible to use same SSL certificate for Apache and OpenVPN?

Can I use the same paid SSL certificate for OpenVPN and Apache? UPDATE: The purpose is to get a Estonian National ID card support to both. So that one, using this smart card, may authenticate himself ...
5
votes
2answers
3k views

MULTI: bad source address from client - any one-off solutions?

Setup: I have the an openvpn client/server setup (config files at bottom), and I get the infamous MULTI: bad source address from client [192.168.x.x], packet dropped message at server. The server has ...
5
votes
5answers
9k views

VPN server on Google Compute Engine with OpenVPN

I'm trying to use Google Compute Engine server as VPN server for all my traffic (I'm living in Russia, we have some issues with censorship here). There is mini-tutorial about VPN on GCE, but it's ...
5
votes
2answers
668 views

Is it possible to allow a machine on openvpn to connect to only one server on the network?

I have an OpenVPN server which is already functioning properly and allowing people to work on our servers. There's a new project which requires me to allow access to the network and into one specific ...
5
votes
2answers
9k views

Pings from VPN network to VPN client work; pings into from VPN client to VPN network fail - why?

We are in the process of setting up an OpenVPN server for some servers running in a cloud. We are stumped with a connectivity problem whereby the hosts on the VPN server's LAN can ping te VPN client, ...
5
votes
2answers
2k views

Differences between SSH's tunnels and OpenVPN

I discovered that recent OpenSSH has support for tun devices. When it comes to tunnels and VPNs, I always thought the main programme was OpenVPN. Are there any advantages to using SSH tunnels? What ...
5
votes
2answers
2k views

OpenVPN bypass on some ports

I have a server running Debian 7 and I would like to connect to a VPN and let all the traffic pass via the VPN except for some ports (SSH, hosted websites, etc). I've searched for some time now in ...
5
votes
2answers
8k views

Which openvpn cipher should I use?

From both a performance and security standpoint, which cipher should I use with openvpn? According to http://openvpn.net/index.php/open-source/documentation/howto.html#security , the default is ...
5
votes
2answers
5k views

Tunneling a public IP to a remote machine

I have a Linux server A with a block of 5 public IP addresses, 8.8.8.122/29. Currently, 8.8.8.122 is assigned to eth0, and 8.8.8.123 is assigned to eth0:1. I have another Linux machine B in a remote ...
5
votes
4answers
20k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
5
votes
2answers
4k views

Connecting an EC2 VPC with OpenVPN all routed traffic being lost

I'm trying to use OpenVPN on Amazon Linux to connect the local LAN to a VPC on EC2. I have traffic flowing from the OpenVPN instance to any machine on the LAN, but other machines on the VPC are not ...
5
votes
3answers
9k views

Can I use OpenVPN with a single secret password instead of a keys set?

I am looking forward to create an as-simple-as-possible OpenVPN set-up. I would like to use a single password to secure the communication instead of a set of key files. How can I set it up this way?
5
votes
1answer
10k views

HowTo access Samba Share over VPN Tunnel?

I don't know how to access a Samba share running on a Ubuntu 10.04 server through OpenVPN 2.1.0. I've installed & configured OpenVPN and everything works. The server end of the tunnel has the IP ...
5
votes
2answers
2k views

dynamic routing between openvpn tunnels

i'm thinking about using dynamic routing [ OSPF or RIP ] via OpenVPN tunnels. right now i have few offices connected in full mesh, but this is not scalable solution as we add more locations. i would ...
5
votes
1answer
2k views

Direct connection between multiple clients on OpenVPN

I've spent my entire day learning about VPN, and have been working with following setup: 2 VPS Servers at the same data centre in Texas. (Texas1 and Texas2), 1 VPS in England and 1 VPS in Atlanta and ...
5
votes
3answers
24k views

OpenVPN + iptables / NAT routing

I'm trying to set up an OpenVPN VPN, which will carry some (but not all) traffic from the clients to the internet via the OpenVPN server. My OpenVPN server has a public IP on eth0, and is using tap0 ...
5
votes
2answers
80 views

Why does OpenVPN give the error: “unsupported certificate purpose” for an intermediate certificate?

When trying to connect an OpenVPN client (Android or Windows 7/10) to my test server, I receive the following error: VERIFY ERROR: depth=1, error=unsupported certificate purpose: C=CA, ST=QC, L=...
5
votes
1answer
3k views

Routing setup for OpenVPN server on Amazon EC2

Software developer here, trying to get his sysadmin-foo up and running by setting up an OpenVPN server on amazon EC2 to access all the internal resources there. Here's how I envision that on a fresh ...
5
votes
4answers
2k views

Prevent SSH connection lost after logging into VPN on server machine

I encountered an issue that I can't deal with. When I'm logged onto an VPS over SSH and try to estabilish VPN connection on that VPS, the SSH connection between VPS and my machine get lost. I assume ...
5
votes
2answers
7k views

OpenVPN: How to mitigate path MTU issues on a per-client basis?

We have dozens of embedded devices installed at customers, all calling home to our OpenVPN service. That works fine in general, but a few of our customers have severe path MTU issues. Our influence on ...
5
votes
2answers
7k views

OpenVPN connection works but no gateway is assigned

i try to setup openvpn on a vps and I'm able to establish a connection to the server, but the gateway isn't assigned to the client. Here are my config files: client config: client dev tun proto ...
5
votes
1answer
12k views

OpenVPN failing on self-signed certificate over udp, works over tcp

I have the following server.conf: # OpenVPN 2.x config proto tcp port 1194 dev tun-vpn dev-type tun server 10.8.0.0 255.255.0.0 push "route 172.16.0.0 255.255.0.0" push "dhcp-option DOMAIN mydom....
5
votes
1answer
10k views

Port forwarding through OpenVPN

Here's my scenario. I have three hosts. 1) GATEWAY running OpenVPN Server. It has 1 LAN IP (192.168.1.10) and 1 OpenVPN IP (10.8.0.1). 2) LOCAL-CLIENT, a machine within the same LAN as GATEWAY, with ...
5
votes
4answers
1k views

Tunnel with least overhead

I'd like to tunnel a large amount of traffic from my local network to a server located in a datacenter, in a way that I don't have to make many changes to my local applications. The two methods that ...
5
votes
2answers
19k views

Fix 'TLS Error: TLS handshake failed' on OpenVPN client

I am configuring OpenVPN 2.3.6-1 on my Arch Linux server in order to encrypt SMB traffic over the public Internet. When I test the setup on one of my Linux virtual machine clients, I get the error: ...
5
votes
1answer
3k views

OpenVPN server cannot ping client IPs

I have flashed a router at two separate sites with DD-WRT firmware and setup OpenVPN on both. once connected the client can ping computers on the servers LAN however the server cannot ping IPs on the ...
5
votes
6answers
15k views

Samba over OpenVPN - horribly slow

I've set up a server to run OpenVPN, with the purpose of clients accessing Samba shares remotely. The server is running CentOS 5.6, a decent quad-core Xeon CPU and plenty of RAM. The client I've ...
5
votes
1answer
324 views

VPN server on Windows Server 2008 for a small office

I'm going to refurbish the IT-infrastructure for a small organization with one single office, and I'm not sure what VPN server to use. In your opinion, would the built-in Windows Server 2008 VPN ...
5
votes
2answers
2k views

OpenVPN - client-to-client traffic working in one direction but not the other

I have the following VPN configuration: +------------+ +------------+ +------------+ | outpost |----------------| kino |----------------| guchuko | +---------...
5
votes
0answers
140 views

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
5
votes
0answers
2k views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
4
votes
5answers
16k views

How do I make Windows 7 treat a VPN connection to a subnet look like a non-“public” network?

I'm torturing myself with the task of trying to get an OpenVPN connection to a work subnet working under Windows 7. After some travail I've gotten the OpenVPN client to work and properly connect. ...
4
votes
2answers
1k views

Is OpenVPN UDP vulnerable to heartbleed?

Is OpenVPN UDP vulnerable to heartbleed? I need to decide if I'm going to rebuild some servers, but they are very carefully firewalled; 1194/TCP is one of the firewalled ports (yay whitelist!). ...
4
votes
3answers
6k views

Multiple openvpn clients on one openvpn server

Can I have multiple openvpn clients connecting to a single openvpn server? The following setting works well for a single user This is the server configuration (openvpn.conf) port 1194 proto udp dev ...
4
votes
2answers
2k views

How can multiple clients of an openvpn server find each other?

I am bringing up an openvpn server that will support multiple clients into a private subnet. So on the private subnet the clients connecting will get IP addresses such as 10.8.0.10, 10.8.0.11, etc. ...
4
votes
4answers
6k views

SSH traffic over openvpn connection freezes when I cat a file

I have an openvpn (version 2.1_rc15 at both ends) connection setup between two gentoo boxes using shared keys. it works fine for the most part. I use mysql, http, ftp, scp over the vpn with no ...