OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

6
votes
2answers
9k views

How do I prevent TCP connection freezes over an OpenVPN network?

New details added at the end of this question; it's possible that I'm zeroing in on the cause. I have a UDP OpenVPN-based VPN set up in tap mode (I need tap because I need the VPN to pass multicast ...
6
votes
2answers
2k views

OpenVpn bridge interface does not respond to incoming packets from outer network !

We are trying to set up a roadwarrior vpn setup with openvpn. We want the people to be able to connect to our network via openvpn. And we want them to be able to see and connect to the machines in our ...
6
votes
5answers
5k views

OpenVPN over TCP, terrible latency but only on Win7 x64

I know TCP encapsulated over TCP is a terrible idea in general, but I can deal with the occasional decreased performance and MTU issues, and the snowball effect TCP within TCP provides where error ...
6
votes
2answers
189 views

Unable to login via PAM and ldap: failed to get password

I'm trying to have OpenVPN authenticate users via PAM over LDAP to an Active Directory server. Here are the relevant parts of my configuration files: /etc/openvpn/server.conf: # ... plugin ...
6
votes
1answer
23k views

Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
6
votes
3answers
896 views

Timing issues with OpenVPN and NFS mounts (Debian Squeeze)

I'm trying to mount NFS filesystems over an OpenVPN link on Debian Squeeze. The problem is that the default layout of init scripts and such tries to mount the NFS filesystems before bringing up the ...
6
votes
4answers
4k views

Openvpn, forward packets very slowly

I rebooted my server, and an odd issue just came out. I am running on ArchLinux, the clients are Ubuntu, Android and Mac. The problem is that accessing the internet via the clients is slow, about ...
5
votes
4answers
8k views

What is difference between OpenVPN and PPTP?

I know PPTP is based PPP, so what is the openVPN based on ? can the packets of openVPN be routed by ubuntu server ? thanks!
5
votes
6answers
10k views

Why Can't OpenVPN GUI add routes in Windows 7?

Good-day all, I'm having trouble getting the OpenVPN GUI application to add routes to a Windows 7 client. I'm using the same config file I've used on a Windows XP client except that I added the ...
5
votes
5answers
7k views

OpenVPN with Active Directory integration

Is anyone successfully running OpenVPN with Active Directory integration? Are you using the openvpn.net or the openvpn.net/opensource version of OpenVPN? Any tips, tricks or gotchas or did it "just ...
5
votes
4answers
12k views

NetworkManager is not changing /etc/resolv.conf after openvpn dns push

I've got a problem which is "NetworkManager is not updating /etc/resolv.conf after openvpn connection with dns push configured". Here's my openvpn server config: (I've changed domain name to ABC.COM ...
5
votes
2answers
11k views

VPN can't connect properly

have set up a vpn client on my laptop connecting to a openvpn server on a vps. It was working just fine until i restarted my laptop. I get this connection log in the VPN client: Tue Nov 01 19:25:26 ...
5
votes
2answers
1k views

stunnel vpn traffic and ensure it looks like SSL traffic on port 443

I am trying to make my outgoing and incoming traffic look as legitimate as close to SSL traffic as possible. Is there a way to DPI my own traffic to ensure it looks like SSL traffic and not OpenVPN ...
5
votes
3answers
1k views

Is it possible to use same SSL certificate for Apache and OpenVPN?

Can I use the same paid SSL certificate for OpenVPN and Apache? UPDATE: The purpose is to get a Estonian National ID card support to both. So that one, using this smart card, may authenticate himself ...
5
votes
2answers
3k views

MULTI: bad source address from client - any one-off solutions?

Setup: I have the an openvpn client/server setup (config files at bottom), and I get the infamous MULTI: bad source address from client [192.168.x.x], packet dropped message at server. The server has ...
5
votes
5answers
8k views

VPN server on Google Compute Engine with OpenVPN

I'm trying to use Google Compute Engine server as VPN server for all my traffic (I'm living in Russia, we have some issues with censorship here). There is mini-tutorial about VPN on GCE, but it's ...
5
votes
2answers
644 views

Is it possible to allow a machine on openvpn to connect to only one server on the network?

I have an OpenVPN server which is already functioning properly and allowing people to work on our servers. There's a new project which requires me to allow access to the network and into one specific ...
5
votes
2answers
9k views

Pings from VPN network to VPN client work; pings into from VPN client to VPN network fail - why?

We are in the process of setting up an OpenVPN server for some servers running in a cloud. We are stumped with a connectivity problem whereby the hosts on the VPN server's LAN can ping te VPN client, ...
5
votes
2answers
2k views

Differences between SSH's tunnels and OpenVPN

I discovered that recent OpenSSH has support for tun devices. When it comes to tunnels and VPNs, I always thought the main programme was OpenVPN. Are there any advantages to using SSH tunnels? What ...
5
votes
4answers
19k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
5
votes
2answers
3k views

Connecting an EC2 VPC with OpenVPN all routed traffic being lost

I'm trying to use OpenVPN on Amazon Linux to connect the local LAN to a VPC on EC2. I have traffic flowing from the OpenVPN instance to any machine on the LAN, but other machines on the VPC are not ...
5
votes
2answers
7k views

Which openvpn cipher should I use?

From both a performance and security standpoint, which cipher should I use with openvpn? According to http://openvpn.net/index.php/open-source/documentation/howto.html#security , the default is ...
5
votes
3answers
8k views

Can I use OpenVPN with a single secret password instead of a keys set?

I am looking forward to create an as-simple-as-possible OpenVPN set-up. I would like to use a single password to secure the communication instead of a set of key files. How can I set it up this way? ...
5
votes
2answers
2k views

dynamic routing between openvpn tunnels

i'm thinking about using dynamic routing [ OSPF or RIP ] via OpenVPN tunnels. right now i have few offices connected in full mesh, but this is not scalable solution as we add more locations. i would ...
5
votes
1answer
2k views

Direct connection between multiple clients on OpenVPN

I've spent my entire day learning about VPN, and have been working with following setup: 2 VPS Servers at the same data centre in Texas. (Texas1 and Texas2), 1 VPS in England and 1 VPS in Atlanta and ...
5
votes
3answers
24k views

OpenVPN + iptables / NAT routing

I'm trying to set up an OpenVPN VPN, which will carry some (but not all) traffic from the clients to the internet via the OpenVPN server. My OpenVPN server has a public IP on eth0, and is using tap0 ...
5
votes
1answer
3k views

Routing setup for OpenVPN server on Amazon EC2

Software developer here, trying to get his sysadmin-foo up and running by setting up an OpenVPN server on amazon EC2 to access all the internal resources there. Here's how I envision that on a fresh ...
5
votes
4answers
2k views

Prevent SSH connection lost after logging into VPN on server machine

I encountered an issue that I can't deal with. When I'm logged onto an VPS over SSH and try to estabilish VPN connection on that VPS, the SSH connection between VPS and my machine get lost. I assume ...
5
votes
2answers
6k views

OpenVPN connection works but no gateway is assigned

i try to setup openvpn on a vps and I'm able to establish a connection to the server, but the gateway isn't assigned to the client. Here are my config files: client config: client dev tun proto ...
5
votes
1answer
11k views

OpenVPN failing on self-signed certificate over udp, works over tcp

I have the following server.conf: # OpenVPN 2.x config proto tcp port 1194 dev tun-vpn dev-type tun server 10.8.0.0 255.255.0.0 push "route 172.16.0.0 255.255.0.0" push "dhcp-option DOMAIN ...
5
votes
1answer
9k views

Port forwarding through OpenVPN

Here's my scenario. I have three hosts. 1) GATEWAY running OpenVPN Server. It has 1 LAN IP (192.168.1.10) and 1 OpenVPN IP (10.8.0.1). 2) LOCAL-CLIENT, a machine within the same LAN as GATEWAY, with ...
5
votes
4answers
1k views

Tunnel with least overhead

I'd like to tunnel a large amount of traffic from my local network to a server located in a datacenter, in a way that I don't have to make many changes to my local applications. The two methods that ...
5
votes
1answer
3k views

OpenVPN server cannot ping client IPs

I have flashed a router at two separate sites with DD-WRT firmware and setup OpenVPN on both. once connected the client can ping computers on the servers LAN however the server cannot ping IPs on the ...
5
votes
6answers
14k views

Samba over OpenVPN - horribly slow

I've set up a server to run OpenVPN, with the purpose of clients accessing Samba shares remotely. The server is running CentOS 5.6, a decent quad-core Xeon CPU and plenty of RAM. The client I've ...
5
votes
1answer
323 views

VPN server on Windows Server 2008 for a small office

I'm going to refurbish the IT-infrastructure for a small organization with one single office, and I'm not sure what VPN server to use. In your opinion, would the built-in Windows Server 2008 VPN ...
5
votes
2answers
2k views

OpenVPN - client-to-client traffic working in one direction but not the other

I have the following VPN configuration: +------------+ +------------+ +------------+ | outpost |----------------| kino |----------------| guchuko | ...
5
votes
2answers
13k views

Fix 'TLS Error: TLS handshake failed' on OpenVPN client

I am configuring OpenVPN 2.3.6-1 on my Arch Linux server in order to encrypt SMB traffic over the public Internet. When I test the setup on one of my Linux virtual machine clients, I get the error: ...
5
votes
0answers
2k views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
4
votes
5answers
15k views

How do I make Windows 7 treat a VPN connection to a subnet look like a non-“public” network?

I'm torturing myself with the task of trying to get an OpenVPN connection to a work subnet working under Windows 7. After some travail I've gotten the OpenVPN client to work and properly connect. ...
4
votes
2answers
1k views

Is OpenVPN UDP vulnerable to heartbleed?

Is OpenVPN UDP vulnerable to heartbleed? I need to decide if I'm going to rebuild some servers, but they are very carefully firewalled; 1194/TCP is one of the firewalled ports (yay whitelist!). ...
4
votes
2answers
2k views

How can multiple clients of an openvpn server find each other?

I am bringing up an openvpn server that will support multiple clients into a private subnet. So on the private subnet the clients connecting will get IP addresses such as 10.8.0.10, 10.8.0.11, etc. ...
4
votes
4answers
5k views

SSH traffic over openvpn connection freezes when I cat a file

I have an openvpn (version 2.1_rc15 at both ends) connection setup between two gentoo boxes using shared keys. it works fine for the most part. I use mysql, http, ftp, scp over the vpn with no ...
4
votes
3answers
845 views

How secure is a VPN connection over WiFi?

I travel a lot and connect to public wifi hotspots all the time. What information will be given out if I use VPN within public wifi hotspots? Will the owners or intruders in the hotspot be able to ...
4
votes
4answers
13k views

Check openVPN client connected Debian

How can I check if my Debian OpenVPN client is connected? Is there a specific command I have to run? Or can I read it from the logfile? Thanks. Edit: The answers below provide great value in ...
4
votes
2answers
2k views

Bypass openvpn for particular ip

My desktop machine runs Trisquel GNU/Linux 6.0 (which is basically a libre version of Ubuntu 12.04), and I use OpenVPN to connect to a commercial VPN provider for internet access. It currently routes ...
4
votes
2answers
11k views

Installing OpenVPN on Windows7

It seems I cannot install the current version of OpenVPN (2.1.2) because the TAP driver is not signed and therefore windows 7 x64 refuses to install it. It shows up in the device manager, but with a ...
4
votes
1answer
4k views

How to set OpenVPN client bind address?

The OpenVPN client machine has two interfaces to Internet: a low-speed and high-speed one. Default route goes throught the low-speed one. I'd like OpenVPN to connect to server through the high-speed ...
4
votes
1answer
600 views

Can my ISP know that I am connected through a VPN?

I have a general understanding of VPNs and how they work. However, I am not sure of how the initial request is seen by my ISP? For example say I am connected to an OpenVPN provider, what happens when ...
4
votes
2answers
2k views

OpenVPN Chaining

I'm trying to set up an OpenVPN "chain", similar to what is described here. I have two separate networks, A and B. Each network has an OpenVPN server using a standard "road warrior" or "client/server" ...
4
votes
2answers
2k views

OpenVPN bypass on some ports

I have a server running Debian 7 and I would like to connect to a VPN and let all the traffic pass via the VPN except for some ports (SSH, hosted websites, etc). I've searched for some time now in ...