OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

1
vote
3answers
1k views

Tough routing problem with Linux, Quagga and OpenVPN

The Setup I have an OpenVPN server that acts as a central router. It is configured with "topology subnet" command. Clients are Debian Linux nodes and each have one (or more) subnets directly ...
2
votes
2answers
7k views

How much horsepower is needed to have 100Mbit/sec OpenVPN throughput? [closed]

My small ALIX machine is not coping with the new demand for OpenVPN throughput I have. So I'm looking to replace it. Problem is, I don't have any experience with hardware sizing for OpenVPN. I'm ...
0
votes
2answers
481 views

openVPN dedicated outgoing ip for my users

So I have this box with 10 external IPs and I also have 10 users. Whenever a user connects to my VPN I want him to access the internet via a dedicated ip which I pull from the list of 10 externals. ...
0
votes
1answer
113 views

Openvpn Compromise scenario

Scenario : 2 Certification Authorities used for Openvpn - one CA for client certs and another CA for server certs. Question : Say the CA handing out client certificates is compromised - assuming a ...
4
votes
2answers
4k views

OpenVPN port-share with Apache/SSL

I'm trying to set up OpenVPN to listen on port 443, and then pass all HTTPS traffic to Apache, by using the port-share option. Relevant config snippets are: OpenVPN local ${PUBLIC_IP} port 443 ...
1
vote
2answers
827 views

How to create a route to a domain name using openvpn

Is there any way to configure openvpn to "push" routes to a client for a given FQDN instead of an IP/mask? I mean something that would do the same as the following (broken) line in openvpn.conf file. ...
0
votes
1answer
1k views

Openvpn intermediate CA CRL Question

I have created a CA and an intermediate CA using easy-rsa 2.0. On the Openvpn server I use the intermediate certificate export_ca (as per the easy-rsa spec). When I revoke a certificate on my ...
2
votes
1answer
1k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
0
votes
1answer
545 views

log openvpn traffic by squid

is any way to log openvpn traffic (sites that users visited)? i think because openvpn use tunnel and encrypt traffic cannot log visited websites, but in a server i saw that open vpn's users traffic ...
0
votes
1answer
280 views

Connecting to different OpenVPN servers

I have set up two different OpenVPN servers, one in the US and one in London. I connect to them from home using Windows 7, and the software I use is the basic OpenVPN client. Now the problem I have ...
0
votes
1answer
2k views

How to diagnose / fix an OpenVPN setup which works from inside of LAN but doesn not work from WAN side of router

The firm I work for has decided to go with OpenVPN to replace heavy ssh usage ( http://serverfault.com/questions/80566/the-right-vpn-to-replace-heavy-ssh-usage ) I have attempted to setup OpenVPN for ...
1
vote
1answer
222 views

Choosing protocol/method of connecting branch offices or datacentres

I have experience of openvpn, ciscos ipsec tunnels and alike but I wonder in what situation one would benefit from using a MPLS instead? If I understand it correctly, MPLS is L2 (but is sometimes ...
2
votes
3answers
2k views

Need help setting up OpenVPN on an Ubuntu server

EDIT: OK, thanks to all of your help I've made some progress. I fixed the connectivity issues with the bridge by manually setting up the bridge in the interfaces file and editing the bridge-start and ...
0
votes
2answers
1k views

Two tiny network VPN(site-to-site) : Bridged or Routed?

I want to setup a VPN between two small office network : 1st Network : ADSL Router with DHCP - 3 Server(Static IP) - 20 WorkStation(DHCP) 2nd Network : ADSL Router with DHCP - 1 Server(Static IP) - ...
0
votes
2answers
468 views

OpenVPN bridging with venet interfaces

I have a VPS which uses venet interfaces for its (virtual) ethernet connections. I've managed to get an OpenVPN daemon running with tunneling, but not able to do so with bridging (tap). Is it ...
0
votes
1answer
451 views

Cisco Route needed to route VPN clients to datacenter

I have setup a OpenVPN server on a server in the office for people to VPN into. They can hit any host on the office network just fine but if they try to access our datacenter on another subnet nothing ...
0
votes
3answers
2k views

Want to route all internet traffic through VPN

I want to route all internet traffic through a VPN client, so if the VPN somehow lose connection, nobody can find my real IP. So if VPS goes down, so my internet access. I'm using OpenVPN with this ...
1
vote
2answers
679 views

Jconsole over VPN

I'm trying to monitor a remote jvm using jconsole. I need to do this monitoring through an OpenVPN network which might me part of the problem. This is the network configuration: Server A ...
0
votes
1answer
1k views

Link Aggregation (Bonding) of OpenVPN TAP devices in Windows XP

Is there any way to bond two TAP devices in Windows XP into one network device? My ISP is, in theory, providing me with a 5Mb/s connection. However, my OpenVPN tap device can only reach ~100KB/s. ...
1
vote
2answers
4k views

Linux VPN Client with SecurID/RSA Tokens?

I'm setting up a VPN that needs to have clients on Linux, Windows, and Mac. I was planning to sue a PPTP client, with RADIUS to the SecurID RSA install, but I can't find any way to set up a linux ...
2
votes
2answers
1k views

Sharing an IP pool for two openvpn instances (one TCP and one UDP)

I'm currently running OpenVPN on my VPS, listening on port 1194 via TCP. I need to use TCP since I sometimes need to tunnel traffic over an HTTP proxy. However, I'd also like to be able to use UDP, ...
0
votes
1answer
581 views

Cannot route traffic through OpenVPN interface

I have setup an OpenVPN server I want to connect to from my Mac at home. It was fairly painless and both the client and server are setup properly. The client can connect to the server just fine. I am ...
0
votes
2answers
810 views

Openvpn and bad routing = multiple external IP Adresses

I have an OpenVPN server on ubuntu and the client (Openvpn 2.1_rc19) on windows7 x64. The connection is established an I can use it. However not all traffic is routed through the openvpn interface and ...
4
votes
2answers
10k views

Installing OpenVPN on Windows7

It seems I cannot install the current version of OpenVPN (2.1.2) because the TAP driver is not signed and therefore windows 7 x64 refuses to install it. It shows up in the device manager, but with a ...
1
vote
1answer
2k views

Linksys/Cisco RVS4000 VPN Setup

My company has a user leaving the office and will be working from home often. I need to setup a VPN connection for him. Here is the situation. The user will be working from remote locations. The ...
1
vote
6answers
11k views

What's the advantage of OpenVPN over SSTP?

If considering Windows only environment, what's the advantage of introducing OpenVPN as the company VPN service, instead of Windows built-in protocols? Especially the new SSTP protocol already ...
4
votes
3answers
6k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
1
vote
2answers
912 views

Client can only access the server hosting OpenVPN, not the servers subnet

I have a peculiar problem with a OpenVPN tunnel on my Linux-server (RoadWarrior config). I can login perfectly with Tunnelblick 3.0 on my Mac, I can access all services on the server hosting the ...
0
votes
1answer
2k views

Rules for Cisco ASA 5505 Port Forwarding to enable OpenVPN and WWW

We use Openvpn in our company to connect external clients with our office network. After setting up the new router Cisco ASA 5505 we need to forward the ports for Openvpn and WWW in order to keep this ...
0
votes
4answers
1k views

Setting up proper routes with an OpenVPN server

First and foremost I am not a strong networking person but we do not have a network tech here in the office so I got charged with getting this setup and running. Here is the network topology: ...
0
votes
2answers
1k views

Openvpn, FreeBSD, Linux and routing

There is a network in the office. There are a router powered by FreeBSD in the network and a server powered by CentOS outside. Task: provide an access from anywhere to the network in the office. ...
3
votes
3answers
4k views

Getting openvpn client to forward all traffic through server

I am trying to set up an openvpn server and client, with all client traffic being routed through the server. I am currently able to access the server through the client, but when I enable 'push ...
2
votes
1answer
421 views

Stress test OpenVPN server?

We have about 50-100 concurrent users connected to our current VPN and would like to migrate to an OpenVPN network. We have setup a RHEL server running OpenVPN and would like to simulate 50-100 ...
0
votes
2answers
395 views

How to prevent users from sending spam when connected to openVPN server?

In order to prevent spam on my openVPN servers, port 25 was blocked on my openVPN servers. if a user connects to my openVPN server and then tries to send emails via web-based or desktop bulk mailer, ...
0
votes
2answers
4k views

OpenVPN: Windows 7 x64 client cannot see remote LAN, but XP client can

I'm using OpenVPN 2.1.1 with Windows XP x86 SP3 and Windows 7 x64 clients to an Endian Community 2.4.0 box which includes OpenVPN 2.1-rc15. Connecting from both works fine, but accessing resources on ...
2
votes
2answers
5k views

How to control multiple OpenVPN instances on the same server?

We have Centos servers running multiple daemons, up to 3 on each server. I have looked at the the rc.d init scripts and see no way to control the daemons independently. We would really like to be able ...
1
vote
1answer
11k views

Do Cisco ASA 5505 and openvpn work together?

We are planning to use a Cisco ASA 5505 as a router in our company. So far we used opnvpn to connect our mobile clients to the company network. Our question is if Cisco ASA 5505 and openvpn work ...
0
votes
1answer
1k views

Does anyone use Nagios to monitor an openVPN connection

Im running Nagios 3 and also OpenVPN I want to test periodically that the connection is still available. Is nagios the way to do this. I see there is a check_vpn plugin but the documentation is ...
1
vote
3answers
9k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
0
votes
2answers
466 views

freeradius maximum session time problem

hello I'm using openvpn and free-radius for control user accounts. for maximum session time for an user, free-radius has sqlcounter.conf that control that, but after a connection has disconnected that ...
0
votes
1answer
413 views

route everything except 123.123.* through vpn

I would like to route all requests to 123.123.* normally through eth0 and everything else through VPN (tap0). This should probably be done with iptables. Any ideas how? Thanks
0
votes
1answer
900 views

Simulate OpenVPN “not client-to-client” using iptables

I need to setup a multi machine VPN with the following characteristics: 1 hub (10.170.0.1) which is the base of the VPN 20 users (10.170.0.0/16) 5 administrators (10.171.0.0/16) The first part, ...
1
vote
1answer
572 views

What can silently block a port to be accessed on Ubuntu 10.04 Server?

I've got a proprietary service running on port 8090 (actually running on a VBoxHeadless VM and capturing this port from the host machine) on an Internet server. Nmap shows port 8090 open both on host ...
1
vote
1answer
1k views

OpenVPN randomly disconnects, refuses to reconnect

I am running an OpenVPN server on a Debian virtual machine. OpenVPN 2.1.0 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 9 2010 Originally developed by ...
2
votes
3answers
836 views

Routing my home traffic to another server instead of ISP's default routes

I suspect my ISP has rather poor peering arrangements, causing slow access to several sites that I regularly visit. I determined that fact by proxying my web traffic to a server that I've placed in a ...
0
votes
2answers
767 views

How can I get my OpenVPN server running OpenBSD 4.3 to authenticate against my Windows domain?

I've googled all over the place but none of the pages I have come across include a step-by-step guide showing how to set this up. I'm not a Linux master (although I'm working hard to increase my ...
2
votes
1answer
2k views

What ports are needed for a Windows XP client to acces a folder on a SAMBA server?

Wikipedia mentions only TCP port 445 (while as far as I can remember ports 137-139 used to be used actively by Windows file sharing). If I map the 445th TCP port on gateway host "A" to a 445th TCP ...
0
votes
3answers
1k views

openvpn advanced setup - masquerade or snat/dnat or even proxy

So, I have the following question: Given a server with public (routable) ip's, let's say: x.y.z.1, x.y.z.2, x.y.z.3 - x.y.z.31, I want to configure OpenVPN as a proxy or masquerade server for some ...
1
vote
1answer
130 views

OpenVPN tunnel address assignment question

I have an OpenVPN server running on a Linux-based firewall machine, with several permanent tunnels connected to it, and a couple of on-and-off "road-warrior" type connections. For the permanent ...
0
votes
1answer
66 views

How to set up a separate LAMP stack for a specific interface/subnet on Debian?

I'd like to expose one LAMP stack (actually a http root and a MySQL database) to the Internet and another to OpenVPN tunneling interface (192.168...) to make all the web-based management tools and ...