OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

2
votes
1answer
145 views

How can I create an environment to test OpenVPN with in a test lab?

I have a test lab that I would like to use to test a site-to-site VPN setup with using OpenVPN. What is the minimum amount of hardware that I need and how should it be configured so that I can mimic a ...
1
vote
0answers
353 views

allow spoofing when using tun

I have a working openvpn setup with a server and a number of clients. How would i go around allowing IP spoofing through the openvpn server? (to demonstrate security concepts)? A normal ping from ...
0
votes
1answer
435 views

Installing VPN servers that support PPTP, L2TP and openVPN protocols [closed]

Looking for VPN Server that support PPTP, L2TP and OpenVPN Protocols, also these servers must use the same data base so each account created on any of these servers must work across all the other ...
0
votes
1answer
408 views

openvpn in a bridge?

I have a somewhat tricky proble to solve. We have a wireless link between 2 building. One of them has an mikrotik and below there are some vlans. Some machines of one vlan need to use openvpn to ...
3
votes
2answers
4k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client [192.168....
2
votes
0answers
32 views

OpenVPN bad source address from client [duplicate]

Possible Duplicate: OpenVPN bad source address from client I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=...
2
votes
0answers
747 views

OpenVPN Configuration - Windows 7 client & debian server

I recently formatted my Windows 7 computer and lost my client's config files for OpenVPN. I recovered the certificates and default config that were left on the server but I haven't managed to make the ...
3
votes
1answer
944 views

how can I give openvpn clients access to a dns server (bind9) that is located on the same machine as the openvpn server

I currently have a debian server that is running an openvpn server. I also have a dns server (bind9) that I would like give allow access to by the connected openvpn clients, but I am unsure as of how ...
22
votes
3answers
15k views

OpenVPN performance: how many concurrent clients are possible?

I am evaluating a system for a client where many OpenVPN clients connect to a OpenVPN server. "Many" means 50000 - 1000000. Why do I do that? The clients are distributed embedded systems, each ...
5
votes
2answers
8k views

Which openvpn cipher should I use?

From both a performance and security standpoint, which cipher should I use with openvpn? According to http://openvpn.net/index.php/open-source/documentation/howto.html#security , the default is ...
1
vote
0answers
2k views

OpenVPN enable split tunneling, client to overload over their own Internet connection

I am trying to enable split tunneling with my VPN network. I am using OpenVPN to host my VPN network and have follwed the steps to get split tunneling working however my clients still get the: 0.0.0.0 ...
1
vote
3answers
2k views

creating proper vpn tunnel, when both LANs have the same addressing

I was following this tutorial http://wiki.debian.org/OpenVPN#TLS-enabled_VPN and this one http://users.telenet.be/mydotcom/howto/linux/openvpn.htm to create openvpn connection to my remote LAN. But ...
4
votes
2answers
1k views

what is best multi-server configuration with OpenVPN

We have a number of Database severs running MongoDB on Debian plus a number of Application servers also on Debian. The db servers hold replicating db clusters, so they need to talk to each other. ...
0
votes
1answer
649 views

OpenVPN - user access policy

i just installed openvpn AS on an ubuntu distribution. I applied a group policy access to restrict the access to only one server for this group. Then i assigned the user in the group, but it looks ...
2
votes
1answer
122 views

how to block access from bridge mode vpn nodes to my wan gateway

We have a tap bridge between 2 local networks. It work great except that clients from the 'other' network can use dhcp server and most important can use wan gateway of the second network which is bad. ...
1
vote
0answers
396 views

SNAT on windows 2008

I've an openVPN client which runs on windows2008 R2 server and through this windows 2008, I'm trying to do static nat to a machine which lies behind this win2008s real network. Here is my ...
4
votes
2answers
12k views

Getting disconnected from OpenVPN server each hour

I am having a rather strange issue with my OpenVPN configuration. I am connecting from Windows 7 with official latest OpenVPN client to my OpenVPN server (OpenVPN 2.1.4 i386-redhat-linux-gnu). The ...
1
vote
1answer
113 views

iptables for openvpn server not working

I have these deny statements in my iptables log: RULE 12 -- DENY IN=tun0 OUT=eth1 MAC= SRC=172.16.250.6 DST=192.168.0.11 LEN=84 TOS=0x00 PREC=0 x00 TTL=63 ID=0 DF PROTO=ICMP TYPE=8 CODE=0 ID=20001 ...
1
vote
0answers
491 views

virtualbox instances dedicated-server with custom dnsmasq

I have dedicated server where I planned to run virtualbox virtual machines. Since the VMs are managed with vagrant/chef I may end up with many different ones. I thought it would be a great idea to ...
0
votes
2answers
2k views

ospfd over an OpenVPN link - strange error in logs

I am trying to set up Quagga ospfd on two hosts connected by an OpenVPN link. These hosts have VPN IPs 10.31.0.1 and 10.31.0.13. ospfd config is pretty simple: hostname bizon password xxxxxxxxx ...
2
votes
1answer
1k views

Route outbound connections from local network through VPN

I have a server A running OpenVPN, an OpenVPN client B (a rooted Android phone as it happens) and a third party C (a laptop, tablet etc.) tethered to B. B can use the VPN to access the internet via A;...
1
vote
1answer
2k views

Juniper SRX1400 VPN

I have been trying to set up a client VPN on a Juniper SRX1400 without much success. All documentation I found from Juniper and elsewhere does a lot of other (difficult and wonderful) things other ...
0
votes
1answer
924 views

Strongswan and OpenVPN together

I have an host in Amazon EC2 which is configured with an OpenVPN Access Server. The only client to this server is acting as a gateway from a private network. I installed StrongSWAN 5 on the same host ...
5
votes
2answers
5k views

Tunneling a public IP to a remote machine

I have a Linux server A with a block of 5 public IP addresses, 8.8.8.122/29. Currently, 8.8.8.122 is assigned to eth0, and 8.8.8.123 is assigned to eth0:1. I have another Linux machine B in a remote ...
0
votes
1answer
2k views

Cannot open TUN/TAP dev /dev/as0t0: No such file or directory (errno=2)

I just attempted to install OpenVPN Access Server on my Debian VPS that uses OpenVZ. It installed fine, however when I try to start it from the administration panel, I get these errors: process ...
2
votes
1answer
362 views

Routing not working with OpenVPN

I'm trying to setup an OpenVPN server on Debian 6.0.5 (installed via apt) but I'm stuck with routing problem. This my network configuration: Client <-> Router+Firewall <-> OVPN Server ...
1
vote
0answers
278 views

OpenVPN Clients using server's connection (with no default gateway)

I wanted an OpenVPN server so that I could create a private VPN network for staff to connect to the server. However, not as planned, when clients connect to the VPN, it's using the VPN's internet ...
9
votes
3answers
9k views

No tun device in lxc guest for openvpn

I am trying to set up an openvpn server inside a lxc guest. However, it seams there is no tun device available in the container. Starting openvpn inside the container gives me this error: Tue Sep 18 ...
1
vote
0answers
322 views

OpenVPN, Ubuntu Server 12.04, connect to machines in home LAN behind VPN server

Problem: I've set up a working OpenVPN server on a headless Ubuntu 12.04 box, a D-LINK DIR 655 router w/ factory firmware, and am able to connect to it from anywhere using my mac laptop and ...
2
votes
1answer
1k views

Tunnel only one program (UDP & TCP) through another server

I have a windows machine at home and a server with debian installed. I want to tunnel the UDP traffic from one (any only this) program on my windows machine through my server. For tcp traffic this ...
-1
votes
1answer
5k views

OpenVPN installation: unable to install TUN/TAP driver. Exit code 2

I downloaded the latest version of OpenVPN (msi). Compatible mode does not work because it is msi file, not exe. I do not know version number of openvpm because there is no such on the official web-...
1
vote
2answers
6k views

How to revoke OpenVPN client certificate in Debian

I used the easy-rsa/2.0 programs to build server and client certificates for OpenVPN. I copied the client ones to the clients along with ca.crt. All good. I now need to revoke a client certificate ...
2
votes
2answers
249 views

Have username and passphrase in OpenVPN client.conf? [duplicate]

With the auth-user-pass filename option is it possible to create a plain text file with username and passphrase. Is it possible to have the username and passphrase directly in the client.conf?
3
votes
1answer
3k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
4
votes
2answers
6k views

openvpn list all active certificates

I have a openvpn setup on ubuntu that multiple users are connecting to. I want to list all the active certificates with their Common name. Is their a way of doing this ?
0
votes
1answer
691 views

OpenVPN on VPS working correctly until I add “iptables -t nat -A POSTROUTING -j SNAT --to-source <venet's IP>” to iptables

I have a VPS(with OpenVZ virtualisation) set up with OpenVPN. Clients can connect to the server and the server can ping and access clients. But clients does not have access to the internet through ...
0
votes
1answer
365 views

freeradius radacct update occurs after another connection establishment

sorry for my bad english.i connect via openvpn from my win7 client to freeradius server that is in the ubuntu os.my external database for authentication is ldap.i use mysql for freeradius accounting ...
0
votes
1answer
570 views

freeradius radacct update does not occur immediately

I use freeradius and ldap and openvpn in my project. when user disconnect from openvpn,radacct table does not update. I need that acctstoptime updated immediately. please guide me.
3
votes
1answer
13k views

OpenVPN server cannot ping clients

I have OpenVPN set up on a Debian server. Clients can connect, and clients can ping and access resources (Samba shares and intranet) on the server. However, the server cannot ping the client - it ...
0
votes
1answer
677 views

How to setup an Openvpn server with two gateways to internet

I have an openvpn server behind two wan interfaces: eth1 and eth2 where eth1 is the default gw and eth2 is where openvpn binds to. The problems my ovpn server is replying back to ovpn client via the ...
1
vote
1answer
849 views

OpenVPN subnet routing on openSuSE

First off: I have looked all over for a solution to this, but couldn't find anything. How can I make OpenVPN's subnet accessible to my LAN? BACKGROUND INFORMATION: I have an openSUSE 12.1 box that ...
1
vote
1answer
2k views

Possible to setup OpenVPN between two servers? And how?

Apologies if this is a FAQ but I did not find it in the answers, hence, I'm positing it here. I have a following scenario and I am curious how can I use OpenVPN-(AS) to solve my issue. I have two ...
0
votes
2answers
4k views

openvpn port forwarding for SNAT or DNAT with Iptables?

I have managed to get openvpn setup and get it to issue static internal ips to clients. Now the trouble i have is I'm now trying to assign open port per client as they now have static internal ip it ...
1
vote
2answers
335 views

Openvpn client can ping the server, but can not ping www.google.com

I set up Openvpn in a Ubuntu vps following this. This is my client route -n Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.8.0.5 128.0.0.0 ...
0
votes
1answer
2k views

How's the routing done in a very simple OpenVPN setup?

I've entirely configured (remotely) a Debian GNU/Linux dedicated server hosted in a professional capacity and I've got a network routing question (which AFAICT precisely fits the FAQ of serverfault). ...
2
votes
2answers
4k views

How do you prevent a VPN from exposing your IP when it disconnects?

I want every connection in a Virtual Machine (windows XP) to ONLY use my OpenVPN server, as soon as the connection is lost to OpenVPN, I want to lose all internet connectivity in the VM. Naturally the ...
3
votes
4answers
9k views

Possible? OpenVPN server requiring both certificate- AND password-based login (via Tomato router firmware)

I've been using Shibby's build of Tomato (64k NVRAM version) on my Asus N66U router in order to run an OpenVPN server. I'm curious whether it's possible to setup this OpenVPN server to require both a ...
-2
votes
1answer
139 views

What is the use of openvpn?

I have an ec2 instance running. I connect it via ssh. It looks good for me. Now my team lead asks me to set up an OpenVpn. I wonder why should I do this. With the ssh command, I can connect to my ...
1
vote
1answer
405 views

Installing OpenVPN in Amazon EC2?

I'm trying to install openvpn in my amazon ec2 instance. I tried the following site for my setup. In my client side I run the following command : sudo openvpn --proto tcp-client --remote x.x.x.x.x....
7
votes
2answers
25k views

How to set up OpenVPN to let the VPN clients to access all the servers inside the server LAN?

My server LAN IP is 192.168.1.1 and there is an intranet web server on 192.168.1.2 The OpenVPN daemon is configured to give clients 192.168.2.* addresses. There is push "route 192.168.1.0 255.255.255....