OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

4
votes
3answers
6k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
1
vote
2answers
885 views

Client can only access the server hosting OpenVPN, not the servers subnet

I have a peculiar problem with a OpenVPN tunnel on my Linux-server (RoadWarrior config). I can login perfectly with Tunnelblick 3.0 on my Mac, I can access all services on the server hosting the ...
0
votes
1answer
2k views

Rules for Cisco ASA 5505 Port Forwarding to enable OpenVPN and WWW

We use Openvpn in our company to connect external clients with our office network. After setting up the new router Cisco ASA 5505 we need to forward the ports for Openvpn and WWW in order to keep this ...
0
votes
4answers
1k views

Setting up proper routes with an OpenVPN server

First and foremost I am not a strong networking person but we do not have a network tech here in the office so I got charged with getting this setup and running. Here is the network topology: ...
0
votes
2answers
1k views

Openvpn, FreeBSD, Linux and routing

There is a network in the office. There are a router powered by FreeBSD in the network and a server powered by CentOS outside. Task: provide an access from anywhere to the network in the office. ...
3
votes
3answers
4k views

Getting openvpn client to forward all traffic through server

I am trying to set up an openvpn server and client, with all client traffic being routed through the server. I am currently able to access the server through the client, but when I enable 'push ...
2
votes
1answer
417 views

Stress test OpenVPN server?

We have about 50-100 concurrent users connected to our current VPN and would like to migrate to an OpenVPN network. We have setup a RHEL server running OpenVPN and would like to simulate 50-100 ...
0
votes
2answers
394 views

How to prevent users from sending spam when connected to openVPN server?

In order to prevent spam on my openVPN servers, port 25 was blocked on my openVPN servers. if a user connects to my openVPN server and then tries to send emails via web-based or desktop bulk mailer, ...
0
votes
2answers
4k views

OpenVPN: Windows 7 x64 client cannot see remote LAN, but XP client can

I'm using OpenVPN 2.1.1 with Windows XP x86 SP3 and Windows 7 x64 clients to an Endian Community 2.4.0 box which includes OpenVPN 2.1-rc15. Connecting from both works fine, but accessing resources on ...
2
votes
2answers
5k views

How to control multiple OpenVPN instances on the same server?

We have Centos servers running multiple daemons, up to 3 on each server. I have looked at the the rc.d init scripts and see no way to control the daemons independently. We would really like to be able ...
1
vote
1answer
11k views

Do Cisco ASA 5505 and openvpn work together?

We are planning to use a Cisco ASA 5505 as a router in our company. So far we used opnvpn to connect our mobile clients to the company network. Our question is if Cisco ASA 5505 and openvpn work ...
0
votes
1answer
1k views

Does anyone use Nagios to monitor an openVPN connection

Im running Nagios 3 and also OpenVPN I want to test periodically that the connection is still available. Is nagios the way to do this. I see there is a check_vpn plugin but the documentation is ...
1
vote
3answers
9k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
0
votes
2answers
460 views

freeradius maximum session time problem

hello I'm using openvpn and free-radius for control user accounts. for maximum session time for an user, free-radius has sqlcounter.conf that control that, but after a connection has disconnected that ...
0
votes
1answer
407 views

route everything except 123.123.* through vpn

I would like to route all requests to 123.123.* normally through eth0 and everything else through VPN (tap0). This should probably be done with iptables. Any ideas how? Thanks
0
votes
1answer
854 views

Simulate OpenVPN “not client-to-client” using iptables

I need to setup a multi machine VPN with the following characteristics: 1 hub (10.170.0.1) which is the base of the VPN 20 users (10.170.0.0/16) 5 administrators (10.171.0.0/16) The first part, ...
1
vote
1answer
560 views

What can silently block a port to be accessed on Ubuntu 10.04 Server?

I've got a proprietary service running on port 8090 (actually running on a VBoxHeadless VM and capturing this port from the host machine) on an Internet server. Nmap shows port 8090 open both on host ...
1
vote
1answer
1k views

OpenVPN randomly disconnects, refuses to reconnect

I am running an OpenVPN server on a Debian virtual machine. OpenVPN 2.1.0 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 9 2010 Originally developed by ...
2
votes
3answers
829 views

Routing my home traffic to another server instead of ISP's default routes

I suspect my ISP has rather poor peering arrangements, causing slow access to several sites that I regularly visit. I determined that fact by proxying my web traffic to a server that I've placed in a ...
0
votes
2answers
761 views

How can I get my OpenVPN server running OpenBSD 4.3 to authenticate against my Windows domain?

I've googled all over the place but none of the pages I have come across include a step-by-step guide showing how to set this up. I'm not a Linux master (although I'm working hard to increase my ...
2
votes
1answer
2k views

What ports are needed for a Windows XP client to acces a folder on a SAMBA server?

Wikipedia mentions only TCP port 445 (while as far as I can remember ports 137-139 used to be used actively by Windows file sharing). If I map the 445th TCP port on gateway host "A" to a 445th TCP ...
0
votes
3answers
1k views

openvpn advanced setup - masquerade or snat/dnat or even proxy

So, I have the following question: Given a server with public (routable) ip's, let's say: x.y.z.1, x.y.z.2, x.y.z.3 - x.y.z.31, I want to configure OpenVPN as a proxy or masquerade server for some ...
1
vote
1answer
129 views

OpenVPN tunnel address assignment question

I have an OpenVPN server running on a Linux-based firewall machine, with several permanent tunnels connected to it, and a couple of on-and-off "road-warrior" type connections. For the permanent ...
0
votes
1answer
66 views

How to set up a separate LAMP stack for a specific interface/subnet on Debian?

I'd like to expose one LAMP stack (actually a http root and a MySQL database) to the Internet and another to OpenVPN tunneling interface (192.168...) to make all the web-based management tools and ...
6
votes
6answers
3k views

OpenVPN over TCP, terrible latency but only on Win7 x64

I know TCP encapsulated over TCP is a terrible idea in general, but I can deal with the occasional decreased performance and MTU issues, and the snowball effect TCP within TCP provides where error ...
0
votes
1answer
7k views

OpenVPN client requests 255.255.255.252 subnet, server refuses anything below /29

I've setup an OpenVPN server with the following network settings: topology subnet server 192.168.123.0 255.255.255.0 push "dhcp-option DNS 192.168.123.1" # DNS to server VPN IP push "route ...
0
votes
2answers
659 views

openvpn without tap module? replacement?

I am trying to instal openvpn on a special linux distribution that has no tap kernel module, and all howtos avaliable are outdated. I was wondering if there is a way to run vpn without this kernel ...
2
votes
3answers
10k views

How to connect multiple VPNs using OpenVPN on Windows 7 on the same time?

I work most of the time remotly from home. To gain access to the different servers (via SSH) I have to use OpenVPN. I would like to connect to all of them (three, sometimes four) at once, so I dont ...
1
vote
2answers
659 views

Is OpenVPN revoke (CLR blacklist) computation effective? How much keys can I safely revoke?

We are building a system where we will have to black-list OpenVPN keys quite a lot. Hence the question: is OpenVPN algorithm for blacklisting keys computation effective? How much keys can I safely ...
0
votes
2answers
2k views

Community OpenVPN: Receive error “Could not find C:\*.old” when creating second round of keys

I created a new OpenVPN install this morning. My test users work, all is good. Now I want to create extra users, but when I run this command: C:\Documents and Settings\User>"C:\Program ...
1
vote
0answers
1k views

OpenVPN & Juniper SSG-140

I asked this question over on some Juniper Forums but they seem to be pretty dead as in over a week it hasn't had that many hits and no one has had any advice. I figure if I can find someone familiar ...
2
votes
3answers
523 views

SSHd listen on OpenVPN's IP ?

I've got a server with SSH and OpenVPN services. I'd like to make sshd listen only on the openvpn ip. The problem is, until openVPN is up and tun0 is set, sshd can't be bind to the openvpn's ip. I'm ...
1
vote
2answers
774 views

Monitoring VPN users on my network

My company runs filters on contents available for browsing and I have to check if everyone is respecting the browsing policies. Recently I have spotted some users activate OpenVPN on their ...
2
votes
1answer
217 views

Two hosted servers, one public - VPN?

Web developer here who has to occasionally wear a system & network admin hat (small company). We currently have a single hosted server running Windows Server 2003 that runs both our web server ...
1
vote
1answer
289 views

Openvpn multiple subnet invisble to each other

I want to setup openvpn in such a way that i can place clients in different groups and give each group a private subnet (push the addresses to clients when they connect to the openvpn server) where ...
0
votes
1answer
99 views

How to pause clients certificate activity for OpenVPN?

I use OpenVPN and also I want to pause activity of some client certificates, and after some time to start it again (without new certificate generation). So how to do this?
0
votes
1answer
87 views

openvpn restriction

ive set up an openvpn server at my place and handed out a certificate to a client who has an openvpn client at his place. however i require that he should be able to connect to the vpn server only ...
1
vote
2answers
464 views

OpenVPN restriction

Ive set up an OpenVPN server at my place and handed out a certificate to a client who has an openvpn client at his place. I need require that he should be able to connect to the vpn server only from ...
0
votes
1answer
1k views

Basic IPTables setup for OpenVPN/HTTP/HTTPS server

I'm trying to get a basic IPTables setup on my server which will allow HTTP/SSH access, as well as enable the use of the server as an OpenVPN tunnel. The following is my current rule setup - the ...
1
vote
1answer
815 views

Virtual Lan on the Cloud — Help Confirm my understanding?

[Note: Tried to post this over at ServerFault, but I don't have enough 'points' for more than one link. Powers that be, move this question over there.] Please give this a quick read and let me know ...
4
votes
6answers
4k views

Free or very Cheap VPN server software with high concurrent users count [closed]

I'm hoping to implement a VPN whereby about 200 concurrent users can log in to briefly access my network. I had a look at OpenVPN and this seemed excellent, but was hoping that there would be a less ...
5
votes
2answers
2k views

OpenVPN - client-to-client traffic working in one direction but not the other

I have the following VPN configuration: +------------+ +------------+ +------------+ | outpost |----------------| kino |----------------| guchuko | ...
2
votes
1answer
3k views

trying to route between two openvpn clients

I have two openvpn clients on the 10.0.1.0 (client1) and 192.168.0.0 (client2) subnets with the server's openvpn connection having the ip 192.168.150.1 The server has ip forwarding enabled. ...
0
votes
2answers
2k views

openvpn not creating internal route for client

I have two openvpn clients and a server using shared keys. I have internal routes specified in the ccd directory for both clients, but when they connect, the server only creates the internal route for ...
4
votes
3answers
3k views

SSH traffic over openvpn connection freezes when I cat a file

I have an openvpn (version 2.1_rc15 at both ends) connection setup between two gentoo boxes using shared keys. it works fine for the most part. I use mysql, http, ftp, scp over the vpn with no ...
2
votes
1answer
6k views

HowTo access Samba Share over VPN Tunnel?

I don't know how to access a Samba share running on a Ubuntu 10.04 server through OpenVPN 2.1.0. I've installed & configured OpenVPN and everything works. The server end of the tunnel has the IP ...
3
votes
3answers
1k views

openvpn and selective routing

whats the best way to configure openvpn clients to go selectively go about using an openvpn connection? i want to setup a vpn server for friends in china, but i dont want them to use it for ...
1
vote
1answer
772 views

Allow VMWare client to connect only via VPN

I have a VMWare (currently using Workstation on Vista, but thinking about switching to ESX) client with Windows XP. I've installed OpenVPN in the client and it connects to the corporate VPN server. I ...
0
votes
1answer
774 views

vpn/Openvpn as a cloud service

I am working on creating a small cloud (any number of EC2 instances that can be deployed based on load) implementing a VPN as a service for the company I'm working for. This is basically a project ...
2
votes
2answers
2k views

Broadcast UDP over VPN

I have OpenVPN configured and have 5 dd-wrt router clients. I would like the machines on those routers to be-able to UDP Broadcast across all 5 networks. I cannot bridge the interfaces(to my ...