Questions tagged [openvpn]
OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.
3,286
questions
0
votes
2
answers
128
views
Cant block specific ports for OpenVPN users
CentOS7.6 + iptables + OpenVPN2.4 (UDP proto) onboard.
Question is duplicated and seems simple: I just want to block some specific ports for my VPN users.
So I make
iptables -I FORWARD -p udp -m ...
- 186
2
votes
1
answer
14k
views
Is it possible for OpenVPN Client to change IP address of "tun" device ignoring "ifconfig-push"?
I have set up static IP configuration for clients connecting to OpenVPN server running on AWS EC2 (CentOS) instance. Purpose of assigning static IP is to allot QUOTA using iptables to every client so ...
- 171
17
votes
2
answers
18k
views
OpenVPN unable to disable encryption
Both in server and client config I have set:
cipher none
auth none
Following this advice I am also using UDP port 1195.
When I launch server and client I get following warnings:
Tue Dec 4 12:58:...
- 4,296
0
votes
1
answer
3k
views
RDP unusable when using OpenVPN
I've been stuck on this problem for several days now.
I'm currently running an OpenVPN server on a self-hosted server. Our staff use this so that after logging into the VPN from remote locations, ...
- 424
0
votes
1
answer
599
views
OpenVPN traffic incorrectly routed outside tunnel when accessing server IP
My setup consists of a client and a server where the client is connected to the server using OpenVPN. It's configured to route all traffic through the tunnel. This works well, the ip is the server ip ...
- 1,549
1
vote
1
answer
1k
views
Need IPTABLES rules explanation about OpenVPN set up
I've got Ubuntu 16.04 and OpenVPN installed and seems to be working fine. But when I check firewall rules using "sudo ufw status", then I see this:
Status: active
To Action ...
- 6,302
1
vote
1
answer
236
views
How to allow OpenVPN (W10) client to use DNS server (BIND9) that resides on (Ubuntu 16.04) OpenVPN server?
I have Ubuntu 16.04 (Desktop Edition) with OpenVPN server and BIND9 installed. I used a script when I installed OpenVPN. My OpenVPN client is a W10 netbook with 4G USB modem.
When I choose to use ...
- 101
1
vote
1
answer
2k
views
Transfer ovpn file from CentOs 7 to iOS without iTunes
My openvpn server running on CentOS 7, I've got 20 or so users with modern IOS devices half with iOS 11. We generate .ovpn scripts with python, and used iTunes to configure the IOS OpenVPN client, ...
CommunityBot
- 1
0
votes
1
answer
2k
views
OpenVPN - Access to other client private network
I know that this title seems to be "over answered", but really I had no luck while searching...
EDIT: I've updated the diagram and the question, to be more precise
To better explain my situation, ...
- 131
0
votes
1
answer
746
views
tun0 errors when running a vpn server?
I'm running a simple vpn server with these softwares:
OpenVPN
Shadowsocks
MTProto Proxy
My server config is:
Ubuntu 18.04 x64
512Ram, 1vCPU
UFW firewall
Netdata monitoring
Nginx
It's been only few ...
- 467
0
votes
0
answers
850
views
How to use more than 64 remote options for a random-remote openvpn connection
I have a great list of servers that I would like to tunnel through, which would be selected randomly through the "random-remote" feature, however when I try to use my config with the servers added, I ...
- 11
1
vote
1
answer
10k
views
Route traffic from one docker container through a VPN (provided by a second container)
I need to understand how to make two docker containers work with a scenario like this:
There is a branch office with a router and a client. The network is 192.168.190.0/24 and the addresses are 1 and ...
0
votes
1
answer
283
views
OpenVPN on same server with proxy
I have OpenVPN server with clients with static IPs (192.168.1.0/24). When I access another device connected to VPN I get desired 192.168.1.2 static IP, however when I access proxy server on same ...
- 133
0
votes
1
answer
258
views
openvpn subnet conflicts with wifi subnet
When using openvpn at home, I have a very simple configuration file because my home subnet uses 192.168.1.*
so when I run openvpn --config client.config
my routing table looks like:
Kernel IP ...
- 1,720
24
votes
1
answer
192k
views
OpenVPN not default gateway for all traffic
I'm trying to make my client forward all traffic through a VPS running OpenVPN. As you can see, it will allow pings to both domains and raw IP addresses, but it will not allow traffic like that made ...
- 333
6
votes
2
answers
63k
views
openVPN Could not determine IPv4/IPv6 protocol. Using AF_INET
I am having issues connecting to my VPN, with port forwarding set correctly as I can VPN into my other lubuntu machine, also UFW is disabled. Can someone please guide my as to what I am missing in my ...
- 291
0
votes
1
answer
1k
views
OpenVPN set system proxy of client
I am connecting to an OpenVPN server and would like to set the system proxy of the connecting client to a particular ip and port combination. So far I could only find a way to set the DNS server ip on ...
CommunityBot
- 1
4
votes
1
answer
7k
views
OpenVPN revoke user - CRL verify issues
I have configured my OpenVPN and it is working properly so far. Lately I had to revoke one certificate and after using easy-rsa revoke-full, I saw that in index.txt that specific user has been ...
- 274
0
votes
1
answer
158
views
FreeBSD and pf - packet filtering based on OpenVPN usernames
I have an OpenVPN server which authenticates the users using an Active Directory server. I need to limit the bandwidth of each user based on their usernames, and I also want to be able to do some ...
- 9,558
4
votes
3
answers
51k
views
Tunneling traffic from eth0 to tun0 (OpenVPN) Ububtu 12.04
Following the steps described here I've managed to configure both the VPN server and client(I can ping both ways). Their respective configuration files are:
server:
;local a.b.c.d
port 1194
;proto ...
- 3
0
votes
1
answer
9k
views
VPN: killed expiring key for some clients, not all
I have a VPN server running with +-150 connected users at any given time. While investigating a connectivity issue, I noticed that the clients suffering from connectivity problems had the following ...
CommunityBot
- 1
4
votes
3
answers
17k
views
creating proper vpn tunnel, when both LANs have the same addressing
I was following this tutorial http://wiki.debian.org/OpenVPN#TLS-enabled_VPN and this one http://users.telenet.be/mydotcom/howto/linux/openvpn.htm to create openvpn connection to my remote LAN.
But ...
- 1
1
vote
0
answers
704
views
TLS handshake fails when traffic goes through OpenVPN tunnel [duplicate]
I have an OpenVPN server in US and a client in Europe. When connected all traffic is routed through VPN tunnel. A problem has been detected - for some HTTPS websites connection fails. I will present 3 ...
- 11
-1
votes
1
answer
2k
views
What hardware specs is needed to serve 100,000 clients on OpenVpn? [duplicate]
Serving vpn clients (tcp connections) with OpenVpn server relies on what ? Or how can we calculate the clients count with hardware specs ?
Does it rely on server bandwidth speed, like if we have a ...
CommunityBot
- 1
1
vote
0
answers
180
views
OpenVPN Site-To-Site Setup: Client LAN to Server LAN succeeds, but Server to Client fails
Network setup:
AWS subnets
10.0.0.0/24
10.0.1.0/24
10.0.254.0/24
Home subnet: 10.62.5.0/24
OpenVPN subnet: 10.8.0.0/24
At AWS, there's an OpenVPN server running at 10.0.254.234 on Windows 2016.
...
2
votes
1
answer
881
views
How do I configure NetworkManger-OpenVPN to only use a VPN for some IPs?
My company is using a pfsense router to manage a simple VPN for the office. The idea is that I should be able to connect to the VPN from home and use it to (a) access servers on the office LAN and (b)...
- 136
0
votes
1
answer
1k
views
Turning off encryption with OpenVPN
I want to run a local OpenVPN for localhost access (loopback), so local encryption is a complete waste of time. So how do I turn off the whole thing? I'm using OpenVPN 2.4.7.
- 101
5
votes
2
answers
8k
views
Openvpn linux connection reset, restarting [0]
This works perfectly fine under windows but fails on my ubuntu laptop
Does anyone have any insight as to why this is?
openvpn output
Thu Dec 31 13:49:42 2015 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (...
- 301
0
votes
0
answers
212
views
Embedding 3 bytes custom data in IPv4 header and then filter by iptables
In my modified OpenVPN server process, as an intermediate node, I'd need to embed my custom 3 bytes data in the header of every IP packet and then in the same machine (after going through tun) filter ...
- 103
0
votes
1
answer
1k
views
Bidirection routing with openvpn between two subnets
I am new to openvpn and recently I setup an openvpn in my network(all systems have centos):
enter image description here
OpenVpn computer has a direct connection (through one of its interfaces) to ...
- 3,924
0
votes
0
answers
60
views
How to handle VPNs and native IPv6
I've got native IPv6 via my ISP (they give me a /48). Using RAs (SLAAC), my router is advertising a particular /64 to machines in my network - in other words my network has full native IPv6.
My ...
- 101
1
vote
0
answers
202
views
Setting up openVpn as an interface rather than routing all traffic from paid vpn
I have subscribed to a VPN provider that's provides openVpn config files.
Now instead of routing all traffic through this VPN, I would like to simply set it up as another interface where the ...
- 111
1
vote
2
answers
1k
views
OpenVPN - client connected to server, but cannot ping server or server's LAN
I am trying to ping the network of the Ubuntu server from Windows 7 (client). Both Ubuntu and Windows are clients on another OpenVPN server with the option client-to-client. The client can connect ...
- 154
0
votes
1
answer
203
views
OpenVPN to use VPC Subnet IP space
I have setup OpenVPN server in AWS VPC. But When client connects to to it it assign IP from 10.8.0.0/16 subnet. I want OpenVPN server to assign the IP to the client from Subnet IP space.
How this ...
- 25.5k
0
votes
1
answer
159
views
OpenVPN split traffic by users
I have several users and each one has an own VM with individual virtual network interfaces on the same machine.
I want to give VPN access for each of the users so they can reach the VMs by connecting ...
0
votes
0
answers
447
views
OpenVPN: forward traffic on specific ports to client
I have an OpenVPN server on a DigitalOcean machine, and several clients connecting to it, including a Synology NAS with a mail server. I would like to use the VPN server to forward all incoming mail ...
- 101
4
votes
1
answer
7k
views
OpenVPN enable split tunneling, client to overload over their own Internet connection
I am trying to enable split tunneling with my VPN network. I am using OpenVPN to host my VPN network and have follwed the steps to get split tunneling working however my clients still get the:
0.0.0.0 ...
- 31
0
votes
1
answer
1k
views
OpenVPN reverse connection
I'm struggling with my OpenVPN setup.
The client => vpn-server=> internet stuff is working,
but I can't get a handle on server2 => vpn-server => client.
I've got the routing setup, and working, so ...
- 2,060
1
vote
0
answers
43
views
Network packets don't reach local host when connected with to Openstack VPS with Openvpn server
So here is an issue.
I've installed OpenVPN server on Openstack VPS (hostigger, if this is important). I've used guide https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-...
- 111
0
votes
2
answers
7k
views
OpenVPN Client Connects, Can Ping Server. Nothing Else Works
I've setup a new ubuntu server and I installed openvpn. The ip address of the server is 192.168.0.182.
I connected my iPhone to the VPN and it connected successfully, I can ping 192.168.0.182 and 10....
CommunityBot
- 1
0
votes
1
answer
113
views
OpenVPN2 server, use TLS for handshake but only require username/password for auth
I'm trying to setup OpenVPN2 server for only requiring username and password for authentication, but still use TLS for encryption on handshake etc., but not require client certificate.
Is that ...
- 5,300
2
votes
2
answers
2k
views
openvpn without tap module? replacement?
I am trying to instal OpenVPN on a special linux distribution that has no tap kernel module, and all howtos available are outdated. I was wondering if there is a way to run OpenVPN without this ...
- 13
0
votes
0
answers
683
views
Cant ping DNS via OpenVPN
Can anybody help shed some light on the current issue I am facing?
I have a pfSense box running openVPN. My laptop can connect without a problem to the VPN as well as the internet. The only IP ...
- 181
2
votes
2
answers
10k
views
Running OpenVPN within k8s container
Suppose I have a k8s cluster whose services IP range is 10.198.240.0/20.
Now I want this IP range to be accessible from another cluster or data center.
Is it feasible to run OpenVPN within ...
- 6,011
3
votes
2
answers
16k
views
Openvpn: Generate Client Certificates off of Existing Certificate Authority
My company uses OpenVPN to connect our clients to our central server for easier management. Our firewall software (and theirs) has built in support for OpenVPN, and includes a generator for ...
- 101
1
vote
3
answers
13k
views
How to tunnel all traffic through an OpenVPN Server?
I'm trying to get all traffic to be routed through the VPN so that the OpenVPN Server's IP address is what shows up when I'm browsing the internet.
Not that it should matter, but we're using ...
CommunityBot
- 1
2
votes
1
answer
4k
views
How do I trigger a client reconnect with OpenVPN?
I am running multiple replicas of OpenVPN server (on a Kubernetes cluster) and have configured clients to reconnect should a server instance go down (with keepalive 10 60) which works fairly well.
...
- 242
0
votes
2
answers
248
views
How can I tell if OpenVPN server is ready to receive client connections?
Specifically I am trying to create an appropriate Kubernetes readiness probe (so require either a command to run or a readiness endpoint to hit that will signal whether OpenVPN has started up and is ...
- 242
2
votes
0
answers
2k
views
Clean OpenVPN3 on Debian 9 fails
I've just created a fresh Debian 9 with OpenVPN3 installed.
I'm getting the following error:
openvpn3 session-start --config server.conf
Using configuration profile from file: server.conf
Session ...
- 419
2
votes
1
answer
5k
views
File exists when pushing route with OpenVPN
I am trying to configure OpenVPN for access to a remote network (192.168.1.0/24) which is the same as my local network. Because of this I have added the following to the server config to force traffic ...
- 5,300