OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

-1
votes
2answers
311 views

OpenVPN-AS Apache reverse proxy

I have ubuntu server setup with openvpn-access server and apache. I have reverse proxy working for most things I need access to but I cant figure out how to set it up for the connect/admin page of ...
0
votes
0answers
22 views

Use EC2 instance as proxy to client's VPN

I have a client who has given me access to their database over a VPN. I need my web application to also connect to the same database. My current approach is: Create a new EC2 micro instance (...
0
votes
1answer
73 views

OpenVPN on an AWS instance breaks connectivity

Summary: I want to set up an OpenVPN server on an EC2 instance (Ubuntu 16.04). It fails to configure its interfaces after a reboot. Details: the image installs fine, reboots fine apt update ; apt ...
4
votes
3answers
2k views

How access remote network with OpenVPN?

I am currently trying to configure OpenVPN to access our company network remotely. I was able to establish a connection and ping the server at the configured address (10.8.0.1), but I was not able to ...
-2
votes
2answers
39 views

Route only Web Traffic of my Ubuntu machine through OpenVPN proxy [closed]

My question is simple, but I couldn't find a clean, step_by_step guide/example on the Internet. I have an OpenVPN proxy server and I want to just route the web traffic of my local Ubuntu machine ...
1
vote
2answers
47 views

Is there a way to only push routes via OpenVPN under certain conditions?

Abstract question: In my OpenVPN client setup I'd like to set routes pushed by the server only under certain conditions. Concrete situation: I am using a laptop, that, when I am at the office, ...
7
votes
3answers
12k views

VPN can't connect properly

have set up a vpn client on my laptop connecting to a openvpn server on a vps. It was working just fine until i restarted my laptop. I get this connection log in the VPN client: Tue Nov 01 19:25:26 ...
0
votes
0answers
18 views

How to directly connect laptop sytem login to login for openvpn server?

Basically, this is my setup: a server running ubuntu behind a firewall and several client laptops, also running ubuntu, outside the firewall. I have openvpn installed on all of the machines and they ...
0
votes
1answer
19 views

Can OpenVPN clients access the resources of the server? And if so, how?

Here is my setup, I have a server and clients all running ubuntu and all have openvpn installed on them. If I were to use a client to login to the openvpn server, would there be any way I would ...
1
vote
0answers
21 views

Two users behind same NAT (PSK or EAP) - strongswan

I have a strongswan implementation and am running into an issue where when there are two users behind the same NAT, the second one "kicks off" the first one. I was able to resolve the issue using: ...
0
votes
1answer
14 views

How to only allow openvpn client to download software from server instead of internet.

I have a server and several clients (all running ubuntu) with openvpn installed and configured on them. I want to disallow my clients from installing/downloading any software independently and ...
0
votes
1answer
62 views

Autostart openvpn with username/password authentication in ubuntu

I have a server with OpenVPN installed on it, and I also have laptops (clients) running Ubuntu with openvpn installed. On the client, if I manually run the command "sudo openvpn /etc/openvpn/client....
1
vote
1answer
33 views

Add Filter Based on Client Certificate Name (OpenVPN)

Can anyone show me how to filter (change bandwidth, delay, etc) of one or more users connecting to OpenVPN based on their Client Certificate Name? Why I would like to use the Client Cert name is I ...
1
vote
1answer
101 views

Automatically Call a Script when a New User Connects and Bandwidth Shape the Connection

I hope this is easy The following script called up.sh works perfect when I run it from the command line as root. However, instead of manually calling this script each time a new user connects to ...
-1
votes
2answers
43 views

OpenVPN Variables Passed via Script

Can someone explain and/or direct me to a summary of the variables that are available to be passed to OpenVPN upon a client connection? For example, what do the following $1, $2, $3, $4 values ...
0
votes
1answer
27 views

How to stop OpenVPN tunnel if server doesn't response?

I have two openvpn servers, but both routes to the one network. It made for the fault tolerance. If one of them is down traffic should go via another one. Clients receive routes with different metric, ...
4
votes
1answer
17k views

How do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?

I am setting a secondary (DD-WRT) router to act as a OpenVPN client so that all clients would get VPN access simply by connecting to the router. But seems clients traffic is always routed via the main ...
0
votes
0answers
23 views

Add Filters to Users

I am running OpenVPN on Ubuntu 14.04 (dev tun) and I can't seem to get my learn-address script to run below I would like to run the learn-address script each time a user connects to OpenVPN that ...
0
votes
2answers
88 views

Possible routing issues with OpenVPN

I'm trying to use OpenVPN on my arch box to be able to route some traffic through an OpenVPN connection, but not all traffic. But I'm having trouble trying to use my OpenVPN tunnel when using for ...
1
vote
1answer
64 views

Why could the TLS handshake fail?

My OpenVPN client (Windows 10) is in a corporate LAN and connects to a server on Internet (Ubuntu). The setup used to work but stopped some time ago (see below for the small infrastructure change, the ...
0
votes
0answers
29 views

Setup OpenVPN to allow Android and iOS Devices to Connect

I am running Ubuntu 14.04 in dev tun I would like to allow Android and iOS Devices to connect to the OpenVPN and use learn-address to acquire the MAC address of each device connecting to OpenVPN ...
0
votes
1answer
36 views

Add Filter based on MAC Address

Can anyone show me how to filter (change bandwidth, delay, etc) of one or more users connecting to OpenVPN based on their MAC address? Why I would like to use the MAC address is I could have 100's of ...
9
votes
2answers
46k views

How to push my own DNS server to OpenVPN?

I have defined an ubnound DNS server on my VPS and it appears to work. I need to use the DNS server instead of Public DNS IPs because some ISPs have blocked public DNS IPs. My openvpn.conf file is: ...
1
vote
1answer
62 views

Local DNS server is ignored on Windows

I've setup dnsmasq on a Linux box and setup the DNS address on another Linux by adding its IP to /etc/resolv.conf file. $ cat /etc/resolv.conf nameserver 192.168.9.105 nameserver 8.8.8.8 Now I can ...
0
votes
1answer
131 views

Site-to-site tunnel using two MikroTik routers where one endpoint is behind NAT (LTE modem)

I would like to interconnect two offices where one has a public static IP address (main office) and the second one is behind NAT (no public IP) because there is just an LTE modem. I am able to create ...
0
votes
1answer
1k views

OpenVPN client opens a random UDP port?

We are noticing this on a number of our openvpn clients: [root@box ~]# netstat -tulpn | grep openvpn udp 0 0 0.0.0.0:53950 0.0.0.0:* 1562/...
1
vote
1answer
71 views

openvpn send internet traffic to seperate server

Short version: I want my aws ubuntu openvpn server to forward all of the clients internet traffic to another server to instead of sending it out directly itself. Long version: I'm setting up an ...
0
votes
1answer
34 views

How can I check that the firewall is disabled for a TUN/TAP interface?

while trying to diagnose a UDP multcast issue on an OpenVPN client configuration and I've come across this block in the config file: # Use the same setting as you are using on # the server. # On most ...
1
vote
1answer
229 views

Huge performance penalty in gbit link with ip forwarding / masquerade through clear VPN tunnel

I have a problem with IP forwarding between my home computer and a remote server (from online.net). My home connection is a 1 Gbit/s FTTH and the remote server has a 2.5 Gbit/s bandwidth. The context ...
1
vote
0answers
89 views

OpenVPN packet loss between network interface and tunnel interface

I have an OpenVPN server that is setup to do tunnels over TCP connections with a bunch of other servers on various remote networks. It all works pretty reliably except for one of the remote servers. ...
2
votes
0answers
21 views

Protect a second server behind existing OpenVPN

I have an existing Ubuntu server that denies all incoming traffic with a client unless it's able to authenticate with OpenVPN (we use Tunnelblick to manage client connections). However, we have other ...
0
votes
1answer
84 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
1
vote
0answers
18 views

Unable to access Samba Server on Raspbian with OpenVPN whilst on same network [closed]

My Pi is connected to my network, and I can access it on the folder "Oliver" on it with my PC, however, I cannot access this folder with my phone. It asks for a username and password. I assumed the ...
0
votes
2answers
106 views

OpenVPN on OpenWRT: Routing a specific subnet through a VPN tunnel

I have setup a router with OpenWRT 15.05 installed (Chaos Calmer), and configured two wi-fi networks each with there own network interface: wi-fi-1: interface br-lan ip address 10.0.2.1; address ...
0
votes
1answer
66 views

Bash Script Not Working

I hope this is an easy answer Problems: I placed the following bash script called learn-address.sh in the following folder: vi /etc/openvpn/netem/learn-address.sh Added the following (2) ...
0
votes
0answers
37 views

Docker is only listening locally on a container connected to a VPN

I've just nuked my CoreOS box and am rebuilding the setup as a Ubuntu Xenial (16.04) based docker platform. I'm happy with it so far but I'm now having to re-resolve a problem I already fixed on ...
1
vote
1answer
41 views

Does changing the openvpn server config affect already issued certificates?

We've got an OpenVPN server running that is in use, with a number of static clients defined and certificates issued. However, over time it's become apparent the the IP pool currently available isn't ...
0
votes
1answer
8 views

How to get a list of options, that can pushed to the clients?

The OpenVPN manual currently only states: This is a partial list of options which can currently be pushed: --route, --route-gateway, --route-delay, --redirect-gateway, --ip-win32, --dhcp-option, --...
2
votes
4answers
19k views

OpenVPN: Add clients without rebuilding all keys?

I've just managed to setup OpenVPN properly on my server and test it to be properly working with client computers and I came to wonder how OpenVPN keys can be generated as clients come and go. Is it ...
2
votes
1answer
243 views

AWS Site-to-Site VPN and Remote-Access VPN Server using Pritunl

I was looking at the Pritunl Enterprise edition product and wondered if we could set up the following scenario using it: Our AWS environment consists of a number of VPCs in different AWS regions. We ...
2
votes
0answers
530 views

Assign a public ip to openvpn client

For learning purposes, I'm trying to set up openvpn server, so that each connected client would get a unique public ip address. I have a vps server and I ordered extra 8 static ips and they are ...
0
votes
0answers
35 views

OpenVPN NAT gateway on Debian, no traffic

My Debian server is successfully configured to connect to "HideMyAss", using OpenVPN, has internet access, receives HMA IP and still sees the computers on the LAN. I'm trying to configure the other ...
1
vote
2answers
49 views

OpenVPN for embedd devices

I'm a newbie in OpenVPN and the related questions, I'm googling for several days without positive answer. I have several linux-based devices located in my town that collects data and sends it for me. ...
0
votes
1answer
40 views

Except some IPs from rule to not allow internet through openwrt + openvpn when vpn is disconnected

I have the following working setup on my network: A. ISP-Router (connected to inet, internal ip 192.168.0.1 ) <----> B. eth0 - OpenWrt Router (OpenVPN client running) br-lan (bridge eth1 + wlan0, ...
-1
votes
1answer
109 views

openvpn route ALL traffic through VPN but through particular client (not server)

I have managed to setup a configuration where specific routes are routed through a particular client . For example I setup route X.X.X.0 255.255.255.0 and in the client A iroute X.X.X.0 255.255.255.0 ,...
0
votes
0answers
18 views

OpenVpn Client credentials security, key crt generation

I'm curious what is Your opinion on openvpn client crt/key security In most cases (tutorials), the clients key/crt are generated on the same openvpn server, and no one cares about the future. This is ...
0
votes
0answers
84 views

Can not start OpenVpn service within a FreeBSd Jail

Recentrly I've been fiddling with my FreeBSD VPS. I have it installed with FBSD 10.3, I created a jail with ezjail and installed openvpn from ports following the guide in http://bit.ly/1T6qg4G and ...
1
vote
4answers
421 views

Route all network traffic through an openvpn connection and also accepting incoming requests on the hosts' real IP-address

I am searching for a solution to route all traffic from a server through OpenVPN but keep it possible to host applications on the server which can be accessed outside of the local area network. To ...
1
vote
1answer
1k views

Get OpenVPN clients names to resolve through dnsmasq

I have a PFSense box running as an OpenVPN server. There are several remote devices that connect through the VPN (as tap devices). The VPN stuff is working, I can access the remote hardware by ...
1
vote
0answers
25 views

Particular workstations cannot reach specific servers in an openvpn site2site environment

It seems to be a weird problem to me. Here is the situation. I set up a site to site environment by openvpn (udp protocol), most servers and workstations can reach the other site but several servers ...