OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

1
vote
0answers
13 views

OpenVPN fail-over, keeping same IPs and certificates?

So I have a OpenVPN server (10.0.0.1), and several OpenVPN clients connecting to it. The server authenticates via certificates and keys generated by easy-rsa, and hands out a unique IP (10.0.x.1) and ...
0
votes
0answers
27 views

Script in user terminal works, permission failure in users crontab in Scientific Linux 7.1

I have a script that works to check if my VPN connection is up, and if not, it restarts it. This works correctly in a terminal, but the command nmcli con up uuid 7c514892-6a6a-4d33-946b-84aeb37615bb ...
4
votes
1answer
143 views

OpenVPN-server disappointing performance

On my VPS (Ubuntu 14.04 - 64-bit), which has OpenVPN 2.3.2-server installed, I'm getting disappointing performance. The VPN-server uses the AES-128-CBC cipher for encryption, and I have no firewall ...
1
vote
0answers
55 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
0answers
16 views

mounting nfs fails after exiting openvpn and deleting route

lately found that sudo mount -a in the script won't work after exiting openvpn and deleting a specific route to the NFS via openvpn. "sudo mount -a" in the script returns "mount.nfs: mount system call ...
0
votes
1answer
76 views

OpenVPN on AWS: Unexpected error: invalid_profile: Unable to find a server-locked or autologin profile for this user

I have setup a OpenVPN server using an AMI from AWS Marketplace. and setup with the default options. Now I am trying to connect to that vpn server but getting this error: "Unexpected error: ...
1
vote
4answers
277 views

Webserver exposes client real IP address in OpenVPN network

One of our corporate websites run on Linux server, built with Apache2 and PHP5. Several web pages can only be accessed from OpenVPN subnet (addresses 10.8.0.1/24). To check each request, php script ...
2
votes
0answers
13 views

OpenVPN gateway through OpenVPN

I'm trying to setup an OpenVPN access for clients through a server A I own. But I want these clients to connect to another OpenVPN server on an host B, configured as client on A. OVPN ...
1
vote
3answers
79 views

Open VPN Issue, servers can not route properly

I need some help on this issue. Basically I have a server which I have openvpn installed on. It is working fine and I am able to ping the server which I am connected to and can ping back. What I am ...
0
votes
0answers
32 views

OpenVPN - Can not access shared files

I installed OpenVPN as a server on my Windows server (Yeah, really). The configuration looks good. This server get the IP 10.9.8.1 for the VPN tunnel as expected. I also made some tests by installing ...
1
vote
0answers
51 views

OpenVPN and systemd-resolved

How does one use the dns pushed via an openvpn server with systemd-resolved ? Before I decide to 'upgrade' to systemd-networkd. I could use some variant of openvpn-resolv-conf script to call ...
0
votes
2answers
65 views

Allow Internet traffic and Block LAN for openvpn clients

I have a OpenVPN server ruining on Unbuntu 14.04 server. Everything works fine, the client connects to the server and can ping the VPN server. I want the client use my internet as it were his internet ...
1
vote
1answer
101 views

Openvpn: client can ping server, server cannot ping client

I have weird problem with openvpn setup between AWS and GoGrid datacenters. My network looks like this /----------------\ /----------------\ /------------------\ ...
0
votes
1answer
29 views

Creating a link between two OpenVPN subnets

I have an OpenVPN server which runs with two configurations - first one is port 1194 proto udp dev tun while the second one is port 443 proto tcp dev tun port-share ${my-ip} 10443 I keep them ...
0
votes
0answers
17 views

Openvpn ethernet bridge

This may or may not be a server issue. OpenVPN host: 192.168.1.120 Netmask: 255.255.255.0 Broadcast address: 192.168.1.255 Router's IP address: 192.168.1.1 /etc/openvpn/server.conf port 1194 proto ...
0
votes
2answers
213 views

How to block internet access when the VPN stops on a DD-WRT router and separate VPN/direct clients?

I am using a DD-WRT 3.0 router to connect via openVPN. In the LAN, 192.168.1.50 is a device which should not go thru the VPN. (How do I set the firewall to have 192.168.1.50 not go thru VPN and How ...
2
votes
0answers
64 views

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
0
votes
1answer
78 views

multiple tuntap VPN traffic selection

I have a php / bash application on top of a linux machine (centos or debian but assume redhat just in case the reply need different dialect) connecting to port 80. Actually I'm perfectly able to open ...
0
votes
0answers
62 views

Openvpn “TLS ERROR cannot locate hmac in incoming packet”

In server side, the logs were showing that TLS ERROR: cannot locate hmac in incoming packet, whenever I accessing in client laptop.. Please suggest me the possible solutions ....
0
votes
0answers
146 views

Configure Openvpn and tinyproxy both at the same time In openwrt

I'm building VPN router using Raspberry_pi and openwrt chaos calmer on top of it. I have successfully configured the pi and achieve the Openvpn functionalities without any issues. Pi connect Openvpn ...
1
vote
0answers
31 views

Cannot raise Max number of concurrent openvpn clients

For same strange reason the number of concurrent clients that can connect to my openvpn server is limited to 70. No matter what parameter I change in server.conf the limit does not change. If I try to ...
0
votes
1answer
37 views

Run Filezilla on private subnet at AWS

I have a VPC with one public subnet and one private. The public subnet has an OpenVpn Server and a public IP The private subnet has a Win 2012R2 Server with an Oracle 11g server. My set up: 1. VPC: ...
0
votes
1answer
49 views

OpenVPN - connect server as client to itself

I have tried to setup a small openvpn network but I ran into one big problem. I have a server and a machine at home. So I created a openvpn server on my machine and a configured the client on the ...
0
votes
1answer
86 views

why is my ping to 10.8.0.1 going through the public internet

(this question was totally different before. becouse of a lack of basic knowledge mixed with paranoia, i was scared and thought that something was compromised in my lan...) now i edited it completely, ...
0
votes
0answers
11 views

IP block + VPN not working

I have 3 sites that need an IP block for some testing and the only allowed IP is the one provided by a vpn (we use open vpn). Let's say that the vpn IP is 55.55.55.55 and my actual IP is 88.88.88.88 ...
2
votes
1answer
119 views

Unable to sign certificates as CA using pkitool and easy-rsa script for OpenVPN .csr file

OpenVPN server on Ubuntu 14.04. Easy-rsa on the certificate authority server on Ubuntu 14.04. Done this way because I want the ca.key file to be separate from the machine that acts as the openvpn ...
0
votes
1answer
207 views

OpenVPN client and server on the same machine?

I currently use a windows server. This windows server retrieves data from a remote database, and therefore is connected to the remote VPN server permanently. So we use openVPN in client mode with ...
0
votes
0answers
85 views

IPv6 VPN routing to IPv4 network

I have been trying to solve my problem to access an IPv6 network from an IPv4 VPN connection for two days now. My setup is as follows: Local Debian IPv4 server <-- OpenVPN --> Remote IPv4/IPv6 ...
0
votes
1answer
39 views

Is this system design ok for a VPN service for 3000 users?

I am setting up a vpn service for 3000 users in AWS. The solution is built up on Linux and AWS. The design of the solution is: My questions is: Am I missing something critical in the design I have ...
1
vote
1answer
56 views

Use a physical cryptographic token with OpenVPN community (free) version

I am currently setting up OpenVPN to provide company access to multiple clients. Our requirement is to use certificates, password protect the client keys, as well as using dual factor (MFA) ...
0
votes
0answers
24 views

Get access to host in OpenVPN network from global network

I need help with next situation. I have OpenVPN server set up on virtual machine in Azure cloud. This server have 104.208.34.118 IP adress. There are client, connected to this server, behind the NAT ...
1
vote
0answers
673 views

How to get OpenVPN Client (Mikrotik RouterOS) <-> OpenVPN server (Debian/Linux) setup to work

I have some issues with making MT to work with OpenVPN server (Debian). I can make successfull connection to OVPN server, but traffic is not routed through OVPN server. Here is my configuration. ...
0
votes
0answers
37 views

OpenVPN client Selective routing AWS

I am wanting to setup our OpenVPN Clients to selectively route traffic that is bound for AWS and route our internal subnets but let the rest of the traffic leave out the end users ISP connection. Is ...
0
votes
2answers
109 views

Site to Site OpenVPN routing issue

I have a situation as described below: 1- I have 2 OpenVPN Server(Server A & Server B). 2- Clients connects to each server via VPN, no direct LAN's. 3- Server B connected as a VPN client to ...
0
votes
0answers
7 views

OpenVPN Client - Access Services

I have an OpenVPN client which currently forwards all packets to the OpenVPN server (as described here). I have a service running on this client, though, (Remote Desktop). I don't want requests to ...
3
votes
3answers
200 views

Bypass VPN for HTTP/HTTPS traffic on Ubuntu?

I have an Ubuntu 14.04 machine that all it's outgoing traffic is through a VPN, and I'm required to make sure that HTTP and HTTPS traffic don't go through the VPN.I've looked into static routing but ...
-1
votes
1answer
66 views

OpenVPN Full Tunnel not working (command line) [closed]

I can ping the server but not google.com or 8.8.8.8, traceroute also fails. Server: $iptables -t nat -A POSTROUTING -s 10.9.8.0/24 -o eth0 -j MASQUERADE $openvpn --dev tun1 --server 10.9.8.0 ...
1
vote
2answers
86 views

OpenVPN - Blocking client-to-client traffic

I have an OpenVPN server running on a Debian box. What I'd like to do is to block all traffic between clients connected to that OpenVPN server. The server has a local IP of 10.10.10.1 and the clients ...
0
votes
2answers
165 views

openvpn ubuntu client to pfsense server. Timed out

Trying to get openvpn to work so that I may connect from my Ubuntu 14.10 workstation to a pfsense 2.0.3 server using OpenVPN. I just installed the network-manager plugin and created a new vpn ...
0
votes
1answer
312 views

After openvpn setup client cannot connect “Cannot load inline certificate file”

Good day to everybody! I have tried recently to install & configure openvpn for my server. I have created certificates, tunneling seems to with fine at lease ifconfig shots that tun0 has been ...
0
votes
0answers
140 views

openvpn doesnt connect. What has been done wrong?

Good day to everybody! I have tried recently to install & configure openvpn for my server. I have created certificates, tunneling seems to with fine at lease ifconfig shots that tun0 has been ...
0
votes
0answers
28 views

Why, on a linux router, clients can still connect even after the network adapter is down or the iptables routing is disabled?

I have a Linux machine which I use as a wireless VPN router. It has a very classic router setup, whose highlights are: openvpn to connect to the VPN, which is connected to eth0, and makes the tun0 ...
0
votes
1answer
23 views

openvpn: how to get clients to use network names available on server?

I have an OpenVPN server at 10.8.0.1, with client-to-client and static addresses being given out to certain clients via ifconfig-push. the server's /etc/hosts has things like bobs_server ...
1
vote
1answer
44 views

VPN in ubuntu server 14.04

I installed VPN in Ubuntu server 14.04 which has the IP 192.168.20.5 I installed using link: http://grantcurell.com/2014/07/22/setting-up-a-vpn-server-on-ubuntu-14-04/. But the small difference I ...
0
votes
0answers
81 views

How to allow VPN traffic only over shared internet connection on Linux?

I have a CentOS server where I set up Internet connection sharing. eth0 is connected to ISP, eth1 is connected to local network, so local traffic route is eth1 => eth0 => Internet. For ...
2
votes
0answers
379 views

openvpn, option tls-cipher not working, no shared cipher

while experimenting with setting up openvpn, i stumbled upon this tip on a website. it says that you can limit the list of ciphers, to prevent downgrade attacks. i testet it in a lan with 2 computers, ...
0
votes
0answers
133 views

OpenVPN with UFW [ TLS Error: TLS handshake failed ]

I installed Openvpn in my server which already had UFW installed i enabled ip forward in vi /etc/sysctl.conf applied changes using sysctl -p I also enabled forwarding using echo 1 > ...
2
votes
1answer
291 views

OpenVPN ssl VERIFY ERROR: depth=0, error=certificate signature failure in TI am335x-evm platform

I try to porting the openVPN client (2.3.8) to ARMS embedded device. After setting cross compile I was able to run in ARMS, somehow, when I lanuch the openvpn in ARMS, it show error : VERIFY ERROR: ...
0
votes
0answers
31 views

openvpn bandwidth and ping fluctuations

Good day all I have recently setup an OpenVPN server (which I have done in the past, a few times), this server has a 1 Gbps connection, however using a standard openvpn server/client config, ...
0
votes
1answer
56 views

OpenVPN with fragment does not allow internet traffic on Android

Good day all My server config uses a fragment setting of 1000 which I found most optimal for Windows/Linux users pass through, however after adding the same script with supporting certs to Android ...