OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

4
votes
2answers
11k views

Installing OpenVPN on Windows7

It seems I cannot install the current version of OpenVPN (2.1.2) because the TAP driver is not signed and therefore windows 7 x64 refuses to install it. It shows up in the device manager, but with a ...
4
votes
1answer
4k views

How to set OpenVPN client bind address?

The OpenVPN client machine has two interfaces to Internet: a low-speed and high-speed one. Default route goes throught the low-speed one. I'd like OpenVPN to connect to server through the high-speed ...
4
votes
1answer
619 views

Can my ISP know that I am connected through a VPN?

I have a general understanding of VPNs and how they work. However, I am not sure of how the initial request is seen by my ISP? For example say I am connected to an OpenVPN provider, what happens when ...
4
votes
2answers
2k views

OpenVPN Chaining

I'm trying to set up an OpenVPN "chain", similar to what is described here. I have two separate networks, A and B. Each network has an OpenVPN server using a standard "road warrior" or "client/server" ...
4
votes
2answers
11k views

Getting disconnected from OpenVPN server each hour

I am having a rather strange issue with my OpenVPN configuration. I am connecting from Windows 7 with official latest OpenVPN client to my OpenVPN server (OpenVPN 2.1.4 i386-redhat-linux-gnu). The ...
4
votes
2answers
5k views

Tunneling a public IP to a remote machine

I have a Linux server A with a block of 5 public IP addresses, 8.8.8.122/29. Currently, 8.8.8.122 is assigned to eth0, and 8.8.8.123 is assigned to eth0:1. I have another Linux machine B in a remote ...
4
votes
2answers
5k views

openvpn list all active certificates

I have a openvpn setup on ubuntu that multiple users are connecting to. I want to list all the active certificates with their Common name. Is their a way of doing this ?
4
votes
2answers
6k views

OpenVPN port-share with Apache/SSL

I'm trying to set up OpenVPN to listen on port 443, and then pass all HTTPS traffic to Apache, by using the port-share option. Relevant config snippets are: OpenVPN local ${PUBLIC_IP} port 443 ...
4
votes
2answers
9k views

trying to route between two openvpn clients

I have two openvpn clients on the 10.0.1.0 (client1) and 192.168.0.0 (client2) subnets with the server's openvpn connection having the ip 192.168.150.1 The server has ip forwarding enabled. ...
4
votes
2answers
3k views

Openvpn server not forwarding ping traffic from tun0 to eth0 for rest of the hosts in the subnet

Currently I have a openvpn server and client setup with rounting (not bridging) When I try to ping from my client to server ip address it works fine. But when I try to ping rest of the subnet hosts ...
4
votes
1answer
9k views

OpenVPN server running on openvz. How to write iptables rule without masquerade?

I am configuring a VPS which is running on openvz as an OpenVPN server using a tun interface. I am having some trouble with the iptables rule as MASQUERADE is not available. If MASQUERADE were ...
4
votes
2answers
1k views

Poor OpenVPN NFS performance

I have EC2 application servers behind an elastic load balancer. All of the application servers have access to a shared storage server, notably for centralized cache files, logging, etc. The shared ...
4
votes
6answers
11k views

Free or very Cheap VPN server software with high concurrent users count [closed]

I'm hoping to implement a VPN whereby about 200 concurrent users can log in to briefly access my network. I had a look at OpenVPN and this seemed excellent, but was hoping that there would be a less ...
4
votes
1answer
143 views

Shorewall blocks openvpn traffic

I have one root server and two clients. The root server has a static ip address and runs Debian Linux. My clients are Mac OS X and Debian Linux with dynamic ip addresses. From my clients I can open a ...
4
votes
1answer
2k views

OpenVPN with mixed ipv4 and ipv6 clients

I have a VPN server handling various clients; some with ipv4 only, some with ipv4 and ipv6, and some that will be ipv6 only. Some of these clients are roaming, so ideally they should connect to ipv6 ...
4
votes
2answers
6k views

TCP under OpenVPN is very slow (tsg attached)

I have a very weird problem with OpenVPN. Most VPNs work fine, except this one. Here I get very low performance from TCP connections, but the CPU load is low (so, not a CPU issue). OpenVPN is ...
4
votes
3answers
2k views

connected to Centos openvpn but no outside internet access

I am using Windows 7 to connect to a VPS server running CentOS 6.4 First off, I have read every single post and just cant find the solution to my problem I configured my VPN server with openvpn, and ...
4
votes
2answers
4k views

OpenVPN redirect-gateway does not work on Windows 7?

i have set up openvpn, and it works. pinging from client to server and backwards works just fine. but now i wanted to redirect all the clients traffic through the vpn. so i did the following steps as ...
4
votes
3answers
4k views

Opening up the subnet LAN behind an OpenVPN server

I've set up an OpenVPN server on my work network, and I am able to access the server from a remote machine over the vpn. However I can't work out how to access the lan behind the server. The network ...
4
votes
1answer
232 views

OpenVPN-server disappointing performance

On my VPS (Ubuntu 14.04 - 64-bit), which has OpenVPN 2.3.2-server installed, I'm getting disappointing performance. The VPN-server uses the AES-128-CBC cipher for encryption, and I have no firewall ...
4
votes
1answer
370 views

OpenVPN needs to change its port every time I use

I have a Linode VPS that I setup OpenVPN server on it. Since I'm in China we have to deal with the GFW (Great Firewall), so I use the VPN a lot. The weird part is, that every time I use it, I need to ...
4
votes
1answer
4k views

openVPN: Changing Windows 7 firewall settings

I had a problem where Windows 7 would not allow inbound connections over my openVPN tunnel. Meaning that my Windows 7 client would allow outbound and established connections but not allow inbound ...
4
votes
2answers
1k views

what is best multi-server configuration with OpenVPN

We have a number of Database severs running MongoDB on Debian plus a number of Application servers also on Debian. The db servers hold replicating db clusters, so they need to talk to each other. ...
4
votes
1answer
259 views

OpenVPN and routing

I've a server running openvpn, and I have a little issue. All my traffic is forwarded to the VPN, and when I use a website like "whatismyip" I see the server IP, so this part is working. But when I ...
4
votes
1answer
13k views

OpenVPN: self-signed certificate in chain

I am trying very-unsuccessfully to use "TunnelBlick" (an OS/X OpenVPN 2.2.1 client that is known-good) to connect using certificates. Here is the (sanitized) error message I receive: TLS: Initial ...
4
votes
1answer
6k views

Problems setting up a VPN: can connect but can't ping anyone

This is my first time setting a VPN. Clients can connect but can't ping other machines. This is certainly a route problem but i can't find the right way to configure it. Here is a sample example of ...
4
votes
2answers
2k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
4
votes
1answer
27 views

Openvpn linux connection reset, restarting [0]

This works perfectly fine under windows but fails on my ubuntu laptop Does anyone have any insight as to why this is? openvpn output Thu Dec 31 13:49:42 2015 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL ...
4
votes
1answer
2k views

How to create /dev/tun device inside unprivileged LXC container?

This question is similar to No tun device in lxc guest for openvpn . The LXC has evolved and the unprivileged LXC containers were introduced recently that offer another layer of security against ...
4
votes
1answer
374 views

openvpn TLS handshake fails on client because firewall drops packets (but why?)

I seem to have problem with my openvpn server - client connection. now, the important information is in the log (verb3) of my client: Mon Mar 30 17:09:59 2015 OpenVPN 2.2.2 ...
4
votes
1answer
17k views

How do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?

I am setting a secondary (DD-WRT) router to act as a OpenVPN client so that all clients would get VPN access simply by connecting to the router. But seems clients traffic is always routed via the main ...
4
votes
2answers
2k views

Replace DNS on Openvpn client without redirect-gateway

I am trying to push DNS to the client with OpenVPN server with config: push "dhcp-option DNS 192.168.x.x" It is working well, but what I really need is that during the VPN connection I do not ...
4
votes
1answer
338 views

How to handle OpenVPN client as a service, when the laptop is physically on the network already?

The Setup I've gotten OpenVPN working on our Windows XP laptops. Users are limited, so I went ahead and set OpenVPN client to run as a service, which is great anyway because that means they are on ...
4
votes
1answer
8k views

Local domain DNS resolution not working using OpenVPN on a pfSense box

I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN. For this example, this is what I have: A ...
4
votes
2answers
2k views

Sharing an IP pool for two openvpn instances (one TCP and one UDP)

I'm currently running OpenVPN on my VPS, listening on port 1194 via TCP. I need to use TCP since I sometimes need to tunnel traffic over an HTTP proxy. However, I'd also like to be able to use UDP, ...
4
votes
2answers
1k views

OpenVPN Server - CPU is pegged out

I am configuring OpenVPN to act as a SSL tunnel for a remote location. I have OpenVPN1 at our current location acting as a server then OpenVPN2 at the other location that is acting as a client but is ...
4
votes
0answers
1k views

IPv6 routing over OpenVPN

Trying to learn how IPv6 works with OpenVPN, so I wanted to setup following scheme. I have a VPS server (Ubuntu), which have been allocated a /48 subnet. ISP ipv6 gateway is XXXX:XXXX:XXXX::1 Server ...
4
votes
2answers
7k views

openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

My goal: I want to set up openVPN on a vServer from the company netcup, running Debian squeeze. I only want a VPN connection from client to server; clients should not be able to see each other, also ...
4
votes
1answer
978 views

OpenVPN web traffic routing not working

My first time trying to set up OpenVPN. I followed the HOWTO guide from OpenVPN's site and was successfully connected but when I tried to route my web traffic, it seems that nothing gets through to my ...
4
votes
2answers
3k views

OpenVPN: Not all DNS entries get pushed to clients from server. (dnsmasq)

I have been trying to find a solution to this problem, but have found no answer so far, so I hope you guys can help me out. I have a server running Ubuntu 10.04, which has a static IP address and an ...
3
votes
7answers
15k views

What's the advantage of OpenVPN over SSTP?

If considering Windows only environment, what's the advantage of introducing OpenVPN as the company VPN service, instead of Windows built-in protocols? Especially the new SSTP protocol already ...
3
votes
2answers
9k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
3
votes
3answers
2k views

OpenVPN - can I use an existing SSL certificate?

I want to setup OpenVPN server for my personal usage. I own domain and I have valid SSL certificate for this domain (issued by StartSSL). At the beginning of the setup instructions for OpenVPN ...
3
votes
4answers
24k views

OpenVPN and Routing and IPtables

GOAL: Access internal network devices and browse web via the tunnel. 192.168.2.x = internal network 192.168.3.x = openvpn server 192.168.2.111 = openvpn server on internal network [root@openvpn ~]# ...
3
votes
5answers
531 views

The right vpn to replace heavy ssh usage

We are a small development firm looking to access the following services remotely: http smb network shares rdc / vnc Currently we do this with a lot of ssh tunnels. We are looking into switching ...
3
votes
3answers
19k views

How to open OpenVPN port (1194) on server?

I have been installed OpenVPN server on my CentOs VPS, and it started successfully And try to configure iptables for it by following command: iptables -A FORWARD -m state -–state RELATED,ESTABLISHED ...
3
votes
2answers
5k views

OpenVPN with iptables and a tun interface

With an openvpn tunnel that uses a tun device, what iptables rules allow the encapsulated traffic through and what rules control the packets after encapsulation? Basically, I am wondering how the ...
3
votes
1answer
3k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
3
votes
2answers
5k views

What's the best method to monitor an OpenVPN server?

I have an OpenVPN server machine which resides on an isolated network, a NAT rule in the company's firewall is redirecting all traffic on port 1194 (tcp) from the public IP I chose to the internal ...
3
votes
2answers
11k views

How to connect to VPN from the command line in Linux?

I have different tunnels that I configured using the network manager GUI. When I login to my desktop, I'm connected to the internet without any tunnels. To connect to a tunnel, I usually click on the ...