OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

3
votes
2answers
8k views

How to connect to VPN from the command line in Linux?

I have different tunnels that I configured using the network manager GUI. When I login to my desktop, I'm connected to the internet without any tunnels. To connect to a tunnel, I usually click on the ...
3
votes
2answers
1k views

How to restrict Openvpn users to certain network segments

I have three segments behind openvpn server: DMZ (192.168.1.x), Dev (192.168.2.x) and PROD (192.168.3.x). There are two groups of users: one group can connect to all segments from openvpn, while I ...
3
votes
3answers
2k views

How can I prevent OpenVPN from clobbering local route?

I have a local network on 192.168.1.0 with netmask 255.255.255.0. When I connect to a VPN though OpenVPN (as a client), it pushes a route for 192.168.1.0 that clobbers the existing one, making my ...
3
votes
3answers
3k views

Multiple openvpn clients on one openvpn server

Can I have multiple openvpn clients connecting to a single openvpn server? The following setting works well for a single user This is the server configuration (openvpn.conf) port 1194 proto udp dev ...
3
votes
3answers
2k views

Help setting up OpenVPN server

I set up an openvpn server on ec2 following the directions here: http://alestic.com/2009/05/openvpn-ec2 That all works great. I'd like to change this to use asymmetric keys, and allow multiple ...
3
votes
1answer
2k views

Openvpn server not forwarding ping traffic from tun0 to eth0 for rest of the hosts in the subnet

Currently I have a openvpn server and client setup with rounting (not bridging) When I try to ping from my client to server ip address it works fine. But when I try to ping rest of the subnet hosts ...
3
votes
1answer
622 views

Limiting OpenVPN bandwidth

I'd like to give users a certain amount of traffic. Let's say user A gets 1 GB and user B get 5 GB. I have a great script which does log all this info, however this script is called when the user ...
3
votes
2answers
7k views

Getting disconnected from OpenVPN server each hour

I am having a rather strange issue with my OpenVPN configuration. I am connecting from Windows 7 with official latest OpenVPN client to my OpenVPN server (OpenVPN 2.1.4 i386-redhat-linux-gnu). The ...
3
votes
2answers
3k views

openvpn list all active certificates

I have a openvpn setup on ubuntu that multiple users are connecting to. I want to list all the active certificates with their Common name. Is their a way of doing this ?
3
votes
4answers
5k views

Possible? OpenVPN server requiring both certificate- AND password-based login (via Tomato router firmware)

I've been using Shibby's build of Tomato (64k NVRAM version) on my Asus N66U router in order to run an OpenVPN server. I'm curious whether it's possible to setup this OpenVPN server to require both a ...
3
votes
1answer
1k views

Bridge and OpenVPN with shorewall

I have this scenario and everything it's working OK, but I want to configure my Shorewall and I can't do it. My interfaces are: br0 (bridge of eth0) tun0 (OpenVPN) vnet* (each one of bridged ...
3
votes
2answers
4k views

OpenVPN redirect-gateway does not work on Windows 7?

i have set up openvpn, and it works. pinging from client to server and backwards works just fine. but now i wanted to redirect all the clients traffic through the vpn. so i did the following steps as ...
3
votes
2answers
1k views

Poor OpenVPN NFS performance

I have EC2 application servers behind an elastic load balancer. All of the application servers have access to a shared storage server, notably for centralized cache files, logging, etc. The shared ...
3
votes
4answers
13k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
3
votes
3answers
23k views

OpenVPN + iptables / NAT routing

I'm trying to set up an OpenVPN VPN, which will carry some (but not all) traffic from the clients to the internet via the OpenVPN server. My OpenVPN server has a public IP on eth0, and is using tap0 ...
3
votes
2answers
3k views

TCP under OpenVPN is very slow (tsg attached)

I have a very weird problem with OpenVPN. Most VPNs work fine, except this one. Here I get very low performance from TCP connections, but the CPU load is low (so, not a CPU issue). OpenVPN is ...
3
votes
1answer
9k views

OpenVPN - tap interfaces and default gateway

Quick question just to verify i'm not going mental. If using device mode "tap" and i got a fully function connection in the sense that i can ping from client to server without any issues. However, i ...
3
votes
2answers
2k views

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route ...
3
votes
3answers
6k views

Can I use OpenVPN with a single secret password instead of a keys set?

I am looking forward to create an as-simple-as-possible OpenVPN set-up. I would like to use a single password to secure the communication instead of a set of key files. How can I set it up this way? ...
3
votes
1answer
1k views

IPv6 routing over VPN

I'm running OpenVPN on Debian Lenny and Tunnelblick on OSX. my goal is to have a fully routed VPN that supports IPv6. the OpenVPN server has a functional 6to4 device, so now my goal is to get the ...
3
votes
2answers
21k views

Linux IP Forwarding for OpenVPN - correct firewall setup?

I have OpenVPN running on a Linux machine. The VPN server has a public IP address (x.x.x.x) and the VPN clients are assigned addresses on the "tun" device in 10.8.0.0\24. I have an IPTables rule to ...
3
votes
1answer
182 views

OpenVPN routing: multiple default entries. OpenVPN client: iptables. DNS issues

I'm running an OpenVPN-Server (Debian 8) for privacy purposes when using public wifi. Hence, all network traffic of the client is intended to be handled over the VPN connection. The server and client ...
3
votes
1answer
63 views

As OpenVPN client, do all my internet traffic goes to the server?

This is a simple question. On OpenVPN's site, I can read: By default, when an OpenVPN client is active, only network traffic to and from the OpenVPN server site will pass over the VPN. General web ...
3
votes
1answer
914 views

MULTI: bad source address from client - any one-off solutions?

Setup: I have the an openvpn client/server setup (config files at bottom), and I get the infamous MULTI: bad source address from client [192.168.x.x], packet dropped message at server. The server has ...
3
votes
1answer
593 views

Split tunneling through two VPNs simeltaneously

I want to run two OpenVPN client instances on an Ubuntu Server 14.04. I have both .conf files that can work independently (both are set to different interfaces - tun0 and tun1). I want to run both at ...
3
votes
1answer
2k views

Software VPN connection to Amazon AWS VPC private instance [closed]

I have a Virtual Private Cloud (VPC) instance on Amazon AWS. Inside the VPC, I have a private instance which is running the database and a public instance which has the front-end web pages for ...
3
votes
1answer
942 views

openvpn tun forwarding with firewalld

I have an OpenVPN server on Fedora 19 with 2 clients - 1 client on the same LAN as the server, and the other on the internet. I want the 2 clients to be able to talk to each other thru the tunnel and, ...
3
votes
1answer
1k views

OpenVPN and one way pings

Network configuration I have set up a network: Appropriate ports of computers in 192.168.87.0/24 are forwarded on TP-LINK router to be seen "all over the world". IP forwarding in enabled on ...
3
votes
1answer
1k views

OpenVPN bypass on some ports

This is my first question here, so please be kind :-). I have a server running Debian 7 and I would like to connect to a VPN and let all the traffic pass via the VPN except for some ports (SSH, ...
3
votes
1answer
2k views

Routing setup for OpenVPN server on Amazon EC2

Software developer here, trying to get his sysadmin-foo up and running by setting up an OpenVPN server on amazon EC2 to access all the internal resources there. Here's how I envision that on a fresh ...
3
votes
4answers
4k views

Windows openvpn client is connected but ip not changing

I have an ubuntu machine on which I am running an openvpn server. From a windows machine on a different network when I try to connect to the ubuntu machine it says connected. I can even ping the local ...
3
votes
2answers
3k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client ...
3
votes
4answers
3k views

OpenVPN performance terrible to other machines on server's subnet [closed]

I'm using a "server" that is a hacked-up first generation Apple TV running Linux. I'm having a lot of trouble getting OpenVPN performance to be what I would expect with my new OpenVPN setup. The ...
3
votes
2answers
5k views

What are the proper routes to push for a bridged OpenVPN server?

I've set up an OpenVPN server on a machine with a private IP address of 10.0.0.13. The gateway is at 10.0.0.2, and it hands out 10.0.0.* addresses to other machines on the network. The VPN is set up ...
3
votes
1answer
3k views

VPN connection between Endian firewall and Android phones

We have an endian firewall (community, 2.4.0) as gateway, which is already serving as OpenVPN and IPSec endpoint (net-to-net). And we have many Android phones (most of them running Android 2.2 FroYo). ...
3
votes
1answer
2k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
3
votes
2answers
516 views

OpenVPN: Where sould the private key be generated?

A friend of mine says that the keys (private and public) for the clients shall be generated at the server and somehow delivered to the client when setting up a new client for an OpenVPN based network. ...
3
votes
2answers
3k views

OpenVPN: How to mitigate path MTU issues on a per-client basis?

We have dozens of embedded devices installed at customers, all calling home to our OpenVPN service. That works fine in general, but a few of our customers have severe path MTU issues. Our influence on ...
3
votes
1answer
919 views

How to route traffic from private network to openvpn subnet (and back)

I have a couple servers at Linode. I'm trying to set them up so I have a VPN into one of the machines and can then access all the other machines using the private linode network. Public access to ...
3
votes
1answer
10k views

How do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?

I am setting a secondary (DD-WRT) router to act as a OpenVPN client so that all clients would get VPN access simply by connecting to the router. But seems clients traffic is always routed via the main ...
3
votes
1answer
3k views

iptables: access connected openvpn client from the LAN with the VPN server

I have what is essentially a routing problem, and I'm not familiar enough with routing and iptables to effectively troubleshoot and set up my network needs. What's working I have an openVPN network ...
3
votes
1answer
2k views

OpenVPN to host tap device having very large MTU

Question What is the minimum set of server and client configuration directives that I need in order to satisfy the following conditions? Virtual layer 2 ethernet network that will not be bridged ...
3
votes
1answer
1k views

iptables rule(s) to send openvpn traffic from clients over an sshuttle tunnel?

I have an Ubuntu 12.04 box with OpenVPN. The VPN is working as expected -- clients can connect, browse the Web, etc. The OpenVPN server IP is 10.8.0.1 on tun0. On that same box, I can use sshuttle ...
3
votes
1answer
6k views

Port forwarding through OpenVPN

Here's my scenario. I have three hosts. 1) GATEWAY running OpenVPN Server. It has 1 LAN IP (192.168.1.10) and 1 OpenVPN IP (10.8.0.1). 2) LOCAL-CLIENT, a machine within the same LAN as GATEWAY, with ...
3
votes
1answer
940 views

Configure server to route all traffic through OpenVPN

I have an openvpn setup that is working great. There are some 50 clients connected and everything is handy dandy. I need one of these clients to route all traffic trough the vpn. I setup a ccd for ...
3
votes
1answer
263 views

Is it safe for a single directory/file to be served by two separate samba daemons simultaneously?

The situation is this: I have a Debian server which acts as a web/mail server as well as an Internet gateway for a small office. All the externally available services run on OpenVZ virtual ...
3
votes
6answers
11k views

Samba over OpenVPN - horribly slow

I've set up a server to run OpenVPN, with the purpose of clients accessing Samba shares remotely. The server is running CentOS 5.6, a decent quad-core Xeon CPU and plenty of RAM. The client I've ...
3
votes
3answers
668 views

How do I configure multiple address pools for OpenVPN server?

I started an openvpn server about a year ago. As I didn't know what I was doing I left it as a /30 network. Now I have 40-50 (and growing) clients, each of which is using 4 addresses. How do I ...
3
votes
3answers
4k views

Getting openvpn client to forward all traffic through server

I am trying to set up an openvpn server and client, with all client traffic being routed through the server. I am currently able to access the server through the client, but when I enable 'push ...
3
votes
3answers
1k views

openvpn and selective routing

whats the best way to configure openvpn clients to go selectively go about using an openvpn connection? i want to setup a vpn server for friends in china, but i dont want them to use it for ...