OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

4
votes
4answers
6k views

SSH traffic over openvpn connection freezes when I cat a file

I have an openvpn (version 2.1_rc15 at both ends) connection setup between two gentoo boxes using shared keys. it works fine for the most part. I use mysql, http, ftp, scp over the vpn with no ...
4
votes
3answers
6k views

Multiple openvpn clients on one openvpn server

Can I have multiple openvpn clients connecting to a single openvpn server? The following setting works well for a single user This is the server configuration (openvpn.conf) port 1194 proto udp dev ...
4
votes
3answers
854 views

How secure is a VPN connection over WiFi?

I travel a lot and connect to public wifi hotspots all the time. What information will be given out if I use VPN within public wifi hotspots? Will the owners or intruders in the hotspot be able to ...
4
votes
4answers
15k views

Check openVPN client connected Debian

How can I check if my Debian OpenVPN client is connected? Is there a specific command I have to run? Or can I read it from the logfile? Thanks. Edit: The answers below provide great value in ...
4
votes
2answers
2k views

Bypass openvpn for particular ip

My desktop machine runs Trisquel GNU/Linux 6.0 (which is basically a libre version of Ubuntu 12.04), and I use OpenVPN to connect to a commercial VPN provider for internet access. It currently routes ...
4
votes
1answer
3k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
4
votes
1answer
5k views

How to set OpenVPN client bind address?

The OpenVPN client machine has two interfaces to Internet: a low-speed and high-speed one. Default route goes throught the low-speed one. I'd like OpenVPN to connect to server through the high-speed ...
4
votes
1answer
638 views

Can my ISP know that I am connected through a VPN?

I have a general understanding of VPNs and how they work. However, I am not sure of how the initial request is seen by my ISP? For example say I am connected to an OpenVPN provider, what happens when ...
4
votes
2answers
2k views

OpenVPN Chaining

I'm trying to set up an OpenVPN "chain", similar to what is described here. I have two separate networks, A and B. Each network has an OpenVPN server using a standard "road warrior" or "client/server" ...
4
votes
1answer
7k views

openssl invalid CA certificate

I'm setting up server-to-server OpenVPN with a PKI infrastructure, and cannot make it work. I suspect it's something in the certificate chain, but I'm at a loss to explain how. I have an offline Root ...
4
votes
2answers
12k views

Getting disconnected from OpenVPN server each hour

I am having a rather strange issue with my OpenVPN configuration. I am connecting from Windows 7 with official latest OpenVPN client to my OpenVPN server (OpenVPN 2.1.4 i386-redhat-linux-gnu). The ...
4
votes
2answers
6k views

openvpn list all active certificates

I have a openvpn setup on ubuntu that multiple users are connecting to. I want to list all the active certificates with their Common name. Is their a way of doing this ?
4
votes
2answers
6k views

OpenVPN port-share with Apache/SSL

I'm trying to set up OpenVPN to listen on port 443, and then pass all HTTPS traffic to Apache, by using the port-share option. Relevant config snippets are: OpenVPN local ${PUBLIC_IP} port 443 port-...
4
votes
2answers
10k views

trying to route between two openvpn clients

I have two openvpn clients on the 10.0.1.0 (client1) and 192.168.0.0 (client2) subnets with the server's openvpn connection having the ip 192.168.150.1 The server has ip forwarding enabled. ...
4
votes
1answer
3k views

OpenVPN with mixed ipv4 and ipv6 clients

I have a VPN server handling various clients; some with ipv4 only, some with ipv4 and ipv6, and some that will be ipv6 only. Some of these clients are roaming, so ideally they should connect to ipv6 ...
4
votes
1answer
9k views

OpenVPN server running on openvz. How to write iptables rule without masquerade?

I am configuring a VPS which is running on openvz as an OpenVPN server using a tun interface. I am having some trouble with the iptables rule as MASQUERADE is not available. If MASQUERADE were ...
4
votes
2answers
1k views

Poor OpenVPN NFS performance

I have EC2 application servers behind an elastic load balancer. All of the application servers have access to a shared storage server, notably for centralized cache files, logging, etc. The shared ...
4
votes
1answer
11k views

Installing OpenVPN on Windows7

It seems I cannot install the current version of OpenVPN (2.1.2) because the TAP driver is not signed and therefore windows 7 x64 refuses to install it. It shows up in the device manager, but with a ...
4
votes
6answers
11k views

Free or very Cheap VPN server software with high concurrent users count [closed]

I'm hoping to implement a VPN whereby about 200 concurrent users can log in to briefly access my network. I had a look at OpenVPN and this seemed excellent, but was hoping that there would be a less ...
4
votes
1answer
177 views

Shorewall blocks openvpn traffic

I have one root server and two clients. The root server has a static ip address and runs Debian Linux. My clients are Mac OS X and Debian Linux with dynamic ip addresses. From my clients I can open a ...
4
votes
2answers
6k views

TCP under OpenVPN is very slow (tsg attached)

I have a very weird problem with OpenVPN. Most VPNs work fine, except this one. Here I get very low performance from TCP connections, but the CPU load is low (so, not a CPU issue). OpenVPN is ...
4
votes
3answers
2k views

connected to Centos openvpn but no outside internet access

I am using Windows 7 to connect to a VPS server running CentOS 6.4 First off, I have read every single post and just cant find the solution to my problem I configured my VPN server with openvpn, and ...
4
votes
2answers
5k views

OpenVPN redirect-gateway does not work on Windows 7?

i have set up openvpn, and it works. pinging from client to server and backwards works just fine. but now i wanted to redirect all the clients traffic through the vpn. so i did the following steps as ...
4
votes
2answers
2k views

How to route traffic from private network to openvpn subnet (and back)

I have a couple servers at Linode. I'm trying to set them up so I have a VPN into one of the machines and can then access all the other machines using the private linode network. Public access to ...
4
votes
3answers
4k views

Opening up the subnet LAN behind an OpenVPN server

I've set up an OpenVPN server on my work network, and I am able to access the server from a remote machine over the vpn. However I can't work out how to access the lan behind the server. The network ...
4
votes
1answer
329 views

OpenVPN-server disappointing performance

On my VPS (Ubuntu 14.04 - 64-bit), which has OpenVPN 2.3.2-server installed, I'm getting disappointing performance. The VPN-server uses the AES-128-CBC cipher for encryption, and I have no firewall ...
4
votes
1answer
2k views

How to create /dev/tun device inside unprivileged LXC container?

This question is similar to No tun device in lxc guest for openvpn . The LXC has evolved and the unprivileged LXC containers were introduced recently that offer another layer of security against ...
4
votes
1answer
376 views

OpenVPN needs to change its port every time I use

I have a Linode VPS that I setup OpenVPN server on it. Since I'm in China we have to deal with the GFW (Great Firewall), so I use the VPN a lot. The weird part is, that every time I use it, I need to ...
4
votes
1answer
4k views

openVPN: Changing Windows 7 firewall settings

I had a problem where Windows 7 would not allow inbound connections over my openVPN tunnel. Meaning that my Windows 7 client would allow outbound and established connections but not allow inbound ...
4
votes
2answers
1k views

what is best multi-server configuration with OpenVPN

We have a number of Database severs running MongoDB on Debian plus a number of Application servers also on Debian. The db servers hold replicating db clusters, so they need to talk to each other. ...
4
votes
1answer
261 views

OpenVPN and routing

I've a server running openvpn, and I have a little issue. All my traffic is forwarded to the VPN, and when I use a website like "whatismyip" I see the server IP, so this part is working. But when I ...
4
votes
1answer
14k views

OpenVPN: self-signed certificate in chain

I am trying very-unsuccessfully to use "TunnelBlick" (an OS/X OpenVPN 2.2.1 client that is known-good) to connect using certificates. Here is the (sanitized) error message I receive: TLS: Initial ...
4
votes
1answer
6k views

Problems setting up a VPN: can connect but can't ping anyone

This is my first time setting a VPN. Clients can connect but can't ping other machines. This is certainly a route problem but i can't find the right way to configure it. Here is a sample example of ...
4
votes
2answers
2k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
4
votes
1answer
37 views

Openvpn linux connection reset, restarting [0]

This works perfectly fine under windows but fails on my ubuntu laptop Does anyone have any insight as to why this is? openvpn output Thu Dec 31 13:49:42 2015 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (...
4
votes
1answer
415 views

openvpn TLS handshake fails on client because firewall drops packets (but why?)

I seem to have problem with my openvpn server - client connection. now, the important information is in the log (verb3) of my client: Mon Mar 30 17:09:59 2015 OpenVPN 2.2.2 x86_64-slackware-linux-...
4
votes
3answers
2k views

How access remote network with OpenVPN?

I am currently trying to configure OpenVPN to access our company network remotely. I was able to establish a connection and ping the server at the configured address (10.8.0.1), but I was not able to ...
4
votes
1answer
18k views

How do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?

I am setting a secondary (DD-WRT) router to act as a OpenVPN client so that all clients would get VPN access simply by connecting to the router. But seems clients traffic is always routed via the main ...
4
votes
1answer
342 views

How to handle OpenVPN client as a service, when the laptop is physically on the network already?

The Setup I've gotten OpenVPN working on our Windows XP laptops. Users are limited, so I went ahead and set OpenVPN client to run as a service, which is great anyway because that means they are on ...
4
votes
1answer
9k views

Local domain DNS resolution not working using OpenVPN on a pfSense box

I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN. For this example, this is what I have: A ...
4
votes
1answer
2k views

OpenVPN and TomatoVPN

Wondering if someone can help me with the following. I have updated my Linksys router with TomatoVPN and used the following config: Interface Type:TAP Protocol:UDP Port:1195 Firewall Custom ...
4
votes
2answers
2k views

Sharing an IP pool for two openvpn instances (one TCP and one UDP)

I'm currently running OpenVPN on my VPS, listening on port 1194 via TCP. I need to use TCP since I sometimes need to tunnel traffic over an HTTP proxy. However, I'd also like to be able to use UDP, ...
4
votes
2answers
1k views

OpenVPN Server - CPU is pegged out

I am configuring OpenVPN to act as a SSL tunnel for a remote location. I have OpenVPN1 at our current location acting as a server then OpenVPN2 at the other location that is acting as a client but is ...
4
votes
0answers
1k views

IPv6 routing over OpenVPN

Trying to learn how IPv6 works with OpenVPN, so I wanted to setup following scheme. I have a VPS server (Ubuntu), which have been allocated a /48 subnet. ISP ipv6 gateway is XXXX:XXXX:XXXX::1 Server ...
4
votes
2answers
8k views

openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

My goal: I want to set up openVPN on a vServer from the company netcup, running Debian squeeze. I only want a VPN connection from client to server; clients should not be able to see each other, also ...
4
votes
1answer
1k views

OpenVPN web traffic routing not working

My first time trying to set up OpenVPN. I followed the HOWTO guide from OpenVPN's site and was successfully connected but when I tried to route my web traffic, it seems that nothing gets through to my ...
4
votes
2answers
3k views

OpenVPN: Not all DNS entries get pushed to clients from server. (dnsmasq)

I have been trying to find a solution to this problem, but have found no answer so far, so I hope you guys can help me out. I have a server running Ubuntu 10.04, which has a static IP address and an ...
3
votes
7answers
16k views

What's the advantage of OpenVPN over SSTP?

If considering Windows only environment, what's the advantage of introducing OpenVPN as the company VPN service, instead of Windows built-in protocols? Especially the new SSTP protocol already ...
3
votes
2answers
9k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
3
votes
3answers
3k views

OpenVPN - can I use an existing SSL certificate?

I want to setup OpenVPN server for my personal usage. I own domain and I have valid SSL certificate for this domain (issued by StartSSL). At the beginning of the setup instructions for OpenVPN there'...