OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

3
votes
1answer
1k views

How to set OpenVPN client bind address?

The OpenVPN client machine has two interfaces to Internet: a low-speed and high-speed one. Default route goes throught the low-speed one. I'd like OpenVPN to connect to server through the high-speed ...
3
votes
2answers
1k views

Openvpn server not forwarding ping traffic from tun0 to eth0 for rest of the hosts in the subnet

Currently I have a openvpn server and client setup with rounting (not bridging) When I try to ping from my client to server ip address it works fine. But when I try to ping rest of the subnet hosts ...
3
votes
1answer
6k views

OpenVPN - tap interfaces and default gateway

Quick question just to verify i'm not going mental. If using device mode "tap" and i got a fully function connection in the sense that i can ping from client to server without any issues. However, i ...
3
votes
3answers
5k views

Can I use OpenVPN with a single secret password instead of a keys set?

I am looking forward to create an as-simple-as-possible OpenVPN set-up. I would like to use a single password to secure the communication instead of a set of key files. How can I set it up this way? ...
3
votes
1answer
3k views

OpenVPN redirect-gateway does not work on Windows 7?

i have set up openvpn, and it works. pinging from client to server and backwards works just fine. but now i wanted to redirect all the clients traffic through the vpn. so i did the following steps as ...
3
votes
5answers
9k views

Samba over OpenVPN - horribly slow

I've set up a server to run OpenVPN, with the purpose of clients accessing Samba shares remotely. The server is running CentOS 5.6, a decent quad-core Xeon CPU and plenty of RAM. The client I've ...
3
votes
1answer
1k views

IPv6 routing over VPN

I'm running OpenVPN on Debian Lenny and Tunnelblick on OSX. my goal is to have a fully routed VPN that supports IPv6. the OpenVPN server has a functional 6to4 device, so now my goal is to get the ...
3
votes
1answer
439 views

openvpn tun forwarding with firewalld

I have an OpenVPN server on Fedora 19 with 2 clients - 1 client on the same LAN as the server, and the other on the internet. I want the 2 clients to be able to talk to each other thru the tunnel and, ...
3
votes
1answer
2k views

Routing setup for OpenVPN server on Amazon EC2

Software developer here, trying to get his sysadmin-foo up and running by setting up an OpenVPN server on amazon EC2 to access all the internal resources there. Here's how I envision that on a fresh ...
3
votes
2answers
2k views

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route ...
3
votes
2answers
3k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client ...
3
votes
4answers
2k views

OpenVPN performance terrible to other machines on server's subnet [closed]

I'm using a "server" that is a hacked-up first generation Apple TV running Linux. I'm having a lot of trouble getting OpenVPN performance to be what I would expect with my new OpenVPN setup. The ...
3
votes
2answers
4k views

What are the proper routes to push for a bridged OpenVPN server?

I've set up an OpenVPN server on a machine with a private IP address of 10.0.0.13. The gateway is at 10.0.0.2, and it hands out 10.0.0.* addresses to other machines on the network. The VPN is set up ...
3
votes
1answer
3k views

VPN connection between Endian firewall and Android phones

We have an endian firewall (community, 2.4.0) as gateway, which is already serving as OpenVPN and IPSec endpoint (net-to-net). And we have many Android phones (most of them running Android 2.2 FroYo). ...
3
votes
2answers
509 views

OpenVPN: Where sould the private key be generated?

A friend of mine says that the keys (private and public) for the clients shall be generated at the server and somehow delivered to the client when setting up a new client for an OpenVPN based network. ...
3
votes
2answers
483 views

OpenVPN: How to mitigate path MTU issues on a per-client basis?

We have dozens of embedded devices installed at customers, all calling home to our OpenVPN service. That works fine in general, but a few of our customers have severe path MTU issues. Our influence on ...
3
votes
1answer
4k views

How do I route all traffic from clients connected to the DD-WRT to its OpenVPN tunnel tun0?

I am setting a secondary (DD-WRT) router to act as a OpenVPN client so that all clients would get VPN access simply by connecting to the router. But seems clients traffic is always routed via the main ...
3
votes
1answer
2k views

iptables: access connected openvpn client from the LAN with the VPN server

I have what is essentially a routing problem, and I'm not familiar enough with routing and iptables to effectively troubleshoot and set up my network needs. What's working I have an openVPN network ...
3
votes
1answer
1k views

OpenVPN to host tap device having very large MTU

Question What is the minimum set of server and client configuration directives that I need in order to satisfy the following conditions? Virtual layer 2 ethernet network that will not be bridged ...
3
votes
1answer
5k views

Port forwarding through OpenVPN

Here's my scenario. I have three hosts. 1) GATEWAY running OpenVPN Server. It has 1 LAN IP (192.168.1.10) and 1 OpenVPN IP (10.8.0.1). 2) LOCAL-CLIENT, a machine within the same LAN as GATEWAY, with ...
3
votes
1answer
877 views

Configure server to route all traffic through OpenVPN

I have an openvpn setup that is working great. There are some 50 clients connected and everything is handy dandy. I need one of these clients to route all traffic trough the vpn. I setup a ccd for ...
3
votes
1answer
7k views

OpenVPN: self-signed certificate in chain (Maybe SOLVED?)

I am trying very-unsuccessfully to use "TunnelBlick" (an OS/X OpenVPN 2.2.1 client that is known-good) to connect using certificates. Here is the (sanitized) error message I receive: TLS: Initial ...
3
votes
1answer
259 views

Is it safe for a single directory/file to be served by two separate samba daemons simultaneously?

The situation is this: I have a Debian server which acts as a web/mail server as well as an Internet gateway for a small office. All the externally available services run on OpenVZ virtual ...
3
votes
3answers
531 views

How do I configure multiple address pools for OpenVPN server?

I started an openvpn server about a year ago. As I didn't know what I was doing I left it as a /30 network. Now I have 40-50 (and growing) clients, each of which is using 4 addresses. How do I ...
3
votes
3answers
4k views

Getting openvpn client to forward all traffic through server

I am trying to set up an openvpn server and client, with all client traffic being routed through the server. I am currently able to access the server through the client, but when I enable 'push ...
3
votes
3answers
1k views

openvpn and selective routing

whats the best way to configure openvpn clients to go selectively go about using an openvpn connection? i want to setup a vpn server for friends in china, but i dont want them to use it for ...
3
votes
0answers
943 views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
3
votes
0answers
480 views

openvpn push redirect-gateway towards another OpenVPN Client

Greetings Server Fault Team, I want to route all the traffic from Client1 to Client3 in order to use internet of Client3 on Client1. We're using bridging on OpenVPN Server and both the clients are ...
3
votes
1answer
4k views

Pfsense 2.1 OpenVPN can't reach servers on the LAN

I have a small network set up like this: I have a Pfsense for connecting my servers to the WAN, they are using NAT from the LAN -> WAN. I have an OpenVPN server using TAP to allow remote workers ...
3
votes
1answer
581 views

how can I give openvpn clients access to a dns server (bind9) that is located on the same machine as the openvpn server

I currently have a debian server that is running an openvpn server. I also have a dns server (bind9) that I would like give allow access to by the connected openvpn clients, but I am unsure as of how ...
3
votes
1answer
524 views

Qos/iptables? for vonage and openvpn? … or something else?

I have a small home office setup. I use google voice and vonage for phone calls. Please see the diagram -- I know this not the ideal but since my cisco switch (3550) packed up so this is the only ...
3
votes
1answer
2k views

OpenVPN port-share with apache 443/10443 not working

I configured openvpn (OpenVPN 2.1.0) and apache 2 ( to listen respectively on 443 and 10443 (with modssl). The two applications are listening well: tcp 0 0 x.x.x.x:10443 ...
3
votes
1answer
2k views

OpenVPN and TomatoVPN

Wondering if someone can help me with the following. I have updated my Linksys router with TomatoVPN and used the following config: Interface Type:TAP Protocol:UDP Port:1195 Firewall Custom ...
3
votes
5answers
4k views

OpenVPN: Connection established but can’t connect to server

I am trying to set up OpenVPN to allow me to connect a number of laptops to my network in a way that allows the laptops to connect to specific computers via HTTP (to e.g. a server management page) and ...
2
votes
3answers
4k views

Is a PPTP VPN too insecure to consider using?

I need to set up a VPN for our small office. There will only be one person using it, and they will be transmitting private financial information in many cases. I know that PPTP has a number of ...
2
votes
2answers
260 views

Sensibility of using generic client keys with openvpn in this scenario

I have configured a working openvpn server (ubuntu 10.04) and client, no problems. I generated certificates and key files and such like for a client machine. We deploy a number of these generic ...
2
votes
4answers
667 views

openvpn as two factor network entry point integrated to AD

I'm looking to deploy openvpn as a linux RAS server (rather than site-to-site) and i'd like to use two factor authentication, specifically the use of ssl certificates and passwords tied into an ntlm ...
2
votes
3answers
16k views

OPENVPN error “Cannot open TUN/TAP dev /dev/net/tun: Permission denied (errno=13)”

Hi I get the following error when I try to run openvpn in my Ubuntu Server Fri Jan 8 02:12:59 2010 OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Mar 9 2009 Fri Jan 8 ...
2
votes
4answers
5k views

Check openVPN client connected Debian

How can I check if my Debian OpenVPN client is connected? Is there a specific command I have to run? Or can I read it from the logfile? Thanks. Edit: The answers below provide great value in ...
2
votes
2answers
11k views

How can I configure openvpn server without push default gateway?

I need configure my openvpn server to provide some LAN resources, but I don't want route all traffic for my clients. Here is my sample network description: My LAN is 192.168.1.0/24. Openvpn network ...
2
votes
3answers
10k views

How to open OpenVPN port (1194) on server?

I have been installed OpenVPN server on my CentOs VPS, and it started successfully And try to configure iptables for it by following command: iptables -A FORWARD -m state -–state RELATED,ESTABLISHED ...
2
votes
3answers
10k views

How to connect multiple VPNs using OpenVPN on Windows 7 on the same time?

I work most of the time remotly from home. To gain access to the different servers (via SSH) I have to use OpenVPN. I would like to connect to all of them (three, sometimes four) at once, so I dont ...
2
votes
1answer
855 views

Comments in OpenVPN client config files?

Is it possible to put comments in the client config files (those in the path specified by "client-config-dir") for OpenVPN, i.e. something beginning with "#" or "//" or the like? If so, what is the ...
2
votes
1answer
5k views

Setting up VPN on Ubuntu VPS @ linode

I'm really struggling with this because I'm not a network admin, only a mortal programmer. Linode gives you an external and internal IP for use with other nodes on the linode network. In my case I've ...
2
votes
1answer
3k views

OpenVPN not redirecting all traffic through VPN

I have just finished setting up my VPN, and google shows my IP to be that of my VPN, so this works fine. However, when I log in through SSH to the VPN server, it shows my last login to be that of my ...
2
votes
2answers
947 views

OpenVPN - port-share'ing with OpenSSH

Is it possible to share the same port and ip between OpenVPN (2.2.1) and OpenSSH (5.3) daemons using OpenVPN's share-port option ? I can't get it to work.. I have openssh listening on all interfaces ...
2
votes
2answers
14k views

How to install tun/tap driver for openvpn on centos linux?

How to install tun/tap driver for openvpn on centos linux? Best wishes for you.
2
votes
3answers
10k views

OpenVPN working - but how to route all traffic down it?

I've setup a static one-to-one OpenVPN connection fine. However I can't seem to get the client to route all traffic via the VPN device. Here's my configs: Client config: remote 89.21.xx.xx dev tun ...
2
votes
2answers
181 views

Have username and passphrase in OpenVPN client.conf? [duplicate]

With the auth-user-pass filename option is it possible to create a plain text file with username and passphrase. Is it possible to have the username and passphrase directly in the client.conf?
2
votes
1answer
567 views

Host network injecting resets into my TCP connection?

I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection. I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...