OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

1
vote
2answers
49 views

OpenVPN for embedd devices

I'm a newbie in OpenVPN and the related questions, I'm googling for several days without positive answer. I have several linux-based devices located in my town that collects data and sends it for me. ...
0
votes
1answer
40 views

Except some IPs from rule to not allow internet through openwrt + openvpn when vpn is disconnected

I have the following working setup on my network: A. ISP-Router (connected to inet, internal ip 192.168.0.1 ) <----> B. eth0 - OpenWrt Router (OpenVPN client running) br-lan (bridge eth1 + wlan0, ...
-1
votes
1answer
112 views

openvpn route ALL traffic through VPN but through particular client (not server)

I have managed to setup a configuration where specific routes are routed through a particular client . For example I setup route X.X.X.0 255.255.255.0 and in the client A iroute X.X.X.0 255.255.255.0 ,...
0
votes
0answers
18 views

OpenVpn Client credentials security, key crt generation

I'm curious what is Your opinion on openvpn client crt/key security In most cases (tutorials), the clients key/crt are generated on the same openvpn server, and no one cares about the future. This is ...
0
votes
0answers
88 views

Can not start OpenVpn service within a FreeBSd Jail

Recentrly I've been fiddling with my FreeBSD VPS. I have it installed with FBSD 10.3, I created a jail with ezjail and installed openvpn from ports following the guide in http://bit.ly/1T6qg4G and ...
1
vote
4answers
430 views

Route all network traffic through an openvpn connection and also accepting incoming requests on the hosts' real IP-address

I am searching for a solution to route all traffic from a server through OpenVPN but keep it possible to host applications on the server which can be accessed outside of the local area network. To ...
1
vote
1answer
1k views

Get OpenVPN clients names to resolve through dnsmasq

I have a PFSense box running as an OpenVPN server. There are several remote devices that connect through the VPN (as tap devices). The VPN stuff is working, I can access the remote hardware by ...
1
vote
0answers
25 views

Particular workstations cannot reach specific servers in an openvpn site2site environment

It seems to be a weird problem to me. Here is the situation. I set up a site to site environment by openvpn (udp protocol), most servers and workstations can reach the other site but several servers ...
0
votes
0answers
41 views

OpenVPN: VPN routed traffic blocks external acces to a VPN client server

We are running OpenVPN Access Server on an Ubuntu Server and connect successfuly with a few PC clients. There is also another Debian server inside a private LAN which is autoconnected as a VPN client ...
1
vote
1answer
26 views

Way to find most people connected on OpenVpn?

So I know that if you set up telnet and then type in 'load-stats' OpenVpn will tell you how many clients are connected at the moment, but is there a way to find the highest amount of people that have ...
4
votes
1answer
3k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
0
votes
0answers
21 views

Redirect client to specific URL openvpn?

Soon I'm going to have to change my VPN server's IP address. This will mean that current client configuration files will no longer work with the new server. I was wondering if it's somehow possible to ...
0
votes
0answers
21 views

How can I get a user to interact with an executable configured to run from a scheduled task?

I am trying to get the OpenVPN GUI to open for configured users automatically at (or recently after login). My original plan was to use a Computer Configuration scheduled task to run as the logged on ...
0
votes
0answers
91 views

OpenVPN DNS resolution not working

I'm currently trying to get a simple OpenVPN setup working and I'm almost there, except for a DNS (or routing) issue I seem to be having. The client connects to the server just fine, and I can ping ...
0
votes
1answer
44 views

OpenVPN leaks IP for one host only

I've been trying to solve this for the past week and I can't figure this out. I've pretty much boilerplate OpenVPN server using TUN running and then I've 3 separate HTTP servers each running Nginx ...
1
vote
1answer
53 views

OpenVPN: Best methods for multiple server authentication

What is the best way for multiple clients to authenticate to multiple severs? I was thinking a token based system when a token is generated for each client and a custom script is added to verify this. ...
5
votes
2answers
8k views

Which openvpn cipher should I use?

From both a performance and security standpoint, which cipher should I use with openvpn? According to http://openvpn.net/index.php/open-source/documentation/howto.html#security , the default is ...
1
vote
0answers
25 views

Why would OpenVPN attempt a TCP connection in a UDP setup?

I connect to an OpenVPN server (IP_of_OpenVPN_server) from a network which is behind a firewall (iptables managed by Shorewall). The firewall is set up to only allow outbound OpenVPN (udp/1194) ...
2
votes
2answers
119 views

Issue with site to site OpenVPN

So my end goal is to utilise OpenVPN to connect to a remote IP camera. The reason I am going down the route of OpenVPN is to try and overcome the carrier grade NAT that prevents me from doing port ...
1
vote
2answers
128 views

OpenVPN per user rules while not routing Internet traffic

EDIT: I know that learn-address is what I would need to use to call a script (as specified in the openvpn-netfilter project) to set the firewall rules. I guess my question is more related to the ...
1
vote
1answer
41 views

Route ipsec to openvpn with iptables

I am not a very experienced user but I do have determination, after a week with no progres it is getting rough. I have two NIC, one facing to the internet and one towards the internal network. Both ...
0
votes
0answers
27 views

OpenVPN Access Server Creating Groups & Users

I have created an OpenVPN on aws via cloudformations - all working as expected except bootstrapping. on user data i have entered some comands to do some of changes e,g, enabling googleauth etc. in ...
0
votes
0answers
22 views

Internet throught VPN in local network, using windows 7 as router

I have windows 7 (192.168.1.0/24) using as router in SOHO network. Everything works fine until I'm creating openvpn connection on windows 7 (10.0.0.0 mask 255.255.255.252). Windows 7 machine has ...
4
votes
2answers
2k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
1
vote
0answers
102 views

Openvpn Error opening configuration file:

I just set up openvpn with this script on clean centos 7. And I can't connect to server. I got following error in journalctl -xn 05:18:39 localhost.localdomain openvpn[1433]: Options error: In [CMD-...
0
votes
0answers
238 views

cannot connect openvpn ubuntu 16.04

I have openvpn with google authenticator. It connects via browser but when I try to connect it via terminal following error is thrown after I enter google authenticator code. I am able to connect ...
0
votes
0answers
31 views

Amazon EC2 openVPN instance connection issues

Currently trying to connect to an openVPN server set up on an EC2 instance that is also running a web application. My client establishes a connection with the server and I can ping the gateway (10.8....
0
votes
1answer
27 views

Debian as VPN Server for Cisco ASR

I've to set up a Debian Server who should connected by a Cisco ASR via Side2Side VPN with a preshared key. Tried Open-VPN, but found out that both sides need Open-VPN. So the Cisco ASR is the VPN ...
1
vote
1answer
25 views

OpenVPN Client Config Dir - where common name includes non-utf8 characters?

How do one go about handling individual client configurations in OpenVPN where the common name of the certificate includes non-UTF8 characters (Such as Swedish names)? I had a look at the OpenVPN ...
1
vote
1answer
48 views

How to disconnect the openvpn client, when another client connects using same certificate?

I have openvpn server. There is no "duplicate-cn" in configuration file. The sequence of my actions: Client A connects to server. Everything works. Has access to server and to internet. Client B ...
1
vote
1answer
3k views

Any help on how to use iptables to postroute to eth0:2 alias in ubuntu?

On my server I want to route my internet traffic over my eth0:2 alias. When I use this command: sudo iptables -t nat -A POSTROUTING -s 10.8.0.4 -o eth0:2 -j MASQUERADE It returns this: Warning: ...
5
votes
2answers
2k views

OpenVPN bypass on some ports

I have a server running Debian 7 and I would like to connect to a VPN and let all the traffic pass via the VPN except for some ports (SSH, hosted websites, etc). I've searched for some time now in ...
0
votes
1answer
377 views

Hardware requirements for server with OpenVPN and 7000 users at the same time [closed]

Our organization needs to deploy a server that can work fast with 7000 clients that will be work with terminal client and web client over the OpenVPN server. And we need help in selecting the ...
0
votes
2answers
222 views

Routing your Internet through openvpn and Squid Proxy

I am trying to setup a proxy to filter the internet traffic. In order to do so have arrived at the following combination Client -> Openvpn -> squidproxy -> internet Squid proxy and openvpn have been ...
0
votes
1answer
221 views

How to connect to OpenVPN clients from LAN 'members'

Working on a IoT type of thing, I want to connect some devices "in the wild" to servers in AWS through OpenVPN on an EC2 instance. So far I have been able to set up an EC2 instance configured as an ...
7
votes
6answers
11k views

How can I disconnect from openvpn in windows via command line?

I know how to connect to an openvpn via a command line in Windows XP. What I can't figure out is how to end the connection. Any thoughts?
1
vote
1answer
57 views

How can I access to devices on remote LAN

Here is a quick diagram of what i'm trying to configure I have multiple clients connecting to my VPN Server (from 10.0.1.2 to 10.0.25.2). Each LAN behind the clients are always the same : 192.168....
1
vote
0answers
46 views

Route all traffic from virtual interface to temporary tun0

I'm trying setting up at home an automated torrent client to download some big GIS databases I produce at work and release as .torrent files. My home server is a Raspberry PI with one Ethernet ...
3
votes
2answers
5k views

What's the best method to monitor an OpenVPN server?

I have an OpenVPN server machine which resides on an isolated network, a NAT rule in the company's firewall is redirecting all traffic on port 1194 (tcp) from the public IP I chose to the internal ...
0
votes
1answer
220 views

OpenVPN Ubuntu Server Routing Problems No Internet

I'm running OpenVPN on Ubuntu 15.04. When I connect to the server, I can connect and authenticate correctly (I use PAM auth because I'm lazy). Once connected I can't ping the server or access the ...
1
vote
1answer
251 views

ICMP ECHO REPLY is not being SNATed correctly

I am trying to provide L3 connectivity between two remote LAN networks (10.0.0.0/24, 10.0.1.0/24) using OpenVPN with the following setup: +----------------+ +---------------------+ +----------------...
1
vote
1answer
171 views

Can't connect to Ubuntu server on LAN from pfSense VPN

Quick summary pfSense server is connected to the WAN and LAN. This box also has an OpenVPN server running. The LAN clients use 192.168.20.0/24 OpenVPN clients use 192.168.30.0/24 On the LAN I ...
0
votes
1answer
30 views

OpenVPN block SMTP Access Server completely

I've tried almost all iptables rules to block smtp on openvpn server but still clients clients can access remote smtp servers on port 25. I'm using openvpn access server. It's creating two interfaces ...
3
votes
1answer
220 views

OpenVPN server local network access and vpn network access

first off, apologies if this is a duplicate, I couldn't find a question that matches mine I have a home linux server and a remote VPS linux server. OpenVPN satisfies the requirement of a high speed ...
1
vote
1answer
20 views

openvpn exclude some web pages

I have OpenWrt with openvpn on it. Some computers are excluded from openvpn traffic by --set-mark rules. But now I need some more elastic solution. I am using VPN for web browsing, but some web pages ...
1
vote
1answer
2k views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still can't seem to get this to work. I'm trying to create a very simple site ...
-1
votes
1answer
59 views

ubuntu network manager openvpn overwrites default route

I am running VPN server on aws account which hosted under Account A. I have another aws Account B, where I have a Ubuntu ec2 instance. On this instance I have installed Openvpn and configured client ...
0
votes
1answer
514 views

Set Up OpenVPN with Ldap support on CentOS7

We are trying to set up OpenVPN with ldap support via openvpn-auth-ldap on CentOS7. The EPEL repository is not listing openvpn-auth-ldap anymore for CentOS7. For CentOS6, there was a working relase. ...
0
votes
2answers
70 views

How to keep openvpn connection open on Centos

I access test server via shell and i use this command to connect to VPN sudo openvpn client.conf I want to keep the connection open with the VPN, something like service when you make service ...
-1
votes
1answer
20 views

Can I use amazon VPC to encrypt communications between my office and the internet [closed]

I was recently working with Amazon VPC to connect to Amazon RDS. I noticed that I need to use OpenVPN with Google Authenticator in order to be able to connect to the instance. I was wondering the ...