OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

3
votes
1answer
11k views

OpenVPN - tap interfaces and default gateway

Quick question just to verify i'm not going mental. If using device mode "tap" and i got a fully function connection in the sense that i can ping from client to server without any issues. However, i ...
3
votes
2answers
3k views

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route ...
3
votes
4answers
3k views

OpenVPN performance terrible to other machines on server's subnet [closed]

I'm using a "server" that is a hacked-up first generation Apple TV running Linux. I'm having a lot of trouble getting OpenVPN performance to be what I would expect with my new OpenVPN setup. The ...
3
votes
1answer
1k views

IPv6 routing over VPN

I'm running OpenVPN on Debian Lenny and Tunnelblick on OSX. my goal is to have a fully routed VPN that supports IPv6. the OpenVPN server has a functional 6to4 device, so now my goal is to get the ...
3
votes
2answers
22k views

Linux IP Forwarding for OpenVPN - correct firewall setup?

I have OpenVPN running on a Linux machine. The VPN server has a public IP address (x.x.x.x) and the VPN clients are assigned addresses on the "tun" device in 10.8.0.0\24. I have an IPTables rule to ...
3
votes
1answer
497 views

OpenVPN routing: multiple default entries. OpenVPN client: iptables. DNS issues

I'm running an OpenVPN-Server (Debian 8) for privacy purposes when using public wifi. Hence, all network traffic of the client is intended to be handled over the VPN connection. The server and client ...
3
votes
3answers
5k views

How can I achieve OpenVPN client routing without NAT on Linode

I've set up an OpenVPN network, and it is working properly in the sense that I can access the inner/LAN machines from the remote client. However, my problem is that all traffic from the remote ...
3
votes
1answer
842 views

Split tunneling through two VPNs simeltaneously

I want to run two OpenVPN client instances on an Ubuntu Server 14.04. I have both .conf files that can work independently (both are set to different interfaces - tun0 and tun1). I want to run both at ...
3
votes
1answer
2k views

openvpn tun forwarding with firewalld

I have an OpenVPN server on Fedora 19 with 2 clients - 1 client on the same LAN as the server, and the other on the internet. I want the 2 clients to be able to talk to each other thru the tunnel and, ...
3
votes
1answer
2k views

OpenVPN and one way pings

Network configuration I have set up a network: Appropriate ports of computers in 192.168.87.0/24 are forwarded on TP-LINK router to be seen "all over the world". IP forwarding in enabled on ...
3
votes
4answers
5k views

Windows openvpn client is connected but ip not changing

I have an ubuntu machine on which I am running an openvpn server. From a windows machine on a different network when I try to connect to the ubuntu machine it says connected. I can even ping the local ...
3
votes
2answers
4k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client ...
3
votes
1answer
4k views

Routing OpenVPN tunnel in via public interface and out via NAT'd interface (to internet)

I hope someone can help... I want to Configure OpenVPN-AS (i.e. OpenVPN Access Server, NOT OpenVPN) to work on my VPS. The VPS is a KVM running Ubunto 10.04 LTS, with a very vanilla configuration. ...
3
votes
2answers
5k views

What are the proper routes to push for a bridged OpenVPN server?

I've set up an OpenVPN server on a machine with a private IP address of 10.0.0.13. The gateway is at 10.0.0.2, and it hands out 10.0.0.* addresses to other machines on the network. The VPN is set up ...
3
votes
1answer
3k views

VPN connection between Endian firewall and Android phones

We have an endian firewall (community, 2.4.0) as gateway, which is already serving as OpenVPN and IPSec endpoint (net-to-net). And we have many Android phones (most of them running Android 2.2 FroYo). ...
3
votes
1answer
2k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
3
votes
2answers
527 views

OpenVPN: Where sould the private key be generated?

A friend of mine says that the keys (private and public) for the clients shall be generated at the server and somehow delivered to the client when setting up a new client for an OpenVPN based network. ...
3
votes
1answer
2k views

How to create /dev/tun device inside unprivileged LXC container?

This question is similar to No tun device in lxc guest for openvpn . The LXC has evolved and the unprivileged LXC containers were introduced recently that offer another layer of security against ...
3
votes
1answer
3k views

OpenVPN connects and access to ip works but not url in browser

I have been struggling for 2 days to setup Openvpn access to one of my servers but something doesn't work. First about my setup: My server is Debian 6 installed on vps on kvm environment. I have ...
3
votes
2answers
2k views

How to route traffic from private network to openvpn subnet (and back)

I have a couple servers at Linode. I'm trying to set them up so I have a VPN into one of the machines and can then access all the other machines using the private linode network. Public access to ...
3
votes
1answer
4k views

Assign static IPs to tap clients in pfSense's OpenVPN server

I am trying to set up a pfSense server with OpenVPN. The OpenVPN will use the tap interface, tun clients are no option for us. The LAN network is 10.0.0.0/24, the pfSense machine is 10.0.0.10 and ...
3
votes
1answer
2k views

OpenVPN to host tap device having very large MTU

Question What is the minimum set of server and client configuration directives that I need in order to satisfy the following conditions? Virtual layer 2 ethernet network that will not be bridged ...
3
votes
1answer
1k views

iptables rule(s) to send openvpn traffic from clients over an sshuttle tunnel?

I have an Ubuntu 12.04 box with OpenVPN. The VPN is working as expected -- clients can connect, browse the Web, etc. The OpenVPN server IP is 10.8.0.1 on tun0. On that same box, I can use sshuttle ...
3
votes
1answer
1k views

Configure server to route all traffic through OpenVPN

I have an openvpn setup that is working great. There are some 50 clients connected and everything is handy dandy. I need one of these clients to route all traffic trough the vpn. I setup a ccd for ...
3
votes
1answer
8k views

Local domain DNS resolution not working using OpenVPN on a pfSense box

I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN. For this example, this is what I have: A ...
3
votes
1answer
269 views

Is it safe for a single directory/file to be served by two separate samba daemons simultaneously?

The situation is this: I have a Debian server which acts as a web/mail server as well as an Internet gateway for a small office. All the externally available services run on OpenVZ virtual ...
3
votes
3answers
811 views

How do I configure multiple address pools for OpenVPN server?

I started an openvpn server about a year ago. As I didn't know what I was doing I left it as a /30 network. Now I have 40-50 (and growing) clients, each of which is using 4 addresses. How do I ...
3
votes
3answers
5k views

Getting openvpn client to forward all traffic through server

I am trying to set up an openvpn server and client, with all client traffic being routed through the server. I am currently able to access the server through the client, but when I enable 'push ...
3
votes
3answers
1k views

openvpn and selective routing

whats the best way to configure openvpn clients to go selectively go about using an openvpn connection? i want to setup a vpn server for friends in china, but i dont want them to use it for ...
3
votes
3answers
43k views

OpenVPN: TLS Error: TLS key negotiation failed to occur within 60 seconds

The http://openvpn.net/index.php/open-source/documentation/howto.html page tells that the error is beacuse: "This error indicates that the client was unable to establish a network connection with the ...
3
votes
1answer
119 views

Windows 10 strange OpenVPN behavior

I have an OpenVPN server running (93.xxx.xxx.xxx is the public IP) to which different android and windows clients can connect and have access to the internet, but an OpenVPN client on my Windows 10 PC ...
3
votes
1answer
7k views

Pfsense 2.1 OpenVPN can't reach servers on the LAN

I have a small network set up like this: I have a Pfsense for connecting my servers to the WAN, they are using NAT from the LAN -> WAN. I have an OpenVPN server using TAP to allow remote workers ...
3
votes
1answer
824 views

how can I give openvpn clients access to a dns server (bind9) that is located on the same machine as the openvpn server

I currently have a debian server that is running an openvpn server. I also have a dns server (bind9) that I would like give allow access to by the connected openvpn clients, but I am unsure as of how ...
3
votes
1answer
611 views

Qos/iptables? for vonage and openvpn? … or something else?

I have a small home office setup. I use google voice and vonage for phone calls. Please see the diagram -- I know this not the ideal but since my cisco switch (3550) packed up so this is the only ...
3
votes
1answer
3k views

OpenVPN port-share with apache 443/10443 not working

I configured openvpn (OpenVPN 2.1.0) and apache 2 ( to listen respectively on 443 and 10443 (with modssl). The two applications are listening well: tcp 0 0 x.x.x.x:10443 ...
3
votes
2answers
2k views

Sharing an IP pool for two openvpn instances (one TCP and one UDP)

I'm currently running OpenVPN on my VPS, listening on port 1194 via TCP. I need to use TCP since I sometimes need to tunnel traffic over an HTTP proxy. However, I'd also like to be able to use UDP, ...
3
votes
5answers
4k views

OpenVPN: Connection established but can’t connect to server

I am trying to set up OpenVPN to allow me to connect a number of laptops to my network in a way that allows the laptops to connect to specific computers via HTTP (to e.g. a server management page) and ...
2
votes
3answers
5k views

Is a PPTP VPN too insecure to consider using?

I need to set up a VPN for our small office. There will only be one person using it, and they will be transmitting private financial information in many cases. I know that PPTP has a number of ...
2
votes
3answers
2k views

OpenVPN - can I use an existing SSL certificate?

I want to setup OpenVPN server for my personal usage. I own domain and I have valid SSL certificate for this domain (issued by StartSSL). At the beginning of the setup instructions for OpenVPN ...
2
votes
2answers
14k views

How can I configure openvpn server without push default gateway?

I need configure my openvpn server to provide some LAN resources, but I don't want route all traffic for my clients. Here is my sample network description: My LAN is 192.168.1.0/24. Openvpn network ...
2
votes
2answers
318 views

Sensibility of using generic client keys with openvpn in this scenario

I have configured a working openvpn server (ubuntu 10.04) and client, no problems. I generated certificates and key files and such like for a client machine. We deploy a number of these generic ...
2
votes
4answers
839 views

openvpn as two factor network entry point integrated to AD

I'm looking to deploy openvpn as a linux RAS server (rather than site-to-site) and i'd like to use two factor authentication, specifically the use of ssl certificates and passwords tied into an ntlm ...
2
votes
3answers
17k views

OPENVPN error “Cannot open TUN/TAP dev /dev/net/tun: Permission denied (errno=13)”

Hi I get the following error when I try to run openvpn in my Ubuntu Server Fri Jan 8 02:12:59 2010 OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Mar 9 2009 Fri Jan 8 ...
2
votes
2answers
15k views

pfSense Site-toSite VPN with OpenVPN connects but won't route traffic

Using two pfSense routers, I've created a shared-key VPN between 2 sites. Both routers are pfSense 1.2.2. The pfSense box at the client site is the gateway router for that site, but at the server ...
2
votes
3answers
168 views

Is it wise to use OpenVPN to connect remote web servers?

I have a number of remote hosted servers for various purposes--web and application servers. I effectively want a "management network" of sorts so I can simplify tasks like log collection and package ...
2
votes
2answers
8k views

How to control multiple OpenVPN instances on the same server?

We have Centos servers running multiple daemons, up to 3 on each server. I have looked at the the rc.d init scripts and see no way to control the daemons independently. We would really like to be able ...
2
votes
1answer
6k views

Setting up VPN on Ubuntu VPS @ linode

I'm really struggling with this because I'm not a network admin, only a mortal programmer. Linode gives you an external and internal IP for use with other nodes on the linode network. In my case I've ...
2
votes
1answer
6k views

OpenVPN not redirecting all traffic through VPN

I have just finished setting up my VPN, and google shows my IP to be that of my VPN, so this works fine. However, when I log in through SSH to the VPN server, it shows my last login to be that of my ...
2
votes
1answer
3k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
2
votes
2answers
1k views

OpenVPN - port-share'ing with OpenSSH

Is it possible to share the same port and ip between OpenVPN (2.2.1) and OpenSSH (5.3) daemons using OpenVPN's share-port option ? I can't get it to work.. I have openssh listening on all interfaces ...