OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

3
votes
0answers
2k views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
3
votes
1answer
5k views

Pfsense 2.1 OpenVPN can't reach servers on the LAN

I have a small network set up like this: I have a Pfsense for connecting my servers to the WAN, they are using NAT from the LAN -> WAN. I have an OpenVPN server using TAP to allow remote workers ...
3
votes
0answers
957 views

IPv6 routing over OpenVPN

Trying to learn how IPv6 works with OpenVPN, so I wanted to setup following scheme. I have a VPS server (Ubuntu), which have been allocated a /48 subnet. ISP ipv6 gateway is XXXX:XXXX:XXXX::1 Server ...
3
votes
1answer
684 views

how can I give openvpn clients access to a dns server (bind9) that is located on the same machine as the openvpn server

I currently have a debian server that is running an openvpn server. I also have a dns server (bind9) that I would like give allow access to by the connected openvpn clients, but I am unsure as of how ...
3
votes
1answer
572 views

Qos/iptables? for vonage and openvpn? … or something else?

I have a small home office setup. I use google voice and vonage for phone calls. Please see the diagram -- I know this not the ideal but since my cisco switch (3550) packed up so this is the only ...
3
votes
1answer
2k views

OpenVPN: Not all DNS entries get pushed to clients from server. (dnsmasq)

I have been trying to find a solution to this problem, but have found no answer so far, so I hope you guys can help me out. I have a server running Ubuntu 10.04, which has a static IP address and an ...
3
votes
1answer
3k views

OpenVPN port-share with apache 443/10443 not working

I configured openvpn (OpenVPN 2.1.0) and apache 2 ( to listen respectively on 443 and 10443 (with modssl). The two applications are listening well: tcp 0 0 x.x.x.x:10443 ...
3
votes
1answer
2k views

OpenVPN and TomatoVPN

Wondering if someone can help me with the following. I have updated my Linksys router with TomatoVPN and used the following config: Interface Type:TAP Protocol:UDP Port:1195 Firewall Custom ...
3
votes
2answers
2k views

Sharing an IP pool for two openvpn instances (one TCP and one UDP)

I'm currently running OpenVPN on my VPS, listening on port 1194 via TCP. I need to use TCP since I sometimes need to tunnel traffic over an HTTP proxy. However, I'd also like to be able to use UDP, ...
3
votes
5answers
4k views

OpenVPN: Connection established but can’t connect to server

I am trying to set up OpenVPN to allow me to connect a number of laptops to my network in a way that allows the laptops to connect to specific computers via HTTP (to e.g. a server management page) and ...
2
votes
3answers
5k views

Is a PPTP VPN too insecure to consider using?

I need to set up a VPN for our small office. There will only be one person using it, and they will be transmitting private financial information in many cases. I know that PPTP has a number of ...
2
votes
2answers
12k views

How can I configure openvpn server without push default gateway?

I need configure my openvpn server to provide some LAN resources, but I don't want route all traffic for my clients. Here is my sample network description: My LAN is 192.168.1.0/24. Openvpn network ...
2
votes
2answers
280 views

Sensibility of using generic client keys with openvpn in this scenario

I have configured a working openvpn server (ubuntu 10.04) and client, no problems. I generated certificates and key files and such like for a client machine. We deploy a number of these generic ...
2
votes
4answers
693 views

openvpn as two factor network entry point integrated to AD

I'm looking to deploy openvpn as a linux RAS server (rather than site-to-site) and i'd like to use two factor authentication, specifically the use of ssl certificates and passwords tied into an ntlm ...
2
votes
3answers
17k views

OPENVPN error “Cannot open TUN/TAP dev /dev/net/tun: Permission denied (errno=13)”

Hi I get the following error when I try to run openvpn in my Ubuntu Server Fri Jan 8 02:12:59 2010 OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Mar 9 2009 Fri Jan 8 ...
2
votes
4answers
7k views

Check openVPN client connected Debian

How can I check if my Debian OpenVPN client is connected? Is there a specific command I have to run? Or can I read it from the logfile? Thanks. Edit: The answers below provide great value in ...
2
votes
3answers
13k views

How to open OpenVPN port (1194) on server?

I have been installed OpenVPN server on my CentOs VPS, and it started successfully And try to configure iptables for it by following command: iptables -A FORWARD -m state -–state RELATED,ESTABLISHED ...
2
votes
2answers
6k views

How to control multiple OpenVPN instances on the same server?

We have Centos servers running multiple daemons, up to 3 on each server. I have looked at the the rc.d init scripts and see no way to control the daemons independently. We would really like to be able ...
2
votes
1answer
6k views

Setting up VPN on Ubuntu VPS @ linode

I'm really struggling with this because I'm not a network admin, only a mortal programmer. Linode gives you an external and internal IP for use with other nodes on the linode network. In my case I've ...
2
votes
3answers
15k views

OpenVPN and Routing and IPtables

GOAL: Access internal network devices and browse web via the tunnel. 192.168.2.x = internal network 192.168.3.x = openvpn server 192.168.2.111 = openvpn server on internal network [root@openvpn ~]# ...
2
votes
1answer
5k views

OpenVPN not redirecting all traffic through VPN

I have just finished setting up my VPN, and google shows my IP to be that of my VPN, so this works fine. However, when I log in through SSH to the VPN server, it shows my last login to be that of my ...
2
votes
2answers
1k views

OpenVPN - port-share'ing with OpenSSH

Is it possible to share the same port and ip between OpenVPN (2.2.1) and OpenSSH (5.3) daemons using OpenVPN's share-port option ? I can't get it to work.. I have openssh listening on all interfaces ...
2
votes
2answers
16k views

How to install tun/tap driver for openvpn on centos linux?

How to install tun/tap driver for openvpn on centos linux? Best wishes for you.
2
votes
2answers
1k views

Connecting an EC2 VPC with OpenVPN all routed traffic being lost

I'm trying to use OpenVPN on Amazon Linux to connect the local LAN to a VPC on EC2. I have traffic flowing from the OpenVPN instance to any machine on the LAN, but other machines on the VPC are not ...
2
votes
1answer
3k views

OpenVPN and port 1194 closed

I installed openVPN on my server. By default, the port 1194 is choosed. The problem is that when I am running: sudo nmap -sU localhost -p 1194 It shows me: PORT STATE SERVICE 1194/udp ...
2
votes
2answers
208 views

Have username and passphrase in OpenVPN client.conf? [duplicate]

With the auth-user-pass filename option is it possible to create a plain text file with username and passphrase. Is it possible to have the username and passphrase directly in the client.conf?
2
votes
1answer
672 views

Host network injecting resets into my TCP connection?

I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection. I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
2
votes
6answers
2k views

OpenVPN and the iPad

So it seems that we have to connect iPhones and iPads on our network... Does an OpenVPN client for the iPad exist? If not, does a similar solution (where we control the VPN server) exist?
2
votes
2answers
408 views

Route all traffic from laptop to home network. Recommended Method? [closed]

I travel and use open wifi networks a lot. Given the nature of my work I want to route all my traffic thru my home network. My home office is well equipped to handle such a connection. Basically I ...
2
votes
3answers
589 views

Client unable to reach Internet through OpenVPN

The clients can all connect through OpenVPN. OpenVPN serves the following pool: server 10.8.0.0 255.255.255.0 I've configured the server's iptable with the following rule: iptables -t nat -A ...
2
votes
1answer
5k views

trying to route between two openvpn clients

I have two openvpn clients on the 10.0.1.0 (client1) and 192.168.0.0 (client2) subnets with the server's openvpn connection having the ip 192.168.150.1 The server has ip forwarding enabled. ...
2
votes
3answers
11k views

OpenVPN working - but how to route all traffic down it?

I've setup a static one-to-one OpenVPN connection fine. However I can't seem to get the client to route all traffic via the VPN device. Here's my configs: Client config: remote 89.21.xx.xx dev tun ...
2
votes
4answers
2k views

Restrict VPN client traffic to certain domains/IP

Is there any way to restrict a VPN client to only route certain traffic via the VPN and the rest via their local gateway? For example: traffic to a certain IP or domain gets routed across the VPN and ...
2
votes
3answers
9k views

OpenVPN Hardware Requirements

I am planning an new network. All the traffic coming out of this network will be fowarded into a VPN in order to exit out onto the Internet on a distant server. This will be done via OpenVPN. There ...
2
votes
1answer
223 views

Redirect all traffic sent to an unallocated alias IP within a VPN subnet, to a fixed IP within another VPN

I have a server hosting multiple bridged (i.e. tap) VPNs using openvpn, where each VPN has a different 10.8.X.0/24 subnet. I wish to redirect traffic sent to a specific, unallocated IP address (e.g. ...
2
votes
2answers
2k views

How to Access OpenVPN Client Subnet

I'm setting up a site-to-site OpenVPN, For now: Users on the client side can access the subnets on the server side. accessing the VPN client machine [Its IP on the client subnet] works fine. But ...
2
votes
3answers
3k views

iptables: combine SNAT with network remapping for OpenVPN

[Apologies for the long prelude; question halfway down.] I have a working OpenVPN setup whereby a VPN server pushes a route back to one client (hereafter called the “router”) which can then expose ...
2
votes
2answers
1k views

OpenVPN Chaining

I'm trying to set up an OpenVPN "chain", similar to what is described here. I have two separate networks, A and B. Each network has an OpenVPN server using a standard "road warrior" or "client/server" ...
2
votes
2answers
1k views

Cannot run OpenVPN on port 53 (DNS Stops Working)

So I'm trying to get OpenVPN to work on port 53 - sadly this isn't working. I used IP tables to map port 53 to port 1194 (standard OpenVPN port) Here's what I run to do this: iptables -t nat -A ...
2
votes
3answers
4k views

OpenVPN disables WiFi adapter afer connecting; connects after re-enabling it but no VPN hosts connectivity

I want to connect from my Windows 7 Enterprise PC to OpenVPN server. I have OpenVPN client version 2.1.1 installed. I have currently two problems: 1) After I start OpenVPN GUI and connect the ...
2
votes
1answer
3k views

How to make short (not fully qualified) hostnames work with Mountain Lion, Tunnelblick, pfSense, OpenVPN

I use Tunnelblick 3.3beta21b on Mac OS X 10.8.2 (Mountain Lion) to connect to a pfSense/OpenVPN virtual private network. When connected to the VPN, I can access machines in our datacenter. This is ...
2
votes
1answer
369 views

OpenVPN create a connection, run a script and shut it down

What would be the best way of going about the following problem? I have a server that I periodically dump backups to. The only way to connect to this server is via OpenVPN. So far I tested ...
2
votes
1answer
6k views

pfsense peer-to-peer OpenVPN not connecting

I'm trying to setup a peer-to-peer OpenVPN between two pfsense servers running 2.0.1-RELEASE, but the client keeps getting the connection dropped, with a status of "reconnecting; ping-restart" and ...
2
votes
2answers
897 views

Opensource SSL VPN for laptop to home network? [closed]

Router/Firewall/Endpoint: Zywall USG20W Method: SSL VPN (IPSEC VPN only if not other choice) Laptop: Windows 7 x86 Auth Server: 2008 R2 AD I have biz class internet and a bank of static IP's at my ...
2
votes
1answer
389 views

Using OpenVPN on Two Linux Machines *not on the gateways* to link the networks over the internet

I am running OpenVPN linking two linux machines on two networks. These machines are not the networks' gateways. There are also separate DD-WRT routers which are acting as the gateways on both ...
2
votes
3answers
651 views

Router in front of Untangle UTM

I want to put a pfSense router in front of my Untangle UTM. There is only one thing I am not too sure about. If the Untangle box will sit behind another router and run OpenVPN, all I need to do to ...
2
votes
3answers
514 views

Making to the DNS on two different VPNs play nice

Setup: I have two separate networks I need to connect to at the same time. VPN 1 PPTP IP : 192.168.2.0/24 DNS : 192.168.2.32; 192.168.2.34 (Windows 2003) Domain : old.com Forwarder : ...
2
votes
4answers
7k views

How to let unprivileged user change/add route in Win7? OpenVPN client configuration

I have a Win7 laptop with OpenVPN installed. The normal user is an unprivileged user without knowledge of the administrator password. When running as an administrator, everything works fine with ...
2
votes
3answers
4k views

OpenVPN multiple servers on the same subnet, high availability

Hey everyone. Let me start by saying that my Linux experience isn't super awesome but I can usually find my way around things easily. Over at work we have an OpenVPN setup that's been due for some ...
2
votes
3answers
304 views

software VPN via Ubuntu & osX

I want to be able to access my shared folders on my ubuntu server from my laptop (osX) when I'm at Uni. I'd prefer to set up a VPN and continue to use the SMB or AFP (if i can get it working) that I ...