OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

2
votes
2answers
2k views

Broadcast UDP over VPN

I have OpenVPN configured and have 5 dd-wrt router clients. I would like the machines on those routers to be-able to UDP Broadcast across all 5 networks. I cannot bridge the interfaces(to my ...
2
votes
2answers
3k views

How to run script after OpenVPN's TUN driver is up under Ubuntu

I would like to execute a bash script after a TUN driver (e.g. tun0) is up under ubuntu 9.04/9.10. I need it to use the assigned VPN IP in some configuration scripts. Do you have any suggestion? ...
2
votes
2answers
227 views

advanced openvpn - how do clients generate their own private keys and get the remote ca to sign their certificate

From answers to this question ive been recommended to not create client keys on the server home to ca.key but rather make the clients create their own private key and simple pass a csr to the ca ...
2
votes
4answers
584 views

Need an absolute proxy server to route HTTPS, FTP, etc

I have managed to setup a squid proxy server as an HTTP proxy and this is working well. However, it does not work with HTTPS. I am looking at making use of an external machine to setup as a proxy for ...
2
votes
1answer
151 views

Slow Network Printing over OpenVPN / Windows Server 2008

Our setup is as follows: Two offices (A and B) connected with OpenVPN Access Server. One Windows Server 2008 R2 Standard Housed in remote datacenter. Terminals at both offices connect through RDP ...
2
votes
1answer
540 views

OpenVPN server configuration with D-Link DSR-250n as client

I am attempting to have my D-Link DSR-250n router connect to my OpenVPN server. I have followed this guide in terms of getting the server up and running, and can successfully establish a client ...
2
votes
1answer
74 views

Openvpn signing certificates with wrong CA

I have a working (until now) ubuntu openvpn server. I think that my server is using a wrong CA to sign client CRTs. E.g: I use "source ./vars" followed by "./build-key john.doe" and it all works ...
2
votes
1answer
467 views

OpenVPN and one way pings

Network configuration I have set up a network: Appropriate ports of computers in 192.168.87.0/24 are forwarded on TP-LINK router to be seen "all over the world". IP forwarding in enabled on ...
2
votes
1answer
554 views

Log into Active Directory Domain over OpenVPN

Is it possible for an OpenVPN client to log into a Windows AD domain on the server end of the tunnel? In my set up, my OpenVPN server is running on a linux box joined to the domain and I'm using the ...
2
votes
1answer
3k views

OpenVPN - tap interfaces and default gateway

Quick question just to verify i'm not going mental. If using device mode "tap" and i got a fully function connection in the sense that i can ping from client to server without any issues. However, i ...
2
votes
1answer
1k views

How to make short (not fully qualified) hostnames work with Mountain Lion, Tunnelblick, pfSense, OpenVPN

I use Tunnelblick 3.3beta21b on Mac OS X 10.8.2 (Mountain Lion) to connect to a pfSense/OpenVPN virtual private network. When connected to the VPN, I can access machines in our datacenter. This is ...
2
votes
2answers
1k views

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route ...
2
votes
1answer
100 views

How can I create an environment to test OpenVPN with in a test lab?

I have a test lab that I would like to use to test a site-to-site VPN setup with using OpenVPN. What is the minimum amount of hardware that I need and how should it be configured so that I can mimic a ...
2
votes
2answers
2k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client ...
2
votes
1answer
3k views

Which openvpn cipher should I use?

From both a performance and security standpoint, which cipher should I use with openvpn? According to http://openvpn.net/index.php/open-source/documentation/howto.html#security , the default is ...
2
votes
1answer
518 views

Tunnel only one program (UDP & TCP) through another server

I have a windows machine at home and a server with debian installed. I want to tunnel the UDP traffic from one (any only this) program on my windows machine through my server. For tcp traffic this ...
2
votes
1answer
2k views

OpenVPN bridge: remote clients don't see local

Rough solution: iptables -A FORWARD -i br200 -j ACCEPT iptables -A FORWARD -o br200 -j ACCEPT I still don't understand what's happening. Bridging is made on L2, iptables shouldn't touch that ...
2
votes
2answers
3k views

How can I setup a VPN for remote users to connect to a AWS RDS server?

I have remote developers that travel and have constantly changing IP addresses. I would like them to be able to connect to a VPN running on a instance on EC2. Once they are connected to the VPN with a ...
2
votes
1answer
484 views

openvpn client connection is not establishing

What does this error means? My client.conf file works in other clients like ubuntu. But in centos 5.7 client it is giving this error; Thu Mar 22 23:20:49 2012 us=231847 UDPv4 WRITE [14] to ...
2
votes
1answer
740 views

Getting OpenVPN to fully connect two networks

I have a client (which is also a gateway for a 192.168.203.0/24 network) that is trying to connect to a remote server (that is a gateway for a 192.168.150.0/24 network) and make a fully bridge between ...
2
votes
2answers
686 views

Is there a tutorial for setting up OpenVPN on Amazon's EC2 running a Windows 2008 server?

I have been looking for hours, for a way to set up an OpenVPN server on an Amazon EC2 instance that's running Windows Server 2008 R2. All of the tutorials I have found deal with EC2 Linux, Ubuntu, ...
2
votes
2answers
557 views

Debian: IPv6-in-IPv4 over OpenVPN

Following (roughly) the instructions https://www.zagbot.com/openvpn_ipv6_tunnel.html at I now have the following: Client martin@theoria:~$ ifconfig eth0 Link encap:Ethernet HWaddr ...
2
votes
1answer
606 views

Recommendation for a virtual site-to-site VPN appliance [closed]

can you please recommend an Virtual Appliance or Operating System for creating multiple site-to-site VPN? The appliance must of course handle IPSec. It should also be OpenVPN capable. An Additional ...
2
votes
1answer
845 views

Allow my OpenVPN server to work behind a Cisco 800 Router

I have an OpenVPN Ubuntu Server working on ip 192.168.1.11 I need to let my roadwarriors use it from anywhere. I have a Cisco 800 router but I'm not an expert... I've downloaded using tftp its ...
2
votes
1answer
178 views

Is there a way to have a rolling list of passwords with OpenVPN or any other open source VPN software?

This can be useful for someone that is using a VPN in Internet cafe where someone could have installed a key logger. This way, even if they have recorded the password, it will not work the next time.
2
votes
2answers
2k views

How to redirect all Internet traffic to OpenVPN Server

I have seen working solutions around the issue of forcing Internet traffic to go through the OpenVPN server but they are all done in Linux, all I want to know is how to add an entry to the route table ...
2
votes
1answer
505 views

Connecting two networks together with OpenVPN

I have two Debian boxes sitting on two separate networks. I am trying to set up an OpenVPN link across the internet between the two and I've hit a little roadblock. I would like to set this up so ...
2
votes
2answers
882 views

SSH disconnection issue - TCP RST packets

I have a SSH disconnection problem, disconnection occurs randomly. Sometimes, it works fine and other times I am frequently disconnected. After the disconnection I can again re-connect and continue to ...
2
votes
2answers
1k views

Multiple OpenVPN clients on the same host

I'm trying to run two openvpn clients on the same host (let's call this the dual client box), connecting to two different openvpn servers. My dual client box is running Ubuntu 10.04, and I've got two ...
2
votes
2answers
361 views

Can you use Untangle with 1 NIC as an openvpn server?

Hi I have an untangle server in my office with 443(web-interface) and 1194(openvpn port) forwarded to this machine. Can you configure only 1 NIC for untangle and use it as openvpn server?
2
votes
1answer
81 views

Does A SSL Certificate Need to be Purchased and Setup for OpenVPN?

I'm planning on setting up OpenVPN on a Cloud Server from Rackspace Cloud. Does a SSL certificate need to be purchased and setup manually for OpenVPN? What about Amazon EC2?
2
votes
1answer
1k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
2
votes
1answer
386 views

Stress test OpenVPN server?

We have about 50-100 concurrent users connected to our current VPN and would like to migrate to an OpenVPN network. We have setup a RHEL server running OpenVPN and would like to simulate 50-100 ...
2
votes
1answer
2k views

What ports are needed for a Windows XP client to acces a folder on a SAMBA server?

Wikipedia mentions only TCP port 445 (while as far as I can remember ports 137-139 used to be used actively by Windows file sharing). If I map the 445th TCP port on gateway host "A" to a 445th TCP ...
2
votes
3answers
484 views

SSHd listen on OpenVPN's IP ?

I've got a server with SSH and OpenVPN services. I'd like to make sshd listen only on the openvpn ip. The problem is, until openVPN is up and tun0 is set, sshd can't be bind to the openvpn's ip. I'm ...
2
votes
3answers
4k views

High availability OpenVPN service

I am currently designing an OpenVPN service to provide internet users with enhanced privacy. So far I intend to use dedicated servers running CentOS and Xen to provide multiple domains each an ...
2
votes
1answer
619 views

Security VPN vs RDP

I was wondering which is more secure RPD or VPN I realize RDP over VPN is the most secure. I was just wondering what security issues there is with just RDPing from home to a workstation at work is and ...
2
votes
3answers
2k views

VPN server on Google Compute Engine with OpenVPN

I'm trying to use Google Compute Engine server as VPN server for all my traffic (I'm living in Russia, we have some issues with censorship here). There is mini-tutorial about VPN on GCE, but it's ...
2
votes
1answer
51 views

OpenVPN LDAP plugin error

I'm getting this error after (what I think is) a successful LDAP authentication: No remote address supplied to OpenVPN LDAP Plugin (OPENVPN_PLUGIN_CLIENT_CONNECT). What does this error mean? From ...
2
votes
2answers
113 views

OpenVPN Configuration Setup

I have a CentOS 6.64bit machine that I installed OpenVPN on. I want to have OpenVPN setup internally as a VPN to replace QuickVPN(it's horrible, fragile and randomly will work on Windows 8.x and not ...
2
votes
1answer
273 views

AD Integrated OpenVPN Server User Cannot Connect to MS SQL Server

I have a Windows 2008 R2 Domain/Forest functional level environment with an OpenVPN Access Server (v1.8.4.400) that is Active Directory integrated and working smoothly. I've been working with our DBA ...
2
votes
1answer
112 views

OpenVPN fails while openssl verifies ok

I have recently created a new CA certificate, as the old one was about to expire. I deployed this certificate to our OpenVPN server, and on it the verification of local certificate goes ok with both ...
2
votes
1answer
3k views

Improving OpenVPN Performance

I've been trying to improve my OpenVPN performance and this is my current setup: cat /etc/openvpn/server.conf port 443 #- port proto tcp #- protocol dev tun #tun-mtu 1500 tun-mtu-extra 32 #mssfix ...
2
votes
1answer
2k views

OpenVPN Error : TLS Error: local/remote TLS keys are out of sync: [AF_INET]

Fist off thanks for reading this, I appreciate any and all suggestions. I am having some serious problems reconnecting to my OpenVPN client using Riseup.net's VPN. I have spent a few days banging my ...
2
votes
1answer
180 views

OpenVPN routed lans

Setup description: One VPN server called vpn1 One VPN client called vpn2 One network behind vpn1 with IP addresses 10.0.0.0/24 One network behind vpn2 with IP addresses 10.0.2.0/24 For simplicity ...
2
votes
2answers
746 views

OpenVPN - iptables restrict one IP's access to only some servers

I have a large OpenVPN network. Most of the addresses have free access to one another. However a few IPs need to be restricted to only a couple of other IPs. For example 10.8.0.6 can only be ...
2
votes
1answer
2k views

OpenVPN daemon fails to start — starting server manually returns no output

I am setting up an openvpn server on my network for the purposes of accessing devices remotely. I have generated crts and keys with the easy-rsa scripts and have configured server.conf correctly ...
2
votes
2answers
655 views

what is best multi-server configuration with OpenVPN

We have a number of Database severs running MongoDB on Debian plus a number of Application servers also on Debian. The db servers hold replicating db clusters, so they need to talk to each other. ...
2
votes
1answer
91 views

how to block access from bridge mode vpn nodes to my wan gateway

We have a tap bridge between 2 local networks. It work great except that clients from the 'other' network can use dhcp server and most important can use wan gateway of the second network which is bad. ...
2
votes
2answers
2k views

How do you prevent a VPN from exposing your IP when it disconnects?

I want every connection in a Virtual Machine (windows XP) to ONLY use my OpenVPN server, as soon as the connection is lost to OpenVPN, I want to lose all internet connectivity in the VM. Naturally the ...