OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

3
votes
3answers
11k views

Openvpn client, force DNS server

Our Linux Ubuntu configuration does have a DNS server (Bind 9). And resolv.conf has its nameserver 127.0.0.1 When using openvpn client on that Linux, the nameserver is not changed (by the VPN ...
3
votes
4answers
25k views

OpenVPN and Routing and IPtables

GOAL: Access internal network devices and browse web via the tunnel. 192.168.2.x = internal network 192.168.3.x = openvpn server 192.168.2.111 = openvpn server on internal network [root@openvpn ~]# ...
3
votes
5answers
531 views

The right vpn to replace heavy ssh usage

We are a small development firm looking to access the following services remotely: http smb network shares rdc / vnc Currently we do this with a lot of ssh tunnels. We are looking into switching ...
3
votes
3answers
20k views

How to open OpenVPN port (1194) on server?

I have been installed OpenVPN server on my CentOs VPS, and it started successfully And try to configure iptables for it by following command: iptables -A FORWARD -m state -–state RELATED,ESTABLISHED ...
3
votes
2answers
5k views

OpenVPN with iptables and a tun interface

With an openvpn tunnel that uses a tun device, what iptables rules allow the encapsulated traffic through and what rules control the packets after encapsulation? Basically, I am wondering how the ...
3
votes
2answers
5k views

What's the best method to monitor an OpenVPN server?

I have an OpenVPN server machine which resides on an isolated network, a NAT rule in the company's firewall is redirecting all traffic on port 1194 (tcp) from the public IP I chose to the internal ...
3
votes
2answers
12k views

How to connect to VPN from the command line in Linux?

I have different tunnels that I configured using the network manager GUI. When I login to my desktop, I'm connected to the internet without any tunnels. To connect to a tunnel, I usually click on the ...
3
votes
3answers
18k views

Improving OpenVPN Performance

I've been trying to improve my OpenVPN performance and this is my current setup: cat /etc/openvpn/server.conf port 443 #- port proto tcp #- protocol dev tun #tun-mtu 1500 tun-mtu-extra 32 #mssfix ...
3
votes
2answers
13k views

OpenVPN - tap interfaces and default gateway

Quick question just to verify i'm not going mental. If using device mode "tap" and i got a fully function connection in the sense that i can ping from client to server without any issues. However, i ...
3
votes
2answers
2k views

How to restrict Openvpn users to certain network segments

I have three segments behind openvpn server: DMZ (192.168.1.x), Dev (192.168.2.x) and PROD (192.168.3.x). There are two groups of users: one group can connect to all segments from openvpn, while I ...
3
votes
2answers
4k views

How can I setup a VPN for remote users to connect to a AWS RDS server?

I have remote developers that travel and have constantly changing IP addresses. I would like them to be able to connect to a VPN running on a instance on EC2. Once they are connected to the VPN with a ...
3
votes
3answers
2k views

Help setting up OpenVPN server

I set up an openvpn server on ec2 following the directions here: http://alestic.com/2009/05/openvpn-ec2 That all works great. I'd like to change this to use asymmetric keys, and allow multiple ...
3
votes
2answers
301 views

Openvpn server can ping via IP but not via hostname

I have a vserver (Ubuntu 14.04.2 LTS) on which I run OpenVPN. Nearly everything works really fine: Clients can reach other clients via their IP's AND names (I had to modify the clients conf with "...
3
votes
3answers
360 views

Bypass VPN for HTTP/HTTPS traffic on Ubuntu?

I have an Ubuntu 14.04 machine that all it's outgoing traffic is through a VPN, and I'm required to make sure that HTTP and HTTPS traffic don't go through the VPN.I've looked into static routing but ...
3
votes
1answer
2k views

Limit/Throttle per user OpenVPN bandwidth using TC

I have a group of users connecting to my server via OpenVPN TCP and UDP (2 services). The two services are operating on tun0 and tun1 I'd like to be able to limit each user's bandwidth to say 5mb/s ...
3
votes
1answer
5k views

How to make short (not fully qualified) hostnames work with Mountain Lion, Tunnelblick, pfSense, OpenVPN

I use Tunnelblick 3.3beta21b on Mac OS X 10.8.2 (Mountain Lion) to connect to a pfSense/OpenVPN virtual private network. When connected to the VPN, I can access machines in our datacenter. This is ...
3
votes
1answer
904 views

Limiting OpenVPN bandwidth

I'd like to give users a certain amount of traffic. Let's say user A gets 1 GB and user B get 5 GB. I have a great script which does log all this info, however this script is called when the user ...
3
votes
1answer
14k views

OpenVPN server cannot ping clients

I have OpenVPN set up on a Debian server. Clients can connect, and clients can ping and access resources (Samba shares and intranet) on the server. However, the server cannot ping the client - it ...
3
votes
4answers
9k views

Possible? OpenVPN server requiring both certificate- AND password-based login (via Tomato router firmware)

I've been using Shibby's build of Tomato (64k NVRAM version) on my Asus N66U router in order to run an OpenVPN server. I'm curious whether it's possible to setup this OpenVPN server to require both a ...
3
votes
1answer
1k views

Bridge and OpenVPN with shorewall

I have this scenario and everything it's working OK, but I want to configure my Shorewall and I can't do it. My interfaces are: br0 (bridge of eth0) tun0 (OpenVPN) vnet* (each one of bridged ...
3
votes
4answers
10k views

How to let unprivileged user change/add route in Win7? OpenVPN client configuration

I have a Win7 laptop with OpenVPN installed. The normal user is an unprivileged user without knowledge of the administrator password. When running as an administrator, everything works fine with ...
3
votes
2answers
23k views

Linux IP Forwarding for OpenVPN - correct firewall setup?

I have OpenVPN running on a Linux machine. The VPN server has a public IP address (x.x.x.x) and the VPN clients are assigned addresses on the "tun" device in 10.8.0.0\24. I have an IPTables rule to ...
3
votes
1answer
2k views

openvpn tun forwarding with firewalld

I have an OpenVPN server on Fedora 19 with 2 clients - 1 client on the same LAN as the server, and the other on the internet. I want the 2 clients to be able to talk to each other thru the tunnel and, ...
3
votes
2answers
3k views

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route ...
3
votes
4answers
3k views

OpenVPN performance terrible to other machines on server's subnet [closed]

I'm using a "server" that is a hacked-up first generation Apple TV running Linux. I'm having a lot of trouble getting OpenVPN performance to be what I would expect with my new OpenVPN setup. The ...
3
votes
1answer
2k views

IPv6 routing over VPN

I'm running OpenVPN on Debian Lenny and Tunnelblick on OSX. my goal is to have a fully routed VPN that supports IPv6. the OpenVPN server has a functional 6to4 device, so now my goal is to get the ...
3
votes
1answer
219 views

OpenVPN server local network access and vpn network access

first off, apologies if this is a duplicate, I couldn't find a question that matches mine I have a home linux server and a remote VPS linux server. OpenVPN satisfies the requirement of a high speed ...
3
votes
1answer
476 views

Assign static IP by MAC address on openVPN

Our business is currently running a VPN using OpenVPN on a server we host ourselves. We have a need to lock down our internal network for client reasons - so the desired outcome is that only ...
3
votes
1answer
621 views

OpenVPN routing: multiple default entries. OpenVPN client: iptables. DNS issues

I'm running an OpenVPN-Server (Debian 8) for privacy purposes when using public wifi. Hence, all network traffic of the client is intended to be handled over the VPN connection. The server and client ...
3
votes
2answers
814 views

Are there any Distributed/mesh-like/P2P VPNs?

I have my personal VPN, connecting several devices so they can have fixed IP addresses on an always-reachable network (as long as they are connected to the Internet). This is necessary for me, since ...
3
votes
3answers
5k views

How can I achieve OpenVPN client routing without NAT on Linode

I've set up an OpenVPN network, and it is working properly in the sense that I can access the inner/LAN machines from the remote client. However, my problem is that all traffic from the remote ...
3
votes
1answer
967 views

Split tunneling through two VPNs simeltaneously

I want to run two OpenVPN client instances on an Ubuntu Server 14.04. I have both .conf files that can work independently (both are set to different interfaces - tun0 and tun1). I want to run both at ...
3
votes
1answer
2k views

OpenVPN and one way pings

Network configuration I have set up a network: Appropriate ports of computers in 192.168.87.0/24 are forwarded on TP-LINK router to be seen "all over the world". IP forwarding in enabled on ...
3
votes
4answers
6k views

Windows openvpn client is connected but ip not changing

I have an ubuntu machine on which I am running an openvpn server. From a windows machine on a different network when I try to connect to the ubuntu machine it says connected. I can even ping the local ...
3
votes
2answers
4k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client [192.168....
3
votes
1answer
4k views

Routing OpenVPN tunnel in via public interface and out via NAT'd interface (to internet)

I hope someone can help... I want to Configure OpenVPN-AS (i.e. OpenVPN Access Server, NOT OpenVPN) to work on my VPS. The VPS is a KVM running Ubunto 10.04 LTS, with a very vanilla configuration. ...
3
votes
2answers
6k views

What are the proper routes to push for a bridged OpenVPN server?

I've set up an OpenVPN server on a machine with a private IP address of 10.0.0.13. The gateway is at 10.0.0.2, and it hands out 10.0.0.* addresses to other machines on the network. The VPN is set up ...
3
votes
1answer
3k views

VPN connection between Endian firewall and Android phones

We have an endian firewall (community, 2.4.0) as gateway, which is already serving as OpenVPN and IPSec endpoint (net-to-net). And we have many Android phones (most of them running Android 2.2 FroYo). ...
3
votes
2answers
532 views

OpenVPN: Where sould the private key be generated?

A friend of mine says that the keys (private and public) for the clients shall be generated at the server and somehow delivered to the client when setting up a new client for an OpenVPN based network. ...
3
votes
1answer
214 views

OpenVPN and systemd-resolved

How does one use the dns pushed via an openvpn server with systemd-resolved ? Before I decide to 'upgrade' to systemd-networkd. I could use some variant of openvpn-resolv-conf script to call ...
3
votes
1answer
1k views

openvpn, option tls-cipher not working, no shared cipher

while experimenting with setting up openvpn, i stumbled upon this tip on a website. it says that you can limit the list of ciphers, to prevent downgrade attacks. i testet it in a lan with 2 computers, ...
3
votes
1answer
3k views

OpenVPN connects and access to ip works but not url in browser

I have been struggling for 2 days to setup Openvpn access to one of my servers but something doesn't work. First about my setup: My server is Debian 6 installed on vps on kvm environment. I have ...
3
votes
1answer
453 views

pfSense Cluster not working with Manual NAT

I have two pfSense clusters, one is 2.1.4 and one is 2.1.3. The directions suggest that Manual Outbound NAT is required, but the 2.1.3 cluster is working just fine using Automatic NAT, servers and ...
3
votes
1answer
5k views

Assign static IPs to tap clients in pfSense's OpenVPN server

I am trying to set up a pfSense server with OpenVPN. The OpenVPN will use the tap interface, tun clients are no option for us. The LAN network is 10.0.0.0/24, the pfSense machine is 10.0.0.10 and ...
3
votes
1answer
4k views

iptables: access connected openvpn client from the LAN with the VPN server

I have what is essentially a routing problem, and I'm not familiar enough with routing and iptables to effectively troubleshoot and set up my network needs. What's working I have an openVPN network ...
3
votes
1answer
3k views

OpenVPN to host tap device having very large MTU

Question What is the minimum set of server and client configuration directives that I need in order to satisfy the following conditions? Virtual layer 2 ethernet network that will not be bridged ...
3
votes
1answer
1k views

iptables rule(s) to send openvpn traffic from clients over an sshuttle tunnel?

I have an Ubuntu 12.04 box with OpenVPN. The VPN is working as expected -- clients can connect, browse the Web, etc. The OpenVPN server IP is 10.8.0.1 on tun0. On that same box, I can use sshuttle ...
3
votes
1answer
7k views

IP served by OpenVPN doesn't take ipp.txt into account

I'm facing some troubles right now with an OpenVPN server an former colleague set up (I'm not too into it ATM). We're using OpenVPN for a private network of ~200 clients (to be more specific, only 15 ...
3
votes
1answer
1k views

Configure server to route all traffic through OpenVPN

I have an openvpn setup that is working great. There are some 50 clients connected and everything is handy dandy. I need one of these clients to route all traffic trough the vpn. I setup a ccd for ...
3
votes
1answer
269 views

Is it safe for a single directory/file to be served by two separate samba daemons simultaneously?

The situation is this: I have a Debian server which acts as a web/mail server as well as an Internet gateway for a small office. All the externally available services run on OpenVZ virtual ...