OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

0
votes
1answer
22 views

When a client connects using an already-connected keys, it is the older client that is disconnected, rather than the newer being dissmissed

For administrative purposes some people from an administrative team share the same key to a server and it happens sometimes that one of them is already connected to the server when another is also ...
1
vote
2answers
25 views

tcpdump http containing non expected payload bytes

I am monitoring an openvpn link with tcpdump a la tcpdump -i tun5 -w capture.dump -W 100 -C 100M -s 0 -n There is http/xml traffic going over that link which is basically caputered just fine. However, ...
0
votes
0answers
21 views

Two(one OpenVPN) Networks Routed to Two Seperate Interfaces

I currently have a working network configuration. It is setup so that my Debian router connects to my modem, grabs an IP from DHCP using the physical eth0 interface connected to the WAN port on my ...
0
votes
0answers
17 views

TAP0 Drops Packets when OpenVPN Run Through VMWare Workstation

I have an Ubuntu 14.04 Server on Amazon EC2 running OpenVPN server and am running udp bandwidth tests with iperf3. In this case, the OpenVPN Server is running as the iperf3 server as well. When I use ...
0
votes
0answers
19 views

How to failover to another ovpn configuration?

The OpenVPN documentation gives information about failover/loadbalancing over several servers, within one configuration file. Is there a way to failover to another .ovpn configuration? I have the ...
1
vote
0answers
80 views

linOTP to openVPN authentication ubuntu 12.04

I am working on a project in which I have to install a one-time password authentication. I have successfully installed openVPN to which I can connect without any authentication. I have installed the ...
0
votes
0answers
17 views

Add second openvpn server for one segment subnet with able to see each to each of clients?

There is openvpn server for one segment subnet, client to client visibly, and static assign private IP addresses. But this server may be is off. How add second server for solve minimum time off ...
0
votes
1answer
99 views

Setting up Open VPN client on Amazon EC2

There are various pages that advise on setting up an Open VPN Server on Amazon EC2, but all I need is to setup a client (so any internet access is routed through the VPN rather than coming directly ...
0
votes
1answer
653 views

Setting up a server that routes local traffic through vpn, while still being able to access internet directly [closed]

The goal is to setup a local server that routes local traffic through an uncontrolled remote vpn service while still being able to access the internet directly (not tunneled via vpn) and provide ...
0
votes
1answer
124 views

Changing openvpn dhcp pool

I have a config at the moment which is working almost fine until some clients connect, the server starts to kick the clients off from the server or something like that. As I have checked every clients ...
0
votes
1answer
60 views

How to configure different pfSense OpenVPN routes for different users?

I recently purchased the SG-4860 pfSense Security Gateway Appliance and I'm trying to migrate all of our settings off of our SonicWall. Everything for the most part has been great in my lab ...
11
votes
1answer
272 views

OpenVPN low performance. Do I have MTU problems? Dumps inside

I have problems with an OpenVPN tunnel which does not reach line speed. The gateway is a Debian Jessy virtual server hosted at OVH. The client is either my freebsd 10.2 homeserver (Intel I3 Ivy Bridge)...
1
vote
0answers
42 views

Route traffic between OpenVPN networks

The goal is to have main OpenVPN server and multiple OpenVPN subnets that are reachable for main server clients. All subnets' servers are clients of the main server too. Here are configs: main ...
0
votes
0answers
23 views

How to use VPN (openvpn) from ssh remote server?

I'd like to launch openvpn on my remote server connected via ssh, I mean, I want to make this kind of setup: local--<ssh>--remote--<vpn>--internet However, when I launch openvpn on the ...
0
votes
0answers
51 views

How to set multiple client IPs on a single machine mapped to multiple public IPs on a single OpenVPN server?

I have a properly working setup of an OpenVPN server in which: Each client has its own VPN IP address Each client IP is tied to a public IP Client configs are separated by CCDs So far, a client is ...
0
votes
0answers
21 views

OpenVPN access server on AWS and Integrated Authentication

I have setup an OpenVPN access server (using routed mode) on a VPC in AWS. our servers in the VPC are mostly windows machines, and so are the VPN clients. The client machine (in our office) are not ...
0
votes
3answers
3k views

Strange OpenVPN behavior - disconnects after one minute

I'm using OpenVPN for connect two private networks and now I got a problem, that I'm not able to solve. Servers are connected with simple UDP configuration with static key. I've already checked ...
0
votes
1answer
55 views

Set up a VPN inside my VPC. Why can I not connect to other hosts on the VPC?

Note: there is a similar quiestion here, but I do not understand the answer. I have just set up a VPN server using OpenVPN on an EC2 host inside my VPC. I've configured the VPN to tunnel all of my ...
4
votes
1answer
261 views

OpenVPN-server disappointing performance

On my VPS (Ubuntu 14.04 - 64-bit), which has OpenVPN 2.3.2-server installed, I'm getting disappointing performance. The VPN-server uses the AES-128-CBC cipher for encryption, and I have no firewall ...
0
votes
0answers
35 views

OpenVPN client to client without default gateway

I am trying to make OpenVPN server to allow client to client connections, but without pushing default gateway settings, so that by default there is a virtual LAN network between all the clients, while ...
0
votes
1answer
64 views

OpenVPN Install: Can't access to Client UI page

After installing open vpn successfully, i tested by accessing to Client UI but it said ERR_CONNECTION_TIMED_OUT. Is there any ways to fix it? @Information: I'm running CentOS 7 on Amazon EC2 instance. ...
0
votes
0answers
142 views

OpenVPN keeps a dead tunnel even though i did set keepalive

After a while my VPN tunnel is dead (can't sent packets through). I guess because my internet connection was dead or the firewall removed the state because of not using the tunnel. Restarting the ...
1
vote
1answer
57 views

problems when openvpn server is not the default gateway

I'm trying to set up an openvpn server on a raspberry pi to act as an endpoint for road worrier connections but the device is sitting on the network, not as the gateway of any of the machines on the ...
6
votes
3answers
7k views

Bridging VirtualBox over OpenVPN TAP adapter on Windows

I'm trying to configure a virtual machine (VirtualBox guest running Backtrack 4) with a bridged adapter over a VPN connection. The VPN is is hosted by the cybersecurity club at my university, and ...
1
vote
0answers
31 views

Cannot ping an ip of router

my issue is: r1 ping r4(em0) will lost the first packet r2 ping r3(em0) will lost the first packet too r3 cannot ping r2(eth0) r4 cannot ping r1(eth0) there are 4 routers, and connected with ...
0
votes
0answers
30 views

Implementing OpenVPN dynamic challenge/response

The OpenVPN docs for the management system (ref) say that dynamic challenge/response "works by returning a specially formatted error message after initial successful authentication." In theory, this ...
55
votes
8answers
89k views

Should I use tap or tun for openvpn?

What are the differences between using dev tap and dev tun for openvpn? I know the different modes cannot inter-operate. What is the technical differences, other then just layer 2 vs 3 operation. ...
3
votes
1answer
641 views

Qos/iptables? for vonage and openvpn? … or something else?

I have a small home office setup. I use google voice and vonage for phone calls. Please see the diagram -- I know this not the ideal but since my cisco switch (3550) packed up so this is the only ...
0
votes
0answers
41 views

openvpn multiple bridged connections

Have problem connecting several physical network segments using openvpn, please help. Have 172.16.0.0/16 network that consists of 3 segments: First one: 172.16.2 with 172.16.2.1 linux router that has ...
0
votes
0answers
184 views

Pritunl OpenVPN client configuration profiles not syncing

We are running a test deployment of Pritunl OpenVPN Enterprise server. We have two Pritunl hosts in our Pritunl cluster along with a VPN server that is active on one of the Pritunl hosts. One of the ...
3
votes
1answer
180 views

OpenVPN and systemd-resolved

How does one use the dns pushed via an openvpn server with systemd-resolved ? Before I decide to 'upgrade' to systemd-networkd. I could use some variant of openvpn-resolv-conf script to call ...
14
votes
1answer
27k views

Can someone please explain easyrsa vars options for PKI generation

I am using OpenVPN and whilst I can generate certificates using easyrsa just fine I don't really understand the settings in the easyrsa vars file: export KEY_COUNTRY="" export KEY_PROVINCE="" export ...
1
vote
0answers
37 views

How to ping machines behind an openvpn client router

I've a network located in 3 phisical places. In the first place I've a PC called PC1 configured as OpenVpn Client with a 10.8.0.3 ip address. In the second place I've a Router configured as OpenVpn ...
0
votes
1answer
567 views

VPN: ERROR: Linux route add command failed

I have configured a VPN server local 192.168.0.250 dev tun proto udp port 1194 ca /etc/openvpn/easy-rsa/keys/ca.crt cert /etc/openvpn/easy-rsa/keys/server-vpn.crt key /etc/openvpn/easy-rsa/keys/...
3
votes
1answer
958 views

openvpn, option tls-cipher not working, no shared cipher

while experimenting with setting up openvpn, i stumbled upon this tip on a website. it says that you can limit the list of ciphers, to prevent downgrade attacks. i testet it in a lan with 2 computers, ...
1
vote
1answer
99 views

OpenVPN - how to make the client names visible

I am using openvpn. Once the clients are connected, I would like that they can be addressed by using the names instead of the ip addresses. e.g. instead of "ping 10.8.0.2" I can use "ping client-...
0
votes
1answer
28 views

Cent OS - OpenVPN client connects but can't access internet

I set up openVPN 2.3 on a centOS 6.5 system I could connect with my windows client to the server. client gets IP address and DNS entries but when I like to access the internet with my client it does ...
5
votes
4answers
2k views

Prevent SSH connection lost after logging into VPN on server machine

I encountered an issue that I can't deal with. When I'm logged onto an VPS over SSH and try to estabilish VPN connection on that VPS, the SSH connection between VPS and my machine get lost. I assume ...
3
votes
3answers
17k views

Improving OpenVPN Performance

I've been trying to improve my OpenVPN performance and this is my current setup: cat /etc/openvpn/server.conf port 443 #- port proto tcp #- protocol dev tun #tun-mtu 1500 tun-mtu-extra 32 #mssfix ...
2
votes
3answers
2k views

Cisco VPN client - how to automate vpn process

I use Cisco vpn client to connect some customer Vpnclient.exe required answer about the question “Do you wish to continue” (yes / no ) Is it possible to run the vpnclient.exe without question ? (...
1
vote
0answers
32 views

Router OpenVPN client connected, but remote VPN machines not visible

My goal is to connect my Asus RT-68 router to remote VPN network, so LAN computers can access remote ones. Remote OpenVPN server is run on Zentyal Linux distro. My LAN address range is 100.100.0.0/24 ...
0
votes
0answers
31 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
1
vote
0answers
104 views

OpenVPN on pfSense: CRL verify fails with PKI depth 2

I've create a site-to-site OpenVPN structure on pfsense 2.2 using the built in certificate manager and the following: There is a root CA and an intermediate CA from which the server and client certs ...
2
votes
3answers
3k views

How can I prevent OpenVPN from clobbering local route?

I have a local network on 192.168.1.0 with netmask 255.255.255.0. When I connect to a VPN though OpenVPN (as a client), it pushes a route for 192.168.1.0 that clobbers the existing one, making my ...
1
vote
0answers
42 views

Can't connect to VNC server via OpenVPN

I've got the problem with connecting via VNC to remote computer. Connection goes through OpenVPN and I'm routing 5900 port to localhost.. ssh -p(port) -L5900:vpn adress of machine:5900 user@server....
0
votes
1answer
19 views

OpenVPN TAP interface security

Background: I am very naive about how bridging works. I wanted to know bridging interfaces exposes devices on both ends of the bridge to communicate? Question: How secure is the openvpn tap ...
1
vote
0answers
69 views

How do I use OpenVPN as an appliance in Azure to access protected resources?

I've been successful in creating a Virtual Network, adding subnets and security groups to different levels of our infrastructure, and installing OpenVPN on a VM and establishing a connection to it (...
0
votes
1answer
129 views

OpenVPN steps to configure only username/password authentication

I am newbie in OpenVPN and I need help to configure server and client .ovpn to use only username/password authentication. Examples of client.ovpn and server.ovpn with be very helpful. Thank's Here ...
1
vote
3answers
3k views

NFS Over OpenVPN: Top Performance Boosters

I have two VPS's - One is running 2008 Server R2 and the other is a Ubuntu 12.04 installation. I am using the Windows VPS for RD sessions for Quickbooks and a couple other apps and using the Ubuntu ...
2
votes
1answer
262 views

SSH X11 forwarding is extremely slow over VPN

I'm using an VPN (with OpenVPN) to keep access between my home and work computers, and today I tried to ssh-forward an app which is GUI-only, and I found this to be terribly slow. I've used SSH X11 ...