OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

0
votes
3answers
318 views

OpenVPN client-to-client

When usig a TUN (layer 3) OpenVPN server with client-to-client disabled, my clients can still talk to each other. The client-to-client config should prevent this according to the documentation: ...
0
votes
1answer
40 views

Associate a specific certificate to a specific local user with OpenVPN

Set up: OpenVPN 2.3 on centos server. Multiple clients (windows, osx, linux). Encyrption using certificates PER device (easy-rsa), and added authentication using the openvpn-plugin-auth-pam.so ...
0
votes
1answer
185 views

OpenVPN and client-connect scripts

I have an OpenVPN server (2.3.2) on Debian Wheezy operating in bridged mode. Everything's working fine in terms of the client connecting and getting access to the network(s) it needs. Im trying to add ...
2
votes
0answers
22 views

Policy-based routing on OpenVPN server

I'm trying to set up an OpenVPN server as reverse proxy for mobile/desktop devices, that can relay traffic based on certain policies: only requests to white-listed IP addresses are going to be ...
0
votes
1answer
32 views

openvpn client restarts if default gateway is changed

I am running openvpn client in my system which connects to remote openvpn server via Internet. My system is connected to two networks (multi homed) wlan0 and ppp0. Both provides internet connectivity ...
0
votes
1answer
167 views

How to automatically add localhost DNS server (dnsmasq) to resolv.conf

I did the steps at https://wiki.archlinux.org/index.php/OpenVPN#DNS to set up DNS with OpenVPN so that anytime the OpenVPN connects or disconnects, it automatically updates /etc/resolv.conf. The ...
3
votes
1answer
148 views

Windows 10 strange OpenVPN behavior

I have an OpenVPN server running (93.xxx.xxx.xxx is the public IP) to which different android and windows clients can connect and have access to the internet, but an OpenVPN client on my Windows 10 PC ...
1
vote
0answers
57 views

How can i use OpenVPN from SoftEther in android devices? [closed]

I want to know is there any chance to connect to OpenVPN that build in SoftEther in android devices using openvpnclient?
0
votes
0answers
43 views

OpenVPN on AWS: ec2 instance not able to see connected clients

I have 3 ec2 Instances on my AWS environment all in same VPC and same public gateway. 1 of the instances is OpenVPN instance and other 2 are normal linux machines. to demonstrate: ec1 machine local ...
2
votes
0answers
630 views

How to prevent SSH freezes over an openvpn client to client connection

I have the exact same issue as the one described here, but I cannot request clarification from the author, since I am a new user and I cannot post a comment on that, so I am posting a new question (I ...
1
vote
0answers
16 views

OpenVPN fail-over, keeping same IPs and certificates?

So I have a OpenVPN server (10.0.0.1), and several OpenVPN clients connecting to it. The server authenticates via certificates and keys generated by easy-rsa, and hands out a unique IP (10.0.x.1) and ...
0
votes
0answers
46 views

Script in user terminal works, permission failure in users crontab in Scientific Linux 7.1

I have a script that works to check if my VPN connection is up, and if not, it restarts it. This works correctly in a terminal, but the command nmcli con up uuid 7c514892-6a6a-4d33-946b-84aeb37615bb ...
4
votes
1answer
261 views

OpenVPN-server disappointing performance

On my VPS (Ubuntu 14.04 - 64-bit), which has OpenVPN 2.3.2-server installed, I'm getting disappointing performance. The VPN-server uses the AES-128-CBC cipher for encryption, and I have no firewall ...
1
vote
0answers
79 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
0answers
25 views

mounting nfs fails after exiting openvpn and deleting route

lately found that sudo mount -a in the script won't work after exiting openvpn and deleting a specific route to the NFS via openvpn. "sudo mount -a" in the script returns "mount.nfs: mount system call ...
0
votes
1answer
146 views

OpenVPN on AWS: Unexpected error: invalid_profile: Unable to find a server-locked or autologin profile for this user

I have setup a OpenVPN server using an AMI from AWS Marketplace. and setup with the default options. Now I am trying to connect to that vpn server but getting this error: "Unexpected error: ...
1
vote
4answers
350 views

Webserver exposes client real IP address in OpenVPN network

One of our corporate websites run on Linux server, built with Apache2 and PHP5. Several web pages can only be accessed from OpenVPN subnet (addresses 10.8.0.1/24). To check each request, php script ...
2
votes
0answers
20 views

OpenVPN gateway through OpenVPN

I'm trying to setup an OpenVPN access for clients through a server A I own. But I want these clients to connect to another OpenVPN server on an host B, configured as client on A. OVPN ...
1
vote
3answers
86 views

Open VPN Issue, servers can not route properly

I need some help on this issue. Basically I have a server which I have openvpn installed on. It is working fine and I am able to ping the server which I am connected to and can ping back. What I am ...
0
votes
0answers
47 views

OpenVPN - Can not access shared files

I installed OpenVPN as a server on my Windows server (Yeah, really). The configuration looks good. This server get the IP 10.9.8.1 for the VPN tunnel as expected. I also made some tests by installing ...
3
votes
1answer
180 views

OpenVPN and systemd-resolved

How does one use the dns pushed via an openvpn server with systemd-resolved ? Before I decide to 'upgrade' to systemd-networkd. I could use some variant of openvpn-resolv-conf script to call ...
0
votes
2answers
97 views

Allow Internet traffic and Block LAN for openvpn clients

I have a OpenVPN server ruining on Unbuntu 14.04 server. Everything works fine, the client connects to the server and can ping the VPN server. I want the client use my internet as it were his internet ...
1
vote
1answer
140 views

Openvpn: client can ping server, server cannot ping client

I have weird problem with openvpn setup between AWS and GoGrid datacenters. My network looks like this /----------------\ /----------------\ /------------------\ ...
0
votes
1answer
36 views

Creating a link between two OpenVPN subnets

I have an OpenVPN server which runs with two configurations - first one is port 1194 proto udp dev tun while the second one is port 443 proto tcp dev tun port-share ${my-ip} 10443 I keep them ...
0
votes
0answers
19 views

Openvpn ethernet bridge

This may or may not be a server issue. OpenVPN host: 192.168.1.120 Netmask: 255.255.255.0 Broadcast address: 192.168.1.255 Router's IP address: 192.168.1.1 /etc/openvpn/server.conf port 1194 proto ...
0
votes
2answers
475 views

How to block internet access when the VPN stops on a DD-WRT router and separate VPN/direct clients?

I am using a DD-WRT 3.0 router to connect via openVPN. In the LAN, 192.168.1.50 is a device which should not go thru the VPN. (How do I set the firewall to have 192.168.1.50 not go thru VPN and How ...
5
votes
0answers
140 views

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
0
votes
1answer
87 views

multiple tuntap VPN traffic selection

I have a php / bash application on top of a linux machine (centos or debian but assume redhat just in case the reply need different dialect) connecting to port 80. Actually I'm perfectly able to open ...
0
votes
0answers
93 views

Openvpn “TLS ERROR cannot locate hmac in incoming packet”

In server side, the logs were showing that TLS ERROR: cannot locate hmac in incoming packet, whenever I accessing in client laptop.. Please suggest me the possible solutions ....
0
votes
0answers
316 views

Configure Openvpn and tinyproxy both at the same time In openwrt

I'm building VPN router using Raspberry_pi and openwrt chaos calmer on top of it. I have successfully configured the pi and achieve the Openvpn functionalities without any issues. Pi connect Openvpn ...
1
vote
0answers
39 views

Cannot raise Max number of concurrent openvpn clients

For same strange reason the number of concurrent clients that can connect to my openvpn server is limited to 70. No matter what parameter I change in server.conf the limit does not change. If I try to ...
0
votes
1answer
50 views

Run Filezilla on private subnet at AWS

I have a VPC with one public subnet and one private. The public subnet has an OpenVpn Server and a public IP The private subnet has a Win 2012R2 Server with an Oracle 11g server. My set up: 1. VPC: ...
0
votes
1answer
64 views

OpenVPN - connect server as client to itself

I have tried to setup a small openvpn network but I ran into one big problem. I have a server and a machine at home. So I created a openvpn server on my machine and a configured the client on the ...
0
votes
1answer
173 views

why is my ping to 10.8.0.1 going through the public internet

(this question was totally different before. becouse of a lack of basic knowledge mixed with paranoia, i was scared and thought that something was compromised in my lan...) now i edited it completely, ...
0
votes
0answers
14 views

IP block + VPN not working

I have 3 sites that need an IP block for some testing and the only allowed IP is the one provided by a vpn (we use open vpn). Let's say that the vpn IP is 55.55.55.55 and my actual IP is 88.88.88.88 ...
2
votes
1answer
215 views

Unable to sign certificates as CA using pkitool and easy-rsa script for OpenVPN .csr file

OpenVPN server on Ubuntu 14.04. Easy-rsa on the certificate authority server on Ubuntu 14.04. Done this way because I want the ca.key file to be separate from the machine that acts as the openvpn ...
0
votes
1answer
702 views

OpenVPN client and server on the same machine?

I currently use a windows server. This windows server retrieves data from a remote database, and therefore is connected to the remote VPN server permanently. So we use openVPN in client mode with ...
0
votes
0answers
149 views

IPv6 VPN routing to IPv4 network

I have been trying to solve my problem to access an IPv6 network from an IPv4 VPN connection for two days now. My setup is as follows: Local Debian IPv4 server <-- OpenVPN --> Remote IPv4/IPv6 ...
0
votes
1answer
41 views

Is this system design ok for a VPN service for 3000 users?

I am setting up a vpn service for 3000 users in AWS. The solution is built up on Linux and AWS. The design of the solution is: My questions is: Am I missing something critical in the design I have ...
1
vote
1answer
88 views

Use a physical cryptographic token with OpenVPN community (free) version

I am currently setting up OpenVPN to provide company access to multiple clients. Our requirement is to use certificates, password protect the client keys, as well as using dual factor (MFA) ...
0
votes
0answers
26 views

Get access to host in OpenVPN network from global network

I need help with next situation. I have OpenVPN server set up on virtual machine in Azure cloud. This server have 104.208.34.118 IP adress. There are client, connected to this server, behind the NAT ...
1
vote
1answer
3k views

How to get OpenVPN Client (Mikrotik RouterOS) <-> OpenVPN server (Debian/Linux) setup to work

I have some issues with making MT to work with OpenVPN server (Debian). I can make successfull connection to OVPN server, but traffic is not routed through OVPN server. Here is my configuration. ...
0
votes
0answers
40 views

OpenVPN client Selective routing AWS

I am wanting to setup our OpenVPN Clients to selectively route traffic that is bound for AWS and route our internal subnets but let the rest of the traffic leave out the end users ISP connection. Is ...
0
votes
2answers
119 views

Site to Site OpenVPN routing issue

I have a situation as described below: 1- I have 2 OpenVPN Server(Server A & Server B). 2- Clients connects to each server via VPN, no direct LAN's. 3- Server B connected as a VPN client to ...
0
votes
0answers
7 views

OpenVPN Client - Access Services

I have an OpenVPN client which currently forwards all packets to the OpenVPN server (as described here). I have a service running on this client, though, (Remote Desktop). I don't want requests to ...
3
votes
3answers
340 views

Bypass VPN for HTTP/HTTPS traffic on Ubuntu?

I have an Ubuntu 14.04 machine that all it's outgoing traffic is through a VPN, and I'm required to make sure that HTTP and HTTPS traffic don't go through the VPN.I've looked into static routing but ...
-1
votes
1answer
84 views

OpenVPN Full Tunnel not working (command line) [closed]

I can ping the server but not google.com or 8.8.8.8, traceroute also fails. Server: $iptables -t nat -A POSTROUTING -s 10.9.8.0/24 -o eth0 -j MASQUERADE $openvpn --dev tun1 --server 10.9.8.0 255.255....
1
vote
2answers
205 views

OpenVPN - Blocking client-to-client traffic

I have an OpenVPN server running on a Debian box. What I'd like to do is to block all traffic between clients connected to that OpenVPN server. The server has a local IP of 10.10.10.1 and the clients ...
0
votes
2answers
312 views

openvpn ubuntu client to pfsense server. Timed out

Trying to get openvpn to work so that I may connect from my Ubuntu 14.10 workstation to a pfsense 2.0.3 server using OpenVPN. I just installed the network-manager plugin and created a new vpn ...
0
votes
1answer
1k views

After openvpn setup client cannot connect “Cannot load inline certificate file”

Good day to everybody! I have tried recently to install & configure openvpn for my server. I have created certificates, tunneling seems to with fine at lease ifconfig shots that tun0 has been ...