Questions tagged [openvpn]
OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.
1,254
questions with no upvoted or accepted answers
1
vote
1
answer
4k
views
How can I do site-to-site OpenVPN routing without NAT
I have two OpenVPN servers at different location.
Each machine in one location can ping and connect to every machine in the other location.
My problem is when I use SSH to connect from machine A in ...
1
vote
0
answers
1k
views
Why a VPN slows down LAN access?
We have an access server providing VPN to some of our clients and the workforce with laptops. They usually connect from outside of the office, and everything works fine. However, for simplicity and ...
1
vote
1
answer
215
views
BIND and OpenVPN on the same port (different IP and interfaces)
I have 2 network interfaces: eth0 has IPv4 104.x.y.44 and eth1 has 104.x.y.38.
BIND is listening on 104.x.y.44:53 and I want OpenVPN to be on 104.x.y.38:53 (udp mode).
However OpenVPN fails to start:
...
1
vote
0
answers
1k
views
OpenVPN server in VirtualBox Linux guest with host only adapter
I need to setup a VirtualBox virtual machine that will act as a VPN.
I'm using Vagrant to create the VM on an Ubuntu 14.04 LTS client.
I'm using OpenVPN as the VPN server on an Ubuntu 14.04 LTS server....
1
vote
1
answer
2k
views
OpenVPN client stops working after a few minutes
I'm using OpenVPN client, and it works fine but after a few minutes the VPN stops working.
I'm getting these errors in the logs:
Sun May 10 20:55:28 2015 [nrt-c01.ipvanish.com] Inactivity timeout (--...
1
vote
1
answer
759
views
OpenVPN server, UDP port no longer accessible
I am having a strange problem with OpenVPN. The server has worked fine and with no modification for a long time, except for updates. It suddenly stopped working and I can't figure out why. I cannot ...
1
vote
2
answers
376
views
iptables rules for StrongVPN-like VPN endpoint
Goal: To replicate the functionality I have with StrongVPN on my own Debian VPS. With StrongVPN, seemingly, all ports on the public IP provided are forwarded to the client, meaning, e.g, ssh :22 from '...
1
vote
0
answers
514
views
What is the best way to configure an iDRAC/dell server in a public data center such that the idrac doesn't have to be exposed public facing
I have a server right now in a data center behind an OpenVPN using the client on the box to connect to the vpn server. I'm going to install the iDRAC and want to know how to best configure the ...
1
vote
0
answers
245
views
Stop Outbound SYN Scan
Hello I run a VPN company, and recently my host has been sending me these complaints that are likely coming from a user.
I am not sure how to identify the user, if I could just do that I wouldn't ...
1
vote
0
answers
415
views
Connect AWS and Azure via OpenVPN
I am trying to connect two networks (AWS and Azure) together via OpenVPN. I am aware of other implementations (OpenSwan+Azure GW etc.) but I need maximal portability as I will be expanding this to ...
1
vote
0
answers
781
views
openvpn route only ssh traffic over vpn connection
I have a OpenVPN server and we would like all traffic to go out the end users internet but if they are Developer and they are using SSH to the AWS servers I would like that traffic to go out the VPN ...
1
vote
0
answers
407
views
How to allow single user to use user/pass authentication in openvpn when all others will use private keys?
I've got a Mikrotik Routerboard RB750GL which I bought to configure as an openvpn gateway for lan at the office. Unfortunately I was lured by the openvpn promise, I didn't read to carefully to know, ...
1
vote
0
answers
555
views
How to create openvpn tunnel between multiple interfaces between two hosts ubuntu linux
I want to create OpenVPN tunnel between two Ubuntu 12.10 hosts which has two interfaces, say:
Host1: eth0, eth1
Host2: eth0, eth1
A tunnel is wanted between:
Host1 (eth0) <-> Host 2 (eth0)
...
1
vote
0
answers
928
views
OpenVPN: unable to reach clients over IPv6
Current setup: OpenVPN server with IPv4 and IPv6:
[...]
port 1234
proto udp6
dev tun
server 10.9.8.0 255.255.255.0
server-ipv6 2001:1af8:3100:a00a:0021:a:b:0000/112
client-to-client
[...]
Clients ...
1
vote
0
answers
330
views
openvpn rdp networking mystery : can connect HTTP cannot RDP, even with firewall off
I have 2 small networks joined using OpenVpn (routed configuration), lets call them A and B.
on A, I have a test web server (IIS, Windows 2008R2 or Windows 2012 depending on test machine), lets call ...
1
vote
0
answers
201
views
OpenVPN - Route and iptables configuration
simplified network diagram:
Certs and keys already created OK.
The 'straight' line between client and server is just to indicate a tunnel. Obviously, it goes through the firewall.
Client is windows ...
1
vote
0
answers
2k
views
OpenVPN ignoring openvpn.conf, throws unrecognized or missing option
I set up openVPN on Debian, but can't start the service.
[FAIL] Starting virtual private network daemon: openvpn failed!
Syslog says
Options error: Unrecognized option or missing parameter(s) in
...
1
vote
0
answers
677
views
OpenVPN client ping server: eth0 works, tun0 fails
Usually for OpenVPN, people have issues accessing LAN interfaces but no issues accessing the TUN interfaces. I have the opposite problem.
Ping from client (10.9.0.1) to server eth0 (10.0.0.97) works
...
1
vote
0
answers
394
views
vpnc through openvpn failed
I should connect to a Cisco VPN server for example 95.94.66.6, it configured to accepts specified IPs so I launched a server with a registered IP on Cisco which runs an openvpn server. The scenario ...
1
vote
0
answers
180
views
VM LAB - Promiscuous mode clarification
So for clarification I am running a Lab within VMware behind OpenVPN, 1 NIC with direct internet access (WAN vswitch) and another NIC with a leg inside a LAN vswitch. (This obviously houses my VM's ...
1
vote
1
answer
3k
views
Centos 7 with SElinux: openvpn and DNS
I'm trying to use openvpn as client on centos 7. It works fine, but i cannot get DNS from server. As you know, there is no resolvconf in new Centos, so, standard update-resolv-conf script doesn't work....
1
vote
0
answers
254
views
NAT for IPSEC access?
Please help to understand if the following configuration can be created.
I have IPSEC connection with my customer. It is site2site vpn between customer network and my network 10.102.103.0/28. This ...
1
vote
0
answers
621
views
Printer on OS X not printing across VPN subnets
I have an interesting situation where I have a two servers that connect two subnets via a VPN. One side is 192.168.0.0/24 and the other is 192.168.1.0/24. Communications appear to be working okay. I ...
1
vote
0
answers
1k
views
Client successfully connects to OpenVPN server but with no internet access over the VPN
I'm trying to setup OpenVPN with static key authentication(instead of TLS) on TCP port 443; but the client cannot access the internet over the VPN after connecting to the server.
Here's my current ...
1
vote
0
answers
385
views
How to setup multiple OpenVPN connections on a server for a single localhost app to use on CentOS 6.5?
I have a scenario where I need to run several OpenVPN connections at one time and to allow a singular application to access each of these connections.
How wold I go about starting up several ...
1
vote
0
answers
203
views
OpenVPN TAP binding order issue
I am running a 64bit Windows 7/8 AD environment using OpenVPN on remote computers to access our network/servers in our main office.
Typically, once we install OpenVPN on a new machine and configure ...
1
vote
0
answers
392
views
Policy routing local user's traffic down a tunnel
I've got a Linux based Firewall/Router running iptables and SNAT for traffic passing through it to the Internet via a single uplink - This is working fine. There is also a small number of applications ...
1
vote
1
answer
509
views
OpenVPN tunnel one-way traffic failure between LAN and AWS VPC
We are trying to configure an OpenVPN tunnel that allows devices on our LAN to communicate with servers in an Amazon VPC. We are using the turnkey OpenVPN access server instance on Amazon and have ...
1
vote
0
answers
1k
views
How to set up an OpenVPN server to accept server certificates as clients
I'm setting up a LAN to LAN VPN using openvpn. For reasons of easy certificate management I wish to re-use the server certificates which already exist on each host. I've set in the config file ...
1
vote
0
answers
78
views
Chef - handle resources changing the network interface
I'm using chef to deploy an openvpn application in bridging mode to an ubuntu node.
In my recipe i'm using a bash resource to create the bridge necessary for the vpn to work. Unfortunately the bridge ...
1
vote
1
answer
167
views
Lots of users, reverse proxys and problems with both
I have a somewhat unique situation that is making managing my vpns a bit of a pain, so I am trying to make it easier on me and my users, hope somenone can give me some ideas and/or alternatives.
The ...
1
vote
0
answers
528
views
Renaming an OpenVPN server - how to keep from losing all clients?
I have been instructed to change the domain name on a bank of servers. One of these is for OpenVPN and I'm wondering how best to do this without cutting off all the clients.
Each client is also ...
1
vote
2
answers
1k
views
openvpn 's netmask and client-to-client mode
I had set openvpn 's config as
route 10.8.0.0 255.255.255.0
push "route 10.8.0.0 255.255.255.0"
client-to-client
and set ccd/username as
iroute 10.8.0.0 255.255.255.0
BUT, the client's netmask was ...
1
vote
0
answers
418
views
Openvpn-server: Execute a script when on a failed connection?
Good morning,
I was wondering if It was possible to setup something to execute a script when someone tried to connect but the TLS check failed (When someone who is not supposed to connected try to°
...
1
vote
1
answer
3k
views
VPN connection reset
I have a device running ArchLinux and OpenVPN, which was connecting to VPN server without problems until recently. Now it can't connect, with the following output that keeps looping indefinitely: http:...
1
vote
0
answers
135
views
Open ports for VPN users
I have been looking around for some time for answer to this, and have yet to find one.
The issue that I am having is that users that are connected to the VPN cannot do the following, as examples:
...
1
vote
0
answers
400
views
Pass a traffic from a specific domain through OpenVPN
I want to pass traffic from a specific domain through openvpn (tun0) and the rest through eth0
How can I configure openvpn to work with eth0?
the domain name is set with ddclient to update dynamic ...
1
vote
0
answers
390
views
LVS-DR and OpenVPN: returning packets not being routed into the vpn
i've set up a load balancer with ldirectord, and an active-passive mysql service managed by it, on two additional real servers.
LVS is running in Direct Routing mode, so the client requests are ...
1
vote
1
answer
1k
views
OpenVPN - VM-Setup with MacVTap, ICMP echo works, TCP/UPD don't
Short résumé
No errors, no dropped packets, pings reach clients, tcpdump shows packages travelling, everything else never reaches the LAN hosts (or OpenVPN clients).
Edit
After trying to eliminate ...
1
vote
0
answers
121
views
OpenVPN: Doesn't close dead sockets, user limit reached
I am running OpenVPN 2.3.1 with a fairly basic configuration. The daemon has been up in it's current configuration for ~180 days. Earlier this week I began to get connection failures to find out the ...
1
vote
2
answers
13k
views
Cisco AnyConnect VPN via OpenVPN tunnel [Unable to modify IP forwarding table]
Background: I'm working as a contractor for a small web design agency. We have a particular project / client requires that any updates / development that are performed are done via VPN. The client VPN ...
1
vote
1
answer
82
views
Understanding VPN Implementation
The above image shows what I think occurs during an OpenVPN connection. Hosts A and B are connected to the VPN through the VPN server at 1.2.3.4:1194. My question is: if host A wishes to send a packet ...
1
vote
0
answers
642
views
OpenVPN private domain unsing DNSMasq
What I want to do is to set up OpenVPN network which would make it possible to access private domain ( a.domain, b.domain, d.domain). I believe the simplest way to do it is to use dnsmasq to resolve ...
1
vote
0
answers
226
views
How to list all units in systemd regardless of their state including parameterized / templated (@)?
OpenVPN unit file is parameterized (see @):
> ls /usr/lib/systemd/system/openvpn*
/usr/lib/systemd/system/[email protected]
The problem is that I cannot list the parameterized service names by ...
1
vote
0
answers
157
views
How can I test connectivity to a TLS-enabled OpenVPN server?
Unfortunately we don't have access to the management interface, so I'm after a way to tell that tls-enabled OpenVPN us up and responsive. I'm familiar with this trick, but it doesn't work for tls-...
1
vote
0
answers
389
views
openvpn setup ping/routing fail
My problem is that after setting up VPN on a virtual machine (Ubuntu Linux) with that has an IP I cant ping anyone at all over the tun interface from the client. VPN Connection is however successful.
...
1
vote
1
answer
3k
views
Opening ports for VPN clients
I am trying to open specific ports for users so that they can use programs such as RDP. I have searched all over the internet, and have yet to find an answer to this question. I have tried every ...
1
vote
1
answer
2k
views
Create route through OpenVPN via specific IP address / virtual interface on Linux
I have a Linux server at home, on which I run an OpenVPN client connected to some server on the Net. What I want to archive is this: I want my home server to expose an interface (e.g. an IP address), ...
1
vote
0
answers
2k
views
Windows OpenVpn: client doesn't see another machines in network
I have configured OpenVPN server on windows server 2008 and client on windows 7. Connection between them is ok, there is a server default gateway in route table (192.168.0.1) but i can't see another ...
1
vote
0
answers
120
views
openvpn client.up script erroring out
I'm using OpenVPN 2.2 on Ubuntu 12.04 and I'm having a little trouble getting "pull dhcp-options" working. I have client.up and client.down under /etc/openvpn/, and I can see it running client.up, ...