OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

learn more… | top users | synonyms

13
votes
3answers
25k views

OpenVPN and DNS. How to?

I'm using OpenVPN to set up a VPN to connect my laptop at home to my workplace LAN. I want to be able to refer my workplace computers by their name and not by their IP but I can't. This is my ...
22
votes
3answers
15k views

OpenVPN performance: how many concurrent clients are possible?

I am evaluating a system for a client where many OpenVPN clients connect to a OpenVPN server. "Many" means 50000 - 1000000. Why do I do that? The clients are distributed embedded systems, each ...
3
votes
1answer
2k views

Limit/Throttle per user OpenVPN bandwidth using TC

I have a group of users connecting to my server via OpenVPN TCP and UDP (2 services). The two services are operating on tun0 and tun1 I'd like to be able to limit each user's bandwidth to say 5mb/s ...
4
votes
2answers
7k views

openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

My goal: I want to set up openVPN on a vServer from the company netcup, running Debian squeeze. I only want a VPN connection from client to server; clients should not be able to see each other, also ...
3
votes
1answer
3k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
2
votes
1answer
660 views

openvpn - only one client key/certificate pair working

Scenario: I have a Debian 6 openVPN virtual server and several clients (windows, os x). They all connect fine, however only one client with a certain key/certificate pair can ping the server, all the ...
2
votes
1answer
19k views

OpenVPN not default gateway for all traffic

I'm trying to make my client forward all traffic through a VPS running OpenVPN. As you can see, it will allow pings to both domains and raw IP addresses, but it will not allow traffic like that made ...
5
votes
4answers
2k views

Prevent SSH connection lost after logging into VPN on server machine

I encountered an issue that I can't deal with. When I'm logged onto an VPS over SSH and try to estabilish VPN connection on that VPS, the SSH connection between VPS and my machine get lost. I assume ...
5
votes
4answers
20k views

openVPN disconnect via command line in linux

Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line? I have all information about the openvpn connection: Username Client IP ...
4
votes
2answers
6k views

OpenVPN port-share with Apache/SSL

I'm trying to set up OpenVPN to listen on port 443, and then pass all HTTPS traffic to Apache, by using the port-share option. Relevant config snippets are: OpenVPN local ${PUBLIC_IP} port 443 port-...
3
votes
1answer
13k views

OpenVPN server cannot ping clients

I have OpenVPN set up on a Debian server. Clients can connect, and clients can ping and access resources (Samba shares and intranet) on the server. However, the server cannot ping the client - it ...
3
votes
1answer
882 views

Limiting OpenVPN bandwidth

I'd like to give users a certain amount of traffic. Let's say user A gets 1 GB and user B get 5 GB. I have a great script which does log all this info, however this script is called when the user ...
0
votes
1answer
635 views

Configure routes in OpenVPN

I am trying to figure out how to setup routing on OpenVPN. I have successful connection between client (OS X Snow Leopard) and server (OS X Leopard Server), and each can ping the other. However, I am ...
3
votes
2answers
4k views

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client [192.168....
1
vote
1answer
145 views

How to do traffic shaping (rate limiting) with TC per OpenVPN client

This question is related to another question with a great answer and script from @Oliver. The goal: I want to modify/extend the script provided in this answer to suit my requirements, which are as ...
0
votes
1answer
5k views

Openvpn - enabled redirect gateway but can't access any websites

First of all I'm a newbie to servers but not to stuff like programming so not totally alien to command lines etc. Second, I want to run openvpn on my remote server and connect from my ubuntu desktop ...
55
votes
8answers
89k views

Should I use tap or tun for openvpn?

What are the differences between using dev tap and dev tun for openvpn? I know the different modes cannot inter-operate. What is the technical differences, other then just layer 2 vs 3 operation. ...
6
votes
3answers
38k views

howto only tunnel specific hosts route through openvpn client on tomato [closed]

I am relatively newbie in networking world although I did coding and know some sysadmin background for a long time. and here I'm only one step from my destination. The whole picture is : at home I ...
11
votes
3answers
25k views

How to connect multiple VPNs using OpenVPN on Windows 7 on the same time?

I work most of the time remotly from home. To gain access to the different servers (via SSH) I have to use OpenVPN. I would like to connect to all of them (three, sometimes four) at once, so I dont ...
20
votes
6answers
29k views

How do you avoid network conflict with VPN internal networks?

While there's a wide variety of private non-routable networks across 192.168/16 or even 10/8, sometimes in being thoughtful of potential conflict, it still occurs. For example, I set up an ...
12
votes
4answers
15k views

OpenVPN make redirect-gateway optional

I'm currently running an OpenVPN server for multiple clients. All traffic is directed through the VPN (it's set up as gateway; push "redirect-gateway def1"). So far, all is working fine. However, I'...
9
votes
2answers
12k views

Can generated OpenVPN keys be used on multiple clients?

We are experimenting with running an OpenVPN server for our business. One question I can't seem to find the answer to is this: When we generate keys for one of our users for them to use at home, can ...
7
votes
4answers
13k views

NetworkManager is not changing /etc/resolv.conf after openvpn dns push

I've got a problem which is "NetworkManager is not updating /etc/resolv.conf after openvpn connection with dns push configured". Here's my openvpn server config: (I've changed domain name to ABC.COM ...
0
votes
1answer
8k views

Using DD-WRT to connect to VPN and Forward all traffic of certain devices through VPN

I have been able to setup my dd-wrt router to connect to an openvpn server and route all traffic through the vpn to the internet. This makes it so all traffic comming in from the LAN to the ...
5
votes
2answers
4k views

Connecting an EC2 VPC with OpenVPN all routed traffic being lost

I'm trying to use OpenVPN on Amazon Linux to connect the local LAN to a VPC on EC2. I have traffic flowing from the OpenVPN instance to any machine on the LAN, but other machines on the VPC are not ...
4
votes
3answers
6k views

Multiple openvpn clients on one openvpn server

Can I have multiple openvpn clients connecting to a single openvpn server? The following setting works well for a single user This is the server configuration (openvpn.conf) port 1194 proto udp dev ...
10
votes
4answers
32k views

How do I improve OpenVPN reliability over a high latency link?

We are running a OpenVPN VPN over a BGAN satellite link where ping times are about 3 seconds. We use it in a tun configuration, and we're running on Linux (CentOS). It is primarily email that will be ...
9
votes
3answers
9k views

No tun device in lxc guest for openvpn

I am trying to set up an openvpn server inside a lxc guest. However, it seams there is no tun device available in the container. Starting openvpn inside the container gives me this error: Tue Sep 18 ...
7
votes
2answers
18k views

How can I setup OpenVPN with IPv4 and IPv6 using a tap device?

I've managed to setup OpenVPN for full IPv4 connectivity using tap0. Now I want to do the same for IPv6. Addresses and network setup (note that my real prefix is replaced by 2001:db8): 2001:db8::100:...
6
votes
2answers
10k views

How do I prevent TCP connection freezes over an OpenVPN network?

New details added at the end of this question; it's possible that I'm zeroing in on the cause. I have a UDP OpenVPN-based VPN set up in tap mode (I need tap because I need the VPN to pass multicast ...
2
votes
1answer
1k views

Pushing IP routes to various VPN clients

With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client. I would like to know if there is an equivalent of this option on:...
2
votes
3answers
34k views

OpenVPN client on Windows 7 - cannot add route from config script

Hi I am connecting from my Windows 7 laptop to an openvpn server and I am unable to automatically add a route. In my script I have the line: route-up "route add 192.168.33.0 mask 255.255.255.0 10.0....
2
votes
2answers
16k views

pfSense Site-toSite VPN with OpenVPN connects but won't route traffic

Using two pfSense routers, I've created a shared-key VPN between 2 sites. Both routers are pfSense 1.2.2. The pfSense box at the client site is the gateway router for that site, but at the server ...
15
votes
6answers
50k views

how to auto start openvpn (client) on ubuntu 12.04 cli?

I have an *.ovpn file that works if I type in sudo openvpn client.ovpn Now I would like to start up openvpn when I boot the computer. It's a headless version of ubuntu - if that matters - 12.04 ...
14
votes
2answers
31k views

How to view connected users to open vpn server?

I'm developing a web site for managing open vpn users with django framework. But I need to now is there any way to extract active users from open vpn? My server is running Ubuntu 12.04.
5
votes
2answers
2k views

Differences between SSH's tunnels and OpenVPN

I discovered that recent OpenSSH has support for tun devices. When it comes to tunnels and VPNs, I always thought the main programme was OpenVPN. Are there any advantages to using SSH tunnels? What ...
5
votes
5answers
7k views

OpenVPN with Active Directory integration

Is anyone successfully running OpenVPN with Active Directory integration? Are you using the openvpn.net or the openvpn.net/opensource version of OpenVPN? Any tips, tricks or gotchas or did it "just ...
3
votes
4answers
24k views

OpenVPN and Routing and IPtables

GOAL: Access internal network devices and browse web via the tunnel. 192.168.2.x = internal network 192.168.3.x = openvpn server 192.168.2.111 = openvpn server on internal network [root@openvpn ~]# ...
2
votes
2answers
4k views

How do you prevent a VPN from exposing your IP when it disconnects?

I want every connection in a Virtual Machine (windows XP) to ONLY use my OpenVPN server, as soon as the connection is lost to OpenVPN, I want to lose all internet connectivity in the VM. Naturally the ...
2
votes
3answers
11k views

OpenVPN Hardware Requirements

I am planning an new network. All the traffic coming out of this network will be fowarded into a VPN in order to exit out onto the Internet on a distant server. This will be done via OpenVPN. There ...
1
vote
3answers
3k views

NFS Over OpenVPN: Top Performance Boosters

I have two VPS's - One is running 2008 Server R2 and the other is a Ubuntu 12.04 installation. I am using the Windows VPS for RD sessions for Quickbooks and a couple other apps and using the Ubuntu ...
0
votes
5answers
4k views

openVPN and multiple external IP addresses

I currently have an openVPN server with multiple external IP addresses. I'd like to have all VPN connections (tun0 interface, and/or 10.19.88.xx IP range) to take the 2nd external IP address as '...
6
votes
2answers
2k views

OpenVpn bridge interface does not respond to incoming packets from outer network !

We are trying to set up a roadwarrior vpn setup with openvpn. We want the people to be able to connect to our network via openvpn. And we want them to be able to see and connect to the machines in our ...
6
votes
1answer
6k views

Why Openvpn use network 0.0.0.0 netmask 128.0.0.0 as default route?

If you use "redirect-gateway def1" option in openvpn config file,the server will add a default gateway on your route table, what i want to konw is Why openvpn did not use network 0.0.0.0 netmask 0.0....
5
votes
2answers
3k views

MULTI: bad source address from client - any one-off solutions?

Setup: I have the an openvpn client/server setup (config files at bottom), and I get the infamous MULTI: bad source address from client [192.168.x.x], packet dropped message at server. The server has ...
5
votes
2answers
7k views

OpenVPN: How to mitigate path MTU issues on a per-client basis?

We have dozens of embedded devices installed at customers, all calling home to our OpenVPN service. That works fine in general, but a few of our customers have severe path MTU issues. Our influence on ...
5
votes
2answers
9k views

Pings from VPN network to VPN client work; pings into from VPN client to VPN network fail - why?

We are in the process of setting up an OpenVPN server for some servers running in a cloud. We are stumped with a connectivity problem whereby the hosts on the VPN server's LAN can ping te VPN client, ...
4
votes
1answer
260 views

OpenVPN and routing

I've a server running openvpn, and I have a little issue. All my traffic is forwarded to the VPN, and when I use a website like "whatismyip" I see the server IP, so this part is working. But when I ...
4
votes
4answers
6k views

SSH traffic over openvpn connection freezes when I cat a file

I have an openvpn (version 2.1_rc15 at both ends) connection setup between two gentoo boxes using shared keys. it works fine for the most part. I use mysql, http, ftp, scp over the vpn with no ...
4
votes
1answer
397 views

openvpn TLS handshake fails on client because firewall drops packets (but why?)

I seem to have problem with my openvpn server - client connection. now, the important information is in the log (verb3) of my client: Mon Mar 30 17:09:59 2015 OpenVPN 2.2.2 x86_64-slackware-linux-...