Comments on: How to configure OpenVPN http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/ What would they do without us... Wed, 10 Mar 2010 23:19:19 +0000 http://wordpress.org/?v=2.3.1 By: jojoba http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-305 jojoba Sun, 08 Mar 2009 05:57:07 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-305 Wonderful article! Only qualms, you could explain the "TAP" acronym - it's not as common as "DNS" and "DHCP." Other qualm: a bit more explanation on the DynDNS part. Like, "DynDNS" is a service you can subscribe to that will keep track of your dynamic IP from your ISP and associate it with a DNS name; so that, if/when your DSL or Cable Modem ip address changes, DynDNS will track that change, and will update your corresponding public DNS name with the new address that your ISP has assigned to your external interface." Anyway, I think that's my guess on what the DynDNS does, from some things I've read in the past, and I've been meaning to try it, and now, thanks to your superb tutorial, I have a good reason. :) Also note: You could mention that, "Oh, btw, even if you don't have a static IP addre, you [can] find your current external IP address of your home network by surfing to "http://www.whatismyip.com" - and you can enter that in the config files." WARNING: That address is subject to change but, until it changes, your VPN connections will work. OR... if you DON'T want to deal with DynDNS and you DON'T want pay the extra $5 /month for a static IP (or you have cable and they don't offer static IP), you can just setup a scheduled daily job on your server to grab your current external IP and "blat" it (email it) to one of your public email accounts, say, once per day - that way, you always will be able to hop on your email and see your current public IP is - in case you have to modify your client VPN configs. Okay, it's funky, but it works. Bottom line: RILEY - YOU ROCK! Now, let's find equivalent steps for D-Link & DSL routers. I have a Netopia DSL router I would like to set this up on, and some D-Link routers also. many thanks! Wonderful article! Only qualms, you could explain the “TAP” acronym - it’s not as common as “DNS” and “DHCP.” Other qualm: a bit more explanation on the DynDNS part. Like, “DynDNS” is a service you can subscribe to that will keep track of your dynamic IP from your ISP and associate it with a DNS name; so that, if/when your DSL or Cable Modem ip address changes, DynDNS will track that change, and will update your corresponding public DNS name with the new address that your ISP has assigned to your external interface.”

Anyway, I think that’s my guess on what the DynDNS does, from some things I’ve read in the past, and I’ve been meaning to try it, and now, thanks to your superb tutorial, I have a good reason. :) Also note: You could mention that, “Oh, btw, even if you don’t have a static IP addre, you [can] find your current external IP address of your home network by surfing to “http://www.whatismyip.com” - and you can enter that in the config files.” WARNING: That address is subject to change but, until it changes, your VPN connections will work.

OR… if you DON’T want to deal with DynDNS and you DON’T want pay the extra $5 /month for a static IP (or you have cable and they don’t offer static IP), you can just setup a scheduled daily job on your server to grab your current external IP and “blat” it (email it) to one of your public email accounts, say, once per day - that way, you always will be able to hop on your email and see your current public IP is - in case you have to modify your client VPN configs. Okay, it’s funky, but it works.

Bottom line: RILEY - YOU ROCK! Now, let’s find equivalent steps for D-Link & DSL routers. I have a Netopia DSL router I would like to set this up on, and some D-Link routers also.

many thanks!

]]> By: mich2212001 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-304 mich2212001 Mon, 29 Dec 2008 18:28:13 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-304 this is a great help ... i have been trying to make sense of Openvpn for a long time now. thanks for the help. however, i have a cisco 1721 router in charge of DHCP. & i do have a local Domain with dns server configured as well. my question is how do i go about configuring the server to work with that .... please help this is a great help … i have been trying to make sense of Openvpn for a long time now. thanks for the help. however, i have a cisco 1721 router in charge of DHCP. & i do have a local Domain with dns server configured as well. my question is how do i go about configuring the server to work with that …. please help

]]> By: Wasser http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-303 Wasser Sun, 03 Aug 2008 23:42:28 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-303 Hi! I have the following problem: I configured everything [almost] like you said, but when I go to the Routing table on my dir-655 (I went to Advanced/Routing, think it's the same) and fill everything, it says that the ip of the gateway is not on the same subnet of the interface. The interface is fixed on WAN and the router does not allow me to change it. The only IP I could fill for the gateway was my external IP, but it's not working... Help? Hi!
I have the following problem:
I configured everything [almost] like you said, but when I go to the Routing table on my dir-655 (I went to Advanced/Routing, think it’s the same) and fill everything, it says that the ip of the gateway is not on the same subnet of the interface. The interface is fixed on WAN and the router does not allow me to change it. The only IP I could fill for the gateway was my external IP, but it’s not working…
Help?

]]> By: glenn0 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-301 glenn0 Thu, 17 Jul 2008 06:39:00 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-301 Hey guys, I used this guide to setup my VPN (thanks Riley!) but made a few security enhancements along the way. I decided to write up a version of Riley's guide with my additions. I hope that's ok Riley. I've added TLS-Auth, password protected 2048-bit keys, AES encryption and explanations in a lot of sections. It seems you can't post links in comments here, but if you Google "openvpn lockup", my blog (called lockup) will be the first result. Hope it helps. Hey guys,

I used this guide to setup my VPN (thanks Riley!) but made a few security enhancements along the way. I decided to write up a version of Riley’s guide with my additions. I hope that’s ok Riley.

I’ve added TLS-Auth, password protected 2048-bit keys, AES encryption and explanations in a lot of sections.

It seems you can’t post links in comments here, but if you Google “openvpn lockup”, my blog (called lockup) will be the first result.

Hope it helps.

]]> By: abc http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-299 abc Wed, 16 Jul 2008 19:52:15 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-299 How to share óne vpn client connection to multiple pcs? I’m connected to an openVPN Server using the openvpn client (dev tun). The client pc(xp sp2) has 2 nics. one to connect to lan/adsl & the other to connect to a voice gateway (spa3102)via crossover. How can I configure the spa3102 connected over nic2 to go through only the open vpn connection to connect to its sip server? or in other words how can i share the open vpn client connection? How to share óne vpn client connection to multiple pcs?

I’m connected to an openVPN Server using the openvpn client (dev tun).
The client pc(xp sp2) has 2 nics. one to connect to lan/adsl & the
other to connect to a voice gateway (spa3102)via crossover. How can I
configure the spa3102 connected over nic2 to go through only the open
vpn connection to connect to its sip server? or in other words how can
i share the open vpn client connection?

]]> By: bebopblues http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-294 bebopblues Wed, 28 May 2008 09:30:09 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-294 Riley, first off, many thanks for the tutorial and providing the sample config files. I followed your instructions carefully and established connections between server and clients. The only problem I have is what peter stated a few posts above, my internet dies when openvpn is connected. If I disconnect openvpn, then internet works again. I've tried on several local machines, and all seems to be the same problem. Now this only happens on local machines on the local network with the server. I tested a machine outside the network, and it does not lose internet connection, it works perfectly. Regarding the DNS settings, I used the WAN DNS settings from my cable modem, I'm assuming thats the correct one and not the local gateway (192.168.1.1). I've been trying to figure out why the local machines lose internet connection, but I'm still scratching my head and clueless. If you have advice to solve this issue, please reply. Much appreciated. Riley, first off, many thanks for the tutorial and providing the sample config files. I followed your instructions carefully and established connections between server and clients. The only problem I have is what peter stated a few posts above, my internet dies when openvpn is connected. If I disconnect openvpn, then internet works again. I’ve tried on several local machines, and all seems to be the same problem. Now this only happens on local machines on the local network with the server. I tested a machine outside the network, and it does not lose internet connection, it works perfectly.

Regarding the DNS settings, I used the WAN DNS settings from my cable modem, I’m assuming thats the correct one and not the local gateway (192.168.1.1). I’ve been trying to figure out why the local machines lose internet connection, but I’m still scratching my head and clueless. If you have advice to solve this issue, please reply. Much appreciated.

]]> By: compsafe http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-293 compsafe Fri, 23 May 2008 01:56:22 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-293 Hi, i am trying to configure openvpn and having some queries. For the Intial set up; i configured my desktop as server and laptop as a client, which works fine.Now,I want to take it to the next step. I want the client to connect to my desktop and should be able to access the main webserver throgh my PC. Thatis my PC should be able to act as an interface to allow the laptop to connect the main webserver. Please help. What changes should i make in the congig.files. Hi, i am trying to configure openvpn and having some queries. For the Intial set up; i configured my desktop as server and laptop as a client, which works fine.Now,I want to take it to the next step. I want the client to connect to my desktop and should be able to access the main webserver throgh my PC. Thatis my PC should be able to act as an interface to allow the laptop to connect the main webserver. Please help. What changes should i make in the congig.files.

]]> By: shukalo83 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-292 shukalo83 Tue, 13 May 2008 17:57:09 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-292 Thank You really on such a great tutorial. I think it's unique in its simplicity and effectiveness. Everything work flawless for me but when I try to connect from Windows XP client that has no admin privileges the virtual tap interface doesn't get the default gateway by DHCP. When I am admin from the same machine, everything works perfectly. I don't know what could be the problem. I installed openvpn gui as an administrator on the client side. So once more, to be specific, I received client address by dhcp 192.168.10.3 but i don't have def gateway of 192.168.10.1 an that only when I am not logged in as an administrator. I realize that this tutorial is a bit old but there are maybe someone outhere who is willing to give me a hand. Thanks in advance Thank You really on such a great tutorial. I think it’s unique in its simplicity and effectiveness. Everything work flawless for me but when I try to connect from Windows XP client that has no admin privileges the virtual tap interface doesn’t get the default gateway by DHCP. When I am admin from the same machine, everything works perfectly. I don’t know what could be the problem. I installed openvpn gui as an administrator on the client side. So once more, to be specific, I received client address by dhcp 192.168.10.3 but i don’t have def gateway of 192.168.10.1 an that only when I am not logged in as an administrator. I realize that this tutorial is a bit old but there are maybe someone outhere who is willing to give me a hand. Thanks in advance

]]> By: openfish http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-291 openfish Sat, 12 Apr 2008 17:27:10 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-291 Thank you Riley for the well defined VPN set up using OpenVpn. Though my actual job is to create a site-to-site VPN using OpenVPN, first I tried between two computers within the same LAN, one as the server and the other as a client. The network address of my LAN is 192.168.1.0. And the pcs' address is 192.168.1.x1 and 192.168.1.x2. And I used virtual address( with its netmask) 10.8.0.0 255.255.255.0. I successfully established the VPN between the two computers, that is, when I tried to ping using the IP of virtual tunnel 10.8.0.1 to other machine whose vpn tunnel ip (virtual ) is 10.8.0.2 it works fine and it works also from other direction. Again, when i tried to ping byHost ID 192.168.1.12 to other host ID 192.168.1.133 it also pings normally As per OpenVPN when tunnel get created all traffic should run between the tunnel. what i guess by this only Pinging is possible through virtual Ip adresses of the tunnel not through the actual host ID like 192.168.1.12 to 192.168.1.133 between the two machines if virtual tunnel is already established. My first question is, is it possible to ping using normal host id, in addition to using virtual address, while tunnel is already created? My second question, even other machines can ping to the tunneled machines( to the OpenVPN server and client); and the server and the client can ping normally to the other PCs in the LAN using the their host IP addresses. What I guessed was, only the machines in the tunnel can only ping one another, nothing else, , though they are physically connected in the LAN. Is it possible, with explanations? I am looking forward to reading your replies. Thank you, forum members, in advance. Thank you Riley for the well defined VPN set up using OpenVpn.
Though my actual job is to create a site-to-site VPN using OpenVPN, first I tried between two computers within the same LAN, one as the server and the other as a client.
The network address of my LAN is 192.168.1.0. And the pcs’ address is 192.168.1.x1 and 192.168.1.x2. And I used virtual address( with its netmask) 10.8.0.0 255.255.255.0.
I successfully established the VPN between the two computers, that is, when I tried to
ping using the IP of virtual tunnel 10.8.0.1 to other machine whose vpn tunnel ip (virtual ) is 10.8.0.2 it works fine and it works also from other direction.

Again, when i tried to ping byHost ID 192.168.1.12 to other host ID 192.168.1.133 it also pings normally

As per OpenVPN when tunnel get created all traffic should run between the tunnel.
what i guess by this
only Pinging is possible through virtual Ip adresses of the tunnel

not through the actual host ID like 192.168.1.12 to 192.168.1.133 between the two machines if virtual tunnel is already established.

My first question is, is it possible to ping using normal host id, in addition to using virtual address, while tunnel is already created?

My second question, even other machines can ping to the tunneled machines( to the OpenVPN server and client); and the server and the client can ping normally to the other PCs in the LAN using the their host IP addresses.
What I guessed was, only the machines in the tunnel can only ping one another, nothing else, , though they are physically connected in the LAN.
Is it possible, with explanations?
I am looking forward to reading your replies.

Thank you, forum members, in advance.

]]> By: minardi http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-290 minardi Fri, 04 Apr 2008 13:20:07 +0000 http://www.itsatechworld.com/2006/01/29/how-to-configure-openvpn/#comment-290 Hi. I have the exact same setup as in this guide, and everything is working except when i connect the client to the server, i loose all internet on the client, yet i still have connection to the server. I have put in the DNS information on the server config, and it sends the DNS info to the client, yet it still isnt getting any internet connection. Hi.

I have the exact same setup as in this guide, and everything is working except when i connect the client to the server, i loose all internet on the client, yet i still have connection to the server.

I have put in the DNS information on the server config, and it sends the DNS info to the client, yet it still isnt getting any internet connection.

]]>